Security Directory

K

Klinika Malvazinky

klinika-malvazinky.cz

51

Klinika Malvazinky is a prestigious rehabilitation clinic located in Prague, specializing in orthopedic surgery, physiotherapy, and rehabilitation services. It operates as part of the Group Mediterra healthcare network, offering modern medical care with a multidisciplinary team of highly qualified physicians. The clinic emphasizes patient comfort with a serene environment including a private park and comprehensive care programs. Technically, the website is built on WordPress and employs modern JavaScript libraries and Google services for analytics and security, including reCAPTCHA. The site is well-structured, mobile-optimized, and includes GDPR-compliant privacy and cookie policies. Security posture is strong with HTTPS and secure form handling, though some security headers could be improved. The absence of WHOIS data is a concern for domain legitimacy but does not detract from the professional presentation and trust signals on the site. Overall, the website reflects a mature digital presence suitable for a healthcare provider.

S

SIVEK HOTELS

sivekhotels.com

60

SIVEK HOTELS is a well-established family-owned hospitality business operating multiple hotels, restaurants, and event services in Prague. The company emphasizes tradition and experience with a 35-year history, targeting tourists and event clients. Their digital presence is professional, leveraging modern web technologies and analytics tools, with a focus on user experience and multi-language support. Security posture is generally good with HTTPS and cookie consent implemented, though there is room for improvement in security headers and explicit policies. The absence of WHOIS data is a notable anomaly that requires further investigation to confirm domain legitimacy. Overall, the website reflects a credible and professional hospitality business with moderate technical maturity and privacy compliance.

B

YOURLS — Your Own URL Shortener | https://b33.fr/

b33.fr

51

The website https://b33.fr/admin/ is an administrative login portal for a YOURLS (Your Own URL Shortener) instance, a self-hosted URL shortening service. The domain is registered with OVH in France since 2015, indicating a stable and legitimate presence. The site targets users who require URL shortening capabilities, likely webmasters or developers managing their own short URLs. The business model is niche and technology-focused, providing URL management services without public-facing commercial content on this page. Technically, the site uses YOURLS version 1.9.2 and jQuery 3.5.1, hosted on OVH infrastructure with HTTPS enabled and a valid SSL certificate. The site is basic in design and functionality, optimized for desktop login with minimal mobile optimization and accessibility features. No advanced SEO or analytics tools are detected, and no advertising or tracking scripts are present. From a security perspective, the site benefits from HTTPS and password-protected access but lacks important security headers and may expose the YOURLS version number, which could be a vulnerability if not updated. There is no evidence of privacy, cookie, or terms of service policies, which limits compliance with GDPR and other regulations. No contact or incident response information is provided, reducing transparency and trust. Overall, the site is functional for its purpose but lacks comprehensive security and privacy measures. The risk is moderate due to missing security headers and potential version exposure. Strategic improvements in security hardening, privacy compliance, and user trust signals are recommended.

C

Clipr

clipr.co

62

Clipr is a technology company specializing in delivering immersive social experiences for brands and publishers. Their platform integrates social stories, carousels, and posts directly into websites to enhance user engagement and revenue. The company targets top-tier brands and publishers globally, positioning itself as a B2B SaaS provider in the social media technology space. The website reflects a professional and consistent brand image with clear messaging and trusted client logos. Technically, the site is built on Webflow with modern analytics and tracking tools, offering good performance and mobile optimization. Security posture is solid with HTTPS and secure forms, though lacking advanced security headers and explicit policies. Privacy compliance is partially addressed with a privacy policy and terms of service but lacks cookie consent mechanisms. Overall, the site is credible and trustworthy with room for improvement in security and privacy transparency.

O

ORGREZ Group, a.s.

orgrezgroup.cz

59

ORGREZ Group, a.s. is a well-established private holding company specializing in the energy sector and environmental protection, operating since 1957. The company unites multiple subsidiaries focused on diagnostics, energy optimization, flue gas cleaning, heat production, and consulting services related to energy planning and decarbonization. Their market position is solid within Central and Eastern Europe, targeting businesses and organizations seeking sustainable energy solutions. The website reflects a professional corporate presence with clear branding and comprehensive service descriptions. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Fonts, jQuery, and Google Tag Manager for analytics. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in accessibility and security headers could enhance the technical posture. Performance is moderate, consistent with Webflow-hosted sites. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of security policies, incident response information, and vulnerability disclosure reduces transparency. The WHOIS data is unavailable, limiting domain trust analysis, but the website content and business information appear legitimate and professional. Overall, the website presents a trustworthy and professional image with good privacy compliance and moderate technical maturity. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility to strengthen compliance and trust.

E

e-community solutions s.r.o.

peoplecar.eu

58

Peoplecar is a Czech-based small company operating a shared community electric vehicle service primarily targeting smaller municipalities and communities. Their business model focuses on providing ecological, shared electric cars managed by local entities and accessible via a mobile app. The company positions itself as a sustainable transportation solution addressing local mobility challenges outside large cities. Technically, the website is built on Webflow with integration of modern tools such as Snipcart for e-commerce and Google Analytics for user insights. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies are missing. The domain WHOIS data is privacy protected by EURid, which is typical for .eu domains, and no suspicious patterns were detected. Overall, the website and business present a trustworthy and professional image with room for improvement in security transparency and incident readiness.

