Security Directory

M

Momade BV

momadecupcakes.be

58

Momade BV operates a Belgian-based specialty bakery and confectionery business focusing on cupcakes, macarons, patisserie, and chocolates. The company serves both retail customers through physical stores and an online shop, and also offers event catering services. The website reflects a well-established small business with a domain age of over a decade, consistent with its market presence. The target audience is general consumers interested in quality bakery products with a local flavor. Technically, the website is built on WordPress with WooCommerce, leveraging common web technologies such as jQuery, Google Fonts, and FontAwesome. It integrates analytics tools including Matomo and Facebook Pixel for marketing and user behavior tracking. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS with good SSL configuration and security headers. Forms are protected with nonce tokens, and no sensitive data is exposed in the HTML. However, the absence of a cookie consent mechanism and published security or incident response policies indicates room for improvement in privacy compliance and transparency. Overall, the website is professional, trustworthy, and secure for its business scope. Strategic enhancements in privacy compliance and security policy publication would further strengthen its posture and user trust.

M

Miss Sophie

miss-sophie.be

60

Miss Sophie is a small Belgian e-commerce business specializing in high-quality sandwiches, salads, and homemade desserts, with over 20 years of experience in product selection. The company targets business customers and individuals seeking quality lunch options, offering assortments for business lunches, local delivery, and pickup services. The website is built on the Shopify platform, leveraging modern web technologies and third-party apps to enhance user experience and operational efficiency. Technically, the site is well-structured, mobile-optimized, and integrates lazy loading and analytics tools effectively. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are lacking. WHOIS data is restricted, which limits domain trust verification, but the professional presentation and business consistency support legitimacy. Strategic improvements include adding comprehensive privacy and cookie policies, enhancing security headers, and providing clear contact information for incident response.

L

Love Ciabatta

love-ciabatta.be

71

Love Ciabatta is a small hospitality business operating a sandwich shop, bakery, and breakfast restaurant located in Brussels, Belgium. Established in 2017, it offers delivery, takeaway, and reservation services, targeting local residents and visitors. The website reflects a consistent brand image with good content quality and clear navigation. Technically, it is built on a modern React framework hosted on OVH, leveraging CentralApp's SaaS platform, and includes analytics via Pirsch. Security posture is good with HTTPS and basic security practices, though some HTTP headers could be improved. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained.

L

Laurent Gerbaud Chocolatier

chocolatsgerbaud.be

39

Laurent Gerbaud Chocolatier is an artisan chocolate maker and ice-cream producer based in Brussels, recognized as the best chocolatier in Brussels in 2021 by Gault&Millau. The company offers a range of unique chocolates combining sweet and savory ingredients, spices, and exotic fruits, targeting gourmet consumers and chocolate enthusiasts. Their business model includes retail shops, workshops, corporate gifting, and an online shop hosted on a dedicated subdomain. The website is built on WordPress with modern plugins and provides a professional user experience with good mobile optimization and SEO. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy or cookie policies, indicating compliance gaps. WHOIS data is restricted, limiting domain transparency, but the website content and branding suggest a legitimate and established business. Strategic improvements in privacy compliance, security headers, and incident response information are recommended to enhance trust and security maturity.

La Pharmacie Anglaise is a small hospitality business operating a cocktail bar located in Brussels, Belgium. The website serves primarily as an informational portal providing contact details, social media links, and a downloadable cocktail menu. The business targets an adult audience, as indicated by the age restriction notice on the site. The market position appears local and niche, focusing on cocktail enthusiasts and nightlife patrons. The business has been established since 2015, consistent with the domain registration data. Technically, the website is simple and built with basic HTML and CSS, utilizing Google Fonts for typography. It is hosted by OVH sas, a reputable hosting provider. The site shows basic mobile optimization and accessibility but lacks advanced technical features or CMS integration. Performance is moderate given the minimal content and resources. From a security perspective, the site lacks critical security headers and does not enable DNSSEC. There is no evidence of HTTPS enforcement or advanced security policies. Privacy and cookie policies are absent, indicating potential compliance gaps with GDPR and related regulations. No forms or data collection mechanisms are present, reducing immediate data protection risks but also limiting user engagement. Overall, the website is functional for its purpose but requires improvements in security posture and privacy compliance to enhance trustworthiness and regulatory adherence. Strategic recommendations include implementing HTTPS and security headers, publishing privacy and cookie policies, and considering vulnerability disclosure mechanisms.

F

Foodmaker

foodmaker.be

52

Foodmaker is a Belgium-based healthy food company established in 2014, offering ready-made meals, meal boxes, healthy food bars in retail stores, restaurants, and a lifestyle brand called FDMKR. The company targets health-conscious consumers seeking convenient and nutritious food options. The website demonstrates a moderate to good level of digital maturity, employing modern web technologies such as Bootstrap, jQuery, and multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and Hotjar. Multilingual support is provided via Weglot. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are absent. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the website is professional, user-friendly, and trustworthy, with room for improvement in security transparency and accessibility.

