Security Directory

P

Passerinvest Group

roztylyplaza.cz

41

Roztyly Plaza is a commercial real estate project offering modern office and retail spaces in Prague, operated by Passerinvest Group. The website presents a professional image with detailed descriptions of the property, amenities, and leasing contacts. The technical infrastructure uses modern web technologies including Bootstrap, jQuery, and tracking tools such as Google Analytics and Facebook Pixel. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of a privacy policy and security headers are notable gaps. The WHOIS data is unavailable, limiting domain trust assessment, but the website content and contact information support legitimacy.

E

Estate.cz

estate.cz

54

Estate.cz is a Czech-language real estate news website providing market news, articles, and analysis focused on the real estate sector in the Czech Republic. The website targets Czech-speaking individuals interested in real estate market developments and related content. Technically, the site is built on WordPress with Elementor page builder and integrates common analytics and advertising technologies such as Google Analytics, Facebook Pixel, and Seznam Ads. The site shows moderate performance and good mobile optimization but lacks visible security headers and explicit privacy or cookie policies in the analyzed content. The WHOIS data for the domain is unavailable, likely due to privacy protection, which limits transparency but is common for media websites. Overall, the website presents a professional and consistent brand image with good content quality and moderate trustworthiness.

P

PiXhost

pixhost.to

42

PiXhost is a small-scale free image hosting service established in 2007, offering users the ability to upload images up to 10MB with multiple upload methods including classic, remote, and cover uploads. The platform targets general users seeking free image sharing and gallery hosting solutions. The website is functional with a good design and clear navigation, though mobile optimization and accessibility are basic. The technical infrastructure relies on older JavaScript libraries such as jQuery 1.11.1 and uses common UI components like Plupload and Font Awesome. Google Analytics is employed for user tracking without visible cookie consent mechanisms, indicating limited privacy compliance. Security posture is moderate but weakened by outdated libraries, lack of security headers, and suspicious inline script loading. No WAF or blocking mechanisms are detected, and the content is safe for general audiences without adult or NSFW material.

D

Dřevoprogram Břeclav s.r.o.

drevoprogram.cz

39

Dřevoprogram Břeclav s.r.o. is a small, family-owned carpentry business based in the Czech Republic, specializing in custom manufacturing of doors, windows, stairs, gates, furniture, and other wood products. The company emphasizes quality materials and craftsmanship, serving a local customer base with a 25-year history. The website reflects a professional but modest digital presence, with clear contact information and social media integration. Technically, the site uses a combination of jQuery, Bootstrap, and other JavaScript libraries, hosted likely by WEDOS, with a custom CMS backend. While the site loads well and is mobile-optimized, there are some technical issues such as a broken Google Maps integration and use of an outdated jQuery version. Security posture is moderate, with no visible security headers and missing privacy and cookie policies, indicating compliance gaps. Overall, the site is trustworthy but would benefit from improved security and privacy practices.

T

TKR Jašek s.r.o.

valachnet.cz

53

TKR Jašek s.r.o. operates the VALACHNET.cz portal, providing regional telecommunications services including internet, television, telephone, mobile, and hosting primarily in the Valašsko region of the Czech Republic. The company has a long-standing presence since 1990 and targets residential and business customers within its service area. The website reflects a regional ISP with a focus on customer engagement and service announcements. Technically, the website uses a traditional tech stack with jQuery and jQuery UI libraries, serving content over HTTPS. While the site is functional and content-rich, it lacks advanced security headers and modern privacy compliance features such as a cookie consent mechanism. The site is moderately optimized for performance and accessibility but could benefit from modernization. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but the absence of security headers and vulnerability disclosures indicates room for improvement. The lack of WHOIS data reduces domain trustworthiness, though the website content and business information appear consistent and legitimate. Overall, the site presents a trustworthy regional ISP with good business credibility but requires enhancements in security best practices and privacy compliance to align with modern standards.

L

LivePerson

liveperson.com

75

LivePerson operates a leading Conversational AI platform designed to help businesses engage customers through personalized, scalable digital experiences. The website presents a professional and modern interface built with React and Gatsby, hosted partially on Amazon S3, indicating a mature technical infrastructure. However, the absence of WHOIS data and lack of visible security headers or privacy policies suggest areas for improvement in transparency and security posture. Overall, the site is business-focused, safe, and credible, but could enhance trust by publishing clear privacy and security documentation.

L

LUXUS.cz

luxus.cz

45

LUXUS.cz is a Czech luxury lifestyle online magazine offering premium content including interviews, event coverage, competitions, and reportages. The site targets a Czech-speaking audience interested in luxury goods and lifestyle. It maintains partnerships with reputable luxury brands and financial institutions, enhancing its market position as a trusted media outlet in the luxury segment. Technically, the website is built on Drupal 8 CMS, utilizing common JavaScript libraries and Google Tag Manager for analytics with privacy-conscious configurations. The site is mobile-optimized and presents a professional design with clear navigation. Security posture is moderate with HTTPS enabled and some privacy measures in analytics, but lacks explicit security headers and formal privacy/cookie policies. WHOIS data is unavailable, which impacts domain trustworthiness, but the website content and partner affiliations support legitimacy. Overall, the site is safe, professional, and well-positioned in its niche, though improvements in privacy compliance and security headers are recommended.

