Security Directory

W

www.ondrejhauser.co.uk

ondrejhauser.co.uk

49

The website www.ondrejhauser.co.uk operates as an online gambling and sports betting platform targeting Thai-speaking users. It promotes a variety of betting services including football betting, casino games, slots, and lottery. The site positions itself as a leading and trusted platform in the Thai market, leveraging the popular 'ufabet' brand. However, the domain WHOIS data is missing and indicates the domain is invalid according to Nominet UK registry rules, which raises concerns about the legitimacy and ownership of the domain. The website is built on WordPress using Elementor and Yoast SEO, showing moderate technical maturity but lacks critical compliance and security features such as privacy policies, cookie consent, and security headers.

LIVEBOX Event Production, s.r.o. is a Czech-based company specializing in comprehensive technical solutions for events including conferences, gala shows, hybrid events, studios, concerts, trade fairs, and equipment leasing. With over 20 years of experience in audiovisual technology, the company targets corporate clients and event organizers seeking turnkey event production services. The website reflects a professional and consistent brand presence with detailed service descriptions and a team section showcasing key personnel. Technically, the website is built on ASP.NET with Bootstrap and jQuery, incorporating Google Analytics and Tag Manager for user tracking. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, it lacks visible privacy and cookie policies and does not implement GDPR consent mechanisms, which are critical for compliance in the EU. From a security perspective, the site uses HTTPS but lacks visible security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company’s experience and no suspicious registration patterns. Overall, the website is professional and credible but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

Smart Cams is a small Czech Republic-based media service provider specializing in live HD video streaming solutions. Their services include live streaming for notable clients such as Škoda, O2, Prima, and STV, along with camera rental, video transcoding, and web administration features. The website demonstrates a professional design with clear navigation and responsive layout, leveraging modern technologies like Bootstrap, jQuery, and Flowplayer. However, the absence of WHOIS registration data and lack of visible privacy or cookie policies indicate gaps in transparency and compliance. Security posture is moderate with HTTPS usage but missing security headers and no explicit incident response or data protection officer information. Overall, the site is functional and business-focused but would benefit from enhanced privacy compliance and security best practices.

O

One Family Office

onefamilyoffice.cz

47

One Family Office is a recently established (2023) multi-family office based in the Czech Republic, offering comprehensive investment management, advisory, asset protection, and concierge services to high-net-worth families and individuals. The company positions itself as the largest family office in Central Europe with a strong team of investment professionals and legal advisors, managing significant assets and family structures. The website is built on WordPress with modern technologies and includes tracking tools such as Google Tag Manager and Facebook Pixel. While the site is professionally designed and content-rich, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the domain registration is consistent with the business claims and shows legitimacy.

H

HAVEL & PARTNERS

nextzeny.sk

44

NextŽeny is a project led by the reputable law firm HAVEL & PARTNERS, focusing on the global trend of wealth transfer into the hands of women, supporting female entrepreneurship, investment, and networking in the Czech and Slovak markets. The website provides research, studies, and a magazine to inform and empower women managing wealth. Technically, the site is built on WordPress with modern performance optimizations and multilingual support. Security posture is solid with HTTPS and DNSSEC enabled, though explicit security policies and cookie consent mechanisms are missing. The WHOIS data shows inconsistencies with domain creation dates, which should be verified to ensure trustworthiness. Overall, the site is professional, content-rich, and targeted at a finance-savvy female audience in Slovakia and the Czech Republic.

C

Cornerstone OnDemand Foundation

cornerstoneondemand.org

58

The Cornerstone OnDemand Foundation website presents a nonprofit organization focused on building capacity for other nonprofits by providing free skill development opportunities to employees, volunteers, and communities. The site is built on the Wix platform, leveraging standard Wix technologies and scripts, indicating a moderate level of digital maturity. The content is professionally presented with a clear mission but lacks comprehensive privacy, cookie, and security policies, which are critical for trust and compliance. Security posture is basic with no evident security headers or incident response information, and WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust. Overall, the site is functional and serves its nonprofit educational purpose but would benefit from enhanced security and compliance transparency.

C

Cornerstone OnDemand

cornerstoneondemand.com

73

Cornerstone OnDemand operates a leading enterprise AI-powered human capital management platform known as the Galaxy Platform. The company serves a global customer base of over 7,000 organizations and 140 million users, offering comprehensive talent management, learning, and workforce agility solutions. Their market position is reinforced by multiple industry awards and analyst recognitions, reflecting a strong competitive advantage in the HCM technology sector. Technically, the website leverages modern frameworks such as Next.js and React, integrates advanced analytics and marketing tools, and demonstrates excellent performance and mobile optimization. Security posture is robust with HTTPS enforcement and comprehensive security headers, though no explicit incident response or vulnerability disclosure policies are publicly visible. Privacy compliance is well addressed with clear privacy and cookie policies indicating GDPR adherence. Overall, the website and business present a professional, trustworthy, and mature digital presence, though the absence of WHOIS data introduces some uncertainty regarding domain registration transparency.

