Security Directory

A

Sklep militarny: broni, amunicji i airsoft broni | AFG-obrona.pl

afg-obrona.pl

57

AFG-obrona.pl is an e-commerce platform specializing in military, outdoor, and airsoft equipment retail and wholesale primarily targeting Polish customers. The website offers a broad range of products including firearms, ammunition, airsoft guns, tactical gear, and outdoor supplies. It supports multiple languages and provides user account management with social login options, indicating a mature digital presence. Technically, the site uses a proprietary CMS (CREATIVE shop) with modern JavaScript libraries, CDN delivery, and tracking tools such as Google Tag Manager and Sentry for monitoring. Security posture is adequate with HTTPS and reCAPTCHA integration, but lacks visible security headers and explicit privacy and cookie policies, which are critical for compliance and user trust. The WHOIS data is unavailable from the official .pl registry, which limits domain trust assessment and raises some concerns about transparency. Overall, the site is functional and professional but would benefit from enhanced privacy disclosures and security hardening.

A

AFG-obrana.cz - army shop. Prodej zbraní a střeliva.

afg-obrana.cz

58

AFG-obrana.cz is an e-commerce retail and wholesale business specializing in firearms, ammunition, airsoft equipment, archery, and tactical gear primarily serving the Czech Republic market. The website presents a professional and well-structured platform with clear navigation and multiple product categories targeting enthusiasts and professionals in defense and outdoor sectors. The business model focuses on both retail and wholesale customers, leveraging multilingual support and social login capabilities to enhance user experience. Technically, the website employs a modern technology stack including JavaScript frameworks, Google Tag Manager, Facebook SDK, Google reCAPTCHA, and Sentry for error tracking. It is built on the CREATIVE shop CMS platform and demonstrates good mobile optimization and SEO practices. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, with active error monitoring via Sentry. However, it lacks explicit security headers and a publicly accessible privacy policy, which are areas for improvement. The WHOIS data is not publicly available, likely due to privacy protection, which is common for businesses dealing with sensitive products like firearms. Overall, the website is legitimate and professionally maintained but would benefit from enhanced transparency and security best practices to improve trust and compliance. Strategic recommendations include publishing comprehensive privacy and security policies, implementing security headers, and establishing a vulnerability disclosure process.

A

AFG.eu

afg-defense.eu

65

AFG.eu operates as a specialized e-commerce retailer focused on military, hunting, airsoft, and outdoor equipment. The company targets enthusiasts and professionals seeking weapons, ammunition, tactical gear, and related accessories primarily in the European market. The website demonstrates a solid market position with multiple regional domains supporting localized audiences. Technically, the site is built on the CREATIVE shop CMS platform, leveraging modern JavaScript libraries, Google reCAPTCHA for bot protection, and Sentry for error monitoring. The presence of Google Tag Manager and Facebook SDK indicates active marketing and analytics efforts. Security posture is generally good with HTTPS enforced and CSRF protections in place, though the absence of explicit privacy and cookie policies and security.txt files suggests room for compliance improvement. Overall, the site is professional, accessible, and trustworthy with moderate risk due to limited WHOIS transparency and incomplete privacy disclosures.

T

Travel Bakers

travelbakers.cz

43

Travel Bakers is a specialized non-profit organization dedicated to supporting municipalities, towns, and destinations in the Czech Republic and Slovakia with effective tourism management. Their offerings include strategic planning, workshops, marketing strategies, interpretation plans, and comprehensive educational programs for tourism professionals. The organization positions itself as an experienced and trusted partner with over 10 years in the tourism sector, emphasizing practical and resource-efficient solutions. Technically, the website is built on Drupal 10 with modern front-end technologies including Bootstrap 5 and Typekit fonts. It integrates Google Tag Manager and CookieHub for analytics and cookie consent management, reflecting a moderate level of digital maturity. The site is mobile-optimized, accessible, and well-structured, providing a positive user experience. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers and a published privacy policy, which are areas for improvement. The absence of WHOIS data limits domain trust verification, but the professional presentation and external references support legitimacy. Overall, the website demonstrates a solid security posture with room for enhancements in transparency and compliance. The overall risk assessment is moderate with recommendations to publish comprehensive privacy and security policies, implement security headers, and improve WHOIS transparency to enhance trust and compliance.

M

Magistrát města Hradec Králové

mmhk.cz

41

The website www.hradeckralove.org is the official municipal portal for the city of Hradec Králové in the Czech Republic. It serves as a comprehensive information hub for residents, visitors, and businesses, providing access to city news, public services, cultural events, social programs, and administrative resources. The site is well-positioned as the authoritative source for local government information and community engagement. Technically, the site employs a custom CMS platform (VismoWeb), uses modern web technologies including HTML5, CSS3, and JavaScript, and integrates Google services such as Analytics, Tag Manager, reCAPTCHA, and Translate to enhance functionality and user experience. The website is mobile-optimized and accessible, with good SEO practices and clear navigation. Security-wise, the site enforces HTTPS, implements standard security headers, and uses reCAPTCHA to protect forms, indicating a solid security posture. However, the absence of a visible security policy or vulnerability disclosure page suggests room for improvement in transparency and incident response readiness. The WHOIS data is unavailable due to a malformed query response, limiting domain registration trust assessment, but the official nature of the site and consistent branding mitigate concerns. Overall, the site is professional, trustworthy, and serves its public function effectively.