A

Ag Art cz s.r.o.

ipcc.cz

61

Ag Art cz s.r.o. is a Czech-based digital agency specializing in creating custom websites, e-commerce platforms, and tailored online marketing strategies. Established in 2013, the company serves businesses seeking to enhance their online presence with professional web solutions and ongoing maintenance services. Their market position is supported by a portfolio of diverse clients and a consistent brand image. Technically, the website is built on WordPress with modern plugins and tools, including GDPR compliance mechanisms and analytics integrations. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent, though some security headers could be improved. Overall, the site reflects a mature digital infrastructure with good user experience and compliance standards.

S

Site2

kickspain2025.eu

43

Kick Spain 2025 is a niche sports initiative promoting a unique scooter challenge paralleling the prestigious Vuelta a España cycling race. The website serves as a platform to showcase the event details, sponsors, merchandise, and social media engagement. The business operates primarily in the transportation and sports event sector, targeting cycling enthusiasts and supporters. Technically, the site is built using Nicepage CMS with jQuery and Google Fonts, hosted by a Czech hosting provider, and demonstrates moderate performance and good mobile optimization. Security posture is basic, with no detected security headers or privacy policies, and no forms collecting sensitive data, reducing immediate risk but indicating compliance gaps. Overall, the site is functional and professional but would benefit from enhanced privacy and security measures.

R

Rödl & Partner

roedl.cz

64

Rödl & Partner is a well-established international professional services firm with a strong presence in the Czech Republic, offering legal, tax, audit, and consulting services. The website reflects a mature digital presence built on Microsoft SharePoint, with a focus on professional content and client engagement. The technical infrastructure is stable, leveraging modern JavaScript libraries and privacy-conscious analytics (Matomo). Security posture is good with HTTPS enforced and cookie consent implemented, though security headers could be improved. The absence of WHOIS data slightly impacts trust but the overall brand and content quality support legitimacy. Strategic recommendations include enhancing security headers, adding explicit incident response info, and improving accessibility.

The website soliris.net serves as a dedicated patient information portal for SOLIRIS®, a prescription medication by Alexion Pharmaceuticals, Inc. It provides comprehensive safety information, prescribing details, and patient support resources, targeting US patients and caregivers. The site emphasizes regulatory compliance, including REMS program participation and FDA-approved indications, positioning itself as a trusted source for medication-related information in the healthcare sector. Technically, the site is built on the Sitecore CMS platform, hosted on AWS, and uses modern web technologies such as jQuery and Google Tag Manager. The site demonstrates good mobile optimization and a professional design, though accessibility features are basic. Security posture is solid with HTTPS enforced and domain registration protections, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is strong, with a clear cookie consent mechanism and links to comprehensive privacy and terms of use policies. However, no explicit security policy or incident response contacts are published. Overall, the site is professional, trustworthy, and well-aligned with its business purpose, with minor recommendations to enhance security and transparency.

R

Rugby Club Mountfield Říčany

rugbyricany.cz

55

Rugby Club Mountfield Říčany is a well-established and successful rugby club in the Czech Republic, with a history dating back to 1944 and over 500 active members. The club offers comprehensive rugby training programs across all age groups, hosts matches and tournaments, and maintains a strong community presence. The website is professionally designed using modern web technologies such as Webflow CMS, jQuery, and Swiper.js, providing a rich user experience with detailed news, team information, and event schedules. Social media integration is robust, enhancing fan engagement. However, the absence of WHOIS data and lack of explicit privacy and cookie policies represent gaps in transparency and compliance. Security posture is moderate with HTTPS implied but missing explicit security headers and incident response information. Overall, the site is trustworthy and professional but could improve in privacy compliance and security best practices.

D

DITEC, a.s.

ditec.sk

73

DITEC, a.s. is a well-established Slovak IT company founded in 1992, providing comprehensive IT solutions including application development, document archiving, electronic signature services, and cloud-based managed services. The company holds a strong market position as a leading IT supplier and integrator in Slovakia, serving business clients with tailored technology solutions. Their website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on ASP.NET WebForms with DNN CMS, leveraging modern libraries like jQuery and Bootstrap, and includes Google Analytics for user tracking. Security posture is good with HTTPS enforced and secure form handling, though some security headers are missing and library versions could be updated. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the website and business demonstrate a mature digital presence with room for security enhancements.

K

Coming Soon

krkonosska70.cz

49

The website www.krkonosska70.cz currently serves as a placeholder page announcing the 71st edition of an event scheduled for March 14, 2026. It provides minimal content, primarily a coming soon message with a background video and a logo. There is no detailed business information, contact details, or policies presented. The site is built using Webflow CMS and includes jQuery 3.5.1 as a JavaScript library. Hosting is via Webflow's CDN, ensuring moderate performance and good mobile optimization. Security posture is weak due to lack of security headers and absence of privacy or cookie policies. No WHOIS registration data is available, which raises concerns about domain legitimacy and trustworthiness. Overall, the site is in an early development or maintenance phase with limited digital maturity and business credibility.

