Security Directory

D

Domov Sue Ryder, z.ú.

sue-ryder.cz

60

Domov Sue Ryder is a well-established Czech non-profit organization dedicated to providing social services to seniors and their families. Operating since 1998, it offers a range of services including personal assistance, senior homes, charity shops, and volunteer programs. The website reflects a mature digital presence with clear branding, good content quality, and compliance with GDPR and cookie regulations. Technically, the site uses modern web technologies such as Google Analytics, Facebook Pixel, and the Nette Framework, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is trustworthy, professional, and serves its target audience effectively.

S

Sanktuarium św. Jana Pawła II

kursjp2.pl

10

The website kursjp2.pl represents the Sanktuarium św. Jana Pawła II, a religious sanctuary in Kraków, Poland, offering pre-marriage courses and catechesis for engaged couples preparing for the sacrament of marriage in the Catholic Church. The site targets engaged couples and provides detailed course schedules, contact information, and team profiles. The business operates as a small non-profit entity with a clear religious and educational mission. Technically, the website is built on WordPress using the Mesmerize theme and several plugins including Yoast SEO, Contact Form 7, and a cookie consent plugin. The site is hosted likely by cyber_Folks S.A., with HTTPS enabled and moderate performance and mobile optimization. SEO practices are good, but accessibility is basic. From a security perspective, the site uses HTTPS but lacks DNSSEC and explicit security headers. No incident response or security policies are published, and no vulnerability disclosure mechanisms are present. Cookie consent is implemented, but no privacy policy or terms of service pages were found, indicating compliance gaps. Overall, the website is legitimate, well-branded, and serves its niche audience effectively. However, improvements in privacy compliance, security headers, and published policies would enhance trust and security posture.

VortexHealing® is a holistic energy healing and spiritual awakening system with a focus on multidimensional healing and personal transformation. The website primarily targets Spanish-speaking individuals interested in energy healing and spiritual growth, offering training courses, healing sessions, and community resources. The business operates on a service and education model with a small but dedicated global community. Technically, the website uses established frameworks such as Yii and Bootstrap, hosted by Bluehost Inc., and includes standard libraries like jQuery and Font Awesome. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is moderate; while HTTPS is presumably enabled (not explicitly confirmed in HTML), no DNSSEC or security headers are detected, and no privacy or cookie policies are present, indicating compliance gaps. Contact information is limited to a contact form with no explicit emails or phone numbers. Overall, the domain registration is consistent and legitimate, supporting the business's credibility. Recommendations include improving privacy compliance, adding security headers, and enhancing transparency around data protection.

O

OLC Webdesign s.r.o.

orbinet.cz

46

OLC Webdesign s.r.o. is a Czech Republic-based small technology company specializing in professional web design, custom e-commerce solutions, SEO/SEM marketing, and graphic design services. The company has a strong regional presence with over 20 years of experience and notable awards such as the Zlatý erb 2022. Their target audience primarily includes businesses and organizations seeking tailored online presence and marketing solutions. The website demonstrates a high level of professionalism, with clear navigation, rich content, and modern design. Technically, the website employs a modern technology stack including PHP, Symfony, Nette frameworks, Git version control, and front-end libraries like jQuery and Webpack. The site is mobile-optimized and uses Google Fonts and LightGallery for enhanced user experience. Security-wise, HTTPS is enforced, and Google reCAPTCHA v3 is implemented on contact forms, indicating attention to bot mitigation and data protection. However, the absence of security headers and explicit privacy/cookie policies indicates areas for improvement. The security posture is solid but could be enhanced by adding security headers, publishing a privacy policy, cookie consent mechanisms, and incident response information. The lack of WHOIS data reduces domain trustworthiness, though the website content and business information appear legitimate and consistent. Overall, the site scores well on content quality, technical implementation, and business credibility but has moderate privacy compliance. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, publishing security and incident response policies, and improving domain registration transparency to enhance trust and compliance.

V

VÚB Operating Leasing

vubleasing.sk

63

VÚB Operating Leasing is a Slovak financial services subsidiary specializing in operational leasing and fleet management solutions. The company leverages its parent brand VÚB Banka to offer leasing, financial leasing, and loan products primarily targeting businesses and entrepreneurs in Slovakia. The website is professionally designed with clear navigation and content relevant to its services, including contact forms and legal information. Technically, the site uses a custom CMS with common JavaScript libraries and integrates Google Tag Manager and Ahrefs Analytics for marketing and SEO purposes. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and incident response policies. Overall, the domain registration aligns well with the business identity, indicating legitimacy and trustworthiness.

B

Bobit Business Media Inc.

schoolbusfleet.com

61

School Bus Fleet is a specialized media platform serving student transportation professionals primarily in the United States and Canada. It provides industry news, best practices, regulatory updates, and commercial information focused on school bus fleet management and safety. The website is owned by Bobit Business Media Inc., a recognized media company. The platform targets professionals involved in pupil transportation, offering valuable resources to support their operational and safety needs. Technically, the website employs modern web technologies including Bootstrap for responsive design, jQuery, and various analytics and marketing tools such as Google Tag Manager and Facebook Pixel. The site is well-optimized for mobile devices and demonstrates good SEO practices. However, explicit privacy and cookie policies are not evident in the provided content, which may impact compliance and user trust. From a security perspective, the site uses HTTPS with a strong SSL configuration and incorporates security features like Google reCAPTCHA to protect forms. Nonetheless, the absence of visible security headers and lack of WHOIS data for the domain reduce the overall security posture and trustworthiness. No critical vulnerabilities or malicious content were detected. Overall, the website presents a professional and trustworthy resource for its niche audience but would benefit from enhanced transparency regarding privacy, security policies, and domain registration details to improve compliance and trust.

