Security Directory

3EC International, s.r.o. is an independent accredited certification company based in the Czech Republic, specializing in QHSE system certifications, product certifications, and related training services. Established in 2009, the company operates with experienced auditors and holds accreditation from the Czech Institute for Accreditation, positioning itself as a trusted partner for businesses seeking certification and compliance services. The website reflects a professional and consistent brand image targeting corporate clients in need of certification and training solutions. Technically, the website is built on WordPress using the Divi theme, incorporating standard JavaScript libraries such as jQuery and MediaElement.js. The site is moderately optimized for performance and mobile responsiveness, with basic SEO and accessibility features. Hosting details are not explicitly identified, but the site uses HTTPS ensuring secure communication. From a security perspective, the website enforces HTTPS but lacks several important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible privacy policy, cookie consent mechanism, or incident response contact information, indicating gaps in privacy compliance and security transparency. No WAF or blocking mechanisms were detected, and no vulnerabilities or exposed sensitive data were found in the analyzed content. Overall, the website presents a trustworthy and professional front for the business but would benefit from enhanced privacy compliance, security headers, and incident response disclosures to improve its security posture and regulatory adherence.

S

Saarstahl AG

saarstahl.com

51

Saarstahl AG is a large German steel manufacturing company focused on sustainable steel production and serving diverse industrial sectors including automotive, machinery, energy, and construction. The company emphasizes quality, innovation, and environmental responsibility, supported by certifications such as EcoVadis Platinum and CDP A-List. Their digital presence is built on a modern WordPress platform with performance and SEO optimizations, providing a professional and accessible user experience. Security posture is good with HTTPS and no visible vulnerabilities, though explicit security headers and incident response information are not publicly disclosed. The absence of WHOIS data for the domain is a notable anomaly but does not detract significantly from the overall legitimacy of the business. Strategic recommendations include enhancing security transparency and publishing vulnerability disclosure policies.

G

Goethe University Frankfurt

uni-frankfurt.de

58

Goethe University Frankfurt is a large, well-established public university in Germany offering a broad spectrum of academic faculties and research opportunities. The website serves students, researchers, and international scholars with detailed information about study programs, research projects, campus locations, and support services. The university maintains a strong digital presence with active social media channels and comprehensive contact information. Technically, the site is built on the Fiona 7 CMS by Infopark AG, uses modern JavaScript libraries, and implements a cookie consent mechanism via Klaro. Analytics are handled through Matomo, indicating a focus on privacy-conscious tracking. Security posture is adequate with HTTPS usage and cookie consent, though explicit security headers and incident response policies are not publicly documented. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

W

we make it

we-make.it

48

We make it is a Berlin-based small studio specializing in risography printing, book works, and graphics services, catering primarily to independent publishers and DIY enthusiasts. The company emphasizes collaborative processes and democratization of art and information through self-publishing. The website is built on WordPress with a moderate technical infrastructure including jQuery and Swiper.js, and uses Yoast SEO for optimization. Marketing scripts from sender.net are present for email campaigns. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks advanced security headers and formal privacy or cookie policies. Contact information is available via email and physical address, with active social media presence. The domain is well-established since 2012, consistent with the business history. Overall, the website is professional and trustworthy but could improve privacy compliance and security practices.

S

Staatsbibliothek zu Berlin

staatsbibliothek-berlin.de

52

The Staatsbibliothek zu Berlin is a prominent public research library serving the humanities and social sciences community in Berlin. It operates two main locations and offers extensive collections, digital resources, and cultural programming. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support. Technically, it is built on TYPO3 CMS with modern frontend frameworks and privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and explicit policies are recommended. Overall, the site is trustworthy, well-maintained, and serves its audience effectively.

O

openbiblio.eu

openbiblio.eu

43

Openbiblio.eu is a niche community platform dedicated to promoting openness and collaboration within the library and bibliothekswissenschaft sectors. It hosts various projects including an incentive system for open libraries, webcasts, and a Mastodon social instance, primarily serving library professionals and academics. The platform is operated by Stabi Berlin and leverages WordPress technology hosted by netcup GmbH. Technically, the website is functional with moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is safe, trustworthy, and serves its community purpose effectively but would benefit from enhanced security and compliance measures.

P

Pražská paroplavební společnost a.s.

praguesteamboats.com

59

The Prague Steamboat Company, operating under the domain www.praguesteamboats.com, is a historic transportation service provider specializing in river cruises on the Vltava River in Prague. Founded in 1865, the company offers sightseeing cruises, restaurant cruises, private event hosting, and boat rentals using culturally significant paddle steamers. The website presents a professional and consistent brand image targeting tourists and locals interested in unique river experiences. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and Google Analytics for tracking, with good mobile optimization and SEO practices. However, the absence of explicit privacy and terms of service pages and missing WHOIS registration data for the domain introduce some concerns. Security posture is moderate with cookie consent implemented but lacking visible security headers. Overall, the site is functional, trustworthy, and content-rich but would benefit from enhanced compliance and security measures.