C

Château Moderne

chateau-moderne.be

69

Château Moderne is a recently established hospitality business located in Brussels, Belgium, offering a coffee shop, eatery, cafeteria, and cocktail bar experience. The venue emphasizes social dining with a terrace overlooking the city and Royal Palace, catering to a general audience seeking quality food and beverages. The business operates with a modern digital presence, including online reservations and event hosting capabilities. Technically, the website is built on a React framework hosted by OVH and utilizes CentralApp Studio platform services, integrating analytics and marketing tools such as Google Tag Manager and Pirsch Analytics. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

C

Café Boudin

cafeboudin.be

71

Café Boudin is a specialty coffee shop and restaurant located in central Brussels, offering a variety of freshly roasted coffees, home-made pastries, and vegetarian-friendly menus. The business targets coffee enthusiasts and customers seeking quality, inclusive food options such as vegan and gluten-free dishes. The website is built on a modern React-based platform provided by CentralApp Studio and hosted via OVH, featuring good design quality and user experience. Security posture is solid with HTTPS and reCAPTCHA implemented, though some security headers and explicit policies could be improved. Privacy and cookie policies are present and GDPR compliant. Overall, the website reflects a trustworthy small hospitality business with a clear market position and professional online presence.

T

The International Retinal Laser Society

retinallasersociety.com

63

The International Retinal Laser Society operates the LIGHT Annual Meeting, a specialized scientific conference focused on retinal laser therapy advancements. The organization aims to reduce visual disability globally by fostering collaboration among leading researchers and clinicians. The website presents detailed program information, speaker lists, and submission forms, targeting healthcare professionals and researchers in ophthalmology. Technically, the site is built on the Multiscreensite CMS platform, leveraging modern JavaScript libraries and analytics tools, with good mobile optimization and performance. Security posture is solid with HTTPS and CAPTCHA protections, but lacks some security headers and formal policies. The absence of WHOIS data for the domain is a notable concern, though the professional content and contact details support legitimacy. Privacy and cookie policies are missing, indicating compliance gaps. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

E

European Society of Retina Specialists

euretina.org

60

EURETINA is a well-established European professional society dedicated to retina specialists, providing educational resources, events, and membership services. The website reflects a mature digital presence with a focus on healthcare professionals and researchers in ophthalmology. The technical infrastructure is based on WordPress with modern plugins and integrations, supported by Cloudflare DNS and secure HTTPS connections. Security posture is solid with room for improvement in DNS security and privacy compliance, particularly regarding cookie consent. Overall, the site is professional, trustworthy, and serves its target audience effectively.

E

ESCRS

escrs.org

69

ESCRS is a well-established international professional society focused on ophthalmology, specifically intraocular lens implantation and refractive surgery. Founded in 2000 and headquartered in Ireland, it serves over 7,000 members worldwide, providing education, research funding, events, and publications. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. Technically, the site leverages modern frameworks such as Bootstrap and Umbraco CMS, integrates advanced analytics and monitoring tools including Google Analytics and Microsoft Application Insights, and employs Cloudflare for security and performance. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though DNSSEC is not enabled. Privacy compliance is robust with clear policies and consent management. Overall, the site demonstrates high business credibility and trustworthiness.

T

The American Society of Retina Specialists

asrs.org

60

The American Society of Retina Specialists (ASRS) operates as a professional medical society dedicated to retina specialists and patient education in the field of ophthalmology. The website serves dual audiences: retina specialists/members and patients/the public, providing clinical resources, annual meetings, publications, and career services. The organization is positioned as a reputable and established entity within the healthcare sector, specifically ophthalmology. The site is well-branded and professionally maintained, reflecting a medium-sized organization based in the United States. Technically, the website employs legacy JavaScript libraries such as jQuery 1.7.2 and jQuery UI 1.8.16, alongside modern tracking tools including Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized with good SEO practices and basic accessibility features. However, some modernization opportunities exist, particularly updating legacy libraries and enhancing accessibility. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a cookie consent mechanism, which are important for GDPR compliance and overall security posture. No vulnerability disclosure or incident response policies are published, which could be improved to enhance trust and compliance. Overall, the website is trustworthy and professional with a solid business credibility score. Strategic recommendations include implementing security headers, updating JavaScript libraries, adding cookie consent, and publishing security policies to improve compliance and security maturity.

The American Society of Cataract and Refractive Surgery (ASCRS) operates a comprehensive and professionally designed website serving anterior segment surgeons and eye care professionals. The organization provides extensive educational resources, advocacy, and philanthropic initiatives, positioning itself as the largest U.S. membership society in its field. The website demonstrates a mature digital presence with integrated tools such as CME activities, clinical education, and practice management resources. Technically, the site leverages modern technologies including ASP.NET, Sitecore CMS, and cloud hosting via Microsoft Azure, supported by robust analytics and marketing integrations. Security posture is strong with HTTPS enforcement, bot management, and detailed cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site reflects a trustworthy and authoritative entity in the healthcare non-profit sector.

