Security Directory

K

Korken Schiesser Ges.m.b.H.

korken.at

57

Korken Schiesser Ges.m.b.H. is a small manufacturing company based in Vienna, Austria, specializing in natural cork products including technical cork and wine corks. The company maintains a professional online presence through a Wix-built website that clearly communicates its business focus and contact information. The website is well-structured, mobile-optimized, and provides a good user experience, although it lacks some privacy and cookie policy disclosures. Technically, the site uses Wix's Thunderbolt framework and is hosted on Wix infrastructure, ensuring reliable performance and HTTPS security. However, the absence of security headers and privacy compliance documentation indicates areas for improvement in security posture and regulatory adherence. Overall, the website reflects a legitimate and established business with a solid market position in the cork manufacturing sector.

A

AGROTEC a.s.

eagrotec.cz

61

AGROTEC a.s. is the largest supplier of ground machinery in the Czech Republic, specializing in agricultural machinery, construction equipment, and personal and commercial vehicles. The company targets farmers, agricultural businesses, and construction companies with a comprehensive product catalog and after-sales services. The website reflects a mature digital presence with a structured product offering and partner branding such as New Holland. Technically, the site is built on ASP.NET WebForms with Kentico CMS, integrating modern marketing tools like Google Tag Manager and reCAPTCHA for security and analytics. Security posture is moderate with HTTPS and form protections but lacks visible security headers and explicit privacy policies. The absence of WHOIS data due to privacy protection slightly reduces trust but is common for commercial entities. Overall, the site is professional, content-rich, and safe for general audiences.

N

Národní vinařské centrum, o.p.s.

narodnidenvina.cz

55

The website narodnidenvina.cz represents a Czech national project focused on promoting wine culture, health benefits of moderate wine consumption, and charitable activities supporting pediatric cardiology. It is organized by the Národní vinařské centrum, o.p.s., a recognized organization in the Czech wine sector. The site targets wine enthusiasts, health-conscious individuals, and the general public interested in cultural and charitable wine-related events. The business model is non-profit and awareness-driven, with a focus on education and charity fundraising. Technically, the website is built on the Webnode CMS platform, leveraging modern web technologies including HTML5, CSS3, JavaScript, and Amazon Cloudfront CDN for content delivery. Google Tag Manager is used for analytics and tracking. The site is mobile-optimized and performs moderately well, though SEO and accessibility features are basic. No advanced frameworks or platforms are detected. From a security perspective, the site enforces HTTPS and does not expose sensitive data. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options. There are no visible vulnerabilities or exposed credentials. Privacy and cookie policies are missing, and no contact information for security incidents is provided, indicating gaps in compliance and incident response readiness. Overall, the website is legitimate and professionally presented but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information. The lack of WHOIS data limits domain ownership transparency but does not detract significantly from trust given the site's content and organizational backing.

N

National Heritage Institute

zamek-valtice.cz

45

The website represents the official online presence of Valtice Castle, a significant cultural heritage site managed by the Czech National Heritage Institute. It provides comprehensive visitor information, including tours, events, and historical context, targeting tourists and cultural enthusiasts. The site is well-positioned as a government-operated heritage site with UNESCO World Heritage status, enhancing its credibility and trustworthiness. Technically, the website employs modern web technologies such as Leaflet.js for mapping, Google Analytics for visitor tracking, and asynchronous script loading to optimize performance. The site is mobile-optimized and accessible, with a clear navigation structure and consistent branding. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security policies or incident response information. WHOIS data confirms the domain's legitimacy and appropriate age for the business history. Overall, the site demonstrates a good balance of content quality, technical implementation, and privacy compliance, suitable for its government and cultural heritage context.

R

Regionální muzeum v Mikulově, p. o.

pronajmisizamek.cz

41

The website pronajmisizamek.cz is operated by the Regionální muzeum v Mikulově, a regional museum organization in the Czech Republic. It offers rental services for various historic halls and spaces within the Mikulov castle, targeting individuals and organizations seeking venues for social events, corporate celebrations, weddings, and cultural activities. The site is well-structured with detailed descriptions of each rental space and includes reservation forms for direct booking requests. Multilingual support is provided via partner domains in English and German. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics and Tag Manager for visitor tracking. The design is professional and mobile-optimized, providing a good user experience. However, the site lacks explicit privacy and cookie policies, and no cookie consent mechanism is present, which are compliance gaps under GDPR. Security headers are not detected, though HTTPS is used, indicating room for improvement in security posture. WHOIS data is unavailable, likely due to privacy protection, but the website content and external references support legitimacy. Overall, the site is a credible small-scale venue rental platform with moderate technical maturity and some compliance and security improvements recommended.