Divadlo Semafor is a culturally significant theatre company based in the Czech Republic, offering a variety of theatrical performances and cultural events. The website provides comprehensive information about upcoming shows, ticket purchasing options, and company history, targeting Czech-speaking audiences interested in theatre and culture. The business model centers on live entertainment and ticket sales, supported by an e-shop and newsletter subscription for audience engagement. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, ensuring a responsive and user-friendly experience. However, some areas such as SEO and accessibility could be improved. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published privacy or security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate. Strategic improvements in privacy compliance, security headers, and WHOIS transparency would enhance overall trust and security.

S

Stará čistírna odpadních vod v Bubenči

staracistirna.cz

48

Stará čistírna odpadních vod v Bubenči is a cultural heritage site located in Prague, Czech Republic, focusing on the historical wastewater treatment plant built between 1901 and 1906. The website serves to promote the site as a tourist attraction offering guided tours and event space rentals. The business operates in a niche cultural and historical sector with a small-scale presence. Technically, the website is built on WordPress using Elementor and Yoast SEO, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy or security policies. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

G

Galledia AG

galledia.ch

51

Galledia AG is a Swiss media company providing integrated services across print, digital, publishing, and event management sectors. Positioned as a significant regional player, it serves both large enterprises and SMEs with tailored communication solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site is built on Drupal 9 with modern JavaScript libraries, offering good mobile optimization and accessibility. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and trustworthy online presence. Strategic improvements in security headers and privacy compliance would enhance overall risk posture.

Neon One is a technology company specializing in providing integrated software solutions for nonprofit organizations. Their platform combines donor management, fundraising, memberships, events, and ticketing into a unified SaaS offering tailored to the nonprofit sector. The company positions itself as a key player in the nonprofit software market, targeting organizations seeking streamlined management tools. The website reflects a professional and consistent brand image with clear messaging aligned to its target audience. Technically, the website is built on WordPress CMS, leveraging popular plugins such as Yoast SEO for search optimization and integrates multiple marketing and analytics tools including Google Analytics, Google Tag Manager, Pardot, and Visual Website Optimizer. The site uses Cloudflare for DNS and enforces HTTPS, indicating a modern and secure infrastructure. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site employs HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. DNSSEC is not enabled, representing a minor security gap. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service. Overall, Neon One's website demonstrates a mature digital presence with strong business credibility and technical implementation. To enhance trust and compliance, it is recommended to publish comprehensive privacy and security policies, enable DNSSEC, and provide clear contact information for security incidents.

cssSlider.com is a specialized software provider offering a pure CSS and HTML image slider tool designed for web developers and designers who want lightweight, responsive, and retina-ready sliders without relying on JavaScript or jQuery. The website presents a professional product with clear demos, download options for Windows and Mac, and a focus on ease of use and customization. The technical infrastructure is modern, leveraging HTML5, CSS3, and minimal JavaScript primarily for analytics and slider adjustments. Hosting and DNS are managed via reputable providers including GoDaddy and Cloudflare, though DNSSEC is not enabled. Security posture is moderate with domain locking in place but lacking explicit security headers and privacy compliance documentation. The site uses Google Analytics for user tracking but does not provide cookie consent mechanisms or privacy policies, which impacts privacy compliance scores. Overall, the website is functional, well-designed, and trustworthy but would benefit from enhanced privacy and security disclosures.

Z

Zenit SK, s.r.o.

polykarbonat.sk

42

Zenit SK, s.r.o. operates the website polykarbonat.sk, specializing in the sale and distribution of polycarbonate sheets and related plastic products in Slovakia. The company offers a comprehensive product range including cellular, solid, and trapezoidal polycarbonate sheets from well-known brands such as Makrolon, Palram, Koscon, and Rodeca. Their business model combines retail and wholesale with an online e-commerce platform, supported by logistics and professional plastic processing services. The website targets general consumers and businesses needing construction and industrial plastic materials. Technically, the website uses legacy jQuery and jQuery UI libraries, integrated with Google Analytics, Google Tag Manager, and Microsoft Clarity for user tracking and analytics. The site is built on the EASYPAGE CMS platform and includes a cookie consent banner compliant with basic GDPR requirements. However, the site lacks modern security headers and uses outdated JavaScript libraries, which may pose security risks. Mobile optimization and accessibility are basic but functional. From a security perspective, the site does not publish a privacy policy, terms of service, or incident response procedures, which are critical for compliance and trust. The cookie consent mechanism is present but could be improved with clearer privacy disclosures. No WAF or blocking mechanisms were detected, and no vulnerabilities were evident from the HTML content. Contact information is clearly provided, enhancing business credibility. Overall, the website is professionally designed and functional but requires improvements in privacy compliance, security best practices, and modernization of its technical stack to enhance trust and reduce risk.

Z

Zenit SK, s.r.o.

plexisklo.sk

42

Zenit SK, s.r.o. operates the website plexisklo.sk, specializing in the sale and distribution of plexiglass (PLEXIGLAS®) and related plastic products. The company targets both retail and wholesale customers, offering a wide range of extruded and cast plexiglass sheets, blocks, tubes, rods, mirrors, and adhesives. The business maintains multiple physical locations in Slovakia and supports e-commerce sales through a dedicated online shop. The website is professionally designed with clear navigation and product categorization, supporting a positive user experience.