The domain aao.org is registered to the American Academy of Ophthalmology, a well-established professional healthcare organization in the United States. However, the website content is currently inaccessible due to an AWS WAF human verification CAPTCHA challenge, preventing direct analysis of the site's content, policies, and contact information. The domain registration data is consistent and indicates a legitimate entity with a long operational history since 1995. The technical infrastructure includes AWS hosting and WAF protection, but no further details on CMS or frameworks are available due to content blocking. Security posture cannot be fully assessed, but the presence of a WAF indicates some level of protection. Privacy and compliance policies are not accessible in the provided content. Overall, the site appears legitimate but currently inaccessible for detailed security and compliance evaluation.

N

Navu.co

navu.co

62

Navu.co is a technology company founded in 2023 that provides an AI-powered companion solution specifically designed for B2B websites. Their core offering includes an AI Sidebar that guides visitors, visitor journey analytics, and detailed visitor insights to help marketers improve engagement and conversions without needing to overhaul existing websites. The company targets B2B marketers and marketing agencies, offering a free tier for agencies to encourage adoption. Technically, the website is built on WordPress with a modern theme and SEO plugins, integrating third-party marketing and analytics tools such as HubSpot and Google Analytics. The site is mobile optimized and well structured, providing a good user experience. Security-wise, the site uses HTTPS with domain registration protections but lacks some advanced security headers and explicit cookie consent mechanisms. No direct company contact emails or phone numbers are published, but a physical address in Palo Alto, CA is provided. Overall, the website is professional, trustworthy, and focused on delivering AI-driven marketing enhancements for B2B clients.

L

LAB Digital Creative

labdigitalcreative.com

59

LAB Digital Creative is a specialized digital marketing and web design agency based in Memphis, Tennessee. Founded in 2019, the company offers tailored services including website design, SEO, digital marketing, and brand development to local and regional businesses. Their market position is strong within the Memphis area, supported by a portfolio of notable clients and positive testimonials. The website reflects a professional and modern digital presence with excellent design and user experience. Technically, the site is built on WordPress with the Divi theme, leveraging modern analytics and marketing tools such as Google Analytics, Heap Analytics, and Google Tag Manager. Security posture is robust with HTTPS and security headers properly configured, though privacy and cookie policies are lacking, representing a compliance gap. Overall, the site demonstrates a mature digital infrastructure and credible business operations.

W

Writesonic

botsonic.com

62

Botsonic.com is a professional website offering AI chatbot solutions for businesses, operated by Writesonic, a technology company founded in 2021 in San Francisco. The platform provides no-code AI chatbot building tools that integrate with multiple channels and support over 50 languages, targeting customer support, employee support, and conversational commerce use cases. The website is well-designed, mobile-optimized, and uses modern web technologies including Webflow CMS, Cloudflare DNS, HubSpot, Mixpanel, and Plausible analytics. Security posture is good with HTTPS and domain transfer protection, though DNSSEC is not enabled and security headers are not detected. Privacy compliance is weak due to missing privacy and cookie policies. WHOIS data shows a mature domain registered since 2007 with consistent business information, supporting legitimacy. Overall, the site is trustworthy and professional but should improve privacy disclosures and security headers to enhance compliance and security.

P

Packeta

packeta.sk

69

Packeta.sk is a Slovakian parcel delivery service website offering fast and reliable shipment transportation. The website targets general consumers and businesses needing parcel logistics solutions within Slovakia. The business operates in the transportation sector and appears to be a significant player in the regional market. The website uses modern frontend technologies such as Bootstrap and Google Fonts, providing a basic but functional user experience with mobile optimization. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which are critical for compliance and trust. The security posture is minimal with no evident incident response or vulnerability disclosure mechanisms. Overall, the domain registration data aligns well with the business claims, indicating legitimacy. Strategic improvements in privacy compliance, security best practices, and transparency would enhance trust and reduce risk.

D

DPD

dpd.sk

68

DPD Slovakia operates as a key player in the parcel delivery and logistics sector, providing comprehensive domestic and international courier services. The website reflects a mature digital presence with clear branding, multilingual support, and customer-centric features such as parcel tracking and pickup locations. The technical infrastructure is based on WordPress with modern frameworks like Bootstrap and includes integrations for analytics and cookie consent, indicating a well-maintained platform. Security posture is solid with HTTPS enforcement and some security best practices, though there is room for improvement in security headers and explicit incident response documentation. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting a large-scale logistics business. The absence of WHOIS data for the domain is likely due to querying a subdomain or privacy protection, but does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance.