E

ETOA - European Tourism Association

etoa.org

59

ETOA is a well-established European tourism trade association focused on enhancing tourism business opportunities across Europe. It serves a diverse membership base including tourism suppliers, destinations, buyers, and tour guides. The organization offers a range of services such as membership benefits, industry events, advocacy, and sustainability resources, positioning itself as a key player in the European tourism sector. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its B2B audience. Technically, the site is built on WordPress with modern plugins and tracking technologies, ensuring good SEO and user experience across devices. Security posture is strong with HTTPS, security headers, and secure login mechanisms, although there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR adherence. Overall, the website and business present a credible and trustworthy profile with no critical security or content safety concerns.

T

The Conference Forum

patientsaspartnersconference.com

56

Patients as Partners in Clinical Research is a specialized conference platform dedicated to elevating the patient voice in pharmaceutical R&D and clinical trials. The conference is organized by The Conference Forum and features leadership from Pharma, FDA, and patient advocacy groups. The website presents a professional and consistent brand image with a focus on patient-centric drug development and clinical trial innovation. The target audience includes industry professionals, patient advocates, and government representatives. Technically, the site uses modern JavaScript libraries, Bootstrap framework, and integrates tracking and analytics tools such as Google Tag Manager, Microsoft Clarity, and LinkedIn Insight Tag. Hosting is via Amazon AWS Cloudfront CDN, ensuring good performance and availability. Security posture is solid with HTTPS and reCAPTCHA integration, though lacks some security headers and formal privacy/cookie policies. The domain WHOIS data is consistent with the business profile, showing a domain created in 2019 with registrar locks and no privacy protection, indicating transparency and legitimacy.

T

The Conference Forum

partnershipswithsites.com

57

The Partnerships with Sites website represents a professional healthcare conference platform focused on improving clinical trial site partnerships to enhance patient enrollment and retention. The business operates under The Conference Forum brand, organizing summits, webinars, and editorial content targeting pharma, biotech, CROs, and clinical research sites. The site demonstrates moderate digital maturity with use of modern JavaScript libraries, tracking tools, and responsive design. Security posture is adequate with HTTPS and form protections but lacks advanced DNS and HTTP security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent with the business timeline and purpose, indicating legitimacy. Strategic improvements in privacy compliance and security hardening are recommended to enhance trust and regulatory adherence.

T

The Conference Forum

patientsaspartners.org

59

Patients as Partners in Clinical Research and Patient Access is a specialized platform operated by The Conference Forum, focusing on elevating the patient voice within clinical research and healthcare access. The website offers a range of services including conferences, editorial content, podcasts, and webinars aimed at healthcare professionals, patient advocates, and industry stakeholders. The platform positions itself as a niche leader in patient engagement communication within the healthcare sector, with a business model centered on content and event marketing. Founded in 2018, the organization maintains a consistent and professional brand presence with good content quality and user experience. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Slick Carousel, Select2, and integrates multiple analytics and tracking tools such as Google Analytics, Microsoft Clarity, and LinkedIn Insight Tag. Hosting is provided by Bluehost Inc., and the site is secured with HTTPS and Google reCAPTCHA v3 for form protection. Mobile optimization and SEO practices are good, though accessibility features are basic. Performance is moderate, with opportunities for improvement in security headers and DNS security. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect forms, but lacks DNSSEC and important security headers like Content-Security-Policy. There is no published security policy or incident response contact, and no cookie consent mechanism is present, which may impact GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the business age and domain registration details, indicating a legitimate and stable online presence. Overall, the website is professional and trustworthy with moderate security posture and privacy compliance. Strategic improvements in security headers, DNSSEC, and privacy mechanisms would enhance the site's security and compliance standing. The absence of direct contact emails or phone numbers limits immediate user contact options, relying instead on subscription forms. The site is safe for general audiences with no adult or explicit content detected.

T

The Conference Forum

clinicaltrialsoperations.org

61

The Conference Forum operates the clinicaltrialsoperations.org website, providing specialized content including articles, podcasts, webcasts, and events focused on modernizing clinical trial operations and accelerating therapeutic development. The business targets pharmaceutical, biotech, and clinical research professionals, positioning itself as a niche content and event provider within the healthcare sector. The website is relatively new, consistent with the domain registration date in late 2023, and reflects a small but professional operation with a clear focus on clinical trial innovation and partnerships. Technically, the website employs a modern but standard technology stack including jQuery, Bootstrap, Select2, and integrates multiple third-party analytics and tracking services such as Google Analytics, Microsoft Clarity, and LinkedIn Insight. Hosting is via Amazon AWS infrastructure with Cloudfront CDN, ensuring reasonable performance and availability. The site is mobile-optimized with good SEO and accessibility basics, though some improvements could be made in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA v3 to protect forms, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No sensitive data exposure or vulnerabilities were detected in the HTML content. Privacy compliance is partial; a privacy policy is present on the parent domain, but no explicit cookie consent mechanism is implemented, which may pose GDPR compliance risks. Overall, the website presents a trustworthy and professional front for its niche audience, with moderate technical maturity and a solid business foundation. Strategic improvements in security hardening and privacy compliance would enhance its posture and trustworthiness.