M

Magicware s.r.o.

profi-log.net

53

PROFI-LOG is a Czech healthcare technology platform developed by Magicware s.r.o., founded in 2020. The platform offers a comprehensive tool for continuous patient symptom tracking, integrating subjective inputs, automatic measurements, and virtual call assistants to enhance patient care and doctor-patient communication. The website is professionally designed, primarily in Czech, and targets healthcare professionals and patients seeking coordinated medical care solutions. The platform holds CE certification, indicating compliance with medical device regulations, and partners with recognized institutions, enhancing its market credibility. Technically, the website is built on ASP.NET WebForms with a mix of modern and legacy technologies including jQuery 2.1.0, Google reCAPTCHA, Swiper.js, and Google Analytics. It uses HTTPS with a valid SSL certificate and Google Cloud DNS but lacks DNSSEC and some recommended security headers. The site is mobile-optimized and SEO-friendly but could improve accessibility features. Forms are protected with reCAPTCHA and include validation, supporting secure data collection. From a security perspective, the site demonstrates good baseline practices such as HTTPS and spam protection but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a comprehensive privacy policy and GDPR consent on data processing, though no explicit cookie consent mechanism was found. Contact information is clearly provided, supporting business credibility and user trust. Overall, the website scores well in content quality, business credibility, and technical implementation but has room for improvement in security posture and privacy compliance. Strategic recommendations include enabling DNSSEC, adding security headers, updating legacy libraries, and implementing cookie consent mechanisms to enhance compliance and security posture.

G

GX Solutions

gxsolutions.sk

44

GX Solutions is a Slovakia-based technology company specializing in smart monitoring and data collection solutions for vehicles, machinery, and objects. Their platform leverages GPS, RTLS, and RFID technologies to serve clients primarily in logistics, transportation, municipal services, and industrial manufacturing sectors. The company has a strong market presence with over 25 years of experience and a client base exceeding 750 companies across four EU countries. Their business model focuses on B2B solutions integrating hardware and software for operational efficiency and safety. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPBakery Page Builder, indicating a mature digital infrastructure. The site is mobile-optimized and uses Google Analytics with IP anonymization, reflecting a moderate level of digital maturity. However, some security best practices like explicit security headers and detailed privacy policies are missing. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. The presence of cookie consent mechanisms shows some compliance with privacy regulations, though explicit privacy and terms of service pages are absent. No WAF or blocking mechanisms were detected, and no suspicious or malicious content was found. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, GX Solutions presents a professional and trustworthy online presence with room for improvement in security headers and privacy documentation. Strategic enhancements in these areas would strengthen their compliance posture and trustworthiness.

E

ESTERHÁZY GALANTA s.r.o.

esterhazygalanta.sk

44

Esterházy Galanta operates as a hospitality business located in a historic neo-Gothic chateau in Slovakia, offering restaurant, café, and wine bar services alongside event hosting and souvenir sales. The business leverages its cultural heritage and local history to attract tourists and local visitors, positioning itself as a unique venue with a strong local identity. The website reflects this with rich content, customer testimonials, and clear service offerings. Technically, the site is built on the MODX CMS platform, uses modern web technologies such as jQuery and Owl Carousel, and is mobile optimized with good SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks advanced security headers and explicit security policies. Overall, the site is trustworthy and professional, with room for security enhancements and formal policy disclosures.

Lepikov.cz is a Czech Republic based small e-commerce business specializing in the design and manufacture of custom wall stickers, motivational posters, and related decorative products. The company positions itself as a direct manufacturer offering custom designs at competitive prices, targeting general consumers interested in home and office decoration. The website is built on WordPress with WooCommerce and uses various plugins to enhance e-commerce functionality and affiliate marketing. The site is well designed with good navigation and mobile optimization, providing a positive user experience. However, the absence of WHOIS data and lack of visible privacy and cookie policies reduce trust and compliance posture. Security headers are not detected, indicating room for improvement in security hardening. Overall, the business appears legitimate but would benefit from enhanced transparency and security practices.

C

Chemosvit Group

chemosvitgroup.com

47

Chemosvit Group is a manufacturing group specializing in the production of flexible films for packaging and the electrotechnical industry, as well as plastics and polypropylene yarn. The company targets industrial clients and sectors requiring specialized film and plastic products. The website reflects a professional and consistent brand presence with clear descriptions of their business activities and services. Technically, the site is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery, Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing. Security measures include HTTPS enforcement, reCAPTCHA integration, and a cookie consent mechanism, indicating a good security posture. However, the absence of publicly available WHOIS data reduces transparency and trustworthiness from a domain registration perspective. Overall, the website is well-structured and compliant with privacy regulations but would benefit from publishing more explicit contact and security policy information.