U

Upfan, s. r. o.

upfan.io

59

Upfan, s. r. o. operates an online ticket marketplace focused on providing a safe and transparent platform for buying and selling tickets to sports, concerts, and festivals. The company is based in Slovakia and targets a general audience interested in event attendance. The website is modern, built on Nuxt.js, and integrates analytics and payment services such as PostHog and Revolut. It demonstrates good digital maturity with fast performance, mobile optimization, and SEO best practices. Security posture is solid with HTTPS and Cloudflare DNS, though some improvements are recommended such as enabling DNSSEC and publishing explicit security policies. Privacy compliance is partially met with a GDPR policy available but lacks a cookie consent mechanism. Overall, the business presents itself professionally with clear contact information and social media presence, supporting a trustworthy market position.

P

Prádelna a čistírna Jihlava, s.r.o.

pradelnaji.cz

48

Prádelna a čistírna Jihlava, s.r.o. is a Czech Republic-based company specializing in laundry and dry cleaning services, primarily serving hotels, accommodation, catering facilities, and industrial enterprises. The company emphasizes quality service, sustainability, and customer satisfaction, leveraging modern washing technology. The website reflects a medium-sized business with a strong local presence and a history of 60 years in the market. Technically, the website uses modern JavaScript libraries and Google Analytics with a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent but lacks explicit security headers and incident response information. The absence of WHOIS data reduces transparency and trustworthiness, though the website content and contact information are professional and comprehensive. Overall, the site is safe, well-structured, and business-focused.

4

4FITNESS.CZ

4fitness.cz

57

4FITNESS.CZ is an established Czech e-commerce platform specializing in sports nutrition products including proteins, creatine, collagen, amino acids, stimulants, vitamins, and functional foods. The website targets fitness enthusiasts and athletes primarily within the Czech Republic, offering a broad range of health supplements and custom product mixing services. The business operates with a clear online retail model and maintains a professional digital presence with good content quality and consistent branding. Technically, the site leverages modern JavaScript frameworks and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Bing Ads, indicating a mature digital marketing strategy. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is basic but includes cookie consent and a privacy policy, aligning with GDPR requirements. The absence of WHOIS data limits domain trust verification, but the overall website professionalism and contact transparency support legitimacy. Strategic recommendations include enhancing security headers, auditing third-party scripts, and improving accessibility features to further strengthen the platform's security and compliance stance.

S

START Zelený s.r.o.

zeleny.cz

60

START Zelený s.r.o. is a small Czech Republic based company specializing in construction work, sales of building materials, and garden and forest machinery. The company targets local customers primarily in the Kraj Vysočina region. The website is built on the Wix platform, leveraging Wix Thunderbolt and standard web technologies, providing a moderate level of performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS data due to privacy protection limits transparency but does not contradict the business legitimacy indicated by the website content and structured data. Overall, the site presents a professional and trustworthy image for a small regional business.

Ateliér AJV, s.r.o. is a Czech family-run architectural and engineering studio specializing in project design, engineering activities, industrial construction, developer projects, engineering networks, and heritage reconstruction. With over 33 years of experience and more than 1000 completed projects, the company serves a diverse clientele including industrial firms, developers, and public institutions. Their website reflects a professional and consistent brand image with detailed service descriptions and client testimonials, positioning them as a trusted regional player in the real estate and construction sector. Technically, the website is built on Joomla CMS with modern web technologies such as Bootstrap and jQuery, and includes Google Analytics for visitor tracking. The site is mobile-optimized and provides a cookie consent mechanism, though it lacks a dedicated privacy policy and terms of service pages, which are important for GDPR compliance. Security posture is moderate with HTTPS enabled and email obfuscation implemented, but missing security headers and incident response information suggest room for improvement. WHOIS data is unavailable, limiting domain legitimacy verification, but the presence of company contact details and consistent branding supports credibility.

E

emro s.r.o.

emro.cz

49

emro s.r.o. is a small Czech Republic-based company specializing in electrical installations, including low voltage security systems, residential and industrial power distribution, and production of electrical switchboards. Established originally in 2003 and restructured as a legal entity in 2010, the company serves commercial and residential clients with a focus on quality electrical infrastructure projects. The website reflects a basic but functional online presence built on the Yola CMS platform, with moderate mobile optimization and basic design quality. Technical infrastructure includes common web technologies such as jQuery and Google Maps integration, hosted via Active24. Security posture is limited, with no visible HTTPS enforcement or security headers, and no published privacy or cookie policies, indicating compliance gaps. Tracking scripts from Yola and SiteWit are present without user consent mechanisms. Overall, the site is legitimate and consistent with the business but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

U

UNI HOBBY

unihobby.cz

60

UNI HOBBY is a well-established Czech retailer specializing in DIY and hobby products, offering a wide range of items both online and through physical stores. The website targets Czech DIY enthusiasts and provides services such as online ordering, home delivery, and in-store pickup. The company positions itself as a trusted provider with quality service and a broad product selection. Technically, the website employs modern JavaScript frameworks like Vue.js and integrates multiple marketing and analytics tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and standard security headers, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is professional, user-friendly, and compliant with privacy regulations, making it a reliable platform for customers.

