Security Directory

The website dobrypravnik.eu is currently a parked domain page indicating that the domain is for sale. There is no substantive business content, contact information, or privacy and security policies present. The site primarily serves as a placeholder with advertising links and an iframe loading external content from a third-party domain. The technical infrastructure is minimal, with basic HTML, CSS, and JavaScript used for layout and advertising scripts. No modern CMS or frameworks are detected. Security posture is weak due to lack of HTTPS and security headers, and privacy compliance is absent. Overall, the site does not represent an active business or service and is positioned for domain resale.

A

AUTO B.E.K.

autobek.cz

53

AUTO B.E.K. is a small automotive dealership and service center located in Ústí nad Labem, Czech Republic, specializing in sales and servicing of Mazda, SsangYong, Honda, and authorized Subaru servicing. The company offers comprehensive post-sale services including used car sales, trade-ins, financing, and insurance consulting. The website is built on the Wix platform, indicating a moderate level of digital maturity with good mobile optimization and basic SEO. Security posture is adequate with HTTPS implied but lacks explicit security headers and privacy compliance documentation. The absence of WHOIS data reduces domain trustworthiness, though the website content and business information appear professional and consistent with a legitimate local business. Strategic improvements in privacy compliance and security practices are recommended to enhance trust and regulatory adherence.

Apartmány Engadin is a small hospitality business operating since 2006, offering family-friendly and sports group accommodations in Boží Dar, Czech Republic. The website provides comprehensive information about their apartments, wellness center, and additional services such as event hosting and long-term rentals. The business targets families, sports teams, and corporate groups seeking mountain lodging with wellness amenities. Technically, the website uses standard web technologies including jQuery, LayerSlider, and integrates third-party booking and social media services. The site is mobile-optimized with good navigation and content relevance. Security posture is moderate with HTTPS usage but lacks explicit security headers and privacy policies. Contact information is clearly presented with multiple channels, enhancing business credibility. WHOIS data confirms domain legitimacy and consistency with the business claims.

S

Urlaub in Sachsen: Kultur, Natur & Genuss erleben

sachsen-tourismus.de

61

The website www.sachsen-tourismus.de serves as a regional tourism portal promoting travel, culture, nature, and leisure experiences in Saxony, Germany. It targets tourists and travelers seeking vacation information and booking options in the region. The site is built on TYPO3 CMS and hosted on Schlund Technologies infrastructure, indicating a stable and professional technical foundation. The content is well-structured, visually appealing, and optimized for mobile devices, providing a good user experience. However, explicit privacy policies and terms of service are not found in the provided content, which could be improved for compliance and user trust. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks some security headers and incident response information.

J

James Hardie Europe GmbH

holzbauplaner.com

43

The website holzbauplaner.com hosts the fermacell Timberwork Planner, a specialized tool designed for professionals in timber construction to calculate and design timber frame wall panels according to recognized standards. The business is operated by James Hardie Europe GmbH, a medium-sized company based in Germany, focusing on manufacturing and construction sectors. The site provides detailed technical content, tutorials, and downloadable documentation to support its users, primarily structural engineers and architects. Technically, the website uses modern web technologies such as Vue.js and JavaScript libraries, ensuring a responsive and user-friendly experience. However, some security best practices like security headers and DNSSEC are not implemented, which could be improved. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR requirements. Overall, the site is professional, trustworthy, and well-positioned within its niche market.

D

dgstudio.cz s.r.o.

dgstudio.cz

61

dgstudio.cz s.r.o. is a small Czech digital agency specializing in custom web design, e-commerce development, branding, graphic design, and bespoke software solutions. With over 14 years of experience and more than 300 satisfied clients, the company positions itself as a creative and professional partner for businesses seeking tailored digital services. Their offerings include integration with accounting and CRM systems, reflecting a focus on business process optimization. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Cloudflare Turnstile captcha for bot protection. The site is well-structured, mobile-optimized, and uses HTTPS with good SSL configuration. Cookie consent and privacy policies are implemented, indicating attention to GDPR compliance. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates a solid baseline with HTTPS, consent management, and bot mitigation. The absence of WHOIS data reduces transparency but does not indicate malicious intent. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations. The overall risk is low, but improvements in security headers, incident response transparency, and vulnerability disclosure would enhance the security posture and trustworthiness further.

M

Městské divadlo Děčín, příspěvková organizace

divadlodecin.cz

44

Městské divadlo Děčín is a municipal theater organization based in the Czech Republic, providing a diverse program of theatrical performances, concerts, and cultural events. The website serves as a platform for event promotion and ticket sales, integrating a dedicated ticket reservation service. The institution maintains a strong local presence with multiple partnerships and sponsors, reflecting its role as a key cultural venue in the region. The website content is well-structured, visually consistent, and targets a general audience interested in culture and theater.

