Security Directory

Medizinische Hochschule Brandenburg Theodor Fontane (MHB) is a state-recognized non-profit university founded in 2014, specializing in medical, psychological, and dental education. It fills a regional gap in Brandenburg, Germany, offering practice-oriented and research-based courses with strong affiliations to multiple university hospitals. The website reflects a professional and accessible digital presence with comprehensive content targeting prospective students and healthcare professionals. Technically, the site uses Contao CMS, integrates Google Tag Manager and Analytics, and provides good mobile and accessibility features. Security posture is solid with HTTPS and secure forms, but lacks explicit security headers and published security policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is trustworthy and credible with room for improvement in privacy and security transparency.

J

Jeseníky - Sdružení cestovního ruchu

jesenikytourism.cz

44

Jeseníky - Sdružení cestovního ruchu is a regional non-profit tourism organization established in 1999, dedicated to promoting and developing the tourism potential of the Jeseníky region in the Czech Republic. The organization focuses on enhancing the quality of tourism services and increasing the region's attractiveness to both domestic and international visitors. Their website serves as an information hub and promotional platform, featuring voucher programs, news, projects, and member services. Technically, the website is built on the Noteo Engine CMS, utilizing modern web technologies such as HTML5, CSS, JavaScript, jQuery, and integrates multimedia content via YouTube and Vimeo APIs. The site is mobile-optimized and includes standard SEO and accessibility features, though some improvements are possible. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks advanced security headers and explicit incident response information, indicating room for enhancement in security posture. Overall, the website is professional, trustworthy, and compliant with GDPR, but the absence of WHOIS data limits domain registration trust assessment.

M

Město Vyšší Brod

mestovyssibrod.cz

46

Město Vyšší Brod operates an official municipal website serving the local community and visitors with comprehensive information about the town, its governance, public services, and local organizations. The site targets residents and stakeholders interested in municipal affairs and community projects. Technically, the website uses a custom CMS platform with modern JavaScript libraries such as jQuery, Bootstrap 5, and Swiper for UI components, ensuring a responsive and user-friendly experience. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, but lacks visible security headers and explicit privacy or terms of service pages, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and official contact details support its authenticity. Overall, the site presents a professional and trustworthy front for the local government but would benefit from enhanced transparency and security practices.

P

Plzeňský kraj

turisturaj.cz

52

The website www.turisturaj.cz serves as an official regional tourism portal for the Plzeňský kraj area in the Czech Republic. It provides comprehensive information on local attractions, cultural events, nature spots, gastronomy, and family activities, targeting tourists and visitors interested in exploring the region. The site is supported by regional government entities and tourism agencies, as evidenced by official logos and partnerships. The business model focuses on promoting regional tourism through curated content and event promotion. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies including Google Fonts, Google Analytics, and Facebook Pixel for tracking and marketing. The site is mobile-optimized with good design quality and clear navigation, though accessibility features are basic. Performance is moderate, with no major issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent banner with opt-in capabilities, indicating some attention to privacy compliance. However, no explicit privacy policy or terms of service pages were found, and security headers are absent, which could be improved. The WHOIS data for the domain is missing, which raises concerns about domain registration transparency and trustworthiness. No vulnerabilities or incident response information are provided. Overall, the website is a well-designed and content-rich tourism portal with moderate technical maturity and some gaps in security and privacy compliance. The lack of WHOIS data and explicit privacy documentation are notable weaknesses that should be addressed to enhance trust and compliance.

Š

Špacírek s dětmi

spacireksdetmi.cz

44

Špacírek s dětmi is a Czech family travel blog established in 2018, focusing on providing curated travel tips and outing guides for families with children. The website offers detailed articles, photo galleries, and trip maps primarily covering regions in the Czech Republic and some international destinations. The blog targets parents seeking ready-made travel ideas without the need to extensively plan or search. Technically, the site is built on WordPress with common plugins such as Yoast SEO and Photo Gallery, hosted by Wedos. It uses modern web technologies including jQuery, Google Fonts, and FontAwesome, and integrates Google Analytics for visitor tracking. Security posture is moderate with HTTPS implied but lacks visible security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is accessible, well-structured, and content-rich, but could improve in privacy and security practices.

H

HRADECKÁ KULTURNÍ A VZDĚLÁVACÍ SPOLEČNOST s.r.o.

adalbertinum.cz

53

HRADECKÁ KULTURNÍ A VZDĚLÁVACÍ SPOLEČNOST s.r.o. operates as a regional cultural and educational organization in Hradec Králové, Czech Republic. The website serves as a comprehensive platform for cultural events, educational courses, venue rentals, and ticket sales, targeting the general public including families and youth. Supported by local government entities, it holds a stable market position as a trusted regional service provider. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Analytics, ensuring a good user experience with mobile responsiveness and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data is a concern for domain transparency but does not detract from the professional presentation and trust signals on the site. Overall, the site is well-maintained, GDPR compliant, and provides valuable cultural services to its community.

B

bot.media, s. r. o.

covid.chat

60

The covid.chat website is a Slovak-language informational platform focused on providing accurate and up-to-date information about the coronavirus (COVID-19) pandemic. Operated by bot.media, s. r. o., it offers a chatbot for self-diagnostics, prevention tips, myth debunking, and structured data feeds for embedding on other websites. The platform targets the general Slovak public seeking reliable COVID-19 information and is positioned as a niche healthcare information service supported by a technology company. Technically, the site uses modern web technologies including Bootstrap and jQuery, integrates Google Analytics and Adsense for tracking and monetization, and implements cookie consent mechanisms aligned with GDPR requirements. The website is mobile-optimized with good design and navigation, providing a professional user experience. Security-wise, the site enforces HTTPS and has no visible vulnerabilities or exposed sensitive data, though it lacks some advanced security headers and formal security policies. WHOIS data is limited due to TLD restrictions and privacy protection but shows recent updates indicating active domain management. Overall, the site is trustworthy, compliant, and serves its informational purpose effectively.