E

Efektivní Bydlení, spol. s r. o.

efektivni-bydleni.cz

50

Efektivní Bydlení, spol. s r. o. is a Czech Republic based small company specializing in the design and construction of passive and energy-efficient family homes. With over 15 years of experience and more than 80 successful projects, the company offers comprehensive services from architectural studies, project documentation, construction, financing assistance, to subsidy management. Their market position is that of a trusted local specialist focused on sustainable housing solutions. The website is professionally designed, mobile-optimized, and provides clear navigation and detailed service descriptions. Technically, the site uses modern web technologies including Google Tag Manager and service workers, ensuring good performance and user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though formal security policies and vulnerability disclosures are absent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

R

Renot s.r.o.

renot.cz

43

Renot s.r.o. is a Czech-based small manufacturing and retail company specializing in the production and renovation of alternative toner and ink cartridges, as well as providing 3D printing equipment and filament sales. The company holds ISO 9001 and ISO 14001 certifications, indicating a commitment to quality and environmental standards. Their market position is that of a regional player serving both business and consumer segments with a focus on printing supplies and 3D printing solutions. The website is professionally designed with clear navigation and good content relevance, targeting customers interested in printing and 3D printing products and services. Technically, the website is built on the aPilot CMS platform and uses modern technologies including Google Tag Manager, Google Analytics, and Google reCAPTCHA for form security. The site is mobile optimized and performs moderately well, though some accessibility features could be improved. Security posture is good with HTTPS enforced and use of CAPTCHA, but lacks important security headers and published incident response or vulnerability disclosure policies. The WHOIS data is unavailable or privacy protected, which reduces transparency but is not uncommon for small businesses. The site includes a privacy policy in PDF form and terms of service, but lacks a cookie consent mechanism. Overall, the site demonstrates a solid business credibility and moderate privacy compliance, with room for improvement in security best practices and transparency. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, publishing security and incident response policies, and enhancing privacy compliance to build greater trust and security maturity.

S

SILKO s.r.o.

silko-ji.cz

49

SILKO s.r.o. is a Czech Republic-based small enterprise specializing in thin-layer road surface modifications, maintenance, and repairs. Established in 1995, the company offers a range of services including micro-surfacing, slurry seal, patchmatic repairs, bituminous surfaces, and road cleaning. The company holds an ISO 9001:2016 quality certification, indicating a commitment to quality management. The website presents a professional image with clear service descriptions and contact information, targeting municipalities and contractors in the transportation sector. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, and the Nette framework, providing a responsive and user-friendly experience. However, the site lacks advanced SEO and accessibility features and does not display privacy or cookie policies, which are important for compliance and user trust. No forms or email contacts are present, limiting direct user engagement. From a security perspective, the site uses HTTPS but lacks visible security headers and vulnerability disclosures. The absence of WHOIS data due to privacy protection reduces transparency but is common for small businesses. No WAF or blocking mechanisms were detected, and the site content is safe with no adult or questionable material. Overall, SILKO s.r.o. maintains a moderate digital maturity with room for improvement in privacy compliance, security hardening, and transparency. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

D

DITON s.r.o.

diton.cz

47

DITON s.r.o. is a well-established Czech manufacturer specializing in concrete products for outdoor architecture, including paving stones, palisades, curbs, stairs, fences, and garden architecture. With over two decades of experience since 1999, the company holds a strong market position in the manufacturing sector, targeting construction professionals and end consumers seeking durable and aesthetically pleasing concrete solutions. The website reflects a professional and comprehensive digital presence, showcasing product catalogs, virtual tours, and customer support services. Technically, the site is built on WordPress with modern plugins and tracking technologies, ensuring good SEO and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain trust verification, but the business information and certifications support legitimacy. Overall, the site is secure, compliant, and professionally maintained, supporting DITON's market credibility.

DCOMP s.r.o. is a Czech telecommunications and retail company offering internet, IPTV, TV, and retail technology products primarily serving the Jihlava region. The company operates a physical store, an e-shop partner site, and provides customer portals for service management. Their market position is that of a regional service provider with a focus on local customers. Technically, the website uses modern web technologies including Bootstrap, jQuery, Google Analytics, and Facebook SDK, indicating a moderate level of digital maturity. The site is mobile responsive and includes privacy and cookie consent mechanisms, reflecting awareness of GDPR compliance. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks visible security headers and explicit security policies. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with a small business. Overall, the site is professional and trustworthy with room for security and compliance improvements.