Č

Český zahrádkářský svaz, z.s.

zahradkar.org

41

The website zahradkar.org represents a well-established Czech gardening hobby magazine published by Český zahrádkářský svaz, z.s. It targets gardening enthusiasts, seniors, and hobbyists with content including gardening tips, plant care, and related events. The business model relies on print and digital magazine sales, subscriptions, and advertising. The domain is mature and consistent with the organization's profile. Technically, the site uses common tracking and advertising technologies such as Google Tag Manager, Facebook Pixel, and Adform, but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional with moderate technical sophistication but requires improvements in security and privacy compliance.

W

www.kvety.cz

kvety.cz

58

Květy.cz is a Czech language modern news and infotainment website targeting families, providing articles on current topics, trends, economy, and profiles of notable personalities. The site offers rich multimedia content including images and podcasts, supported by newsletter subscriptions. Technically, the website employs modern web technologies such as HTMX, Tailwind CSS, and integrates multiple third-party marketing and analytics tools including Google Tag Manager, Facebook Pixel, and Gemius. The site is hosted likely on AWS Cloudfront CDN, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit privacy and cookie policies are not clearly found in the provided content. WHOIS data is unavailable, which slightly reduces trust but does not negate the legitimacy indicated by the website's professional presentation and technical setup. Overall, the site is a credible media outlet with moderate to good compliance and security maturity.

I

International SOS

internationalsos.com

76

International SOS is a globally recognized leader in international health and security risk management, providing comprehensive services to protect business travellers and international assignees from health and security threats worldwide. The company offers tailored solutions including travel risk management aligned with ISO 31030, executive protection, and a proprietary assistance app. Their market position as a pioneer and their 40 years of operational history underscore their expertise and reliability in this niche. Technically, the website is built on modern web technologies such as React and JavaScript, with a responsive design optimized for mobile devices. The site integrates multiple analytics and marketing tools, including Google Tag Manager, Microsoft Clarity, and LinkedIn Insight, reflecting a mature digital marketing strategy. Performance is moderate with good SEO and accessibility features. From a security perspective, the site enforces HTTPS, implements key security headers, and uses secure forms with consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public vulnerability disclosure or security.txt file and incident response contact details suggests room for improvement in transparency and security communication. Overall, the website presents a professional, trustworthy, and well-maintained digital presence. The lack of WHOIS data reduces some trustworthiness but is likely due to privacy protection or domain management practices. Strategic recommendations include publishing vulnerability disclosure information, enhancing incident response transparency, and maintaining rigorous security practices to uphold their market leadership.

E

Emco spol s.r.o.

myslinazdravi.cz

46

Emco spol s.r.o. operates a website focused on promoting its food products that are free from palm oil, including musli, mysli, oat porridges, cookies, bars, and other cereal products. The company emphasizes health benefits and sustainability by replacing palm oil with domestic rapeseed oil since 2014. The website targets health-conscious consumers in the Czech Republic and positions Emco as a reputable brand in the retail food sector. The domain is well-established since 2008, consistent with the company's history. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, with Google Tag Manager for analytics. The site is moderately optimized for mobile devices and SEO but lacks advanced accessibility features. Hosting appears to be with REG-ZONER, a Czech registrar and hosting provider. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS (assumed from URL), but no explicit security headers were detected in the provided data. There are no visible vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, as well as contact information, reduces the site's compliance with GDPR and general transparency. No incident response or vulnerability disclosure information is provided. Overall, the website is professional and trustworthy in terms of content and business legitimacy but lacks important privacy and security disclosures. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and compliance posture.

