Security Directory

Bayer is a global enterprise operating in healthcare and agriculture sectors, with a long-standing presence in the Czech Republic since 1884. The website reflects a professional corporate identity with consistent branding and a focus on providing information about Bayer's operations in Czechia. The technical infrastructure is modern, leveraging Drupal 11 CMS, Google Tag Manager, and OneTrust for cookie compliance, indicating a mature digital presence. Security posture is strong with HTTPS enforced and clickjacking protections in place, although explicit security policies and incident response contacts are not published on the site. Privacy compliance is supported by cookie consent mechanisms, but a clearly accessible privacy policy page was not identified in the provided content. WHOIS data for the domain is not publicly available, which is unusual for a major corporation but does not detract significantly from the site's legitimacy given the brand recognition and content quality. Overall, the site is well-designed, secure, and compliant with basic privacy standards, suitable for a large multinational corporation.

E

ESO travel

esotravel.cz

47

ESO travel is a Czech travel agency specializing in discovery tours and exotic vacations worldwide, offering trips to over 136 countries. The website is professionally designed, mobile-optimized, and provides extensive travel options including last minute and first moment offers. The technical infrastructure leverages modern JavaScript libraries, Google Tag Manager, and Facebook Pixel for analytics and marketing. Security posture is strong with HTTPS and cookie consent mechanisms, though security headers could be improved. The absence of WHOIS data is a concern for domain legitimacy verification but the website content and business information suggest a legitimate and established travel service provider. Overall, the site is trustworthy and well-positioned in the hospitality sector.

ergoline GmbH is a German-based manufacturer specializing in ergometers and related medical and training equipment. The company offers a broad product portfolio including bicycle ergometers, reclining ergometers, special ergometers, treadmills, and cardiac rehabilitation systems. They emphasize quality and precision, with products developed and produced exclusively in Germany, certified to international standards such as DIN EN ISO 13485. The website targets healthcare providers, rehabilitation centers, and fitness facilities, positioning ergoline as a globally successful player in the ergometer market. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries like jQuery and Google Analytics for user insights, with a good level of mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers are missing and no explicit incident response or vulnerability disclosure information is provided. The WHOIS data is unavailable, which raises some concerns about domain registration legitimacy, but the professional website content and clear contact information mitigate this risk. Overall, the site is trustworthy, professional, and compliant with GDPR and privacy standards.

The website www.mojerevma.cz is a Czech informational portal dedicated to educating the general public about rheumatic diseases. It offers a variety of content including articles, videos, and an online magazine, authored or curated by medical professionals. The site targets individuals seeking knowledge about rheumatology and related health topics. Technically, the site is built on LuckyWonder CMS 3.0 and uses common web technologies such as jQuery, FontAwesome, and Google reCAPTCHA v3 for form protection. The design is professional and mobile-optimized, providing a good user experience with clear navigation. Security posture is moderate with HTTPS enforced and spam protection on forms, but lacks advanced security headers and explicit privacy or cookie policies, which are compliance gaps. The absence of WHOIS data limits domain legitimacy verification, though the website content and partner affiliations suggest a legitimate healthcare informational service. Overall, the site scores moderately well on content quality, technical implementation, and business credibility but needs improvements in privacy compliance and security best practices.

The website 'Nechci bolest | CENTRUM LÉČBY BOLESTI' serves as an informational and educational platform focused on pain treatment for the general public, primarily in the Czech Republic. It provides comprehensive content about different types of pain, treatment options, practical advice, and alternative therapies. The site also offers a contact form for users to ask questions directly to medical professionals and the editorial team. The presence of partner projects and a dedicated magazine subdomain indicates a networked approach to healthcare education. Technically, the site uses a variety of modern web technologies including jQuery, Bootstrap, FontAwesome, Google Analytics, and Google reCAPTCHA v3, built on the LuckyWonder CMS 3.0 platform. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Cookie consent mechanisms are implemented to comply with GDPR requirements. From a security perspective, the site employs reCAPTCHA to protect forms from spam and includes a cookie consent banner. However, no explicit security headers were detected, and WHOIS data for the domain is missing, which raises concerns about domain registration transparency. No critical vulnerabilities or malware indicators were found in the content. The site lacks explicit privacy and security policies, which could be improved to enhance user trust and compliance. Overall, the website is a well-structured, content-rich resource for pain treatment information with moderate technical maturity and security posture. Strategic improvements in domain registration transparency, security headers, and privacy documentation are recommended to strengthen trust and compliance.

P

Vítejte v eshopu Polojasno.cz - Polojasno.cz

polojasno.cz

46

Polojasno.cz is a Czech e-commerce website specializing in health and orthopedic products such as relaxation footwear, bandages, orthoses, bathing covers, creams, and supportive stockings. The site targets consumers interested in wellness and orthopedic aids, offering a range of products with online shopping capabilities. The website demonstrates a consistent brand presence with a professional design and clear navigation, supporting a positive user experience. Technically, the site leverages common web technologies including jQuery, Bootstrap, Google Tag Manager, and Google Analytics, indicating a moderate level of digital maturity. Mobile optimization is good, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and detailed security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and policies suggest legitimate business operations. Overall, the site is safe for general audiences and compliant with GDPR requirements.

