Security Directory

R

Rychlé vyklízecí práce Praha. Stěhování 24/365

vyklizeni-praha-hutla.cz

54

The website vyklizeni-praha-hutla.cz represents a small local business specializing in property clearing, demolition, moving, and ecological waste disposal services primarily in Prague and surrounding areas. The company offers a broad range of services including clearing apartments, houses, garages, firms, and handling sensitive tasks such as clearing estates after death. The business positions itself as a professional, reliable, and environmentally conscious service provider with clear contact details and customer reviews enhancing trust. Technically, the website uses a straightforward technology stack including jQuery, Facebook SDK, and Google Fonts, with custom scripts for form validation and lightbox functionality. The site is mobile-optimized with good SEO practices and a cookie consent mechanism compliant with GDPR. However, no advanced CMS or hosting provider details are evident, and performance is moderate. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and published security policies. The contact form includes client-side validation and GDPR consent but could benefit from server-side validation and anti-spam measures. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the website content and contact information appear consistent and professional. Overall, the website is functional, user-friendly, and compliant with basic privacy regulations but would benefit from enhanced security practices and transparency regarding domain registration. The risk level is moderate with recommendations to improve security headers, validate WHOIS data, and publish security policies.

F

Flora Online

flora-online.cz

49

Flora Online is an established Czech Republic-based e-commerce platform specializing in flower delivery services across the Czech Republic and Slovakia. The website offers a wide range of fresh flower bouquets, gift sets, and related products with same-day delivery options, targeting general consumers seeking convenient online flower shopping. The business has been operating since at least 2013 and provides multiple secure payment methods including PayPal, Apple Pay, and Google Pay. The site is professionally designed with consistent branding and good content quality, supporting multiple languages and currencies.

F

Rozvoz květin online ❤️ po Praze a okolí do 60 minut | Flora Květiny Praha

flora-kvetiny.cz

50

The website www.flora-kvetiny.cz is an e-commerce platform specializing in fast flower delivery services in Prague and its surroundings. It offers a wide range of bouquets and related gift items with delivery promised within 60 minutes, operating 7 days a week. The site targets consumers seeking convenient and quick flower delivery with multiple payment options including PayPal, card payments, and cash on delivery. The business appears to be a small local player with a consistent brand presence and good content quality. Technically, the site uses a modern tech stack including jQuery, Google Analytics, Facebook SDK, and is likely built on the USHOP platform. Mobile optimization and SEO are well implemented, though accessibility could be improved. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. WHOIS data is unavailable, which reduces domain trustworthiness. Overall, the site is professional and functional but would benefit from enhanced transparency and security disclosures.

9

90Phut TV

freethework.com

55

90Phut TV is a Vietnamese media company specializing in live streaming of football and other sports events, along with providing sports news, match schedules, results, and betting odds. Founded in 2020 and headquartered in Hanoi, Vietnam, it targets Vietnamese-speaking sports fans seeking free, high-quality online sports content. The website operates on WordPress CMS and integrates various modern web technologies including Google Analytics and Facebook SDK for analytics and social media integration. Advertising revenue, including betting affiliate programs, appears to be a key business model component. The company maintains a consistent brand presence across multiple social media platforms and provides clear contact information, enhancing business credibility. Technically, the website demonstrates moderate performance with good mobile optimization and SEO practices. However, some outdated JavaScript libraries and missing security headers indicate areas for improvement. The site uses HTTPS with good SSL configuration, but lacks explicit privacy and cookie policies, which impacts privacy compliance. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Security posture is moderate with HTTPS enabled and no exposed sensitive data, but the absence of security policies and vulnerability disclosures suggests limited formal security governance. The WHOIS data aligns well with the website's claims, showing transparency and legitimacy. Overall, the site is a functional and credible regional sports streaming platform with room for enhanced security and privacy compliance. Strategic recommendations include implementing comprehensive privacy and cookie policies, updating outdated libraries, adding security headers, and publishing incident response and vulnerability disclosure information to strengthen trust and compliance.

H

H-Optimal

h-optimal.cz

53

H-Optimal is a small Czech digital agency specializing in web development, online marketing, graphic design, and photography services. Founded in 2014, the company emphasizes personalized client service and delivers custom web solutions including e-shops and CMS-based websites. Their portfolio showcases diverse projects for local businesses and organizations, supported by client testimonials that highlight their professionalism and client satisfaction. Technically, the website employs common JavaScript libraries and a custom CMS, hosted via WEDOS, and integrates Google Analytics and Facebook SDK for marketing and tracking purposes. Mobile optimization and SEO are adequately addressed, though accessibility is basic. Security posture is moderate, with no detected security headers and no explicit anti-spam measures on contact forms. Privacy and cookie policies are absent, indicating compliance gaps with GDPR requirements. Contact information is detailed and transparent, including named individuals with roles and direct contact details. Overall, the website presents a professional and trustworthy image but would benefit from enhanced security and privacy compliance measures.

F

Flexmail

flexmail.eu

74

Flexmail is a well-established Belgian email marketing platform founded in 2003, offering a comprehensive SaaS solution for campaign management, marketing automation, and CRM segmentation. The website presents a professional and modern design built on React and Gatsby, integrating multiple marketing and analytics tools such as Google Analytics, Hotjar, and Facebook Pixel. Security posture is strong with strict Content-Security-Policy headers and HTTPS enforcement. However, the absence of visible privacy and cookie policies, as well as contact information, reduces privacy compliance and business credibility scores. Overall, the site is accessible, trustworthy, and technically sound but would benefit from enhanced transparency and compliance documentation.