T

The Conference Forum

immuno-oncology360.org

60

Immuno-Oncology360.org is a specialized digital platform operated by The Conference Forum, focusing on the Immuno-Oncology and Cell Therapy sector. It offers a comprehensive suite of services including conferences, editorial content, podcasts, webinars, and marketing services tailored to healthcare professionals and biotech industry stakeholders. The platform positions itself as a niche leader in this healthcare segment, supporting community engagement and knowledge sharing. Technically, the website employs a modern technology stack with popular JavaScript libraries and tracking tools, hosted on Amazon AWS infrastructure with Cloudfront CDN, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and client domain protections enabled, but lacks DNSSEC and explicit security headers, and does not publish formal security or incident response policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and content-rich, suitable for its target audience but with room for security and privacy improvements.

T

The Conference Forum

clinicaltrialaccess.com

58

The website clinicaltrialaccess.com is a specialized platform operated by The Conference Forum, focusing on community-based clinical trials. It offers a range of services including events, editorial content, podcasts, webinars, and marketing services aimed at healthcare professionals, clinical trial sites, and pharmaceutical stakeholders. The platform positions itself as a niche content and event marketing provider within the healthcare and clinical research sector. Technically, the site employs a modern tech stack with popular JavaScript libraries and analytics tools, hosted on Amazon AWS infrastructure with CDN support. The design is professional, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the domain registration is consistent with the business launch timeline and shows no suspicious indicators. The site is safe for general audiences and does not contain adult or explicit content.

T

The Conference Forum

cmo360.org

59

The Conference Forum operates the cmo360.org website, a specialized platform supporting biotech Chief Medical Officers and R&D leadership throughout the drug development cycle. The site offers a variety of content including editorial articles, podcasts, webinars, and conferences, targeting biotech professionals and industry leaders. The business model centers on content marketing and event organization within the healthcare and biotech sectors, positioning itself as a niche leader with a focused audience. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and various analytics and tracking tools such as Google Tag Manager, Microsoft Clarity, and LinkedIn Insight. Hosting is via Amazon AWS infrastructure with Cloudfront CDN, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and use of reCAPTCHA, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Contact information is limited to a subscription/contact form without direct emails or phone numbers. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

D

DEAL Konsortium

deal-konsortium.de

57

DEAL Konsortium is a German academic consortium focused on enabling open access publishing through transformative agreements with major scholarly publishers. The website serves librarians, researchers, and administrators by providing information and practical support for the implementation of Projekt DEAL agreements. The consortium is affiliated with prominent German science organizations and led by the German Rectors' Conference, positioning it as a key player in the German academic publishing landscape. Technically, the website is built on Joomla CMS with SP Page Builder and uses modern web technologies including jQuery, Font Awesome, and Awesomplete. It employs Cookiebot for GDPR-compliant cookie consent management and Matomo for privacy-respecting analytics. The site is hosted on infrastructure using domaincontrol.com nameservers, likely GoDaddy, and enforces HTTPS with good SSL configuration. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and consent-based analytics tracking. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly detected and could be improved. No incident response or security policy information is published, which is a gap for transparency and readiness. Overall, the website is professional, well-structured, and compliant with privacy regulations. It lacks explicit contact details and terms of service, which could be enhanced to improve business credibility and user trust. There are no signs of malicious activity or content safety concerns, making it a safe and trustworthy resource for its target audience.

I

International Coalition of Library Consortia (ICOLC)

icolc.net

59

The International Coalition of Library Consortia (ICOLC) operates as an informal global coalition of approximately 200 library consortia, facilitating collaboration and dialogue on library-related issues. The organization targets library consortia and educational institutions worldwide, providing services such as meetings, statements, and reports to support its members. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its audience. Technically, the website is built on Drupal 10 with Bootstrap frameworks, leveraging modern web technologies and responsive design. Hosting and DNS services are provided through Amazon Registrar and AWS Route53, ensuring reliable infrastructure. Google Analytics is used for visitor tracking, although no explicit cookie consent mechanism is present. The site demonstrates good mobile optimization and accessibility features. From a security perspective, the site uses HTTPS and registrar-level domain protections but lacks DNSSEC and security headers, which are recommended for enhanced security. No privacy or cookie policies were found, indicating gaps in compliance with privacy regulations such as GDPR. The absence of a security policy or incident response contact further limits the security posture. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the organization. The overall risk is moderate with recommendations to improve privacy compliance, enable DNSSEC, and implement security best practices. Enhancing transparency and user trust through published policies and consent mechanisms would strengthen the website's credibility and compliance.