M

MS félag Íslands

msfelag.is

63

MS félag Íslands is a non-profit organization dedicated to supporting individuals affected by Multiple Sclerosis in Iceland. The website serves as a comprehensive resource offering educational materials, support services, publications, and community engagement opportunities. It targets patients, families, healthcare professionals, and the Icelandic public interested in MS-related information and support. The organization appears well-established within its niche, providing a broad range of services and information online. Technically, the website is built on the Moya CMS framework and utilizes modern web technologies including jQuery, Google Tag Manager, and Facebook SDK for analytics and social media integration. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site enforces HTTPS and uses asynchronous loading of third-party scripts, which is positive. However, the absence of visible security headers and lack of a published privacy or cookie policy indicate gaps in compliance and security best practices. The missing WHOIS data for the domain reduces trust from a domain registration standpoint, though the website content itself appears legitimate and professional. Overall, the website is a valuable resource for its community but should enhance its privacy disclosures, security headers, and domain registration transparency to improve trust and compliance.

G

GPS Ofa s.r.o.

gps-ofa.cz

43

GPS Ofa s.r.o. is a Czech family-owned company established in 1995 specializing in the distribution and sale of premium healthcare materials and medical devices, including implants and orthopedic products. The company operates both B2B and B2C e-commerce platforms and holds an ISO 13485:2016 certification, underscoring its commitment to quality standards in medical device supply. The website reflects a professional presence with clear product catalogs and partner affiliations with reputable medical brands. Technically, the site employs common JavaScript libraries and frameworks such as jQuery and Bootstrap, providing a moderate performance and good mobile responsiveness. Security-wise, the site implements cookie consent mechanisms and GDPR-compliant privacy policies but lacks visible HTTP security headers and explicit security policies. The absence of WHOIS data for the domain reduces domain registration trust, though the business information and website content appear legitimate and professional. Overall, the site presents a solid digital footprint with room for security and technical enhancements.

T

The National Heritage Institute

npu.cz

45

The National Heritage Institute is a large government organization under the Ministry of Culture of the Czech Republic, managing over a hundred state monuments and providing heritage conservation services. Their website offers information about castles, chateaux, heritage conservation projects, events, and an e-shop for related publications. The site targets the general public, tourists, and professionals interested in cultural heritage. Technically, the website uses modern web technologies including Google Tag Manager, Google Analytics, Leaflet.js for maps, and web fonts from Typekit and Google Fonts. The site is mobile-optimized with good navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are missing. No signs of WAF or content blocking were detected, and the domain registration data is consistent with the organization's government affiliation and long history. Overall, the website is trustworthy, safe, and professionally maintained.

I

Irish Nurses & Midwives Organisation

inmo.ie

63

The Irish Nurses & Midwives Organisation (INMO) is Ireland's largest professional nursing and midwifery trade union and association, serving members across all health service areas. The organization provides tailored support, professional development, employment rights advice, and advocacy services to nurses and midwives. The website reflects a strong market position with comprehensive member resources, events, and campaigns, targeting healthcare professionals in Ireland. Technically, the website is built on the DNN CMS platform with modern JavaScript frameworks including Angular 14 and Alpine.js, supported by jQuery libraries. It integrates Matomo analytics and cookie consent mechanisms, demonstrating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. From a security perspective, the site enforces HTTPS and uses anti-forgery tokens in forms, but lacks explicit security headers and documented incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and GDPR compliant, with clear contact information and social media presence enhancing trust. Overall, the site presents a professional, trustworthy, and well-maintained digital presence for a large healthcare union. The main limitation is the absence of WHOIS data, which restricts domain registration trust verification. Strategic recommendations include enhancing security headers, publishing security policies, and obtaining full WHOIS transparency to improve trust and compliance.

M

MediMerck - portál pro pacienty i lékaře

medimerck.cz

64

The website www.medimerck.cz appears to be a healthcare portal targeting patients and doctors in the Czech Republic. It is built on Adobe Experience Manager CMS and uses common web technologies such as jQuery, Adobe Launch for tag management, and OneTrust for cookie consent. The site content is accessible without any WAF or security blocking mechanisms. However, the WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency and trustworthiness. The website lacks explicit privacy policies, contact information, and security policies, which are important for compliance and user trust in healthcare-related services. The technical infrastructure is moderately modern but could benefit from enhanced security headers and clearer business information.

S

Schindlerova pletárna s. r. o.

elite-cz.cz

46

Schindlerova pletárna s. r. o. operates the ELITE e-commerce website specializing in hosiery products with a rich tradition dating back to 1854 in the Czech Republic. The company targets consumers seeking quality hosiery and related products, offering both retail and wholesale options. The website is professionally designed with clear navigation and a consistent brand presence, supported by active social media channels and comprehensive customer contact information. Technically, the website leverages a mature technology stack including jQuery, Bootstrap 3.3.7, Font Awesome, and integrates Google Tag Manager, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. However, some technical improvements are recommended, such as implementing security headers and enhancing accessibility features. From a security perspective, the site enforces HTTPS and uses consent-based tracking but lacks explicit security policies and incident response information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data is a concern for domain legitimacy, though the website content and business information appear trustworthy and professional. Overall, the website presents a solid business and technical foundation with good privacy compliance and user experience. Strategic improvements in security posture and domain registration transparency would enhance trust and reduce risk.

A

Asociace inovativního farmaceutického průmyslu

pacientskaakademie.cz

51

The website pacientskaakademie.cz represents the Akademie pacientských organizací, a patient organization academy operated by the Asociace inovativního farmaceutického průmyslu in the Czech Republic. The organization focuses on providing educational seminars, mentoring, and support services to patient groups and healthcare stakeholders. The site is well-established with a domain age since 2012, reflecting over a decade of continuous operation and engagement in the healthcare non-profit sector. The content is professionally presented, targeting patient organizations and healthcare professionals with relevant educational materials and event information. Technically, the website uses a custom CMS (Kompletweb) and incorporates modern JavaScript libraries such as jQuery, Swiper, and SimpleLightbox. It employs Google Analytics for traffic analysis and CookieHub for cookie consent management, demonstrating a moderate level of digital maturity. The site is mobile-optimized and SEO-friendly, though accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS with excellent SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. However, security headers are not explicitly detected, and there is no visible security or incident response policy. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is consistent with the organization's claims, showing a legitimate and long-standing domain registration. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements could include enhancing security headers, adding explicit security policies, and improving accessibility to further strengthen the security posture and user experience.