S

Svaz chemického průmyslu ČR (SCHP ČR)

responsiblecare.cz

49

The website responsiblecare.cz represents the Czech Chemical Industry Association's (SCHP ČR) initiative to promote Responsible Care, a voluntary global chemical industry program focused on health, safety, and environmental performance. The site provides information about the initiative's history, participating companies, and downloadable materials supporting sustainable development in the chemical sector. The target audience includes chemical companies and industry stakeholders in the Czech Republic. The business model is that of an industry association promoting ethical standards and continuous improvement among its members. Technically, the website uses modern frontend technologies including Foundation framework, FontAwesome icons, and Google Fonts. The site is mobile responsive and has a clear navigation structure, though it lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating minimal user tracking. The site is accessible without any WAF or security blocking. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which are important for compliance and user trust. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy and reduces trustworthiness. No contact emails or phone numbers are provided on the homepage, limiting direct communication channels. Overall, the security posture is moderate but could be improved by implementing HTTPS verification, security headers, and privacy compliance documentation. The overall risk is moderate with no critical vulnerabilities detected in the content or technical setup. Strategic recommendations include improving domain registration transparency, adding privacy and cookie policies, enhancing security headers, and providing clear contact information for incident response and data protection. These steps will strengthen trust and compliance for the association's digital presence.

S

SBC

sbcgaming.com

68

SBC is a well-established media and events company specializing in the betting and gaming industries. Founded in 2009 and headquartered in London, SBC operates globally with a strong market position as a leader in hosting conferences, exhibitions, and providing industry news and advisory services. Their business model integrates event management, media publishing, consultancy, and a proprietary networking platform, targeting professionals and brands within the gaming ecosystem. The website reflects a mature digital presence with excellent content quality, clear branding, and comprehensive service descriptions.

T

TQG Lottery Solutions GmbH

tqg-lotterysolutions.com

67

TQG Lottery Solutions GmbH is a specialized technology company focused on providing lottery and gaming solutions, including lottery draw systems, gaming platforms, and handheld terminals. The company targets lottery operators and stakeholders in the gaming industry, offering strategic consulting and technology products. The website is built on WordPress with the Gutenberg plugin, reflecting a moderate level of digital maturity with good mobile optimization and basic SEO features. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and structured data indicate a legitimate business presence. Overall, the site is professional but would benefit from enhanced security and compliance measures.

A

Allodium s.r.o.

allodiumgames.com

62

Allodium s.r.o. is a specialized game development studio founded in 2007, focusing exclusively on creating bespoke online scratchcards for national lottery operators. The company offers a comprehensive solution that includes game design, mathematical modeling, marketing strategies, and customer support, positioning itself as a niche leader in the lottery gaming sector across Europe. Their partnerships with major lottery operators such as Sazka, Tipos, and the UK National Lottery underscore their strong market presence and credibility. Technically, the website is modern, mobile-optimized, and well-structured, utilizing contemporary web standards and media formats. However, the absence of explicit privacy and cookie policies and the lack of WHOIS domain registration data present compliance and trust challenges. Security-wise, the company demonstrates maturity through ISO 27001 certification and a responsible disclosure policy, though improvements in security headers and GDPR compliance indicators are recommended. Overall, the website and business appear professional and trustworthy, but domain registration inconsistencies and privacy policy gaps reduce the overall risk posture.

H

Henkel

henkel-adhesives.com

72

Henkel Adhesive Technologies operates as a global leader in the manufacturing and supply of adhesive products and solutions. The website serves as a global entry point for users to select their regional site and language preferences. The company targets industrial and commercial customers requiring advanced adhesive technologies. The digital infrastructure is built on Adobe Experience Manager CMS, with integration of cookie consent management via OneTrust and performance tracking through LiveUX. While the site demonstrates basic compliance with GDPR through cookie consent mechanisms, explicit privacy policies and terms of service are not readily found in the provided content. Security posture is moderate with HTTPS implied and some best practices observed, but lacks visible security headers and detailed security policies. The absence of WHOIS data raises concerns about domain registration legitimacy, though the branding and content suggest a legitimate corporate entity. Overall, the website is functional but could benefit from enhanced transparency and security documentation.

W

Webstack

webstack.sk

53

Webstack is a technology-focused conference primarily targeting web developers, including Laravel artisans and software developers, with a focus on full-stack development and AI. Founded in 2023 and based in Slovakia, it organizes annual events in Bratislava, offering sponsorship and ticket sales as key business activities. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. Technically, it employs modern JavaScript libraries and frameworks such as Alpine.js, Flickity, FancyBox, and Google reCAPTCHA v3, hosted on Websupport infrastructure with DNSSEC enabled and HTTPS enforced, indicating a mature digital presence. Security posture is strong with best practices observed, though the absence of a cookie consent mechanism and published security policies are areas for improvement. Overall, the domain registration details are consistent and legitimate, supporting the trustworthiness of the business. The site integrates social media and marketing tools like Facebook Pixel and Plausible Analytics, with moderate user tracking and basic privacy compliance. The website is safe for general audiences and does not contain any adult or questionable content.

J

James Hardie Europe

jameshardie.nl

67

James Hardie Europe is a leading manufacturer and distributor of fiber cement facade products, serving construction professionals and homeowners in the Netherlands. The company offers a range of products including Hardie® Panel, Hardie® Plank, and Hardie® Shield, emphasizing sustainability, durability, and aesthetic appeal. The website reflects a mature business with a strong market position and a comprehensive product offering. Technically, the site is built on Kentico CMS using ASP.NET WebForms, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place, though dedicated security and incident response policies are not publicly visible. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Č

Česká asociace streetwork, z.s.

casodcasu.cz

42

ČAS od ČASU is a Czech non-profit organization focused on social work, particularly streetwork and low-threshold social services. The website serves as a platform for their podcast series, educational content, and campaigns aimed at raising awareness and supporting socially excluded groups. The organization is well positioned within the Czech social services sector, leveraging partnerships with related sites and campaigns. The website content is professionally presented, targeting social workers, professionals, and the general public interested in social issues. Technically, the site uses standard web technologies with Google Analytics and Facebook Pixel for tracking, hosted by Active24. While the site is mobile optimized and well structured, it lacks critical privacy and cookie policies, which impacts GDPR compliance. Security posture is basic with HTTPS enabled but missing security headers and incident response information. Overall, the domain registration data aligns well with the organization's profile, indicating legitimacy and consistency.