Kompetenčné a certifikačné centrum kybernetickej bezpečnosti (KCCKB) operates as the national coordination center for cybersecurity competence and certification in Slovakia. The organization focuses on providing certifications for cybersecurity managers and auditors, as well as conducting security measurements and verification. The website reflects a government-related entity with a clear mission to enhance cybersecurity standards nationally. The digital presence is supported by a modern WordPress infrastructure with integrated SEO and consent management tools, indicating a mature technical setup. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though the absence of a public security policy and incident response contacts suggests room for improvement in transparency and readiness. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

P

PRVÁ ZVÁRAČSKÁ, a.s.

pzvar.sk

41

PRVÁ ZVÁRAČSKÁ, a.s. is a Slovakian research, development, manufacturing, and certification company specializing in advanced welding technologies. Established in 2003, it holds a strong market position as a high-tech welding research center offering automated welding equipment, certification services, and educational programs. The website reflects a professional and consistent brand image targeting industrial clients and research institutions. Technically, the site is built on Drupal CMS with integration of Google Maps and Analytics, providing moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional, though improvements in security and privacy compliance are recommended.

S

Slovak Smart City Cluster

smartcluster.sk

43

Slovak Smart City Cluster is a Slovak non-profit association integrating representatives from business, technology innovation, public administration, and academia to promote and develop smart city concepts in Slovakia. The organization focuses on collaboration, knowledge sharing, and advocacy to modernize urban ecosystems with sustainable energy, data processing, and shared economy innovations. The website is professionally designed using WordPress and common plugins, targeting Slovak stakeholders interested in smart city development. The technical infrastructure is modern and mobile-optimized, hosted by a Slovak provider. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is limited to social media links without explicit emails or phone numbers. Overall, the site is trustworthy and serves as a regional leader in smart city initiatives.

Výskumný ústav chemických vlákien, a. s. is a Slovak research and manufacturing company specializing in chemical fibers, additive concentrates, pigment development, and machinery for the chemical industry. With over 70 years of operational history, it holds a strong market position in the manufacturing sector, serving industrial clients and research partners. The website reflects a professional digital presence with clear navigation and multilingual support, targeting B2B audiences. Technically, the site is built on WordPress with modern plugins and analytics integrations, hosted on a reputable provider with DNSSEC and HTTPS enabled, ensuring a secure browsing experience. However, explicit privacy and security policies are not directly found, and contact information is not clearly presented on the homepage. The security posture is solid but could be improved with additional HTTP headers and published security policies. Overall, the site is trustworthy, compliant with GDPR cookie consent requirements, and well-positioned for its business domain.

Z

Zväz celulózo-papierenského priemyslu Slovenskej republiky

zcpp.sk

48

Zväz celulózo-papierenského priemyslu Slovenskej republiky (ZCPP-SR) is an independent, voluntary, non-political, and fully autonomous interest organization representing legal and physical business entities in the Slovak pulp and paper industry and related sectors. The organization acts as a business and employer representative for the Slovak industrial sector focused on pulp production and processing. The website reflects a professional presence with clear information about the association's mission, products, news, and contact details. The target audience includes industry stakeholders, members, and interested parties in Slovakia. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Analytics, Google Tag Manager, and Google reCAPTCHA v3 for security on forms. The site is mobile optimized and provides a good user experience with clear navigation and content relevance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers are not explicitly detected. Privacy compliance is strong with a comprehensive GDPR policy linked and an opt-in cookie consent system. Overall, the website is trustworthy and professionally maintained, supporting the organization's role as a key industry association in Slovakia.

Z

Zväz priemyselných výskumných a vývojových organizácií

zpvvo.sk

41

The website www.zpvvo.sk represents the Zväz priemyselných výskumných a vývojových organizácií, a Slovak non-profit association uniting research organizations focused on research, development, education, and certification. The site is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a moderate level of digital maturity. The content is professionally presented in Slovak and targets research organizations and stakeholders within Slovakia. However, the website lacks visible privacy and cookie policies, security headers, and incident response information, which are critical for compliance and security posture. No blocking or WAF challenges were detected, allowing full content access. Overall, the site demonstrates a moderate security posture but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

B

Beset s.r.o.

beset.sk

50

Beset s.r.o. is a Slovak-based IT company with over 30 years of experience specializing in system integration, custom software development, and information security solutions. The company targets business and enterprise clients primarily in Central and Eastern Europe, offering a broad range of services including cybersecurity incident response and digital transformation. Their market position is solidified by long-term presence and participation in EU and Slovak government co-financed research projects. Technically, the website is built on WordPress with modern JavaScript libraries and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is strong with HTTPS enforced, ISO 27001 certification, and a dedicated Cyber Incident Response Team, although some improvements in security headers and incident contact channels are recommended. Overall, the website is professional, trustworthy, and compliant with GDPR, with room for enhancement in transparency and accessibility.

C

Centrum pre umelú inteligenciu (CUI)

aislovakia.com

46

AIslovakIA is a Slovak national platform dedicated to the development and promotion of artificial intelligence. It operates as a neutral, independent, and non-profit organization connecting academia, industry, government, and international institutions to foster AI excellence in Slovakia. The platform is managed by the Center for Artificial Intelligence (CUI) and has founding members including the American Chamber of Commerce in Slovakia, IT Association of Slovakia, and Slovak University of Technology in Bratislava. The website provides information about AI dialogue, infrastructure, education, and think tank activities, along with news and events related to AI in Slovakia. Technically, the website is built on WordPress using Elementor and several common plugins such as Contact Form 7 and TranslatePress for multilingual support. It is hosted on a Slovak hosting provider inferred from the nameservers. The site is mobile-optimized with good navigation and content quality. However, some technical improvements are possible, such as enabling DNSSEC and configuring analytics properly. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers. There is no visible privacy or cookie policy, which is a compliance gap. No incident response or vulnerability disclosure information is provided. Contact information is clearly available, including a company email and physical address. Social media presence is active on Facebook, Instagram, and LinkedIn. Overall, the website is professional and trustworthy, serving as an important platform for AI development in Slovakia. Strategic recommendations include improving privacy compliance, enhancing DNS security, and adding explicit security policies to strengthen trust and compliance.

