Security Directory

Pošumavská odpadová, s.r.o. is a regional waste management company operating primarily in the Czech Republic, serving over 48 municipalities and more than 53,000 residents. The company provides comprehensive waste services including mixed municipal waste, sorted waste, hazardous waste, bulk waste, and bio waste management. They operate multiple collection yards across several towns including Klatovy, Sušice, Kašperské Hory, and Kolinec. The website reflects a regional service provider with a focus on public and municipal waste management needs. Technically, the website uses legacy HTML with windows-1250 charset and includes common JavaScript libraries such as jQuery and Google Analytics for tracking. The site lacks modern CMS indicators and advanced frameworks, suggesting a basic but functional technical infrastructure. Performance and mobile optimization are moderate to basic, with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and includes Google site verification, but lacks visible security headers and privacy or cookie policies, indicating gaps in compliance and security best practices. No WHOIS data is available, which reduces transparency and trustworthiness. The site does not appear to be blocked or protected by a WAF, and no forms collecting sensitive data are present. Overall, the website is functional and provides relevant business information but requires improvements in privacy compliance, security posture, and technical modernization to enhance trust and user experience.

P

PrintLife

printlife.cz

57

PrintLife is a small local printing service provider based in Brno, Czech Republic, specializing in express printing services including business cards, flyers, posters, catalogs, and banners. The website is built on the Webnode platform and hosted via Amazon Cloudfront CDN, indicating a modern and scalable technical infrastructure. The site is well-structured, mobile-optimized, and provides clear navigation for its target audience. However, the absence of WHOIS registration data and lack of explicit contact information on the website reduce the overall trustworthiness from a security and compliance perspective. The site uses HTTPS and implements a cookie consent mechanism, but lacks visible privacy policy and security headers, which are important for GDPR compliance and security best practices. Overall, the website presents a professional business front but would benefit from enhanced transparency and security measures.

A

Algopine

algopine.com

56

Algopine is a specialized technology company providing data science, machine learning, and AI-driven predictive software services primarily targeting e-commerce, retail, and industrial sectors. Their offerings include demand forecasting, personalized recommendations, price elasticity modeling, and custom AI projects leveraging large language models and other advanced techniques. The company positions itself as a niche provider with a strong focus on delivering practical, data-driven solutions to optimize business operations for large clients. The website is professionally designed, well-structured, and mobile-optimized, reflecting a mature digital presence. Technically, the site uses modern web standards and custom analytics, though it lacks some advanced security headers and DNSSEC. Security posture is good with HTTPS enforced and domain transfer protections in place, but could be improved with additional policies and headers. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism. Overall, Algopine demonstrates a credible and trustworthy online presence with room for enhanced security and compliance documentation.

Úhlava o.p.s. is a Czech non-profit organization focused on lifelong education and regional development in the Plzeňský kraj region. The website serves as a portal for educational offerings, community events, and regional initiatives targeting a broad audience from children to seniors. The organization has a long-standing presence since 2001, reflected in the domain age and active content updates. Technically, the website uses standard web technologies including JavaScript libraries, Google Fonts, and social media SDKs, but lacks modern CMS or advanced frameworks. Security posture is moderate with no visible HTTPS or security headers in the provided data, and privacy compliance is weak due to missing privacy and cookie policies. The site integrates Google Analytics and DoubleClick for tracking and advertising, indicating moderate user tracking. Overall, the website is functional and professionally presented but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

W

Weber

weberpas-mixer.cz

41

The website 'Weberpas mixer' is a newly launched digital platform associated with the Weber brand, specializing in construction materials such as facades, plasters, coatings, insulation, flooring, and waterproofing. It serves primarily construction professionals and consumers in the Czech Republic, offering product-related tools and links to related Weber services. The site is part of the Saint-Gobain group, indicating a strong market position in the manufacturing sector. Technically, the site is built on Angular 10.1.6, with a modern frontend but limited backend or CMS indications. The site is mobile-optimized with basic accessibility and SEO features but lacks advanced analytics or tracking.

puren gmbh is a German manufacturing company specializing in high-performance polyurethane rigid foam insulation products. Their website showcases a broad product portfolio targeting architects, planners, trade professionals, industry OEMs, private builders, and the housing sector. The company emphasizes sustainability and energy efficiency in construction. Technically, the website is built on TYPO3 CMS, employs modern web technologies, and includes GDPR-compliant privacy and cookie consent mechanisms. The site is well-structured, mobile-optimized, and professionally designed, reflecting a mature digital presence. Security posture is generally good with HTTPS enforced and secure session management, though the absence of security headers and a public security policy are areas for improvement. The WHOIS data is missing or unavailable, which raises concerns about domain registration transparency, but the website's comprehensive contact information and social media presence support its legitimacy. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, with recommendations to enhance security headers and publish incident response information.

P

PREFA International

prefa.com

54

PREFA International is a well-established manufacturer specializing in high-quality aluminium products for roofing, facades, and flood protection, offering a 40-year material and color guarantee. The company targets construction professionals and building owners across multiple European countries, as evidenced by their extensive network of localized websites. The business model focuses on manufacturing and distributing durable aluminium building materials, positioning PREFA as a trusted international brand in the construction sector. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript and CSS technologies. The site demonstrates good mobile optimization and SEO practices, although performance is moderate. The absence of visible analytics or tracking scripts suggests a minimal user tracking approach. However, the lack of cookie consent mechanisms indicates room for improvement in privacy compliance. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data in its HTML content. Nonetheless, the absence of security headers such as Content-Security-Policy and X-Frame-Options reduces the overall security posture. The WHOIS data is notably missing or inaccessible, which raises some concerns about domain registration legitimacy, although the professional and consistent website presence mitigates these concerns to some extent. Overall, PREFA International's website is professional and trustworthy, with solid business credibility and technical implementation. Strategic improvements in privacy compliance and security headers, along with clarifying domain registration details, would enhance the site's security and trustworthiness further.