Č

Česká asociace streetwork, o.p.s.

restartshop.cz

64

Restart Shop is a Czech non-profit social enterprise operated by Česká asociace streetwork, o.p.s., focused on sustainability through the sale of donated goods and providing training employment to socially disadvantaged individuals. The website presents detailed information about their projects, social impact, and contact details, supported by multiple EU and local government grants. The technical infrastructure is modern with use of JavaScript libraries, Google Tag Manager, and cookie consent mechanisms, hosted on a Czech provider. Security posture is good with HTTPS and cookie consent, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

Letenky.in is a small affiliate marketing website focused on providing users with tools and affiliate links to find cheap flights from Central European cities such as Prague, Brno, and Vienna. The site offers travel advice and popular destination suggestions, targeting budget-conscious travelers. Technically, the site uses modern frontend technologies including Angular and integrates Google Adsense for monetization. The website is accessible without any blocking mechanisms and presents a professional design with good content relevance and navigation. However, it lacks critical compliance elements such as privacy and cookie policies, terms of service, and contact information, which impacts trust and privacy compliance scores. Security posture is moderate with HTTPS usage but no detected security headers or incident response information. Overall, the site is functional and safe but would benefit from enhanced compliance and security practices.

BNP Paribas is a major European and international banking group with a diversified business model spanning corporate, institutional, commercial, personal banking, and investment services. The website reflects a mature digital presence with comprehensive content targeting a broad audience including investors, clients, and job seekers. The technical infrastructure employs modern web technologies and analytics tools, ensuring good performance and user experience. Security posture is strong with HTTPS enforcement and domain registration protections, though DNSSEC is not enabled and explicit security policies are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism and trustworthiness consistent with a leading financial institution.

The domain infocentrumloket.cz currently hosts a Webnode-generated 404 error page indicating that the domain is available for registration and website creation. There is no active business or content on the site. The domain was registered in 2016 and uses name servers consistent with its registrar REG-MEDIA4WEB. The website is hosted on a CDN (Cloudfront) and uses standard web technologies such as HTML5, CSS, and JavaScript. There are no privacy policies, cookie notices, contact information, or security policies present. No analytics or tracking scripts are detected, and no advertising or marketing tools are in use. The site is safe with no adult or explicit content. Security posture is minimal with no security headers or HTTPS status visible from the content. Overall, the site is a placeholder with very limited technical or business maturity.

D

Danske Bank

danskebank.co.uk

75

Danske Bank's UK personal banking website offers a comprehensive range of financial products including current accounts, mortgages, savings, and loans. The site targets personal banking customers in the UK and presents a professional, well-structured digital presence consistent with a large, established financial institution. The domain has been registered since 1998, reinforcing its legitimacy and market presence. Technically, the website employs modern web technologies such as JavaScript and SVG icons, with good mobile optimization and accessibility features. Security is enforced through HTTPS and secure login portals, although explicit security headers and privacy policies are not clearly visible in the provided content. Analytics usage is moderate, primarily via eGain services. Overall, the site demonstrates a solid business and technical foundation but would benefit from enhanced privacy compliance and security transparency.

D

Danske Bank

danskebank.no

71

Danske Bank's Norwegian corporate banking website presents a comprehensive suite of financial services tailored for businesses of all sizes across Norway and the Nordic region. The bank positions itself as a leading Nordic corporate bank offering daily banking, financing, advisory, and international trade solutions. The website is professionally designed with clear navigation, responsive layouts, and rich content that supports business customers in various growth stages. The presence of sustainability certification (Miljøfyrtårn) and detailed customer service information enhances trust and credibility. Technically, the site employs modern web technologies including JavaScript, SVG icons, and a CSS framework (Foundation), ensuring good performance and accessibility. The site is mobile-optimized and includes SEO best practices. Security posture is strong with HTTPS enforced, security headers present, and secure login portals. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. No critical security vulnerabilities or blocking mechanisms were detected, indicating a mature security posture. However, explicit security policies and incident response details are not publicly available, suggesting room for improvement in transparency. Overall, the site reflects a stable, trustworthy, and professional banking institution with a solid digital presence.

D

Danske Bank A/S

danskebank.fi

66

Danske Bank A/S operates a comprehensive Finnish banking website targeting retail and private banking customers. The site offers a wide range of financial services including loans, savings, investments, and digital banking solutions. The bank holds a strong market position as a major Nordic financial institution with a long-established presence since 1997. The website demonstrates a mature digital infrastructure with modern technologies and good mobile optimization. Security posture is strong with HTTPS, DNSSEC, and secure login portals, although explicit security policies and incident response information are limited publicly. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations.