24/7 media s.r.o. is a small Czech Republic based company specializing in media representation, media buying, consulting, and wedding agency services including domestic and international weddings as well as airline ticket sales. The company has been established since 2006, indicating a stable presence in its niche market. The website content is minimal but provides essential contact information and links to related partner services. Technically, the website is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS, and lacks mobile optimization and accessibility features. Security posture is weak due to absence of HTTPS enforcement and security headers, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the site is functional but requires modernization and improved security and privacy practices to enhance trust and compliance.

T

Topinfo s.r.o.

tzb-info.sk

45

TZB-info is a well-established Czech expert web portal specializing in construction, building technical equipment, and energy savings. It serves professionals and stakeholders in these sectors by providing daily updated news, technical articles, legal regulations, product databases, and discussion forums. The website is operated by Topinfo s.r.o., a medium-sized company with a history dating back to 2001, and is part of a family of related sites including estav.tv and energospot.cz. Technically, the site uses a custom CMS (Topinfo CMS) with a technology stack including jQuery, Google Tag Manager, and Gemius analytics. The site is mobile-optimized and employs HTTPS with good SSL configuration. Security posture is adequate but could be improved by adding advanced security headers and updating legacy libraries. Privacy compliance is basic with cookie consent implemented and a privacy policy available. No WHOIS data is publicly available due to registry policies, which slightly reduces trust but does not outweigh the professional presentation and content quality. Overall, TZB-info is a credible and authoritative source in its niche with room for technical and security enhancements.

M

mojevideo.sk

mojevideo.sk

58

Mojevideo.sk is a Slovak online video sharing and entertainment platform that offers a wide range of user-generated and curated videos, focusing on humor and general entertainment. The site features daily new content, user uploads, and categorized browsing, targeting a broad audience interested in video entertainment. It maintains a strong presence in the Slovak media market with a medium-sized operation and a business model primarily supported by advertising revenue. Technically, the website employs modern web technologies including JavaScript, lazy loading, and header bidding for ads, ensuring a good user experience with moderate performance and mobile optimization. Security-wise, the site enforces HTTPS and uses a consent management platform to comply with GDPR, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is trustworthy, professionally maintained, and compliant with privacy regulations, though it lacks explicit security policies and incident response information.

A

AkčnéLetáky.sk

akcneletaky.sk

35

AkcneLetaky.sk is a Slovak online platform specializing in aggregating promotional leaflets and discount offers from a wide range of retail chains including hypermarkets, supermarkets, and specialty stores. The website serves consumers in Slovakia by providing a centralized location to find current sales and discounts, helping users save money on their purchases. The platform features categorized navigation, search functionality, and links to numerous partner retail domains, indicating a well-structured business model focused on retail marketing and consumer savings. Technically, the website employs standard web technologies such as HTML5, CSS, and JavaScript, and integrates Google services including Google Analytics and Adsense for analytics and monetization. The site is served over HTTPS, ensuring encrypted communication, and demonstrates moderate performance and good mobile optimization. However, it lacks visible security headers and does not provide privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site shows a basic security posture with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. The absence of security headers and formal privacy and cookie policies represents areas for improvement. No incident response or vulnerability disclosure information is provided, which could be a gap in security readiness. The website does not appear to be blocked by any WAF or security challenge, and no adult or explicit content is present, making it safe for general audiences. Overall, AkcneLetaky.sk is a legitimate and established retail aggregator platform with good content quality and business credibility. To enhance its security and compliance posture, the site should implement privacy and cookie policies, add security headers, and provide clear contact information for security incidents. These improvements would increase user trust and align the platform with best practices in web security and privacy.

V

Vedelisteze.sk

vedelisteze.sk

44

Vedelisteze.sk is a Slovak language online media portal providing daily updated content focused on lifehacks, interesting facts, and science topics. The website targets a general audience interested in practical tips and educational content. It operates on a WordPress CMS platform, leveraging common web technologies and advertising networks such as Google Adsense and Google Tag Manager. The site demonstrates a moderate level of digital maturity with good design, mobile optimization, and SEO practices. Security posture is adequate with HTTPS enforced and Cloudflare DNS usage, but lacks explicit security policies and headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website appears legitimate and stable with a domain age consistent with its content history.

E

Eduhracky.sk

eduhracky.sk

62

Eduhracky.sk is a Slovakian e-commerce business specializing in the sale of wooden toys for children. The website offers a variety of hand-painted, ecological wooden toys targeting parents and children, positioning itself in a niche market with a focus on quality and eco-friendliness. The business has been established since 2011, supported by consistent domain registration data. Technically, the website is built on the Shopify platform using the Debut theme, leveraging modern web technologies such as lazy loading, hCaptcha for form protection, and Google Fonts. Performance and mobile optimization are good, providing a positive user experience. Security posture is solid with HTTPS enforced and some security best practices observed, though there is room for improvement in implementing additional security headers and publishing clear privacy and cookie policies. No contact emails or phone numbers were found in the provided content, which could affect customer trust and compliance. Overall, the website is professional, safe for general audiences, and legitimate, but could enhance privacy compliance and transparency.