The website kostelchudenice.cz is dedicated to the Church of St. John the Baptist in Chudenice, Czech Republic, focusing on the restoration project funded by the EU and promoting cultural tourism. It provides detailed historical and restoration information, contact details for the local parish and museum, and links to partner sites. The site is small-scale, serving a local audience interested in cultural heritage. Technically, it uses a legacy charset and common JavaScript libraries like jQuery and Fancybox, with Google Analytics for visitor tracking but lacks modern security headers and privacy compliance features. The security posture is moderate but could be improved by implementing HTTPS verification, security headers, and privacy policies. Overall, the site is functional and informative but requires enhancements in privacy compliance and security best practices to improve trust and regulatory adherence.

K

Koupelny JaS

koupelny-jas.cz

49

Koupelny JaS is a Czech retail and wholesale company specializing in ceramic tiles, bathroom equipment, and accessories. Established in 1992, it operates multiple physical stores across the Czech Republic and offers services including delivery, 3D bathroom design, and professional installation. The website is well-structured, providing detailed product catalogs and clear contact information, supporting its market position as a reputable regional player in the bathroom retail sector. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Analytics 4 and Sklik.cz, with good mobile optimization and user experience. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks visible advanced security headers. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact details appear legitimate. Overall, the site presents a professional and trustworthy front for its business operations.

The website www.chudenice.eu is a local community informational portal focused on the town of Chudenice and its surroundings in the Czech Republic. It provides historical, cultural, tourism, and event information relevant to residents and visitors. The site is modest in scale, targeting a general audience interested in local heritage and tourism. The business model appears to be informational and community service oriented, with no direct commercial transactions evident. Technically, the site uses legacy web technologies including HTML with windows-1250 charset and IE8 compatibility, along with JavaScript libraries such as jQuery and integrations with Facebook SDK and Google Analytics for social and tracking purposes. However, the site lacks modern security practices such as HTTPS enforcement and security headers, and does not provide privacy or cookie policies, which impacts its privacy compliance and security posture. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. The domain WHOIS data is not publicly available due to EURid privacy protection, which is common for .eu domains and does not raise immediate legitimacy concerns. Overall, the site is functional for its purpose but requires improvements in security, privacy compliance, and technical modernization.

Obecní úřad Petrovice operates as the local municipal government office for Petrovice u Sušice, providing administrative and public services to residents and visitors. The website serves as an information portal offering contact details, official documents, public notices, and community updates. The target audience is primarily local citizens and stakeholders interested in municipal affairs. The business model is that of a government entity focused on local administration and public service delivery. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and integrates Google Analytics for visitor tracking alongside a cookie consent management system to comply with privacy regulations. The site demonstrates basic mobile optimization and accessibility features but lacks advanced frameworks or CMS identification. Performance is moderate with room for improvement in responsiveness and SEO. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers such as CSP or HSTS. The contact form includes anti-spam honeypot fields, indicating some attention to security. However, the absence of WHOIS data and security policy pages suggests areas for enhancement in transparency and trust. No critical vulnerabilities or adult content were detected, and privacy compliance appears adequate. Overall, the website is functional and serves its purpose as a municipal information portal but would benefit from improved security practices, enhanced technical modernization, and clearer domain registration transparency to strengthen trust and compliance.

Kovopol.cz represents a manufacturing business operating under the parent company KAVALIERGLASS a. s., specializing in the production and supply of industrial machinery including automats for nail production, accessories, and equipment for automotive repair and casting. The company targets industrial clients and machine operators primarily in the Czech Republic. The website content is basic but informative, providing product categories and contact details, though lacking modern web design and mobile optimization. Technically, the site uses simple HTML, CSS, and JavaScript without modern frameworks or CMS, and there is no evidence of HTTPS or advanced security measures. Security posture is weak due to missing HTTPS and security headers, and there are no visible privacy or cookie policies, which impacts compliance with GDPR. Overall, the site is functional but requires significant improvements in security, privacy, and technical modernization to enhance trust and user experience.

N

Nameshift.com

wfa.be

48

Nameshift.com operates a domain name marketplace and escrow service designed to facilitate safe and fast domain transfers without additional fees to buyers. The company targets individuals and businesses seeking secure domain acquisition with escrow protection. The website is built using modern web technologies such as SvelteKit and serves content via a CDN, indicating a contemporary technical infrastructure. However, the site currently shows mostly placeholder content, suggesting it may be under development or loading dynamically. From a security perspective, the website uses HTTPS for asset delivery but lacks visible security headers and formal security policies. There are no privacy or cookie policies, and no contact emails or phone numbers are provided, which limits transparency and user trust. The domain is very recently registered in May 2024, which may be appropriate for a new business but reduces historical trust indicators. The footer provides company registration and VAT details consistent with a Dutch entity. Overall, the website presents a basic but functional domain purchase service with escrow, but it lacks comprehensive privacy, security, and contact information. The technical implementation is modern but could benefit from improved accessibility, SEO, and security best practices. The risk level is moderate due to the new domain age and limited transparency. Strategic recommendations include adding privacy and cookie policies, publishing security and incident response information, providing clear contact channels, and enhancing content completeness and accessibility to improve trust and compliance.