M

Městská knihovna a informační centrum Hradec nad Moravicí

ichradec.cz

44

The website www.ichradec.cz serves as the official portal for the Municipal Library and Information Center of Hradec nad Moravicí, Czech Republic. It provides comprehensive information about local cultural events, tourism, library services, and municipal news, targeting residents and visitors alike. The site is multilingual, supporting Czech, English, German, Polish, and Russian, enhancing accessibility for diverse audiences. The business model is public service-oriented, focusing on community engagement and information dissemination. Technically, the website employs a mix of established JavaScript libraries such as jQuery, Bootstrap, Swiper.js, and jQuery Mmenu, indicating a moderately modern front-end infrastructure. The CMS appears to be custom or proprietary, tailored to municipal needs. The site is mobile-optimized with good navigation clarity and content relevance, though accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, HTTPS is used, and a cookie consent mechanism is implemented, reflecting some privacy compliance efforts. However, no explicit privacy policy or terms of service pages were found, and security headers are absent, which could expose the site to certain risks. The WHOIS data is unavailable, which is unusual for a government-related domain and reduces trustworthiness. No vulnerabilities or incident response information is publicly disclosed. Overall, the website is a trustworthy and professional municipal information portal with good content quality and user experience. Strategic improvements in security headers, privacy documentation, and WHOIS transparency would enhance its security posture and compliance standing.

M

Město Hradec nad Moravicí

muhradec.cz

47

The website www.muhradec.cz serves as the official online presence for the town of Hradec nad Moravicí, Czech Republic. It provides comprehensive information about municipal services, local government, cultural events, and public notices. The site targets residents, visitors, and local stakeholders, offering services such as e-podatelna (electronic filing), official announcements, and social services like SENIOR TAXI. The site maintains a consistent brand identity with the town's crest and official colors, and integrates social media channels to enhance community engagement. Technically, the website employs a modern tech stack including jQuery, Bootstrap 4, Swiper, and other JavaScript libraries to deliver a responsive and accessible user experience. The site is mobile-optimized and includes accessibility features, with a clear navigation structure and search functionality. Cookie consent is implemented, indicating attention to privacy compliance. However, no advanced analytics or tracking scripts were detected, suggesting a privacy-conscious approach. From a security perspective, the site uses HTTPS and has a cookie consent mechanism, but lacks visible security headers in the provided HTML content. There is no explicit security policy or incident response information published. The WHOIS data for the domain is unavailable, which reduces trust from a domain registration standpoint, but the official nature of the content and municipal branding strongly support legitimacy. Overall, the site is a well-structured, informative municipal portal with good content quality and user experience. Security posture could be improved by adding security headers and publishing security policies. Domain registration transparency should be verified to enhance trustworthiness.

O

Obec Česká Ves

cves.cz

45

Obec Česká Ves operates an official municipal website serving the local community of Česká Ves in the Czech Republic. The site provides essential information about the municipal office, community news, events, and contact details. It targets residents and visitors seeking local government services and updates. The website is well-branded and consistent with its governmental purpose, featuring a professional design and clear navigation. The domain has been registered since 1999, indicating a stable and established online presence. Technically, the website uses a custom CMS (Noteo Engine) with standard web technologies including HTML5, CSS, JavaScript, jQuery, and FontAwesome icons. It is hosted under the registrar Gransy, with multiple name servers indicating a reliable hosting environment. The site is served over HTTPS, ensuring secure communications. Mobile optimization and accessibility are basic but functional, with room for improvement in SEO and accessibility features. From a security perspective, the site enforces HTTPS and uses secure login forms. However, it lacks explicit security headers such as Content-Security-Policy and X-Frame-Options, which could enhance protection against common web attacks. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is limited, with no explicit privacy or cookie policies found, although cookie consent is denied by default for analytics and advertising storage. Overall, the website presents a low-risk profile with a good trustworthiness level appropriate for a municipal government site. Strategic recommendations include adding comprehensive privacy and cookie policies, implementing security headers, and enhancing accessibility and SEO to improve compliance and user experience.

O

Obec Červená Voda

cervenavoda.cz

44

Obec Červená Voda operates as the official municipal government website for the town of Červená Voda in the Czech Republic. It provides residents and visitors with essential information about local government services, community news, tourism, and events. The website serves as a central hub for municipal communication and public service announcements, positioning itself as a trusted local government resource. The business model is focused on public service rather than commercial activity, targeting local citizens and tourists. Technically, the website employs a custom CMS with a modern JavaScript stack including jQuery, Swiper.js, and various UI libraries. It integrates Google Analytics and Facebook SDK for analytics and social media engagement. The site is mobile optimized and uses HTTPS with a valid SSL certificate, ensuring secure data transmission. However, there is room for improvement in security headers and privacy compliance features. From a security perspective, the site demonstrates a moderate security posture with HTTPS enabled and no visible sensitive data exposure. The absence of security headers and explicit privacy and cookie policies are notable gaps. No vulnerabilities or suspicious activities were detected in the content. The WHOIS data is unavailable due to privacy protection, which is common for Czech domains and does not detract from the site's legitimacy. Overall, the website is a well-maintained municipal portal with good content quality and user experience. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and publishing incident response contacts to improve trust and compliance. These steps will strengthen the site's security posture and align it better with GDPR and other regulatory requirements.