Základní umělecká škola Rosice is a small educational institution based in the Czech Republic, providing foundational arts education in music, visual arts, and dance primarily to children and young people in the local community. The school is operated under the Jihomoravský kraj regional authority and offers various programs including student concerts, exhibitions, and competitions. The website reflects a well-structured and professionally designed platform that supports enrollment and provides information about the school's offerings and events. Technically, the site uses common web technologies such as jQuery, Bootstrap, and FontAwesome, with integration of Google Analytics for visitor tracking. Security-wise, the site implements cookie consent mechanisms but lacks visible security headers and detailed privacy or security policies. WHOIS data is unavailable, which limits domain trust assessment, but the website content and contact details appear legitimate and consistent with a local educational institution. Overall, the site is safe, accessible, and provides a good user experience, though improvements in security posture and privacy transparency are recommended.

P

PPG Paints

ppgpaints.com

63

PPG Paints operates a professional-grade paint and coatings website targeting contractors, designers, and architects. The company offers a broad range of products including interior and exterior paints, primers, stains, and industrial coatings. The website reflects a mature digital presence with modern technologies such as Angular, Google Tag Manager, and consent management tools, indicating a well-maintained infrastructure. Security posture is strong with HTTPS, security headers, and GDPR-compliant consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the brand's global recognition. Strategic recommendations include publishing security policies and vulnerability disclosure information to enhance transparency and trust.

F

Four Musketeers s.r.o

waulter.eu

59

Waulter is a Czech-based technology company specializing in cookie consent management solutions designed to increase user consent rates and optimize marketing campaign performance. The company offers a SaaS platform with advanced features such as dynamic consent adaptation, personal assistance, and integration with Google Consent Mode 2.0. The website is professionally designed, mobile-optimized, and provides comprehensive legal documentation and contact information, reflecting a mature digital presence. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, and Swiper.js for UI components. The infrastructure supports fast loading times and good accessibility standards. Security best practices are observed with HTTPS enforcement and standard security headers, although explicit security policy documentation and incident response channels are not publicly detailed. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR alignment, and user consent mechanisms. The business credibility is supported by transparent company information, partner logos, and active social media presence. Overall, Waulter presents a low-risk profile with a professional and trustworthy online presence. Strategic recommendations include enhancing public security policies, publishing vulnerability disclosure information, and continuing to improve accessibility and privacy transparency.

F

Four Musketeers s.r.o

waulter.cz

58

Waulter is a Czech-based technology company specializing in GDPR-compliant cookie consent management solutions designed to increase consent rates and optimize marketing campaign performance. The company offers a SaaS platform with tiered subscription plans, including personalized assistance and advanced features such as conditional consent behavior and integration with Google Consent Mode 2.0. The website is professionally designed, mobile-optimized, and provides comprehensive legal documentation and contact information, reflecting a mature digital presence. Technically, the website leverages modern web technologies including Webflow CMS, Google Tag Manager, and Swiper.js for UI components. The infrastructure is hosted on Webflow, ensuring reliable performance and HTTPS security. While security headers are not explicitly detected, the site uses secure protocols and integrates consent management scripts responsibly. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies, incident response information, and vulnerability disclosure mechanisms suggests areas for improvement. Overall, the site demonstrates a trustworthy and professional business presence with a focus on compliance and user trust. The domain WHOIS data is not publicly available due to privacy protection, but the website content and company information indicate legitimacy. The business targets Czech digital businesses requiring cookie consent solutions, positioning itself as a niche but credible player in the market.

C

Coil Technologies

coil.com

62

Coil Technologies is a small technology company specializing in Web Monetization through the Interledger protocol. The company offers subscription memberships for users to access monetized web content and provides tools for content creators to monetize their offerings. Recently, Coil announced the sunsetting of its products and the transition of Interledger stewardship to the Interledger Foundation, signaling a strategic shift in its business operations. The website reflects this transition with clear communication and resources for users. Technically, the website is built on modern web technologies including Webflow CMS, Google Fonts, and jQuery, hosted via Cloudflare. The site is mobile optimized and performs moderately well, with good SEO and basic accessibility features. However, some improvements could be made in accessibility and performance optimization. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and explicit security headers such as Content-Security-Policy or X-Frame-Options. There is no published security or incident response policy, and no cookie consent mechanism is implemented despite having a privacy policy. These gaps suggest room for improvement in security posture and compliance. Overall, Coil.com presents a professional and trustworthy web presence with good business credibility and content quality. The domain is well-established and consistent with the company’s history. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and enabling DNSSEC to strengthen trust and compliance.

A

Auto Cardion s.r.o.

cardioncars-brno.cz

57

Cardion Cars Brno, operated by Auto Cardion s.r.o., is an authorized Volvo car dealership and service center located in Brno, Czech Republic. The company specializes in selling new, demo, and used Volvo vehicles, providing servicing, parts, and accessories. Their website reflects a professional and consistent brand presence aligned with Volvo's corporate identity, targeting customers interested in Volvo vehicles and related services in the region. The business model focuses on direct sales, leasing, financing, and after-sales support, positioning itself as a trusted regional partner for Volvo customers. Technically, the website employs modern web technologies including jQuery, Bootstrap, and cookie consent frameworks, with integration of Google Analytics and Google Tag Manager for analytics and marketing. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. Hosting and CMS details are not explicitly disclosed but the site appears stable and moderately performant. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, no explicit security headers were detected in the provided data, and no incident response or security policy information is publicly available. No vulnerabilities or exposed sensitive data were found. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the strong brand alignment and contact information. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements include enhancing security headers, publishing incident response contacts, and improving accessibility. These steps would further strengthen trust and security posture.