F

FipoJobs.com

fipojobs.com

48

FipoJobs.com operates as a global job search platform offering job listings across multiple continents including Europe, North America, South America, Africa, Asia, and the Pacific. The website aggregates job offers and provides a search engine for job seekers worldwide. It also offers SEO services related to job postings. The platform targets a broad audience of job seekers and recruiters, positioning itself as a comprehensive job search resource with a presence since 2015. Technically, the site uses standard web technologies including jQuery, Google Adsense for advertising, and Facebook SDK for social media integration. The site is mobile-optimized with a clear navigation structure and good SEO practices. Security-wise, the site enforces HTTPS but lacks important security headers and formal privacy or cookie policies, which are compliance gaps. The WHOIS data is missing or unavailable, raising concerns about domain legitimacy and trustworthiness. Overall, the site is functional and professional but would benefit from improved security practices and compliance documentation.

M

Mongolian Express Co., Ltd.

monex.mn

44

Mongolian Express Co., Ltd. is a well-established transportation and logistics company based in Mongolia, founded in 1999. The company offers a comprehensive range of freight forwarding and logistics services including rail, air, road, transit, container transport, terminal and warehouse services, international postal cargo, customs clearance, project cargo, and export transportation. It holds the distinction of being the first Mongolian freight forwarding company to implement the ISO 9001:2015 quality management standard, reflecting its commitment to service quality and operational excellence. The website is professionally designed, mobile-optimized, and provides clear contact information and social media presence, supporting its market position as a leading logistics provider in Mongolia.

E

EXIsport

exisport.cz

52

EXIsport is a large Czech-based e-commerce retailer specializing in sportswear, footwear, and accessories. The website offers a broad product catalog with over 650,000 items, free shipping above a certain threshold, and services such as ski binding mounting. The company targets sports enthusiasts and general consumers within the Czech Republic and operates multiple country-specific domains, indicating a strong regional presence. Technically, the website uses modern web technologies including Vue.js, PrestaShop CMS, and integrates popular marketing and analytics tools such as Google Tag Manager and Facebook SDK. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though the absence of HTTP security headers suggests room for improvement. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not negate the site's legitimacy given its professional appearance and active marketing. Overall, EXIsport presents a trustworthy and mature e-commerce platform with a solid technical foundation and good privacy compliance.

D

DELIKATESO - Delikateso.sk

delikateso.sk

46

Delikateso.sk is an e-commerce website focused on selling delicatessen products primarily targeting customers in Slovakia. The site offers online shopping services for food-related products, positioning itself within the retail e-commerce sector. The website demonstrates a moderate level of digital maturity with the use of modern JavaScript libraries and third-party analytics tools such as Google Analytics, Hotjar, and Facebook SDK. However, it lacks comprehensive privacy and security documentation, including a privacy policy and terms of service, which are critical for compliance and user trust. Security monitoring is partially addressed through Sentry integration, but additional security headers and policies are absent. Overall, the website is accessible without WAF or blocking mechanisms, but the absence of clear contact information and privacy documentation reduces its credibility and compliance posture.

K

Korálkárna Rooya

rooya.cz

57

Korálkárna Rooya is a Czech Republic based e-commerce retailer specializing in materials for beadwork, wirework, and jewelry crafting. Established since 2005, it serves hobbyists and crafters with a wide range of products including beads, jewelry components, crafting tools, and instructional content. The website is professionally designed with good navigation and mobile optimization, leveraging the Shoptet e-commerce platform and integrating multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Facebook SDK. Security posture is adequate with HTTPS enforced and secure login forms, though improvements can be made by adding explicit security headers and updating legacy libraries. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. However, the absence of WHOIS registration data reduces domain trustworthiness, warranting further investigation. Overall, the site presents a trustworthy and professional online presence in its niche market.

E

eSports.cz s.r.o.

beranizlin.cz

38

RI OKNA Berani Zlín is a Czech ice hockey team with an official website managed by eSports.cz s.r.o. The site serves as a comprehensive platform for fans, providing news, match schedules, ticket sales, and multimedia content. The business model focuses on fan engagement, sponsorship promotion, and media distribution within the sports sector. The website is well-branded and consistent, targeting primarily Czech ice hockey enthusiasts and local supporters. Technically, the site uses modern JavaScript libraries such as jQuery and slick-carousel, is hosted likely by WEDOS, and implements HTTPS with cookie consent mechanisms. However, it lacks explicit privacy and terms of service pages, and no direct contact information is visible on the homepage. Security posture is moderate with HTTPS enabled but missing security headers and incident response details. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

E

EASYDIET

easydiet.sk

54

EASYDIET is a Slovakian small business specializing in healthy meal box diet delivery services aimed at individuals seeking weight loss and healthy eating solutions. The website is built using modern frontend technologies such as Bootstrap 5 and integrates marketing and tracking tools including Google Tag Manager and Facebook SDK. Cookie consent is implemented via Cookiebot, indicating some level of privacy awareness. However, the absence of a privacy policy and terms of service pages represents a compliance gap. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit incident response contacts. Overall, the website presents a professional and trustworthy front for a local diet meal delivery service but would benefit from enhanced privacy and security documentation.