Přerost a Švorc auto is a medium-sized authorized automotive dealer and service partner specializing in Škoda and Volkswagen vehicles, operating primarily in Prague, Czech Republic. The company offers a comprehensive range of services including new and used car sales, vehicle servicing, financing options, and additional services such as car washing and rental. Their market position is that of a trusted regional dealer with a strong focus on customer service and authorized brand partnership. Technically, the website employs a moderate technology stack with jQuery, DataTables, Google Fonts, and Google Tag Manager, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced and secure forms, though improvements are recommended in security headers and updating legacy libraries. Privacy compliance is addressed with a clear privacy policy and GDPR contact, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its business objectives, though the absence of WHOIS data slightly impacts domain trustworthiness.

K

Kofola a.s.

ondrasovka.cz

54

Ondrášovka is a Czech mineral water brand offering 100% natural and flavored mineral waters. It operates under the parent company Kofola a.s., a well-established beverage manufacturer. The website showcases a strong brand presence with detailed product information, environmental and educational initiatives, and community engagement projects. The site is well-structured, visually appealing, and mobile-optimized, providing a positive user experience. Technically, the website uses modern JavaScript libraries such as jQuery, fullPage.js, and Fancybox, alongside analytics tools like Google Tag Manager, Microsoft Clarity, and Facebook Pixel, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced, but lacks some security headers and formal security policies. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms of service pages. WHOIS data is unavailable, limiting domain registration trust assessment, but the business information and content strongly indicate legitimacy. Overall, the website is professional, trustworthy, and well-positioned in its market segment.

E

European Arts Investments s.r.o.

europeanarts.cz

45

European Arts Investments s.r.o. operates a reputable auction house and gallery specializing in Czech and European fine art. Established in 2013, the company has built a strong market position in Central Europe, hosting prestigious live auctions and offering curated art collections. Their services include live and online auctions, pre-auction exhibitions, and virtual tours, targeting collectors, investors, and art enthusiasts. The website reflects a professional and consistent brand image with comprehensive business information and clear contact details. Technically, the site employs modern JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security posture is moderate, with room for improvement in HTTP security headers and incident response transparency. Privacy compliance is well addressed through a detailed cookie consent mechanism and a comprehensive privacy policy. Overall, the site is trustworthy and well-maintained, supporting the company's credible market presence.

P

parma.com.au

parma.com.au

57

Parma.com.au is a niche Australian website dedicated to chicken parmigiana ratings, reviews, and specials. It serves a community of food enthusiasts who contribute user-generated content including venue reviews, polls, and news updates. The site positions itself as a specialized platform within the hospitality sector, focusing on a popular Australian food item. The business model revolves around community engagement and content submission, targeting Australian consumers interested in dining experiences related to chicken parmigiana. Technically, the website uses a legacy CMS (Ayuda CMS) and relies on jQuery and jQuery UI libraries, with embedded Flash video content indicating some outdated technology usage. Hosting is provided by ayuda Hosting, and Google Analytics is used for visitor tracking. The site shows moderate performance and basic mobile optimization but lacks modern accessibility and SEO enhancements. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and important security headers such as CSP or HSTS. The presence of empty form tokens and Flash content are potential security and compatibility concerns. Privacy compliance is minimal, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Contact information is limited to a contact form, with no explicit emails or phone numbers provided. Overall, the website is functional and serves its niche well but requires modernization in technology, security hardening, and privacy compliance to improve trust and user experience. Strategic improvements in security headers, removal of deprecated technologies, and implementation of cookie consent would enhance the site's posture and compliance.

I

Iguana Design

iguanadesign.com.au

35

Iguana Design is a small Australian business specializing in brand design and marketing services, operating from the Sunshine Coast. With over 30 years of experience, they provide visual branding solutions including logos, branding, and web design to help businesses establish a strong market presence. The website is built on WordPress and uses common web technologies such as jQuery and FontAwesome, hosted by an Australian hosting provider. The site is moderately optimized for performance and mobile use, with a professional design and clear navigation. Security posture is adequate with HTTPS enabled, but lacks important security headers and formal privacy or cookie policies, which are critical for compliance and trust. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the domain registration details align well with the business claims, indicating legitimacy.

T

TrueAnal | Welcome to the Best Hardcore Anal Site

trueanal.org

59

TrueAnal.org is an adult entertainment website specializing in hardcore anal pornography featuring exclusive content and popular pornstars. The site operates on a subscription and content distribution model, targeting adult viewers seeking explicit anal-themed videos. The platform uses DataLife Engine CMS with common web technologies such as jQuery, Bootstrap, and Font Awesome, hosted behind Cloudflare DNS services. While the site offers good content quality and user experience with clear navigation and mobile optimization, it lacks critical privacy and cookie policies, which are compliance gaps. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. No business contact emails or phone numbers are publicly available, limiting business credibility. Overall, the site is functional and consistent with its niche but requires improvements in privacy compliance and security hardening.

P

POWERPLAY MANAGER, s.r.o.

powerplaymanager.com

60

POWERPLAY MANAGER, s.r.o. operates the PowerPlay Manager online sports management game platform, offering free-to-play management games for hockey, soccer, handball, and basketball. The platform targets sports enthusiasts globally, providing multilingual support and live game broadcasts. The business model relies on free access with advertising and partnerships. Technically, the site uses a traditional web stack with jQuery and related libraries, integrates Facebook login, and employs cookie consent mechanisms to comply with privacy regulations. Security posture is solid with HTTPS and cookie management, though some security headers are missing and incident response information is absent. Overall, the site is professional, trustworthy, and well-positioned in its niche.