M

MegaUbytovanie.sk

megaubytovanie.sk

55

MegaUbytovanie.sk is a well-established online platform specializing in accommodation bookings across Slovakia and the Czech Republic, offering over 6000 verified listings including cottages, apartments, hotels, and private stays. The platform targets travelers seeking direct booking options with property owners, providing a multi-language user experience and a broad geographic reach within Central Europe. Technically, the website leverages modern web technologies such as Next.js and React, hosted on Amazon Cloudfront CDN, ensuring fast performance and mobile optimization. Security measures include HTTPS enforcement, security headers, and a cookie consent mechanism, although explicit privacy and terms policies are not found in the provided content. The absence of direct contact information and formal policies slightly impacts trust and compliance scores. Overall, the site demonstrates a strong market position with good technical maturity but would benefit from enhanced transparency and compliance documentation.

S

ScoresinLive.com

scoresinlive.com

60

ScoresinLive.com operates as a niche media website providing live sports scores and results across multiple sports, with a strong focus on soccer. The site aggregates data from various sources to deliver fast and detailed live scores for global sports leagues and competitions. Its target audience primarily consists of sports enthusiasts seeking real-time updates. The business model appears to be advertising-supported, leveraging multiple ad networks and tracking technologies to monetize traffic. Technically, the website employs a modern JavaScript stack including Prebid.js for header bidding, Google Tag Manager, and various ad network integrations. The site is mobile-optimized with responsive design and uses HTTPS for secure connections. However, it lacks advanced security headers and visible CMS or hosting provider information, indicating potential areas for technical improvement. From a security perspective, the site demonstrates basic compliance with privacy regulations through a consent management platform and anonymized analytics tracking. Nonetheless, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. No explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are published, which limits transparency and security maturity. Overall, ScoresinLive.com is a functional and content-rich sports media site with moderate technical and privacy compliance maturity. The primary risks relate to domain registration opacity and limited security policy disclosures. Strategic improvements in security posture and business transparency would enhance trust and resilience.

A

Astro-Seek.com

astro-seek.com

72

Astro-Seek.com is a specialized online platform offering free astrology charts, horoscopes, and a wide range of astrology-related tools and calculators. The site targets a general audience interested in astrology and provides advanced features such as transit charts, compatibility calculators, and predictive astrology tools. The business model is primarily free access with optional user registration for personalized services. The website demonstrates consistent branding and good content quality, positioning itself as a niche player in the online astrology market since 2016. Technically, the website uses standard web technologies including JavaScript, CSS, and HTML5, with moderate performance and basic mobile optimization. SEO practices are well implemented with comprehensive metadata and Open Graph tags. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers could be improved. Privacy compliance is supported by clear privacy and cookie policies, including GDPR considerations. The absence of WHOIS data limits full trust verification, but the website's professional presentation and extensive content suggest legitimacy. No direct contact emails or phone numbers are provided, relying instead on a contact form. Advertising is managed through Google Adsense with tracking pixels from TOPlist and WAUDIT.cz, indicating moderate user tracking. Overall, Astro-Seek.com is a well-established, content-rich astrology website with a solid technical foundation and good privacy practices, suitable for general audiences interested in astrology.

G

GASTRO-TIPY.SK

gastro-tipy.sk

62

Gastro-tipy.sk is a Slovak culinary content website offering a wide range of recipes, cooking tips, and gastronomic articles targeted at Slovak-speaking home cooks and food enthusiasts. The website is built on a modern Laravel 10 framework with integration of Google Analytics and a custom analytics service. It features a cookie consent mechanism and uses HTTPS for secure communication. The site provides rich content with good design quality and clear navigation, optimized for mobile devices. However, it lacks explicit contact information and detailed security or incident response policies. The WHOIS data is privacy protected, which is common and justified for this type of small content publishing website. Overall, the website is safe, professional, and trustworthy for its audience.

V

Vladimir Gerlich

beer-coasters.eu

38

The website www.beer-coasters.eu is a niche hobbyist platform dedicated to the collection, exchange, and information sharing of beer coasters (beer mats) worldwide. Operated by Vladimir Gerlich since 2003, it serves a community of collectors with a focus on detailed images, brewery information, and exchange opportunities. The site is modest in scale, targeting enthusiasts and collectors primarily in the Czech Republic and internationally. Technically, the site uses classic web technologies such as jQuery and Floatbox, with integrations for Google Analytics and Tag Manager for visitor tracking. The infrastructure appears stable but basic, with moderate performance and limited mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for improvement in compliance and user data protection. No WHOIS registrant data is available due to EURid privacy protections, but the domain age and content consistency support legitimacy. Overall, the site is functional and trustworthy for its niche audience but would benefit from enhanced security and privacy practices.