Česká iniciativa pro astma o.p.s. (ČIPA) is a Czech non-profit organization dedicated to asthma education and care, founded in 1996 by professional medical societies. The website currently serves as a formal announcement of the organization's liquidation effective January 1, 2025, following a court decision. The organization had a significant role in asthma education in the Czech Republic for nearly 29 years. Technically, the website is minimalistic, built with basic HTML and CSS, lacking modern web technologies, security headers, and privacy policies. No WHOIS data is available, which raises concerns about domain registration transparency. Security posture is weak due to lack of HTTPS and security headers, and no contact or privacy information is provided. Overall, the site is safe and professional but lacks many modern compliance and security features.

D

Divilab LLC

colorlib.com

60

Colorlib is a well-established provider of free and premium WordPress themes and website templates, targeting bloggers, small businesses, and web developers. The company operates under Divilab LLC, based in Wyoming, USA, and has been active since 2013. Their business model combines free offerings with premium paid themes, supported by a community forum and detailed documentation. Technically, the website is built on WordPress with Bootstrap and optimized using WP Rocket, ensuring good performance and mobile responsiveness. The site integrates common marketing and analytics tools such as Google Tag Manager and MailChimp for newsletter subscriptions. Security-wise, the site uses HTTPS and has domain transfer protections but lacks advanced DNS security features like DNSSEC and explicit security headers. Privacy compliance is basic, with a cookie consent banner and privacy policy present, but no detailed GDPR compliance indicators or incident response information. Overall, the website is professional, trustworthy, and well-positioned in its niche, though it could improve security transparency and privacy compliance.

V

Vladimír Večeřa

ardumet.cz

42

Ardumet.cz is a small Czech technology company specializing in the manufacture of wifi-enabled meteorological stations based on a powerful 32-bit microprocessor. Their product supports multiple sensor modules and offers a responsive web administration interface for device management, firmware updates, and data monitoring. The company targets technical users and businesses requiring precise weather data collection solutions. The website is professionally designed with clear navigation and detailed product descriptions, reflecting a focused niche market position. Technically, the website uses a modern but straightforward tech stack including Bootstrap, jQuery, and various UI libraries. Hosting is provided by WEDOS, consistent with WHOIS data. The site is mobile-optimized and performs moderately well, though accessibility and SEO optimizations are basic. No CMS or advanced analytics tools are detected, indicating a lightweight infrastructure. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which are compliance gaps. No forms or user input fields reduce attack surface, but SSL configuration details are unknown and should be verified. WHOIS data is consistent and supports legitimacy, with no privacy protection or suspicious patterns. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is low given the nature of the business and content, but strategic improvements in privacy compliance, security headers, and SSL configuration are recommended to enhance trust and regulatory adherence.

B

Bhashini

bhashini.co.in

63

Bhashini's website is currently a minimal placeholder page indicating a 'Launching Soon' status, with no detailed business description or contact information. The site is hosted on GoDaddy's Website Builder platform and uses standard web technologies including HTML5, CSS3, and JavaScript, with fonts loaded from Google Fonts. The technical infrastructure is basic but functional, with HTTPS enabled and a service worker registered for potential offline capabilities. However, the absence of privacy policies, terms of service, and contact details limits the site's professionalism and trustworthiness. Security headers are missing, which could expose the site to certain web-based attacks. Overall, the website is in an early stage of deployment with limited content and features.

MCAER (Maharashtra Council of Agricultural Education and Research) is a government entity focused on agricultural education and research coordination in Maharashtra, India. The website serves as an official portal providing information about agricultural universities, examination boards, recruitment boards, extension education, and research activities. It targets students, researchers, agricultural professionals, and government officials. The business model is that of a government educational council providing regulatory and informational services. The domain is well-established since 2008, reinforcing its legitimacy. Technically, the website uses a basic but functional tech stack including Bootstrap 4 and jQuery 3.4.1. The site is moderately optimized for mobile and performance but lacks advanced CMS or modern frameworks. There is no evidence of analytics or tracking, indicating minimal user tracking. Hosting is provided by WebHostBox, and domain registration is managed by GoDaddy with domain status protections but no DNSSEC. From a security perspective, the site lacks HTTPS/SSL information in the provided data, no security headers are detected, and no privacy or cookie policies are published, indicating compliance gaps. The domain registration is consistent and trustworthy, but the absence of DNSSEC and security headers are areas for improvement. No WAF or blocking mechanisms are detected, and the site content is fully accessible. Overall, the website is safe, with no adult or questionable content. The site is basic in design and content quality but serves its purpose as an official government educational portal. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, enabling DNSSEC, and providing clear contact information for security and user support.

M

MEDIA HOME BRNO

meho.cz

58

MEDIA HOME BRNO is a small Czech Republic based web and graphic design studio established in 2015. The company offers a range of services including web design, UX/UI design, branding, copywriting, SEO, and social media management, targeting businesses and individuals seeking professional digital presence. The website is professionally designed with good content quality and clear navigation, optimized for mobile devices. Technically, the site uses modern web technologies including jQuery, Swiper.js, Google Fonts, and integrates Google Analytics with a compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and cookie consent properly managed, though security headers and formal security policies are absent. Contact information is clearly provided, enhancing business credibility. No privacy policy or terms of service pages were found, which is a compliance gap. Overall, the site is safe, trustworthy, and well-positioned for its market niche.