B

Berufe der Kirche Freiburg

berufe-der-kirche-freiburg-shop.de

49

Berufe der Kirche Freiburg operates a specialized e-commerce platform focused on church professions and related educational and devotional materials. The website targets individuals involved in church work, youth education, and religious communities primarily in Germany. The business model combines product sales with informational content, positioning itself as a niche provider in the non-profit and educational sectors. The platform uses Shopware CMS and modern web technologies to deliver a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and explicit cookie consent mechanisms. Contact information is clearly provided, enhancing trust, though no direct email contacts or social media presence are visible. Overall, the site is professional and trustworthy with room for improvement in privacy compliance and security best practices.

F

Freiburger Orientierungsjahr

freiburger-orientierungsjahr.de

45

The Freiburger Orientierungsjahr website represents a small, regionally focused educational and faith-based orientation year program affiliated with the Archdiocese of Freiburg. It offers young adults a structured year for personal development, study and career orientation, and faith strengthening. The website is professionally designed with clear navigation and consistent branding, targeting primarily German-speaking youth seeking guidance after high school. Technically, the site uses Edith CMS, jQuery, Bootstrap, and Matomo analytics, hosted on professional infrastructure with HTTPS and cookie consent mechanisms in place. Security posture is solid with no critical vulnerabilities detected, though some security best practices like security headers and incident response policies could be improved. Overall, the site is trustworthy, GDPR compliant, and safe for general audiences.

Ž

Železničná spoločnosť Cargo Slovakia, a.s.

zscargo.sk

10

Železničná spoločnosť Cargo Slovakia, a.s. is the primary national freight rail carrier in Slovakia, providing comprehensive rail freight transport services, maintenance, repair, and leasing of rail vehicles. The company is well-established since 2005 and holds a strong market position with a large operational scale. The website reflects a professional corporate presence with clear service offerings and customer engagement channels including a customer center, newsletter, and social media integration. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA, ensuring responsive design and basic security measures. Security posture is adequate with HTTPS and CAPTCHA protections, though it lacks explicit security policies and incident response contacts. Privacy compliance is strong with GDPR-aligned privacy and cookie policies including consent mechanisms. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

C

CLECAT

clecat.org

9

CLECAT is a well-established European association representing forwarding, transport, logistics, and customs services. The organization focuses on advocacy, policy development, and industry events targeting European freight forwarders and logistics professionals. The website reflects a professional and consistent brand image, providing clear contact information and active social media channels. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates common libraries such as FontAwesome and Google Maps API. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and CSRF protections, but lacks advanced security headers and explicit public security policies. Privacy compliance is partial, with a cookie consent mechanism but no dedicated privacy policy page found. WHOIS data is unavailable or malformed, limiting domain registration trust insights, but the website's professionalism and transparency support legitimacy. Overall, the site scores well in business credibility and content quality, with moderate technical and security scores.

S

Slovak Business Agency

sbagency.sk

10

Slovak Business Agency is a Slovak governmental and non-profit organization dedicated to supporting entrepreneurs and business development within Slovakia. The agency offers advisory services, training workshops, and networking opportunities primarily targeting startups and SMEs. It maintains a strong partnership ecosystem with governmental bodies and business networks, positioning itself as a key player in the Slovak business support landscape. The website is bilingual (Slovak and English) and provides relevant content and updates for its audience. Technically, the website is built on Drupal 7 CMS with jQuery and integrates common analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is hosted on websupport.sk infrastructure with DNSSEC and HTTPS enabled, indicating a secure domain setup. The website performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site uses HTTPS and DNSSEC but lacks visible security headers and explicit security or incident response policies. Cookie policy is present but lacks an active consent mechanism, which is a GDPR compliance gap. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent and supports the legitimacy of the domain and organization. Overall, the website is professional, trustworthy, and serves its business purpose well, though improvements in privacy compliance and security best practices are recommended to enhance its security posture and regulatory adherence.

B

BIC Bratislava spol. s.r.o.

bic.sk

10

BIC Bratislava spol. s.r.o. is a Slovak company established in 1991 that supports innovation in companies and regions. The organization offers services including business support, innovation development, technology transfer, and international cooperation primarily through the Enterprise Europe Network. The website reflects a mature business with a clear focus on supporting SMEs and academic institutions in innovation and internationalization efforts. Technically, the site is built on Drupal 7 with common JavaScript libraries and integrates Google Analytics for user tracking. The site is mobile optimized and provides a good user experience with clear navigation and professional content. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response or security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professional, with strong business credibility and moderate technical sophistication.

R

Rabatkongen

rabatkongen.dk

10

Rabatkongen.dk is a well-established Danish discount code and coupon aggregation platform founded in 2013. It serves a large Danish audience by providing thousands of daily updated discount codes and promotional offers from a wide range of Danish and international webshops. The platform operates primarily through affiliate marketing, linking users to partner shops with active discount codes. Technically, the website is built on WordPress with modern SEO practices using Yoast SEO and integrates marketing tools such as Facebook Pixel and Sleeknote for newsletter subscriptions. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and some best practices but lacks DNSSEC and explicit security policies. Privacy compliance is adequate with published privacy and cookie policies, though no active cookie consent mechanism is detected. Overall, Rabatkongen.dk presents a trustworthy and professional e-commerce service with room for improvement in security and privacy transparency.