N

NEJLEPŠÍ ADRESA a.s.

olomouc.cz

55

The website www.olomouc.cz serves as a commercial information portal dedicated to the Olomouc region in the Czech Republic. Operated by NEJLEPŠÍ ADRESA a.s., it provides local news, business directories, event calendars, weather updates, and advertising services. The portal targets residents and visitors seeking regional information and commercial offers. Established since 1997, it holds a solid position as a regional media outlet with consistent branding and a good content quality level. Technically, the site employs a range of JavaScript libraries including jQuery, SlidesJS, and Fancybox, alongside marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is served over HTTPS, ensuring encrypted communication, and includes a cookie consent mechanism compliant with GDPR principles. Mobile optimization and SEO practices are good, though accessibility features are basic. No CMS or hosting provider details were explicitly detected. From a security perspective, the site uses HTTPS and cookie consent but lacks explicit security headers like CSP or HSTS, which could enhance protection. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS data for the domain is a concern, as it limits verification of domain legitimacy and registrant information, impacting trustworthiness. Overall, the website is a professionally maintained regional media portal with moderate technical maturity and a reasonable security posture. The main risk lies in the lack of transparent domain registration data, which should be addressed to improve trust and compliance. Strategic recommendations include implementing security headers, publishing clear security and privacy policies, and providing direct contact information for incident response.

R

Radio Haná s.r.o.

radiohana.cz

55

Radio Haná s.r.o. operates a regional radio station broadcasting on 92.3 FM, serving the Olomouc region and surrounding areas in the Czech Republic. The website offers live streaming, podcasts, local news, event information, and advertising services, positioning itself as a key local media outlet. The company targets local listeners interested in music and community events, leveraging digital platforms to extend reach. Technically, the website employs modern web technologies including jQuery, Bootstrap, Google Tag Manager, and Facebook SDK, ensuring a responsive and engaging user experience. Security posture is solid with HTTPS enforcement and standard security headers, though no explicit security or incident response policies are published. Privacy compliance is evident with GDPR and cookie consent mechanisms in place. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given its professional presentation and content. Overall, the site is well-structured, content-rich, and trustworthy for its audience.

T

TADRA TRADE ON s.r.o.

qitko-hobby.cz

46

Qítko hobby is a Czech Republic based small retail business specializing in beads, jewelry components, and creative crafting supplies. The company also offers creative courses, jewelry repair services, and tool rentals, targeting hobbyists and craft enthusiasts. The website serves as an informational portal with links to an external e-shop and social media presence, positioning itself as a regional player in the hobby retail market. Technically, the site uses legacy JavaScript libraries such as jQuery 1.9.1 and integrates Google Analytics and Facebook SDK for tracking. The website is mobile optimized with a good user experience but lacks modern CMS identification and advanced accessibility features. Security posture is moderate with no visible security headers and use of outdated libraries, but HTTPS is implied though not explicitly confirmed. Privacy compliance is basic with a cookie consent banner and GDPR-related newsletter consent text, but no dedicated privacy or terms pages are found. WHOIS data is unavailable, which raises concerns about domain registration transparency, though the business content and contact information suggest legitimacy. Overall, the site is functional and professional but would benefit from improved security practices and clearer compliance documentation.

HAIMA Ostrava, z.s. is a Czech non-profit organization established in 1996, dedicated to supporting seriously ill children at the pediatric hemato-oncology department of the Faculty Hospital Ostrava. The organization focuses on improving care conditions and facilitating integration of affected children into normal life. The website serves as an information hub for donors, parents, and the community, featuring donation options, news updates, and stories from families. Technically, the site uses a modern but basic tech stack including Bootstrap and jQuery, with embedded social media and donation widgets. While the site is accessible and well-structured, it lacks explicit privacy and cookie policies, and no WHOIS data is available to verify domain registration details, which slightly impacts trustworthiness. Security headers are not detected, though HTTPS is implied. Overall, the site presents a professional and trustworthy image for a small non-profit entity.

I

Infocentrum Valašské Klobouky

infocentrum-valasskeklobouky.cz

49

The website www.infocentrum-valasskeklobouky.cz serves as the official online presence of a cultural and educational center in Valašské Klobouky, Czech Republic. It provides information about local cultural events, tourist attractions, traditions, and services aimed at residents and visitors. The site is positioned as a local government or non-profit entity focused on promoting regional culture and tourism. Technically, the site is built on Drupal CMS with older versions of jQuery and Bootstrap, integrating Google Analytics and Facebook SDK for analytics and social media features. The site is accessible and mobile-optimized but lacks advanced security headers and a comprehensive privacy policy. The WHOIS data is unavailable, which raises concerns about domain registration legitimacy. Overall, the site is functional and informative but could improve its security posture and privacy compliance.

V

Vinařství a penzion Dwořáček

dworacek.cz

42

Vinařství a penzion Dwořáček is a small family-owned winery and pension located in Valtice, Czech Republic, offering wine tastings, direct wine sales, and accommodation services. The business targets tourists and wine enthusiasts visiting the Lednicko-valtický area, providing a local and authentic Moravian wine experience combined with lodging. The website is professionally designed with clear navigation and relevant content, supporting the business's hospitality focus. Technically, the site uses legacy jQuery versions, integrates Google Analytics, Facebook SDK, and Tripadvisor widgets, and is likely hosted by Active24. While the site is accessible and functional, it lacks advanced security headers and cookie consent mechanisms, which impacts privacy compliance. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency. Overall, the website presents a moderate security posture with room for improvement in privacy and contact transparency.

D

dTest, o.p.s.

dtest.cz

45

dTest, o.p.s. is a well-established Czech non-profit organization specializing in independent consumer product testing, advice, and protection of consumer rights. The website serves as a comprehensive platform offering product test results, consumer advice, subscription services, and various tools to assist consumers in making informed decisions. It holds a strong market position as the largest Czech consumer organization with over 30 years of operation. Technically, the website employs modern JavaScript libraries, integrates Google Tag Manager and Facebook SDK for analytics and marketing, and implements a GDPR-compliant cookie consent mechanism. The site is well-optimized for mobile devices and provides a professional user experience with clear navigation and rich content. Security-wise, the site uses HTTPS with good SSL configuration and basic security headers but lacks advanced security policies and incident response information. The absence of WHOIS data limits domain registration transparency but does not detract significantly from the site's credibility given its extensive content and business presence. Overall, the website demonstrates a mature digital presence with strong privacy compliance and trustworthy business practices.