L

Landeshauptstadt Kiel

kiel.de

62

The website kiel.de serves as the official digital portal for the Landeshauptstadt Kiel, providing extensive information and services related to the city’s governance, culture, health, environment, education, and public administration. It targets residents, visitors, and stakeholders interested in the city’s offerings and developments. The site is well-structured with comprehensive content in German, reflecting a mature and professional public sector digital presence. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and Matomo analytics for visitor tracking. The CMS identified is PANSITE (TM), indicating a specialized content management system for municipal websites. The site is mobile optimized and accessible, with good SEO practices evident from meta tags and Open Graph data. Security posture is adequate with HTTPS enabled and deferred script loading, but lacks visible security headers and explicit security policies or incident response contacts. Privacy compliance is limited due to absence of explicit privacy and cookie policies or consent mechanisms. WHOIS data aligns well with the official city identity, confirming legitimacy and trustworthiness. Overall, the site is a reliable and authoritative source for city-related information but would benefit from enhanced privacy and security disclosures.

B

Bartels-Langness

bela.de

66

Bartels-Langness is a major German food retail and wholesale company, ranking among the top 15 in the country. The company operates multiple retail brands including famila and Markant, and has diversified business lines such as beverage logistics and tank station distribution. The website reflects a mature digital presence with comprehensive business news, corporate information, and customer engagement features. Technically, the site is built on WordPress with a modern theme and plugins, hosted by a reputable German provider. Security posture is solid with HTTPS, cookie consent, and CAPTCHA protections, though some HTTP security headers could be improved. Privacy compliance is well addressed with a detailed privacy policy and cookie management. Overall, the site is professional, trustworthy, and well-optimized for its audience.

I

Investitionsbank Schleswig-Holstein

ib-sh.de

67

The Investitionsbank Schleswig-Holstein (IB.SH) is a government-affiliated promotional bank serving the Schleswig-Holstein region in Germany. It provides advisory, funding, and financing services to a broad audience including private individuals, companies, municipalities, and public institutions. The bank holds a strong market position, evidenced by its AAA credit rating from Fitch Ratings, and emphasizes sustainability and digital transparency in its operations. The website reflects a professional and comprehensive digital presence with multiple customer-focused services and extensive content in German, targeting diverse customer groups. Technically, the site is built on TYPO3 CMS, with good mobile optimization and accessibility features, and employs modern web technologies. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are not publicly disclosed. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

A

ADLERSHORST Baugenossenschaft eG

adlershorst.de

41

ADLERSHORST Baugenossenschaft eG operates as a large regional housing cooperative in the northwest of the Hamburg metropolitan area, managing over 5,600 residential units and serving more than 9,200 members. The company focuses on providing rental housing, new construction projects, property management, and investment opportunities, targeting tenants, prospective tenants, property owners, investors, and cooperative members. Their market position is strong within their regional niche, supported by a comprehensive digital presence and member engagement through reports and social media. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery and Slick Slider, delivering a responsive and well-structured user experience. Hosting appears to be managed by a German provider (WTNet), ensuring good performance and regional compliance. The site implements HTTPS and cookie consent mechanisms, reflecting GDPR awareness and privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data and DNS configuration are consistent with a legitimate business entity, enhancing trustworthiness. Overall, the website presents a professional, secure, and privacy-conscious digital front for ADLERSHORST Baugenossenschaft eG, with room for improvement in formal security documentation and transparency. The risk profile is low, with no signs of malicious activity or content safety concerns.

P

Peter Kölln GmbH & Co. KGaA

peterkoelln.de

67

Peter Kölln GmbH & Co. KGaA operates a professional e-commerce website specializing in oat-based food products such as flakes, granola, muesli, and porridge. The company is positioned as a reputable German brand with a strong market presence in the retail food sector. The website provides comprehensive product information, recipes, and B2B services, targeting general consumers interested in healthy oat products. Technically, the site is built on the Shopify platform, leveraging modern JavaScript frameworks like Alpine.js and Finsweet attributes, and integrates Microsoft Clarity for analytics. The infrastructure is robust, hosted on Shopify's CDN, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced, multiple security headers present, and no exposed sensitive data. Privacy compliance is well addressed with GDPR-compliant cookie consent and clear privacy policies. However, the site lacks a dedicated security policy and incident response information, which could enhance trust further. Overall, the website is professional, secure, and trustworthy, with minor areas for improvement in security transparency.

W

Wohnungsbaugenossenschaft Wankendorfer

wankendorfer.de

45

Wohnungsbaugenossenschaft Wankendorfer is a large housing cooperative based in Schleswig-Holstein, Germany, providing modern and affordable rental apartments, commercial leasing, and property management services. The company emphasizes social solidarity and excellent tenant service, supported by a professional and well-structured website. Their market position is strong as one of the largest cooperatives in the region, targeting tenants, property owners, and prospective renters. The website offers comprehensive information about their services, locations, and digital tenant tools such as a dedicated app.

S

Stadtwerke Kiel AG

stadtwerke-kiel.de

70

Stadtwerke Kiel AG is a regional energy utility provider serving Schleswig-Holstein and Hamburg, offering electricity, gas, district heating, water, photovoltaic solutions, and e-mobility services. The company positions itself as a local, customer-focused energy supplier with comprehensive service offerings and a strong regional presence. The website reflects a mature digital infrastructure built on TYPO3 CMS, integrating modern technologies such as Google Maps API, Google Tag Manager, and Usercentrics for consent management. The site is well-optimized for mobile and accessibility, providing a professional user experience with clear navigation and rich content. Security posture is strong with HTTPS enforcement, security headers, and secure form handling, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the domain registration data aligns well with the business identity, indicating a trustworthy and legitimate online presence.

