Security Directory

K

KALTMEYER s.r.o.

kaltmeyer.cz

56

KALTMEYER s.r.o. is a Czech Republic based company specializing in mechanical and mechatronic access control systems for residential buildings. With over 30 years of market presence, the company offers a range of products including key systems, chip systems, self-locking locks, and innovative bike storage solutions. They also provide a unique lost key return service protected by utility model rights. The company targets property managers, owners, and residents, positioning itself as a trusted local provider with ISO 9001 certification and a solid reputation. Technically, the website is built on a Bootstrap framework with jQuery and Font Awesome, featuring responsive design and moderate performance. Google Analytics is used for visitor tracking. The site includes secure login and contact forms but lacks some advanced security headers and a dedicated privacy policy page, which are areas for improvement. Cookie consent is implemented via a banner. From a security perspective, HTTPS is enforced, and forms use password fields, but the absence of explicit security headers and a published security policy reduces the overall security posture. No critical vulnerabilities or WAF blocks were detected. WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the website is professional and trustworthy with good business credibility but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

V

VK Benátky nad Jizerou

vkbenatky.cz

42

VK Benátky nad Jizerou is a local volleyball sports club based in the Czech Republic, established since 2009. The website serves as a hub for club members, players, and fans, providing detailed information about various teams, schedules, news, and club management. The club targets youth and adult volleyball players and enthusiasts within the regional community. Technically, the website is built on WordPress using Elementor and integrates modern web technologies such as jQuery and Font Awesome, hosted by WEDOS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS with appropriate security headers, but lacks some privacy compliance features such as cookie consent mechanisms. Overall, the domain registration data aligns well with the website content, indicating a legitimate and trustworthy entity.

C

CAR4WAY a.s.

car4way.cz

58

CAR4WAY a.s. operates a Czech Republic-based carsharing and vehicle leasing service, targeting individuals and businesses interested in flexible vehicle access solutions. The website presents a professional and consistent brand image with a clear focus on transportation services such as carsharing, operational leasing, and car rental. The business model is centered on providing smart mobility solutions to a general audience within the Czech market. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and various UI libraries, complemented by analytics and marketing tools such as Google Tag Manager, Hotjar, and Adform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

Simple Avia Solutions is a newly established ACMI provider operating on four continents, specializing in aircraft leasing with crew, maintenance, and insurance services. The company targets airlines and businesses requiring flexible capacity solutions globally, positioning itself as a reliable and well-distributed operator. The website reflects a basic but professional digital presence with clear contact information and consistent branding. Technically, the site uses standard web technologies such as Bootstrap and jQuery, hosted behind Cloudflare DNS, but lacks advanced security configurations like DNSSEC and security headers. No privacy or cookie policies are published, indicating gaps in compliance. The security posture is moderate with room for improvement, especially in implementing best practices and transparency. Overall, the website is safe, accessible, and credible but would benefit from enhanced security and privacy measures to strengthen trust and compliance.

S

Sailun Group Europe

sailun-tyres.eu

59

Sailun Group Europe operates as a tyre manufacturer and distributor specializing in passenger car, light truck, truck, and bus tyres. The company offers a broad product portfolio including summer, winter, and all-season tyres, with a focus on performance, safety, and eco-friendly technologies tailored also for electric and hybrid vehicles. Positioned competitively in the European market, Sailun emphasizes quality and sustainability, evidenced by certifications such as the EcoVadis Silver Medal and endorsements like AutoBild approval. Their business model includes a dealer locator service and direct customer engagement through comprehensive product catalogs and press releases. Technically, the website employs modern web technologies including Bootstrap, jQuery, Font Awesome, Google Maps API, and Cookiebot for consent management. The site is mobile-optimized with good navigation and moderate performance. Analytics are implemented via Google Tag Manager, indicating moderate user tracking with privacy compliance measures in place. However, some security best practices such as security headers and explicit incident response policies are not publicly visible. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism, contributing to a solid security posture. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is due to EURid's privacy policy for .eu domains, which is common and justified for this business type. Overall, the domain and website present strong legitimacy and trustworthiness. The overall risk assessment is low, with recommendations to enhance security headers, publish security policies, and consider a vulnerability disclosure program to further strengthen trust and compliance. The website quality and business credibility are high, supporting Sailun's position as a reputable tyre brand in Europe.

K

Kam večer? - Akce a podniky Mladá Boleslav

kamvecer.net

53

KamVecer.net is a local event listing and entertainment guide website focused on the city of Mladá Boleslav in the Czech Republic. It provides information about concerts, theaters, clubs, restaurants, and cultural events to residents and visitors. The website uses common web technologies including jQuery, Google Tag Manager, Google Analytics, Facebook Pixel, and Font Awesome for icons. It implements a cookie consent mechanism inline but lacks explicit privacy and terms of service pages. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy. Security measures such as HTTPS are assumed but security headers and policies are not evident. Overall, the site offers relevant local content with good design and user experience but has gaps in privacy compliance and business credibility due to missing contact and registration information.

C

CEMEX

cemex.cz

66

CEMEX CZ is a leading manufacturer and supplier of construction materials in the Czech Republic, offering products such as concrete, cement, aggregates, and flooring solutions. The website reflects a mature digital presence with comprehensive product and service information, supported by a modern CMS platform (Liferay) and integration of analytics and cookie consent tools. The site is well-structured, mobile-optimized, and provides clear contact channels including phone and forms. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and policies could be improved. The absence of WHOIS data reduces domain registration trust signals but the website content and branding strongly indicate legitimacy. Overall, the site is professional, trustworthy, and serves its target audience effectively.