Pivovar Zlosin is a small family-owned craft brewery located in Velké Losiny, Czech Republic, offering a range of services including beer production, a pension, camping, a restaurant, and beer bars. The business emphasizes traditional brewing methods combined with modern technology and local ingredients, targeting mature customers interested in quality craft beer and regional hospitality experiences. The website is built on WordPress with Elementor and integrates Google Maps for location services, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and domain transfer protections, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is basic with privacy and cookie policies present but lacking active consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned within its niche market.

C

Costa Coffee

costa-coffee.cz

64

Costa Coffee Czech Republic operates a retail and hospitality business focused on coffee sales, loyalty programs, and e-commerce. The website presents a professional and consistent brand image with clear navigation and relevant content for coffee consumers in the Czech market. The business is positioned as a large retail and hospitality entity under the parent company LAGARDERE Travel Retail, a.s., indicating a strong market presence. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, enhanced by common plugins such as Contact Form 7 and GTranslate for multilingual support. The site uses Google Tag Manager and Google Analytics for tracking, and it is mobile-optimized with good SEO practices. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data reduces domain registration transparency, which slightly impacts trustworthiness. Overall, the website is safe, professional, and compliant with GDPR, but could improve security posture and transparency regarding domain registration and incident response. Strategic recommendations include adding security headers, publishing security policies, and improving WHOIS data visibility.

Pivovar Zlosin is a small craft brewery located in Velké Losiny, Czech Republic, offering artisanal beer production alongside hospitality services including a pension, camping, restaurant, and beer bar. The business emphasizes local ingredients, sustainability, and a traditional yet modern brewing approach. The website reflects a well-structured and professionally designed digital presence, leveraging WordPress with Elementor and Yoast SEO for content management and optimization. Integration of Google Maps and customer testimonials enhance user engagement and trust. Security posture is adequate with HTTPS enabled and domain transfer protections, though DNSSEC is not enabled and explicit security policies are absent. Privacy and cookie policies exist but lack advanced consent mechanisms. Overall, the site is mature for a small business, with good business credibility and moderate technical sophistication.

S

Schrothovy léčebné lázně s.r.o.

lazne-lipova.cz

45

Schrothovy léčebné lázně s.r.o. operates a traditional spa and rehabilitation center located in Dolní Lipová, Czech Republic, with a history spanning over 180 years. The company specializes in therapeutic treatments for non-infectious skin diseases, metabolic disorders, and respiratory illnesses, leveraging natural climatic conditions and unique herbal blends. Their business model includes spa treatments, accommodation, dining services, and retail of gift vouchers, targeting health-conscious tourists and patients seeking specialized care. The website reflects a well-structured and professional online presence with clear navigation and relevant content tailored to their audience. Technically, the website employs a mature technology stack including jQuery, Bootstrap, and Google Tag Manager, hosted on a CMS platform called inPage. The site is mobile-optimized and incorporates modern web standards, although some improvements in accessibility and security headers could be made. Performance is moderate, with a good balance between content richness and loading speed. From a security perspective, the site enforces HTTPS and provides cookie consent mechanisms compliant with GDPR. However, it lacks certain HTTP security headers and does not publish incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust verification, but the business information and website content suggest legitimacy. Overall, the website scores well in content quality, privacy compliance, and security posture, with minor technical and trust-related gaps. Strategic recommendations include enhancing HTTP security headers, publishing security policies, and improving WHOIS transparency to bolster trust and compliance.

H

Hotel Červenohorské sedlo

hotelchs.cz

56

Hotel Červenohorské sedlo is a well-established mountain hotel located in the Jeseníky mountains of the Czech Republic, offering accommodation, wellness, gastronomy, and ski resort access. The website presents a professional and content-rich digital presence with clear navigation and multilingual support. The technical infrastructure includes modern analytics and marketing tools, with a cookie consent mechanism ensuring privacy compliance. Security posture is generally good with HTTPS and no exposed sensitive data, though security headers and explicit security policies are absent. The lack of WHOIS data reduces domain trustworthiness but does not detract from the apparent legitimacy of the business. Overall, the website is suitable for its hospitality audience and demonstrates a mature digital footprint.

A

AŽD Praha s.r.o.

azdfanshop.cz

42

AŽD Praha s.r.o. operates an e-commerce platform specializing in fan merchandise related to railways, targeting enthusiasts and customers seeking themed gifts and accessories. The website presents a professional and consistent brand image with a clear focus on railway-related products including clothing, books, and accessories. The business operates primarily in the Czech Republic and serves a niche market segment. Technically, the website is built on WordPress with WooCommerce and uses modern JavaScript libraries and analytics tools such as Google Analytics and Hotjar. The site is mobile-optimized and provides a good user experience with clear navigation and product categorization. Security posture is adequate with HTTPS enabled and secure forms, though some security headers are not explicitly detected and no incident response or security policy information is provided. Privacy and cookie policies are present and GDPR compliant, but no explicit cookie consent mechanism is observed. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, reducing overall trustworthiness. Overall, the website is functional, professional, and secure enough for its business purpose but would benefit from enhanced security headers, explicit cookie consent, and verified domain registration information.