Ambit Media a.s. operates a specialized media portal focused on the publication and subscription management of healthcare-related magazines and educational materials primarily targeting healthcare professionals and readers interested in medical topics. The company, founded in 2016 and based in the Czech Republic, offers subscription services, book sales, and educational events, positioning itself as a niche media publisher within the healthcare sector. The website reflects this focus with content primarily in Czech and includes partner links to related healthcare and medical publication sites. From a technical perspective, the website employs a modern tech stack including jQuery, Bootstrap, Google Fonts, and various UI and carousel libraries. It integrates Google Analytics and Google Tag Manager for user tracking and marketing insights. The site is moderately optimized for performance and mobile responsiveness, with good SEO practices and basic accessibility features. Hosting is managed through REG-ZONER, consistent with the domain registration data. Security posture is moderate; while HTTPS is implied and cookie consent mechanisms are in place, explicit security headers and detailed security policies are absent. No critical vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is basic but present, with a privacy policy, cookie banner, and terms of service clearly linked. Contact information is comprehensive, enhancing business credibility. Overall, the website presents a professional and trustworthy front for Ambit Media a.s., with a solid business model and consistent domain registration data. Strategic improvements in security headers, incident response transparency, and enhanced privacy compliance would further strengthen the site’s security and trustworthiness.

The website www.csgh.info serves as a professional portal for the Czech and Slovak gastroenterology and hepatology community, providing access to journal articles, author submission guidelines, and society information. It is operated by Care Comm s.r.o., a small healthcare-focused company. The platform targets healthcare professionals specialized in gastroenterology and hepatology, offering subscription services and professional society support. The site is indexed in major medical databases, enhancing its credibility within the medical community. Technically, the website uses legacy JavaScript libraries such as jQuery 1.10.2 and jQuery UI, with tracking implemented via Google Tag Manager and Leady. The site shows basic mobile optimization and accessibility features but lacks modern security headers and cookie consent mechanisms. Performance is moderate, and SEO practices are basic. The WHOIS data is unavailable or malformed, limiting domain trust verification. From a security perspective, HTTPS is implied but not explicitly confirmed. The absence of security headers and use of outdated libraries present moderate risks. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent banner. Contact information is limited to a contact page without direct emails or phone numbers on the main page. Overall, the website is professionally designed and trustworthy for its niche audience but would benefit from improved security practices, updated technology stack, and enhanced privacy compliance to strengthen its risk posture and user trust.

Česká a slovenská psychiatrie is a specialized online platform serving as the official website for a Czech and Slovak psychiatry journal. It provides access to current and archived journal issues, announcements, and multimedia content tailored for healthcare professionals in the psychiatry field. The platform leverages the Open Journal Systems CMS, indicating a focus on academic publishing and professional dissemination of medical research. The website targets psychiatrists, researchers, and healthcare professionals primarily in the Czech Republic and Slovakia, offering a niche but important service in the regional healthcare publishing sector. Technically, the website employs a modern but standard technology stack including jQuery, Bootstrap, and FontAwesome, hosted on a Czech hosting provider (cesky-hosting.eu). The site is mobile optimized and accessible, with a moderate performance profile. However, some improvements are needed in security headers and cookie consent mechanisms to enhance compliance and security posture. The domain is very recently registered, which is somewhat inconsistent with the professional and mature content, suggesting a new launch or relaunch. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent banners, which are important for GDPR compliance and security best practices. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of contact emails or phone numbers on the main page reduces direct contact transparency but a contact form is available. No WAF or blocking mechanisms were detected, and the content is safe with no adult or explicit material. Overall, the website presents a professional and trustworthy platform for its niche audience but would benefit from enhanced privacy compliance features and security hardening. The domain's recent registration date should be monitored but does not currently detract significantly from trustworthiness.

K

KISA

kisa.it

50

KISA is a well-established municipal IT service provider based in Saxony, Germany, founded in 2003. The company specializes in providing IT infrastructure, software solutions, data protection, and digitalization services tailored for public administration and municipal clients. Their market position is strong within the regional government sector, supported by a comprehensive service portfolio and positive client testimonials. Technically, the website is built on a modern stack including Bootstrap 4, jQuery, and a custom GeoCMS, with good mobile optimization and accessibility features. Security posture is solid with HTTPS, DNSSEC, and privacy-conscious analytics, though some advanced security headers and explicit security policies are missing. Overall, the site is professional, trustworthy, and compliant with GDPR, featuring clear cookie consent mechanisms. No blocking or WAF interference was detected, allowing full content access and analysis.

E

Endorfy

endorfy.com

65

Endorfy is a technology-focused company specializing in the design, manufacturing, and sale of technology products, including keyboards and accessories. The company positions itself as a niche brand targeting technology enthusiasts and consumers seeking high-quality and innovative products. The website is built on WordPress and employs modern JavaScript libraries and tracking tools, indicating a mature digital infrastructure. The site is hosted with Cloudflare DNS and uses HTTPS, ensuring secure communications. However, the absence of explicit privacy and terms of service pages suggests room for improvement in compliance and transparency. Security posture is generally good with standard best practices observed, but additional security headers and DNSSEC could enhance protection. Overall, the website is professional, well-branded, and trustworthy, though it would benefit from enhanced privacy and security disclosures.