L

Lind & Risør A/S

lr-hus.dk

54

Lind & Risør A/S is a Danish architectural and construction firm specializing in architect-designed homes, new builds, and real estate sales. Established since 1980, the company targets private home buyers and property developers in Denmark, offering comprehensive services including exhibition houses and building plots. The website reflects a professional business with consistent branding and good content quality. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Cookiebot for privacy compliance. It integrates Google Tag Manager and uses common libraries like jQuery and Swiper.js. The site is mobile optimized and performs moderately well, with good SEO practices in place. From a security perspective, the site uses HTTPS and employs Cookiebot for consent management, but lacks advanced security headers and DNSSEC. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a clear cookie consent mechanism, though no explicit privacy policy or terms of service pages were found in the provided content. Overall, the website is trustworthy and professional, with a solid business foundation and adequate technical infrastructure. Strategic improvements in security headers, explicit privacy policies, and incident response information would enhance the security posture and compliance maturity.

B

Bioenergy Europe

europeanbioenergyday.eu

58

The European Bioenergy Days website is a professionally designed campaign platform powered by Bioenergy Europe, focusing on promoting sustainable bioenergy across EU Member States. It highlights national success stories and provides interactive visualizations to engage stakeholders and the public. The site leverages modern WordPress technologies including Elementor, Yoast SEO, and Slider Revolution, ensuring a good user experience and SEO optimization. The technical infrastructure is solid with HTTPS enforced and integration of Google Analytics for visitor insights. However, the site lacks explicit privacy and terms of service pages, and no direct contact information is provided, which slightly impacts its privacy compliance and business credibility scores. Security posture is generally good but could be improved by adding security headers and incident response information.

E

ENMON APP s.r.o.

enmon.app

55

ENMON APP s.r.o. operates the website enmon.app, providing a comprehensive suite of tools for energy consumption measurement, monitoring, and management. The company targets businesses and organizations primarily in Slovakia and across Europe, offering a unique concept with extensive supplier integrations and data analytics capabilities. The website reflects a professional B2B SaaS model focused on energy management solutions. Technically, the site is built on WordPress with modern SEO and analytics tools, including Yoast SEO and Google Tag Manager. The site is mobile-optimized and performs moderately well, with a consistent and professional design. Security-wise, the company demonstrates a strong posture by employing HTTPS and referencing ISO 27001 certification for data security. However, the site lacks publicly accessible privacy and cookie policies, as well as incident response contacts, which are areas for improvement. Overall, the domain registration aligns well with the business identity, supporting the legitimacy and trustworthiness of the site.

S

SAPI - Slovenská asociácia fotovoltického priemyslu a OZE

sapiconference.sk

42

SAPI - Slovenská asociácia fotovoltického priemyslu a OZE operates a professional website focused on organizing the annual SAPI Energy Conference and related events in Slovakia. The organization targets energy professionals and stakeholders interested in renewable energy and sustainable energy solutions. The website demonstrates a mature digital presence with a good technical stack including jQuery, bxSlider, and integration with Google Analytics and social media platforms. The content is well-structured, professionally presented, and includes testimonials and references that enhance trust and credibility. Security posture is adequate with HTTPS enforced and secure form handling, though improvements are recommended in security headers and incident response transparency. Privacy compliance is partially addressed with GDPR documentation but lacks cookie consent mechanisms. Overall, the website is trustworthy, well-maintained, and serves its business purpose effectively.

M

Medienförderung RLP GmbH

mf-rlp.de

46

Medienförderung RLP GmbH is a regional media funding agency based in Rheinland-Pfalz, Germany, operating as a subsidiary of the Medienanstalt Rheinland-Pfalz. Supported by the state government and major broadcasters such as SWR and ZDF, the organization aims to support creative and innovative media professionals in digital media sectors including audio-visual works, games, and online series. The website serves as an information and application portal for funding opportunities, providing clear guidance on application processes and showcasing funded projects. The target audience is media creators and producers within or connected to Rheinland-Pfalz. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Gutentor, leveraging Bootstrap 5 for responsive design. The site is hosted by SchlundTech, a reputable German hosting provider, and uses HTTPS with a good SSL configuration. The site is mobile-optimized and SEO-friendly, with structured data and Open Graph tags enhancing discoverability. However, some accessibility features are basic, and no cookie consent mechanism was detected, which is a GDPR compliance gap. From a security perspective, the site enforces HTTPS and uses secure forms for search and login. No security headers were detected in the provided data, and no explicit security or incident response policies are published. There are no visible vulnerabilities or exposed sensitive data. The absence of a cookie consent banner and security.txt or vulnerability disclosure policy are areas for improvement. Overall, the website is professional, trustworthy, and well-aligned with its public funding mission. The risk profile is low, but compliance with privacy regulations could be enhanced by implementing cookie consent and publishing security policies. Strategic recommendations include improving privacy compliance, adding security headers, and publishing incident response contacts to strengthen trust and security posture.

E

EASTLOG

eastlog.cz

51

EASTLOG is a well-established logistics and transport congress based in the Czech Republic, organized by ATOZ Group. It serves as a major industry event attracting hundreds of logistics professionals annually, offering conference programs, networking, and partner engagement. The website reflects a professional and consistent brand presence with a strong partner ecosystem. Technically, the site is built on WordPress with modern plugins and tracking technologies, providing a good user experience and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and GDPR compliance, though explicit security headers and incident response information are lacking. WHOIS data is privacy protected, which is typical for such event organizations. Overall, the site is trustworthy and well-maintained, supporting the business's market position effectively.

