Security Directory

V

Vivatip

vivatip.hr

46

Vivatip is a Croatian-based e-commerce business specializing in trophies, medals, plaques, ribbons, and promotional materials. Established in 2003, it serves customers primarily in Croatia, offering a variety of award products and custom orders. The website is built on WordPress with WooCommerce and Elementor, reflecting a modern digital infrastructure suitable for retail operations. The site is well-structured with good SEO practices and moderate performance, optimized for mobile devices. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit privacy or cookie policies, indicating compliance gaps. No direct contact information or incident response details are visible, which may affect customer trust and regulatory compliance. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and regulatory adherence.

K

KWON KG - Kampfsportartikel

kwon.com

41

KWON KG operates an e-commerce platform specializing in martial arts and security equipment, targeting martial arts practitioners primarily in Germany. The website offers a broad range of products including gear for Taekwondo, Karate, Judo, MMA, and other combat sports. The business model focuses on online retail with additional services such as product individualization and multilingual support. The company appears to be a medium-sized retailer with a consistent brand presence and a professional website design. Technically, the website uses modern web technologies including JavaScript and Google Tag Manager for analytics. The CMS is likely Shopware, inferred from URL and CSS patterns. The site is mobile-optimized with good SEO practices but lacks some accessibility features. Performance is moderate, and HTTPS is enforced, ensuring secure data transmission. From a security perspective, the site has a solid SSL configuration but lacks visible security headers and explicit privacy or cookie policies, which are critical for GDPR compliance. No WHOIS data is available for the domain, which raises concerns about domain registration legitimacy and reduces overall trust. Contact information is provided via phone and WhatsApp, but no company emails or physical addresses were found. Overall, the website is functional and professional but would benefit from improved transparency in privacy and security policies, better WHOIS registration clarity, and enhanced security headers to strengthen trust and compliance.

I

INSPIRE CZ s.r.o.

clubspire.cz

62

CLUBSPIRE.cz is a Czech-based software solution specializing in comprehensive management systems for fitness and sports centers. The platform offers a wide range of modules including reservation systems, membership management, email marketing, access control, and point of sale functionalities. With a client base of over 200 sports centers, CLUBSPIRE positions itself as a reliable and efficient tool for business managers in the fitness industry. The website reflects a professional and consistent brand image, supported by active content updates and social media engagement. Technically, the website employs a modern technology stack including Java-based backend architecture, Google reCAPTCHA for form security, and Google Analytics for user tracking. The site is optimized for multiple platforms including Windows, Linux, and Apple, and demonstrates good mobile responsiveness and SEO practices. Security measures such as HTTPS and consent-based cookie management are implemented, though some security headers could be enhanced. From a security perspective, the site shows a solid posture with encrypted communications and protection against automated abuse via CAPTCHA. However, the absence of published security policies and incident response contacts suggests room for improvement in transparency and preparedness. The lack of WHOIS data limits the ability to fully verify domain legitimacy, though the professional presentation and active business operations mitigate some concerns. Overall, CLUBSPIRE.cz is a credible and well-maintained business website with good technical and security foundations. Strategic enhancements in security policy publication, WHOIS transparency, and accessibility would further strengthen its trustworthiness and compliance posture.

IFET.fr is the official website of IFET, a French training organization specializing in educating local elected officials, their collaborators, and public agents. The organization is recognized and certified by the French Ministry of the Interior and holds the Qualiopi certification, underscoring its credibility and compliance with national training standards. The website provides detailed information about upcoming training sessions, certification attestations, and contact details for engagement. The target audience is primarily local government officials and associated personnel seeking professional development in governance and public administration. Technically, the site is built on Drupal 9, leveraging modern web technologies and standard analytics tools such as Google Analytics and Google Tag Manager, with a cookie consent mechanism in place to comply with GDPR requirements. The site is mobile-optimized and accessible, with a professional design and clear navigation.

CONCILIUM is a French consulting firm specializing in digital transformation and digital support services for businesses, public institutions, foundations, and associations. Established since 2015, the company offers tailored consulting in digital projects, e-marketing, e-commerce, social media management, event digitalization, GDPR compliance, and training. The firm positions itself as a trusted advisor in the digital transformation space with a strong presence in Paris and across France. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site is built on WordPress using Elementor and Yoast SEO, integrating modern web technologies and analytics tools such as Google Analytics and Tag Manager. Security posture is good with HTTPS enabled, though additional security headers could enhance protection. Privacy compliance is basic with no explicit privacy or terms of service pages found, but a cookie consent mechanism is present. Overall, the site is well-designed, accessible, and trustworthy, with no signs of malicious activity or content blocking.

Acaballado® z.s. is a small Czech non-profit organization dedicated to organizing cultural and historical events, primarily focusing on historical reenactments and promoting historical awareness. The website serves as a platform to inform visitors about upcoming events, archives, and organizational information. The organization targets a general audience interested in cultural heritage and history, particularly within the Czech Republic. The business model is centered on event organization and community engagement without commercial sales evident on the site. Technically, the website is built on WordPress 6.5.7, utilizing popular plugins such as Yoast SEO and libraries including jQuery, Bootstrap, and Slick Carousel. It integrates Google Tag Manager, Google Analytics, and Facebook SDK for analytics and marketing purposes. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site uses HTTPS with an excellent SSL configuration but lacks visible security headers and formal security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the website is legitimate and professionally maintained for a small non-profit. The lack of WHOIS data is consistent with privacy protection common in such organizations. Strategic improvements in privacy compliance and security headers would enhance trust and regulatory adherence.