M

ModelForum

modelforum.cz

61

ModelForum.cz is a Czech language online discussion forum dedicated to modeling hobbyists, particularly those interested in plastic models. Established in 2005, it serves a niche community with features such as user registration, event calendars, and partner advertising. The site uses phpBB forum software and maintains a consistent brand presence with partner banners from relevant hobby suppliers. Technically, the site employs standard web technologies including PHP and JavaScript, with moderate performance and basic mobile optimization. Security posture is moderate, with HTTPS usage inferred but lacking advanced security headers and explicit incident response policies. Privacy and cookie policies exist but lack active consent mechanisms. Overall, the site is legitimate, stable, and trusted within its community but could benefit from enhanced security and privacy practices.

P

Promperú

peru.travel

65

The website www.peru.travel is the official tourism portal for Peru, managed by Promperú, a government entity responsible for promoting tourism and exports. It provides comprehensive travel information, destination guides, and experiences targeting international tourists interested in visiting Peru. The site is professionally designed with consistent branding and uses modern web technologies such as Bootstrap, jQuery, Leaflet maps, and integrates multiple analytics and tracking tools including Google Analytics, Facebook Pixel, Crazy Egg, and Hotjar. The technical infrastructure reflects a moderate level of digital maturity with good mobile optimization and HTTPS security. However, the presence of exposed credentials in client-side JavaScript and the absence of visible privacy and cookie policies indicate gaps in security and privacy compliance. The WHOIS data is unavailable or privacy protected, which is typical for government-related domains to prevent abuse. Overall, the website is trustworthy and authoritative but would benefit from improved security hygiene and privacy transparency.

C

Casa Andina

casa-andina.com

66

Casa Andina is a well-established hospitality company operating primarily in Peru, offering hotel accommodations, corporate services, events, and dining options. The website reflects a professional and consistent brand presence targeting travelers and tourists interested in Peruvian destinations. The company has a strong market position with a large operational size and a domain age consistent with its business history. Technically, the website uses modern JavaScript frameworks and integrates multiple analytics and marketing tools, hosted behind Cloudflare DNS services. Security posture is good with HTTPS enforced and domain locking, though improvements such as DNSSEC and CSP headers are recommended. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Contact information is clearly presented, enhancing business credibility. Overall, the website is safe, professional, and trustworthy with room for technical and compliance enhancements.

V

VIPAC - Viajes Pacifico

vipac.travel

66

VIPAC - Viajes Pacifico is a well-established travel agency specializing in tours across Peru and South America, boasting nearly 50 years of experience. The company offers a diverse range of travel services including luxury, adventure, cruises, and MICE events, targeting tourists seeking authentic and detailed travel experiences. Their market position is strong within the South American tourism sector, supported by positive visitor feedback and certifications such as the TripAdvisor Certificate of Excellence. Technically, the website employs modern web technologies including service workers for PWA capabilities, Google Tag Manager, and integration with Bokun booking widgets, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features could be improved. Security posture is solid with HTTPS enforced and no evident vulnerabilities, but the absence of security headers and explicit privacy policies suggests room for enhancement. Overall, the business demonstrates professionalism and trustworthiness, though the lack of public WHOIS data slightly reduces transparency. Strategic recommendations include publishing comprehensive privacy and terms of service documents, implementing security headers, and establishing a vulnerability disclosure policy to further strengthen trust and compliance.

T

The Springs Resort & Spa

thespringscostarica.com

64

The Springs Resort & Spa is a luxury hospitality business located in Arenal, Costa Rica, offering unique resort and spa experiences focused on nature and luxury tourism. The website presents a professional and well-structured digital presence built on WordPress with modern SEO and analytics tools integrated. The technical infrastructure includes popular plugins and tracking services, indicating a mature digital marketing approach. Security posture is generally good with HTTPS enabled, though the absence of security headers and privacy policies suggests room for improvement. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be investigated further. Overall, the website is functional and trustworthy from a user perspective but requires enhancements in compliance and security transparency.

I

Instituto Hondureño de Turismo

iht.hn

10

The Instituto Hondureño de Turismo is the official government body responsible for promoting and regulating tourism in Honduras. The website serves as an authoritative source for tourism-related news, statistics, legal frameworks, and public resources. It targets tourists, industry stakeholders, and government entities, providing comprehensive information and online services. The site is well-branded, consistent, and maintains a professional presence with active social media channels and multimedia content. Technically, the website is built on Drupal 9, leveraging modern web technologies and integrates analytics and video content effectively. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is trustworthy, accessible, and serves its government mandate effectively.

V

Volaris

volaris.com

65

Volaris is a leading ultra low cost airline primarily serving Mexico and the Americas, offering affordable flight options to budget-conscious travelers. The company operates a professional and well-branded website that provides comprehensive flight booking services, travel offers, and customer support. The website targets budget travelers and positions itself as a major player in the low-cost airline market in Mexico. Technically, the site is built on modern frameworks such as Angular, uses Google Tag Manager for marketing, and integrates multiple analytics and advertising services. It is optimized for mobile and accessibility, providing a fast and user-friendly experience. Security-wise, the site enforces HTTPS, implements key security headers, and provides privacy and cookie policies with consent mechanisms, though explicit security policies and incident response contacts are not publicly found. The WHOIS data is unavailable, likely due to privacy protection, which is common for commercial airline domains and does not detract from the site's legitimacy. Overall, Volaris demonstrates a mature digital presence with strong business credibility and a good security posture.