F

ForthRight Advertising Agency

medicalrecognitionawards.gr

39

The website medicalrecognitionawards.gr represents a Greek healthcare-focused awards platform managed by ForthRight Advertising Agency. It aims to recognize and reward private doctors, clinics, and healthcare professionals across Greece through an online awards ceremony. The site provides detailed information about award criteria, benefits, and past winners, targeting healthcare professionals seeking recognition. Technically, the site is built on WordPress, leveraging modern libraries such as Bootstrap 5 and jQuery, with integrations for Google Analytics, Google Tag Manager, and Facebook SDK for tracking and marketing purposes. The site is mobile responsive and well-structured with good SEO metadata but lacks some accessibility features. Security-wise, the site uses HTTPS with a good SSL configuration but lacks important security headers and visible privacy or cookie policies, indicating compliance gaps. No incident response or vulnerability disclosure information is provided. Overall, the site is legitimate and professional but would benefit from enhanced privacy compliance and security hardening.

H

Hockey Club Morzine-Avoriaz

hockey-morzine.com

50

Hockey Club Morzine-Avoriaz operates as a regional ice hockey club based in France, providing hockey training, team participation, event hosting, and merchandise sales. The club targets local hockey players, families, and fans, positioning itself as a community-centric sports organization competing in Division 1. The website serves as an official portal for news, schedules, ticketing, and multimedia content, supporting fan engagement and club promotion. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google Analytics, and GDPR compliance plugins. It demonstrates good mobile optimization and SEO practices, though performance is moderate. Security posture is adequate with HTTPS and reCAPTCHA integration, but lacks some advanced security headers and explicit security policies. WHOIS data is missing, which reduces domain trustworthiness, but the website content and social media presence support legitimacy. Overall, the site is professional, user-friendly, and compliant with privacy regulations, though improvements in security and transparency are recommended.

I

Institut klinické a experimentální medicíny

ikem.cz

65

Institut klinické a experimentální medicíny (IKEM) is a leading Czech healthcare and research institution specializing in cardiovascular diseases, organ transplantation, diabetology, and metabolic disorders. With over 50 years of experience, it operates multiple specialized centers and clinics, serving patients nationwide. The website reflects a professional and comprehensive digital presence with detailed information for patients, professionals, and researchers. Technically, the site uses modern JavaScript libraries and analytics tools with proper cookie consent mechanisms, ensuring GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data reduces domain registration transparency but does not detract from the strong business credibility demonstrated by the website content and accreditations.

E

E-shop Steiner & Kovarik

prazskacokolada.cz

57

Pražská čokoláda Steiner & Kovařík is a Czech family-owned business specializing in the production and online retail of high-quality, luxury chocolate products. The company emphasizes traditional Czech craftsmanship with over 11 years of experience, offering a variety of chocolate bars, pralines, gift chocolates, and specialty items. Their market position is that of a niche premium chocolate producer serving general consumers interested in artisanal chocolate. The website is built on the Shoptet e-commerce platform, integrating modern analytics and marketing tools such as Google Analytics, TikTok Pixel, and Microsoft Clarity, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS and CSRF protections, though some security headers and explicit policies could be improved. The absence of WHOIS data reduces transparency but does not negate the professional presentation and trust signals on the site. Overall, the site provides a good user experience with clear navigation, product availability, and social media presence.

P

Pulsmetry.cz

pulsmetry.cz

60

Pulsmetry.cz is a specialized Czech e-commerce retailer focused on smartwatches and sport accessories, operating since 2001. The website targets sport enthusiasts and customers seeking high-quality smartwatches, offering a wide range of products including Garmin, Suunto, Polar, and related accessories. The business positions itself as a specialist with a long-standing presence in the market, emphasizing expertise and customer satisfaction. Technically, the site is built on the Shoptet e-commerce platform, utilizing common web technologies such as jQuery, Google Analytics, and Facebook SDK, with CDN support for performance. The site is mobile-optimized and includes standard SEO and accessibility features. Security posture is generally good with HTTPS enforced and cookie consent implemented; however, the use of an outdated jQuery version and lack of explicit security headers or vulnerability disclosure mechanisms are areas for improvement. WHOIS data is unavailable, which impacts domain trustworthiness, but the website content and policies indicate a legitimate business. Overall, the site is professional and trustworthy with moderate technical maturity and privacy compliance.

H

HOBBY TIME ON s.r.o.

tvoriva-olomouc.cz

9

Tvořivá Olomouc is a small Czech event organizer specializing in creative and artistic exhibitions and workshops targeted at families and creative enthusiasts. The website promotes upcoming events, showcases partner collaborations, and offers a newsletter subscription to keep visitors informed. The business model revolves around event organization and sales of creative materials, with a focus on local creators and community engagement. Technically, the website uses legacy JavaScript libraries such as jQuery 1.9.1 and integrates Google Analytics and Facebook SDK for tracking and social media presence. The site is moderately optimized for mobile and SEO, with basic accessibility features. Security posture is moderate but could be improved by updating libraries, adding security headers, and ensuring HTTPS enforcement. Privacy compliance is basic, with a cookie consent banner but no dedicated privacy policy page. The absence of WHOIS data raises concerns about domain registration legitimacy, impacting overall trustworthiness. Contact information is limited to an email address consistent with the domain. Overall, the website is functional and professional but would benefit from enhanced security, privacy, and transparency measures.