T

Tourismuszentrale Südmähren

sued-maehren.de

47

Tourismuszentrale Südmähren operates as the official regional tourism authority promoting South Moravia, a renowned wine-growing and cultural region. The website provides comprehensive tourism information, including excursions, events, regional guides, and accommodation options, targeting tourists interested in nature, history, gastronomy, and cultural experiences. The business model focuses on regional tourism promotion and information dissemination, positioning itself as a trusted source for visitors to South Moravia. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Analytics, and Google Tag Manager, hosted on Active24 servers. The site is mobile-optimized with good SEO practices and a cookie consent mechanism ensuring GDPR compliance. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site uses HTTPS with excellent SSL configuration and implements cookie consent. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a clear cookie policy and consent mechanism, though a dedicated privacy policy page could enhance compliance. Overall, the website is professional, trustworthy, and safe for general audiences. It effectively supports the regional tourism business with clear contact information and social media presence. Strategic improvements in security policy transparency and incident response readiness would further strengthen its security posture.

T

Tourist Authority South Moravia

south-moravia.com

50

The website www.south-moravia.com serves as the official tourism promotion platform for the South Moravia region in the Czech Republic. It offers comprehensive information about the region's attractions, experiences, trips, and events, targeting tourists and travelers interested in nature, wine, culture, and gastronomy. The site is well-branded and professionally designed, reflecting its role as a regional tourism authority. Technically, the site employs modern frameworks such as Bootstrap and jQuery, integrates Google Analytics and Tag Manager for tracking, and implements a cookie consent mechanism compliant with GDPR. Security posture is generally good with HTTPS enforced, but lacks some security headers and formal incident response or vulnerability disclosure policies. The WHOIS data is missing or inaccessible, which raises some concerns about domain registration transparency, though the website content and partner affiliations support its legitimacy. Overall, the site is a reliable and professional resource for tourism information with room for security and compliance improvements.

U

UVEX ARBEITSSCHUTZ GMBH

uvex-sportstyle-rx.com

68

The website www.uvex-sportstyle-rx.com represents UVEX ARBEITSSCHUTZ GMBH's specialized product line for prescription sports eyewear. It targets sports enthusiasts requiring high-quality, safe, and stylish prescription glasses for various sporting activities. The site is professionally designed, mobile-optimized, and uses modern technologies including TYPO3 CMS and Amazon Cloudfront CDN. Privacy and cookie consent mechanisms are well implemented, reflecting GDPR compliance. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are absent. WHOIS data is missing, which slightly reduces trust but the overall professional presentation and consistent branding support legitimacy. Recommendations include publishing explicit security and incident response policies and improving accessibility features.

I

INSPIRE CZ s.r.o.

inspire.cz

67

INSPIRE CZ s.r.o. is a Czech-based digital agency specializing in custom web development, e-commerce solutions, customer portals, reservation systems, and online marketing. With over 15 years of experience, they position themselves as a trusted partner for businesses seeking to enhance their online presence and operational efficiency. The website reflects a professional and modern digital infrastructure, utilizing contemporary web technologies and analytics tools to optimize user experience and marketing effectiveness. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities. However, the absence of WHOIS data for the domain introduces a moderate trust concern that should be addressed. Overall, INSPIRE CZ demonstrates a mature digital presence with solid business credibility and compliance practices.

I

International Military Sports Council

milsport.one

52

The International Military Sports Council (CISM) operates as a prominent non-profit international organization dedicated to promoting military sports and fostering friendship through sport among armed forces worldwide. With 138 member countries, it organizes a wide range of military sports events, championships, and academic activities, positioning itself as a leading entity in the military sports domain. The website reflects this mission with comprehensive event coverage, news updates, and multilingual regulatory documents, targeting military personnel and associated organizations globally. Technically, the website employs a CMS named MasterEdit and integrates modern web technologies including Google Analytics and Tag Manager for tracking, alongside standard JavaScript libraries like jQuery. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is unavailable, likely due to privacy protection, which is common for international non-profits but slightly impacts trust assessment. Overall, the website is professional, content-rich, and trustworthy, serving its niche audience effectively. Strategic improvements in security transparency and accessibility could enhance its posture further.

S

Slovenský olympijský a športový výbor

olympic.sk

60

The Slovenský olympijský a športový výbor (Slovak Olympic and Sports Committee) operates a comprehensive and professionally designed website serving as the official portal for Slovak Olympic sports news, events, athlete information, and partner relations. The site targets Slovak sports enthusiasts, athletes, and partners, providing timely updates and resources related to Olympic activities. Technically, the website is built on Drupal 10, leveraging modern web technologies and integrating analytics and advertising tools responsibly. Security posture is strong with HTTPS, security headers, and secure form handling, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website demonstrates a high level of professionalism, trustworthiness, and digital maturity appropriate for a national sports governing body.