E

Evangelisch-Lutherische Kirche in Norddeutschland

nordkirche.de

61

The Evangelisch-Lutherische Kirche in Norddeutschland (Nordkirche) operates as a large non-profit religious organization serving the regions of Hamburg, Schleswig-Holstein, and Mecklenburg-Vorpommern in Germany. The website provides comprehensive information about their religious services, community engagement, pastoral care, and digital initiatives. It targets Christians and residents in Northern Germany, positioning itself as a leading regional Protestant church organization. The content is well-structured, professionally designed, and consistent with the organization's mission and audience. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including JavaScript and CSS, with good mobile optimization and accessibility features. SEO practices are well implemented, including meta tags, Open Graph, and JSON-LD structured data. The site uses Piwik (Matomo) for analytics, indicating moderate user tracking with basic privacy compliance. No blocking or WAF challenges were detected, and the site is fully accessible. From a security perspective, HTTPS is implied though explicit security headers are not detected in the provided data. No exposed sensitive data or vulnerabilities were found in the HTML content. However, the site lacks explicit security policies and incident response information. Privacy compliance is good with a detailed privacy policy but lacks a cookie consent mechanism. Contact information is clearly provided, enhancing trust and credibility. Overall, the website demonstrates a solid digital presence with good content quality, technical implementation, and business credibility. Security posture is adequate but could be improved with enhanced headers and documented policies. Privacy compliance is mostly met but would benefit from explicit cookie consent. The domain registration data aligns well with the organization's identity, supporting legitimacy and trustworthiness.

W

Waldemar Behn GmbH

behn.de

47

Waldemar Behn GmbH is a well-established beverage wholesaler and retailer based in Schleswig-Holstein, Germany, with a history dating back to 1892. The company offers a wide assortment of beverages including spirits and operates an online shop alongside employer branding initiatives. The website is professionally designed, mobile-optimized, and provides clear navigation with multilingual support (German and English). The digital infrastructure is built on Silverstripe CMS with Matomo analytics for privacy-conscious visitor tracking. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and published security policies. Overall, the site is trustworthy and compliant with GDPR, though contact information is not directly visible in the provided content.

A

Alliance Of Digital Builders

aodb.com

63

Alliance Of Digital Builders (AODB) is a French digital services company specializing in secure, custom digital solutions including internet, extranet, e-commerce, cloud, and DevOps services. With approximately 18 years of experience and nearly 4000 projects, AODB holds a strong market position as a leader in Drupal solutions in France, serving notable clients including CAC 40 companies. The website reflects a mature digital infrastructure leveraging Drupal 10, React, Symfony, and cloud technologies such as AWS. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though no explicit security policy or incident response contacts are published. Overall, the site is professional, well-structured, and compliant with GDPR requirements, supporting a high trustworthiness rating.

K

KRÁLOVSTVÍ PERNÍKU, z. s.

pernikova-chaloupka.cz

54

KRÁLOVSTVÍ PERNÍKU, z. s. is a small non-profit cultural organization operating the Perníková chaloupka museum and offering experiential programs and accommodation in the Pardubice region of the Czech Republic. The website promotes traditional events such as the Svatováclavská tlačenice perníku and provides detailed information about these cultural activities. The organization targets families, tourists, and cultural enthusiasts interested in traditional Czech heritage. Technically, the website uses a modern frontend stack including jQuery and Bootstrap, with good mobile optimization and SEO practices. However, it lacks advanced security headers and privacy/cookie policies, which are important for compliance and user trust. The WHOIS data is missing, which reduces domain trustworthiness despite the legitimate and consistent content. Overall, the site is functional, informative, and safe for general audiences.

D

Destinační společnost Hradecko, z. s.

hkinfo.cz

45

The website www.hkinfo.cz serves as the official tourist information center for Hradec Králové, Czech Republic, operated by Destinační společnost Hradecko, z. s. It provides comprehensive local cultural event calendars, ticket sales, guided tours, souvenirs, and regional products, targeting tourists and local residents interested in cultural and leisure activities. The site is well-branded, consistent, and integrates multiple partner organizations, enhancing its credibility within the local tourism ecosystem. Technically, the site uses a variety of JavaScript libraries and frameworks including jQuery, Bootstrap, and Google Analytics, with a CMS identified as Mijahoo 2.05. The site is moderately optimized for performance and mobile use, with good SEO practices evident.

D

Destinační společnost Hradecko, z. s.

poznejhradecko.cz

37

Poznej Hradecko is a regional tourism information platform operated by Destinační společnost Hradecko, z. s., a non-profit association focused on promoting cultural heritage and attractions in the Hradecko region of the Czech Republic. The website offers an interactive map with categorized points of interest including castles, museums, folk architecture, entertainment venues, accommodation, and dining options. It supports multiple languages, enhancing accessibility for international visitors. Technically, the site is built on Angular 8 with OpenLayers for mapping and integrates Google Tag Manager for analytics. The design is professional and mobile-optimized, providing a good user experience. Security posture is moderate with HTTPS enabled but lacks explicit security headers and detailed security policies. Privacy and cookie policies are present, indicating basic GDPR compliance. WHOIS data is unavailable, likely due to privacy protection, but no suspicious indicators were found. Overall, the site is a credible and useful resource for tourists, though improvements in security and contact transparency are recommended.

F

FiftyFifty kreativní agentura s.r.o.

fifty-50.cz

58

FiftyFifty kreativní agentura s.r.o. is a Czech-based creative marketing agency specializing in design, communication, and strategic marketing services. Established in 2012, the company has positioned itself as a leading regional marketing agency in the Královéhradecký region, offering a comprehensive portfolio including branding, online marketing, and audio/video production. The website reflects a professional and consistent brand image supported by multiple industry awards and recognitions. Technically, the website employs modern web technologies such as JavaScript with StimulusJS controllers and deferred script loading to optimize performance. The presence of Google Tag Manager indicates a mature approach to analytics and marketing tracking. Mobile optimization and SEO practices are well implemented, although accessibility features are basic. Hosting is managed by REG-ACTIVE24, a Czech registrar, consistent with the business location. From a security perspective, the site uses HTTPS and implements a GDPR-compliant cookie consent mechanism. However, no explicit security headers were detected, and no incident response or security policy information is provided. No vulnerabilities or exposed sensitive data were found in the analysis. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website demonstrates a solid business credibility and privacy compliance posture with room for improvement in security best practices. The content is safe for general audiences, and the site is fully accessible without WAF or blocking mechanisms.