M

Ministerstvo financí ČR

eeagrants.cz

76

The website eeagrants.cz serves as the official portal for the EEA and Norway Grants managed by the Ministry of Finance of the Czech Republic. It provides comprehensive information on funding programs, calls for proposals, bilateral cooperation, and news updates relevant to government entities, NGOs, researchers, and the general public interested in these grants. The site is positioned as a trusted government resource with a clear focus on transparency and accessibility. From a technical perspective, the website employs modern web technologies including HTML5, CSS3, and JavaScript, with integration of Cookiebot for cookie consent management and analytics tools such as Google Analytics and Matomo. Hosting appears to be on Microsoft Azure, inferred from session cookies. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security-wise, the site enforces HTTPS and uses a consent mechanism for cookies, reflecting compliance with privacy regulations. However, there is room for improvement in publishing explicit security policies, incident response contacts, and implementing additional security headers. No vulnerabilities or suspicious activities were detected in the analyzed content. Overall, the website exhibits a strong security posture, good technical implementation, and high business credibility as a government entity. Strategic recommendations include enhancing transparency by publishing security and privacy policies, improving security headers, and providing clear contact information for incident response and data protection inquiries.

G

G-up Delta s.r.o.

goopan.cz

47

Goopan, operated by G-up Delta s.r.o., is a well-established company specializing in the design and construction of low-energy and passive family homes primarily in the Czech Republic and Slovakia. The website presents a professional and comprehensive digital presence with detailed product catalogs, customer references, and multiple contact channels. The company emphasizes sustainable building technologies and offers both catalog and custom home solutions. Technically, the website employs modern web technologies including HTTPS, Google Tag Manager, Facebook Pixel, Smartlook, and reCAPTCHA v3, ensuring a secure and user-friendly experience. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanisms. However, the absence of WHOIS data and explicit security headers slightly reduces trustworthiness. Overall, the site is secure, professional, and trustworthy with room for improvement in security transparency and domain registration clarity.

W

WONDER WEB spol. s r.o.

cookie-lista.cz

45

WONDER WEB spol. s r.o. operates cookie-lista.cz, a Czech online platform offering a customizable cookie consent banner tool compliant with EU GDPR regulations. The website targets webmasters and businesses needing to implement cookie consent mechanisms, providing a free service with optional paid removal of advertising links. The company is small-sized, founded in 2019, and maintains consistent branding and legal transparency. Technically, the site uses modern web technologies including Bootstrap and jQuery, hosted on Wonderhost.cz, with moderate performance and good mobile optimization. Security posture is adequate with cookie consent mechanisms and no exposed sensitive data, though lacks explicit security headers and documented incident response. Privacy compliance is strong with comprehensive policies and user consent options. Overall, the site is professional, trustworthy, and focused on privacy compliance tools.

B

Barclays

home.barclays

71

Barclays is a leading British universal bank offering a broad range of financial services including consumer banking, corporate and investment banking, and wealth management. The website reflects a mature, enterprise-level digital presence with comprehensive content targeting investors, clients, and the general public. The technical infrastructure is built on Adobe Experience Manager with strong use of modern web technologies and CDN services, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and domain transfer protections, though explicit security headers and incident response contacts could be improved. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility.

D

Depozitarul Central Unic

dcu.md

42

Depozitarul Central Unic is a central securities depository operating in Moldova, providing essential financial market infrastructure services such as securities registration, shareholder list management, and account statements for investors. The website positions the entity as a key player in Moldova's financial market, targeting investors, issuers, and market participants. The business model revolves around facilitating transparent and efficient securities transactions and regulatory compliance within the Moldovan financial ecosystem. Technically, the website employs standard modern web technologies including HTML5, CSS3, JavaScript, and Google Fonts. It is mobile optimized with a responsive design and good SEO practices. However, it lacks advanced security headers and explicit privacy or cookie policies, which are important for compliance and user trust. The site is served over HTTPS, ensuring encrypted communications. From a security perspective, the site demonstrates a moderate security posture with HTTPS enabled and no visible exposed sensitive data or vulnerable scripts. However, the absence of security headers, privacy policies, and incident response contacts indicates room for improvement in security maturity and compliance. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, the website is professional and trustworthy, with a clear focus on financial market services in Moldova. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, publishing vulnerability disclosure information, and enhancing accessibility features to improve compliance and security posture.

B

Bělehrad Srbsko - ubytování, zajímavosti, doprava - Belgrade Serbia

belehrad.cz

45

The website belehrad.cz is a Czech language travel information portal focused on Belgrade, Serbia, providing details on accommodation, attractions, transportation, and travel tickets. It targets tourists and travelers interested in visiting Belgrade and offers monetization primarily through advertising and affiliate links. The site has been operational since 2007, indicating a stable presence in its niche market. Technically, the site uses standard HTML and JavaScript with Google Fonts, Adsense, and Analytics integrations, hosted on HostMonster. Mobile optimization and accessibility are basic but functional. Security posture is moderate with no detected security headers and no explicit privacy or terms of service pages, though a consent management platform is implemented for GDPR compliance. The domain WHOIS data is consistent with the website's claims and age, supporting legitimacy. Overall, the site is functional and informative but could improve in security and compliance documentation.