D

Dřevoplast Ludvík s.r.o.

drevoplast.com

45

Dřevoplast Ludvík s.r.o. is a Czech family-owned manufacturing company specializing in plastic packaging and components, with over 30 years of experience serving diverse industrial sectors including automotive, food, chemical, cosmetic, healthcare, and beekeeping. The company operates both manufacturing and e-commerce channels, offering custom production and a range of plastic products. The website is professionally designed, mobile-optimized, and provides clear contact information and social media presence, reflecting a mature digital presence. Technically, the website uses modern JavaScript and CSS technologies with Google Tag Manager for analytics. It is served over HTTPS with cookie consent mechanisms in place, demonstrating good privacy compliance. However, the absence of security headers and lack of a dedicated security policy or incident response information indicate areas for improvement in security posture. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy and consistency with the company's claimed long history. Despite this, the website content and business information appear credible and trustworthy. Overall, the site scores well on content quality, privacy compliance, and business credibility but should address domain registration transparency and enhance security headers. Strategic recommendations include implementing security headers, publishing security and incident response policies, verifying domain registration details, and continuing to enhance privacy and security practices to strengthen trust and compliance.

Studio Artefakt s. r. o. is a Czech-based advertising and graphic design studio established in 2001, offering a range of creative services including graphic design, corporate events, professional photography, and 3D services. The company targets businesses seeking personalized and flexible marketing solutions. The website reflects a small, local creative agency with consistent branding and a basic but functional online presence. Technically, the website is built with standard HTML, CSS, and JavaScript without modern frameworks or CMS. Hosting is provided by REG-INTERNET-CZ with domain name servers at forpsi.net. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. From a security perspective, the website lacks visible security headers and privacy or cookie policies, which may indicate compliance gaps with GDPR and other regulations. HTTPS status is not confirmed from the data provided, which is a critical security aspect. No incident response or vulnerability disclosure information is present. The WHOIS data is consistent and trustworthy, supporting the legitimacy of the domain and business. Overall, the website is safe with no adult or questionable content, but improvements in security posture, privacy compliance, and technical modernization are recommended to enhance trust and user experience.

G

Gabriela Schenelová

ge-style.cz

43

GE-style.cz is a Czech Republic-based small retail business specializing in stylish women's clothing, operating both an online e-commerce platform and a physical store in Rohatec. The website offers a variety of women's fashion products including dresses, tops, skirts, and accessories, targeting female customers interested in fashionable apparel. The business presents clear contact information, including email and physical addresses, and maintains active social media profiles on Facebook and Instagram, enhancing customer engagement and trust. Technically, the website is built on a custom or proprietary e-commerce platform, utilizing modern frontend technologies such as JavaScript, CSS, and HTML5, with frameworks like Bootstrap and Tiny Slider. The site is mobile-optimized with good SEO practices and includes cookie consent mechanisms compliant with GDPR. Performance is moderate, and accessibility features are basic but functional. From a security perspective, the website enforces HTTPS and employs cookie consent for privacy compliance. However, it lacks visible security headers and does not provide incident response or vulnerability disclosure information, which are areas for improvement. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, although the website content and business information appear legitimate and consistent with a small retail operation. Overall, GE-style.cz demonstrates a solid business and technical foundation with good privacy compliance but could enhance its security posture and domain transparency to improve trust and resilience against potential threats.

J

Jaroslav Hvězda

malirhvezda.cz

51

Jaroslav Hvězda operates a small local painting and decorating business based in the Czech Republic, with over 20 years of experience. The website clearly presents the services offered, including painting of residential and commercial properties and use of allergy-friendly paints. The business targets local customers in Hradec Králové and surrounding areas. Technically, the website uses modern web technologies such as Google Maps API and reCAPTCHA for spam protection, and it is mobile optimized with good user experience. However, the absence of WHOIS data and privacy/cookie policies indicates gaps in transparency and compliance. Security posture is moderate with HTTPS and form protections but lacks security headers and formal policies. Overall, the website is professional and trustworthy for a small business but could improve compliance and security practices.

G

Galerie Koruna spol. s r. o.

galeriekoruna.cz

50

Galerie Koruna spol. s r. o. is a small Czech art gallery established in 2000, specializing in exhibitions and sales of Czech and international fine arts from the 20th and 21st centuries. The website presents a professional and consistent brand image with clear navigation and relevant content targeting art enthusiasts and collectors. The business model focuses on hosting exhibitions and selling artworks, supported by artist profiles and event updates. The company maintains a local market presence with a physical gallery in Hradec Králové, Czech Republic. Technically, the website uses modern web technologies including JavaScript, CSS, and integrates Google Analytics and Google Tag Manager for visitor tracking. The site is mobile optimized and SEO friendly, though accessibility features are basic. HTTPS is properly implemented ensuring secure communications. However, the absence of security headers and privacy/cookie policies indicates room for improvement in security and compliance. From a security perspective, the website shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. The lack of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate. No WAF or blocking mechanisms were detected, and the site is fully accessible. Privacy compliance is weak due to missing policies and consent mechanisms. Overall, the website is a good representation of a small art gallery business with professional content and moderate technical maturity. Strategic improvements in privacy compliance, security headers, and WHOIS transparency would enhance trust and security posture, supporting long-term business credibility and regulatory adherence.

V

Vodafone España

vodafone.es

67

Vodafone España S.A.U. is the Spanish subsidiary of the multinational British telecommunications company Vodafone Group Plc. The company provides mobile telephony, internet, fiber optic, and television services primarily targeting individual consumers in Spain. Established in 1982, Vodafone España holds a significant market position as a major telecommunications operator in the Spanish market. The website serves as the official portal for consumer services, featuring a professional design, clear branding, and integration with social media platforms. The business model focuses on offering tailored telecommunications packages leveraging advanced technologies such as 5G connectivity. From a technical perspective, the website employs modern web technologies including JavaScript, CSS, and JSON-LD structured data for SEO and enhanced user experience. Tag management is implemented via Tealium, and cookie consent mechanisms are in place, indicating attention to privacy compliance. The site is mobile-optimized and demonstrates good performance and SEO practices, although accessibility features are basic. Security posture is solid with HTTPS enforced and no visible exposure of sensitive data. However, explicit security headers and published security policies or incident response contacts are not evident in the analyzed content. The domain WHOIS data is consistent with the company's identity and history, reinforcing legitimacy. No WAF or blocking mechanisms were detected, allowing full content access. Overall, Vodafone España's website reflects a mature, enterprise-level telecommunications business with a professional online presence. Strategic recommendations include enhancing security transparency by publishing security policies and incident response contacts, implementing additional security headers, and improving accessibility features to further strengthen compliance and user trust.