H

Haut-Bailly

haut-bailly.com

56

Château Haut-Bailly is a renowned French winery specializing in Grand Cru Classé wines from the Pessac-Léognan appellation. The website showcases a premium brand with a focus on terroir, precision winemaking, and luxury hospitality services including vineyard tours, tastings, guest accommodations, private dining, and event hosting. The digital presence is well-developed with modern technologies such as WordPress CMS, Yoast SEO, and Google Tag Manager, ensuring good performance, SEO, and mobile responsiveness. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies are lacking. The absence of WHOIS registration data is a concern for domain legitimacy but does not detract from the professional presentation and trust signals on the site. Privacy compliance is partial, with cookie consent mechanisms but no clear privacy or cookie policy pages. Overall, the site is a high-quality digital asset for a luxury hospitality and wine business, with room for improvement in transparency and security documentation.

C

CK Kramolín

ck-kramolin.cz

42

CK Kramolín is a small, local cycling club based in the Czech Republic, focused on organizing cycling events and supporting its members. The website provides event news, photos, and contact information primarily in Czech language, targeting cycling enthusiasts in the region. The domain age and WHOIS data align well with the club's history and activities, indicating a legitimate and stable organization. Technically, the website uses Bootstrap and jQuery with a basic but functional design. However, it lacks modern security features such as HTTPS enforcement and security headers, and does not provide privacy or cookie policies, which are important for GDPR compliance. Overall, the site is functional and informative but requires improvements in security and privacy compliance to enhance trust and protect users.

S

Stavby Linka

stavbylinka.cz

39

Stavby Linka is a Czech construction company specializing in new house construction, renovations, and property modifications primarily in the Plzeň region. The company serves both private customers and various known businesses across multiple industries. The website is built on WordPress using Elementor and Yoast SEO, featuring a professional design with good navigation and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks security headers and published security policies. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the website presents a trustworthy small business with room for improvement in privacy and security transparency.

A

Autoslužba TAXI Plzeň

autosluzba-taxi.cz

60

Autoslužba TAXI Plzeň is a small, established taxi service provider operating since 1990 in Plzeň and across the Czech Republic. The company offers a variety of transport services including 24/7 taxi rides, drink service for safe transport after alcohol consumption, courier deliveries, event transportation, minibus services, and car towing. The website presents clear contact information, including phone numbers and an email address, and emphasizes reliability and local presence. The business model focuses on direct customer engagement via phone orders and partnerships with local hotels and businesses. Technically, the website uses common web technologies such as jQuery and Google Tag Manager, and implements a cookie consent banner to comply with basic privacy requirements. However, no dedicated privacy policy or terms of service pages were found, which limits full GDPR compliance. Security posture is moderate with HTTPS enabled but lacking security headers and incident response information. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact details appear consistent and professional. Overall, the site is well designed, mobile-optimized, and trustworthy for its target audience.

A

Autodoprava OMstavby

autodoprava-omstavby.cz

45

Autodoprava OMstavby is a small Czech transportation and construction logistics company based in Plzeň, offering services such as earthworks, demolition, domestic freight transport, vehicle rental with drivers, and material removal. The company emphasizes reliability and has been operating for over two decades, supported by customer testimonials and a clear local presence. The website is built on WordPress using the Divi theme, with standard technologies like jQuery and Google Analytics integrated. It features a GDPR-compliant contact form and cookie consent banner, reflecting basic privacy awareness. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with HTTPS enabled but lacks advanced security headers and incident response information. Overall, the site is functional, professional, and suitable for its target audience but would benefit from enhanced security and transparency measures.

A

ABADIA a.s.

abadia.cz

50

ABADIA a.s. is a Czech manufacturing and trading company specializing in steel constructions, locksmith elements, suspended balconies, and technological equipment. Established in 2006, the company has a medium-sized team and a strong market presence in the Czech Republic and neighboring countries. Their website reflects a professional business with clear service offerings and client testimonials. Technically, the site is built on Drupal CMS, uses modern JavaScript libraries, and integrates Google Analytics and other tracking tools with a compliant cookie consent mechanism. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the website is well-structured, mobile-optimized, and trustworthy, supporting the company's credibility and business goals.

P

PRIMA STRAKONICE akciová společnost

prima-strakonice.cz

59

PRIMA STRAKONICE is a Czech construction company operating since 1993, specializing in general contracting and real estate development in the South Bohemia region. The company offers a wide range of services including construction, carpentry, locksmithing, electrical installations, equipment rental, and transportation. Their website reflects a medium-sized regional business with a professional online presence built on WordPress and Elementor. The site is well-structured, mobile-optimized, and includes essential contact information and cookie consent mechanisms, indicating GDPR compliance. However, the absence of WHOIS domain registration data limits the ability to fully verify the domain's legitimacy and age. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and explicit security policies. Overall, the website presents a trustworthy and professional image suitable for its target audience.