W

WANET s.r.o.

warioweather.com

57

WarioWeather, operated by WANET s.r.o., provides IP weather stations designed for smart homes, precision agriculture, and intelligent building management. Their product offers integrated weather data collection, forecasting, and device control capabilities accessible via web interfaces. The company targets niche markets requiring precise environmental monitoring and automation. Technically, the website uses standard web technologies including jQuery and Google Analytics, with basic mobile optimization and cookie consent mechanisms in place. Security posture is moderate with HTTPS enabled but lacking advanced security headers and explicit incident response policies. The absence of WHOIS domain registration data raises concerns about domain legitimacy, impacting overall trust. Strategic improvements in security headers, contact transparency, and domain registration verification are recommended to enhance credibility and compliance.

K

Koregos

koregos.com

56

Koregos.org is a specialized online multimedia review and encyclopedia dedicated to the arts and art history, providing a rich collection of articles, videos, and reporticles validated by editorial committees. The website targets a diverse audience including experts, amateurs, and juniors, and operates as a free educational resource supported by cultural and governmental institutions in Belgium. Technically, the site uses a custom backend with legacy JavaScript libraries such as jQuery 1.7 and JW Player for multimedia content delivery. While the domain is well-established and consistent with the business claims, the website lacks modern security practices such as DNSSEC, security headers, and updated libraries, which poses potential risks. Privacy compliance is minimal with no visible privacy or cookie policies, and no contact or social media information is provided, limiting user engagement and trust. Overall, the site is functional and content-rich but requires improvements in security, privacy, and technical modernization to enhance trust and compliance.

Tesort, spol. s r.o. is a Czech Republic based company specializing in the sale and servicing of industrial handling and fastening equipment, including binding chains, lifting points, hoists, and custom manufacturing. Founded in 1995, the company holds ISO 9001:2008 certification, indicating a commitment to quality management. Their website presents a professional and well-structured digital presence with clear navigation and relevant content targeting industrial clients. The technical infrastructure leverages modern JavaScript libraries and frameworks such as jQuery, Nette Framework, and Leaflet for mapping, alongside Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and privacy policy documentation. The absence of WHOIS data limits domain trust assessment, though the website content and business information appear legitimate and consistent with an established industrial supplier. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, and improving domain registration transparency.

I

Idera, Inc.

ideracorp.com

66

Idera, Inc. is an enterprise-level B2B software company that manages a portfolio of global software productivity brands. Their offerings span database management, application development, test management, IT infrastructure monitoring, data integration, and analytics platforms. The company targets technical users and organizations seeking trusted software tools to improve productivity and achieve strategic goals. The website presents a professional and consistent brand image with multiple subsidiary brands showcased prominently. Technically, the website uses modern frontend technologies including jQuery, Bootstrap, and Google Fonts, and implements a cookie consent mechanism indicating some level of privacy compliance. The site is mobile-optimized with good navigation and content quality. However, there is a lack of explicit privacy policy and terms of service pages, and no visible contact information or security incident response details, which are areas for improvement. From a security perspective, HTTPS is implied but no security headers or advanced security practices are evident in the provided data. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness and raising questions about domain registration legitimacy. No vulnerabilities or exposed sensitive data were detected in the content analyzed. Overall, the website is professionally designed and serves its business purpose well but would benefit from enhanced transparency in privacy, security policies, and domain registration information to improve trust and compliance posture.

W

WANET s.r.o.

meteo-pocasi.cz

55

The website www.meteo-pocasi.cz is operated by WANET s.r.o. and focuses on providing IP meteorological stations (meteostanice) for intelligent home automation, agriculture, and industrial applications. The business offers hardware devices capable of measuring and controlling environmental conditions based on weather data, complemented by a customer portal and integration with the Meteocentrum.cz weather forecast service. The target audience includes homeowners, farmers, and industrial operators primarily in the Czech Republic. The website content is professionally presented in Czech, with clear navigation and relevant information about products and services. Technically, the site uses a traditional jQuery-based stack with Google Analytics for tracking and a cookie consent plugin to comply with GDPR. The site is served over HTTPS with no detected WAF or blocking mechanisms, indicating good accessibility. However, the site lacks modern security headers and explicit incident response or security policy documentation. No direct company contact emails or phone numbers are published, relying instead on contact forms. From a security perspective, the site demonstrates basic good practices such as HTTPS and cookie consent but could improve by adding security headers, publishing security policies, and providing clearer contact information for incident response. The absence of WHOIS data is a concern for domain legitimacy and trust, although the website content and business presence suggest a legitimate operation. Overall, the website scores moderately well in content quality, technical implementation, and security posture but has room for improvement in privacy compliance and business credibility. Strategic recommendations include enhancing security headers, publishing incident response information, improving contact transparency, and verifying domain registration details to strengthen trust.

I

impire.cz

impire.cz

63

Impire.cz is a small Czech web development company specializing in creating custom websites, e-shops, corporate systems, SEO services, and web hosting. Established since 2010, the company has completed over 200 projects and serves clients primarily in the Czech Republic. Their market position is that of a reliable local provider with a strong focus on professionalism and client satisfaction. Technically, the website uses a modern stack including PHP, JavaScript, and the Nette framework, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and published security policies. Privacy compliance is basic, with no explicit privacy or terms of service pages found. Overall, the website is professional, trustworthy, and business-focused, with room for improvement in security and privacy transparency.