A

AŽD Praha s.r.o.

azdvlaky.cz

49

AŽD Praha s.r.o. operates the website azdvlaky.cz, providing information and services related to railway transportation in the Czech Republic. The company is a leading Czech supplier and manufacturer of control and security systems for transportation, focusing on railway and road transport technologies. The website offers schedules, trip tips, news, and contact options, targeting Czech transportation users and tourists interested in regional rail lines. Technically, the site uses modern web technologies including Google reCAPTCHA for form protection, Google Tag Manager for analytics, and is built on the Nette Framework. The site is mobile-optimized with good SEO and accessibility basics. Security posture is strong with HTTPS and CAPTCHA protections, but lacks some advanced security headers and explicit security policies. WHOIS data is missing, which limits domain trust verification, but the website content and contact information appear professional and consistent with a legitimate business. Overall, the site is well-maintained, user-friendly, and compliant with privacy regulations including GDPR.

U

Universitätsklinikum Ruppin-Brandenburg / Ruppiner Kliniken GmbH

ukrb.de

54

The Universitätsklinikum Ruppin-Brandenburg (UKRB) is a large regional university hospital affiliated with the Medizinische Hochschule Brandenburg (MHB). It provides comprehensive healthcare services, including acute and emergency care, specialized medical departments, and interdisciplinary tumor centers. The institution also plays a significant role in medical education and research, serving a broad audience of patients, visitors, medical professionals, and students. The website reflects a mature digital presence with professional design, clear navigation, and strong content relevance in German. Technically, the site is built on the Contao CMS platform, leveraging modern JavaScript libraries such as jQuery and Swiper.js, and includes accessibility and SEO optimizations. Security posture is solid with HTTPS enforcement, CSRF protection, and cookie consent mechanisms, although explicit security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the domain registration and WHOIS data align well with the business claims, supporting high legitimacy and trust. The site does not exhibit any adult or questionable content and is safe for general audiences.

F

Fashion for help

fashionforhelp.cz

52

Fashion for help is a Czech Republic based charity second-hand retail network specializing in branded clothing sourced from the USA, Switzerland, and the EU. The organization operates a network of stores offering high-quality second-hand fashion items, targeting consumers interested in sustainable and charitable shopping. The website presents a professional and consistent brand image with good content quality and clear business focus. Technically, the site is built on WordPress using the Divi theme, with modern web technologies and Google Fonts integration. It employs HTTPS and a cookie consent mechanism, indicating attention to privacy compliance. Security posture is adequate but could be improved by adding explicit security headers and incident response information. Overall, the website is trustworthy and well-positioned within its niche market.

E

Entdecken Sie Singapur

visitsingapore.com

68

The website www.visitsingapore.com/de_de/ serves as the official tourism portal for Singapore, targeting German-speaking tourists and travelers. It provides comprehensive travel information, event details, and business event resources, positioning itself as a key digital asset for Singapore's tourism promotion. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, it leverages modern web technologies including Adobe Experience Manager, Google Tag Manager, and OneTrust for cookie consent, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and standard best practices, although explicit security headers could be further confirmed. Privacy compliance is well addressed with visible cookie consent and privacy policy in German, aligned with GDPR requirements. The absence of WHOIS data is notable but likely due to registry or query limitations rather than privacy protection or malicious intent. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance suitable for a government-affiliated tourism entity.

A

AGRI-TECH, s.r.o.

pouzitatechnika.cz

37

AGRI-TECH, s.r.o. operates the website pouzitatechnika.cz as a center for used agricultural machinery in the Czech Republic, serving as the exclusive importer of CLAAS and Väderstad brands. The company targets farmers and agricultural businesses, offering a portfolio of verified used and demonstration machinery. The website is professionally designed with good navigation and content relevance, supporting a medium-sized business model focused on retail and distribution within the agricultural manufacturing sector. Technically, the site uses common web technologies such as jQuery and Google Analytics, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and published security policies are absent. The WHOIS data is missing, which raises some concerns about domain registration transparency, but the website content and business presence appear legitimate and trustworthy. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in security and privacy compliance.

Rybo.cz is a personal fishing blog and podcast operated by Jakub Hladký, targeting the Czech fishing community and members of the Czech Fishing Union. The website offers fishing-related content including blog posts, audio interviews with fishing personalities, and monitoring of fishing product discounts. The business model is content-driven with monetization through advertising and user support. The site is well-branded and maintains a consistent presence across social media platforms. Technically, the site is built on WordPress with modern SEO practices, Google Tag Manager, and Adsense integration. It is mobile-optimized and accessible with good performance metrics. Security posture is solid with HTTPS and security headers, though it lacks a published security policy or incident response information. Privacy compliance is good with GDPR-aligned cookie consent and privacy policy. The absence of WHOIS data reduces domain trust slightly but does not detract from the professionalism of the site content and business information.

C

Coworking CB, z.s.

cowocb.cz

52

Cowo CB is a small, locally focused coworking space and event venue based in České Budějovice, Czech Republic. It positions itself as the first coworking space in the city, targeting freelancers, remote workers, and small businesses needing flexible office or event space. The website is professionally designed, content-rich, and provides clear contact information and business details, supporting a trustworthy user experience. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good SEO and mobile optimization. Security posture is solid with HTTPS and secure forms, though it lacks some security headers and a cookie consent mechanism, which are recommended for compliance and enhanced protection. WHOIS data is unavailable, which slightly reduces domain trust but does not detract from the visible legitimacy of the business. Overall, the site demonstrates a mature digital presence suitable for its business model.