The website www.mosr.sk is the official online presence of the Ministry of Defence of the Slovak Republic, serving as a comprehensive information portal for defense-related news, policies, and public services. It targets the general public, media, and defense professionals, providing authoritative content on military operations, recruitment, legislative documents, and international cooperation. The site maintains a consistent brand identity aligned with government standards and offers multiple official social media channels for outreach. Technically, the site is built on the SysCom CMS platform and utilizes modern web technologies including jQuery and Google Analytics. It demonstrates good mobile optimization and accessibility features, including a version for visually impaired users and a cookie consent mechanism compliant with GDPR. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks visible advanced security headers and a dedicated security policy or vulnerability disclosure page. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms the domain's legitimacy and consistency with the Slovak Ministry of Defence. Overall, the website is professional, trustworthy, and suitable for its governmental role. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would enhance its security posture and compliance.

F

FC Zlín

fctrinityzlin.cz

44

FC Zlín is a Czech football club with an official website providing comprehensive information about the club, including news, match schedules, team rosters, ticket sales, fan merchandise, and partner details. The website targets football fans and the local community, offering engagement through social media and online services. The business model revolves around sports club promotion, fan engagement, and merchandising. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, OwlCarousel, Font Awesome, and Google Fonts. It integrates Google Analytics and Facebook SDK for tracking and marketing purposes. Hosting appears to be regional with Czech-based registrar and name servers. The site is mobile-optimized with good navigation and content structure, though SEO and accessibility could be improved. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies or vulnerability disclosures. No cookie consent mechanism was detected, indicating partial GDPR compliance. No contact phone numbers or detailed business registration data were found, limiting direct contact options. The WHOIS data is consistent and transparent, supporting legitimacy. Overall, the website is functional and professional with moderate security and privacy compliance. Strategic improvements in security headers, privacy notices, and contact transparency would enhance trust and compliance.

F

FC Slavia Hradec Králové

fcslaviahk.cz

47

FC Slavia Hradec Králové is a local Czech football club with a well-structured website providing comprehensive information about the club, teams, match results, news, and recruitment. The site targets football fans, players, and the local community, offering rich content and active engagement through news and social media. The business model focuses on sports club operations and community involvement. Technically, the website uses modern frontend technologies including Bootstrap, Google Analytics, and Smartlook for user behavior tracking. The hosting and domain registration are consistent and stable, indicating a legitimate and established presence. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy and cookie policies, which are compliance gaps. Overall, the site is professional, content-rich, and trustworthy but would benefit from enhanced privacy compliance and security hardening.

S

Staylive AB

staylive.io

60

Staylive AB is a Swedish technology company specializing in providing white-label streaming platforms for content creators, sports federations, leagues, and clubs. Their platform enables clients to build custom streaming services with features such as live and on-demand content, payment integration, mobile app publishing, and full ownership of content and users. Positioned as a stable and secure solution, Staylive serves a medium-sized market segment with notable partnerships and client testimonials, including a recent acquisition by Two Circles, enhancing their market presence. Technically, Staylive's website is built on Webflow and integrates modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and LinkedIn Insight. The platform supports multi-device streaming including iOS, Android, and Apple TV. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and privacy documentation. From a security perspective, Staylive employs HTTPS with SSL encryption and complies with payment security standards (PA-DSS PCI). Cookie consent is implemented with an opt-in mechanism, reflecting basic GDPR compliance. However, explicit privacy policies, terms of service, and security incident response contacts are not clearly presented, representing areas for enhancement. No critical vulnerabilities or suspicious indicators were detected. Overall, Staylive presents a professional and trustworthy online presence with strong business credibility and a solid technical foundation. The lack of WHOIS transparency is mitigated by the company's evident market position and parent company association. Strategic improvements in security policies, privacy documentation, and accessibility would further strengthen their digital maturity and compliance posture.

S

Staylive AB

staylive.se

54

Staylive AB is a Swedish-based technology company specializing in providing white-label streaming platforms for content owners, sports federations, leagues, and event organizers. Their platform enables customers to launch their own branded streaming services with monetization options such as subscriptions and one-time payments. The company emphasizes full ownership of content and user data, live and on-demand streaming capabilities, and mobile app publishing across major platforms. Staylive is positioned as a stable and secure streaming solution with notable clients and partnerships in the sports and media sectors, and is now part of the parent company Two Circles. Technically, the website is built on Webflow with integrations including Google Analytics, Google Tag Manager, and Finsweet Cookie Consent for privacy compliance. The platform supports modern web standards and mobile optimization, though some accessibility features could be improved. The website employs SSL encryption and claims compliance with payment security standards (PA-DSS PCI), but lacks explicit security headers and detailed privacy or security policies. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but does not publish a security policy or incident response contacts. WHOIS data is incomplete and privacy protected, which is common for tech companies but reduces transparency. No critical vulnerabilities or suspicious content were detected. Overall, the site demonstrates a good security posture but could enhance transparency and compliance documentation. The overall risk assessment is moderate with recommendations to improve security headers, publish comprehensive privacy and security policies, and enhance accessibility. The business shows credible market presence and technical maturity suitable for its industry and target audience.

Docu.sk is a Slovak media platform operated by Sector s.r.o., offering free online streaming of documentary films across various categories such as nature, history, war, and mysteries. The website targets a general Slovak-speaking audience interested in educational and documentary content. The business model relies on advertising revenue, supported by Google Adsense and managed through Google Ad Manager. The platform integrates consent management for GDPR compliance via Quantcast CMP, reflecting awareness of privacy regulations. Technically, the site uses a mix of legacy and modern web technologies including jQuery 1.8.3, FontAwesome 5, and service workers for PWA capabilities. While the site is functional and well-branded, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security posture is moderate with HTTPS enforced but outdated JavaScript libraries present potential risks. Overall, the site is a niche media service with moderate digital maturity and room for improvement in security and compliance documentation.