L

LATAM Airlines Group S.A.

latamairlines.com

49

LATAM Airlines Group S.A. operates as a leading airline in Chile and South America, offering a comprehensive range of travel services including flight bookings, travel packages, hotel reservations, car rentals, and travel insurance. The website targets travelers primarily in Chile and the broader South American region, leveraging a strong brand presence and a loyalty program (LATAM Pass) to enhance customer engagement. The company maintains a significant market position as the region's leading airline, supported by subsidiaries such as LATAM Cargo and partnerships with major travel service providers like Booking.com and Despegar.

S

Sonesta Hotel El Olivar

sonestaelolivar.com

9

Sonesta Hotel El Olivar is a premium 5-star hotel located in Lima, Peru, offering luxury accommodation and event hosting services. The website presents a professional and well-structured digital presence built on modern technologies such as Angular and integrates multiple marketing and analytics tools. However, the absence of WHOIS data raises concerns about domain registration legitimacy. Security posture is generally good with HTTPS and modern frameworks, but lacks visible security headers and privacy compliance documentation. Overall, the site is functional and trustworthy from a user perspective but requires improvements in privacy and security transparency.

The website www.hyatt.com appears to be protected by security mechanisms that block access to its full content, as evidenced by the minimal HTML content containing only scripts and empty iframes. The WHOIS lookup for the domain returned no match, indicating either privacy protection or registry restrictions that prevent disclosure of registrar and registrant information. Due to these limitations, a comprehensive analysis of the website's business, technical, and security posture is not feasible. The domain name corresponds to a well-known global hospitality brand, but the lack of accessible data and WHOIS transparency reduces the ability to verify legitimacy and compliance. The website's security posture cannot be fully assessed, but the absence of visible security headers or policies suggests room for improvement.

The website sdn.cz currently presents only minimal content, displaying a simple 'OK' message with no additional information, metadata, or interactive elements. The domain is registered since 2009 with a Czech registrar, indicating a potentially legitimate and established domain ownership. However, the lack of meaningful content, contact information, and security features significantly limits the website's utility and trustworthiness. Technically, the site lacks modern web technologies, security headers, and HTTPS information, which are critical for secure and professional web presence. From a security perspective, the absence of privacy policies, cookie consent mechanisms, and incident response information indicates poor compliance with GDPR and general security best practices. Overall, the website appears inactive or placeholder, posing low risk but also offering no business or security value in its current state.

K

Kupi.cz

kupi.cz

62

Kupi.cz is a Czech online platform specializing in aggregating promotional leaflets, discounts, and retail offers from various stores, targeting consumers seeking savings and shopping inspiration. The website offers additional services such as shopping lists and a mobile app for leaflet browsing, positioning itself as a leading retail promotions aggregator in the Czech market. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, Facebook Pixel, and integrates with advertising networks like Google DoubleClick and Seznam SSP. The site is mobile-optimized with responsive design and basic accessibility features. Security-wise, the website enforces HTTPS and uses consent management for analytics and advertising, but lacks explicit privacy and cookie policy pages, which impacts privacy compliance. The absence of WHOIS data limits domain legitimacy verification, although the site appears professional and trustworthy based on content and branding. Overall, Kupi.cz demonstrates a mature digital presence with room for improvement in privacy transparency and security header implementation.

S

Sauto.cz

sauto.cz

68

Sauto.cz operates as the largest online automotive marketplace in the Czech Republic, offering a comprehensive platform for buying and selling new, used, and demo vehicles. The website targets car buyers and sellers primarily within the Czech market, providing extensive listings and automotive news content. Technically, the site employs modern web technologies including JavaScript ES modules, JSON-LD structured data for SEO, and is hosted behind a performant Nginx server with strong integration into the Seznam.cz ecosystem. Security posture is robust with HTTPS enforced and multiple security headers configured, although explicit privacy and cookie policies are not clearly presented in the analyzed content. The absence of WHOIS data reduces transparency but does not detract significantly from the professional appearance and functionality of the site. Overall, Sauto.cz demonstrates a mature digital presence with good security practices but could improve privacy compliance and transparency.

S

Sreality.cz

sreality.cz

64

Sreality.cz is the largest real estate marketplace in the Czech Republic, offering a comprehensive database of properties including apartments, houses, new developments, commercial spaces, and land plots for sale and rent. The platform is affiliated with Seznam.cz, a major Czech internet company, which enhances its market credibility and reach. The website targets individuals and businesses seeking real estate solutions within the Czech market. Technically, the site is built using modern web technologies such as React and Next.js, providing a responsive and user-friendly experience across devices. While the site enforces HTTPS and uses various third-party analytics and advertising services, explicit security headers and privacy policies were not detected in the provided HTML content, indicating areas for improvement in compliance and security transparency. The absence of WHOIS data limits domain registration trust analysis, but the professional presentation and affiliation with a reputable parent company support its legitimacy.