B

Baji Live

federacion-matronas.org

55

Baji Live is a recently established online gambling platform launched in 2024, focusing on sports betting and casino games primarily for users in Bangladesh and Southeast Asia. The platform offers a wide range of betting options including cricket, football, and live casino games, supported by a dedicated Android app. The business positions itself as a trusted and innovative player in the regional online betting market, emphasizing user satisfaction and secure gaming experiences. Technically, the website uses standard web technologies such as HTML5, CSS3, and JavaScript, with moderate performance and good mobile optimization. The domain is registered with NETIM SAS and uses DNS parking services. However, there is no evidence of advanced security headers or DNSSEC implementation, which are recommended for enhanced security. The website lacks visible cookie consent mechanisms and comprehensive privacy compliance features. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers, which lowers its security posture. No direct contact emails or phone numbers are provided, limiting transparency. The WHOIS data aligns well with the business claims, indicating legitimacy, but the domain's recent creation suggests the business is new and still maturing. Overall, the website is functional and professionally designed but requires improvements in security best practices and privacy compliance to enhance trust and regulatory adherence. Strategic recommendations include implementing DNSSEC, adding security headers, establishing cookie consent, and improving privacy disclosures.

M

Malta Midwives Association

maltamidwivesassociation.com

61

Malta Midwives Association is a professional healthcare organization dedicated to advancing midwifery practice and providing exceptional care to women and families in Malta and Gozo. The website serves as an informational and service booking platform targeting midwives and clients. Technically, the site is built on GoDaddy Website Builder, employs modern web fonts, and integrates Google Analytics and Adsense for tracking and advertising. The security posture is moderate with HTTPS enabled but lacks security headers and explicit privacy policies. No contact emails or phone numbers are directly visible, which limits direct communication channels. Overall, the domain registration is consistent with the business claims, indicating legitimacy. Strategic improvements in privacy compliance and security headers would enhance trust and compliance.

A

Association Luxembourgeoise des Sages-femmes a.s.b.l.

sages-femmes.lu

60

The Association Luxembourgeoise des Sages-femmes is a small non-profit professional organization based in Luxembourg dedicated to supporting midwives, informing parents, and representing midwives at the national level. The website serves as an information hub for both parents and healthcare professionals, providing resources such as a directory of midwives and news updates. It also highlights the cultural recognition of midwifery as a national and UNESCO intangible cultural heritage. The association maintains partnerships with major Luxembourg hospitals and international midwife organizations, reinforcing its authoritative position in the healthcare sector. Technically, the website is built on the Webnode CMS platform and leverages Amazon Cloudfront CDN for content delivery. The site is well-structured with responsive design, good SEO practices, and a cookie consent mechanism compliant with GDPR. While the site uses HTTPS and Google Tag Manager for analytics, it lacks advanced security headers and explicit security policies, which could be improved to enhance its security posture. From a security perspective, the site shows a solid baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data due to a malformed domain query limits the ability to fully verify domain registration legitimacy. The website content and business information appear trustworthy and professional, mitigating some concerns. Overall, the site scores well on content quality, technical implementation, and privacy compliance but could benefit from enhanced security policies and transparency. Strategically, the association should focus on improving its security headers, publishing a formal security policy, and establishing an incident response contact to strengthen trust and compliance. These steps will support its role as a professional body and safeguard its digital presence against emerging threats.

S

Scientifica ostetrica neonatale ginecologia genere | Syrio

syrio.org

59

The website www.syrio.org is built using the Wix platform, leveraging Wix's Thunderbolt framework and standard JavaScript polyfills. The site content appears minimal and lacks critical business and security information. No WHOIS data or registrant details are available due to a malformed WHOIS response, which limits the ability to verify domain legitimacy. The absence of privacy, cookie, and terms of service policies, as well as contact information, further reduces trust and compliance posture. Technically, the site uses modern JavaScript libraries but lacks visible security headers or SSL configuration details in the provided data. Overall, the website's security posture is weak, with no evident best practices implemented. The content is safe for general audiences but is sparse and lacks professionalism.

The website fnopo.it currently serves a security challenge page that blocks direct access to its content, indicating the presence of a Web Application Firewall or similar security mechanism. The domain is registered since 2017 with DNSSEC enabled and is valid until late 2025, suggesting a legitimate registration. However, the website itself lacks accessible business information, contact details, or privacy and cookie policies, which limits the ability to assess its business operations or compliance posture. The presence of outdated CMS versions such as Joomla 1.5 and WordPress 2.5 raises significant security concerns due to known vulnerabilities in these legacy platforms. The site uses a security check powered by BitNinja.IO, which adds a layer of protection but also restricts content visibility for analysis.