S

Sector s.r.o.

funny.sk

36

Funny.sk is a Slovak entertainment website operated by Sector s.r.o., focusing on humorous content including jokes, funny images, and videos. It holds a solid position in the Slovak media market as a popular humor portal with a broad content catalog and active social media presence. The site leverages a custom CMS platform associated with the sector.sk network and integrates multiple Google services for analytics and advertising. The technical infrastructure is moderately modern, with some outdated libraries that pose potential security risks. Security posture is adequate with HTTPS enforced but lacks comprehensive security headers and formal privacy or cookie policies. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and updated security practices.

S

Sector s.r.o.

rozpravky.sk

38

Rozpravky.sk is a Slovak media website operated by Sector s.r.o., offering a large collection of free animated fairy tales and cartoons primarily targeting children and families in Slovak and Czech languages. The platform is positioned as a regional niche media provider with a business model based on free content streaming supported by advertising. Technically, the site uses a mix of legacy and modern web technologies including jQuery 1.8.3, Google Fonts, FontAwesome, and Google Analytics. While the site is accessible and well-structured with good navigation and mobile optimization, it lacks explicit privacy and terms of service pages, and uses an outdated jQuery version which poses security risks. Security posture is moderate with HTTPS enforced and cookie consent implemented, but missing advanced security headers and vulnerability disclosures. WHOIS data confirms the legitimacy of the domain ownership by Sector s.r.o., consistent with the website's branding and market focus. Overall, the site is functional and trustworthy but would benefit from improved security practices and compliance documentation.

S

Sector s.r.o.

onlinehry.sk

39

Onlinehry.sk is a Slovak online gaming portal operated by Sector s.r.o., offering a wide range of free online games including flash, unity, and HTML5 games. The site targets a general audience including children and families, providing categorized games and multiplayer options. The business model is primarily advertising-supported, leveraging Google Adsense and related ad services. The site integrates user account management via the sector.sk passport system, enhancing user engagement through features like game archiving and discussions. The portal holds a moderate market position within the Slovak online gaming niche, supported by a medium-sized operation and consistent branding.

S

Sector s.r.o.

kinema.sk

41

Kinema.sk is a Slovak media website operated by Sector s.r.o., focusing on film news, reviews, trailers, and related content targeted at Slovak-speaking film enthusiasts. The site offers a rich content experience with podcasts, film databases, and curated cinema tips, positioning itself as a niche player in the Slovak film media market. Technically, the site uses a custom CMS with modern JavaScript libraries such as jQuery, Google Analytics, and PushAlert for notifications. While the site enforces HTTPS and uses standard tracking tools, it lacks visible security headers and explicit privacy or cookie policies, indicating areas for compliance improvement. No contact emails or phone numbers are explicitly provided, which may affect user trust and support accessibility. WHOIS data confirms the domain is registered to Sector s.r.o., consistent with the website's business focus and location. Overall, the site is professionally designed with good content quality but requires enhancements in privacy compliance and security best practices.

K

Kytary.cz

kytary.cz

74

Kytary.cz is a well-established Czech e-commerce retailer specializing in musical instruments and related accessories. Founded in 2000, it holds a strong market position in the Czech Republic with the largest stock availability and competitive pricing. The website offers a broad range of products including guitars, keyboards, drums, sound equipment, and lighting, targeting musicians and music enthusiasts primarily in the Czech market. Their business model focuses on online sales with value-added services such as extended warranties, free delivery over a threshold, and installment payment options. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Analytics, and Facebook SDK, hosted on Czech hosting providers. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS, security headers, and use of reCAPTCHA, though explicit security policies and incident response information are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements in security transparency and accessibility could be made.

M

Mototechna

mototechnadrive.cz

57

Mototechna Drive is a Czech Republic-based vehicle rental service provider offering both long-term and short-term car rentals. The website is built on a modern Angular framework and integrates common analytics and marketing tools such as Google Analytics and Facebook Pixel. The site demonstrates good design quality, mobile optimization, and clear navigation, although the analyzed page is a 404 error page, the overall site structure is professional and consistent with the brand. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks visible security headers and explicit security policies. Privacy compliance is good with accessible privacy and cookie policies, and GDPR compliance is indicated. Business credibility is high with consistent WHOIS data and active social media presence. Overall, the site scores well but could improve in security header implementation and incident response transparency.

S

Slovenský plynárenský priemysel, a.s.

spp.sk

64

Slovenský plynárenský priemysel, a.s. (SPP) is the largest energy supplier in Slovakia with a history spanning over 165 years. The company provides natural gas and electricity to households and businesses, emphasizing reliability, fairness, and ecological solutions such as photovoltaics and virtual batteries. The website targets Slovak domestic and corporate customers, offering comprehensive product and service information, calculators, and customer support portals. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, ensuring good performance and mobile optimization. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response details are not published. WHOIS data confirms the legitimacy and consistency of the domain registration with the company's identity. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting SPP's market leadership in the Slovak energy sector.