A

AiVision, s.r.o.

svicky.net

61

Svíčky.net is a Czech Republic based e-commerce retailer specializing in hobby crafting supplies, particularly components for candle and soap making. The website offers a comprehensive catalog of products and detailed category navigation, targeting hobbyists and small-scale crafters. The company behind the site is AiVision, s.r.o., indicating a small-sized business focused on niche retail. The site integrates modern web technologies and marketing tools such as Google Tag Manager and Facebook Pixel, demonstrating a moderate level of digital maturity. Security posture is good with HTTPS enforced and secure login mechanisms, although some HTTP security headers could be improved. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and registration status, which should be further investigated. Overall, the site presents a professional and trustworthy front for its target market.

L

LIFE IN TOWN s.r.o.

lifein.town

62

JSMEZ.CZ is a Czech community portal operated by LIFE IN TOWN s.r.o., providing localized city information, news, events, and community services across multiple Czech cities. The website targets general public users interested in local happenings and community engagement. The business model focuses on regional community portals with additional services like electronic business cards and career opportunities. Technically, the site uses a traditional web stack including jQuery, Bootstrap, Font Awesome, and integrates analytics and social media SDKs. While the site is functional and moderately optimized, it uses an outdated jQuery version and lacks some modern security headers. Security posture is adequate with HTTPS and cookie consent implemented, but could be improved with enhanced headers and updated libraries. The absence of WHOIS data reduces domain trustworthiness, though the website content and business information appear professional and consistent. Overall, the site is safe for general audiences and compliant with GDPR requirements.

L

Life in Town s.r.o.

jsmezpardubic.cz

57

JSEM Z PARDUBIC is a Czech community portal operated by Life in Town s.r.o., targeting residents of Pardubice. The website offers local news, event listings, places of interest, job offers, photo galleries, and user profiles, positioning itself as a central hub for community engagement. It is part of a network of similar city portals across the Czech Republic, indicating a focused regional media business model. The site is professionally branded and consistent with its sister sites, serving a small but engaged local audience. Technically, the website is built on ASP.NET WebForms with a tech stack including jQuery, Bootstrap, Font Awesome, and integrates Google Custom Search and Facebook SDK for social and search functionalities. It uses HTTPS and includes cookie consent mechanisms, reflecting a moderate level of digital maturity. Performance and mobile optimization are adequate, though some libraries like jQuery are outdated, suggesting room for modernization. From a security perspective, the site enforces HTTPS and has privacy and cookie policies aligned with GDPR. However, no advanced security headers were detected, and no explicit incident response or security policies are publicly available. The absence of WHOIS data limits domain trust verification, but the website content and business information appear legitimate and consistent with a community media portal. Overall, the site presents a trustworthy and professional community platform with moderate technical and security maturity. Strategic improvements in security headers, library updates, and transparency of security policies would enhance its posture and trustworthiness.

L

Life in Town s.r.o.

jsemzezlina.cz

57

JSEM ZE ZLÍNA is a Czech community portal operated by Life in Town s.r.o., focusing on local news, events, places, and job offers primarily for the city of Zlín and surrounding regions. The website serves as a hub for residents to engage with community content and access localized information. It is part of a network of sister sites covering other Czech cities, indicating a regional community portal business model. The site is professionally branded and provides clear contact information, including company details and social media presence, enhancing its credibility. Technically, the website is built on ASP.NET WebForms with legacy jQuery and Bootstrap for frontend styling. It integrates modern analytics and tracking tools such as Microsoft Application Insights, Google Tag Manager, and Facebook SDK. The site is mobile-optimized and includes cookie consent mechanisms, reflecting a moderate level of digital maturity. However, some technical improvements are recommended, such as updating JavaScript libraries and implementing security headers. From a security perspective, the site enforces HTTPS and does not expose sensitive data in its HTML content. Privacy and cookie policies are present and appear GDPR compliant. No explicit security or incident response policies are found, and no WHOIS data is available due to privacy protection, which is common for small businesses. Overall, the security posture is moderate with room for enhancement in headers and incident response transparency. The overall risk assessment is low, with no signs of malicious or adult content. Strategic recommendations include improving security headers, updating legacy libraries, and adding explicit security policies to strengthen trust and compliance. The website is a legitimate, well-maintained community portal with a clear business focus and moderate technical sophistication.

L

LIFE IN TOWN s.r.o.

jsmezbrna.cz

62

JSME Z BRNA is a Czech community portal operated by LIFE IN TOWN s.r.o., focusing on local news, events, places, job offers, and photo galleries primarily for the city of Brno and other Czech cities. The platform serves as a community hub, offering user-generated content and localized information to residents and visitors. It maintains a network of sister sites for other Czech cities, indicating a regional media presence. The business model centers on providing community engagement and localized advertising opportunities. Technically, the website is built on ASP.NET WebForms with a tech stack including jQuery, Bootstrap, Font Awesome, and integrates Google Tag Manager, Facebook SDK, and Microsoft Application Insights for analytics and marketing. The site is mobile-optimized with a clear navigation structure and uses HTTPS with a valid SSL certificate. Cookie consent and privacy policies are implemented, reflecting compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms but lacks advanced security headers and uses an outdated jQuery version, which could pose vulnerabilities. No exposed sensitive data or signs of malware were detected. The absence of a security.txt or incident response contact limits transparency in vulnerability handling. WHOIS data is unavailable, likely due to privacy protection, which is common for small businesses. Overall, the site presents a good security posture for its size and purpose, with moderate technical maturity and good privacy compliance. Strategic recommendations include updating libraries, enhancing security headers, and adding vulnerability disclosure information to improve trust and resilience.