G

GAPA CZ a.s.

gapa-vahy.cz

57

GAPA CZ a.s. operates a professional website specializing in the sale, service, and calibration of various weighing scales and related accessories. The company targets industrial and commercial customers in the Czech Republic, offering a broad product range including automotive, crane, laboratory, and retail scales. Their business model combines direct sales, service contracts, and rental of weights, positioning them as a specialist in the weighing equipment market. The website content is well-structured and professionally presented, supporting their market position effectively. Technically, the website is built on the EasyWeb CMS platform, utilizing common web technologies such as JavaScript, jQuery, Font Awesome, and Google Fonts. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Cookie consent mechanisms are implemented with detailed user controls, indicating attention to privacy compliance, albeit lacking a dedicated privacy policy page. From a security perspective, the site lacks visible security headers and publicly available security or incident response policies. The SSL configuration status is unknown from the provided data. No critical vulnerabilities or exposed sensitive data were detected, but improvements in security best practices are recommended to enhance protection and compliance. Overall, the website is professional and trustworthy in appearance, but the absence of WHOIS data and privacy policy reduces confidence in domain legitimacy and full compliance. Strategic improvements in security posture and transparency would benefit the company’s digital maturity and risk profile.

H

HRADECKÁ KULTURNÍ A VZDĚLÁVACÍ SPOLEČNOST s.r.o.

trhyhk.cz

53

HRADECKÁ KULTURNÍ A VZDĚLÁVACÍ SPOLEČNOST s.r.o. is a small Czech company founded in 2020, focused on organizing cultural events and markets in the Hradec Králové region. The website serves as an information portal for various cultural fairs, markets, and community events, targeting the general public interested in local cultural activities. The business model revolves around event organization and providing related services such as rental of tribunes, supported by partnerships with local government and cultural institutions. The company maintains a consistent brand presence and demonstrates trust signals through official registrations and partnerships. Technically, the website is built on the Mijahoo CMS platform and uses common web technologies including jQuery, Bootstrap, Font Awesome, Google Analytics, and Google Tag Manager. It is hosted under a Czech registrar and uses HTTPS with a good SSL configuration. The site is moderately performant, mobile-optimized, and includes basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR using CookieScript. However, it lacks explicit security headers and a dedicated security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration data is consistent with the website's business claims, enhancing legitimacy. Overall, the website presents a low-risk profile with good privacy compliance and a professional online presence. Strategic improvements could include adding explicit security policies, implementing security headers, and publishing a vulnerability disclosure policy to enhance trust and security posture.

Euroregion Glacensis is a regional non-profit organization focused on fostering cross-border cooperation between the Czech Republic and Poland, emphasizing cultural heritage preservation, regional development, and tourism promotion. The website reflects a well-established entity with 25 years of history, providing grant programs, project management, and regional promotion services. The organization targets local governments, residents, and tourists in the border region. Technically, the website is built on the CMS Animato platform, utilizing common JavaScript libraries such as jQuery and Highslide, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies are absent. The WHOIS data is unavailable, which reduces domain trustworthiness, but the website's professional presentation and contact transparency mitigate concerns. Overall, the site is safe, compliant with GDPR, and trustworthy for its intended audience.

U

U Rudolfa | Restaurant Hradec Králové

urudolfa.restaurant

44

The website www.urudolfa.restaurant represents a small hospitality business operating a restaurant named 'U Rudolfa' located in Hradec Králové, Czech Republic. The business offers restaurant dining services and catering for events, including romantic dinners. The website content is accessible and well-structured, with a professional design using modern front-end technologies such as Bootstrap and JavaScript libraries. However, the site lacks critical compliance documents such as privacy and cookie policies, and no explicit contact information is found on the site. The WHOIS data is unavailable or protected, which limits the ability to fully verify domain legitimacy and ownership details. HTTPS is enabled, but security headers are missing, which could be improved to enhance security posture.

M

Magnalink, a.s.

magnalink.cz

31

Magnalink, a.s. is a Czech regional internet service provider offering high-speed internet, digital television, VOIP telephony, and camera security systems primarily targeting households and businesses in the Hradec Králové region. The website presents a professional and consistent brand image with clear service offerings and customer testimonials, indicating a stable market position within the telecommunications sector. The technical infrastructure includes modern JavaScript libraries and tracking technologies, with a cookie consent mechanism supporting GDPR compliance. Security posture is adequate with HTTPS enabled, but lacks some recommended security headers, suggesting room for improvement. WHOIS data is unavailable due to privacy protection, which is common and justified for this business type. Overall, the website is trustworthy and functional, with moderate risk due to limited security header implementation and missing explicit privacy policy.