Supsystic is an established WordPress plugin developer founded in 2012, offering a broad range of plugins such as data tables, galleries, pricing tables, maps, popups, and contact forms. The company targets WordPress website owners and developers seeking to enhance site functionality through customizable plugins. Their market position is solid with over 3.5 million downloads and a large user base, supported by positive customer reviews and active social media presence. Technically, the website is built on WordPress with modern web technologies including jQuery and Bootstrap, hosted behind Cloudflare for DNS and CDN services. SEO optimization is well implemented with Rank Math and structured data. Security posture is good with HTTPS enforced and use of reCAPTCHA, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is limited due to absence of explicit privacy and cookie policies in the analyzed content. Overall, the site is professional, trustworthy, and safe for general audiences.

L

Lacima Group

lacimagroup.com

77

Lacima Group is a specialized provider of energy risk analytics solutions, offering software and data services tailored to the energy sector. Their website reflects a professional B2B focus, targeting energy market professionals and companies seeking advanced analytics tools. The company positions itself as an established niche player within the energy analytics market, with a medium-sized operational scale based in Australia. Technically, the website is built on WordPress with modern web technologies and demonstrates good SEO and mobile optimization. Security posture is solid with HTTPS and security headers implemented, though the absence of a public security policy and incident response information suggests room for improvement. The lack of WHOIS registration data is a concern for domain legitimacy, but the professional site content and compliance with privacy regulations mitigate some risk. Overall, the site is trustworthy and well-maintained, but verifying domain registration status is recommended.

V

VDL Bus & Coach bv

vdlbuscoach.com

68

VDL Bus & Coach bv is a large Dutch company specializing in the manufacturing and supply of buses and coaches, with a strong focus on sustainable and innovative transport solutions including electric buses. The company operates under the parent company VDL Groep and targets public transport operators and travel companies across Europe. Their business model includes sales of new and used vehicles, parts, maintenance, training, and financing services. The website reflects a professional and consistent brand image with comprehensive content and multiple language support. Technically, the website is built on Wenetic CMS and employs modern analytics tools such as Google Analytics and Google Tag Manager. It is mobile-optimized with good SEO practices and a moderate performance profile. Security posture is strong with HTTPS enforced and secure forms, though the absence of security headers and cookie consent mechanisms are areas for improvement. The WHOIS data is unavailable, which slightly reduces domain trustworthiness; however, the website's professional presentation, clear business information, and social media presence support legitimacy. No security vulnerabilities or suspicious content were detected. Privacy compliance is good with a clear privacy policy, but cookie consent is missing. Overall, the website is a credible and professional digital presence for VDL Bus & Coach, with recommendations to enhance security headers, privacy compliance, and publish incident response information to further strengthen trust and compliance.

A

ABIRAIL CZ s.r.o.

abirail.cz

45

ABIRAIL CZ s.r.o. is a Czech Republic based company specializing in information systems for public transport and industrial automation solutions. Established since 2013, the company offers custom software development, consulting, technical project supervision, and 24/7 support services. Their client base spans across Europe, with a focus on transportation companies and industrial manufacturing sectors. The website demonstrates a professional digital presence built on WordPress with Elementor, featuring clear navigation, client case studies, and GDPR-compliant privacy and cookie policies. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy. Security posture is good with HTTPS and security headers in place, but lacks explicit security policy and incident response information.

M

MOLPIR, s.r.o.

molpir.com

43

MOLPIR, s.r.o. is a Slovak private company founded in 1993 specializing in the design, development, manufacturing, import, distribution, and servicing of a broad range of vehicle accessories for cars, trucks, buses, and trains. The company operates primarily in Slovakia and the Czech Republic with a presence across Europe through partners. Their key services include manufacturing and supplying components to vehicle and seat manufacturers, positioning them as a significant regional player in the transportation accessories sector. The website reflects a mature digital presence built on WordPress with modern frameworks and SEO optimizations, supporting their business model effectively. Security-wise, the site uses HTTPS and Google reCAPTCHA but lacks some advanced security headers and explicit security policies, which could be improved. The absence of WHOIS data for the domain is a notable concern, impacting domain trustworthiness despite the professional business presentation. Overall, MOLPIR demonstrates a solid business and technical foundation with room for enhanced security and privacy compliance.

M

Miteral

miteral.cz

42

Miteral is a Czech Republic-based company specializing in professional automotive service equipment, including autoservis and pneuservis tools and machinery. Operating since 1990, it serves a B2B market across the Czech Republic, offering a broad product range through a dedicated e-shop and direct sales. The website reflects a mature business with a clear market position as a trusted supplier of automotive workshop equipment. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Google Analytics, providing a responsive and user-friendly experience. Privacy compliance is addressed with cookie consent and a basic GDPR-aligned privacy policy. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Security posture is moderate with standard best practices but lacks advanced security headers and explicit security policies. Overall, the website is professional and trustworthy but would benefit from improved domain registration transparency and enhanced security measures.

M

Mikroelektronika s.r.o.

mikroelektronika.com

9

Mikroelektronika s.r.o. is a Czech-based company specializing in automated fare collection and ticketing systems for public transport, as well as custom electronics manufacturing. The company has a strong market presence with deployments in over 110 cities worldwide, including 23 capital cities, primarily in Europe and South America. Their business model focuses on B2B services targeting public transport operators and industrial clients. The website is professionally designed, well-structured, and provides clear contact information and GDPR-compliant privacy and cookie policies. Technically, the site uses modern JavaScript libraries and Google services for analytics and security (reCAPTCHA). Security posture is good with HTTPS and consent mechanisms, but lacks explicit security policies and security headers. WHOIS data is unavailable, which raises some concerns about domain registration transparency. Overall, the website is trustworthy and professional, but domain registration should be verified for full legitimacy.