E

E.M.A. Europe, s. r. o.

horoskopy.cz

49

Horoskopy.cz is a Czech-language astrology and horoscope website providing daily horoscopes, Chinese horoscopes, yearly forecasts, card readings, and astrological counseling. It operates as a content portal primarily monetized through advertising, with strong affiliation to Seznam.cz, a major Czech internet company. The site targets a general audience interested in astrology and related services. Technically, the site uses modern JavaScript frameworks, integrates with Seznam.cz's advertising and consent management platforms, and employs Gemius for analytics. While the site is accessible and functional, it shows room for improvement in mobile optimization and accessibility. Security posture is adequate with HTTPS and sandboxed ad iframes, but lacks some security headers and explicit privacy policies. WHOIS data is unavailable, which slightly reduces domain transparency, but the presence of official company contact and Seznam.cz affiliation supports legitimacy. Overall, the site is a moderately mature digital property with good content quality and advertising transparency.

P

Proženy.cz

prozeny.cz

63

Prozeny.cz is a leading Czech women's online magazine offering a wide range of content including beauty, fashion, health, relationships, weight loss, children, and celebrity news. The site features multiple content sections such as horoscopes, podcasts, and recipes, targeting Czech-speaking women. The business model is primarily media publishing supported by advertising. Technically, the website employs modern JavaScript bundling, web fonts, and responsive design, indicating a mature digital infrastructure. However, the absence of WHOIS data limits domain legitimacy verification. Security posture is moderate with no visible security headers or explicit policies, and privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is accessible, safe for general audiences, and professionally designed but would benefit from enhanced security and compliance measures.

S

Stream.cz

stream.cz

58

Stream.cz is a prominent Czech online video streaming platform offering a wide range of original shows, series, and movies accessible both online and offline. It operates under the umbrella of Seznam.cz, a leading Czech internet company, which enhances its market credibility and reach. The platform targets a general audience with family-friendly content, including entertainment, news, recipes, and children's programming. Technically, the website employs modern JavaScript frameworks, integrates advanced analytics tools such as Gemius and Google Tag Manager, and maintains a fast, mobile-optimized user experience. Security-wise, the site enforces HTTPS and uses error monitoring services like Sentry, though explicit security headers and incident response policies are not publicly detailed. Privacy and cookie policies are comprehensive and GDPR-compliant, linked through Seznam.cz's legal pages. Overall, Stream.cz presents a professional, trustworthy, and well-maintained digital presence with room for improvement in transparency of security policies and WHOIS data availability.

S

Sport.cz - s námi jste ve hře

sport.cz

61

Sport.cz is a prominent Czech sports news website offering comprehensive coverage of various sports including football, hockey, tennis, motorsport, and winter sports. The platform targets sports enthusiasts primarily within the Czech Republic and operates under an advertising-supported business model. It is likely affiliated with Seznam.cz, a major Czech internet company, which enhances its market position and credibility. The website provides live scores, news articles, video highlights, and a fantasy sports league, catering to a broad audience of sports fans. From a technical perspective, Sport.cz employs modern web technologies including ES modules, SVG graphics, and CSS3, ensuring good mobile optimization and a professional user experience. The site integrates with Seznam.cz's internal APIs and uses various tracking and advertising services such as Gemius and Google Tag Manager. Performance is moderate with room for improvement in accessibility and explicit privacy compliance features. Security-wise, the website enforces HTTPS and appears to follow good security practices, although explicit security headers and vulnerability disclosure mechanisms are not evident. The absence of public WHOIS data due to privacy protection is common for media websites but limits trust signals from domain registration information. No signs of malicious activity or adult content were detected, indicating a safe environment for general audiences. Overall, Sport.cz is a well-established media platform with a solid technical foundation and good business credibility. However, it would benefit from enhanced privacy compliance transparency, explicit security policies, and improved accessibility features to strengthen user trust and regulatory adherence.

B

Borgis

super.cz

51

Super.cz is a Czech online media portal specializing in celebrity news, entertainment stories, and related content. Operated in partnership with Seznam.cz and the publishing house Borgis, it targets a general audience interested in celebrity culture and entertainment. The website features multimedia content including photos, videos, podcasts, and quizzes, supporting an engaging user experience. Technically, the site employs modern JavaScript frameworks and asynchronous script loading to optimize performance and responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though privacy and cookie policies are not clearly presented, which may impact compliance. The absence of WHOIS data reduces domain trust signals, but the site's professional presentation and partnerships support its legitimacy.

O

Oblastní charita Hradec Králové

charitahk.cz

54

Oblastní charita Hradec Králové is a regional non-profit organization providing a wide range of social and healthcare services including support for seniors, homeless people, victims of domestic violence, and families with disabled children. It operates as part of the larger Charita Česká republika network and maintains a strong presence in the Hradec Králové region. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the site uses modern web technologies such as Google Tag Manager, Google Analytics, and a cookie consent management platform, ensuring compliance with GDPR and user privacy standards. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security headers and incident response information suggests room for improvement. The lack of WHOIS data is a notable gap in domain trust assessment but does not detract significantly from the overall legitimacy given the organization's transparency and partner affiliations. Strategic recommendations include enhancing security policies, publishing incident response contacts, and improving domain registration transparency.