B

BOSP

bosp.sk

50

BOSP is a Slovak-based manufacturer and e-commerce retailer specializing in handcrafted hiking and work footwear, including specialized shoes for police, military, and firefighters. The company emphasizes quality and advanced footwear technologies such as Goretex and Vibram, targeting outdoor enthusiasts and professionals in Slovakia and surrounding regions. The website presents a professional and consistent brand image with rich product content and clear navigation, supporting a positive user experience. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, Facebook SDK, and Hotjar, hosted on Webglobe infrastructure with DNSSEC and HTTPS enabled, indicating a mature digital presence. Security posture is solid with encrypted connections and bot protection via hCaptcha, though improvements are recommended in security headers and formal security policies. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy or terms of service policies. Overall, the site is trustworthy and well-positioned in its niche, though it would benefit from enhanced transparency and security documentation.

Dosli.cz is a Czech educational software provider with over 20 years of experience developing digital teaching tools such as EduBase, DoTest, and EduRibbon. The company targets teachers and schools, offering software solutions to facilitate digital learning and interactive classroom activities, including tablet-based teaching environments. The website reflects a medium-sized, established business with a moderate market position in the Czech education sector. Technically, the site uses legacy JavaScript libraries like jQuery and Google Analytics for tracking, hosted likely by WEDOS, the domain registrar. The website design is good with clear navigation but lacks advanced mobile optimization and accessibility features. Security posture is moderate with HTTPS usage but no visible security headers or advanced protections. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. No contact emails or phone numbers are explicitly provided, which may impact user trust and support accessibility. Overall, the domain registration data supports the legitimacy and long-term operation of the business.

UAB Balticum TV operates as a telecommunications service provider in Lithuania, offering internet and television services to both residential and business customers. The website presents a professional and consistent brand image with clear navigation and relevant content focused on fiber optic internet, wireless internet, mobile internet, and smart TV services. The company maintains a moderate market position within the Lithuanian telecommunications sector. Technically, the website employs a modern technology stack including Google Tag Manager, Google Analytics, Microsoft Clarity, Facebook Pixel, and Tawk.to live chat, built on the Ips Community Suite CMS platform. The site is mobile optimized and performs moderately well with good SEO practices. Security posture is solid with HTTPS enforced and use of reCAPTCHA on forms, though some security headers are missing and no explicit security policy or incident response information is published. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. The absence of WHOIS data limits domain registration verification, but the website content and business presence appear legitimate and trustworthy. Overall, the site scores well in content quality, technical implementation, security, privacy compliance, and business credibility.

S

South East Asia – liaison, z. s.

sea-l.cz

57

South East Asia – liaison, z. s. (SEA-l) is a small non-profit organization established in 2014, dedicated to fostering cultural understanding and integration between the Czech Republic and Vietnam, as well as Southeast Asia more broadly. The organization offers a wide range of services including information dissemination, integration projects, intercultural work, consulting, lectures, exhibitions, translation, cultural events, and language education. Their target audience primarily consists of the Vietnamese community in the Czech Republic and individuals interested in Southeast Asian culture. The website is professionally designed using Umbraco CMS and common front-end technologies, providing good user experience and clear navigation. Contact information is comprehensive and includes multiple communication channels.

K

KERA GREEN s.r.o.

kera.cz

45

KERA GREEN s.r.o. is a well-established Czech manufacturer specializing in gardening substrates, fertilizers, and decorative materials, operating since 1992. The company serves professional gardeners, municipalities, hobby markets, and retail chains primarily in the Czech Republic and Slovakia, with presence in several European markets. Their business model focuses on manufacturing high-quality products with an emphasis on quality control, ecological footprint reduction, and customer flexibility including custom packaging solutions. Technically, the website is built on WordPress 6.1.8 with common plugins such as Yoast SEO, WPML for multilingual support, and Complianz for GDPR cookie consent management. The site uses Google Analytics and Google Tag Manager for tracking and marketing purposes. The site is mobile optimized and has good SEO practices, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain legitimacy verification, which is a concern for trust but the website content and business information appear professional and consistent. Overall, the website presents a professional and trustworthy front for a medium-sized manufacturing business with good privacy compliance and moderate technical maturity. Strategic improvements in security headers, incident response transparency, and domain registration verification are recommended to enhance trust and security posture.

A

AUTO WOZAR s.r.o.

auto-wozar.cz

43

AUTO WOZAR s.r.o. operates as an authorized Peugeot dealership in the Czech Republic, specializing in the sale of new and used Peugeot vehicles, vehicle servicing, and financing options. The website targets both individual consumers and business clients interested in Peugeot cars and related services. The company has been established since 2015 and maintains a consistent brand presence with official Peugeot branding and a clear focus on automotive retail and service. Technically, the website is built on Joomla CMS with Yootheme templates and uses modern frontend frameworks like UIkit and jQuery. Hosting is provided by a Czech hosting provider, ensuring regional consistency. Security posture is moderate with HTTPS usage but lacks visible security headers and formal privacy or cookie policies, indicating areas for compliance improvement. Contact information is clearly presented, enhancing business credibility. No blocking or WAF mechanisms interfere with content access, and no adult or questionable content is present, making the site safe for general audiences.