AGRICO s.r.o. is a well-established Czech company specializing in manufacturing and supplying stable technologies and agricultural equipment, including products for pig, poultry, cattle, and horse breeding, as well as fishery supplies and grain storage solutions. The company positions itself as a traditional and trusted supplier with over 35 years of experience, supported by multiple ISO certifications and quality awards. Their business model includes direct sales through an online catalog and e-shop, targeting farmers and agricultural enterprises primarily in the Czech Republic. Technically, the website employs modern frontend technologies such as Bootstrap 5, jQuery, and PhotoSwipe, with responsive design and good SEO practices. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks advanced security headers and explicit incident response information. WHOIS data is missing, which reduces domain trustworthiness, but the website content and certifications support legitimacy. Overall, the site is professional, user-friendly, and trustworthy with room for security improvements.

D

Docker and WordPress

jhmd.cz

56

The website uzkokolejky.cz serves as an informational and e-commerce platform dedicated to the Jindřichohradecké narrow-gauge railways in the Czech Republic. It targets railway enthusiasts and tourists interested in this niche transportation sector. The site uses WordPress with WooCommerce and Amelia Booking plugins, indicating a moderate level of digital maturity with integrated booking and sales capabilities. The technical infrastructure is solid, leveraging modern CMS and SEO tools, hosted likely with Microsoft Online DNS services. Security posture is adequate with HTTPS enabled and GDPR cookie consent implemented, though it lacks published privacy and terms of service policies. Overall, the site is professional and trustworthy but could improve compliance and transparency aspects.

L

LepsiPrace.cz

lepsiprace.cz

44

LepsiPrace.cz is an online job portal primarily targeting job seekers and employers in the Czech Republic. The platform offers job listings and candidate services, leveraging WordPress CMS with specialized job board plugins. The website demonstrates a good level of content quality and user experience, with a professional design and clear navigation. However, the absence of publicly available WHOIS data limits the ability to verify domain legitimacy and registrant details, which impacts overall trust. Technically, the site uses modern web technologies and performance optimization plugins but lacks visible security headers and comprehensive privacy or terms of service documentation. The cookie consent mechanism is present, indicating some level of privacy compliance. Security posture is moderate but could be improved by implementing standard security headers and incident response information. Overall, the site is functional and relevant for its target audience but would benefit from enhanced transparency and security practices.

R

Roman Kreuziger Cycling Academy z.s.

rkca.cz

44

Roman Kreuziger Cycling Academy z.s. is a Czech non-profit organization focused on cycling training and team management. The website serves as a platform to showcase the cycling academy's activities, sponsors, and equipment, targeting cycling enthusiasts and sports professionals. The business operates in the transportation sector with a niche focus on sports cycling. Technically, the website is built on WordPress using Elementor and several plugins for SEO, social media integration, and marketing. The site is hosted by Wedos, a Czech hosting provider, and uses HTTPS with Google Analytics for traffic monitoring. Security posture is moderate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact options are limited to a newsletter subscription form, with no direct emails or phone numbers provided. Overall, the website is professional, well-branded, and trustworthy but could improve compliance and security transparency.

K

K2N way s.r.o.

kubota.cz

62

Kubota.cz represents the Czech Republic branch of Kubota Corporation, a globally recognized manufacturer of agricultural and industrial machinery. The website showcases a comprehensive product range including tractors, lawn mowers, and accessories, targeting agricultural professionals and municipal service providers. The company emphasizes sustainability and environmental responsibility, supported by a long corporate history and recent acquisitions such as Kverneland and Great Plains. Technically, the website employs modern frameworks like Bootstrap and jQuery, with integrated analytics and cookie consent mechanisms, reflecting moderate digital maturity. Security posture is adequate with cookie consent and no visible vulnerabilities, though security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting Kubota's strong market position in the manufacturing sector.

A

AZS 98, s.r.o.

azs98.cz

57

AZS 98, s.r.o. is a Czech Republic-based company specializing in construction waste recycling, demolition, concrete production, and real estate leasing and sales. The company operates multiple subsidiaries and maintains a professional online presence with comprehensive service offerings targeting construction and industrial clients. Their website demonstrates a solid digital infrastructure built on WordPress with Elementor, enhanced by SEO and GDPR compliance plugins. The company actively engages customers through multiple contact channels and social media platforms. Security posture is generally good with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data is a notable gap in domain legitimacy verification but does not detract significantly from the overall business credibility. Strategic recommendations include enhancing security policies, publishing incident response contacts, and implementing security.txt for vulnerability disclosures.

Ú

Údolí Svratky a.s.

udolisvratky.cz

51

Údolí Svratky a.s. operates as a regional tourism promoter focused on the Vysočina region of the Czech Republic, offering a broad range of services including accommodation, dining, sports activities, cultural events, and e-commerce for local edible souvenirs. The company targets tourists and visitors interested in nature, culture, and active leisure in this region. The website is professionally designed with good content quality and clear navigation, supporting the business model effectively. Technically, the site uses modern web technologies including Google Fonts, YouTube API, and Google Maps API, hosted likely by a Czech hosting provider. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks explicit security headers and published security policies. WHOIS data is unavailable, which reduces domain trustworthiness and warrants further verification. Overall, the website presents a trustworthy and professional front for the company with room for security and compliance improvements.