The website px-site.com currently serves as a placeholder page hosted by SvetHostingu.cz, indicating that no actual website content has been uploaded. The domain is registered since 2017 with a reputable Czech registrar and is hosted on Czech name servers. The site offers no business information, contact details, or policies, limiting its utility and trustworthiness. Technically, the site lacks HTTPS and security headers, and no modern web technologies or analytics are detected. Security posture is weak due to missing SSL and absence of privacy or cookie policies. Overall, the site appears inactive or under development, with minimal digital maturity and no evident business operations or customer engagement.

T

Tomáš Kořínek

tomaskorinek.cz

54

Tomáš Kořínek is a seasoned web developer and consultant based in the Czech Republic, offering custom web development, website improvements, and consulting services with over 19 years of experience. The website showcases a professional portfolio of over 170 projects, emphasizing personalized service and technical expertise. The business operates as a small entity focused on delivering tailored web solutions to clients seeking quality and reliability. Technically, the website is well-built using modern web standards, responsive design, and optimized images, hosted by a reputable Czech provider. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and published policies. Overall, the site is trustworthy, professional, and user-friendly, with clear contact channels and a transparent business presence.

S

Stand For Ukraine

standforukraine.com

57

Stand For Ukraine is a non-profit donation aggregator website founded in 2022 to support Ukraine amid Russian military aggression. It provides a curated list of verified military and humanitarian organizations, facilitating donations through direct links. The platform targets a global audience of supporters and donors, offering multilingual support and clear categorization of aid organizations. The website is built on modern technologies including React and Next.js, hosted with Cloudflare DNS, and optimized for mobile devices with good SEO practices. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, representing compliance gaps. Contact information is limited to an email address and social media links. Overall, the site is trustworthy, professional, and serves a critical humanitarian function.

Indexhibit.org is a niche technology website offering an open source portfolio content management system (CMS) targeted at artists, photographers, and designers. The site provides access to the CMS software via GitHub and community support through a forum. The business model centers on providing a lightweight, customizable portfolio CMS solution for individual users and small creative professionals. The website has been active since 2006, indicating a stable presence in its niche market. Technically, the website uses standard HTML5, CSS3, and JavaScript with a custom CMS named Indexhibit. Hosting is provided by DreamHost, a common provider for small to medium websites. The site shows basic mobile optimization and SEO practices but lacks advanced technical features or frameworks. No analytics or advertising scripts were detected, indicating a minimalistic approach to tracking and monetization. From a security perspective, the domain is registered with eNom, LLC since 2006 with clientTransferProhibited status, which is a positive trust indicator. However, DNSSEC is not enabled, and no security headers were detected in the provided data. There is no visible privacy policy, cookie policy, or terms of service, which are important for compliance and user trust. No incident response or vulnerability disclosure information is published. The site does not appear to be behind a WAF or security challenge, and no vulnerabilities or exposed sensitive data were found. Overall, the website is functional and trustworthy for its niche but lacks comprehensive privacy and security policies. Strategic improvements in security headers, policy publication, and DNSSEC implementation would enhance its security posture and compliance. The site’s minimal tracking and advertising footprint support a privacy-respecting user experience.

B

Best VPN

bestvpn.org

62

BestVPN.org is a specialized content platform focused on providing detailed reviews, guides, and comparisons of VPN services to a broad audience seeking online privacy and security solutions. The website operates primarily through affiliate marketing partnerships with major VPN providers, offering users curated recommendations and educational content. Technically, the site is built on WordPress, leveraging common SEO and analytics tools, and is hosted with Cloudflare DNS services ensuring good performance and security. The site is mobile-optimized with a professional design and clear navigation, supporting a positive user experience. Security-wise, the site enforces HTTPS and domain lock statuses but lacks DNSSEC and explicit security policies or incident response information on the site. Privacy compliance is limited due to the absence of visible privacy and cookie policies in the provided content. Overall, the website is trustworthy and well-established with a domain age consistent with its business history, but it could improve transparency and compliance by adding explicit privacy and security documentation.

B

Bürocratik

burocratik.com

65

Bürocratik is a digital branding and design agency presenting itself as a transdisciplinary practice with global reach and critical acclaim. The website showcases a professional and modern digital presence built on Nuxt.js and Vue.js frameworks, optimized for performance and mobile responsiveness. Despite the high-quality content and design, the absence of WHOIS domain registration data raises concerns about the domain's legitimacy and registration status. Security posture is generally good with HTTPS enabled, but lacks explicit security headers and formal privacy or cookie policies. The site uses analytics tools such as Umami and Google Analytics without visible consent mechanisms, indicating potential privacy compliance gaps. Overall, the business appears credible and professional, but domain registration inconsistencies and missing compliance documentation suggest areas for improvement.

P

Polar Multimedia

polarmultimedia.cz

55

Polar Multimedia is a Czech Republic-based multimedia company specializing in a broad range of services including TV program and video production, multimedia projects, 3D virtual studios, live broadcasts, graphics and animations, virtual reality, web and application development, event organization, and broadcasting of TV stations including their own station POLAR. The company targets businesses and organizations seeking integrated multimedia solutions and broadcasting services. Their market position appears regional with a focus on comprehensive multimedia offerings. Technically, the website is built on WordPress CMS using popular plugins such as WPBakery Page Builder and Slider Revolution, with integration of Google services like Google Analytics and Tag Manager. The site is mobile optimized and uses HTTPS with good SSL configuration. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. There are no detected vulnerabilities in the visible content, but the absence of security headers and privacy/cookie policies indicates gaps in compliance and security best practices. The lack of WHOIS data limits domain legitimacy verification, though the professional website and active social media presence support the company's credibility. Overall, the website is professional and functional with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and domain registration transparency are recommended to enhance trust and compliance.