D

Dahasl s.r.o.

dahasl.cz

49

Dahasl s.r.o. is a Czech-based company specializing in the supply and installation of low-voltage technologies and security systems. The company positions itself as a traditional and reliable provider with extensive experience, offering comprehensive services from project design to maintenance and servicing of electrotechnical systems. Their target audience primarily includes businesses and organizations requiring advanced security and technology solutions. The website reflects a medium-sized enterprise with a professional online presence, including client references and statistical indicators of business activity. Technically, the website employs a standard modern technology stack including Bootstrap, jQuery, and various UI libraries, with a cookie consent mechanism and Google Analytics integrated with consent controls. The site is mobile-optimized and well-structured, though no CMS or hosting provider details are evident. Performance is moderate, and SEO practices appear adequate. From a security perspective, the site uses HTTPS (assumed though not explicitly confirmed), includes a cookie consent banner, and loads analytics scripts conditionally based on user consent. However, no explicit security headers or published security policies were detected, and no incident response or vulnerability disclosure information is available. The WHOIS data is unavailable, likely due to privacy protection, which limits transparency but does not inherently indicate risk. Overall, the website is professional and trustworthy with good privacy compliance and business credibility. The lack of WHOIS data and explicit security policies suggests areas for improvement in transparency and security posture. The risk level is moderate with no critical vulnerabilities detected in the analysis.

FOMA BOHEMIA spol. s r.o. is a well-established Czech manufacturer specializing in black and white photographic materials, radiodiagnostic films, and non-destructive testing (NDT) systems. Founded in 1921, the company has a long tradition and serves a niche market including photography professionals and industrial customers. Their business model includes manufacturing and direct sales through an e-shop partner site. The website reflects a consistent brand image and provides comprehensive product information and company history. Technically, the site is built on the EasyWeb CMS platform, utilizing modern JavaScript libraries and Google Analytics for user tracking. The site is mobile-optimized with good navigation and content quality. Security-wise, the site implements cookie consent mechanisms but lacks visible HTTP security headers and published security policies. The absence of WHOIS data reduces domain trust, though the website content and contact information appear legitimate. Overall, the site scores well on content and business credibility but could improve privacy compliance and security posture.

H

Hradecká kulturní a vzdělávací společnost s.r.o.

hradecko.info

46

The website hradecko.info represents a regional non-profit destination management organization focused on promoting tourism and cultural heritage in the Hradec Králové region of the Czech Republic. The organization operates key tourist attractions such as the White Tower, Bílá věž, and Kostel sv. Mikuláše, and collaborates closely with local government and tourism partners. The business model is centered on sustainable tourism development, funded by membership fees and local tourism taxes. Technically, the website is built on a Joomla CMS platform with a modern front-end stack including Bootstrap, jQuery, and various UI libraries. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features are basic. Hosting is provided by Webglobe, and the domain is relatively new but consistent with the organization's founding date. From a security perspective, the site shows no immediate vulnerabilities or exposed sensitive data, but lacks advanced security headers and DNSSEC is not enabled. HTTPS status is unknown from provided data and should be verified. Privacy compliance is partially addressed with a GDPR document available, and cookie consent mechanisms appear implemented. Contact information is clearly provided, but no incident response or security policy pages are present. Overall, the website is trustworthy and professionally maintained with a clear business purpose. Strategic improvements in security headers, HTTPS enforcement, and explicit security policies would enhance the security posture and compliance. The site is safe for general audiences with no adult or questionable content detected.

Město Mnichovo Hradiště operates an official municipal website providing comprehensive information and services to residents and visitors. The site offers news, event calendars, public service details, and tourism information, positioning itself as the primary digital gateway for the city. The business model is focused on government communication and community engagement, targeting local citizens and tourists. The website reflects a small-sized government entity with consistent branding and good content quality. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Analytics, and Nette Framework components. It is mobile optimized and accessible, with moderate performance. The site uses HTTPS and implements cookie consent mechanisms, demonstrating awareness of privacy compliance. However, some security best practices such as security headers and incident response disclosures are missing. From a security perspective, the site maintains a good posture with encrypted connections and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data is a notable anomaly, reducing domain registration trustworthiness, but the official contact information and consistent content strongly support legitimacy. Privacy policies and cookie management are well implemented, aligning with GDPR requirements. Overall, the website is professional, trustworthy, and serves its purpose effectively. Strategic improvements in security headers, incident response transparency, and domain registration visibility would enhance trust and resilience. The risk level is low, with no critical issues detected.

P

PRO POPULO Poprad, s.r.o.

propopulo-poprad.sk

48

PRO POPULO Poprad, s.r.o. is a Slovak company established in 1991, managing forestry and agricultural lands owned by the Roman Catholic Diocese of Spišské Podhradie since 1994. The company focuses on sustainable forestry, hunting management, research collaborations, and holds FSC certification, positioning itself as a trusted regional entity in land stewardship. The website is built on WordPress with Elementor, featuring a professional design and clear navigation, optimized for mobile devices. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and published privacy or cookie policies, indicating room for compliance improvement. Contact information is clearly provided, including a company email and physical address, enhancing business credibility. Overall, the site is safe, professional, and trustworthy, with minimal user tracking and no signs of malicious activity.