L

Lentiamo s.r.o.

lentiamo.de

72

Lentiamo.de is a professional e-commerce retailer specializing in contact lenses, prescription glasses, sunglasses, and related accessories. The company operates primarily in Germany with a strong European presence through multiple localized domains. The website offers a comprehensive product catalog, customer support, and a user-friendly shopping experience. The business model focuses on direct online sales to consumers, leveraging trusted brands and competitive pricing. The company is positioned as a reputable player in the optical retail market, supported by certifications such as Trusted Shops and high customer satisfaction ratings. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics 4, and Cloudflare for DNS and CDN services. The site is well-optimized for mobile devices, accessible, and SEO-friendly. Security measures include HTTPS enforcement, robust security headers, and secure login forms. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. The security posture is solid, with no detected vulnerabilities or exposed sensitive data. However, the site lacks a dedicated security policy or incident response page, which could enhance transparency and trust. Overall, the website is secure, professional, and compliant, making it a trustworthy platform for consumers. Strategically, Lentiamo.de should consider publishing a formal security policy and vulnerability disclosure to further strengthen its security culture and customer confidence. Regular audits of third-party scripts and continued adherence to privacy regulations will maintain its strong compliance stance.

S

Smurfit Westrock

smurfitwestrock.cz

59

Smurfit Westrock is a newly formed global leader in sustainable paper and packaging solutions, created by the merger of Smurfit Kappa and WestRock. The company operates worldwide with a large workforce and extensive manufacturing footprint. The website serves as a holding landing page announcing the merger and directing visitors to the original companies' websites during integration. Technically, the site uses modern React technology and Microsoft Application Insights for analytics, but lacks visible privacy, cookie, or terms policies and does not provide contact information. Security posture is moderate with no detected WAF or blocking mechanisms, but absence of WHOIS data and security headers reduces trust. Overall, the site is professional and business-focused but could improve transparency and compliance documentation.

K

KlasikaPlus.cz

klasikaplus.cz

63

KlasikaPlus.cz is a specialized Czech media portal focused on classical music, offering news, interviews, event coverage, and cultural insights. The website targets classical music enthusiasts and professionals within the Czech Republic, providing rich and regularly updated content. Technically, the site is built on WordPress with modern web technologies like jQuery and JavaScript, and it is served over HTTPS ensuring secure connections. However, the absence of WHOIS data is a notable anomaly, though the site itself is active and professionally maintained. Security posture is decent with HTTPS and no exposed sensitive data, but lacks important security headers and formal privacy or cookie policies. Overall, the site presents a trustworthy and professional front for its niche audience but could improve compliance and security practices.

E

Ecomtrack

ecomtrack.io

61

Ecomtrack is a SaaS platform specializing in accurate ad revenue tracking for ecommerce businesses, enabling faster scaling of online stores. The company positions itself as a niche analytics provider with a focus on ecommerce marketers and store owners. The website is professionally designed, mobile optimized, and uses modern web technologies such as React and Gatsby, indicating a mature digital infrastructure. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though it lacks explicit security policies or incident response information. Privacy compliance is addressed with a privacy policy and cookie consent banner, but could be enhanced with more detailed GDPR indicators and contact information. Overall, the site presents a trustworthy and professional image suitable for its target audience.

NOMOS Lawyers International is a European legal network comprising member law firms dedicated to delivering comprehensive and cost-effective legal advice. The network emphasizes practical results and client partnership, serving businesses and legal professionals seeking cross-border legal expertise. The website presents member firms across multiple European countries and highlights recent meetings and events, reflecting an active and collaborative network. Technically, the website is built on CMS Made Simple, employs HTTPS, and integrates Google Analytics for visitor tracking. The site is moderately optimized for mobile and accessibility, with a clean design and clear navigation. However, it lacks advanced SEO features and security headers, which could be improved to enhance security and search visibility. From a security perspective, the site enforces HTTPS but does not implement common security headers or publish privacy and cookie policies, indicating gaps in compliance with GDPR and best practices. No incident response or vulnerability disclosure information is provided. The WHOIS data is not publicly available due to EURid privacy restrictions, which is typical for .eu domains and justified for professional entities. Overall, the website is professional and trustworthy with good business credibility but would benefit from enhanced privacy compliance and security hardening to reduce risk and improve user trust.

F

Felix a spol. advokátní kancelář, s.r.o.

doadvokacie.cz

55

Felix a spol. advokátní kancelář, s.r.o. is a well-established Czech law firm offering internships and employment opportunities primarily targeting law students and junior lawyers. The firm emphasizes professional development, practical legal experience, and a supportive work environment. The website serves as a recruitment and informational platform, highlighting the firm's location, benefits, and contact details. Technically, the website is built on the Webnode CMS platform, leveraging modern web technologies including JavaScript, CSS, and Amazon Cloudfront CDN for hosting static assets. Google Tag Manager is used for analytics and tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. The absence of WHOIS data reduces transparency and trustworthiness, although the website content and presentation suggest a legitimate business. No critical vulnerabilities or malicious content were detected. Overall, the website is functional and professional but would benefit from enhanced security practices and compliance documentation to improve trust and legal adherence.