S

SmartEmailing 2.1

se-forms.cz

52

The website se-forms.cz hosts a login page for SmartEmailing 2.1, an email marketing platform primarily targeting businesses and marketers seeking email campaign management solutions. The site offers a user login form with client-side validation and promotes a new application portal at portal.smartemailing.cz. The business appears to be a small technology company founded around 2019, operating in the Czech Republic. The domain registration data aligns well with the business profile, indicating legitimacy and consistency. Technically, the site uses a modern tech stack including jQuery, Bootstrap, Parsley.js for form validation, and the Nette PHP framework. Hosting and DNS are managed via Cloudflare, providing performance and security benefits. The site is moderately optimized for mobile and accessibility, with a clean and professional design. However, SEO and accessibility features are basic. From a security perspective, the site uses HTTPS and includes client-side validation but lacks visible security headers such as CSP or HSTS. No privacy or cookie policies are present, which is a compliance gap under GDPR. The presence of a third-party tracking pixel (Leady) indicates moderate user tracking. No contact or incident response information is provided, limiting transparency. Overall, the website is functional and professionally designed but would benefit from enhanced security headers, explicit privacy and cookie policies, and improved transparency regarding contact and incident response. These improvements would strengthen compliance and user trust.

D

DroitThemes

droitthemes.com

49

DroitThemes is a specialized provider of premium WordPress themes, plugins, and templates, focusing on enhancing the WordPress ecosystem with high-quality Elementor addons and multipurpose themes. Established in 2016, the company targets WordPress users and developers seeking professional tools to build websites efficiently. Their market position is supported by positive customer testimonials, active social media presence, and partnerships with marketplaces like Themeforest. Technically, the website is built on WordPress with modern plugins such as Elementor and Yoast SEO, integrating advanced marketing and analytics tools including Google Analytics, Facebook Pixel, and Twitter Ads. The infrastructure is hosted with NameCheap and uses secure HTTPS connections, though DNSSEC is not enabled. Security measures include reCAPTCHA on forms and domain transfer protection, but the site lacks some HTTP security headers and explicit security policies. Privacy compliance is partially met with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the website demonstrates a good balance of business credibility, technical implementation, and security posture, suitable for its niche audience.

M

MultiSport Benefit, s.r.o.

multisport.cz

58

MultiSport Benefit, s.r.o. operates a well-established employee benefit program in the Czech Republic, providing access to over 1900 sports and relaxation facilities via the MultiSport card. The company targets employers, employees, students, and partners, positioning itself as a leading provider in the corporate wellness sector. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. Technically, the site is built on WordPress, leveraging modern analytics and marketing tools, hosted on Azure DNS infrastructure, and optimized for mobile and SEO. Security posture is strong with HTTPS, cookie consent, and no visible vulnerabilities, though formal security policies and incident response details are absent. Overall, the domain registration data aligns with the business history, supporting legitimacy and trustworthiness.

A

ArtFocus

artlogo.cz

57

ArtLogo.cz is a Czech-based professional graphic design service specializing in logo creation and branding solutions. The company offers a range of tiered logo design packages tailored to different client needs, including express delivery options. The website demonstrates a solid market presence with a portfolio of references and a clear focus on creative, custom logo design services. Technically, the site is built on a custom CMS (ArtFocus Admin System) and integrates multiple third-party analytics and marketing tools such as Google Analytics, CrazyEgg, and Facebook Pixel. The site is mobile responsive and well-structured, providing a good user experience. However, the absence of privacy and cookie policies, lack of visible security headers, and missing WHOIS domain registration data reduce the overall trust and compliance posture. Security practices could be improved by implementing standard HTTP security headers and enhancing privacy compliance. Overall, the site is functional and professional but would benefit from stronger security and compliance measures.

L

Lead Media s.r.o.

dognet.sk

45

Dognet.sk operates as a leading affiliate marketing network focused on the Central and Eastern European and Balkan markets. The company, legally known as Lead Media s.r.o., has been active for over 13 years, providing performance-based marketing services primarily to e-commerce businesses and publishers. Their business model is based on CPA, ensuring advertisers pay only for real business outcomes. The website is professionally designed, multilingual, and rich in content, showcasing strong client testimonials and trust signals such as high Google and Facebook ratings. Technically, the site is built on WordPress with modern plugins and libraries, ensuring good performance and mobile optimization. Security practices include HTTPS enforcement, cookie consent mechanisms, and use of reCAPTCHA, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates a mature digital presence with strong business credibility and compliance with GDPR.

R

Retino

retino.com

54

Retino is a SaaS company specializing in automating post-purchase care for e-commerce businesses, offering shipment tracking and returns management solutions. The website presents a professional and modern interface, targeting online stores seeking to improve customer satisfaction and operational efficiency. The technical infrastructure leverages modern web technologies including Google Tag Manager, reCAPTCHA Enterprise, and multiple tracking pixels, indicating a mature digital marketing and analytics setup. Security posture is solid with HTTPS and form protections, though explicit security policies and incident response contacts are absent. The missing WHOIS data is a notable anomaly that slightly impacts trust but does not overshadow the professional business presence. Overall, Retino demonstrates a strong market position in e-commerce automation with room for enhanced transparency in security and compliance documentation.