C

Cummins Czech Republic s.r.o.

fleetguard.cz

44

Fleetguard.cz is the official Czech and Slovak distributor of Fleetguard filtration products, a subsidiary of Cummins Inc., a global leader in diesel engine manufacturing. The website presents a professional and focused business offering a wide range of filtration solutions and cooling fluids for industrial, agricultural, and transportation machinery. The site targets industrial and commercial customers in the Czech Republic and Slovakia, emphasizing product quality and brand association with Cummins. Technically, the website is built on Joomla CMS with standard JavaScript libraries and custom modules, providing a moderate performance and basic mobile optimization. Security posture is moderate with HTTPS implied but lacking advanced security headers and comprehensive privacy policies. The cookie consent mechanism is present but limited to technical cookies only. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security compliance measures.

W

WOMEN FOR WOMEN

obedyprodeti.cz

66

WOMEN FOR WOMEN is a Czech non-profit organization focused on providing school meals to children from low-income families through its 'Obědy pro děti' project. The website is professionally designed using WordPress and integrates multiple marketing and analytics tools such as Google Analytics, HubSpot, and Facebook Pixel. The technical infrastructure is modern and secure, with HTTPS enforced and appropriate cookie consent mechanisms in place. Security posture is solid with no critical vulnerabilities detected, although explicit security policies and incident response information are not publicly available. Overall, the website presents a trustworthy and compliant digital presence suitable for its charitable mission.

S

Sokol.Cz Team

sokol.cz

41

Sokol.Cz is an independent, non-profit information portal dedicated to the activities of the Czech Sokol community, providing event listings, news articles, and multimedia content related to sports and cultural events. The website serves as a community hub for members and supporters of the Czech Sokol organization, offering a platform for sharing information about local units, events, and educational resources. Technically, the site uses a Bootstrap-based responsive design with jQuery and integrates Google Custom Search and Facebook SDK for enhanced user interaction. While HTTPS is enforced, the site lacks advanced security headers and a cookie consent mechanism, which are areas for improvement. The absence of WHOIS data limits domain trust assessment, but the site's long operational history and consistent branding support its legitimacy. Overall, the site is well-positioned as a trusted community resource with good content quality and user experience.

A

as4u.cz, s.r.o.

cz-mesta.eu

60

The website www.cz-mesta.eu serves as an online encyclopedia dedicated to nearly 1400 towns and settlements in the Czech Republic, focusing on their urbanistic and historical development. It is a niche cultural and historical resource published in collaboration with the Sdružení historických sídel Čech, Moravy a Slezska and managed by as4u.cz, s.r.o. The site offers rich content including maps, photographs, and detailed descriptions, targeting general audiences interested in Czech urban history. The business model is informational, providing free access under a Creative Commons license, positioning itself as a trusted cultural reference within its domain. Technically, the site uses a custom CMS named Public4u, with frontend technologies including jQuery, jQuery UI, Leaflet.js for maps, and Swiper.js for sliders. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. However, the site lacks explicit privacy and cookie policies, which is a compliance gap. From a security perspective, the site uses HTTPS but does not expose security headers or incident response information. No vulnerabilities or sensitive data exposures were found in the content. The domain WHOIS data is privacy protected as per EURid policy, which is reasonable for this type of informational site. Overall, the security posture is moderate but could be improved by adding security headers, privacy notices, and vulnerability disclosure mechanisms. The overall risk assessment is low, with the main recommendations focusing on enhancing privacy compliance and security best practices to improve trust and regulatory adherence. The site is professionally designed and trustworthy for its intended audience, with no signs of malicious or adult content.

The website www.mladifotografujipamatky.cz is a platform dedicated to a youth photography contest focused on capturing historical monuments, organized by the Czech non-profit association Sdružení historických sídel Čech, Moravy a Slezska, z.s. It serves a niche cultural heritage audience primarily within the Czech Republic, providing contest information, galleries, and event updates. The site is well-branded and consistent with its mission, targeting young photographers and cultural enthusiasts. Technically, the site uses the Public4u CMS platform, jQuery libraries, and integrates Mapy.cz APIs for mapping features. The website is moderately optimized for performance and mobile devices, with a clear navigation structure and good content quality. However, accessibility and SEO optimizations are basic and could be improved. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, indicating gaps in compliance and security best practices. No analytics or tracking scripts were detected, suggesting minimal user tracking. WHOIS data is unavailable, likely due to registry privacy policies, which limits domain trust analysis but the site’s content and contact information support legitimacy. Overall, the website is functional and professional for its purpose but would benefit from enhanced security measures, privacy compliance, and technical improvements to increase trust and user experience.

The website www.historickemestoroku.cz represents the Sdružení historických sídel Čech, Moravy a Slezska, a non-profit association dedicated to promoting historic towns in the Czech Republic through competitions and cultural heritage programs. The site serves as an information hub for the 'Historic Town of the Year' competition, providing news, event details, and partner information. The target audience includes municipalities, cultural heritage professionals, and the general public interested in historic preservation. Technically, the website is built on the Public4u CMS platform and uses legacy but stable technologies such as jQuery and Mapy.cz API for mapping. The site is mobile-optimized with a moderate performance profile and basic accessibility features. SEO is basic but functional, with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces transparency and trustworthiness somewhat, but the presence of official registration details and partner logos supports legitimacy. Overall, the website is a well-maintained cultural heritage portal with good content quality and business credibility but could improve in privacy compliance and security best practices. The domain WHOIS data absence is a notable concern that should be addressed to enhance trust.