Hamrsport operates sports and leisure facilities in Prague, offering a variety of services including sports area rentals, tournaments, camps, and an online reservation system. The website targets families and sports enthusiasts, positioning itself as a local provider of recreational activities. The business appears small but well-established since 2014, with partnerships including local government entities. Technically, the website uses common frameworks like Bootstrap and jQuery, integrates Google Analytics and Facebook SDK for tracking, and provides a responsive design with moderate performance. Security posture is basic, with HTTPS implied but lacking explicit security headers and advanced protections. Privacy compliance is minimal, with a cookie consent banner but no visible privacy policy or terms of service. Contact information is comprehensive, including phone numbers, addresses, and a contact form with basic spam protection. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

K

Sportovní oblečení | Kappa

kappa-sport.cz

52

The website www.kappa-sport.cz is an e-commerce platform specializing in sports clothing and accessories, targeting general consumers interested in sportswear. The site presents a professional design with good content relevance and clear navigation, optimized for mobile devices. The technical infrastructure leverages modern frontend technologies including Bootstrap, jQuery, and several third-party marketing and analytics tools such as Cookiebot, Microsoft Clarity, and Google Tag Manager. Security posture is solid with HTTPS enforced and CSRF protection cookies in place, although some security headers are not explicitly detected. Privacy compliance is supported by a comprehensive cookie consent mechanism, but explicit privacy policy and terms of service pages were not found in the provided content. The absence of WHOIS data suggests privacy protection for the domain registration, which is common for retail e-commerce sites and does not raise immediate concerns. Overall, the website demonstrates a moderate to good security and privacy posture with room for improvement in transparency and security best practices.

B

BLUE-CELL, s. r. o.

dir-shop.cz

53

DIR-SHOP.cz is a specialized online retailer focused on diving equipment and accessories, operating since 2004 under the company BLUE-CELL, s.r.o. The website offers a wide range of products including analyzers, regulators, reels, lights, and underwater camera housings, targeting diving enthusiasts and professionals. The business operates primarily in the Czech Republic but offers worldwide shipping, positioning itself as a niche player in the diving retail market. The site demonstrates a good level of professionalism with clear product listings, company information, and user-friendly navigation. Technically, the website uses modern frontend technologies such as Bootstrap 5 and jQuery, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and performs moderately well. Security posture is adequate with HTTPS enforced and secure form submissions; however, it lacks important security headers which could enhance protection against common web threats. Privacy and cookie policies are present, with a cookie consent mechanism implemented, but GDPR compliance could be improved with more comprehensive disclosures and a dedicated data protection officer contact. Overall, the domain registration data aligns well with the website content, indicating a legitimate and established business. Strategic recommendations include enhancing security headers, improving privacy policy clarity, and establishing an incident response contact to strengthen trust and compliance.

Dun & Bradstreet is a globally recognized enterprise specializing in business data, analytics, and risk management solutions. The company serves a broad range of business clients, including financial institutions and compliance professionals, providing critical insights to support decision-making and compliance. Their market position is strong as a leading provider of business intelligence and credit risk data. The website reflects a mature digital presence with professional design and comprehensive content tailored to their B2B audience. Technically, the site employs modern web technologies including JavaScript frameworks and Google Tag Manager for analytics, with good mobile optimization and SEO practices. Security posture is robust with HTTPS enforcement and standard security headers, though explicit incident response and vulnerability disclosure information are not publicly available. Overall, the site demonstrates a high level of professionalism and trustworthiness, with privacy and cookie policies aligned with GDPR requirements. The absence of public WHOIS data suggests privacy protection, which is typical for large enterprises. Recommendations include enhancing transparency around security policies and incident response to further strengthen trust.

ATI DELICATES s.r.o. is a Czech-based small-sized company specializing in the import and distribution of Mediterranean and other quality food products primarily from Greece, Italy, Spain, France, and other countries. Established in 2009, the company has a solid market presence in the Czech Republic and Slovakia, representing well-known international brands and offering a diverse portfolio of food categories. The website reflects a professional business model focused on retail distribution and brand representation within the food sector. Technically, the website uses modern web technologies including Bootstrap, jQuery, and Google Analytics, providing a responsive and user-friendly experience with moderate performance. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and published security policies. Privacy compliance is basic, with no visible privacy policy or terms of service, which should be addressed to improve trust and regulatory adherence. Overall, the website is trustworthy and professionally maintained, with clear contact information and consistent branding.

I

ILA, s.r.o.

ila.cz

47

ILA, s.r.o. is a Czech consulting company specializing in grant advisory, digitalization, innovation support, and implementation of new technologies. They assist clients in formulating and implementing financing strategies from public sources, preparing project applications for national and EU funding programs, and managing project administration and reporting. The company targets organizations seeking expert guidance in public funding and innovation projects. Their market position is that of a specialized niche consultancy with a strong local presence and reputable partners. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Fonts, with a responsive design and cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is adequate but could be improved by implementing additional HTTP security headers and formal security policies. The absence of WHOIS data limits domain trust assessment, but the website content and contact information appear legitimate and professional. Overall, the site is well-structured, user-friendly, and compliant with GDPR requirements.

A

Agency for regional development support Košice, n.o

arr.sk

57

The Agency for regional development support Košice, n.o is a Slovak non-profit organization dedicated to supporting regional development through various international projects focused on climate change, environmental protection, cultural heritage, education, social entrepreneurship, and sustainable mobility. The agency maintains a professional online presence with detailed project news and active engagement through social media channels. Their target audience includes regional stakeholders, educational institutions, and environmental organizations. The business model revolves around project management, capacity building, and fostering sustainable development in the Košice region. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Cookiebot for cookie consent, and Google Tag Manager for analytics. The site is mobile-optimized and demonstrates good SEO practices. Performance is moderate, with room for improvement in accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms, but lacks published security policies and incident response information. Overall, the website is trustworthy and professionally maintained, with clear contact information and active communication channels. However, it would benefit from publishing explicit privacy policies, terms of service, and security policies to enhance compliance and user trust. No security vulnerabilities or suspicious content were detected during analysis.