T

Továrna Vír

tovarnavir.cz

53

Továrna Vír is a project focused on the revitalization of the former Rotter factory area in Vír, Czech Republic. The website presents a multifaceted business model combining real estate redevelopment, hospitality, cultural and sporting activities, and sustainable farming. The project targets visitors, local community members, investors, and businesses seeking unique event spaces and coworking facilities. The site is professionally designed with clear navigation and good mobile optimization, reflecting a medium-sized enterprise with a strong local presence. Technically, the website employs modern web technologies including jQuery, Google Fonts, and Google Analytics, hosted likely on a Czech hosting provider with a CMS platform inferred as WebSynergy. Performance and SEO are moderate to good, with room for improvement in accessibility and security headers. The site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent but lacks advanced security headers and explicit incident response or security policy documentation. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain trustworthiness, though the website content and social media presence support legitimacy. Overall, the website scores well in content quality, technical implementation, and privacy compliance but should improve transparency in domain registration and security policies to enhance trust and compliance.

M

Městys Čachrov

cachrov.info

55

Městys Čachrov operates as a small municipal government entity providing administrative and public services to its local citizens and entrepreneurs. The website serves as an official portal for information dissemination, including contact details, official notices, and local governance documentation. The site positions itself as a trusted local authority within the Czech Republic, focusing on transparency and community engagement. Technically, the website employs a mix of legacy and modern web technologies, including jQuery, Google Analytics, and a cookie consent management system. The site is hosted by ŠumavaNet.CZ and demonstrates moderate performance with good mobile optimization and accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy policies, which are areas for improvement. The cookie consent mechanism is robust, indicating awareness of privacy compliance, though GDPR-specific documentation is absent. The WHOIS data is incomplete, limiting domain trust evaluation, but the website content and contact information suggest legitimacy. Overall, the website is functional and professional for its purpose but would benefit from enhanced security practices, clearer privacy documentation, and improved domain registration transparency to strengthen trust and compliance.

Hořákov CZ is a small-scale community website dedicated to the history and current affairs of the village Hořákov in the Czech Republic. The site provides archival materials, historical documents, and local information primarily targeted at residents, natives, and enthusiasts of the region. The website is built on WordPress, utilizing common plugins and a well-known theme, delivering a moderate performance and good mobile responsiveness. The content is rich in historical data, including downloadable PDFs and genealogical information, but lacks modern privacy and security compliance features such as privacy policies and cookie consent mechanisms. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the site is trustworthy and serves its niche audience well but should enhance compliance and security practices to align with best practices.

J

JAVI solutions s. r. o.

javi.sk

42

JAVI solutions s. r. o. is a Slovakia-based technology company specializing in comprehensive information system solutions including business intelligence, internet solutions, software development, and ongoing support. The company targets businesses seeking integrated and customized IT solutions to optimize their internal processes and customer reach. Their market position is that of a niche provider with a focus on tailored software and system integration services. Technically, the website is built on a modern stack including Debian, MySQL, PHP, Java, and front-end technologies like Bootstrap and jQuery. The site uses a custom CMS (BiS/WEB 1.0.2 rc) and integrates Google Analytics and Tag Manager for tracking. Mobile optimization and SEO practices are well implemented, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA v2 to protect forms. However, it lacks explicit security headers and does not publish a security policy or incident response contacts. Cookie consent is implemented, but privacy policy and terms of service are missing, which impacts compliance and user trust. Overall, the website is professional and trustworthy with a good security baseline but would benefit from enhanced privacy and security disclosures. The domain registration data aligns well with the company identity, supporting legitimacy. Strategic improvements in security headers, privacy documentation, and incident response readiness are recommended to strengthen the security posture and compliance.

K

ČKA - online výsledky

kuzelky.com

45

The website kuzelky.com serves as an online portal for bowling (kuzelky) results and league information primarily targeting the Czech bowling community. It provides schedules, live results, club contacts, and administrative login capabilities. The site is niche-focused, catering to players, clubs, and fans within the Czech Republic, and is supported by a domain registered since 2007, indicating a stable presence in its market segment. The business model revolves around providing timely sports results and league management information rather than commercial transactions or e-commerce. Technically, the site employs traditional web technologies including XHTML 1.0 Transitional, JavaScript with jQuery, and SweetAlert2 for UI dialogs. It uses XMLHttpRequest for dynamic content loading and is hosted via the registrar Gransy, s.r.o. The site shows moderate performance and basic mobile optimization but lacks modern CMS or frameworks. SEO and accessibility features are minimal, and the design is functional but basic. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers such as Content Security Policy or HSTS. The login form does not show advanced protections like CAPTCHA or anti-CSRF tokens. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. The WHOIS data is consistent with the website’s Czech focus and shows no suspicious patterns. Overall, the site is moderately trustworthy and functional for its purpose but requires improvements in privacy compliance, security hardening, and modernization of technical infrastructure to enhance user trust and regulatory adherence.