V

Václav Nocar, AZnet

aznet.cz

45

Václav Nocar, operating under AZnet, is a small Czech Republic-based technology service provider specializing in web design, web hosting, SEO, IT consulting, and advertising services. The company targets local businesses and individuals primarily in Teplice and surrounding regions, offering a broad portfolio of digital and IT solutions including domain registration, programming, and promotional materials. The website reflects a modest but functional online presence with basic content and navigation, supported by integration with Facebook and Google Analytics for marketing and tracking purposes. Technically, the site uses legacy JavaScript libraries and standard web technologies but lacks modern security headers and explicit HTTPS enforcement details, indicating room for improvement in security posture. Privacy compliance is partially addressed through a cookie consent banner and a linked privacy PDF, though no comprehensive privacy or security policies are present. Contact information is clearly provided, enhancing business credibility. Overall, the site is accessible and safe, with no adult or questionable content detected.

N

NextPage Media

heroine.cz

64

Heroine.cz is a Czech online media platform focused on women's issues, feminism, culture, psychology, and social topics. It offers a mix of free and premium content including articles, podcasts, and a printed magazine available via subscription and e-shop. The website is professionally designed with consistent branding and targets Czech-speaking women interested in progressive social discourse. The platform is operated by NextPage Media and maintains a moderate market position within niche feminist media in the Czech Republic. Technically, the site uses a modern Ruby on Rails framework with integrations for Google Analytics, Microsoft Clarity, Gemius, and advertising networks such as Google Adsense and Seznam SSP. Security posture is good with HTTPS, CSRF protection, and bot mitigation via Cloudflare Turnstile captcha. However, explicit privacy and cookie policies are not clearly found in the provided content, which impacts privacy compliance scoring. WHOIS data is unavailable, which reduces trustworthiness but the professional content and social media presence support legitimacy. Overall, Heroine.cz is a credible media outlet with room for improvement in privacy transparency and WHOIS data availability.

I

Nejlevnější IQOS ILUMA, koupit v akci se slevou, návody a novinky

iqfan.cz

53

The website www.iqfan.cz is a Czech language platform focused on providing information, reviews, tips, and purchasing guidance related to IQOS tobacco heating devices, particularly the IQOS ILUMA series. It targets Czech-speaking users interested in IQOS products, offering discount codes and links to dealers and e-shops. The site maintains a moderate market position within the niche retail sector for tobacco alternatives. Technically, the site is built on ASP.NET Web Forms, uses jQuery 1.12.4, and integrates Google Analytics and Tag Manager for tracking. The design is professional and mobile-optimized, though accessibility features are basic. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and privacy policies. No WHOIS data is available, which limits domain trust verification. Overall, the site is content-rich and functional but would benefit from enhanced privacy compliance and security hardening.

Spojimese.cz is a charitable platform operated by profi people s.r.o. that connects private donors with single parents and people in need in the Czech Republic. The website facilitates verified requests for help and enables direct communication via an online chat. The platform operates without fees and partners with organizations such as Klub svobodných matek. Technically, the site uses modern Blazor Server technology with Semantic UI for the frontend and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and secure forms, but lacks important security headers and cookie consent mechanisms, which are recommended for GDPR compliance. WHOIS data is unavailable, which limits domain trust verification, but the business information and content appear legitimate and consistent with a small non-profit organization focused on social aid. Overall, the site is professional and trustworthy but could improve in privacy compliance and security best practices.

P

profi-people s.r.o

mstranka.cz

58

mSTRANKA.cz is a Czech service operated by profi-people s.r.o that offers free personal and business website creation with a paid subscription model for hosting and domain management. The service targets individuals, small businesses, craftsmen, and couples seeking wedding websites, providing a turnkey solution including website maintenance and editing. The website is professionally designed with clear navigation and good mobile optimization, leveraging common web technologies such as Bootstrap, jQuery, and Font Awesome. It integrates Google Analytics and Tag Manager for user tracking and employs a cookie consent mechanism to comply with privacy regulations. However, the absence of explicit privacy policy and terms of service pages is a gap in compliance. The WHOIS data for the domain is unavailable, which limits domain trust verification, but the website content and contact information appear legitimate and professional. Overall, the site demonstrates a good balance of usability, business credibility, and moderate security posture.

C

CLEVER Soft s.r.o

identifikace.cz

57

The website identifikace.cz operates as the Central Registry for animals and items in the Czech Republic, specializing in the registration and identification of pets such as dogs, cats, and ferrets via microchips. Established since 1996, the company CLEVER Soft s.r.o manages this service, providing a paid registration model with free updates and a user-friendly online platform for registration and chip lookup. The site targets pet owners, shelters, and municipalities, positioning itself as a trusted national service with a clear business model and long-standing market presence. Technically, the website is built on ASP.NET Web Forms with modern front-end libraries including Bootstrap and jQuery. It integrates Google Analytics for visitor tracking and CookieYes for GDPR-compliant cookie consent management. The site is mobile-optimized with good SEO and accessibility basics, though some improvements could be made in accessibility and performance tuning. The technical infrastructure appears stable and moderately performant. From a security perspective, the site enforces HTTPS and provides a cookie consent mechanism with granular controls, reflecting good privacy compliance. However, it lacks publicly available security policies, incident response contacts, and advanced security headers, which are recommended to enhance trust and resilience. No vulnerabilities or suspicious content were detected, and the WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, identifikace.cz is a professionally maintained, trustworthy website serving an essential niche in pet identification and registration in the Czech Republic. Strategic improvements in security transparency and incident readiness would further strengthen its posture and user confidence.