N

NitraDeň.sk

nitraden.sk

62

NitraDeň.sk is a regional online news portal focused on delivering local news, events, sports, and cultural content to residents and visitors of the Nitra region in Slovakia. The website offers a variety of content types including articles, photo galleries, videos, and social comics, positioning itself as a key media source for the local community. The business model appears to be advertising-driven with additional event promotion services. Technically, the site is built on WordPress with modern plugins for SEO, event management, and push notifications, indicating a moderate level of digital maturity. The site is mobile-optimized and incorporates standard web technologies and analytics tools. Security posture is adequate with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. Privacy compliance is addressed with visible privacy and cookie policies and GDPR consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, serving its regional audience effectively.

The website iedu.sk serves as the official support and information portal for the Slovak Ministry of Education, Research, Development and Youth. It provides valuable resources and call center support for schools, students, teachers, and other stakeholders involved in educational projects. The platform hosts links to various educational tools and projects, including COVID-19 school forms, digital learning platforms, and antivirus solutions for schools. The site is positioned as a governmental service portal with a medium-sized operational scope and a clear focus on education within Slovakia. Technically, the website employs a modern front-end technology stack including Bootstrap, jQuery, Font Awesome, and other libraries to deliver a responsive and user-friendly experience. The site is mobile-optimized and structured with clear navigation, although it lacks advanced SEO and accessibility features. No CMS or hosting provider details are evident from the source. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks explicit security headers and formal security policies, incident response contacts, or vulnerability disclosure mechanisms. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance, security hardening, and transparency regarding incident response and vulnerability management.

M

MESTSKÉ LESY KOŠICE a.s.

meleskosice.sk

48

MESTSKÉ LESY KOŠICE a.s. is a municipal forestry company based in Košice, Slovakia, dedicated to sustainable forest management and environmental stewardship. The company operates with a focus on balancing economic benefits with public and ecological functions of forests. Their services include wood trade, public auctions, firewood sales, seedling trade, and forest-related services including hunting and leasing of recreational facilities. The website reflects a well-established regional entity with transparent operations, including published annual reports and FSC certification, underscoring their commitment to responsible forestry. Technically, the website employs a traditional web stack with jQuery, Bootstrap, and various JavaScript plugins to provide a responsive and user-friendly experience. While the site is mobile-optimized and well-structured, there is room for improvement in modernizing the tech stack and enhancing accessibility and SEO. The presence of Google Analytics indicates moderate user tracking, balanced by a clear cookie consent mechanism. From a security perspective, the site shows basic good practices such as cookie consent and no visible sensitive data exposure. However, it lacks explicit security headers and documented incident response or vulnerability disclosure policies. The SSL configuration and hosting details are not explicitly provided, suggesting an area for further assessment. Overall, the security posture is adequate but could be strengthened with additional measures. The overall risk assessment is low given the nature of the business and the absence of critical vulnerabilities or suspicious indicators. Strategic recommendations include implementing comprehensive security headers, publishing detailed security and privacy policies, and adopting a security.txt file for vulnerability reporting. These steps would enhance trust and compliance, supporting the company’s transparent and responsible image.

B

Beatworx s.r.o.

letitroll.eu

67

Let It Roll is a prominent drum & bass music festival organized by Beatworx s.r.o., hosting large-scale events primarily in the Czech Republic. The website serves as a portal for event information, ticket booking, and merchandise sales, targeting music enthusiasts and festival attendees globally. The digital infrastructure is built on a modern platform with standard web technologies and includes essential marketing and analytics tools. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. The absence of public WHOIS data is consistent with privacy protection practices common in event management businesses. Overall, the site presents a professional and trustworthy front for its audience.

B

BAUMIT, spol. s r.o.

baumit.cz

55

Baumit, spol. s r.o. is a well-established Czech company specializing in manufacturing and distributing building materials, including facade plasters, paints, insulation systems, and renovation products. The company targets construction professionals and end consumers seeking quality building solutions. The website reflects a mature digital presence with modern technologies such as Vue.js, Google Tag Manager, and advanced tracking tools, supporting a good user experience and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. The domain's WHOIS data confirms legitimacy and long-term operation since 1998. Overall, Baumit presents a trustworthy and professional online presence aligned with its business objectives.

H

Horolezecké centrum Brno s.r.o.

klajda.cz

54

Horolezecké centrum Brno s.r.o. operates a network of climbing walls and offers climbing courses and safety training primarily in Brno, Czech Republic. The company also runs an equipment shop and provides specialized training and equipment inspections. The website reflects a small but professional local business focused on climbing enthusiasts and safety education. The presence of multiple locations and partner affiliations indicates a well-established local market position. Technically, the website uses modern frontend technologies including Bootstrap, Font Awesome, jQuery, and Google Tag Manager for analytics. The site is mobile-optimized with good navigation and content relevance. However, there is no detected CMS or advanced backend framework visible. Hosting appears to be provided by SPWeb, a Czech hosting provider. From a security perspective, the site uses HTTPS and includes no visible sensitive data exposure. However, it lacks security headers and explicit privacy or cookie policies, which are compliance gaps. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information support legitimacy. No WAF or blocking mechanisms were detected, and no adult or explicit content is present. Overall, the site is a good representation of a small local business with moderate technical maturity and some security and compliance improvements needed. The domain registration opacity is a concern and should be addressed to improve trust.