N

NETservis s.r.o.

webredakce.cz

44

Webredakce.cz is a Czech Republic-based technology company operated by NETservis s.r.o., offering a comprehensive content management system (CMS) designed for easy management of websites and e-shops. The platform emphasizes responsive design, multilingual support, and custom module development, targeting businesses and individuals seeking efficient web content management solutions. The company showcases reputable client references, indicating a solid market presence in the CMS domain. Technically, the website employs common web technologies including jQuery, Fancybox, Google Analytics, and Google Tag Manager, with a custom CMS backend. The site is mobile-optimized with responsive design and includes client-side form validation and CAPTCHA tokens to mitigate spam. However, the use of an older jQuery version and lack of explicit security headers suggest areas for technical improvement. From a security perspective, the site uses HTTPS and implements basic form security measures but lacks visible security headers and published privacy or cookie policies, which are important for GDPR compliance. The absence of WHOIS data for the domain raises concerns about domain legitimacy verification, impacting overall trustworthiness. No WAF or blocking mechanisms were detected, and the site content is safe and business-oriented. Overall, Webredakce.cz presents a professional and functional CMS offering with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and domain registration transparency are recommended to enhance trust and compliance.

N

NETservis s.r.o.

netservis.cz

53

NETservis s.r.o. is a Czech-based technology company specializing in custom web development, including websites, e-shops, and web applications, with over 20 years of market presence. The company targets businesses seeking tailored digital solutions and integration with external systems such as ERP and CRM. Their portfolio includes significant clients and certifications, indicating a strong market position. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and a custom CMS named Webredakce. The site is mobile-optimized and includes cookie consent mechanisms, reflecting digital maturity. Security posture is solid with HTTPS and form validation, though some security headers and explicit policies could be improved. Overall, the site is professional and trustworthy, though the absence of WHOIS data slightly reduces domain trust. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility.

M

Město Rožnov pod Radhoštěm

roznov.cz

61

Město Rožnov pod Radhoštěm operates an official municipal website serving residents, businesses, and tourists with city news, event calendars, and citizen services. The site is well-branded and provides comprehensive local government information in Czech with language options for English and German. Technically, the site uses a Public4u CMS platform with common web technologies including jQuery and Google Analytics, and it is mobile optimized with good accessibility and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and explicit security policies are lacking. WHOIS data is unavailable, which slightly reduces trustworthiness, but the official content and social media presence support legitimacy. Overall, the site is a reliable government resource with moderate technical sophistication and good user experience.

M

Městská policie Brno

mpb.cz

60

Městská policie Brno is the official municipal police authority serving the city of Brno, Czech Republic. The website provides comprehensive information about their law enforcement services, animal shelter operations, public prevention programs, employment opportunities, and media communications. The target audience primarily includes residents and visitors of Brno seeking official police information and services. The business operates as a government entity with a medium organizational size and a clear public service mandate. Technically, the website is built on the Public4u CMS platform and utilizes common web technologies such as jQuery and Google Analytics for tracking. The site is mobile optimized with good navigation and SEO practices, although some accessibility features are basic. Performance is moderate, and the site uses HTTPS with a cookie consent mechanism, indicating attention to privacy compliance. From a security perspective, the site enforces HTTPS but lacks visible security headers, which could be improved. No critical vulnerabilities or exposed sensitive data were detected. GDPR compliance is evident with a dedicated privacy policy and cookie consent. However, no explicit security or incident response policies are publicly available. The WHOIS data is missing, which reduces domain registration trustworthiness, but the official nature of the site and consistent branding mitigate concerns. Overall, the website is professional, trustworthy, and serves its public service role effectively. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to strengthen security posture and trust.

S

Sdružení Český ráj

regionalniprodukt.cz

58

The website www.regionalniprodukt.cz represents Sdružení Český ráj, a regional association promoting and certifying local artisanal and agricultural products from the Český ráj region in the Czech Republic. The site serves as a platform to showcase certified producers, their products, and related news, targeting consumers interested in authentic regional goods. The business model focuses on certification, promotion, and support of local producers, positioning itself as a niche regional leader. Technically, the website uses a Czech CMS called Public4u, incorporates modern JavaScript libraries such as jQuery and Leaflet for interactive maps, and integrates Google Tag Manager for analytics. The site is mobile-optimized with good navigation and content quality. Security-wise, the site enforces HTTPS but lacks security headers and a vulnerability disclosure policy. Privacy compliance is basic with a cookie consent mechanism but no visible privacy policy page. The absence of WHOIS data for the domain reduces trust in domain legitimacy, although the website content and contact information appear professional and credible. Overall, the site is functional and trustworthy for its purpose but would benefit from enhanced security and compliance documentation.

M

Městská část Praha 11

praha11.cz

65

Městská část Praha 11 operates as the official municipal government portal for the Praha 11 district in the Czech Republic. The website provides comprehensive information about local government services, community events, social programs, and administrative contacts. It serves residents and visitors by offering access to citizen accounts, public notices, and various municipal resources. The site maintains a consistent brand identity and targets a general audience interested in local governance and community engagement. Technically, the website employs a mature infrastructure using the Public4u CMS platform, enhanced with jQuery, Google Tag Manager, and Google Analytics for tracking and performance. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. However, some security headers are missing, and no explicit security policy or incident response contacts are published. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain registration transparency, but the official nature and content quality support legitimacy. Overall, the site demonstrates a solid security posture with room for improvement in security headers and incident response transparency. The overall risk assessment is low, with recommendations to enhance security headers, publish security policies, and maintain regular audits of third-party scripts. The website is trustworthy and professionally maintained, serving as a reliable information source for the Praha 11 community.