H

Herzog & Adelmann Gruppe

herzogundadelmann.com

60

Herzog & Adelmann Gruppe is a German-based company specializing in benchmarking, quality assurance, mergers and acquisitions, and providing industry-specific analyses, rankings, and certifications. Founded in 2021 and headquartered in Grünwald near Munich, the company positions itself as a leading private organizer of benchmarking projects in the D-A-CH region with a growing international presence. Their business model leverages strategic media partnerships to enhance visibility and trust for excellent companies, supporting marketing, PR, and recruiting efforts. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Fonts, jQuery, and Lenis for smooth scrolling. Hosting is distributed with Amazon S3 for media assets and GoDaddy as the domain registrar. The site demonstrates good mobile optimization and SEO practices, though some accessibility features are basic. Performance is moderate with a professional and consistent design. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers, which are recommended for enhanced protection. The contact form uses the GET method, which is not ideal for privacy. No cookie consent mechanism is present, which may affect GDPR compliance. The WHOIS data aligns well with the business claims, showing a consistent and transparent domain registration. Overall, the website is professional, trustworthy, and well-positioned in its market niche. Strategic improvements in security headers, DNSSEC, form handling, and privacy compliance would further strengthen its security posture and regulatory adherence.

F

FlipHTML5

fliphtml5.com

75

FlipHTML5 is a well-established digital publishing platform founded in 2013, specializing in converting PDFs and other documents into interactive flipbooks. The company targets publishers, marketers, educators, and businesses seeking engaging digital publications. Their platform offers multimedia enrichment, sharing capabilities, and analytics, positioning them as a key player in the niche digital publishing market. Technically, the website leverages modern web technologies including jQuery, Bootstrap, and Cookiebot for consent management, with hosting and DNS services provided by Cloudflare. The presence of multiple language versions and SEO optimizations indicate a mature digital presence. Security-wise, the site enforces HTTPS, employs cookie consent mechanisms, and uses domain locks to prevent unauthorized changes. However, DNSSEC is not enabled, and no explicit security policy or incident response contacts are published, representing areas for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, with a strong business credibility and good technical implementation.

V

Vox Media, LLC

voxmedia.com

72

Vox Media, LLC is a prominent modern media company operating a diverse portfolio of editorial brands across multiple platforms including digital, podcasts, TV, streaming, live events, and print. The company is positioned as a leader in the media industry with a strong market presence, including a top 10 podcast network and a large advertising marketplace called Concert. Their business model leverages content creation, advertising, and technology platforms to engage a broad audience and generate revenue. Technically, the website employs modern web technologies such as jQuery, Google Tag Manager, and OneTrust for privacy compliance, delivering a well-optimized and mobile-friendly user experience. Security posture is solid with HTTPS enforced and comprehensive privacy and cookie policies, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, reflecting a mature digital infrastructure and business credibility.

The Konrad-Adenauer-Stiftung e.V. is a well-established German political foundation focused on promoting political education, democracy, and social market economy principles both nationally and internationally. The website reflects a professional and consistent brand presence with comprehensive content aimed at a general audience interested in political and social topics. The foundation maintains an active presence on multiple social media platforms, enhancing its outreach and engagement. Technically, the website is built on the Liferay CMS platform, utilizing modern web technologies including jQuery, React, and Alloy UI. The site demonstrates good mobile optimization, accessibility, and SEO practices, with moderate performance characteristics. Analytics are handled via Matomo with a consent mechanism in place, indicating a respect for user privacy. From a security perspective, the site enforces HTTPS, employs Content Security Policy with nonce, and uses secure form submissions. However, explicit privacy policies, terms of service, and vulnerability disclosure mechanisms are not detected in the provided content, representing areas for improvement. WHOIS data is minimal but does not raise immediate concerns, though more transparency would enhance trust. Overall, the website presents a low-risk profile with strong business credibility and a good security posture, but could benefit from enhanced privacy compliance documentation and clearer contact information for security and general inquiries.

N

Nehoříme, konec cigaretám - nikotin zdravěji bez kouření

nehorime.cz

55

The website www.nehorime.cz is an independent Czech language online magazine focused on providing information about alternatives to smoking and healthier nicotine consumption methods. It covers topics such as nicotine pouches, heated tobacco products, e-cigarettes, and offers guidance on quitting smoking. The site targets adult smokers seeking less harmful alternatives and aims to educate and support them in their transition. Technically, the site is built on ASP.NET Web Forms with Bootstrap 3.4.1, jQuery, and other modern JavaScript libraries, ensuring good mobile responsiveness and user experience. Security-wise, the site uses HTTPS but lacks explicit security headers and privacy/cookie policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the professional content and partner links indicate legitimate operation. Overall, the site is a valuable resource in its niche but should enhance privacy compliance and security practices.

N

NUTRISENS ITALIA S.B.R.L

nutrisens-medical.it

60

Nutrisens Italia S.B.R.L is a medium-sized Italian company specializing in clinical nutrition and special alimentation products. The company offers a broad range of nutritional solutions designed for healthcare professionals, patients, and consumers, focusing on effective, safe, and palatable products that enhance quality of life. Nutrisens holds a strong market position in Italy with a well-established brand, supported by active social media presence and customer testimonials. The website reflects a professional and comprehensive digital presence with clear navigation and rich content. Technically, the site is built on a custom ASP.NET platform using modern libraries such as Bootstrap and jQuery, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policy disclosures and advanced security headers. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, Nutrisens demonstrates a mature digital infrastructure and trustworthy business profile.