D

Dopravní podnik města Brna, a. s.

pipniajed.cz

53

The website 'Pípni a jeď!' is the official electronic ticketing platform for Dopravní podnik města Brna, the main public transport operator in Brno, Czech Republic. It offers a contactless payment system for public transport tickets using Visa, Mastercard, GooglePay, and ApplePay, enabling passengers to pay without paper tickets or registration. The platform supports automatic fare calculation, various ticket types including discounted and multi-passenger tickets, and integration with regional transport tariffs. The site targets daily commuters and occasional travelers within Brno and its immediate surroundings.

B

Beatworx s.r.o.

letitroll.cz

68

Let It Roll Festival, operated by Beatworx s.r.o., is a prominent drum & bass music festival based in the Czech Republic, recognized as the largest of its kind globally. The website serves as a platform for event information, ticket sales, and merchandise, targeting drum & bass enthusiasts and festival attendees. The digital infrastructure leverages modern web technologies, including multiple analytics and advertising tools, and integrates a cookie consent mechanism to comply with privacy norms. Security posture is strong with HTTPS enforcement and security headers, though the absence of a public privacy policy and WHOIS data limits full trust assessment. Overall, the site presents a professional and engaging user experience with clear navigation and responsive design.

M

Mikulove – Festival nepopulární hudby

miku-love.cz

40

The website www.miku-love.cz represents the Mikulove Festival, a cultural event focused on alternative and unpopular music genres held in Mikulov, Czech Republic. The site provides detailed information about the festival's program, artists, and accompanying cultural activities. It targets music enthusiasts and cultural event attendees, operating primarily as an event organizer with ticket sales as a revenue stream. Technically, the site is built on WordPress 6.8.1 with common libraries such as jQuery and uses Google Tag Manager and Facebook Pixel for analytics and tracking. The site is mobile-optimized and has good content quality and navigation. Security-wise, the site uses HTTPS but lacks important security headers and privacy compliance documentation, which lowers its security posture. WHOIS data is unavailable, limiting domain trust assessment. Overall, the site is professional and safe but would benefit from enhanced security and privacy practices.

F

freeCodeCamp.org

freecodecamp.org

43

freeCodeCamp.org is a leading non-profit educational platform dedicated to providing free coding education globally. It offers an extensive curriculum covering web development, data science, and programming, supported by a large and active community. The platform is widely recognized for its certifications and open-source curriculum, targeting learners ranging from beginners to career changers. Technically, the website leverages modern frameworks such as React and Gatsby, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS enforcement, comprehensive security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms. Overall, freeCodeCamp.org demonstrates a mature digital presence with high trustworthiness and professionalism.

L

La Gran Escapada

lagranescapada.com.mx

55

La Gran Escapada is a government-supported Mexican tourism promotion platform aimed at boosting national tourism through special discounts and offers on hotels, restaurants, and experiences. The website targets a general audience interested in domestic travel and leverages modern web technologies such as Angular and Bootstrap to deliver a responsive and visually appealing user experience. The platform positions itself as a trusted source for tourism promotions backed by official government entities, enhancing its credibility in the hospitality sector. Technically, the website employs a modern frontend stack with Angular 13 and Bootstrap 5.3, ensuring good mobile optimization and a clean design. However, there is room for improvement in accessibility and SEO optimization. The site loads external resources from reputable CDNs but lacks advanced analytics or tracking tools, indicating minimal user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies or incident response contacts. No vulnerability disclosure or security.txt files were found. The absence of cookie consent mechanisms and limited privacy compliance indicators suggest the site could improve its adherence to data protection regulations. No suspicious or vulnerable scripts were detected, and no exposed sensitive data was found. Overall, the website presents a moderate risk profile with good business credibility but some gaps in privacy compliance and security best practices. Strategic improvements in security headers, privacy notices, and incident response transparency would enhance trust and compliance.

S

SIA Area IT

area.lv

34

Area IT is a Latvian-based small technology company specializing in web hosting, domain registration, and email hosting services. Established in 2009, the company targets private individuals and small to medium-sized businesses primarily within Latvia. Their website is professionally designed, offering a range of hosting solutions including WordPress and WooCommerce hosting, with competitive pricing and clear service descriptions. The company maintains a strong local market position supported by customer testimonials and transparent contact information. Technically, the website is built on WordPress with Elementor, leveraging modern JavaScript libraries and frameworks such as jQuery, Owl Carousel, and Swiper for enhanced user experience. The site is mobile-optimized and employs HTTPS with free SSL certificates for all hosted domains, indicating a commitment to secure communications. Performance is moderate with room for improvement in accessibility and SEO. From a security perspective, the site enforces HTTPS and provides automated daily backups, but lacks explicit security headers and a formal security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; while a comprehensive privacy policy and terms of service exist, there is no visible cookie consent mechanism, which may pose GDPR compliance risks. Overall, Area IT presents a trustworthy and professional online presence with a solid business foundation. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance their security posture and regulatory compliance, further strengthening customer trust.

U

Univerzita obrany

unob.cz

48

Univerzita obrany is a Czech public university specializing in military and defense education, established in 2004. The website serves as a comprehensive portal for prospective students, current students, employees, and alumni, offering detailed navigation to various faculties and centers related to military leadership, technologies, medical education, and research. The site is built on a modern WordPress platform with Elementor, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and basic security practices, though explicit security policies and incident response information are lacking. Privacy compliance is minimal with no visible privacy policy but a cookie consent mechanism is present. Overall, the website is professional, trustworthy, and well-aligned with its educational mission.