S

Statutární město Mladá Boleslav

mb-net.cz

51

The website https://mb-net.cz/ is the official online presence of the statutory city of Mladá Boleslav, Czech Republic. It serves as a comprehensive portal for residents and visitors, offering city information, municipal services, news updates, event calendars, and contact details. The site is well-positioned as a government entity's digital platform, providing essential public services and information in Czech language. The business model is focused on public service delivery and citizen engagement, with no commercial intent. The domain's long history since 1997 supports its credibility and established presence. Technically, the website employs a custom CMS (vismo®), modern web standards including HTML5, CSS3, and JavaScript, and integrates Google services such as reCAPTCHA for form security and Google Analytics for traffic analysis. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Cookie consent and GDPR compliance mechanisms are implemented effectively. From a security perspective, the site uses HTTPS with excellent SSL configuration, employs reCAPTCHA to protect forms, and manages cookie consent responsibly. However, it lacks explicit published security policies, incident response contacts, and security headers that could enhance its security posture. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is a trustworthy, professional municipal portal with good content quality and technical implementation. Strategic improvements include publishing security and incident response policies, enhancing security headers, and possibly adding terms of service to improve transparency and compliance.

M

Městský úřad Česká Lípa

mucl.cz

50

The website www.mucl.cz serves as the official municipal portal for the city of Česká Lípa in the Czech Republic. It provides residents and visitors with comprehensive information about city administration, public services, events, and contact details. The site is well-structured, professionally designed, and targets local citizens and stakeholders. It offers key services such as news updates, event calendars, online forms, and access to municipal resources. The presence of official branding and social media links reinforces its legitimacy as a government entity. From a technical perspective, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google services such as Analytics, Tag Manager, reCAPTCHA, and Translate widgets. The site uses a custom CMS platform (vismo®) tailored for municipal websites. Performance and mobile optimization are good, with accessibility features implemented to support diverse users. Security measures include HTTPS enforcement and CAPTCHA protection on forms, alongside a cookie consent mechanism compliant with GDPR. Security posture is solid but could be enhanced by implementing additional HTTP security headers and publishing explicit security policies or incident response contacts. The absence of WHOIS data for the domain is a notable transparency gap, though the website content and official contact information strongly indicate a legitimate government presence. No signs of malicious content or blocking mechanisms were detected, and the site maintains a safe content rating suitable for general audiences. Overall, www.mucl.cz is a credible, well-maintained municipal website with good technical and security practices. Strategic improvements in domain transparency and security policy disclosures would further strengthen trust and compliance.

D

Relaxare, divertisment și servicii hoteliere, toate într-un singur loc | Stațiunea Demänová

demanovarezort.ro

43

The website demanovarezort.ro represents a newly launched hospitality resort business focused on providing relaxation, entertainment, and hotel services primarily targeting tourists and visitors in Romania and neighboring countries. The site is part of a multi-domain brand presence with sister sites in Slovakia, Czech Republic, Hungary, Poland, and a .com domain, indicating a regional marketing strategy. Technically, the website is built on WordPress using Elementor and Yoast SEO, with integration of multiple analytics and tracking tools such as Google Analytics, Hotjar, Microsoft Clarity, and Facebook Pixel, reflecting a mature digital marketing approach. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and vulnerability disclosure policies. The domain registration is transparent and consistent with a new business launch, registered in March 2023 with no privacy protection, which supports legitimacy. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures and clearer contact information to improve trust and compliance.

D

Relaks, rozrywka i usługi hotelowe w jednym miejscu | Ośrodek wypoczynkowy Demänová

demanovarezort.pl

46

The website demanovarezort.pl represents a hospitality resort business offering relaxation, entertainment, and hotel services primarily targeting the Polish market with multilingual support for neighboring countries. The business appears to be relatively new, established around 2021, and operates multiple localized domains to serve different language audiences. The website is built on WordPress using Elementor, integrating various modern marketing and analytics tools such as Google Analytics, Microsoft Clarity, Hotjar, and multiple advertising pixels. The technical infrastructure is moderately optimized with good mobile responsiveness and SEO practices. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, there is room for improvement in security headers and published security policies. No privacy policy or terms of service pages were detected, indicating compliance gaps. WHOIS data is transparent and consistent with the business profile, enhancing trustworthiness. Overall, the site is functional and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

D

Pihenés, szórakozás és szállodai szolgáltatások, minden egy helyen | Demänová Resort

demanovarezort.hu

45

Demänová Resort is a hospitality business offering hotel accommodation, entertainment, and recreational services primarily targeting a general audience in Hungary and surrounding countries. The website is professionally designed using WordPress and Elementor, with multilingual support for regional markets. The technical infrastructure includes modern analytics and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar, combined with a cookie consent mechanism to comply with privacy regulations. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit security policies. The domain registration is recent and consistent with the business founding date, indicating legitimacy. However, the absence of visible privacy policies and terms of service reduces privacy compliance confidence. Overall, the website is functional, moderately secure, and professionally presented but could improve in privacy and security transparency.