The website 'Rozhovory Václava Havla' is a specialized cultural and historical archive project managed by the Václav Havel Library. It provides a comprehensive digital collection of interviews given by Václav Havel from the 1960s through 1989, serving researchers, historians, and the general public interested in Czech history and Václav Havel's life. The site is non-commercial and supported by the Czech State Cultural Fund, emphasizing its cultural and educational mission. Technically, the website uses standard web technologies including HTML5, CSS, and JavaScript libraries such as jQuery and Colorbox. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. There is no detected CMS or modern framework, indicating a relatively simple technical infrastructure. From a security perspective, the site lacks visible HTTPS confirmation, security headers, and privacy or cookie policies, which are critical for user trust and compliance with data protection regulations. No contact information or incident response channels are provided, and no WHOIS registration data is available, which raises concerns about domain legitimacy and transparency. Overall, the website is a valuable cultural resource with good content quality and user experience but requires significant improvements in security posture, privacy compliance, and domain registration transparency to enhance trustworthiness and compliance with modern standards.

P

P3CHEM s.r.o.

p3chem.cz

57

P3CHEM s.r.o. is a small Czech company specializing in services related to refining and petrochemical products across Central Europe, including the Czech Republic, Germany, Poland, Austria, and Slovakia. The company collaborates with major multinational refining and petrochemical firms and also serves smaller business partners. Founded in 2005, P3CHEM holds certifications such as ISCC EU and is a registered distributor of PHM in the Czech Republic, indicating a credible and compliant business operation within its sector. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript with jQuery 1.7.2, and uses Mixpanel for analytics tracking. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features and modern frameworks. No CMS or hosting provider details beyond registrar and DNS are evident. The website is accessible without any WAF or security challenges. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No forms or user input fields reduce attack surface, but the use of outdated JavaScript libraries may pose risks. The absence of contact information and incident response details limits transparency and user trust. The site uses HTTPS (assumed but not explicitly confirmed), but security posture could be improved with better headers and policies. Overall, the website is professionally presented with good content quality and business credibility but falls short on privacy compliance and security best practices. Strategic improvements in these areas would enhance trust and regulatory adherence.

RCsoft sro operates a professional website focused on architectural services under the brand Études. The company offers a range of services including renovation, consulting, project management, and architectural solutions targeting homeowners and commercial developers. The website is built on WordPress and demonstrates a moderate level of technical maturity with good mobile optimization and accessibility. However, the absence of privacy and cookie policies, contact information, and security headers indicates gaps in compliance and security best practices. The domain WHOIS data is unavailable, likely due to privacy protection, which limits verification of ownership and domain age. Overall, the website presents a professional image but would benefit from enhanced transparency and security measures.

M

Město Broumov

broumov.net

38

Město Broumov operates an official municipal website serving residents and visitors with comprehensive local government information, news, cultural events, and public services. The site is positioned as the authoritative digital presence for the city of Broumov in the Czech Republic, targeting local citizens and tourists. Key services include municipal updates, event calendars, contact details for city offices, and online forms for administrative requests. The business model is typical for a government entity, focusing on public information dissemination and community engagement. Technically, the website employs a modern CMS platform (vismoWeb5) with integration of Google services such as Analytics, reCAPTCHA, and Translate. The site is HTTPS secured and includes cookie consent mechanisms compliant with GDPR. The design is responsive and accessible, with good SEO practices and clear navigation. However, some security best practices like HTTP security headers are not visibly implemented. From a security perspective, the site demonstrates a moderate security posture with HTTPS enforcement and form protections via reCAPTCHA. There is no evidence of exposed sensitive data or vulnerable libraries. However, the absence of a published security policy, incident response contacts, or vulnerability disclosure reduces transparency and preparedness. The missing WHOIS data for the domain is a concern for domain legitimacy verification, though the official content and contact details support authenticity. Overall, the website is a well-maintained municipal portal with good content quality and user experience. The main risks relate to incomplete domain registration transparency and minor security hardening opportunities. Strategic recommendations include improving security headers, publishing security policies, and verifying domain registration details to enhance trust and compliance.

Z

Za poklady Broumovska

zapoklady.cz

52

Za poklady Broumovska is a small-scale cultural festival organization based in the Czech Republic, focused on organizing classical music concerts in unique Baroque churches in the Broumovsko region. The festival has a long-standing tradition, reportedly over 20 years, and relies on voluntary donations and partnerships with cultural and governmental entities. The website presents a professional and user-friendly interface with clear navigation and relevant content for its target audience of classical music enthusiasts and cultural heritage supporters. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Analytics and Tag Manager, with good mobile optimization and SEO practices. However, the absence of WHOIS data limits domain legitimacy verification, and no explicit privacy or security policies are found on the site. Security posture is moderate with HTTPS usage but lacks visible security headers. Cookie consent is implemented, indicating some privacy compliance. Overall, the site is trustworthy for its purpose but would benefit from enhanced transparency and security measures.

M

Město Broumov

broumov-mesto.cz

48

The website www.broumov-mesto.cz serves as the official digital presence of the town of Broumov, Czech Republic. It provides residents and visitors with municipal news, cultural event information, public service announcements, and contact details for various city departments. The site is well-structured, accessible, and includes features such as a search function, event calendar, and subscription form for newsletters. Social media integration with Facebook and YouTube enhances community engagement. Technically, the site uses the Vismo CMS platform, integrates Google Analytics for visitor insights, and employs Google reCAPTCHA to protect forms from abuse. The presence of a cookie consent mechanism and a detailed privacy policy indicates good privacy compliance. However, the absence of WHOIS data for the domain raises questions about domain registration transparency, which slightly impacts trustworthiness. No explicit security policy or incident response information is published, which could be improved to enhance security posture. Overall, the site is professional, secure, and serves its governmental function effectively.