The website www.soutezpamatkaroku.cz represents a non-profit organization, Sdružení historických sídel Čech, Moravy a Slezska, z.s., focused on promoting cultural heritage preservation through the 'Památka roku' competition. It serves a niche audience including historians, municipalities, and cultural heritage professionals in the Czech Republic. The site provides competition information, news updates, and resources for journalists, positioning itself as a reputable entity in the cultural heritage sector. Technically, the website uses a proprietary CMS called Public4u, along with jQuery and Mapy.cz APIs for interactive maps. The site is mobile optimized with good navigation and content structure, though it relies on somewhat dated JavaScript libraries. Performance is moderate, and SEO practices are adequately implemented. However, there is room for improvement in accessibility and modern security headers. From a security perspective, the site enforces HTTPS and does not expose sensitive data in its HTML. However, it lacks visible security headers and privacy/cookie policies, which are important for GDPR compliance and user trust. The absence of WHOIS data for the domain is a notable concern, reducing the ability to verify domain legitimacy fully. No signs of WAF or blocking mechanisms were detected, and the site appears safe with no adult or questionable content. Overall, the website is a credible and professional platform for its intended purpose but would benefit from enhanced privacy compliance, improved security headers, and verification of domain registration details to strengthen trust and security posture.

The website www.ehd.cz serves as the official platform for the European Heritage Days (Dny evropského dědictví) in the Czech Republic. It provides event listings, heritage site registrations, and promotes a mobile application to facilitate user engagement. The site targets a general audience interested in cultural heritage and related events, positioning itself as a niche cultural event promoter within the government or non-profit sector. The business appears to be operated by as4u.cz, s.r.o., a small Czech company specializing in digital solutions. Technically, the website employs a CMS named Public4u and uses common JavaScript libraries such as jQuery and Leaflet.js for interactive maps. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation and relevant content. However, there is room for improvement in accessibility and SEO optimization. From a security perspective, the site lacks visible security headers and privacy compliance mechanisms such as cookie consent banners or detailed privacy policies. The absence of WHOIS data for the domain reduces trustworthiness, although the website content and branding appear professional and legitimate. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, the website is functional and serves its cultural informational purpose well but should enhance its security posture and privacy compliance to improve trust and meet regulatory requirements.

E

Ekoškola

ekoskola.cz

60

Ekoškola is a well-established international educational program founded in 2005, focused on motivating children and teachers towards sustainable living and environmental stewardship. It holds a strong market position in the Czech Republic as the largest educational program of its kind, offering certification paths, educational projects like K9 HERO, and campaigns promoting climate awareness. The program is coordinated nationally by Sdružení TEREZA and internationally linked to Eco-Schools and the Foundation for Environmental Education. Technically, the website is built on WordPress with modern technologies including Google Analytics, Google Tag Manager, and reCAPTCHA for security. The site demonstrates good performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS, secure forms, and cookie consent mechanisms, though it could improve by adding explicit security headers and incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR, providing a safe and informative user experience.

H

Hračkobraní – Festival hračky z přírodního materiálu

hrackobrani.cz

37

The website hrackobrani.cz represents a niche festival focused on toys made from natural materials, held at a castle in Kamenice nad Lipou, Czech Republic. It targets families and visitors interested in traditional and natural toys, organizing an annual event with ticket sales facilitated through an external platform (GoOut). The site is built on WordPress with common JavaScript libraries and plugins, providing a moderate level of technical sophistication but lacking advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and policies. The absence of WHOIS data and contact information reduces trust and business credibility. Overall, the site is functional and content-rich for its purpose but requires improvements in privacy compliance, security best practices, and transparency to enhance trustworthiness and user confidence.

N

National Heritage Institute

vltava2025.cz

45

The website vltava2025.cz is an official cultural project site managed by the Czech National Heritage Institute, commemorating the 150th anniversary of Bedřich Smetana’s symphonic poem Vltava. It serves as a platform to promote exhibitions, events, and educational content related to the Vltava River as a national symbol. The site is well-positioned within the government and cultural heritage sector, supported by reputable partners and media sponsors. The target audience includes the general public interested in Czech culture and heritage. Technically, the website employs modern web technologies including Google Tag Manager, jQuery, Leaflet.js for mapping, and integrates external APIs such as Mapy.cz. The site is hosted by Webglobe, with a clean and professional design optimized for mobile and accessibility. SEO and content quality are excellent, with clear navigation and rich multimedia content. From a security perspective, the site uses HTTPS and cookie consent mechanisms with granular user control. While some security headers are not explicitly detected, no critical vulnerabilities or exposed sensitive data were found. Privacy compliance is strong, with clear privacy and cookie policies linked from the site. No incident response or security policy pages were found. Overall, the website presents a low-risk profile with strong business credibility and compliance. Recommendations include enhancing security headers and publishing a formal security policy. The domain is newly registered but consistent with the project timeline and legitimate in nature.