A

as4u.cz, s.r.o.

tanvald.eu

58

The website www.tanvald.eu serves as a comprehensive local tourism and leisure portal for the town of Tanvald in the Czech Republic. It provides visitors and residents with information on local events, tourist attractions, services, and cultural activities. The site is managed using the Public4u CMS platform and integrates Mapy.cz for mapping services. The content is primarily in Czech with language options for English, German, and Polish, targeting tourists and local community members. The business behind the site appears to be a small entity, likely linked to local government or tourism organizations, with as4u.cz, s.r.o. involved in content management or technical support. Technically, the website uses standard web technologies including jQuery and jQuery UI, and it is moderately optimized for mobile devices. The site structure is clear and navigation is user-friendly, with a good level of content quality and relevance. However, there is room for improvement in accessibility and SEO optimization. Security-wise, the site uses HTTPS but lacks explicit security headers and advanced protections such as CSP or HSTS. Cookie consent mechanisms are implemented, indicating some level of privacy compliance, though no formal privacy or security policies are prominently provided. Overall, the security posture is moderate with no critical vulnerabilities detected in the visible content. The WHOIS data is privacy protected by EURid, which is common for domains in the .eu space, and no suspicious patterns were found. The site is safe for general audiences, with no adult or questionable content. Strategic recommendations include enhancing security headers, formalizing privacy and security policies, and improving accessibility and SEO to strengthen trust and compliance.

M

Město Bakov nad Jizerou

bakovnj.cz

61

Město Bakov nad Jizerou operates an official municipal website serving residents, tourists, and local businesses by providing comprehensive information about the town, including news, events, administrative contacts, and public services. The site positions itself as a local government authority with a focus on transparency and community engagement. Technically, the website employs a proprietary CMS (Public4u) alongside common JavaScript libraries such as jQuery and Swiper.js, delivering a moderately performant and mobile-optimized experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in implementing security headers and explicit incident response policies. The absence of WHOIS data slightly impacts trust but is mitigated by clear contact information and official content. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

Statutární město Prostějov

turistaprostejov.cz

59

The website www.turistaprostejov.cz serves as the official tourist portal for the city of Prostějov, Czech Republic. It provides comprehensive information for visitors including cultural events, sports, accommodation, dining, and local attractions. The portal targets tourists and residents interested in exploring the city and its surroundings, positioning itself as a key resource for local tourism and leisure activities. The business model is informational and service-oriented, supported by the city government and local tourism associations. Technically, the site is built on the Public4u CMS platform and uses common web technologies such as jQuery and Microsoft Clarity for analytics. The site is served over HTTPS, ensuring secure communication, and includes a cookie consent mechanism compliant with GDPR. The design is responsive and user-friendly, with clear navigation and relevant content. However, some modern security best practices like security headers and incident response disclosures are missing. From a security perspective, the site maintains a good baseline with HTTPS and cookie consent but lacks advanced security headers and published security policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the presence of official city contact details and consistent branding supports legitimacy. No critical vulnerabilities or adult content were detected, and the site appears safe for general audiences. Overall, the website is a well-maintained, informative portal with moderate technical sophistication and a solid business purpose. Improvements in security posture and domain registration transparency would enhance trust and compliance.

M

Městský úřad Louny

mulouny.cz

64

The website www.mulouny.cz serves as the official online presence of the city of Louny and its Municipal Office, providing a comprehensive portal for citizens to access government services, public announcements, and contact information. The site targets local residents and stakeholders, offering key services such as document downloads, office hours, social care information, and online reservation systems. The business model is that of a government municipal service portal, positioning itself as a trusted source of local administrative information. Technically, the site employs a traditional web stack with jQuery and jQuery UI libraries, managed via the Public4u CMS platform. It integrates Google Tag Manager for analytics and tracking, and the site is served over HTTPS with good mobile optimization and basic accessibility features. The site structure is clear and user-friendly, with consistent branding and good content quality. From a security perspective, the website benefits from HTTPS encryption and secure form handling but lacks some advanced security headers such as Content Security Policy and HSTS. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, reflecting GDPR awareness. However, the absence of WHOIS data and domain registration details introduces some uncertainty regarding domain legitimacy, though the official nature of the content and government identifiers mitigate this concern. Overall, the website presents a moderate to high level of digital maturity and security posture suitable for a municipal government portal. Strategic improvements in security headers, incident response transparency, and domain registration visibility would enhance trust and resilience.

Městské muzeum v Čelákovicích is a small, local municipal museum established in 1903, serving the Prague-East district in the Czech Republic. The museum offers cultural and historical exhibitions, public events, and services such as a tourist information center and venue rentals. The website reflects a professional and consistent brand presence with clear contact information and multilingual support. Technically, the site uses the Public4u CMS platform with jQuery and related libraries, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. The absence of WHOIS data limits domain registration trust analysis, but the website content and contact details support legitimacy. Overall, the site is well-maintained and trustworthy for its intended audience.

Obec Bedřichov is the official municipal government website serving the village of Bedřichov in the Czech Republic. It provides comprehensive local government information, including public notices, official documents, community events, and tourism resources. The site targets local residents and tourists, offering services such as waste management, local fee payments, and contact information for municipal offices. The website is built on the Public4u CMS platform and uses common web technologies like jQuery and JavaScript. It features a clear navigation structure and is mobile optimized, providing a good user experience. From a security perspective, the website uses HTTPS and implements GDPR-compliant privacy policies and cookie consent mechanisms. However, no explicit security headers were detected in the provided data, and no incident response or vulnerability disclosure information is available. The absence of WHOIS registration data is a notable gap, reducing the ability to fully verify domain legitimacy. Despite this, the presence of official contact details and consistent branding supports the site's authenticity. Overall, the website demonstrates a moderate to good level of technical maturity and security posture, with room for improvement in security headers, incident response transparency, and SEO optimization. The site is safe for general audiences, with no adult or questionable content detected. Strategic recommendations include enhancing security headers, updating libraries, and adding incident response contacts to strengthen trust and compliance.