A

Agentura pro rozvoj Broumovska z.ú.

aprb.cz

60

Agentura pro rozvoj Broumovska z.ú. is a Czech non-profit organization founded in 2004, dedicated to supporting regional development, cultural activities, and community life in the Broumovsko region. The organization operates cultural and educational programs, manages the Broumov monastery complex, and fosters collaboration among individuals, companies, and organizations to enhance the region's attractiveness and quality of life. The website reflects this mission with rich content in Czech, including event announcements, historical background, and community engagement initiatives. Technically, the website employs modern web technologies including HTML5, CSS, JavaScript, and integrates Google Analytics for visitor tracking. It uses HTTPS for secure communication and includes a cookie consent banner, indicating some level of privacy compliance. The site is mobile-optimized and features interactive elements such as slideshows and embedded videos. However, no CMS or hosting provider details are explicitly identified, and some security best practices like security headers are missing. From a security perspective, the site benefits from HTTPS and form validation but lacks visible security headers and a published privacy policy, which are important for GDPR compliance and user trust. The absence of WHOIS data for the domain reduces domain trustworthiness, although the website content and contact information appear legitimate and consistent with a reputable non-profit entity. No vulnerabilities or suspicious content were detected. Overall, the website presents a professional and trustworthy front for the organization but would benefit from enhanced security measures, clearer privacy documentation, and resolving the WHOIS data absence to improve domain legitimacy and compliance posture.

The website www.multihub.cz is currently inaccessible beyond a maintenance placeholder page indicating that the site is undergoing maintenance. The only active content is a message in Czech stating 'Probíhá údržba webu' (Website under maintenance) with a link to the company PSHK s.r.o. No WHOIS registration data is available, which raises concerns about the domain's registration status or privacy protection. The lack of privacy policies, contact information, and security headers indicates a very low digital maturity and security posture. The site does not provide any business or service information, limiting the ability to assess market position or business model. Overall, the site appears inactive or in transition, with minimal technical implementation and no visible security or compliance measures.

The website roemhild.de serves as a minimalistic personal domain dedicated exclusively to email and XMPP chat communications. It does not operate as a commercial business but rather as a private communication channel, emphasizing privacy and voluntary communication. The site explicitly states that no personal data, log files, IP addresses, cookies, or analytics tools are used, reflecting a strong privacy stance. The provision of an OpenPGP key further supports encrypted communication, indicating a privacy-conscious user or owner. From a technical perspective, the website is simple, built with basic HTML and CSS, without any detected CMS, frameworks, or advanced technologies. There are no forms, scripts, or tracking mechanisms, which reduces the attack surface but also limits functionality. The site appears to have moderate performance and basic mobile optimization but lacks SEO and accessibility enhancements. No security headers or HTTPS status were provided, suggesting room for improvement in security hardening. Security-wise, the site demonstrates good privacy practices by not collecting user data and encouraging encrypted communication. However, the absence of formal privacy and cookie policies, security headers, and incident response information indicates gaps in compliance and security posture. The WHOIS data is minimal but consistent with the domain's personal use, showing no suspicious patterns. Overall, the site is low risk but could benefit from improved security and compliance documentation. Strategically, the site is a personal or small-scale communication platform with limited business relevance. Recommendations include implementing HTTPS, publishing formal privacy and cookie policies, adding security headers, and considering incident response contacts to enhance trust and compliance.

B

Benefit Group

benefit-plus.eu

48

Benefit Plus is a business-focused website offering cafeteria and e-voucher benefit solutions primarily targeting companies in the Czech Republic and Slovakia. It operates under the umbrella of Benefit Group, which manages multiple related projects and subsidiaries. The website presents a professional and consistent brand image with clear navigation to various service portals. However, it lacks publicly available privacy, cookie, or terms of service policies and does not provide direct contact information, which limits transparency and user trust. Technically, the site uses modern JavaScript modules and CSS with responsive design, providing a good user experience on mobile devices. There is no evidence of CMS usage or third-party analytics and tracking scripts, indicating a minimalistic technical footprint. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site lacks visible security headers and published security policies or incident response contacts. The domain WHOIS data is unavailable due to privacy protection or query failure, which reduces trustworthiness. No critical vulnerabilities or security issues are evident from the content, but improvements in security posture and compliance documentation are recommended. Overall, the website is safe and professional but would benefit from enhanced transparency, published policies, and improved security practices to increase trust and compliance with data protection regulations.

M

Mailnatives s.r.o.

mailnatives.com

55

Mailnatives s.r.o. is a Czech Republic-based company specializing in professional email marketing tools and services. Their product suite includes Mailocator for lead generation, Mailsmitter for transactional email delivery, Mailiana as an email editor, and Mailcolm for email validation. The company targets agencies, freelancers, marketers, and webmasters, positioning itself as a niche provider with a focus on B2B SaaS and consulting services. Founded in 2019, Mailnatives maintains a consistent brand presence and offers clear contact channels and client testimonials, enhancing trust and credibility. Technically, the website uses a custom or unknown CMS with a technology stack including jQuery 1.10.2 and Google Fonts. The site is moderately performant with good mobile optimization and basic accessibility features. However, the use of an outdated JavaScript library and lack of security headers indicate areas for technical improvement. DNSSEC is not enabled, which is a security gap. From a security perspective, the site uses HTTPS but lacks advanced security headers and explicit privacy or cookie consent mechanisms, which impacts GDPR compliance. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website is professional and trustworthy but would benefit from enhanced security practices, updated technical components, and improved privacy compliance to strengthen its security posture and regulatory adherence.

S

Studentský spolek Babylon

babylonrevue.cz

52

Studentský spolek Babylon operates an independent cultural and social magazine primarily targeting university students and seniors in the Czech Republic. The revue has a long-standing history since 1992 and publishes articles on politics, culture, history, and social issues. The website is built on WordPress with modern SEO and analytics tools, providing a good user experience with clear navigation and mobile optimization. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks security headers and formal privacy and cookie policies. Contact information is transparent and consistent with the domain registration data, supporting the site's legitimacy. Overall, the site is a credible, niche cultural media outlet with room for improvement in privacy compliance and security best practices.