S

Sokolská župa plukovníka Švece

zupaplksvece.cz

41

Sokolská župa plukovníka Švece is a small regional non-profit organization based in the Czech Republic focused on promoting sports and healthy lifestyles within the local community. The website serves as an information hub for events, contacts, and activities related to the Sokol movement, a traditional Czech sports and cultural organization. The site targets members and the general public interested in sports and health activities, providing event announcements and contact details. Technically, the website is built on WordPress using the Tempera theme, with common JavaScript libraries such as jQuery and tracking tools including Google Analytics and Hotjar. Hosting and domain registration are managed by Wedos, a Czech provider. The site is mobile optimized and has a moderate performance profile but uses an outdated WordPress version, which poses security risks. From a security perspective, the site enforces HTTPS but lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. Tracking scripts are present without visible consent mechanisms, indicating privacy compliance gaps. No incident response or security policy information is provided. The domain registration data is consistent and legitimate, supporting trust in the website's authenticity. Overall, the website is functional and serves its community purpose well but requires improvements in security, privacy compliance, and platform updates to enhance trustworthiness and protect user data effectively.

K

Kochava

aimplatform.io

55

Kochava operates a sophisticated marketing analytics platform specializing in next-generation Marketing Mix Modeling (MMM) through its AIM product. The company targets marketers and user acquisition professionals, particularly in the gaming industry, offering privacy-first, machine learning-driven insights to optimize marketing spend and growth strategies. The website demonstrates a mature digital presence with professional design, comprehensive privacy compliance, and advanced technical infrastructure leveraging WordPress, Google Analytics, Matomo, and other modern tools. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies could be enhanced. WHOIS data is unavailable, which slightly impacts domain trust but the overall brand and content quality indicate a legitimate enterprise. Strategic recommendations include improving security transparency and WHOIS data availability to bolster trust.

G

GC Rieber Minerals

gcrieber-minerals.no

58

GC Rieber Minerals is a Norwegian-based company specializing in minerals and salt solutions serving diverse markets such as road maintenance, fishery, aquaculture, industrial applications, food production, and agriculture. The company emphasizes sustainability and circular economy principles, owning prominent brands like Norsal and Stradasalt. Their website reflects a mature digital presence with comprehensive content, multimedia integration, and clear navigation. Technically, the site is built on WordPress with modern plugins and SEO tools, offering good performance and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS registration data is a concern but does not detract significantly from the overall legitimacy given the professional site and external references. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and verifying domain registration transparency.

M

Machineryline Česko

machineryline.cz

59

Machineryline Česko operates as a comprehensive online marketplace specializing in construction machinery, industrial equipment, mining technology, and spare parts primarily serving the Czech Republic. The platform boasts a large inventory with over 341,000 listings and has been active since 2014, supported by its parent company Linemedia and affiliated projects such as Autoline and Agroline. The website targets businesses and individuals in the construction and industrial sectors, offering a user-friendly interface with extensive categorization and search capabilities. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Facebook Pixel for tracking and marketing purposes. It uses lazy loading for images and asynchronous script loading to optimize performance. The site is mobile-optimized and SEO-friendly with structured data (JSON-LD) for enhanced search engine visibility. However, it lacks a visible cookie consent mechanism and explicit security or incident response policies. From a security perspective, the site enforces HTTPS with a good SSL configuration and includes basic security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but the absence of cookie consent and incident response contact details are notable gaps. Overall, Machineryline.cz presents a professional and trustworthy platform with strong business credibility and technical implementation. Strategic improvements in privacy compliance and security transparency would further enhance its risk posture and user trust.

C

CK ATIS a.s.

atis.cz

63

CK ATIS a.s. is a well-established travel agency based in the Czech Republic, specializing in recreational vacation packages across Central European countries including Czech Republic, Slovakia, Poland, Hungary, Austria, Germany, Slovenia, Italy, and Croatia. With over 35 years of experience, the company offers a wide range of themed holiday catalogues and destination-specific offers targeting families and leisure travelers. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization. Technically, the site employs modern web technologies such as AMP, jQuery, Bootstrap, and mapping libraries to enhance user experience. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though additional security headers and policies could improve resilience. Privacy compliance is well addressed with accessible privacy and cookie policies. The absence of public WHOIS data limits domain trust analysis, but the website's content and contact information support its legitimacy. Overall, CK ATIS a.s. presents a credible and user-friendly platform for travel services in its region.

D

Digitálna Agentúra +421 Studio

plus421.com

51

Digitálna Agentúra +421 Studio is a Slovak digital agency specializing in branding, marketing, web design, software development, and real estate marketing. The company serves both small and large businesses aiming to build successful brands for the digital age. Their website showcases a professional portfolio with notable clients and emphasizes tailored solutions for business growth. Technically, the site is built on WordPress with modern plugins and tracking tools, ensuring good SEO and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and incident response policies are absent. The domain WHOIS data is missing, which slightly impacts trust but the active, professional website content suggests legitimate operations. Overall, the site is well-designed, compliant with GDPR, and provides clear contact channels.

I

IT Solar s. r. o.

it-solar.sk

42

IT Solar s. r. o. is a Slovakian company specializing in photovoltaic solar energy solutions for both households and businesses. The company positions itself as a reliable provider offering modern solar panel installations and tailored energy solutions aimed at reducing electricity costs and increasing energy independence. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting local customers in Slovakia. The business model focuses on direct sales and installation services for solar energy systems, supported by a client base of over 384 satisfied customers. Technically, the website is built on WordPress using Elementor for page building and Yoast SEO for search engine optimization. It employs modern web technologies including HTTPS, Google Tag Manager for analytics, and a cookie consent mechanism compliant with GDPR requirements. The site demonstrates good mobile optimization and basic accessibility features, although some security headers are not explicitly detected. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent banners to comply with privacy regulations. However, it lacks explicit security policies, incident response contacts, and privacy or terms of service pages, which are important for comprehensive compliance and user trust. No vulnerabilities or suspicious activities were detected in the content or scripts. The WHOIS data is consistent with the business claims, showing transparency and legitimacy. Overall, IT Solar's website is a well-structured and professional platform that effectively communicates its services and business identity. To enhance security posture and compliance, the company should consider publishing privacy and terms of service policies, adding incident response information, and improving security headers. These steps will strengthen trust and align with best practices in digital security and privacy.