C

Contentder Pty Limited

contentder.com

62

Contentder Pty Limited operates a professional website builder platform targeting businesses and individuals seeking to create websites, eCommerce stores, blogs, and news portals. The company positions itself as a flexible and scalable solution provider with additional expert services such as website reviews and reusable dynamic components. The website content is well-structured and professionally presented, supporting a positive market presence primarily in Australia. Technically, the website is built on the SageFrame CMS framework using ASP.NET WebForms technology, with client-side libraries including jQuery 1.9.1 and various plugins. The site integrates Google Analytics and Facebook Pixel for marketing and tracking purposes. Performance and mobile optimization are moderate to good, though some technical debt is noted with the use of older JavaScript libraries. From a security perspective, the site uses HTTPS and SSL certificates, but lacks visible security headers and uses an outdated jQuery version, which could pose risks. Privacy and cookie policies are not explicitly found, indicating potential compliance gaps. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website presence. Overall, the website is functional and credible but would benefit from enhanced security practices, updated technologies, and improved privacy compliance to strengthen trust and reduce risk.

K

Kup-Kytici

kup-kytici.cz

51

Kup-Kytici.cz is an established Czech Republic based e-commerce platform specializing in online flower sales and same-day delivery services. The website offers a wide range of flower bouquets, gift add-ons, and regional delivery options, targeting consumers seeking convenient and reliable flower delivery. The platform is professionally designed with good content quality, clear navigation, and multi-language support. Technically, it leverages modern web technologies including jQuery, Bootstrap, and various analytics and marketing tools, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits domain transparency but does not detract from the overall legitimacy of the business. Contact information and social media presence enhance trust. Overall, the site is a credible and functional online flower delivery service with room for security and compliance enhancements.

U

Ubytování Na Pohodu a Vinařský Dvorek

ubytovaninapohodu.cz

42

Ubytování Na Pohodu a Vinařský Dvorek is a small hospitality business offering accommodation in Milovice, southern Moravia, Czech Republic. The website presents two accommodation options with capacity for up to 32 guests, targeting tourists interested in relaxation, cycling, and local sightseeing. The business appears locally focused with clear contact details and customer testimonials enhancing trust. Technically, the website uses a modern tech stack including jQuery, Bootstrap, Google Analytics, and Google Maps API, hosted by WEDOS. The site is mobile optimized and well structured, providing a good user experience. Security posture is moderate; HTTPS is implied but no security headers or privacy policies are present, indicating room for improvement in compliance and security best practices. Overall, the website is functional and professional but lacks formal privacy and cookie policies, which impacts GDPR compliance. The domain WHOIS data is consistent and transparent, supporting legitimacy.

T

Tělovýchovná jednota Sokol Kobeřice, z. s.

sokolkoberice.cz

58

TJ Sokol Kobeřice is a small local sports club based in Kobeřice u Brna, Czech Republic, primarily focused on organizing football teams across various age groups and leagues. The website serves as a community hub providing news updates, team information, cultural events, and photo galleries. The organization operates as a non-profit entity with a clear local community orientation. Technically, the website uses a custom CMS (H-optimal) and common web technologies such as jQuery, Bootstrap, and Fancybox, hosted likely by Wedos, a Czech hosting provider. The site is moderately optimized for mobile and performance but uses an outdated jQuery version which may pose security risks. Security posture is basic with no visible security headers and no published privacy or cookie policies, indicating compliance gaps with GDPR and related regulations. Contact information is clearly presented, enhancing business credibility. Overall, the website is functional and trustworthy for its intended audience but requires improvements in security and privacy compliance to reduce risk and enhance user trust.

C

Chamonix Hockey Club

chamonixhockeyclub.com

56

Chamonix Hockey Club is a regional ice hockey sports club based in the Chamonix Mont-Blanc valley, France, catering to youth players aged 4 to 20 and adult leisure players. The club organizes training, tournaments, and seasonal events, positioning itself as a key local sports entity in Haute Savoie. The website reflects this focus with detailed match schedules, team information, and event announcements. Technically, the site uses a modern but somewhat dated tech stack including Bootstrap 3, jQuery, and various UI libraries, hosted by OVH sas. It implements HTTPS and cookie consent mechanisms aligned with GDPR requirements, though lacks some advanced security headers and explicit security policies. No contact emails or phone numbers are directly visible, which may impact user engagement and trust. Overall, the site is functional, well-branded, and provides relevant content for its audience.

K

Koregos

koregos.be

56

Koregos.org is a specialized multimedia review and encyclopedia dedicated to the arts and art history, offering rich multimedia content such as videos, audios, and articles. The website targets a diverse audience including experts, amateurs, and juniors, providing free access to scientifically validated and pedagogically oriented content. Technically, the site uses a custom CMS with legacy JavaScript libraries like jQuery 1.7 and multimedia players such as JW Player. The hosting is provided by OVH sas, a reputable provider, and the domain is well-established since 2007. Security posture is moderate with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Overall, the site is professional and trustworthy but would benefit from modernization and improved privacy and security practices.

E

Ekino FR

ekino.fr

33

Ekino FR is a well-established digital transformation group headquartered in France with an international footprint including offices in Singapore, Vietnam, Hong Kong, India, and the USA. The company specializes in consulting, customer experience, data and AI, and engineering services, integrating design and innovation to deliver sustainable digital solutions. Their client portfolio includes major brands such as CANAL+, Renault, Orange, and Bolloré, positioning them as a significant player in the technology consulting market. The website reflects a mature digital presence with comprehensive content, strong branding, and clear navigation, targeting businesses seeking digital transformation services. Technically, the website is built on WordPress with modern SEO and privacy tools such as Yoast SEO and Complianz GDPR plugin. Analytics are handled via Matomo, emphasizing privacy compliance. The site is mobile-optimized and accessible, with good performance indicators. However, some security best practices like security headers and a published security policy are missing, which could be improved to enhance trust and compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear cookie consent mechanisms and detailed privacy and cookie policies. The absence of WHOIS data due to privacy protection slightly reduces trust but is common for commercial entities. Certifications such as ISO 27001 and ISO 14001, along with workplace awards, further reinforce the company's credibility. Overall, Ekino FR presents a professional, trustworthy, and privacy-conscious digital presence suitable for its business domain. Strategic improvements in security transparency and incident response communication are recommended to further strengthen their security posture and stakeholder confidence.