W

World Ovarian Cancer Coalition

worldovariancancercoalition.org

41

The World Ovarian Cancer Coalition is a Canadian-based non-profit organization established in 2016, dedicated to global advocacy, awareness, and research collaboration focused exclusively on ovarian cancer. The website serves as a comprehensive resource hub for patients, advocates, healthcare professionals, and researchers, offering educational content, study results, and global partnership information. The organization positions itself uniquely as the only global coalition focused solely on ovarian cancer, working with nearly 200 patient advocacy groups worldwide. Technically, the website is built on WordPress using a modern theme framework (FoundationPress) and integrates multiple plugins and third-party services such as Google Tag Manager, Facebook SDK, Iubenda for privacy compliance, and AddToAny for social sharing. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in accessibility and security headers could be made. Hosting is provided by a reputable registrar, Netregistry Wholesale Pty Ltd. From a security perspective, the site enforces HTTPS and uses reputable privacy and cookie management services, indicating a strong privacy posture. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced security maturity. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. It effectively supports its mission through clear navigation, quality content, and integration with social media and analytics tools. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing a vulnerability disclosure policy to further strengthen trust and security posture.

A

ADK

adk.cz

57

ADK is a Czech-based e-commerce retailer specializing in handmade diaries, leather goods, and fashion accessories. The company emphasizes craftsmanship, exclusivity, and quality, targeting consumers interested in premium, handcrafted products. The website is professionally designed with clear navigation and supports Czech and Slovak languages, indicating a regional focus. The business model revolves around direct online sales through a well-established e-commerce platform (Shoptet). The market position is niche, focusing on high-quality, artisanal products with a loyal customer base. Technically, the website uses a modern e-commerce CMS with integrations for Google Analytics, Facebook SDK, and marketing tools, reflecting a mature digital presence. Security posture is adequate with HTTPS enforced and CSRF protections on forms, but some outdated libraries and missing security headers suggest room for improvement. Privacy compliance is strong with a clear cookie consent mechanism and a comprehensive privacy policy. Overall, the site is trustworthy and professional, though the lack of WHOIS data reduces transparency. Strategic recommendations include updating libraries, enhancing security headers, and adding a vulnerability disclosure policy.

L

Life in Town s.r.o.

jsemzostravy.cz

57

JSEM Z OSTRAVY is a Czech community portal operated by Life in Town s.r.o., focusing on local news, events, places, job offers, and social engagement primarily for the Ostrava region and other Czech cities. The website serves as a hub for community interaction, providing various services such as event calendars, photo galleries, and user profiles. It maintains a consistent brand presence across sister sites in multiple Czech cities, indicating a regional network approach. Technically, the website is built on ASP.NET WebForms with a tech stack including jQuery, Bootstrap, Font Awesome, Google Tag Manager, Facebook SDK, and Microsoft Application Insights. The site is mobile-optimized and uses HTTPS with good SSL configuration. However, some outdated libraries and missing security headers suggest room for technical improvements. From a security perspective, the site implements cookie consent and privacy policies compliant with GDPR, but lacks explicit security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected, but the absence of WHOIS data for the domain raises some trust concerns. Overall, the security posture is moderate with recommendations for enhanced headers and updated libraries. The overall risk assessment is moderate with a good balance of business credibility and technical implementation. Strategic recommendations include improving security headers, updating third-party libraries, and publishing clear security and incident response policies to enhance trust and compliance.

Ona Ví is a Czech media publication operated by Pražská vydavatelská společnost s.r.o., focusing on creative hobbies, crafts, recipes, and lifestyle content. The website offers magazine issues, special editions, and subscription services targeting Czech-speaking creative hobbyists and lifestyle readers. The business operates as a niche regional magazine with a small company size and has been established since 2008. The website is professionally designed with consistent branding and active social media presence on Facebook and Instagram. Technically, the website is built on WordPress 6.8.3 with common plugins and libraries such as jQuery, Font Awesome, and Slick Slider. Hosting appears to be provided by WEDOS, consistent with the domain registrar information. The site performs moderately well with good mobile optimization and basic accessibility features. SEO is adequately addressed with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. However, privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Google Analytics is included but not fully configured, indicating room for improvement in data privacy practices. Overall, the website is safe for general audiences, with no adult or explicit content. The domain registration data is consistent and supports the legitimacy of the business. Strategic recommendations include implementing privacy and cookie policies, adding security headers, properly configuring analytics, and enhancing accessibility and compliance to improve trust and security posture.

B

BrainMarket.cz

brainmarket.cz

62

BrainMarket.cz is a Czech Republic based e-commerce platform specializing in dietary supplements, BIO foods, cosmetics, and wellness products aimed at health and hormonal optimization. The website presents a professional and comprehensive product catalog targeting health-conscious consumers. Technically, the site is built on the Shoptet e-commerce platform and integrates multiple modern marketing and analytics tools including Google Analytics, TikTok Pixel, and Facebook SDK. The site is mobile optimized and provides clear navigation and user experience. Security posture is generally good with HTTPS enforced and CSRF protection on forms, but the use of an outdated jQuery version and lack of explicit security headers like Content-Security-Policy represent areas for improvement. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy in Czech, though no explicit security or incident response policies are found. WHOIS data is missing, which limits domain trust analysis, but the website content and business presence appear legitimate and professional.

C

CHAPS spol. s r.o.

idos.cz

44

IDOS.cz is a well-established Czech transportation platform operated by CHAPS spol. s r.o., founded in 2001. It provides comprehensive search and ticketing services for trains, buses, local public transport (MHD), and airplanes. The platform targets general travelers in the Czech Republic and surrounding regions, offering real-time vehicle location tracking and direct ticket purchases. The website is professionally designed with good content relevance and clear navigation, supporting multiple languages and advanced search parameters.