Z

#zeSPODu – Zajímavosti ze sociálně-právní ochrany dětí – Vítejte na informační webové stránce s novinkami a zajímavostmi ze sociálně-právní ochrany dětí

zespodu.cz

57

The website www.zespodu.cz is an informational platform focused on social and legal protection of children in the Czech Republic. It provides news, articles, and resources related to foster care, legal cases, and social services. The site targets professionals and individuals interested in child welfare and social-legal topics. The business model appears to be non-commercial or supported by public/non-profit entities, with a niche market position in the Czech social services sector. Technically, the site is built on WordPress using the Blocksy theme and common plugins such as Contact Form 7 and WP-Statistics for analytics. The site is mobile-optimized with good design and navigation, though accessibility features are basic. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site uses HTTPS and implements a cookie consent banner, indicating some privacy awareness. However, no advanced security headers were detected, and no privacy policy or terms of service pages were found, which are gaps in compliance and security posture. WHOIS data is unavailable, which reduces domain trustworthiness and raises concerns about registration transparency. Overall, the site is functional, content-rich, and safe for general audiences but would benefit from improved privacy compliance, enhanced security headers, and transparent domain registration information to increase trust and compliance.

M

my coffee story

mycoffeestory.cz

53

My Coffee Story is a small local café business based in Prague, Czech Republic, specializing in freshly prepared coffee, breakfasts, homemade desserts, and community events. The website reflects a modest but well-structured digital presence with clear information about their offerings and contact details. The business targets local customers and coffee enthusiasts, positioning itself as a neighborhood café with a cozy atmosphere and event hosting capabilities. Technically, the website is a simple static site using basic HTML, CSS, and JavaScript with Google Fonts integration, hosted on a Czech hosting provider. The site is mobile-optimized and provides a good user experience but lacks advanced technical frameworks or CMS platforms. Security posture is weak due to missing HTTPS verification, absence of security headers, and lack of privacy and cookie policies, which are critical for GDPR compliance. No forms or analytics scripts are present, reducing data collection risks but also limiting business intelligence capabilities. Overall, the website is functional and trustworthy for its business type but requires improvements in security and compliance to enhance trust and protect user data.

M

Městská část Praha 2

praha2.cz

57

Městská část Praha 2 operates as the official local government authority for the Prague 2 district in the Czech Republic. The website serves as a comprehensive portal for residents and visitors, providing access to municipal services, news, events, and community projects. It maintains a strong market position as a trusted government entity with a focus on public service and community engagement. The site targets local citizens and stakeholders interested in district governance and cultural activities. Technically, the website employs a modern yet straightforward technology stack including HTML5, CSS3, JavaScript, and Google Fonts, managed via the Vismo CMS platform. It demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Hosting and domain registration align with Czech providers, ensuring regional compliance and reliability. From a security perspective, the site uses HTTPS and secure form handling but lacks advanced security headers and explicit incident response contacts. Privacy compliance is addressed with clear privacy and cookie policies, though no active cookie consent mechanism is present. No vulnerabilities or suspicious activities were detected, indicating a solid security posture appropriate for a government website. Overall, the website is professional, trustworthy, and well-maintained, with minor areas for improvement in security headers and incident response transparency. The risk level is low, and the site effectively supports its public service mission.

C

CCS

ccs.cz

75

CCS operates as a prominent provider of fuel card and fleet management services primarily targeting businesses managing vehicle fleets in the Czech Republic and Slovakia. The company offers a comprehensive network of over 2,800 stations, enabling efficient fuel and charging solutions alongside vehicle monitoring. Their market position is strong within the regional energy and transportation sectors, supported by a professional and content-rich website presented in Czech. Technically, the website employs modern web technologies including Cookiebot for consent management, Google Fonts, and Typekit, and is built on the MerlinCMS platform. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and a detailed cookie consent mechanism, but lacks visible advanced security headers and explicit incident response information. The absence of WHOIS data limits domain trust analysis, though the website's compliance with GDPR and use of recognized third-party services indicate legitimacy. Overall, CCS demonstrates a mature digital presence with room for improvement in security transparency and contact information availability.

M

město Písek / Městský úřad Písek

mesto-pisek.cz

46

The website mesto-pisek.cz serves as the official digital presence of the city of Písek, Czech Republic. It provides comprehensive municipal information, including news, e-services, public documents, and contact details for residents and visitors. The site is well-structured and regularly updated, reflecting its role as a trusted government resource. The target audience primarily includes local citizens and stakeholders interested in city governance and services. The business model is public sector focused, delivering essential government services and information online. Technically, the website employs a modern but straightforward technology stack centered around HTML5, CSS3, JavaScript, and the Vismo CMS platform. It integrates Google Analytics for visitor insights and Google reCAPTCHA for form security. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Hosting details are not explicitly stated, but the domain and name servers suggest stable and consistent infrastructure. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to mitigate spam. It implements a cookie consent mechanism compliant with GDPR, allowing users to manage preferences. However, it lacks a publicly available security policy or incident response contacts, which could enhance transparency and preparedness. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data confirms the domain's legitimacy and long-standing registration, consistent with an official municipal website. Overall, the website demonstrates a solid security posture and good privacy compliance, with a professional and trustworthy presentation. Strategic improvements could include publishing formal security policies and incident response information to further strengthen user trust and compliance posture.