M

Multitude

ferratum.com

63

Multitude is a Nordic-born fintech growth platform operating internationally with a focus on digital financial services. It supports three internal business units specializing in consumer, SME, and wholesale banking. The company aims to be a leading financial ecosystem leveraging two decades of fintech experience. The website is professionally designed, mobile-optimized, and rich in investor relations and ESG content, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and cookie consent mechanisms, indicating good digital maturity. Security posture is strong with HTTPS and tracking opt-in controls, though explicit security policies and incident response contacts are absent. WHOIS data is incomplete, which slightly impacts trust but the overall business credibility remains high. Strategic recommendations include enhancing security transparency and verifying domain registration details.

A

AiVision, s.r.o.

kreativni-tvoreni.net

45

The website kreativni-tvoreni.net is a Czech language platform dedicated to creative crafting tutorials and hobby guides, covering areas such as candle making, soap making, stained glass, resin art, and jewelry crafting. It targets hobbyists and creative individuals seeking detailed instructions and supplies. The site is supported by AiVision, s.r.o., a web design company, and uses the AiPublisher CMS platform. The business model combines content provision with e-commerce through a linked crafting components shop. Technically, the site uses jQuery and jQuery UI libraries with custom CSS for responsive design, offering a moderate performance and basic accessibility. However, the site lacks visible HTTPS enforcement and security headers, which lowers its security posture. No privacy or cookie policies are present, and no contact information is provided, which impacts compliance and business credibility. The domain WHOIS data is unavailable, raising concerns about domain registration legitimacy. Overall, the site is functional and content-rich but requires improvements in security, privacy compliance, and transparency to enhance trust and reduce risk.

Z

O projektu - ZLÍN DESIGN

zlin-design.cz

56

Zlín Design Market is a well-established cultural event platform based in the Czech Republic, focusing on promoting local artists, designers, and craftsmen with an emphasis on sustainability and community engagement. The website serves as an informational and promotional tool for the event, targeting a broad audience including families, students, and professionals interested in art and design. The business model revolves around event organization and cultural promotion, with partnerships from local institutions enhancing its credibility. Technically, the website uses a traditional tech stack including jQuery and Google Analytics, likely running on ExpressionEngine CMS. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. Security posture is basic with HTTPS enabled but missing important security headers and explicit privacy and cookie policies, indicating room for improvement in compliance and protection. From a security perspective, the site shows no signs of blocking or WAF interference, but lacks comprehensive security best practices such as CSP and HSTS headers. The absence of privacy and cookie policies also suggests GDPR compliance gaps. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy measures to improve user trust and regulatory compliance. The domain WHOIS data aligns well with the website's claims, showing consistent registration details and appropriate domain age. No suspicious patterns or privacy protections are present, supporting the legitimacy of the site.

T

TADRA TRADE ON s.r.o.

qitko-hobby.cz

46

Qítko hobby is a Czech Republic based small retail business specializing in beads, jewelry components, and creative crafting supplies. The company also offers creative courses, jewelry repair services, and tool rentals, targeting hobbyists and craft enthusiasts. The website serves as an informational portal with links to an external e-shop and social media presence, positioning itself as a regional player in the hobby retail market. Technically, the site uses legacy JavaScript libraries such as jQuery 1.9.1 and integrates Google Analytics and Facebook SDK for tracking. The website is mobile optimized with a good user experience but lacks modern CMS identification and advanced accessibility features. Security posture is moderate with no visible security headers and use of outdated libraries, but HTTPS is implied though not explicitly confirmed. Privacy compliance is basic with a cookie consent banner and GDPR-related newsletter consent text, but no dedicated privacy or terms pages are found. WHOIS data is unavailable, which raises concerns about domain registration transparency, though the business content and contact information suggest legitimacy. Overall, the site is functional and professional but would benefit from improved security practices and clearer compliance documentation.

Z

ZÁLESÍ a.s.

pohoda-luhacovice.cz

44

Wellness Hotel Pohoda is a medium-sized hospitality business located in Luhačovice, Czech Republic, offering wellness, accommodation, and family-friendly services. The hotel is positioned as a reputable regional player with strong customer ratings and partnerships with local tourism and wellness platforms. Technically, the website uses a modern tech stack including jQuery, Google Analytics, and Facebook Pixel, with a CMS likely provided by Previo. The site is well-structured, mobile-optimized, and SEO-friendly, though some accessibility and security header improvements are possible. Security posture is solid with HTTPS and secure forms, but lacks explicit security headers and a dedicated security policy. Privacy compliance is strong with a comprehensive GDPR privacy policy and cookie consent mechanism. The absence of WHOIS data reduces domain trustworthiness, but the business information and certifications support legitimacy. Overall, the website is professional, trustworthy, and safe for general audiences.