K

KISA

zv-kisa.de

50

KISA is a municipal IT service provider based in Saxony, Germany, offering a broad portfolio of IT infrastructure management, software solutions for municipal administration, data protection, IT security, and digitalization consulting. The organization targets public sector entities such as counties, cities, and municipalities, positioning itself as a key regional IT partner. The website reflects a professional and consistent brand image with comprehensive service descriptions and client testimonials, indicating a solid market presence. Technically, the website is built on GeoCMS with modern web technologies including jQuery, Bootstrap 4, and Matomo analytics configured for privacy. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. The security posture is good with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with GDPR-aligned cookie consent and a detailed privacy policy. However, the absence of a terms of service page and vulnerability disclosure reduces transparency. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, KISA's website demonstrates a mature digital presence suitable for its public sector audience, with room for improvement in security transparency and direct contact information for incident response.

A

Astronomický ústav Slovenskej akadémie vied

astro.sk

51

Astronomický ústav Slovenskej akadémie vied is a Slovak public research institution specializing in astronomy and astrophysics. It operates under the Slovak Academy of Sciences and provides research, educational programs, and public outreach in the field of astronomy. The website serves as an information portal for researchers, students, and the general public interested in astronomical sciences. It features news, events, scientific publications, and contact information for the institution. The site is bilingual with Slovak as the primary language and English as an alternate. Technically, the website is built on WordPress with modern plugins and libraries such as jQuery and FontAwesome, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks some security headers and incident response contact details. Privacy compliance is partial with a privacy policy page present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and serves its academic and public mission effectively.

Unie ROSKA is a Czech non-profit organization dedicated to supporting patients with multiple sclerosis (MS) and their families. With over 30 years of experience, it provides education, rehabilitation, social services, and advocacy to improve the quality of life and societal integration of people living with MS. The organization maintains partnerships with international MS federations and reputable healthcare and donor entities, reinforcing its established market position in the Czech healthcare non-profit sector. The website reflects a professional and consistent brand image, targeting patients, caregivers, and donors with relevant content and resources. Technically, the website employs a mature technology stack including jQuery, Google Tag Manager, Matomo analytics, and a donation widget from Darujme.cz. It uses the IPO CMS platform and demonstrates good mobile responsiveness and SEO practices. Security posture is solid with HTTPS enforcement and use of reCAPTCHA, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a dedicated privacy policy page. Overall, the website is trustworthy and professionally maintained, with no signs of malicious activity or content safety concerns. The absence of WHOIS registrant data is due to EURid privacy policies and does not detract significantly from legitimacy given the organization's transparency and partner ecosystem. Strategic improvements in privacy documentation, security headers, and incident response disclosures would enhance the security and compliance posture.

U

Unie pacientů ČR

uniepacientu.cz

63

Unie pacientů ČR is a Czech non-profit organization operating a reservation system to facilitate placement of patients and applicants into social and inpatient healthcare facilities. The website serves as an information hub and booking platform, targeting patients and applicants within the Czech Republic. The organization has been established since 2005, supported by partnerships such as the Ministry of Labour and Social Affairs of the Czech Republic. Technically, the website uses a custom stack with jQuery, Google Maps API, and Google Analytics for tracking. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. Security posture is moderate with HTTPS usage but missing key security headers and explicit privacy or cookie policies. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

C

CLA Czech Republic

claczech.cz

67

CLA Czech Republic is a professional services firm providing integrated consulting services including audit, tax advisory, financial and payroll accounting, legal consulting, corporate finance, and IT support. The company positions itself as a reliable partner for successful businesses on an international level, supported by its affiliation with the CLA Global network. The website reflects a mature digital presence with a professional design, multilingual support, and comprehensive service descriptions. Technically, the site is built on WordPress with modern SEO and analytics tools, ensuring good performance and accessibility. Security measures include HTTPS, Google reCAPTCHA, and GDPR-compliant cookie consent, though some security headers could be enhanced. Overall, the website demonstrates a strong security posture with no evident vulnerabilities or exposed sensitive data. The absence of WHOIS data limits domain registration insights, but the professional presentation and network affiliation support legitimacy. Strategic recommendations include improving security headers, maintaining updated software, and publishing explicit security policies to enhance trust and compliance.

C

CLINITEX s.r.o.

clinitex.cz

60

CLINITEX s.r.o. is a Czech company specializing in the production and sale of healthcare textiles and medical clothing, serving medical professionals, healthcare staff, and patients. Established in 2005, the company emphasizes quality, comfort, and modern design in its product offerings. The website reflects a mature business with a clear market position in the healthcare textile sector. Technically, the site uses established JavaScript libraries such as jQuery and Owl Carousel, with a cookie consent mechanism implemented to comply with privacy regulations. The site is hosted under Czech domain registrars and uses HTTPS with good SSL configuration, indicating a secure environment. However, there is room for improvement in security policies and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

D

Diome, s.r.o.

zamestnanivezdravotnictvi.cz

56

Zaměstnanivezdravotnictvi.cz is a Czech Republic-based online employment platform specializing in healthcare sector job listings, news, and related content. Operated by Diome, s.r.o. since 2010, it serves healthcare professionals and institutions by providing detailed job advertisements, newsletters, and informational articles. The platform has a niche market position with over a decade of operation, offering a trusted resource for healthcare employment in the region. Technically, the website uses a custom CMS with a technology stack including jQuery, jQuery UI, FullCalendar, Moment.js, and Google services such as reCAPTCHA and Analytics. While the site is functional and well-structured, it uses an outdated jQuery version and lacks modern security headers, which presents potential security risks. The site employs HTTPS and bot protection but lacks explicit privacy and cookie policies, indicating compliance gaps. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy measures.