J

Jaroslav Šimek

jardasimek.cz

53

Jarda Simek is a professional UX/UI and 3D designer based in the Czech Republic, operating primarily as an independent or freelance creative. The website serves as a portfolio showcasing a variety of projects including brand design, product design, architectural visualization, mobile app design, and cinematic intros. The business targets digital creatives and clients seeking specialized design services, positioning itself as a niche personal brand with a focus on quality and creativity. The domain age and WHOIS data align well with the business history, indicating a stable and legitimate presence since 2018. Technically, the website employs modern frontend technologies such as Alpine.js and the model-viewer web component for 3D content, along with Google Fonts for typography. The site is hosted likely by Wedos, a Czech hosting provider, and demonstrates good mobile optimization and user experience. However, the site lacks advanced SEO and accessibility features, and no CMS or analytics tools are detected. From a security perspective, the site uses HTTPS but lacks explicit security headers and does not provide privacy or cookie policies, which are important for GDPR compliance. No forms or data collection mechanisms are present, reducing exposure to input-based vulnerabilities. The absence of incident response or vulnerability disclosure information suggests room for improvement in security maturity. Overall, the website is a well-designed, professional portfolio with moderate technical sophistication and business credibility. Key recommendations include implementing privacy and cookie policies, adding security headers, and enhancing compliance and security posture to build greater trust and meet regulatory requirements.

G

Givt

givt.cz

52

Givt.cz is a Czech non-profit platform established in 2015 that enables users to support over 3000 charitable organizations through their regular online shopping without paying extra. The platform integrates with numerous e-shops, displaying the percentage of purchase value donated to the selected charity. The website is professionally designed with good navigation and mobile optimization, reflecting a mature digital presence. Technically, it employs modern web technologies including Google Tag Manager and Analytics, with secure HTTPS hosting by REG-WEDOS. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response policies are not explicitly published. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie consent. Overall, the site is trustworthy and well-positioned in the non-profit e-commerce donation sector.

S

S.A. TROX Belgium/TROX Belgium N.V.

trox.be

70

S.A. TROX Belgium/TROX Belgium N.V. is a medium-sized manufacturing company specializing in air handling and ventilation products, serving primarily B2B clients in Belgium and connected globally through the TROX Group. Their website is professionally designed, multilingual, and provides comprehensive product and service information, including digital tools like the myTROX portal and TROX Academy for customer engagement and training. The technical infrastructure is modern, leveraging Scrivito CMS, jQuery, and Google reCAPTCHA for security and user experience. Security posture is strong with HTTPS, multiple security headers, and spam protection on forms. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanism. Contact information is clearly presented, enhancing business credibility. WHOIS data is restricted, which is typical for privacy reasons, but no suspicious patterns are detected. Overall, the website reflects a mature digital presence aligned with the company's business operations.

D

digital mediate s.r.o.

digitalmediate.cz

36

digital mediate s.r.o. is a small Czech Republic-based digital innovation collective specializing in consulting, branding, product design, software engineering, and marketing services. The company emphasizes multidisciplinary collaboration among managers, entrepreneurs, creators, and engineers to deliver innovative digital solutions that positively impact business and culture. Their market position is niche, targeting startups and businesses seeking growth and digital transformation. The website reflects a professional and consistent brand image with clear contact and company registration information, supporting business credibility. Technically, the website uses modern web standards including HTML5, CSS3, and JavaScript with jQuery and Google Fonts. The site is mobile optimized and has good SEO fundamentals but lacks advanced frameworks or CMS indications. Performance is moderate, and accessibility is basic. No analytics or tracking scripts were detected, indicating minimal user tracking and privacy risk. Security posture is moderate with HTTPS implied but no explicit security headers detected. The absence of privacy, cookie, and terms policies is a compliance gap. No vulnerability disclosure or incident response information is provided. WHOIS data is missing, which reduces trustworthiness and suggests the need for further verification of domain registration status. Overall, the website is professional and safe but would benefit from enhanced security practices, privacy compliance, and transparency regarding domain registration to improve trust and reduce risk.

E

Exvalos spol. s r. o.

exvalos.cz

55

Exvalos spol. s r. o. is a Czech Republic based small manufacturing business specializing in the distribution and supply of industrial components such as bearings, hose clamps, linear technology, adhesives, lubricants, and related products. The company maintains partnerships with major industry brands including SKF, NSK, and Schaeffler, positioning itself as a reliable B2B supplier in the manufacturing sector. Their website reflects a professional and consistent brand image with a comprehensive product catalog and clear contact information. Technically, the website employs modern web technologies including Google Fonts, FontAwesome, and Google Analytics, with a responsive design optimized for mobile devices. While the site uses HTTPS and implements cookie consent mechanisms indicating GDPR compliance, it lacks some advanced security headers and explicit security policies, suggesting room for improvement in security posture. From a security perspective, the site shows good practices such as HTTPS enforcement and no visible exposure of sensitive data. However, the absence of WHOIS data raises concerns about domain registration legitimacy, which could impact trust. No critical vulnerabilities or malware indicators were found, but the site would benefit from enhanced security headers and a published vulnerability disclosure policy. Overall, the website is safe, professional, and well-structured, serving its target industrial audience effectively. Strategic recommendations include improving security headers, publishing detailed security and incident response policies, and verifying domain registration details to enhance trust and compliance.