E

eWRC.cz

ewrc.cz

59

eWRC.cz is an independent Czech portal focused on rally motorsport, providing information and possibly results related to rally events. The website targets rally enthusiasts and motorsport fans primarily in the Czech Republic. The site uses common web technologies including Google Analytics, Google Tag Manager, Facebook SDK, and Font Awesome icons, indicating a moderate level of digital maturity. However, the absence of WHOIS data and lack of visible business registration or contact information limits the ability to fully verify the business legitimacy. Security posture is weak with no detected security headers or privacy policies, and the site lacks GDPR compliance indicators. Overall, the website is accessible and safe for general audiences but requires improvements in security and compliance to enhance trust and professionalism.

N

Nedoklubko

nedoklubko.cz

56

Nedoklubko is a well-established Czech non-profit organization dedicated to supporting families of prematurely born children and neonatal departments across the Czech Republic. Founded in 2002, it operates primarily through donations, partnerships, and community engagement. The website serves as a comprehensive resource offering information, support, events, and publications targeted at affected families and healthcare professionals. The organization maintains a strong digital presence with active social media channels and regularly updated content, including blogs and podcasts. Technically, the website is built on WordPress using a modern and reputable technology stack including plugins for events, e-commerce, and social media integration. It employs Google Analytics and Facebook SDK for tracking and marketing purposes. The site is mobile-optimized with good SEO and accessibility features, although some accessibility aspects could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers are not fully detected, and some plugins (e.g., jQuery Migrate) may require updates to mitigate potential vulnerabilities. No exposed sensitive data or obvious security flaws were found in the HTML content. The absence of WHOIS data limits domain trust assessment, but the website's content and structure indicate legitimacy. Overall, Nedoklubko presents a professional, trustworthy, and user-friendly platform for its niche audience. Strategic improvements in security headers, plugin updates, and enhanced contact information visibility would further strengthen its security posture and user trust.

A

AgroBio Opava, s.r.o.

agrobio.cz

57

AgroBio Opava, s.r.o. is a well-established Czech company specializing in retailing home and garden products, primarily targeting gardeners and plant enthusiasts. With over 30 years of market presence and a domain registered since 2000, the company offers a broad range of natural products, pest control solutions, fertilizers, seeds, and gardening supplies through both an e-commerce platform and a physical store in Opava. The website is professionally designed with clear navigation and a loyalty program to engage customers. Technically, the site uses modern analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook SDK, and Hotjar, hosted partly on Amazon Cloudfront. Security posture is good with HTTPS enforced and secure login forms, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant with active consent mechanisms. Overall, the site demonstrates a mature digital presence with strong business credibility and user trust.

L

Lutrija Bosne i Hercegovine

lutrijabih.ba

71

Lutrija Bosne i Hercegovine is the official national lottery operator of Bosnia and Herzegovina, providing a range of lottery and betting services including Loto 6/39, TV Bingo, and sports betting. The organization targets adult users within the country and operates both online and offline channels, including mobile applications. The website reflects a mature digital presence with modern technologies such as Bootstrap, jQuery, and integration with Google Analytics and Facebook SDK for analytics and marketing. Security practices include HTTPS enforcement, login authentication via AJAX, and cookie consent mechanisms, supported by ISO 27001 and WLA certifications that enhance trust. However, some security headers are not explicitly detected, and incident response contact details are not publicly available. Overall, the site is professional, compliant with privacy regulations, and focused on responsible gaming.

The website www.lecba-bolesti.com serves as an informational platform focused on the treatment of chronic and acute pain, primarily targeting patients and individuals seeking medical advice in the Czech Republic. It is operated by S.A.B. Medical, s.r.o., a small healthcare-related company that also distributes medical supplies. The site provides educational content on pain types, scales, and treatment options, supported by links to related healthcare resources and partner sites. Technically, the site is built on the Estranky.cz CMS platform using legacy JavaScript libraries such as jQuery 1.12.4 and integrates Facebook SDK for social features. While the content is relevant and well-structured, the technical implementation shows moderate performance and basic mobile optimization. Security posture is weak due to lack of HTTPS enforcement and missing security headers, and privacy compliance is poor with no visible privacy or cookie policies. The WHOIS data is unavailable, which raises concerns about domain registration transparency, although the presence of company legal information on the site partially offsets this risk. Overall, the site is functional but requires significant improvements in security, privacy, and technical modernization to enhance trust and compliance.

The website 'Žilní poradna - léčba křečových žil a metliček' is operated by S.A.B. Medical, s.r.o., a small healthcare entity based in the Czech Republic specializing in venous insufficiency and varicose vein treatments. The site provides medical information, patient guidance, and details about treatment options such as radiofrequency, laser, and surgical methods. It serves a targeted audience of patients and individuals seeking specialized vascular care. The business model appears to be informational and advisory, potentially supported by medical product distribution partnerships. Technically, the website is built on the Estranky.cz CMS platform and uses legacy JavaScript libraries like jQuery 1.12.4 and jQuery UI 1.12.1. It integrates Google Analytics and Facebook SDK for user tracking and marketing purposes. The site shows basic mobile optimization and accessibility features but lacks advanced SEO and modern performance optimizations. No explicit security headers were detected, and privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. From a security perspective, the site uses HTTPS for external scripts, but the SSL configuration and security headers are unknown or missing. The absence of privacy and cookie policies, outdated libraries, and missing WHOIS domain registration data reduce the overall security posture and trustworthiness. No critical vulnerabilities or adult content were detected, but improvements are needed to enhance compliance and security. Overall, the website is functional and provides relevant healthcare content but requires significant enhancements in privacy compliance, security best practices, and technical modernization to improve trust and user experience.