T

The Common Vision

spolocnavizia.sk

39

The Common Vision is a Slovak non-profit association dedicated to improving occupational safety and health through professional collaboration, educational materials, conferences, and legislative activities. The website reflects a well-established organization with a clear focus on safety professionals and employers. Technically, the site is built on WordPress using Elementor and several plugins, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks some security headers and privacy compliance features. Overall, the site is professional and trustworthy but would benefit from enhanced privacy policies and clearer contact information.

O

Online - Olin s.r.o.

ol-in.cz

45

Online - Olin s.r.o. operates the website www.ol-in.cz, a Czech Republic based business specializing in construction materials sales, equipment rental, container services, and freight transportation. The company targets both businesses and private individuals involved in construction and related sectors, positioning itself as a regional supplier with a comprehensive service offering including earthworks and building services. The website is professionally designed, mobile optimized, and uses a modern WordPress and WooCommerce infrastructure, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no incident response contacts are visible. The absence of WHOIS data due to privacy protection slightly reduces transparency but does not detract significantly from the site's legitimacy. Overall, the site is trustworthy and functional with room for improvement in privacy policy visibility and security header implementation.

VortexHealing® Divine Energy Healing is a small, niche holistic healing and spiritual awakening organization founded in 2000. The website provides comprehensive information about their healing system, certified teachers, training programs, testimonials, and resources. Their target audience includes individuals interested in energy healing and spiritual growth. The business model focuses on educational services and community support. Technically, the site uses common web technologies such as jQuery, Bootstrap, and the Yii framework, hosted by Bluehost Inc. The site is mobile responsive with good navigation and content quality. Security posture is moderate with use of CSRF tokens but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. Social media presence is limited to Facebook and YouTube. Overall, the domain registration is consistent with the business history, enhancing credibility.

T

The International Center for Reiki Training

reiki.org

64

The International Center for Reiki Training (ICRT) operates the website reiki.org, a well-established platform dedicated to Reiki education, training, and community engagement. The organization offers a variety of services including online and in-person Reiki classes, licensed Reiki master teacher programs, a membership association, and a subscription-based Reiki News Magazine. The website targets individuals interested in Reiki healing, practitioners, and students, positioning itself as a leading resource in the Reiki community since 1995. The business model combines educational services with e-commerce offerings for related products and training materials. Technically, the website is built on the Drupal CMS platform, utilizing modern web technologies such as jQuery, Google Tag Manager, and Google Analytics. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Accessibility features are basic but present. Security-wise, the site uses HTTPS and employs standard tracking tools with IP anonymization. However, it lacks explicit security headers and a formal incident response or vulnerability disclosure page, which are recommended for enhanced security posture. Overall, the website is professional, trustworthy, and content-rich, with clear contact information and a consistent brand presence. The absence of WHOIS data due to privacy protection does not detract from its legitimacy, given the organization's long-standing history and transparent operations. Strategic improvements in security headers, cookie consent mechanisms, and incident response disclosures would further strengthen the site's security and compliance stance.

I

Institute of Core Energetics

coreenergetics.org

57

The Institute of Core Energetics is a non-profit organization focused on providing education and training in Core Energetics, a body-oriented psychotherapy and spiritual development methodology. The website positions the Institute as a dedicated community for personal transformation, offering various programs, workshops, and an alumni network. The organization targets individuals seeking deeper self-awareness and healing through experiential learning and practitioner certification. Technically, the website is built on WordPress with WooCommerce and uses modern tools such as Google Analytics, Facebook Pixel, and reCAPTCHA to enhance user experience and security. The site is well-structured, mobile-optimized, and professionally designed, reflecting a mature digital presence. Security posture is good with HTTPS and secure payment processing, though some security headers could be improved. The absence of WHOIS data is a minor concern but does not detract significantly from the overall legitimacy, supported by clear contact information, legal policies, and trust signals such as 501(c)(3) registration and testimonials. Overall, the website presents a trustworthy and professional front for the Institute's mission and services.

T

The International Pathwork Foundation

pathwork.org

42

The International Pathwork Foundation is a well-established non-profit organization dedicated to providing spiritual teachings and community resources centered around the Pathwork Guide Lectures. The website serves as a comprehensive portal offering access to lectures, events, workshops, books, and audio recordings, targeting individuals seeking personal transformation and spiritual growth. The foundation has a global presence with multilingual lecture offerings and a membership model supported by donations and an online store. Technically, the website is built on WordPress using the Divi theme and integrates tools such as Gravity Forms and Google Tag Manager. The site demonstrates good SEO practices and mobile optimization, though accessibility features are basic. Hosting details are not explicit but the domain uses stable name servers and is secured with HTTPS. From a security perspective, the site employs HTTPS and domain transfer protection but lacks DNSSEC and explicit security headers. There is no visible security or incident response policy published, and no cookie consent mechanism is present, indicating room for improvement in privacy compliance and security posture. Overall, the website is professional, content-rich, and trustworthy with a moderate security posture. Strategic enhancements in security headers, privacy compliance, and incident response transparency would strengthen its risk profile and user trust.