S

Střední uměleckoprůmyslová škola sklářská

supss.cz

66

Střední uměleckoprůmyslová škola sklářská is a specialized secondary educational institution located in Železný Brod, Czech Republic, focusing on glass art, product design, applied chemistry, and glass technology. The school serves students and the local community by providing vocational education, public events, and digital services such as online student management through the Bakaláři system. The website reflects a well-structured and professionally maintained digital presence with clear navigation and relevant content for its audience. Technically, the website uses a combination of jQuery, Google Tag Manager, and the Public4u CMS platform. It demonstrates good mobile optimization and moderate performance. The site implements GDPR compliance and cookie consent mechanisms, indicating awareness of privacy regulations. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. The absence of WHOIS data due to privacy protection is noted but does not detract from the legitimacy of the institution, as corroborated by consistent contact information and social media presence. No vulnerabilities or malicious content were detected. Overall, the website is trustworthy, professionally presented, and compliant with privacy standards. Strategic improvements in security headers and incident response transparency would enhance its security posture further.

The website www.moto-vychodnicechy.cz serves as a regional motorcycle travel guide for Eastern Bohemia, curated by the Královéhradecká krajská centrála cestovního ruchu, a regional tourism authority. It offers curated motorcycle routes, travel tips, photo galleries, and news updates, targeting motorcycle tourists and enthusiasts interested in exploring the region. The site is supported by official regional tourism portals and collaborates with the motorcycle magazine Motocykl, enhancing its credibility and content quality. Technically, the site uses a mix of jQuery, Google Analytics, Google Tag Manager, and Mapy.cz APIs, running on the Public4u CMS platform. The site is mobile optimized with moderate performance and basic accessibility features. Security posture is good with HTTPS enforced and no visible vulnerabilities, though it lacks some security headers and formal privacy/cookie policies. Overall, the site is trustworthy and professional, but could improve compliance and security transparency.

A

as4u.cz, s.r.o.

pojizeri.cz

61

The website www.pojizeri.cz serves as an informational portal for the Mikroregion Pojizeří, a voluntary association of municipalities in the Czech Republic. It provides visitors and residents with news, event calendars, tourism information, and details about member municipalities. The site is positioned as a local government or non-profit community resource, targeting residents and tourists interested in the region. The business model focuses on community engagement and regional promotion rather than commercial activities. Technically, the website is built on the Public4u CMS platform and utilizes jQuery and jQuery UI libraries. The site is accessible and moderately optimized for mobile devices, though accessibility features are basic. SEO and performance optimizations are present but could be improved. The site uses HTTPS, but no advanced security headers were detected, and no hosting provider information is available from the data. From a security perspective, the site shows moderate maturity. HTTPS is enforced, but the absence of security headers and lack of privacy and cookie consent policies indicate room for improvement. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is unavailable, suggesting privacy protection or domain registration issues, which reduces transparency and trustworthiness. No incident response or vulnerability disclosure information is provided. Overall, the site is functional and professional for its purpose but would benefit from enhanced privacy compliance, improved security practices, and greater transparency in domain registration to increase trust and security posture.

S

Statutární město Prostějov

prostejov.eu

62

Statutární město Prostějov operates an official municipal website serving the city of Prostějov in the Czech Republic. The site provides comprehensive information and services for citizens, businesses, and visitors including municipal administration details, news, event calendars, and interactive guides. The website targets local residents, entrepreneurs, and tourists, positioning itself as a trusted government portal. Technically, the site uses the Public4u CMS platform with modern JavaScript libraries such as jQuery and Swiper.js, and integrates Google Tag Manager and Google Translate for analytics and multilingual support. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks advanced security headers and explicit security policies. WHOIS data is privacy protected by EURid, which is common for .eu domains, and does not raise legitimacy concerns given the official nature of the domain and consistent branding. Overall, the website is professional, trustworthy, and compliant with basic privacy regulations, though it could improve security posture and transparency in policies.

The website www.bedrichov.cz serves as a regional tourism portal for the municipality of Bedřichov in the Czech Republic. It provides comprehensive information on local tourism activities, accommodation, events, and cultural highlights, targeting visitors and tourists interested in the Jizerské hory region. The site is supported by local government and regional tourism partners, reflecting a small but focused business model centered on hospitality and community engagement. The presence of multiple partner links and official municipal references enhances its credibility within the local tourism ecosystem. Technically, the site is built on the Public4u CMS platform, utilizing jQuery and JavaScript libraries to deliver a responsive and content-rich experience. The design is professional with good navigation and mobile optimization, although accessibility features are basic. Security posture is moderate; HTTPS is implied but no explicit security headers were detected in the provided data. Privacy compliance is limited, with no dedicated privacy or terms of service pages found, though a cookie consent mechanism is present. The absence of WHOIS data limits domain trust verification, but the website content and partner ecosystem suggest legitimacy. Overall, the site is a functional and informative regional tourism resource with room for improvement in security and privacy transparency.

M

Městský úřad Řevnice

revnice.cz

51

The website www.revnice.cz serves as the official online presence of the municipal government of Řevnice, Czech Republic. It provides residents and visitors with comprehensive information about local government operations, cultural and sporting events, administrative services, and community resources. The site is well-structured with clear navigation and includes features such as an event calendar, e-podatelna for electronic submissions, and tourist information, positioning it as a key resource for the local community. Technically, the site employs a modern technology stack including jQuery, jQuery UI, and the Public4u CMS platform. It integrates mapping services via the Mapy.cz API and uses Smartlook for user behavior analytics. The site is mobile-optimized and accessible, with a responsive design and voice assistant features enhancing usability. However, some security best practices such as the implementation of security headers are not evident. From a security perspective, the site enforces HTTPS and uses secure form submissions, but lacks visible security headers and explicit security or incident response policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the content and official indicators suggest legitimacy. Cookie consent mechanisms and privacy policies are present, indicating a basic level of privacy compliance. Overall, the website is a functional and professional municipal portal with good content quality and user experience. The main risks relate to domain registration opacity and some missing security hardening measures. Strategic improvements in security headers, domain registration transparency, and explicit security policies would enhance trust and compliance.