B

Brothers Wines s.r.o.

brotherswines.cz

50

Brothers Wines s.r.o. operates a professional e-commerce platform specializing in the sale of wines, including red, white, rosé, and curated wine packages. The website targets wine consumers primarily in Czechia and offers features such as customer accounts, wishlists, and email alerts for stock availability. The company displays multiple wine-related certifications and awards, enhancing its market credibility. Technically, the site is built on the PrestaShop platform, leveraging modern tracking and marketing technologies such as Google Tag Manager, Facebook Pixel, and Smartlook. The website is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers are not detected. Privacy policies and cookie usage statements are comprehensive and GDPR compliant. However, the absence of WHOIS data limits domain registration transparency and trust assessment. Overall, the site is suitable for adult audiences due to alcohol sales and includes age verification. The business is small-sized, focused on retail within the Czech market.

A

Astronomický ústav Slovenskej akadémie vied

ta3.sk

53

Astronomický ústav Slovenskej akadémie vied is a Slovak public research institution specializing in astronomy. It operates under the Slovak Academy of Sciences and provides research, education, and public outreach services. The website serves as an information portal for scientific activities, events, publications, and institutional governance. It targets researchers, students, and the general public interested in astronomy. The institution holds recognized certifications such as HRS4R, indicating commitment to research excellence and human resources standards. Technically, the website is built on WordPress 6.7.1 with common plugins for social media integration and responsive sliders. It uses modern web technologies including jQuery and FontAwesome. The site is mobile-optimized and has good SEO practices, though accessibility features are basic. Performance is moderate with room for improvement. Security posture is solid with HTTPS enforced and no visible sensitive data exposure. However, the site lacks explicit security headers and published security policies or incident response contacts. Privacy compliance is partial; a privacy policy is present but no cookie consent mechanism is detected, which is a GDPR compliance gap. Overall, the website is trustworthy and professionally maintained, reflecting the institution's credibility. Strategic improvements in privacy compliance and security transparency would enhance its security posture and user trust.

T

Tatra banka, a.s.

tatrabanka.sk

54

Tatra banka, a.s. is a leading Slovak financial institution specializing in personal banking services including accounts, loans, payment cards, savings, investments, and insurance. The website reflects a mature digital presence with a strong emphasis on innovation and customer-centric services. It targets Slovak personal banking customers with a comprehensive product portfolio and digital banking capabilities. The bank is part of the Raiffeisen Bank International group, indicating a strong market position and backing. The technical infrastructure is modern, leveraging popular JavaScript libraries, Bootstrap framework, and advanced marketing and analytics tools such as Google Tag Manager and Exponea. The site is mobile optimized and uses secure HTTPS connections with CSRF protections and reCAPTCHA on forms, demonstrating a good security posture. However, explicit security policies and incident response information are not publicly detailed. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations. It integrates multiple contact channels and social media platforms, enhancing customer engagement. No critical vulnerabilities or suspicious patterns were detected, making it a low-risk digital asset for the bank.

V

VUKI a.s.

vuki.sk

41

VUKI a.s. is a Slovak manufacturing and trading company specializing in the production and sale of standard and special cables, electroinsulating varnishes, resins, and winding conductors. The company targets industrial clients requiring high-quality cable products and electroinsulation materials. Their website reflects a professional presence with clear navigation, client zone access, and multilingual support, indicating a mature digital infrastructure. Technically, the site uses modern frontend libraries such as jQuery, Bootstrap, and Revolution Slider, and is likely powered by Laravel on the backend. Security-wise, the site employs HTTPS and CSRF tokens but lacks visible security headers and formal privacy or security policies, representing areas for improvement. Overall, the domain registration aligns well with the business identity, supporting legitimacy and trustworthiness.

I

International Swaps and Derivatives Association, Inc. (ISDA)

swapsinfo.org

59

ISDA SwapsInfo is a specialized financial data platform affiliated with the International Swaps and Derivatives Association, Inc. (ISDA). It provides transparency and detailed analytics on over-the-counter derivatives markets, focusing on interest rate and credit derivatives. The platform offers interactive charts, downloadable data, and weekly market analysis reports, targeting financial professionals, regulators, and market participants. The website content is professionally presented, consistent with ISDA's branding, and leverages authoritative data sources such as DTCC and BIS.

M

Made in Litomyšl

madeinlitomysl.cz

56

Made in Litomyšl is a small community association based in the Czech Republic, focused on promoting local artisans, entrepreneurs, and cultural projects under the 'Made in Litomyšl' brand. The website serves as a platform for networking, project support, and local business promotion, targeting local community members and visitors interested in the region's cultural heritage. The business model is non-profit and community-driven, emphasizing collaboration and cultural identity. Technically, the website is built on the Yii Framework with jQuery and related libraries, integrating Google Analytics and Typekit fonts. The site is hosted likely by Active24, a Czech hosting provider, and uses HTTPS with a moderate performance profile. Mobile optimization and navigation clarity are good, though accessibility and SEO could be improved. From a security perspective, the site uses HTTPS but lacks visible security headers such as CSP or HSTS. No privacy or cookie policies are present, indicating compliance gaps with GDPR. No incident response or vulnerability disclosure information is provided. The site does not expose sensitive data or use vulnerable libraries visibly but would benefit from enhanced security practices. Overall, the website is trustworthy and professional for its community purpose but should improve privacy compliance and security posture to reduce risk and increase user trust. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and establishing a vulnerability disclosure process.