I

Innovatif

innovatif.com

66

Innovatif is a Slovenian-based company specializing in brand communication, digital platform development, and media buying with over 20 years of experience. Their website demonstrates a professional and modern digital presence, targeting businesses and brands seeking comprehensive communication and digital solutions. The company serves a diverse client base including government entities and large enterprises, positioning itself as a trusted partner in the technology and communication sectors. Technically, the website is built on SilverStripe CMS and uses modern JavaScript libraries and Google Tag Manager for analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The WHOIS data is unavailable, which slightly reduces trust but the active and professional website mitigates concerns. Overall, Innovatif presents a credible and well-established business with a strong digital footprint.

D

Dash Social

dashhudson.com

10

Dash Social is a Canadian-based technology company founded in 2013 that offers a comprehensive social media management platform. Their SaaS solution integrates AI-powered tools for content performance prediction, creator and influencer management, social analytics, campaign reporting, scheduling, and social commerce. The company targets brands, marketers, and social media managers seeking to optimize social media engagement and ROI. The website demonstrates a mature digital presence with rich content, customer testimonials, and partner badges from major platforms like TikTok, Meta, and Pinterest, indicating strong market positioning. Technically, the website is built on Webflow CMS and leverages modern JavaScript libraries such as jQuery, GSAP, and Slick Carousel for interactive features. It employs Google Tag Manager and HubSpot for analytics and marketing automation. The site is mobile-optimized, fast-loading, and SEO-friendly. Security practices include HTTPS enforcement and a cookie consent mechanism with opt-in compliance, though explicit security headers are not detected. From a security perspective, the site shows good maturity with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS domain registration data is a notable concern, potentially indicating privacy protection or data source limitations. The presence of a suspicious external script domain warrants further review. Overall, the site maintains good privacy compliance and business credibility but could improve transparency in domain registration and security disclosures. Strategically, Dash Social should enhance its security posture by publishing a vulnerability disclosure policy, adding security headers, and providing incident response contacts. These steps will strengthen trust and compliance. The technical infrastructure is solid but could benefit from continuous monitoring of third-party scripts and further accessibility improvements.

T

Tourismuszentrale Südmähren

sued-maehren.de

47

Tourismuszentrale Südmähren operates as the official regional tourism authority promoting South Moravia, a renowned wine-growing and cultural region. The website provides comprehensive tourism information, including excursions, events, regional guides, and accommodation options, targeting tourists interested in nature, history, gastronomy, and cultural experiences. The business model focuses on regional tourism promotion and information dissemination, positioning itself as a trusted source for visitors to South Moravia. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Analytics, and Google Tag Manager, hosted on Active24 servers. The site is mobile-optimized with good SEO practices and a cookie consent mechanism ensuring GDPR compliance. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site uses HTTPS with excellent SSL configuration and implements cookie consent. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a clear cookie policy and consent mechanism, though a dedicated privacy policy page could enhance compliance. Overall, the website is professional, trustworthy, and safe for general audiences. It effectively supports the regional tourism business with clear contact information and social media presence. Strategic improvements in security policy transparency and incident response readiness would further strengthen its security posture.

C

Catrin

catrin.com

50

Catrin is a Czech advanced technology and research institute focused on developing new technologies for clean energy and sustainable environment, promoting societal health and well-being. The website reflects a professional research organization with strong academic and commercial partnerships, publishing in prestigious journals and securing significant EU funding. The technical infrastructure is based on WordPress CMS with modern JavaScript libraries and includes cookie consent and analytics tools, indicating a mature digital presence. Security posture is good with HTTPS and cookie consent implemented, though security headers and explicit incident response policies are absent. Overall, the website is trustworthy and well-maintained, though the lack of WHOIS data slightly reduces domain trustworthiness.

F

FK Neratovice-Byškovice

fkneratovice-byskovice.cz

45

FK Neratovice-Byškovice is a local Czech football club with an active online presence showcasing team information, match results, youth programs, and community projects. The website serves as an information hub for fans, players, and partners, featuring media content and an e-shop for merchandise. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Analytics, with a responsive design optimized for mobile devices. Security posture is moderate with HTTPS enforced and a cookie consent mechanism implemented, but lacks visible security headers and a formal privacy policy. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the site content appears legitimate and professional. Overall, the site is functional and informative but would benefit from enhanced security practices and clearer compliance documentation.

S

Staylive AB

staylive.io

60

Staylive AB is a Swedish technology company specializing in providing white-label streaming platforms for content creators, sports federations, leagues, and clubs. Their platform enables clients to build custom streaming services with features such as live and on-demand content, payment integration, mobile app publishing, and full ownership of content and users. Positioned as a stable and secure solution, Staylive serves a medium-sized market segment with notable partnerships and client testimonials, including a recent acquisition by Two Circles, enhancing their market presence. Technically, Staylive's website is built on Webflow and integrates modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and LinkedIn Insight. The platform supports multi-device streaming including iOS, Android, and Apple TV. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and privacy documentation. From a security perspective, Staylive employs HTTPS with SSL encryption and complies with payment security standards (PA-DSS PCI). Cookie consent is implemented with an opt-in mechanism, reflecting basic GDPR compliance. However, explicit privacy policies, terms of service, and security incident response contacts are not clearly presented, representing areas for enhancement. No critical vulnerabilities or suspicious indicators were detected. Overall, Staylive presents a professional and trustworthy online presence with strong business credibility and a solid technical foundation. The lack of WHOIS transparency is mitigated by the company's evident market position and parent company association. Strategic improvements in security policies, privacy documentation, and accessibility would further strengthen their digital maturity and compliance posture.