B

BPA sport marketing a.s.

bpa.cz

45

BPA sport marketing a.s. is a well-established Czech marketing agency specializing in sports marketing, sponsorship, and advertising, particularly focused on ice hockey. Operating since 1993, the company holds exclusive marketing partnerships with major Czech hockey leagues such as the Tipsport extraliga and Maxa liga. Their services include marketing, media presentation, event realization, and online projects, targeting sports organizations, fans, and advertisers within the Czech Republic. The website reflects a professional and consistent brand image with clear business information and active engagement in sports marketing projects. Technically, the website employs modern web technologies including Google Fonts, Google reCAPTCHA, and Google Translate for multilingual support. It is built on the Webnia CMS platform and uses HTTPS with valid SSL certificates, ensuring secure communication. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR requirements. However, some security best practices such as security headers and explicit security policies are missing. From a security perspective, the site demonstrates a good posture with HTTPS enforcement and bot protection via reCAPTCHA. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness and suggesting the need for further domain registration verification. No critical vulnerabilities or malicious content were detected. Privacy policies and cookie management are implemented appropriately, supporting compliance with data protection regulations. Overall, BPA sport marketing a.s. presents a credible and professional online presence with solid business and technical foundations. To enhance trust and security, it is recommended to address the missing WHOIS transparency, implement security headers, and publish clear security and incident response policies.

M

MerkurXtip.CZ | Sázková Kancelář Online | Sportovní Výsledky a Kasino

merkurxtip.cz

66

MerkurXtip.cz is an online betting and casino platform targeting Czech-speaking users interested in sports betting and casino games. The website offers a variety of casino games and sports results, positioning itself as a regional player in the Czech Republic's online gambling market. The business model revolves around online gambling services, catering to a mature audience. Technically, the site uses modern web technologies including JavaScript frameworks (likely Vue.js), Google Tag Manager for analytics, and responsive design for mobile users. However, the site lacks visible security headers and privacy policies, which are critical for user trust and regulatory compliance. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trustworthiness but is common in the gambling industry. Overall, the site is functional and professional but could improve in security and privacy transparency.

V

Vodafone

sazkamobil.cz

65

Vodafone.cz is the official website for Vodafone's prepaid SIM service 'Oskarta' in the Czech Republic. The site offers prepaid SIM cards with customizable packages, initial credit, and rewards for top-ups and referrals. Vodafone is a major telecommunications provider with a strong market presence in the region. The website is professionally designed, mobile-optimized, and uses modern web technologies including jQuery, Omniture analytics, and Google reCAPTCHA for security. The site is secured with HTTPS and implements standard security headers, reflecting a good security posture. However, explicit privacy and cookie policies were not found in the provided content, which is a compliance gap. WHOIS data for the domain is unavailable, likely due to registry policies or privacy protection, but this does not detract from the site's legitimacy given Vodafone's brand recognition. Overall, the site is trustworthy and well-maintained, serving a broad consumer audience in the Czech Republic.

L

Meteorologická stanice Sehradice

luhamet.cz

47

Luhamet.cz operates a local meteorological station located in Sehradice, Czech Republic, providing real-time weather data, forecasts, and environmental monitoring services since 2015. The website targets general public and weather enthusiasts interested in detailed local meteorological information. The business model centers on data provision and community engagement through webcams, radar, and video content. Technically, the site uses modern frontend technologies including Bootstrap 5, jQuery, and FontAwesome, hosted likely by WEDOS, a Czech hosting provider. The site is mobile-optimized and offers good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is presumed but no advanced security headers or policies are detected. Privacy compliance is lacking due to absence of privacy and cookie policies. Contact information is transparent and includes email, phone, and physical address, enhancing business credibility. Overall, the site is trustworthy but would benefit from improved privacy and security practices.

V

Výlety s tátou

vyletystatou.cz

9

Výlety s tátou is a Czech-language travel blog focused on providing tips and guides for family-friendly trips, outdoor activities, and nature excursions primarily in the Czech Republic and some international destinations. The website targets families with children, adults interested in nature, and tourists seeking practical travel advice. It operates as a content publishing platform monetized through advertising and possibly affiliate marketing, with a niche market position in family and outdoor travel content. The site was established in 2018 and maintains a consistent brand presence with active social media channels on Facebook, Instagram, and YouTube. Technically, the website uses standard web technologies including HTML5, CSS, and JavaScript, with integrations of Google Custom Search Engine, Google Analytics, and Google Tag Manager for search and analytics functionality. Hosting is provided by cesky-hosting.eu. The site is mobile-optimized with good SEO practices but lacks advanced accessibility features. Performance is moderate, and the site uses HTTPS with a good SSL configuration. From a security perspective, the site has HTTPS enabled but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible cookie consent mechanism or comprehensive privacy compliance features, which may pose GDPR compliance risks. No contact information or incident response channels are clearly provided, limiting transparency for security or privacy concerns. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is a moderately secure and professionally presented travel blog with good content quality and user experience. However, it should improve privacy compliance, security headers, and contact transparency to enhance trust and regulatory adherence.

D

Danske Bank

danskebank.com

81

Danske Bank is a well-established Nordic banking institution with a strong presence in Denmark and other Nordic countries, as well as Northern Ireland. The website reflects a mature enterprise with comprehensive investor relations, sustainability initiatives, and corporate governance information. The digital infrastructure uses modern web technologies and provides a good user experience with multi-language support and mobile optimization. Security posture is solid with HTTPS enabled and domain registration protections, though there is room for improvement in DNS security and security headers. Privacy and cookie policies are not explicitly found in the provided content, indicating a potential compliance gap. Overall, the website is professional, trustworthy, and serves a broad audience of corporate, institutional, and personal banking customers.