S

SINCLAIR Global Group s.r.o.

sinclair-lighting.cz

55

SINCLAIR Global Group s.r.o. operates the Sinclair Lighting website, specializing in manufacturing and designing advanced LED lighting fixtures and systems. Their offerings target a professional audience including architects, project designers, investors, and installation firms, focusing on energy-efficient, photobiologically safe LED lighting solutions for various sectors such as education, healthcare, industrial, and public lighting. The company emphasizes quality, innovation, and compliance with modern standards including healthy lighting concepts aligned with human biorhythms. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, and Google services such as Tag Manager and Analytics. The site is built on Pagio CMS and demonstrates good mobile responsiveness and user experience. Privacy compliance is robust with a detailed cookie consent mechanism and a comprehensive privacy policy in Czech. However, the absence of WHOIS data and security headers indicates areas for improvement in transparency and security hardening. Security posture is moderate; HTTPS is assumed but no explicit security headers were detected. No incident response or vulnerability disclosure information is provided, which could be a gap in security readiness. The site shows no signs of malicious content or adult material, maintaining a professional and safe environment. Overall, the website presents a credible and professional business front with good privacy practices but would benefit from enhanced security policies, transparency in domain registration, and improved technical security controls to strengthen trust and compliance.

H

HOBBY TIME ON s.r.o.

tvoriva-olomouc.cz

9

Tvořivá Olomouc is a small Czech event organizer specializing in creative and artistic exhibitions and workshops targeted at families and creative enthusiasts. The website promotes upcoming events, showcases partner collaborations, and offers a newsletter subscription to keep visitors informed. The business model revolves around event organization and sales of creative materials, with a focus on local creators and community engagement. Technically, the website uses legacy JavaScript libraries such as jQuery 1.9.1 and integrates Google Analytics and Facebook SDK for tracking and social media presence. The site is moderately optimized for mobile and SEO, with basic accessibility features. Security posture is moderate but could be improved by updating libraries, adding security headers, and ensuring HTTPS enforcement. Privacy compliance is basic, with a cookie consent banner but no dedicated privacy policy page. The absence of WHOIS data raises concerns about domain registration legitimacy, impacting overall trustworthiness. Contact information is limited to an email address consistent with the domain. Overall, the website is functional and professional but would benefit from enhanced security, privacy, and transparency measures.

A

AiVision, s.r.o.

svicky.net

61

Svíčky.net is a Czech Republic based e-commerce retailer specializing in hobby crafting supplies, particularly components for candle and soap making. The website offers a comprehensive catalog of products and detailed category navigation, targeting hobbyists and small-scale crafters. The company behind the site is AiVision, s.r.o., indicating a small-sized business focused on niche retail. The site integrates modern web technologies and marketing tools such as Google Tag Manager and Facebook Pixel, demonstrating a moderate level of digital maturity. Security posture is good with HTTPS enforced and secure login mechanisms, although some HTTP security headers could be improved. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and registration status, which should be further investigated. Overall, the site presents a professional and trustworthy front for its target market.

Steiner & Kovarik is a small family-owned premium chocolate manufacturer based in the Czech Republic, operating since 2005. The company produces high-quality, design-focused chocolate products sold through multiple physical stores in Prague and an online e-shop, with international distribution including prestigious clients such as the Sultan's palace. The website is professionally designed, mobile-optimized, and uses a modern technology stack including jQuery, Google Tag Manager, Facebook Pixel, and Matomo Analytics. Security posture is good with HTTPS and reCAPTCHA implemented, but lacks some security headers and formal privacy and terms policies. The WHOIS data is missing, which raises concerns about domain registration legitimacy despite the professional online presence. Overall, the website is trustworthy and business credible but would benefit from improved transparency and security practices.

D

Digiforum s.r.o.

digiforum.cz

40

Digiforum s.r.o. operates the largest photography trade fair in the Czech Republic, offering workshops, seminars, lectures, and exhibitions focused on digital photography. The website targets photography enthusiasts, professionals, students, and seniors, providing event information and ticket sales. The business model centers on event organization and educational services within the photography media sector. Technically, the website uses a traditional jQuery-based stack with external libraries and Google Fonts, delivering moderate performance and basic mobile optimization. Security posture is moderate with HTTPS assumed but lacking explicit security headers and advanced protections. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. WHOIS data is unavailable, which reduces domain trustworthiness, though the website content appears professional and legitimate. Overall, the site is safe, well-structured, and serves its niche audience effectively.

A

Académie royale de Belgique

academieroyale.be

53

The Académie royale de Belgique is a well-established Belgian royal academy dedicated to the advancement of sciences, arts, letters, and societal studies. The website serves as an institutional portal providing comprehensive information about the academy's history, statutes, members, commissions, publications, and events. It targets academics, researchers, students, and the general public interested in Belgian cultural and scientific heritage. The business model is non-profit, focusing on educational and cultural dissemination supported by government and institutional partnerships. Technically, the website is built on a legacy 4D Web Server CMS platform, utilizing older JavaScript libraries such as jQuery 1.9.1 and Highslide JS. The hosting provider is OVH, a reputable European hosting company. The site demonstrates moderate performance and basic mobile optimization. SEO and accessibility features are present but could be enhanced. Privacy compliance is well addressed with GDPR-aligned cookie consent mechanisms and privacy policies. From a security perspective, the site enforces HTTPS and provides cookie consent controls, but it uses outdated JavaScript libraries with known vulnerabilities and lacks advanced security headers like CSP or HSTS. No incident response or security policy information is publicly available. No exposed sensitive data or malicious content was detected, but updating dependencies and improving security headers are recommended. Overall, the website is professional, trustworthy, and serves its academic audience well. Strategic improvements in technical modernization and security posture would enhance resilience and user trust.