L

Leube Beton s.r.o.

leube.cz

46

Leube Beton s.r.o. is a Czech-based manufacturing company specializing in sustainable concrete products with a heritage dating back to 1838. The company emphasizes quality, reliability, and family values, serving primarily construction and infrastructure sectors. Their website reflects a professional and consistent brand image with clear contact information and a focus on customer support throughout project lifecycles. Technically, the site uses modern web technologies including jQuery, Tailwind CSS, and Google Analytics, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking advanced security headers and published security policies. WHOIS data is unavailable, which slightly reduces trustworthiness but the website content and business information appear legitimate. Overall, the site is well-structured, safe, and compliant with GDPR requirements.

A

Auto Dobrovolný, s.r.o.

autodobrovolny.cz

46

Auto Dobrovolný, s.r.o. is a medium-sized family-owned automotive dealership and service company operating primarily in the Czech Republic with branches in Velké Meziříčí, Jihlava, and Znojmo. The company offers a broad range of services including new and used car sales, vehicle servicing, leasing, and rental. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeting car buyers and service customers in the region. Technically, the site is built on the xartCMS platform, leveraging modern JavaScript libraries and analytics tools, and is mobile optimized with good SEO practices. Security posture is adequate with HTTPS enforced and some obfuscation of contact emails, but lacks advanced security headers and explicit privacy and cookie policies, which are critical for GDPR compliance. The absence of WHOIS data reduces transparency and trustworthiness, although the website content and business operations appear legitimate. Strategic improvements in privacy compliance, security policies, and WHOIS transparency are recommended to enhance trust and regulatory adherence.

Andone s.r.o. is a Czech-based company specializing in commodities trading, feed production, wastewater treatment and biogas, chemical manufacturing, laboratory services, and transport and storage solutions. The company targets industrial and agricultural sectors with a diversified portfolio of products and services. The website presents a professional business image with clear contact information and a structured service offering, although it lacks privacy and cookie policies. Technically, the site uses older JavaScript libraries and common web technologies like jQuery and Bootstrap, with moderate performance and basic mobile optimization. Security posture is limited due to missing HTTPS verification in the data, absence of security headers, and outdated libraries. The WHOIS data is unavailable, which raises concerns about domain legitimacy and trust. Overall, the site is functional and business-focused but requires improvements in security and compliance to enhance trust and protect user data.

M

M – KOVO s.r.o. / KOVORAN s.r.o.

m-kovo.cz

47

M – KOVO s.r.o. / KOVORAN s.r.o. is a Czech Republic-based medium-sized manufacturing company specializing in metalworking services such as CNC machining, grinding, turning, milling, cutting, and galvanizing. The company has a longstanding history dating back to 1991 and is engaged in projects aimed at improving energy efficiency and sustainability. Their target audience primarily consists of industrial clients requiring precision metal fabrication. The website is built on WordPress and employs common web technologies, providing a professional and navigable user experience. However, the absence of privacy and cookie policies, as well as missing WHOIS data, slightly detracts from the overall trustworthiness. Security posture is moderate with HTTPS enabled but lacking security headers and incident response information.

A

A V E N T I N, spol. s r.o.

aventin.cz

47

Aventin Shopping is a Czech Republic-based developer specializing in retail parks. The company has developed five retail parks totaling 58,000 square meters, focusing on a unified and modern retail concept. Their website reflects a professional and consistent brand image targeting retail customers and tenants within the Czech market. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response information are missing. Overall, the site is trustworthy and well-maintained, though the absence of WHOIS data slightly reduces transparency.

H

HUSTÁK CZ s.r.o.

hustak.cz

58

HUSTÁK CZ s.r.o. is a Czech transportation company specializing in domestic and international bus transport services since 1990. Their website highlights their fleet capacity ranging from 8 to 60 seats, targeting general customers needing bus transportation. The company appears to be a small-sized regional operator with a focused business model in transportation services. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a moderate level of digital maturity with good SEO and mobile optimization. Security posture is moderate but lacks visible security headers and explicit privacy policies, which are areas for improvement. Overall, the website is accessible without WAF or blocking mechanisms, but WHOIS data is unavailable, limiting domain ownership verification. Strategic recommendations include enhancing security headers, publishing privacy and terms policies, and improving contact information visibility to strengthen trust and compliance.

Auto Vysočina is a well-established automotive dealership and service provider in the Czech Republic with over 25 years of market presence. The company specializes in sales and servicing of VW, Škoda, DWA, and KIA vehicles, operating multiple physical locations in Jihlava and Loket. The website serves as a brand and informational portal with links to vehicle offers, social media, and partner sites. Technically, the website is built with standard HTML, CSS, and JavaScript, featuring responsive design elements and embedded animations via iframes. However, it lacks modern security headers, privacy and cookie policies, and active analytics tracking, indicating room for improvement in digital maturity and compliance. Security posture is basic with no visible vulnerabilities but missing key security best practices such as HTTPS confirmation and security headers. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security measures to improve trust and regulatory adherence.