S

Staylive AB

staylive.se

54

Staylive AB is a Swedish-based technology company specializing in providing white-label streaming platforms for content owners, sports federations, leagues, and event organizers. Their platform enables customers to launch their own branded streaming services with monetization options such as subscriptions and one-time payments. The company emphasizes full ownership of content and user data, live and on-demand streaming capabilities, and mobile app publishing across major platforms. Staylive is positioned as a stable and secure streaming solution with notable clients and partnerships in the sports and media sectors, and is now part of the parent company Two Circles. Technically, the website is built on Webflow with integrations including Google Analytics, Google Tag Manager, and Finsweet Cookie Consent for privacy compliance. The platform supports modern web standards and mobile optimization, though some accessibility features could be improved. The website employs SSL encryption and claims compliance with payment security standards (PA-DSS PCI), but lacks explicit security headers and detailed privacy or security policies. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but does not publish a security policy or incident response contacts. WHOIS data is incomplete and privacy protected, which is common for tech companies but reduces transparency. No critical vulnerabilities or suspicious content were detected. Overall, the site demonstrates a good security posture but could enhance transparency and compliance documentation. The overall risk assessment is moderate with recommendations to improve security headers, publish comprehensive privacy and security policies, and enhance accessibility. The business shows credible market presence and technical maturity suitable for its industry and target audience.

P

profi-people s.r.o

mstranka.cz

58

mSTRANKA.cz is a Czech service operated by profi-people s.r.o that offers free personal and business website creation with a paid subscription model for hosting and domain management. The service targets individuals, small businesses, craftsmen, and couples seeking wedding websites, providing a turnkey solution including website maintenance and editing. The website is professionally designed with clear navigation and good mobile optimization, leveraging common web technologies such as Bootstrap, jQuery, and Font Awesome. It integrates Google Analytics and Tag Manager for user tracking and employs a cookie consent mechanism to comply with privacy regulations. However, the absence of explicit privacy policy and terms of service pages is a gap in compliance. The WHOIS data for the domain is unavailable, which limits domain trust verification, but the website content and contact information appear legitimate and professional. Overall, the site demonstrates a good balance of usability, business credibility, and moderate security posture.

G

GBG

gbgstatus.com

63

GBG Status is a professional status and incident reporting website for GBG, a technology company specializing in identity verification and data validation services. The site provides real-time updates on system performance and incidents affecting various GBG services, targeting business customers who rely on these services. The website is well-structured, mobile-optimized, and uses modern technologies including jQuery and Google reCAPTCHA to secure subscription forms. However, the absence of publicly accessible WHOIS data for the domain raises questions about domain registration legitimacy or recent acquisition. The site lacks explicit privacy, cookie, and terms of service policies, which impacts privacy compliance scores. Overall, the website demonstrates a solid technical foundation and professional presentation but would benefit from enhanced transparency and security policy disclosures.

Č

Česká mládež církve adventistů

ceskamladez.cz

66

Česká mládež církve adventistů is a non-profit religious youth organization based in the Czech Republic focused on providing a community space for young people to share their faith and doubts. The organization hosts educational, motivational, and mission-oriented events including regional and national youth congresses and prayer weeks. Their website offers downloadable Bible study materials and detailed contact information for local youth groups. The organization targets youth and young adults interested in the Adventist church, positioning itself as a niche community within the Czech religious landscape. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies such as jQuery, Google Fonts, and Cookiebot for cookie consent management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Performance is moderate, with room for improvement in accessibility and SEO. From a security perspective, the site enforces HTTPS and uses Cookiebot for GDPR-compliant cookie consent. However, it lacks important security headers and does not publish a privacy policy or terms of service, which are recommended for compliance and trust. No vulnerabilities or suspicious activities were detected. The WHOIS data is unavailable, likely due to privacy protection, but the website content and contact details appear legitimate and consistent with the organization's mission. Overall, the site is professional and trustworthy for its target audience, but it would benefit from enhanced privacy disclosures, security headers, and formal policies to improve compliance and security posture.

S

Sdružení Valašsko-Horní Vsacko

valassko-hornivsacko.cz

47

Sdružení Valašsko-Horní Vsacko operates a regional information portal focused on sports, recreation, and cultural activities in the Valašsko-Horní Vsacko region of the Czech Republic. The website serves local residents and visitors by providing news, event information, multimedia content, and links to municipal websites. The organization appears to be a small non-profit entity established in 2008, with a clear regional focus and community engagement. Technically, the website uses common JavaScript libraries such as jQuery and Fancybox, integrates Google Translate for accessibility, and employs HTTPS for secure communication. The design is professional and mobile-optimized, offering a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is enforced, but security headers are missing and no explicit incident response or vulnerability disclosure mechanisms are present. Privacy compliance is basic with a privacy policy and cookie policy available, though no active cookie consent mechanism is implemented. Overall, the website is trustworthy and professionally maintained, with room for improvement in security and privacy practices.