Česká Asociace Univerzitního Sportu (ČAUS) is a Czech non-profit organization dedicated to promoting university sports and organizing academic sports competitions within the Czech Republic. The website serves as the official platform for disseminating information about competitions, events, and representation of Czech students in sports at various levels. The organization has a well-established presence since 2006 and maintains partnerships with national and international sports bodies. The site targets students, university sports participants, and organizers within the academic sports community.

I

International Bowling Federation

bowling.sport

52

The International Bowling Federation (IBF) operates as the global governing body for the sport of bowling, providing governance, event management, anti-doping education, and resources for athletes and member federations worldwide. The website serves as a central hub for information on upcoming championships, anti-doping guidelines, and organizational structure, targeting athletes, sports officials, and bowling enthusiasts. The business model is typical of a non-profit sports federation, focusing on community engagement and sport development. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and several plugins for event management and media handling. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO could be improved. Hosting details are not explicit, but DNS uses Microsoft Online name servers. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy linked externally and no explicit GDPR compliance statements. Contact information is limited to email and physical address, with no phone numbers or incident response contacts. Overall, the website is professional, trustworthy, and well-positioned within its niche. Strategic improvements in security headers, privacy transparency, and accessibility would enhance its posture and compliance.

Č

Česká bowlingová asociace

czechbowling.cz

54

Česká bowlingová asociace (ČBA) is the national amateur bowling association in the Czech Republic, representing bowling players of all skill levels and ages. It serves as the official representative of the Czech Republic in European and international bowling federations and organizes national competitions, leagues, and player registrations. The website provides comprehensive information about bowling events, rankings, news, and media content targeted at the Czech bowling community. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates analytics tools such as Matomo and Google Tag Manager. The site is mobile-optimized with good navigation and content quality. Security posture is solid with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable, which slightly impacts trust but the professional content and official partnerships support legitimacy. Overall, the site is a well-maintained digital presence for the Czech bowling community with room for improvement in privacy compliance and security headers.

Z

Zako Slovakia, s. r. o.

zakobowling.com

45

Zako Slovakia, s. r. o. operates the website zakobowling.com, providing services and products related to the realization, reconstruction, and maintenance of skittles and bowling lanes. The company also offers an e-commerce platform selling spare parts and accessories for these sports. The business targets sports centers and enthusiasts primarily in Slovakia, positioning itself as a niche regional provider with a small business scale. The website is multilingual, supporting Slovak and several other European languages, enhancing accessibility for a broader audience. Technically, the website is built on WordPress, utilizing common plugins such as Yoast SEO for search optimization, TranslatePress for multilingual support, and Moove GDPR Cookie Compliance for privacy management. Hosting is provided by Websupport, indicated by the domain's nameservers. The site demonstrates moderate performance and basic mobile optimization, with a functional but basic design and navigation structure. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, aligning with GDPR requirements. However, it lacks DNSSEC, security headers, and published security or incident response policies, which are areas for improvement. No critical vulnerabilities or malicious content were detected. The domain registration is consistent and legitimate, though the domain is relatively new compared to the website's content history, suggesting a possible domain migration or re-registration. Overall, the website presents a functional and moderately secure platform for its business operations but would benefit from enhanced privacy disclosures, security hardening, and more comprehensive contact information to improve trust and compliance.

S

Seychellesvillas.org

seychellesvillas.org

69

Seychellesvillas.org operates as a specialized online platform offering luxury beachfront villa rentals primarily located in Beau Vallon Beach, Seychelles. The website targets tourists seeking premium holiday accommodations, providing a streamlined booking experience with a 10% discount incentive and best price guarantee. The business model centers on direct villa rental bookings, supported by customer service contact points and social media engagement. Technically, the website employs a modern JavaScript stack including Google Analytics, Facebook Pixel, Hotjar, and lazy loading techniques to optimize user experience and performance. The site is mobile-optimized and includes accessibility considerations, though some improvements could be made in security headers and explicit policy disclosures. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security policies or vulnerability disclosure mechanisms. WHOIS data is unavailable due to query failure or privacy protection, but the domain appears legitimate based on website content and technical setup. Overall, the site presents a professional, trustworthy front for a small hospitality business with room for enhanced security and compliance documentation.