H

Hotel Horal dárkové poukazy

horaldarky.cz

53

Hotel Horal dárkové poukazy operates a specialized e-commerce website offering gift vouchers for wellness stays, massages, cosmetics, and wellness center access primarily in the Czech Republic. The business targets general consumers seeking hospitality and wellness services, leveraging an online platform to facilitate voucher sales. The company maintains a consistent brand presence with clear contact information and social media engagement, positioning itself as a trusted regional hospitality provider. Technically, the website is built on the Shoptet e-commerce platform, utilizing technologies such as jQuery, Google Analytics 4, Facebook Pixel, and retargeting services. The site is mobile-optimized, accessible, and SEO-friendly, though it uses an outdated jQuery version and lacks some HTTP security headers. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Security posture is generally good with HTTPS enforced and CSRF protections in place, but improvements are recommended in updating libraries and implementing security headers. The absence of WHOIS data limits domain trust verification, but the website’s content and contact details support legitimacy. Overall, the site presents a low-risk profile with moderate technical maturity. Strategic recommendations include enhancing security headers, updating JavaScript libraries, publishing explicit security policies, and maintaining privacy compliance to strengthen trust and resilience.

The website 'Vakcíny a očkování' serves as a specialized Czech language portal providing comprehensive information about vaccines and vaccination practices. It targets both the general public and healthcare professionals, offering detailed articles, vaccination guides, travel vaccination advice, and a Q&A section. The site positions itself as a trusted educational resource within the healthcare sector in the Czech Republic, with a history dating back to 1999. The business model is primarily informational and educational, relying on content quality and expert guidance. From a technical perspective, the website employs a traditional tech stack including jQuery 1.12.0, Font Awesome 4.3.0, Google Analytics, and Facebook SDK for tracking and social integration. The site is mobile optimized with good navigation and SEO practices, although some technical debt is evident due to the use of outdated libraries. Performance is moderate, and accessibility is basic but functional. Security posture shows room for improvement. While HTTPS usage is implied, no explicit security headers such as CSP or HSTS were detected. The site disables copy-paste actions possibly as a content protection measure. The cookie consent mechanism is present and GDPR compliance is indicated, but no formal security or incident response policies are published. The WHOIS data is missing or inaccessible, raising concerns about domain registration legitimacy, which impacts trustworthiness. Overall, the website is a valuable resource with good content quality and user experience but requires enhancements in security practices and domain registration transparency. Strategic recommendations include implementing modern security headers, updating libraries, clarifying domain registration details, and publishing formal security policies to improve trust and compliance.

F

FERTISTAV CZ a.s.

fertistav-eshop.cz

50

FERTISTAV CZ a.s. operates as a Czech-based manufacturer and retailer specializing in fertilizers and gardening products, targeting both hobby gardeners and agricultural professionals. The company maintains a well-structured e-commerce website with a comprehensive product catalog and clear customer support channels. Their market position appears stable within the Czech retail sector for agricultural supplies. Technically, the website leverages the Shoptet e-commerce platform with integrations for Google Analytics, Facebook Pixel, and payment processing via GoPay, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, supporting a positive user experience. Security posture is solid with HTTPS enforcement and CSRF protections, though some HTTP security headers could be improved. Privacy compliance is evident through cookie consent mechanisms and a GDPR-aligned privacy policy. Overall, the website presents a trustworthy and professional online presence with moderate risk due to lack of WHOIS transparency and absence of published security policies.

E

EIBACH Renocar, a.s.

eibach.cz

42

EIBACH Renocar, a.s. operates a professional website offering high-performance automotive suspension parts and systems, targeting sports car enthusiasts and professional installers primarily in the Czech Republic and worldwide through partners. The company is positioned as a leading manufacturer with a strong reputation and a comprehensive online product catalog and configurator. The website is built on Reflex CMS, uses modern web technologies including HTTPS, Google Analytics, and Facebook SDK, and provides a good user experience with clear navigation and mobile optimization. However, the WHOIS data is unavailable, limiting domain trust verification. Security posture is moderate with HTTPS and secure forms but lacks explicit security headers and a privacy policy page, which are important for compliance and trust. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and updated technical components.

Š

Šatlava Valtice

vezeni-satlava.cz

54

Šatlava Valtice is a small Czech Republic-based entertainment business specializing in escape room experiences themed around escaping a prison cell within 60 minutes. The website is built on WordPress with WooCommerce and several plugins to support booking and customer interaction. The business targets families, tourists, gamers, and corporate teams seeking teambuilding activities. The site integrates social proof via TripAdvisor and Facebook, enhancing trust. Technically, the site uses modern web technologies but lacks some advanced security headers and explicit privacy policies. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but improvements are recommended in security headers and compliance documentation. Overall, the site is professional, user-friendly, and safe for general audiences.

S

Spolek pro obnovu Katzelsdorfského zámečku, z. s.

katzelsdorfsky-zamecek.cz

53

The website represents a small non-profit organization dedicated to the restoration of Katzelsdorfský zámeček, a cultural heritage site in the Czech Republic. The organization provides information and community engagement related to this restoration effort. The site is built on the Webnode CMS platform and uses standard web technologies including HTTPS, Google Analytics, and Facebook SDK for social media integration. The technical infrastructure is moderate with CDN hosting and basic mobile optimization. Security posture is adequate with HTTPS enabled and IP anonymization in analytics, but lacks important security headers and privacy policies, indicating room for improvement in compliance and security best practices. Overall, the website is functional and trustworthy for its niche audience but would benefit from enhanced privacy and security measures.