K

Knihovna Václava Havla

vaclavhavel.cz

58

Knihovna Václava Havla is a well-established non-profit cultural and educational institution dedicated to preserving and promoting the legacy of Václav Havel. It operates a comprehensive digital archive, organizes conferences, educational programs, and publishes related works. The website reflects a mature digital presence with rich content, clear navigation, and professional design, targeting students, researchers, and the general public interested in Czech history, democracy, and human rights. Technically, the site uses modern web technologies and integrates popular analytics and social media platforms, although some security headers and cookie consent mechanisms are missing. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's legitimacy given its institutional nature and transparent operations. Overall, the site demonstrates a strong commitment to accessibility, education, and cultural preservation.

VAPC is a small, established language school and translation agency based in Rokycany, Czech Republic, operating since 1999. The company offers a broad range of language courses including English, German, Italian, French, Russian, and Czech for foreigners, alongside translation and interpreting services in over 80 languages. It also serves as an authorized testing center and provides corporate and individual language training. The website reflects a professional and consistent brand with good content quality and clear navigation, targeting individuals and businesses in the local region. Technically, the site uses older JavaScript libraries and lacks modern security headers, which presents some security risks. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. The site integrates Google Analytics and Facebook SDK for tracking and marketing purposes. Overall, the domain registration data is consistent with the business claims, supporting legitimacy and trustworthiness.

The website rserver.de is a minimalistic site used exclusively for private services, with no commercial or public business operations evident. The content is in German and clearly states that no personal data, cookies, or analytics are collected, emphasizing privacy and voluntary communication via email or Jabber/XMPP with OpenPGP encryption. The site lacks formal privacy, cookie, or terms of service policies, and no phone numbers or physical addresses are provided. Technically, the site is built with basic HTML and CSS, without any detected CMS or advanced frameworks. There is no evidence of analytics or advertising tools, and the site appears to have basic mobile optimization and accessibility. Security headers and HTTPS status are not confirmed from the data, but the use of encrypted communication methods is a positive indicator. From a security perspective, the site demonstrates a privacy-conscious approach by not collecting user data and encouraging encrypted communication. However, the absence of security headers, privacy policies, and cookie consent mechanisms are gaps that could be improved. The WHOIS data is consistent with the website's private use, showing no suspicious patterns or privacy protection that would raise concerns. Overall, the site presents a low-risk profile focused on privacy and minimal data exposure but would benefit from enhanced security practices and formalized compliance documentation.

B

Beyond Pixels

beyondpixels.at

50

Beyond Pixels is a small Austrian media website focused on entertainment content including games, movies, TV, hardware, manga, and related news. The site provides daily updates, reviews, tests, and giveaways targeting a general audience interested in various entertainment forms. Technically, the website is built on WordPress, using standard web technologies such as PHP, JavaScript, and CSS. The site is moderately optimized for performance and mobile devices, with good SEO practices evident from meta tags and canonical links. Security posture is basic with HTTPS enabled but lacks advanced security headers and explicit incident response or vulnerability disclosure information. Privacy compliance is partial with a cookie consent mechanism present but no visible privacy policy or terms of service pages. WHOIS data is unavailable due to NIC.AT restrictions, limiting domain registration transparency. Overall, the website is functional and professional but could improve in security and compliance areas to enhance trust and protection.

T

Two Bears' Life

twobearslife.com

42

Two Bears' Life is a niche blog and community platform dedicated to escape room enthusiasts, providing detailed reviews, travel adventures, and special food experiences primarily focused on European escape rooms. Founded in 2016, the site has established itself as a trusted source within its niche, offering curated content and guides to escape rooms in various cities. The website leverages WordPress CMS with a modern theme and common plugins, ensuring a good user experience and mobile optimization. The technical infrastructure is standard for a content-driven site, with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, though no terms of service or security policies are present. Contact is available via a web form, with no direct emails or phone numbers published. Overall, the site is professional, trustworthy, and safe for general audiences.

The website opvai.sk represents the official Slovak government operational program for Research and Innovation (OPII). It serves as a platform to provide information, updates, and support related to funding from European structural and investment funds. The site is managed jointly by the Ministry of Education, Science, Research and Sport of the Slovak Republic and the Ministry of Economy of the Slovak Republic, targeting research institutions, businesses, and stakeholders in innovation. The content is well-structured, regularly updated, and includes calls for proposals, news, and program documentation. Technically, the website uses a traditional web stack including HTML5, CSS, JavaScript with jQuery, and Bootstrap for responsive design. It integrates Google Fonts and Google Analytics for tracking. The site is mobile-optimized with good navigation clarity and professional design. However, some technologies like jQuery 1.11.3 are outdated, and there is no explicit CMS detected, suggesting a custom or proprietary solution. From a security perspective, the site uses HTTPS and implements a cookie consent banner, indicating basic privacy compliance. However, it lacks visible security headers, a published security policy, or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected, but improvements in security best practices are recommended. Overall, the website is a credible and trustworthy government resource with a moderate to good security posture and solid business credibility. It effectively serves its audience with relevant content and clear contact information, though enhancements in privacy and security transparency would strengthen its compliance and trustworthiness.

S

Sparkasse Osterode am Harz

sparkasse-osterode.de

70

Sparkasse Osterode am Harz operates as a regional savings bank in Germany, providing a broad range of financial services including retail banking, corporate banking, investment products, insurance, and real estate financing. The website targets both private and corporate customers, offering secure online banking and comprehensive product information. The bank maintains a strong regional presence with consistent branding and a professional digital interface. Technically, the website is built on Adobe Experience Manager CMS, featuring modern web technologies, good mobile optimization, and accessibility compliance. Security posture is solid with HTTPS enforcement, session management, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. The domain registration data aligns well with the business, indicating legitimacy and trustworthiness. Overall, the website demonstrates a mature digital presence suitable for a financial institution.