B

Browsee

browsee.io

53

Browsee is a technology SaaS company specializing in user behavior analytics to improve website conversions and user experience. Their platform offers session recordings, heatmaps, conversion funnels, and integrations with popular tools such as Intercom, Shopify, and Google Analytics. The company targets website owners, product managers, and marketers seeking actionable insights to optimize their digital presence. Established in 2018, Browsee positions itself competitively against established players like FullStory and Hotjar, emphasizing privacy compliance and flexible analytics capabilities. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Amplitude, Google Analytics, and Google Tag Manager. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and security. The site is mobile-optimized with good SEO practices, though accessibility features are basic. The presence of multiple third-party analytics and tracking scripts indicates extensive user data collection, balanced by stated GDPR compliance and privacy respect. From a security perspective, the site enforces HTTPS and uses domain registration protections. However, no explicit security headers were detected, and no dedicated security or incident response policies are publicly available. The site respects Do Not Track settings and excludes sensitive input fields from recordings by default, demonstrating good privacy practices. The absence of a cookie consent mechanism is a minor compliance gap. Overall, Browsee presents a professional, trustworthy online presence with a solid business model and technical foundation. The main risks relate to enhancing security headers, formalizing incident response disclosures, and improving cookie consent transparency. Strategic improvements in these areas would strengthen compliance and user trust.

R

Recombee

recombee.com

67

Recombee is a technology company specializing in AI-powered recommendation and personalized search services delivered as a SaaS platform. Their offerings include real-time personalized recommendations, advanced search capabilities, and analytics tools tailored for diverse industries such as video streaming, e-commerce, media, real estate, and more. The company targets product managers and technical teams seeking to enhance user engagement and conversion rates through AI-driven personalization. With a strong market presence evidenced by partnerships with major brands and numerous client testimonials, Recombee positions itself as a leading provider in the AI recommendation space. Technically, Recombee employs a modern web stack including React and Next.js, with extensive use of RESTful APIs and SDKs for multiple programming languages. The website demonstrates excellent performance, mobile responsiveness, and SEO optimization. Integration of Google Tag Manager, Hotjar, and Usercentrics indicates a mature approach to analytics and privacy compliance. However, explicit security headers are not detected, and no dedicated security policy or incident response page is published. From a security perspective, the site uses HTTPS and implements reCAPTCHA on forms, along with consent management for cookies, reflecting good baseline security and privacy practices. The absence of WHOIS data is likely due to privacy protection, which is justified for this business type. No critical vulnerabilities or suspicious indicators are found in the content or technical setup. Overall, Recombee presents a professional, trustworthy, and technically sound platform with strong business credibility. Strategic recommendations include enhancing security header implementation, publishing a formal security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

L

LKQ CZ s.r.o.

lkq.cz

62

LKQ CZ s.r.o. operates a comprehensive e-commerce platform specializing in automotive parts, accessories, and related products primarily serving the Czech Republic market. The company positions itself as the largest supplier in its sector with a wide network of workshops and retail locations. The website reflects a mature digital presence with modern technologies such as AngularJS, Google Tag Manager, and cookie consent management, supporting a user-friendly and compliant online shopping experience. Security posture is solid with HTTPS enforcement and secure login forms, though there is room for improvement in publishing explicit security policies and incident response information. The absence of WHOIS data limits domain trust assessment but the branding and content strongly indicate a legitimate and established business. Overall, the site is professional, well-structured, and compliant with privacy regulations, making it a trustworthy platform for automotive parts procurement.

L

Leschinger.cz

leschinger.cz

45

Leschinger.cz is a professional freelance WordPress developer and UI/UX designer based in the Czech Republic, offering custom WordPress theme and plugin development, website redesign, and e-shop development services. The website showcases a strong portfolio with notable clients and emphasizes quality, flexibility, and security in its offerings. Technically, the site is built on WordPress 6.8.3 with modern plugins and fonts, optimized for SEO and mobile responsiveness. Security posture is good with HTTPS enabled, but lacks some security headers and formal privacy/cookie policies. No WHOIS data is available, likely due to privacy protection, but the site content and business claims are consistent and trustworthy. Overall, the site presents a credible and professional digital presence for a small freelance business.

P

pays.cz s.r.o.

pays.cz

63

Pays.cz s.r.o. operates a payment gateway platform primarily serving merchants and buyers in the Czech Republic. Founded in 2011, the company offers a variety of payment methods including card payments, QR payments, bank transfers, and PayPal, positioning itself as a reliable and flexible payment solution with no monthly fees and transparent pricing. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience of e-commerce merchants and consumers. Technically, the website employs a mature technology stack including jQuery, Bootstrap, and Google reCAPTCHA for security. Hosting appears to be managed by Active24, a known Czech hosting provider. The site is mobile optimized and SEO friendly, though some technologies like jQuery are outdated. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect forms, but lacks explicit security headers and a published security policy. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with cookie and privacy policies present but no explicit consent mechanism. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, Pays.cz demonstrates a solid business and technical foundation with room for improvement in security best practices and privacy compliance. The risk profile is low, but enhancing security headers and formalizing incident response and data protection policies would strengthen trust and resilience.