E

Escape Point

escapepoint.cz

46

Escape Point is a Czech Republic based entertainment company specializing in real-life escape games located in Prague. Established in 2017, it offers multiple themed escape rooms with various game modes targeting general audiences including groups and corporate clients for team-building. The website is professionally designed with good content quality, clear navigation, and mobile optimization. Technically, it uses a modern stack including jQuery, Bootstrap, Google Maps API, and integrates marketing and tracking tools such as Google Ads and Facebook Pixel. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA, though it lacks explicit security policies and some security headers. The domain registration data is consistent and supports legitimacy. Overall, the website is trustworthy and well-positioned in its local market.

G

Givt

givt.cz

52

Givt.cz is a Czech non-profit platform established in 2015 that enables users to support over 3000 charitable organizations through their regular online shopping without paying extra. The platform integrates with numerous e-shops, displaying the percentage of purchase value donated to the selected charity. The website is professionally designed with good navigation and mobile optimization, reflecting a mature digital presence. Technically, it employs modern web technologies including Google Tag Manager and Analytics, with secure HTTPS hosting by REG-WEDOS. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response policies are not explicitly published. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie consent. Overall, the site is trustworthy and well-positioned in the non-profit e-commerce donation sector.

C

cyber_Folks S.A.

katoflix.pl

40

KATOFLIX is a Polish niche Christian Video on Demand platform offering a curated selection of faith-based films, documentaries, and series primarily targeting Christian families and individuals seeking spiritually uplifting content. The platform operates on a transactional rental model, providing access to films for limited periods. The website is professionally designed with clear navigation and categorization, supporting a positive user experience. Technically, the site employs modern web technologies including Google Analytics, Facebook Pixel, and responsive design frameworks, hosted by cyber_Folks S.A., a reputable Polish hosting provider. Security posture is adequate with HTTPS enabled and basic cookie consent mechanisms, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy and terms of service are present but basic, with no explicit GDPR compliance statements or dedicated security policies. Overall, the domain registration and hosting align well with the business profile, indicating legitimacy and operational consistency.

W

Webtrh.cz

webtrh.cz

38

Webtrh.cz is a well-established Czech online marketplace and community platform founded in 2006, focused on connecting businesses, freelancers, and entrepreneurs. It offers a broad range of services including business offers and demands, project and domain sales, job listings, forums, contract templates, and a milestone escrow payment system to secure transactions. The platform targets Czech-speaking business users seeking a trusted environment for commercial and professional interactions. Technically, the site is built on WordPress with modern JavaScript libraries and is hosted behind Cloudflare, ensuring good performance and security. Analytics tools like Google Tag Manager and Microsoft Clarity are used for user behavior insights. Security posture is strong with HTTPS, security headers, and escrow protections, though explicit cookie consent and security policies are absent. Overall, the site demonstrates a mature digital presence with a solid reputation in its market niche.

The website akceahr.cz represents the Asociace hotelů a restaurací (AHR), a Czech hospitality association organizing industry events such as conferences and roadshows. The site is well-structured, targeting hospitality professionals and partners, with clear event information and testimonials that reinforce its market position. Technically, the site uses modern JavaScript libraries, Google Analytics for tracking, and a cookie consent manager, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security policies and incident response information. Overall, the site is professional and trustworthy with room for improvement in privacy and security transparency.

C

Centrum poradenství pro rodinné a partnerské vztahy, p. o.

centrum-poradenstvi.cz

57

Centrum poradenství pro rodinné a partnerské vztahy, p. o. is a Czech non-profit social service organization providing specialized counseling and support services related to family and partner relationships, domestic violence intervention, and substitute family care. Established in 2012 and recently merged into Poradenské a krizové centrum, p. o., it serves clients primarily in the Zlín region with a focus on vulnerable populations. The website reflects this mission with clear service descriptions and contact information, though it lacks formal privacy and security policies. Technically, the site uses a modern JavaScript stack including jQuery, Bootstrap, and the Nette framework, hosted by Wedos, and integrates Facebook social media. Performance and mobile optimization are adequate, but accessibility and security headers could be improved. Security posture is moderate with HTTPS enabled and cookie consent implemented, but missing explicit security policies and incident response contacts. Overall, the site is trustworthy and professional, with a strong regional presence and transparent business information.

D

Debant s.r.o.

croatia-hrvatska.eu

9

The website www.croatia-hrvatska.eu operates as a comprehensive online catalogue for private accommodation in Croatia, primarily targeting tourists seeking apartments, rooms, and vacation rentals across various Croatian regions and islands. The business, operated by Debant s.r.o. since 2002, holds a strong market position as one of the largest and most visited Croatian accommodation catalogues in the Czech Republic. It offers direct contact to houseowners, facilitating bookings and providing additional travel-related information such as weather forecasts and maps. The multilingual support enhances its accessibility to a broad European audience. Technically, the website employs a traditional web stack including jQuery, Google Adsense for monetization, Google Tag Manager, and Quantcast for analytics. The site is mobile responsive with good navigation and SEO optimization, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. However, the absence of modern security headers and explicit privacy or cookie policies indicates room for improvement in security and compliance. From a security perspective, the site uses HTTPS, securing data in transit, and employs secure form submission methods. No vulnerabilities or exposed sensitive data were detected in the analysis. The lack of security headers and privacy compliance documentation, however, reduces the overall security posture. The WHOIS data is privacy protected by EURid, which is typical for .eu domains but limits transparency. The domain appears legitimate based on the website's content and business history. Overall, the website presents a trustworthy and professional platform for Croatian accommodation listings but should enhance its privacy and security policies to align with best practices and regulatory requirements. Strategic improvements in security headers, privacy disclosures, and incident response information would strengthen user trust and compliance standing.