S

Stravování Pecha

stravovanipecha.cz

43

Stravování Pecha is a small, family-owned food production and catering business based in Jihlava, Czech Republic, with a long tradition dating back to 1993. The company specializes in preparing and delivering ready meals to corporate clients and individuals within the Vysočina region, offering services such as meal delivery, corporate catering, and an on-site canteen. Their modern kitchen facilities and EU co-financed energy efficiency projects demonstrate a commitment to quality and sustainability. The website reflects a professional and consistent brand image, targeting local businesses and residents seeking reliable food services. Technically, the website is built on WordPress using the Divi theme, incorporating common web technologies such as jQuery, Google Fonts, and Google Maps API. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Security-wise, HTTPS is enforced, and the contact form uses nonce tokens for protection, but the absence of security headers and privacy policies indicates room for improvement. Google Analytics is used for user tracking without visible cookie consent mechanisms, which may raise privacy compliance concerns. The security posture is moderate with no visible vulnerabilities or exposed sensitive data, but the lack of WHOIS data transparency and missing privacy documentation reduce overall trust. The company provides clear contact information, including a company domain email, phone number, and physical address, enhancing business credibility. No WAF or blocking mechanisms were detected, allowing full content access for analysis.

G

GriToN CZ s.r.o.

griton.cz

64

GriToN CZ s.r.o. is a medium-sized Czech construction company specializing in reinforced concrete monolithic structures and steel constructions, serving clients in the Czech Republic and Slovakia. The company emphasizes turnkey construction deliveries and has a workforce of approximately 80 employees. Their website is professionally designed using Joomla CMS and modern web technologies, providing clear information about their services and projects. The presence of cookie consent and privacy policies indicates compliance with GDPR requirements. However, the absence of WHOIS data and explicit contact emails or phone numbers on the website slightly reduces the overall trustworthiness from a domain registration and contact transparency perspective. The website is accessible without any WAF or security challenges, and security best practices such as HTTPS and Google reCAPTCHA are implemented. Overall, the company presents a credible and professional online presence in the construction sector.

D

Doucha s.r.o.

doucha.cz

48

Doucha s.r.o. is a Czech manufacturing company specializing in the production of electrical switchboards and metal fabrication services. Founded in 1991 as a family business and restructured in 2006, the company offers a range of services including CNC laser cutting, sheet metal processing, welding, and powder coating. Their market position is that of an established regional manufacturer serving industrial clients with certified products compliant with CE ČSN standards. The website reflects a professional digital presence built on WordPress with SEO optimization and mobile responsiveness. However, the absence of WHOIS data limits domain trust verification. Security posture is moderate with HTTPS enforced but lacking security headers and privacy compliance documentation. Contact information is clearly presented, enhancing business credibility.

D

Data Protected

jihlavsko.online

67

jihlavsko.online is a Czech regional online media platform providing reliable and up-to-date news, events, and information focused on the Jihlava area. The website serves local residents and visitors with news articles, event calendars, advertising opportunities, and premium content. It operates a newsletter subscription to keep users informed weekly. The business model centers on local news dissemination combined with advertising revenue from partners and premium content offerings. The site is relatively new, founded in 2025, and targets a small but engaged regional audience.

M

MT AUDIO

mtaudio.cz

53

MT AUDIO is a Czech Republic-based professional audio production studio specializing in advertising audio spots, voice-over services, video sound design, custom music editing, and restoration of old recordings. Operated by Marek Točík, the company leverages over 25 years of industry experience and collaborates with professional actors and a film production partner to deliver comprehensive audio and marketing solutions. The website is built on Drupal 7 and integrates Google Analytics and Google Maps API for enhanced user experience and tracking. Contact information is clearly provided, but the absence of privacy and cookie policies indicates a compliance gap. The WHOIS data is unavailable, which limits domain legitimacy verification but the website content and business details appear professional and trustworthy.

T

TRIMA NEWS, s.r.o.

jihlavskadrbna.cz

49

Jihlavská Drbna is a regional news media portal focused on delivering authentic news and stories from Jihlava and the Vysočina region in the Czech Republic. Operated by TRIMA NEWS, s.r.o., the website offers a broad range of news categories including local news, crime, sports, culture, and business, supported by advertising and premium subscription models. The site targets a general audience interested in regional developments and community stories. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, Facebook Pixel, and multiple advertising networks to monetize content. It is mobile-optimized with responsive design and uses HTTPS for secure communications. The site integrates privacy and cookie policies with consent mechanisms, reflecting basic GDPR compliance. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and secure form handling, though it lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data raises concerns about domain registration transparency, which should be monitored. Overall, Jihlavská Drbna presents a professional and trustworthy regional news platform with solid technical infrastructure and privacy awareness. Strategic improvements in security headers and domain registration transparency would enhance its security posture and trustworthiness.