D

Relaxation, entertainment and hotel-like services, all in one place | Demänová Resort

demanovarezort.com

46

Demänová Resort is a hospitality and leisure service provider offering relaxation, entertainment, and hotel-like services primarily targeting tourists and leisure seekers. The website is multilingual, supporting several European languages, indicating a regional focus. The business appears to be relatively new, founded around 2021, with a small size and a consistent branding approach. Technically, the website is built on WordPress using Elementor and Yoast SEO, with moderate performance and good mobile optimization. The presence of multiple analytics and tracking tools such as Google Analytics, Hotjar, and Microsoft Clarity indicates a focus on user behavior analysis and marketing. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published security policies. Privacy compliance is basic with no explicit privacy policy or terms of service detected. Overall, the website is professional and functional but could improve in transparency and security documentation.

D

Demanová Rezort

demanovarezort.cz

45

Demanová Rezort is a hospitality and leisure resort business operating primarily in the Czech Republic, with a newly registered domain indicating a recent launch in 2023. The website offers relaxation, entertainment, and hotel-like services targeting a general audience interested in resort experiences. The digital infrastructure is built on WordPress with Elementor and Yoast SEO, supported by multiple marketing and analytics tools such as Google Analytics, Microsoft Clarity, Hotjar, and Facebook Pixel. Cookie consent is managed via Cookiebot, reflecting some level of privacy compliance. Security posture is moderate with HTTPS implied but lacking visible security headers and formal security policies. No contact emails or phone numbers were found in the analyzed content, which may impact user trust and business credibility. The domain registration is consistent and transparent, with no privacy protection, appropriate for a hospitality business. Overall, the website is functional and professionally designed but would benefit from enhanced security practices and clearer contact information.

A

Alaio Inc.

bitrix24.net

71

Bitrix24, operated by Alaio Inc., is a comprehensive SaaS platform offering a free online workspace for businesses, integrating CRM, task management, collaboration, and sales tools. It targets businesses and teams seeking to streamline sales, communication, and project management. The platform is positioned as a mature and established player in the business software market, offering extensive features including AI-powered CoPilot tools across various modules. Technically, the website leverages the Bitrix Framework and modern web technologies, with good mobile optimization and SEO practices. Security posture is moderate with HTTPS usage and cookie consent mechanisms, though security headers and incident response details are not evident. The site is transparent with privacy and cookie policies, showing GDPR compliance. Overall, Bitrix24 presents a professional, trustworthy, and feature-rich platform with room for security enhancements.

Mikroregion Rožnovsko, s.o. is a small non-profit regional association based in the Czech Republic, focused on promoting local culture, tourism, and community development within the Rožnovsko microregion. The website serves as an information hub for residents and visitors, providing updates on cultural events, local governance, and regional projects. The organization leverages modern web technologies including Bootstrap, jQuery, and integrates Google Analytics and Facebook SDK for tracking and marketing purposes. The site is well-designed, mobile-optimized, and provides clear navigation and relevant content in Czech language. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and vulnerability disclosure mechanisms. Privacy compliance is basic, with no explicit privacy policy or terms of service found on the main page. Overall, the website is trustworthy and professionally maintained, reflecting the organization's legitimacy and community focus.

T

Targito

targito.com

71

Targito operates as a data platform focused on personalized communication and email marketing for e-commerce businesses, primarily targeting the Czech Republic market. The website presents a professional and consistent brand image with clear navigation and multilingual support. Technically, the site is built on WordPress with modern marketing and analytics tools integrated, including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Security posture is adequate with HTTPS and reCAPTCHA usage, though some security headers and explicit privacy policies are missing. The absence of WHOIS registration data reduces trustworthiness and calls for further verification. Overall, the site is functional and business-oriented but would benefit from enhanced transparency and security documentation.

C

Církev adventistů sedmého dne

casd.cz

51

The website www.casd.cz represents the Czech-Slovak Union of the Seventh-day Adventist Church, a well-established non-profit religious organization affiliated with a global church community. The site provides rich content including news, educational resources, humanitarian aid information, and media offerings, targeting members and interested individuals in Czechia and Slovakia. Technically, the site is built on WordPress with modern web technologies, including Google Analytics and Google Maps integration, and is mobile optimized with good SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit privacy policies are lacking. The absence of WHOIS data reduces domain trustworthiness, but the website content and structured data strongly indicate legitimacy. Overall, the site is professional, content-rich, and safe for general audiences.

S

SK Slavia Praha

veznakuhvezdaje.cz

48

SK Slavia Praha is a well-established Czech football club celebrating its 130th anniversary with a new visual identity and logo. The website serves as a dedicated platform to showcase this rebranding effort, including the club's history, logo evolution, custom font, fanshop merchandise, and related brand extensions. The site targets fans, sports enthusiasts, and customers interested in official club products. Technically, the website uses modern web standards with custom fonts, video content, and Google Analytics for visitor tracking. The site is mobile-optimized and professionally designed, providing an excellent user experience. Security-wise, the site implements a cookie consent mechanism but lacks visible security headers and explicit privacy or security policies. No contact information or incident response details are provided, which are areas for improvement. Overall, the domain registration aligns with the website's purpose, indicating legitimacy. The site is safe, free of adult or questionable content, and maintains consistent branding.