C

cyber_Folks S.A.

mjanpawel2.pl

38

The Muzeum Jana Pawła II Wielkiego w Krakowie is a small, non-profit cultural institution dedicated to preserving and promoting the legacy of Pope John Paul II. Founded in 2020, it offers modern exhibitions, educational programs, and VR cinema experiences targeting a broad audience including tourists, educational groups, and the religious community. The website is professionally designed using WordPress with a modern tech stack and good mobile optimization. Privacy and cookie policies are implemented with consent mechanisms, reflecting GDPR compliance. Security posture is good with HTTPS and security headers, though DNSSEC is not enabled and no explicit security policy or incident response information is published. Overall, the website is trustworthy and well-maintained, with active social media presence and clear business focus.

S

Sanktuarium św. Jana Pawła II Wielkiego w Krakowie

sjanpawel2.pl

37

The website represents the Sanctuary of Saint John Paul II in Kraków, Poland, serving as a spiritual and cultural hub for pilgrims and visitors. It provides comprehensive information about the sanctuary's history, religious services, chapels, relics, and community events. The site targets religious visitors and the local community, positioning itself as an important non-profit religious institution with a medium-sized digital presence. Technically, the site is built on WordPress with a modern tech stack including WooCommerce and various JavaScript libraries, hosted by a reputable Polish registrar. The website is well-structured, mobile-optimized, and includes privacy and cookie policies with consent mechanisms, reflecting good digital maturity. Security posture is solid with HTTPS and some security best practices, though improvements like DNSSEC and enhanced security headers are recommended. Overall, the site is trustworthy, professional, and compliant with GDPR, with moderate user tracking via Google Analytics. No critical security issues or adult content were detected, making it safe for general audiences.

C

Centrum Jana Pawła II “Nie lękajcie się”

cjanpawel2.pl

37

Centrum Jana Pawła II “Nie lękajcie się” is a well-established religious and cultural non-profit organization based in Kraków, Poland, dedicated to preserving and promoting the legacy of Pope John Paul II. The website serves as a comprehensive portal for pilgrims, visitors, and the local community, offering information about the sanctuary, museum, pilgrim accommodations, conferences, and educational programs. The organization holds a respected position within the religious and cultural sector in Poland, supported by a consistent brand presence and active social media engagement. Technically, the website is built on WordPress with a modern technology stack including popular plugins such as LayerSlider, Slider Revolution, WooCommerce, and DataTables. The site demonstrates good mobile optimization, accessibility features, and SEO practices, although performance is moderate and could benefit from further optimization. Hosting is provided by cyber_Folks S.A., a reputable provider. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks DNSSEC and some important security headers, which are recommended to enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and cookie notice, aligning with GDPR requirements. Overall, the website is professional, trustworthy, and serves its audience effectively. Strategic improvements in security headers and DNSSEC implementation would further strengthen its security posture and trustworthiness.

T

TalentLyft

talentlyft.com

61

TalentLyft operates as a comprehensive recruitment marketing and applicant tracking system platform, designed to streamline talent acquisition processes for organizations. The company targets HR professionals and recruiters, offering integrated solutions such as applicant tracking, employer branding, talent sourcing, and outreach. Their market position is that of an established SaaS provider in the recruitment technology sector, emphasizing compliance with GDPR and EEOC/OFCCP regulations. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to its audience. Technically, the website is built on WordPress with modern SEO and analytics tools including Yoast SEO, Google Tag Manager, and HubSpot integrations. The platform demonstrates good mobile optimization, accessibility, and performance. Security measures are robust, featuring HTTPS, security headers, and a cookie consent mechanism, although there is room for improvement in incident response transparency and vulnerability disclosure. From a security perspective, the site maintains a strong posture with no evident vulnerabilities or exposed sensitive data. Compliance with privacy regulations is well documented, and user tracking is moderate with appropriate consent mechanisms. However, the absence of WHOIS domain registration data introduces some uncertainty regarding domain legitimacy and age, which should be further investigated. Overall, TalentLyft presents a professional and trustworthy online presence with solid technical and security foundations. Strategic recommendations include enhancing transparency around incident response, publishing vulnerability disclosure policies, and providing direct company contact information to bolster trust and compliance.

The website www.mitchi.cz represents a small Czech-based business operated by Jaroslav Mitchi Mičan, specializing in WordPress development and web design services. The site serves as a portfolio and informational platform showcasing past projects and services offered. The business targets a general audience seeking professional website creation and WordPress expertise within the Czech Republic. The market position is that of a small local service provider with a consistent and professional online presence. Technically, the website is built on WordPress and utilizes common web technologies such as jQuery, Google Tag Manager, and a cookie consent solution from CookieYes. The site demonstrates basic to moderate performance and SEO optimization, with a functional cookie consent mechanism that aligns with GDPR requirements. Mobile optimization and accessibility are present but could be improved for a more modern user experience. From a security perspective, the site uses HTTPS (implied by URLs) but lacks visible security headers in the HTML content. No sensitive data exposure or vulnerable libraries were detected in the provided content. The cookie consent implementation is a positive indicator of privacy awareness, though the absence of explicit privacy policy and terms of service pages is a compliance gap. The WHOIS data is missing, which raises concerns about domain registration transparency and trustworthiness. Overall, the website is functional and professional but would benefit from enhanced security practices, clearer privacy documentation, and verified domain registration information to improve trust and compliance. The risk level is moderate with no critical vulnerabilities detected but with room for improvement in governance and technical security controls.