The website semma.gr is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge, which blocks direct access to the site's content. As a result, no business information, contact details, or policies are available for analysis. The site appears to be protected by Cloudflare's security services, indicating an intent to mitigate automated access or attacks. However, this also limits the ability to assess the site's content quality, technical infrastructure, and security posture comprehensively. The lack of accessible content and metadata suggests the site is either under maintenance, protected against bots, or experiencing access restrictions.

B

Belgian Midwives Association

belgianmidwivesassociation.be

51

The Belgian Midwives Association website serves as the official online presence for a professional healthcare organization representing midwives in Belgium. The site provides resources and information targeted at midwives and related stakeholders. The organization has been established since 2009, supported by a domain registration of the same age, indicating a stable and legitimate presence. The website is built on WordPress using the Divi theme and supports multiple languages via WPML, reflecting a commitment to accessibility for Belgium's multilingual population. The site employs a comprehensive cookie consent mechanism, aligning with GDPR requirements, although explicit privacy and terms of service pages are not detected in the provided content. Technically, the website uses a broad range of third-party advertising and tracking services, which may impact user privacy and should be carefully managed. Security posture is moderate with HTTPS enabled but lacks visible security headers and explicit security policies. Overall, the website is professional and functional but would benefit from enhanced privacy disclosures and security hardening.

Ö

Österreichisches Hebammengremium

hebammen.at

51

The Österreichisches Hebammengremium (ÖHG) website serves as the official online presence of the Austrian Midwives Association, representing midwives and providing information to parents about pregnancy, birth, and baby care. The site targets a German-speaking Austrian audience and positions itself as a trusted non-profit organization in the healthcare sector. The business model focuses on advocacy and education rather than commercial activities. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, incorporating modern web technologies such as jQuery, FontAwesome, and third-party tools like Doofinder for search and Borlabs Cookie for cookie consent management. The site demonstrates good mobile optimization and SEO practices but lacks some advanced accessibility features. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but it lacks visible security headers and explicit privacy or terms of service policies. No direct contact information or incident response channels are found in the provided content, which could be improved to enhance trust and compliance. The domain registration data aligns well with the organization's identity, indicating legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures, security headers, and clearer contact information to improve compliance and user trust.

M

Ministerstvo financí ČR

fondyehp.cz

76

The website www.eeagrants.cz is an official online presence of the Czech Ministry of Finance dedicated to managing and communicating about the EEA and Norway Grants. It serves as a government portal providing information on grant programs, updates, and resources for stakeholders in the Czech Republic. The site targets public sector entities, grant applicants, and interested citizens. The business model is government-funded and focused on grant administration and transparency. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and integrates analytics tools such as Google Analytics and Matomo. Cookiebot is used for comprehensive cookie consent management, reflecting a moderate level of digital maturity. Hosting is inferred to be on Microsoft Azure, supporting scalability and reliability. The site is mobile-optimized and accessible with clear navigation. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, it lacks explicit security headers and does not provide visible security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is basic, with no explicit privacy policy page found in the provided content. Overall, the website is legitimate, professional, and trustworthy, consistent with a government entity. Recommendations include publishing a detailed privacy policy, adding security headers, providing contact information for data protection and incident response, and implementing a vulnerability disclosure policy to enhance security posture and compliance.

N

Nadační fond rodiny Malých

nfrmalych.cz

47

Nadační fond rodiny Malých is a Czech non-profit foundation established in 2021, continuing over 20 years of philanthropic history by its founders. The foundation supports public benefit organizations focused on nature protection, cultural heritage, disadvantaged groups, and cultural and artistic projects. The website is professionally designed, mobile-optimized, and uses modern JavaScript libraries such as Swiper.js and Google Tag Manager for analytics. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit privacy or terms of service documentation. No direct contact information or incident response contacts are visible, which could be improved for transparency and compliance. The domain registration data is consistent with the foundation's claims and location, indicating legitimacy.