O

Ocean View Villa & Beach View Villa Beau Vallon

beauvallonvillas.com

69

Ocean View Villa & Beach View Villa Beau Vallon operates as a small hospitality business offering beachfront villa accommodations on Mahé Island, Seychelles. The website presents a professional and visually appealing platform targeting tourists seeking direct beach access and ocean views. The business model focuses on direct bookings with special offers and additional services such as transfers and car rentals. The company maintains an active social media presence and provides clear contact information, enhancing customer trust and engagement. Technically, the website employs modern JavaScript libraries and tracking tools, ensuring a smooth user experience with good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS registration data is a concern for domain legitimacy but does not detract from the overall professionalism of the site. Strategic recommendations include verifying domain registration status and enhancing security headers to further strengthen trust and compliance.

V

VallonEnd Beachfront Villa

vallonend.com

64

VallonEnd Beachfront Villa is a small hospitality business offering three private self-catered apartments in Seychelles, targeting travelers seeking beachfront accommodation with ocean views and snorkeling opportunities. The website is professionally designed with clear navigation, good content quality, and consistent branding. It leverages modern web technologies including lazy loading, carousels, and tracking tools such as Google Analytics and Facebook Pixel. Privacy and cookie policies are implemented with GDPR compliance and consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are absent. Overall, the website presents a trustworthy and professional online presence suitable for its business model.

C

Chateau Elysium

chateau-elysium.com

67

Chateau Elysium is a boutique hospitality business offering luxury guesthouse rooms and private villas directly on Beau Vallon Beach in Seychelles. The website presents a professional and visually appealing digital presence with detailed descriptions of accommodations, amenities, and services. The business targets tourists seeking upscale beachfront lodging with private pools and Creole cuisine. Technically, the site employs modern JavaScript libraries and tracking tools, ensuring a responsive and interactive user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response information are absent. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to enhance trust. Overall, the site is well-designed, GDPR compliant, and provides clear contact channels, supporting a positive user and business credibility profile.

J

Jánošíkov golf

janosikovgolf.sk

62

Jánošíkov golf is a small hospitality business located in Slovakia offering adventure golf experiences targeted at families, corporate groups, and couples. The website presents a professional and consistent brand image with clear navigation and relevant content describing their services. Technically, the site uses modern JavaScript libraries and Google services for analytics and user interaction, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and reCAPTCHA integration, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with GDPR-aligned cookie and privacy policies. Overall, the domain registration and business information are consistent and trustworthy, supporting a positive legitimacy assessment.

J

Jánošíkov wellness Zázrivá

janosikovwellness.sk

64

Jánošíkov wellness is a small hospitality business operating a wellness center located in the Malá Fatra region of Slovakia. The company offers a variety of relaxation and wellness services including saunas, private baths, and wellness packages, targeting both local and international tourists seeking quality wellness experiences in a family-friendly environment. The website is professionally designed with multilingual support and clear navigation, reflecting a good level of digital maturity. Technically, the site uses modern JavaScript libraries and Google services for analytics and security, ensuring a moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers could be added to enhance protection. Privacy compliance is addressed with a GDPR-compliant privacy and cookie policy and a consent mechanism. Overall, the business information is transparent and consistent with domain registration data, supporting a high legitimacy score. No critical security or compliance issues were detected.

S

SOHO1 Wellness

soho1wellness.sk

63

SOHO1 Wellness is a small hospitality business located in Žilina, Slovakia, specializing in modern wellness and spa services including sauna access, massages, cryotherapy, and private whirlpool baths. The website presents a professional and user-friendly interface with clear navigation and comprehensive service descriptions, targeting general wellness customers seeking relaxation and rejuvenation. Technically, the site employs modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers are lacking and could be improved. Privacy compliance is strong with a dedicated GDPR policy and cookie management. Overall, the domain registration aligns well with the business claims, supporting legitimacy and trustworthiness.

W

Wellness Holešky

wellnessholesky.cz

65

Wellness Holešky is a small hospitality business located in Prague, Czech Republic, specializing in wellness and relaxation services including a rustic Finnish sauna, massages, private baths, and wellness stay packages. The website presents a professional and well-structured digital presence with clear navigation, rich content, and compliance with GDPR and cookie consent regulations. The technical infrastructure leverages modern JavaScript libraries and tracking tools, ensuring a good user experience and moderate performance. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers and incident response information suggests room for improvement. The lack of WHOIS data is a notable gap that impacts domain trustworthiness, but the overall website and business information appear legitimate and trustworthy.

A

Absolutum Wellness Hotel

absolutumhotel.cz

56

Absolutum Wellness Hotel is a boutique wellness hotel located in Prague 7, offering modern accommodation, a wellness center, a stylish restaurant, and conference facilities. The hotel targets tourists and business travelers seeking comfort and wellness services in a convenient location near public transport. The website reflects a medium-sized hospitality business with a professional online presence and clear service offerings. Technically, the site employs modern web technologies including Google reCAPTCHA, analytics, and marketing pixels, ensuring a secure and user-friendly experience. Security posture is strong with HTTPS and form protection, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with comprehensive GDPR and cookie policies. Overall, the website is trustworthy and professionally maintained, though WHOIS data is unavailable, likely due to privacy protection.