P

Poem / Atelier Jérôme Knebusch

poem-editions.com

51

Poem Editions is a small independent publisher specializing in editions and typefaces, directed by Jérôme Knebusch and based in Frankfurt am Main, Germany. The company offers a curated selection of artworks, typefaces, books, pamphlets, and posters, emphasizing originality and quality. Their business model is focused on direct online sales through their website, targeting design professionals, typographers, artists, and cultural institutions worldwide. The website is professionally designed, mobile-optimized, and provides comprehensive information about ordering, licensing, and privacy policies. Technically, the site uses modern web technologies including Bootstrap, jQuery, Stripe for payments, and Snipcart for ecommerce, ensuring secure transactions and a good user experience. Security posture is solid with HTTPS and secure payment gateways, though some improvements in security headers and cookie consent mechanisms are recommended. The absence of WHOIS data for the domain is a notable concern, impacting domain trustworthiness despite the professional appearance and operation of the website. Overall, the site presents a trustworthy and niche-focused business with room for enhanced transparency and compliance.

S

Sinclair Corporation, Ltd.

sinclair-solutions.com

62

Sinclair Corporation, Ltd. is an established company specializing in air conditioning, heat pumps, and LED lighting products, targeting both B2B partners and end consumers globally. The company emphasizes environmental protection and quality, operating in 46 countries with a broad product portfolio and aftersales support including technical training. The website reflects a professional digital presence with multilingual support and clear navigation. Technically, the site uses modern web technologies such as Bootstrap and jQuery, with Google Tag Manager and Analytics for marketing and tracking. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers are missing and WHOIS data is unavailable, which slightly reduces trust. Overall, the site is well-maintained, GDPR compliant, and provides comprehensive contact information and customer support channels.

R

Recyklohraní, o.p.s.

recyklohrani.cz

51

Recyklohraní, o.p.s. is a Czech non-profit organization dedicated to environmental education and sustainability, primarily targeting schools and educators. The website serves as a platform for educational tasks, recycling campaigns, and year-round eco-games, engaging thousands of registered schools. It maintains a strong partnership ecosystem with recognized environmental organizations, enhancing its credibility and outreach. Technically, the website employs a mature technology stack including jQuery, Bootstrap, FontAwesome, and the Nette Framework. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Hosting and domain registration are consistent and reliable, with Active24 as the registrar and hosting provider. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks visible security headers such as Content-Security-Policy and HSTS, which are recommended to enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies. Overall, the website presents a low-risk profile with a good security posture and strong business credibility. Strategic improvements in security headers and accessibility could further enhance its resilience and user experience.

P

PIPNI s.r.o.

pipni.cz

43

PIPNI s.r.o. is a Czech-based hosting provider established in 2001, offering a comprehensive suite of hosting services including WebHosting, VPS, VirtualBox, and domain registration. The company positions itself as a modern and reliable hosting provider with a strong market presence, hosting over 50,000 domains and more than 1,000 virtual servers. Their business model focuses on providing automated, secure, and scalable hosting solutions primarily targeting individuals and businesses in need of Linux-based hosting platforms. The website is professionally designed, well-structured, and provides clear pricing and service information in Czech with an English language option. Technically, the website employs a variety of JavaScript libraries such as jQuery and Sequence.js to enhance user experience and interactivity. Hosting is self-managed, with a focus on Linux platforms and SSD storage options. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security practices include HTTPS with free SSL certificates and an emphasis on ISO certifications, but lack explicit security headers and cookie consent mechanisms. From a security perspective, the website demonstrates a moderate security posture with no visible vulnerabilities or exposed sensitive data. However, improvements are recommended in implementing security headers, cookie consent, and publishing incident response or vulnerability disclosure policies. The WHOIS data confirms the legitimacy of the domain and company, showing consistent registration details aligned with the business claims. Overall, PIPNI s.r.o. presents a trustworthy and professional hosting service with room for enhancement in privacy compliance and security best practices. Strategic recommendations include adopting comprehensive cookie consent, enhancing security headers, and formalizing vulnerability disclosure processes to strengthen their security and compliance posture.

O

Ollero

ollero.cz

47

Ollero is a Czech-based digital marketing agency specializing in PPC advertising, SEO optimization, social media marketing, and additional marketing services. Established in 2017, the company has positioned itself as a reputable player in the Czech market, holding Google Partner certifications that attest to its expertise and quality of service. The website reflects a professional and comprehensive marketing service provider targeting businesses seeking measurable online marketing results. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Analytics, Facebook Pixel, Hotjar, and Smartlook, indicating a mature digital infrastructure focused on performance and user behavior analysis. Security posture is solid with HTTPS enabled and secure form handling, though there is room for improvement in implementing security headers and explicit incident response policies. Overall, the site is well-optimized for SEO, mobile-friendly, and provides clear contact and business information, supporting a high trustworthiness rating.

The website hotelclass.info serves as an informational portal providing hotel classification details segmented by country via multiple subdomains. The business model appears to be a niche informational service targeting travelers or hospitality professionals seeking classification standards across various European countries. The site is small in scale with basic content quality and moderate branding consistency. Technically, the site employs common open-source libraries such as jQuery, Bootstrap, and TinyMCE, indicating a moderate level of digital maturity but lacks advanced CMS or hosting details. Security posture is weak due to lack of visible HTTPS enforcement, absence of security headers, and no incident response or security policy disclosures. Privacy compliance is minimal with only a basic privacy policy page in German and no cookie consent mechanisms. Overall, the site is accessible and safe but lacks business credibility signals such as contact information or certifications, resulting in a moderate risk profile.