R

run-magazine.cz

run-magazine.cz

46

RUN magazine (run-magazine.cz) is a Czech-language digital media platform specializing in running, triathlon, and related endurance sports. Established in 2006, it serves a dedicated Czech audience with news, training tips, race reports, nutrition advice, and event calendars. The website is built on WordPress using the Magazine Hoot theme and integrates advertising and analytics tools such as AdRotate and Google Analytics via MonsterInsights. Social media presence includes Facebook and Instagram. While the site enforces HTTPS and has cookie consent mechanisms, it lacks explicit privacy policies, terms of service, and security incident response information. The domain registration is consistent with the website's Czech focus and long operational history.

S

SIA Kurzemes televizija

kurzemestv.lv

48

Kurzemes Televīzija is a small regional television broadcaster based in Latvia, producing bilingual content in Latvian and Russian. The company targets the local population of the Kurzeme region, offering news, cultural programming, and video archives. The website is built on WordPress with common plugins and frameworks, providing a good user experience with clear navigation and mobile optimization. However, the site lacks formal privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure information. Contact information is clearly presented, enhancing business credibility. Overall, the domain registration aligns with the business identity, though WHOIS data is incomplete.

B

Business Computer Services (BCS)

exposupport.pl

56

Business Computer Services (BCS) operates the ExpoSupport™ platform, a specialized online event management system tailored for trade fairs, exhibitions, and conferences. The company, founded in 1993 and based in Poland, offers a comprehensive suite of tools including exhibitor registration, ticketing, invoicing, communication, and mobile applications. The platform targets event organizers and participants, positioning itself as a niche provider within the exhibition industry with a focus on efficiency and GDPR compliance. Technically, the website employs a moderately modern stack featuring AngularJS 1.6.1, jQuery, Bootstrap, and Kendo UI, hosted likely via home.pl S.A. The site is mobile-optimized and performs moderately well, though some technical debt is evident due to older frameworks. SEO and accessibility are basic but functional. Analytics and marketing tools include Google Tag Manager and Facebook Pixel, indicating moderate user tracking without explicit cookie consent mechanisms. From a security perspective, the site uses HTTPS and secure forms but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of privacy and cookie policies represents a compliance gap, especially under GDPR regulations. Overall, the website is professional and trustworthy with clear business information and contact channels. The domain registration is consistent with the business history and location. Strategic improvements in privacy compliance and security hardening would enhance the site's trustworthiness and regulatory adherence.

W

Wink

wink.cz

42

Wink.cz is a Czech advertising agency operating since 2001, offering media and advertising services primarily targeted at a general audience in the Czech Republic. The website presents basic business information with a focus on event promotion, particularly music concerts, but lacks detailed contact or policy information. Technically, the site is built on Drupal CMS and uses common web libraries such as jQuery, Bootstrap, and Font Awesome, indicating a moderate level of digital maturity. However, the site shows limited mobile optimization and basic SEO practices. Security posture is minimal with no detected security headers or privacy policies, and no visible analytics or tracking mechanisms, which may reflect a low level of data collection but also a lack of compliance transparency. Overall, the site is functional but would benefit from enhanced security, privacy compliance, and richer business information to improve trust and professionalism.

M

My-hosting.lv

my-hosting.lv

41

My-hosting.lv is a Latvian-based IT and business services provider specializing in web hosting, e-commerce platforms, cloud services, business email, legal and accounting support, and office IT equipment sales. The company targets small and medium enterprises seeking comprehensive digital and business solutions. Their website is built on Joomla CMS and features a professional design with clear navigation and good mobile optimization. The technical infrastructure includes modern JavaScript libraries and plugins, supporting a moderate performance level. Security posture is adequate with HTTPS enforced and CSRF protections, but lacks explicit security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices. WHOIS data confirms the legitimacy of the domain with consistent registration details matching the business information. Overall, the website is trustworthy and professional, serving as a solid digital presence for the company.

P

Primus Partners Pvt. Ltd.

primuspartners.in

50

Primus Partners Pvt. Ltd. is a consulting and technology solutions firm focused on delivering advisory, technology, and capital services primarily in India. The company positions itself as a key player in navigating complex business opportunities in India, targeting businesses, government entities, investors, and startups. Their services include advisory on economic potential, ESG goals, digital strategy, public policy, and transaction realization, alongside technology solutions and capital facilitation. The website demonstrates a moderate level of digital maturity with modern technologies such as Bootstrap, Video.js, and integrations with Mailchimp and Google Analytics. The site is mobile-optimized and SEO-friendly but lacks explicit privacy and cookie policies, which impacts compliance. Security posture is adequate with HTTPS and CSRF tokens but lacks security headers and incident response disclosures. Overall, the website is professional and trustworthy but could improve in privacy compliance and security transparency.

F

Dětský festival Fesťáček – Nejzábavnější dětský festival

festacekfestival.cz

66

The website festacekfestival.cz represents a children's festival event based in the Czech Republic, focusing on providing entertaining activities for children and families. The site is relatively new, with domain registration dating back to 2022, aligning with the event's likely recent establishment. The business model centers on event organization and promotion within the local/regional market. The website uses WordPress CMS with Elementor page builder and integrates Cookiebot for cookie consent management, reflecting a moderate level of digital maturity and compliance with privacy regulations. Technically, the site employs modern web technologies and is mobile optimized, though some security headers could be enhanced to improve security posture. The security setup includes HTTPS and cookie consent mechanisms, but lacks explicit privacy policy and terms of service pages in the analyzed content. Overall, the site demonstrates a good balance of usability, compliance, and security for a small event-focused business.