Tipito.cz is a Czech lifestyle magazine offering tips, ideas, and inspiration for better living, covering topics such as recipes, home, garden, health, beauty, and lifehacking. The website targets a general Czech-speaking audience interested in practical and creative lifestyle content. The business model appears to be content publishing monetized primarily through advertising, including Google Adsense. Technically, the site uses a modern front-end stack with Bootstrap, jQuery, Font Awesome, and integrates Google Analytics and Tag Manager for tracking. The site is mobile responsive and well-structured, though some accessibility features could be improved. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks some security headers and explicit privacy and cookie policies. WHOIS data is unavailable, limiting domain trust assessment, but the site content and external references suggest legitimacy. Overall, the site is professional and functional but could enhance privacy compliance and security transparency.

P

Purpose-Led Publishing

purposeledpublishing.org

51

Purpose-Led Publishing is a coalition of three reputable not-for-profit publishers in the physical sciences sector, focused on ethical scholarly communications and reinvesting all proceeds back into science. The coalition emphasizes research integrity and open science, targeting researchers and the global scientific community. The website reflects a professional and consistent brand image with clear messaging about their mission and values. Technically, the site is built on Webflow with modern web fonts and standard libraries, offering good mobile optimization and user experience. However, it lacks visible security headers, privacy policies, and cookie consent mechanisms, which are important for compliance and trust. The WHOIS data is unavailable due to privacy protection, which is common for such organizations, but the website content and partner domains strongly support legitimacy. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

C

CATRIN – Regional Centre of Advanced Technologies and Materials

rcptm.com

53

The Regional Centre of Advanced Technologies and Materials (RCPTM) is a research institute based in the Czech Republic specializing in nanotechnology and advanced materials research. The website presents a professional and content-rich platform showcasing scientific publications, news, and events, targeting researchers, academic collaborators, and industry partners. The business model focuses on research, technology development, and providing analytic services and patented technologies. Technically, the website is built on WordPress with modern JavaScript libraries and is optimized for mobile devices, offering a fast and accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, though the website content and affiliations appear credible. Overall, the site demonstrates a mature digital presence with room for improvement in security transparency and contact accessibility.

S

Sdružení obcí Mikroregionu Vsetínsko

visit-valassko.cz

43

The website www.visit-valassko.cz serves as the official regional tourism portal for the Valašsko region in the Czech Republic, operated by the Sdružení obcí Mikroregionu Vsetínsko. It promotes local nature, traditions, cuisine, and recreational activities, targeting tourists and visitors interested in cultural and natural experiences. The site offers comprehensive information on places to visit, eat, stay, and events, supported by local government and tourism partners. Technically, the site uses a modern tech stack including jQuery, Google Analytics, Google Tag Manager, and Google Maps API, with a cookie consent mechanism implemented for GDPR compliance. The website is mobile optimized with good navigation and content relevance. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks some security headers and formal privacy and terms of service pages. WHOIS data is unavailable, which reduces domain trustworthiness, but the site’s content and partner affiliations indicate legitimacy. Overall, the site is a well-maintained regional tourism platform with room for improvement in privacy and security documentation.

Moravská národní obec is a small non-profit organization dedicated to promoting Moravian culture, history, and traditions. The website serves as a hub for news, events, and initiatives related to Moravia, targeting local communities and cultural enthusiasts. The organization maintains an active presence through social media channels such as Facebook and YouTube, and provides educational and cultural content primarily in Czech. The website is built on WordPress with common plugins for event management and media galleries, reflecting a moderate level of digital maturity.

C

Carts Guru

carts.guru

56

Carts Guru is a specialized SaaS provider offering ecommerce marketing automation tools that enable online merchants to engage customers across multiple channels including email, SMS, and Facebook Messenger. The company targets ecommerce businesses seeking to increase revenue through automated, multichannel marketing campaigns and data-driven decision making. Their platform includes features such as campaign automation, audience segmentation, templates, and detailed dashboards, supported by a professional team offering premium support services. The website reflects a medium-sized business based in Spain with a strong market presence and over 1000 clients worldwide. Technically, the website is built on the Webflow platform, leveraging modern JavaScript libraries such as jQuery, Swiper, noUiSlider, and Select2. It is well optimized for mobile devices, fast loading, and SEO-friendly with proper meta tags and structured data. Google Tag Manager is used for analytics and marketing tracking. The site employs HTTPS with good SSL configuration but lacks some advanced security headers. Contact is primarily via a secure web form, with no direct email or phone contacts publicly listed. From a security perspective, the site demonstrates good practices including HTTPS enforcement and no visible sensitive data exposure. However, it lacks explicit cookie consent mechanisms and published incident response contacts or vulnerability disclosure policies. WHOIS data is unavailable due to privacy or query failure, which slightly reduces trust but is common for SaaS businesses. Overall, the security posture is solid but could be improved with additional transparency and security headers. The overall risk assessment is low with no critical issues detected. Strategic recommendations include implementing cookie consent, publishing incident response contacts, adding security headers, and maintaining regular vulnerability audits. The website is professional, trustworthy, and well-positioned in the ecommerce marketing automation sector.