A

American Society for Clinical Pathology

ascp.org

71

The American Society for Clinical Pathology (ASCP) operates a comprehensive and professionally designed website serving over 100,000 pathologists and laboratory professionals. The organization focuses on education, certification, and advocacy to improve patient care within the healthcare sector. Their market position is strong as a leading professional society in clinical pathology, offering a broad range of services including training, credentialing, and member resources. The website content is rich, well-structured, and targeted to healthcare professionals and students, reflecting a mature and established entity. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and multiple analytics and marketing tools such as HubSpot, Microsoft Clarity, and Google Tag Manager. Hosting is on Microsoft Azure, ensuring reliable performance and scalability. The site is mobile-optimized, accessible, and SEO-friendly, contributing to a positive user experience. From a security perspective, the site enforces HTTPS, uses multiple security headers, and does not expose sensitive data. However, explicit security policies and incident response information are not publicly available, indicating room for improvement in transparency and preparedness. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. WHOIS data is privacy protected, which is typical for professional organizations, and does not raise immediate concerns. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for its audience and business model. Strategic recommendations include publishing detailed security and incident response policies, establishing a vulnerability disclosure program, and enhancing transparency around data protection roles to further strengthen trust and compliance.

I

IDIF

idif.cz

32

IDIF is a Czech-based educational institution specializing in digital photography courses and related services. The website offers a variety of photography courses for beginners and advanced users, rekvalifikace (requalification) programs, equipment rentals, and an e-shop. The business targets photography enthusiasts and professionals seeking to improve their skills. The site also publishes a weekly photography magazine called iZIN IDIF. Technically, the website uses a combination of jQuery libraries, Google Analytics, Adsense, and AddThis for social sharing, running on the WMpublic CMS platform. The site is secured with HTTPS and includes a login system for user accounts. However, there is no visible cookie consent mechanism or detailed privacy policy compliance indicators, which may pose GDPR compliance risks. The WHOIS data is unavailable, which reduces trustworthiness from a domain registration perspective. Overall, the website is professionally designed with good content quality and moderate technical implementation, but it could improve its security posture and privacy compliance.

F

Fórum dárců | Czech Donors Forum

darcovskasms.cz

44

The website www.darcovskasms.cz operates as a charitable SMS donation platform managed by the Czech Donors Forum, a non-profit organization. It facilitates one-time and recurring donations via SMS to various social and humanitarian projects in the Czech Republic. The platform is supported by major Czech mobile operators and government entities, indicating a strong market position within the charitable sector. The site provides clear information on donation methods, project categories, and partner organizations, targeting the general public interested in supporting non-profit causes. Technically, the website employs common JavaScript libraries such as jQuery and Slick Carousel, uses HTTPS, and implements a cookie consent mechanism compliant with GDPR principles. The site is mobile-optimized with good navigation and SEO practices. However, it lacks explicit privacy policy and terms of service pages, and no advanced security headers were detected, which are areas for improvement. From a security perspective, the site shows a moderate security posture with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data for the domain reduces trustworthiness and raises concerns about domain registration legitimacy. No incident response or vulnerability disclosure information is provided, which could be enhanced to improve security transparency. Overall, the website is professional, trustworthy, and serves its non-profit mission effectively. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, verifying domain registration details, and establishing a vulnerability disclosure process to strengthen security and compliance posture.

H

Hôpitaux Robert Schuman

acteurdemasante.lu

56

Acteur de ma santé is a health information platform affiliated with the Hôpitaux Robert Schuman hospital group in Luxembourg. It provides a wide range of health-related educational content, including articles, live sessions, and interactive tools, targeting the general public, patients, and healthcare professionals. The website is well-branded, professionally designed, and offers multilingual support primarily in French and German. It leverages WordPress CMS with modern web technologies and SEO best practices to deliver content effectively. Technically, the website uses WordPress 6.8.1, jQuery, Google Tag Manager, and Yoast SEO plugin, hosted on infrastructure associated with EuroDNS. The site demonstrates good mobile optimization and accessibility features, ensuring a positive user experience. Performance is moderate, with asynchronous loading of scripts and optimized images. From a security perspective, the site enforces HTTPS and uses asynchronous tag management. However, it lacks visible security headers and explicit security or incident response policies on the site. Privacy and cookie policies are not found, indicating a gap in GDPR compliance. No contact emails or phone numbers are directly available, which may impact user trust and support accessibility. Overall, the website is a trustworthy and professional health information resource with strong business credibility and technical implementation. To enhance security posture and compliance, it should implement security headers, publish privacy and cookie policies with consent mechanisms, and provide clear contact information for data protection and incident response.

GRAWEB s.r.o. is a small Czech creative advertising agency specializing in marketing, graphic design, printing, and web development services. The company targets local and regional businesses seeking professional advertising and web solutions. Their website demonstrates a mature digital presence with a portfolio of client references and active social media engagement. Technically, the site uses a modern JavaScript stack with analytics and marketing tools integrated, though some security best practices such as security headers and privacy policies are missing. The security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks comprehensive security policies and vulnerability disclosures. The WHOIS data is missing or indicates the domain may be unregistered or expired, which raises concerns about domain legitimacy and trustworthiness. Overall, the website is functional and professional but would benefit from improved compliance and security transparency.