T

Trusted Shops

trustedshops.ch

69

Trusted Shops operates a professional and well-branded website focused on providing trust and certification services for online shops, primarily targeting the Swiss and broader European e-commerce market. The platform offers key services such as shop certification, buyer protection with a money-back guarantee, and authentic customer reviews, positioning itself as a leading community of trust with millions of shoppers and tens of thousands of shops. The website is built on a modern WordPress infrastructure with Bootstrap and integrates advanced SEO and analytics tools, reflecting a mature digital presence. Security posture is strong with HTTPS enforced and consent management implemented, though explicit security headers could be improved. The absence of WHOIS data for the domain www.trstd.com raises some legitimacy concerns, but the overall professional content and trusted brand association mitigate immediate risks. Strategic recommendations include enhancing privacy disclosures and verifying domain registration details to strengthen trust.

Tipito.cz is a Czech lifestyle magazine offering tips, ideas, and inspiration for better living, covering topics such as recipes, home, garden, health, beauty, and lifehacking. The website targets a general Czech-speaking audience interested in practical and creative lifestyle content. The business model appears to be content publishing monetized primarily through advertising, including Google Adsense. Technically, the site uses a modern front-end stack with Bootstrap, jQuery, Font Awesome, and integrates Google Analytics and Tag Manager for tracking. The site is mobile responsive and well-structured, though some accessibility features could be improved. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks some security headers and explicit privacy and cookie policies. WHOIS data is unavailable, limiting domain trust assessment, but the site content and external references suggest legitimacy. Overall, the site is professional and functional but could enhance privacy compliance and security transparency.

E

eSportsmedia s.r.o.

fanshopfkpce.cz

46

Fanshop FK Pardubice is a Czech Republic based small retail e-commerce business specializing in fan merchandise for the FK Pardubice football club. The website offers a variety of products including clothing, accessories, and a custom jersey configurator, targeting local football fans. The business is operated by eSportsmedia s.r.o., which also appears to be the parent company and developer of the site. The company maintains a physical store located at the CFIG Arena in Pardubice, enhancing its local presence. Technically, the website uses a combination of jQuery, Slick Carousel, Fancybox, and the Nette PHP framework, indicating a moderately modern tech stack. The site is mobile optimized and includes basic SEO and accessibility features. Hosting is managed through a Czech registrar with name servers at forpsi.net. Google Analytics is implemented but misconfigured, and cookie consent is properly managed through a third-party service, reflecting a basic level of privacy compliance. From a security perspective, the site lacks explicit security headers and does not provide visible security or incident response policies. No critical vulnerabilities or blocking mechanisms were detected, but improvements are recommended to enhance security posture. The domain registration data is consistent with the business claims, and no suspicious patterns were found, supporting the legitimacy of the site. Overall, the website is professionally presented with good content quality and business credibility. Privacy compliance is basic but present. Security measures require enhancement to meet higher standards. The site is safe for general audiences and does not contain any adult or questionable content.

S

Sklopísek Střeleč, a. s.

glassand.eu

51

Sklopísek Střeleč, a. s. is a Czech-based medium-sized manufacturing company specializing in the supply of high-quality quartz sands for various industrial applications including glassmaking, foundry, filtration, and sports surfaces. The company positions itself as a reliable supplier with a focus on quality and availability, targeting industrial and commercial customers. The website reflects a professional business presence with clear product categorization and regular news updates, supporting its market position. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and popular carousel libraries, along with analytics tools such as Google Analytics and Hotjar. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, some technical improvements could enhance accessibility and performance further. From a security perspective, the website uses HTTPS and avoids exposing sensitive data, but lacks important security headers and visible privacy and cookie policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency and readiness. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve trustworthiness. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and establishing a vulnerability disclosure process.

SPP CZ, a.s. is a major energy supplier operating primarily in the Czech Republic and Slovakia, serving approximately 1.5 million customers including households, small businesses, and large enterprises. The company offers gas and electricity supply services with an emphasis on competitive pricing, transparency, and customer convenience through online tools such as savings calculators and contract management. The website reflects a well-structured digital presence with clear navigation and professional branding consistent with a large energy sector player. Technically, the website employs modern tracking and analytics tools including Google Tag Manager, Google Analytics, and Cookiebot for consent management, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is generally good with HTTPS enforced and form validation implemented, but lacks explicit security headers and published security policies. The absence of WHOIS registration data is a notable gap, reducing trustworthiness from a domain legitimacy perspective. However, the website content and business information strongly suggest a legitimate and established company. No signs of malicious content or security vulnerabilities were detected in the provided data. Overall, the site demonstrates a solid business and technical foundation with room for enhanced transparency and security documentation.

S

Statutární město Teplice

teplice.cz

51

The website represents the official portal of the statutory city of Teplice, Czech Republic. It serves as a comprehensive resource for residents, visitors, and local businesses by providing municipal services, news updates, event calendars, and contact information. The site is well-structured, professionally designed, and targets a broad audience including families, seniors, and tourists. The business model is government/public service with a focus on transparency and accessibility. Technically, the website employs a modern tech stack including HTML5, CSS3, JavaScript, Google Analytics, Google Tag Manager, Google reCAPTCHA, and a Voiceflow chatbot for enhanced user interaction. It uses the Vismo CMS platform and integrates Google Translate for multilingual support. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site enforces HTTPS, uses reCAPTCHA on forms to prevent abuse, and implements cookie consent mechanisms compliant with GDPR. However, it lacks a dedicated security policy page and incident response contact details. Security headers are not explicitly detected, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively serves its public service role with moderate to good technical and security maturity. Strategic enhancements in security transparency and header implementation would further strengthen its posture.