M

MUSIL spol. s r.o.

musil.cz

57

MUSIL spol. s r.o. is a Czech family-owned company with over 30 years of experience specializing in drywall installation and spray foam insulation services. The company positions itself as a trusted regional player offering a unique combination of drywall and insulation solutions, targeting residential and commercial property owners. Their website reflects a professional and consistent brand image with clear service offerings and customer engagement channels. Technically, the site is built on the Webflow platform using modern JavaScript libraries and integrates Google Analytics, Google Tag Manager, and Google Ads for marketing and tracking purposes. Security measures include HTTPS, Google reCAPTCHA, and Cloudflare Turnstile anti-bot protection, though some security headers and policies could be improved. The absence of WHOIS data reduces domain trust slightly, but the overall business credibility remains high based on website content and trust indicators. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanisms.

5

50skills

50hire.com

56

50skills operates a modern SaaS platform focused on streamlining recruitment and hiring processes for HR managers. Their product, 50hire, offers applicant tracking, sourcing, customizable pipelines, and integrations with popular collaboration tools like Slack and Workplace. The website is professionally designed, mobile-optimized, and provides comprehensive resources including help centers, video tutorials, and security documentation. However, the absence of WHOIS data for the domain www.50hire.com raises concerns about domain registration legitimacy, although the website content and branding are consistent and trustworthy. Security posture is strong with HTTPS, GDPR compliance, and security features like SSO and 2FA, but the lack of a cookie consent mechanism is a minor compliance gap.

A

Adnuntius

adnuntius.com

70

Adnuntius is a Norway-based technology company specializing in simplifying the digital advertising supply chain by providing a privacy-safe platform that connects publishers, media buyers, and retailers directly. Their platform enables self-service advertising, curated marketplaces, and data activation without reliance on third-party cookies, positioning them as a niche player focused on transparency, efficiency, and privacy in programmatic advertising. The website is professionally designed using Squarespace, with good mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and domain lock statuses, though DNSSEC and HSTS could be improved. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the site reflects a trustworthy and credible business with a clear value proposition and target audience.

B

Bureau Beaubourg

beaubourg.co

55

Bureau Beaubourg is a small brand strategy bureau based in Paris, France, specializing in guiding brands to identify and express their unique qualities through creative and strategic services. The website presents a professional and consistent brand image with clear messaging targeting businesses seeking brand expertise. Technically, the site is built on the Webflow platform using modern frontend technologies such as jQuery and Lenis for smooth scrolling, hosted on Webflow's CDN, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks important security headers and privacy compliance mechanisms such as privacy and cookie policies. No forms or data collection fields are present, reducing immediate data protection concerns but also indicating limited direct user engagement. Overall, the site is trustworthy with legitimate WHOIS registration data consistent with the business claims.

G

Grand Bureau

grandbureau.com

55

Grand Bureau is a creative agency operating as a family of studios based in Paris and New York City. They specialize in brand creation and strengthening through a narrative-driven, holistic approach encompassing strategy, art direction, graphic design, architecture, content creation, digital, web design, and e-commerce. The website presents a professional and consistent brand image targeting businesses seeking comprehensive creative services. Technically, the site is built on Webflow with modern JavaScript libraries such as jQuery and Lenis for smooth scrolling, hosted on Webflow's CDN, offering moderate performance and good mobile optimization. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies, which are critical for compliance and trust. The absence of WHOIS registration data raises concerns about domain legitimacy, although the active and professional website reduces suspicion. Overall, the site scores well on business credibility and content quality but needs improvements in privacy compliance and security best practices.

M

Muzeum Břeclav

lichtenstejnske-stezky.cz

46

Lichtenštejnské stezky is a regional tourism website operated by Muzeum Břeclav, promoting cycling trails and cultural heritage in South Moravia, Czech Republic. The site provides detailed trail information, local events, and sightseeing recommendations targeting cyclists and tourists interested in outdoor activities. The website is professionally designed with consistent branding and good user experience, supporting both Czech and English languages. Technically, it uses modern JavaScript libraries such as jQuery and FontAwesome, and includes a cookie consent mechanism to comply with privacy regulations. However, it lacks explicit privacy policy and terms of service pages, which are important for full GDPR compliance. Security posture is moderate with HTTPS implied but no visible security headers or incident response contacts. Overall, the domain registration data aligns well with the website's regional focus and business legitimacy.

The Academy of Neurologic Physical Therapy (ANPT) operates as a professional membership organization focused on advancing neurologic physical therapy through advocacy, education, research, and practice resources. The website serves a diverse audience including physical therapists, educators, researchers, and patients seeking specialized neurologic PT services. It is well-positioned within the healthcare and education sectors, affiliated with the American Physical Therapy Association (APTA), and offers a broad range of services including conferences, special interest groups, and professional development resources. The domain is well-established since 1999, reinforcing its credibility and market presence. Technically, the website leverages modern web technologies such as Webflow CMS, Google Tag Manager, and Bootstrap, ensuring a responsive and user-friendly experience. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and accessibility compliance. From a security perspective, the site enforces HTTPS and has domain transfer protections in place, but lacks DNSSEC and security headers, which are recommended to enhance domain and web application security. There is no visible vulnerability disclosure or incident response information, which could be improved to strengthen trust and transparency. Privacy compliance is partial, with a comprehensive privacy policy but no cookie consent mechanism detected despite tracking technologies in use. Overall, the website is professional, trustworthy, and serves its community effectively. Strategic improvements in security headers, DNSSEC, and privacy compliance would further enhance its security posture and user trust.