2

2score s.r.o.

chnliga.cz

46

Chance Národní Liga is a well-established Czech football league media platform providing comprehensive information about the second highest football league in the Czech Republic. The website offers match schedules, team and player statistics, news updates, and live streaming links, targeting football fans and sports enthusiasts primarily in the Czech Republic. The business operates in the media and sports sector with a medium-sized presence and a history dating back to at least 2013. Technically, the site uses modern web technologies including JavaScript, Typekit fonts, and integrates Google Analytics and Facebook Pixel for tracking, with a cookie consent mechanism to comply with privacy regulations. Security posture is moderate with HTTPS usage implied but lacks visible security headers and published privacy policies, which are areas for improvement. Overall, the site is professional, user-friendly, and trustworthy, with strong social media engagement and official partnerships. However, the absence of WHOIS data limits domain registration insights, though privacy protection appears justified. Strategic recommendations include publishing privacy and terms policies, enhancing security headers, and providing clear contact information to improve compliance and trust.

D

Dizen design

dizen.cz

48

Dizen design is a small, professional graphic design studio based in Jihlava, Czech Republic, specializing in visual identities, web design, packaging and book design, typography, and architectural graphics. They also operate a bookbinding workshop offering workshops for children and adults. The website presents a well-structured portfolio showcasing diverse projects, indicating a strong local market presence and expertise in creative design services. Technically, the site is built on WordPress with modern technologies such as Bootstrap 5, GLightbox, and Masonry.js, optimized for mobile devices and fast loading. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks explicit security headers and privacy compliance documentation. WHOIS data is unavailable, which slightly reduces trust but does not detract significantly from the professional presentation. Overall, the site is trustworthy and well-maintained but would benefit from enhanced privacy and security disclosures.

The website reserve.plus serves as a login portal for a reservation or booking platform branded as R+. Operated by UNIWEB spol. s r.o., a Czech company founded in 2017, the platform appears to target business users or customers needing online booking management services. The site content is minimal, focusing primarily on user authentication with no visible marketing or informational pages. Technically, the site uses standard web technologies including Bootstrap, jQuery, and Font Awesome, hosted by Gransy, s.r.o. The site shows basic mobile optimization and moderate performance but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS assumed but no DNSSEC or security headers detected, and no visible advanced protections such as CSRF tokens or multi-factor authentication. Privacy and cookie policies are absent, indicating compliance gaps with GDPR. Overall, the domain registration data is consistent and trustworthy, but the site would benefit from enhanced security and compliance measures.

U

UNIWEB s.r.o.

beemail.cz

49

The website beemail.cz/logon/ serves as a login portal for BeeMail, a newsletter management service operated by UNIWEB s.r.o., a Czech company established in 2016. The service targets businesses or users requiring newsletter administration, positioning itself as a niche media-related SaaS offering within the Czech market. The site content is primarily in Czech, with a professional but basic design focused on user login functionality. Technically, the site employs a modern frontend stack including Bootstrap, jQuery, and various UI enhancement libraries such as SweetAlert and Intro.js. Hosting appears to be provided by Active24, a known Czech hosting provider. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. From a security perspective, the site uses HTTPS (assumed from URL), client-side form validation, and AJAX-based login submission. However, it lacks visible HTTP security headers (CSP, HSTS), anti-CSRF tokens, and explicit security or privacy policies. No contact information or incident response channels are provided on the login page, limiting transparency and user trust. Overall, the site is functional and moderately professional but requires improvements in privacy compliance, security hardening, and user trust signals to enhance its risk posture and compliance with GDPR and related regulations.

Švejk restaurant is a prominent Czech gastronomic franchising chain operating over 50 locations, specializing in traditional Czech cuisine and beverages. The business model centers on franchising, catering, and providing gastronomic services, targeting a broad general audience interested in authentic Czech dining experiences. The website reflects a professional and consistent brand image with clear navigation and relevant content, supporting its market position as a leading hospitality franchise in the Czech Republic. Technically, the site employs a modern tech stack including jQuery, Foundation framework, and Google Analytics for tracking, with good mobile optimization and SEO practices. However, the absence of WHOIS data and explicit privacy policies introduces transparency concerns. Security posture is moderate with cookie consent implemented but lacking visible security headers and unknown SSL configuration. Overall, the website is functional and professional but would benefit from enhanced security and compliance measures.

T

Tonalli West s.r.o.

obytnakyplzen.cz

38

Tonalli West s.r.o., operating the website obytnakyplzen.cz, is a specialized small business in the Czech Republic focused on the sales, rental, and servicing of motorhomes and trailers. The company is an official partner of reputable brands Rimor, Sunlight, and Dethleffs, positioning itself as a trusted provider with over 10 years of market experience. The website serves as an e-commerce and informational platform targeting travelers and customers interested in motorhomes, offering a range of services including sales of new and used vehicles, rentals, servicing, and accessories installation. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and integrations such as Google Tag Manager and Facebook Pixel for analytics and marketing. The site is hosted by Active24, consistent with the domain registration data. Performance and mobile optimization are good, though accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms. However, it lacks explicit security headers and published security or incident response policies. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency to improve user trust and regulatory adherence.