O

OREDO s.r.o.

oredo.cz

54

OREDO s.r.o. is a regional public transport integrator owned by the Hradec Králové and Pardubice regions in the Czech Republic. The company manages the integrated tariff system IREDO, which allows passengers to travel across buses and trains in these regions using a single ticket. The website provides basic information about the company, contact details, and links to the IREDO tariff system. The business model focuses on public transport organization and tariff integration within a defined geographic area, targeting local residents and travelers. Technically, the website uses older JavaScript libraries such as jQuery 1.8.16 and jQuery UI, indicating some technical debt and potential modernization needs. The site lacks modern SEO and accessibility features and does not show evidence of a CMS or advanced frameworks. Performance appears moderate, with basic mobile optimization and limited interactive elements. No analytics or tracking scripts were detected, suggesting minimal user tracking. From a security perspective, the website lacks visible HTTPS enforcement and security headers, which are critical for protecting user data and ensuring secure communications. No privacy or cookie policies are present, which is a compliance gap given GDPR requirements in the EU. The absence of WHOIS data reduces domain trustworthiness, although the website content and contact information align with a legitimate regional public transport entity. No forms or incident response contacts were found, limiting the ability to report security issues. Overall, the website is functional but basic, with significant room for improvement in security posture, privacy compliance, and technical modernization. Strategic recommendations include implementing HTTPS with HSTS, adding security headers, publishing privacy and cookie policies, updating technical libraries, and verifying domain registration details to enhance trust and compliance.

D

Doprastav, a.s.

doprastav.sk

56

Doprastav, a.s. is a well-established Slovak construction company with over 70 years of history, specializing in infrastructure projects such as roads, highways, railways, bridges, and water management structures. The company operates primarily in Slovakia and the Czech Republic, with some international activities. Their website reflects a professional corporate presence with clear branding, certifications, and compliance information. Technically, the site uses modern web technologies including Bootstrap and JavaScript libraries, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers and incident response details are missing. Overall, the site is trustworthy and compliant with GDPR, but could improve transparency by adding direct contact information and vulnerability disclosure mechanisms.

D

dm drogerie markt

mojadm.sk

65

dm drogerie markt operates a comprehensive online drugstore platform in Slovakia, offering a wide range of cosmetic, health, and household products with convenient delivery and store pickup options. The website reflects a strong market position as a leading retail chain with a well-established brand and customer loyalty programs. Technically, the site employs modern web technologies, including advanced JavaScript frameworks and a robust consent management platform, ensuring a responsive and accessible user experience across devices. Security measures are well implemented with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts could enhance trust further. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility, suitable for its large-scale retail operations.

E

EcoLED Solutions

ecoledsol.sk

38

EcoLED Solutions is a Slovak company specializing in comprehensive LED lighting solutions for public and industrial sectors, focusing on energy savings and modern LED technologies. The company emphasizes cost reduction in lighting operations and offers financing options for lighting projects. The website reflects a small-sized business with a clear market position as a leader in eco-friendly LED lighting solutions within Slovakia. The site content is primarily in Slovak and targets local municipalities and industrial clients. Technically, the website uses a traditional tech stack including HTML, CSS, JavaScript with older libraries such as jQuery 1.10.2, Prototype.js, and Scriptaculous.js. Google Analytics is integrated for user tracking, but there is no visible cookie consent mechanism. The site is served over HTTPS with DNSSEC enabled, indicating a good baseline security configuration. However, the use of outdated JavaScript libraries and absence of security headers represent potential security risks. From a security perspective, the website shows strengths such as HTTPS and DNSSEC but lacks critical security headers and updated libraries. There is no visible privacy or cookie policy, which impacts GDPR compliance. Contact information is minimal, with only an email found in meta tags, and no incident response or security contact details are provided. Certifications ISO 9001 and ISO 14001 are displayed, enhancing trustworthiness. Overall, the website is functional and moderately professional but requires improvements in privacy compliance, security best practices, and user contact accessibility to enhance trust and security posture. The domain WHOIS data supports legitimacy with consistent registration details and appropriate domain age.

Slovenská pošta, a.s. is the national postal operator of Slovakia, providing reliable and accessible postal, payment, distribution, and state services to citizens, businesses, and e-shops. The company holds a strong market position as a key player in transportation and logistics within Slovakia, offering a broad range of services including express delivery, parcel shipping, letter services, and business solutions tailored for e-commerce. The website reflects a mature digital presence with a modern React-based infrastructure, good mobile optimization, and clear navigation, supporting a positive user experience. Security measures such as HTTPS and security headers are properly implemented, although explicit security policies and incident response information are not publicly detailed. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms in place. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility, supporting the company's established reputation in the Slovak market.

Slovenská asociácia motoristického športu (SAMŠ) is a Slovak national association dedicated to motor sports. The website serves as an informational portal with links to projects, events, and registration related to motor sports activities in Slovakia. The organization appears to be a small-sized entity founded in 2003, with a focus on promoting and organizing motor sports within the country. The website content is primarily in Slovak and targets motor sports enthusiasts and participants. Technically, the website is built with basic HTML and CSS, lacking modern frameworks or CMS platforms. It shows minimal mobile optimization and accessibility features, which may limit user experience on mobile devices. Security-wise, the domain benefits from DNSSEC and HTTPS, but lacks visible security headers and privacy compliance documentation. No forms or data collection mechanisms are evident, reducing exposure to input-based vulnerabilities but also limiting user engagement features. Overall, the website is functional but basic, with room for improvements in security, privacy compliance, and technical modernization.