澳

澳門特別行政區政府

gov.mo

70

The website www.gov.mo is the official portal of the Macau Special Administrative Region Government, providing authoritative information on government departments, public services, legal regulations, tourism, and news. It targets Macau residents, visitors, and businesses seeking official government information. The site is multilingual, supporting Traditional and Simplified Chinese, Portuguese, and English, reflecting Macau's linguistic diversity. The business model is government service delivery and information dissemination, positioning itself as the primary official source for Macau SAR government-related content. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, Owl Carousel, and uses analytics tools such as Google Analytics, Google Tag Manager, and Matomo. The site is mobile-optimized, accessible, and SEO-friendly, with good performance characteristics. Security is well implemented with HTTPS and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is basic with clear privacy and cookie policies but lacks explicit GDPR compliance indicators. Security posture is solid with encrypted connections and no exposed sensitive data. However, the absence of a published security policy or incident response contact and lack of vulnerability disclosure mechanisms are areas for improvement. Overall, the site is trustworthy, professional, and serves its government function effectively. The risk assessment is low, with no signs of malicious content or security issues. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and implementing a vulnerability disclosure program to further strengthen trust and security culture.

T

TriboTec - Centralne Smarowanie

tribotec.pl

47

TriboTec is a well-established Polish manufacturer and supplier specializing in central lubrication systems, dosing technology, hydraulic and lubrication aggregates, and systems for rail vehicle technology. With approximately 80 years of experience, the company serves industrial and transportation sectors, offering design, production, installation, and service of lubrication systems. The website reflects a mature B2B business model with a clear focus on technical products and services. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and integrating Google Tag Manager for analytics. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is strong with HTTPS and security headers implemented, and no visible vulnerabilities or sensitive data exposure. However, privacy compliance could be improved by adding explicit GDPR details and cookie consent mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

I

Izba Gospodarcza „Wodociągi Polskie”

targi-wod-kan.pl

55

The website targi-wod-kan.pl represents the official platform for the XXXI edition of the International Trade Fair for Water Supply and Sewage Machinery and Equipment (WOD-KAN) scheduled for May 2025 in Bydgoszcz, Poland. Organized by the Izba Gospodarcza „Wodociągi Polskie”, it serves as a key event in the European water and sewage industry, attracting manufacturers, experts, and innovators. The site provides detailed event information, schedules, exhibitor lists, and contact details, targeting industry professionals and stakeholders. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating Google Analytics and Tag Manager for tracking. It employs modern web fonts and is mobile optimized with good SEO practices. However, some accessibility and security headers could be enhanced. The site uses HTTPS with a good SSL configuration, but lacks explicit security policies and vulnerability disclosure mechanisms. From a security perspective, the site shows a moderate security posture with no critical vulnerabilities detected. The absence of privacy and cookie policies is a compliance gap, especially under GDPR. Contact information is clearly provided, but no dedicated security or incident response contacts are found. Overall, the domain registration aligns well with the business, supporting legitimacy. Strategically, the site is well-positioned in its niche with strong business credibility and professional presentation. To improve, the organization should implement comprehensive privacy and cookie policies, enhance security headers, and publish incident response information to strengthen trust and compliance.

S

Studio Wyposażenia Wnętrz

studioww.pl

55

Studio Wyposażenia Wnętrz is a small, established Polish company based in Płock, specializing in custom office and school furniture since 1996. The company offers a broad range of furniture solutions including ergonomic chairs, metal cabinets, and window coverings, targeting businesses and institutions in the local region. Their market position is supported by long-term experience and authorized distributor status. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google APIs, providing a responsive and user-friendly experience. However, some accessibility and security best practices could be improved. Security posture is moderate with HTTPS enabled but lacking explicit security headers and formal vulnerability disclosure mechanisms. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced compliance and security measures.

I

Indian Exhibition Industry Association

ieia.in

59

Indian Exhibition Industry Association (IEIA) is a well-established national apex body representing the exhibitions industry in India since 2006. The organization serves over 400 members including industry players, sectoral associations, and trade bodies. The website provides comprehensive information about the association's activities, events, membership, and resources, targeting exhibition professionals and businesses in India. The digital infrastructure is built on modern web technologies including Bootstrap, jQuery, and various UI libraries, supporting a responsive and user-friendly experience. Security best practices such as HTTPS and security headers are implemented, though privacy and cookie policies are not visibly published, indicating a compliance gap. Overall, the website demonstrates a strong market position and credible business presence with active social media engagement and extensive event listings.

Є

Євроіндекс

euroindex.ua

57

Euroindex is a well-established Ukrainian company specializing in organizing trade shows and exhibitions across multiple strategic sectors such as energy, retail, security, and franchising. With over 30 years of experience and memberships in reputable industry associations like UFI and CENTREX, it holds a strong market position in Ukraine's exhibition industry. The website reflects a professional business model focused on event organization and networking, targeting businesses and professionals in Ukraine. Technically, the site uses common frameworks like Bootstrap and jQuery, providing a responsive and user-friendly interface, though performance is moderate and accessibility is basic. Security posture is limited, with no visible security headers or explicit HTTPS enforcement in the provided data, and privacy compliance is minimal with only a basic privacy policy and no cookie consent mechanism. Overall, the site is functional and credible but would benefit from enhanced security and privacy practices.