K

KHMC

khmc.cz

40

KHMC s.r.o. is a Czech manufacturer specializing in the production and custom conversion of minibuses, luxury buses, and special vehicles since 1995. The company operates primarily in the transportation sector, serving customers seeking tailored bus solutions. Their website reflects a mature digital presence built on WordPress and WooCommerce, featuring modern technologies such as Google Analytics, Google Tag Manager, and reCAPTCHA for security. The site is well-structured, mobile-optimized, and includes comprehensive contact information and GDPR-compliant privacy and cookie policies. However, the absence of WHOIS data for the domain raises some concerns about domain registration transparency. Overall, KHMC demonstrates a solid market position with professional branding and a clear business model focused on vehicle manufacturing and after-sales services.

D

Dopravný podnik mesta Košice, a.s.

dpmk.sk

49

Dopravný podnik mesta Košice, a.s. is the primary public transportation operator in Košice, Slovakia, providing bus, trolleybus, and tram services. The company offers a range of services including electronic ticketing, mobile tickets, and advertising on public transport infrastructure. The website reflects a well-established organization with clear market positioning and a focus on serving the general public and commuters in the region. The presence of ISO 9001 certification and EU project funding logos further supports its credibility and operational quality. Technically, the website is built on Drupal 11, utilizing modern JavaScript libraries and frameworks to deliver a responsive and accessible user experience. The site is well-structured with clear navigation and good SEO practices. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and shows no signs of exposed sensitive data or vulnerabilities. However, it lacks some advanced security headers and an incident response disclosure. Overall, the website demonstrates a strong security posture and compliance with GDPR, making it trustworthy for users. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding a vulnerability disclosure policy to further strengthen security and trust.

S

Sendcloud

sendcloud.com

71

Sendcloud is a leading European shipping automation platform focused on ecommerce businesses. The company offers software that automates shipping processes and connects merchants to over 160 carriers, enhancing delivery experiences. The website is professionally designed, mobile-optimized, and uses modern technologies such as WordPress, Yoast SEO, and HubSpot forms. It demonstrates a mature digital presence with structured data and social media integration. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be improved. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy given the professional web presence. Privacy compliance is basic, with room for improvement in policy transparency and contact information. Overall, Sendcloud presents a credible and technically sound ecommerce shipping solution platform.

S

Svet motocyklov

motofan.sk

41

Motofan.sk is a well-established Slovak online media portal dedicated to motorcycles, motorcycle events, news, and related content. Founded in 2009, it serves a niche audience of motorcycle enthusiasts in Slovakia, offering news articles, event calendars, a bazaar for used motorcycles, and an e-shop. The website is monetized primarily through advertising, as evidenced by multiple ad banners and the use of Revive Adserver and Facebook Pixel tracking. The site uses modern frontend technologies including Bootstrap and jQuery, and is hosted on Slovak-based servers consistent with its target audience. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content.

L

Lotame Solutions Site

lotame.com

70

Lotame Solutions Site is a professional B2B technology company specializing in data curation, data collaboration, addressable audiences, and identity solutions to empower marketers and advertisers with smarter advertising capabilities. The website presents a mature market position with clear business focus and key services tailored for data-driven marketing professionals. The technical infrastructure leverages modern web technologies including NitroPack for performance optimization, jQuery, Typekit fonts, and HubSpot for marketing and analytics, hosted on a WordPress CMS platform. The site is well-optimized for SEO, mobile responsiveness, and accessibility, reflecting a high level of digital maturity. Security posture is strong with HTTPS enforced and multiple security headers present, although there is a lack of publicly disclosed incident response or vulnerability disclosure policies. Overall, the website is trustworthy and professional, but the absence of WHOIS domain registration details introduces some uncertainty regarding domain transparency. Strategic recommendations include publishing security policies and improving domain registration transparency to enhance trust.

K

KANTINSLOT

pelhrimak.cz

61

KANTINSLOT operates as an online slot gambling platform or affiliate service primarily targeting the Indonesian market. The website promotes slot games with QRIS deposit payment options and emphasizes trust and fairplay. The business appears small-sized, founded in 2015, and leverages the Envato Market platform for its digital presence. The company maintains a moderate market position with customer reviews and social media presence as trust signals. Technically, the site uses modern JavaScript libraries, Google Tag Manager, Datadog for analytics, and Cookiebot for consent management. Hosting and DNS are managed via GMO Internet and AWS DNS servers. Security posture is moderate with HTTPS enabled and CSRF protections, but lacks DNSSEC and advanced security headers. Privacy compliance is basic with a privacy policy and cookie consent but no detailed GDPR compliance or incident response information. Overall, the site is functional but could improve security and privacy transparency.

W

Web Commerce GmbH

konradsblatt.de

47

Konradsblatt is a German regional Catholic weekly newspaper serving the Archdiocese of Freiburg. The website provides news, commentary, subscription services, and an online shop for related publications. The business is positioned as a trusted religious media outlet with a clear target audience in the Catholic community. The website is professionally designed, mobile-optimized, and uses Edith CMS as its content management system. It integrates Matomo analytics with some privacy considerations. Security posture is good with HTTPS and basic security headers, but lacks explicit privacy and cookie policies as well as incident response information. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.