D

Debant s.r.o.

namestitev.si

44

The website www.namestitev.si is a well-established online directory specializing in private accommodation listings in Croatia, primarily targeting tourists seeking direct contact with property owners. Operating since 2010 under the company Debant s.r.o., it offers extensive regional coverage including Istria, Dalmatia, Kvarner, and Dubrovnik, with features such as last-minute deals, weather forecasts, and video presentations. The business model focuses on connecting travelers directly with accommodation providers, avoiding intermediaries, which positions it as a niche player in the Croatian hospitality market. Technically, the site employs a custom or unknown CMS with a tech stack including jQuery, Google Analytics, Google Adsense, and Font Awesome. It is hosted by NEOSERV.si, a Slovenian registrar and hosting provider, and uses HTTPS with moderate performance and good mobile optimization. However, the site lacks explicit security headers and cookie consent mechanisms, which are important for compliance and security best practices. From a security perspective, the site benefits from HTTPS and does not expose sensitive data in its HTML content. Nevertheless, the absence of security headers and privacy/cookie policies represents compliance gaps, particularly under GDPR. No WAF or blocking mechanisms are detected, and no vulnerabilities are apparent from the HTML content. The domain WHOIS data is consistent and trustworthy, registered with a reputable provider since 2010. Overall, the website is functional, content-rich, and credible for its business purpose but requires improvements in privacy compliance and security hardening to enhance trust and regulatory adherence.

D

Debant s.r.o.

zakwaterowaniewchorwacji.pl

41

The website zakwaterowaniewchorwacji.pl operates as a comprehensive catalog and booking platform for private accommodation in Croatia, primarily targeting Polish-speaking tourists. It offers a wide range of vacation rentals including apartments, rooms, villas, and houses across multiple Croatian regions. The business is operated by Debant s.r.o., a company with a domain registration dating back to 2006, indicating a stable and established presence in the hospitality sector. The platform integrates multilingual support through related domains and provides practical travel information, last-minute offers, and direct contact with property owners.

D

Debant s.r.o.

alloggioincroazia.it

43

The website www.alloggioincroazia.it operates as a specialized online platform offering a comprehensive catalog of private accommodation listings in Croatia, primarily targeting Italian and European tourists planning vacations in 2026. The platform provides detailed regional information, direct owner contacts for bookings, last-minute offers, weather forecasts, and video presentations, positioning itself as a significant player in the Croatian hospitality market for the Italian-speaking audience. The business is operated by Debant s.r.o., a company with a consistent domain registration and business focus. Technically, the website employs standard web technologies including jQuery, Google Analytics, Google Adsense, Font Awesome, and jQuery UI. The site is mobile-optimized with a responsive design and good navigation clarity, although accessibility features are basic. Performance is moderate, and SEO practices are adequately implemented with proper meta tags and structured data for search engines. From a security perspective, the site uses HTTPS with a good SSL configuration and defers script loading to optimize performance. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, and does not provide visible privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is present, indicating gaps in security transparency and readiness. Overall, the website is trustworthy and professional with a moderate security posture and good business credibility. The absence of privacy and cookie policies and security headers are notable compliance and security gaps. There is no evidence of malicious content or WAF blocking, and the site content is safe for general audiences.

D

Debant s.r.o.

accommodationincroatia.net

47

Accommodationincroatia.net operates as a specialized online platform offering a comprehensive catalogue of private apartments and holiday accommodations across Croatia. The website targets tourists and travelers seeking direct contact with property owners, providing detailed listings, last minute deals, weather updates, and travel information. The business is positioned as a medium-sized hospitality service provider based in the Czech Republic, with multilingual support enhancing its market reach. Technically, the site employs common web technologies such as jQuery, Google Adsense, and Google Tag Manager, ensuring moderate performance and good mobile responsiveness. However, the absence of a detected CMS and limited security headers indicates room for technical improvement. Security-wise, the site benefits from HTTPS but lacks explicit security policies, incident response contacts, and privacy/cookie policies, which are critical for GDPR compliance and user trust. The WHOIS data is missing, which raises concerns about domain legitimacy, though the website content and business information appear professional and consistent. Overall, the site scores moderately on AI evaluation, with recommendations focusing on enhancing privacy compliance, security headers, and domain registration transparency.

D

Debant s.r.o.

hrvatska.sk

46

HRVATSKA.sk is a Slovak-based online travel accommodation platform specializing in affordable apartments and vacation rentals in Croatia. Operating since approximately 2002 under Debant s.r.o., it offers a large catalog of properties with direct owner contacts, avoiding intermediary commissions. The website targets Slovak-speaking tourists seeking budget-friendly lodging options along the Croatian Adriatic coast. The platform provides extensive regional listings, travel information, weather forecasts, and last-minute deals, positioning itself as a leading Slovak resource for Croatian vacations. Technically, the website employs a custom CMS with common web technologies including jQuery, Google Analytics, and Google Adsense for advertising. The site is mobile-optimized with responsive design and good SEO practices. However, it lacks some modern security headers and cookie consent mechanisms, which are recommended for compliance and enhanced security. The site uses HTTPS properly, ensuring encrypted communications. From a security perspective, the site demonstrates a moderate security posture with no visible critical vulnerabilities or exposed sensitive data. The absence of security headers and cookie consent banners are notable gaps. No incident response or security policy information is provided, which could be improved to enhance trust and readiness. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Overall, HRVATSKA.sk is a credible, well-established travel accommodation portal with good content quality and business credibility. Strategic improvements in security headers, privacy compliance, and incident response transparency would strengthen its security posture and regulatory adherence.