K

Kancelária prezidenta Slovenskej republiky

prezident.sk

54

The website www.prezident.sk is the official online presence of the President of the Slovak Republic, currently Peter Pellegrini. It serves as a comprehensive portal providing official information about the president, his biography, official program, press releases, speeches, and contact options primarily through forms. The site targets Slovak citizens, media, and international visitors seeking authoritative information about the presidency. The business model is that of a government institution providing public services and information. The site is well-branded, consistent, and professionally maintained. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Google Analytics, Hotjar, and Facebook SDK for social media integration. It uses Google Fonts and FontAwesome for styling and icons. The site appears to be built on TYPO3 CMS, common for Slovak government sites. Performance is moderate with good mobile optimization and accessibility features. SEO is well implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes important security headers such as HSTS, X-Frame-Options, and Content-Security-Policy. The cookie consent mechanism is robust, allowing granular user control and compliance with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available. Overall, the website is a trustworthy, professional government portal with strong privacy and security postures. It is safe for general audiences and free from adult or questionable content. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure information, and maintaining regular audits of third-party scripts to ensure ongoing security.

The website ediweb.eu/edi/ serves as an Electronic Data Interchange (EDI) platform, primarily targeting business users who require secure document exchange services. The site features a login form for authenticated access and a news iframe for updates, indicating a B2B service model. The business appears to be small-scale with a focus on technology services related to EDI, though detailed company information and market positioning are not publicly disclosed. From a technical perspective, the site uses basic HTML, CSS, and JavaScript without modern frameworks or CMS platforms. The design and user experience are functional but basic, with limited mobile optimization and accessibility features. No analytics or advertising technologies are detected, suggesting a minimalistic approach to tracking and marketing. Security posture shows some basic best practices such as password input masking and hidden form fields, but lacks visible security headers and explicit HTTPS confirmation in the provided data. No privacy, cookie, or terms of service policies are found, indicating compliance gaps. No contact or incident response information is publicly available, which may impact trust and user support. Overall, the site is accessible without WAF or blocking mechanisms and contains safe, business-oriented content. However, improvements in security, privacy compliance, and transparency are recommended to enhance trust and operational security.

Affidea Praha s.r.o. is a private healthcare provider based in Prague, specializing in ambulatory care and advanced diagnostic services such as sonography, CT, MRI, and densitometry. The company operates with contracts across all insurance providers and has over 20 years of experience conducting clinical trials. Their website reflects a professional healthcare service targeting patients in the Czech Republic, offering a broad range of medical specialties and preventive services. Technically, the website uses legacy technologies including an outdated jQuery version and Bootstrap 3, with moderate performance and basic mobile optimization. The site lacks modern security headers and explicit privacy or cookie policies, which are critical for compliance and user trust. No advanced analytics or tracking scripts were detected, indicating minimal user tracking. Security posture is moderate but weakened by the use of outdated libraries and missing security headers. The absence of WHOIS data limits domain trust verification, although the website content and contact information appear legitimate and consistent with a professional healthcare provider. Overall, the website is functional and informative but requires updates in security practices, privacy compliance, and technical modernization to improve trustworthiness and user safety.

Globesystem s.r.o. is a Czech-based IT company founded in 2018, specializing in the supply of IT hardware and software, authorized computer repair services, and comprehensive IT service management including server and network infrastructure, IT security, and monitoring. The company targets both private sector businesses and public institutions, positioning itself as a regional IT service provider with certified specialists and a focus on quality and customer support. The website reflects a professional and consistent brand image with clear contact information and business registration details, supporting its credibility. Technically, the website is built using the WebEditor CMS platform hosted by Webglobe, employing modern web technologies such as JavaScript and WebFontLoader. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. Analytics tracking is implemented via yolacdn.net, indicating moderate user tracking practices. However, security headers and explicit security policies are absent, representing an area for improvement. From a security perspective, the site uses HTTPS (implied by domain and hosting provider), and a cookie consent banner is present, indicating some privacy compliance efforts. There is no dedicated security policy or incident response information, and no vulnerability disclosure or security.txt file was found. The WHOIS data is consistent with the business information, showing a domain age appropriate for the company’s history and no privacy protection, enhancing trustworthiness. Overall, the website is functional, professional, and trustworthy with room for enhancement in security posture and privacy transparency. Strategic recommendations include implementing security headers, publishing detailed privacy and security policies, and improving accessibility and SEO to strengthen digital maturity and compliance.

P

PC Financial

pcfinancial.ca

51

PC Financial is a Canadian financial services brand offering banking and credit card products integrated with the PC Optimum loyalty rewards program. The website presents a professional and modern digital presence, leveraging advanced web technologies such as Next.js and React, and integrates multiple marketing and analytics tools to optimize user engagement and business insights. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website reflects a mature, trustworthy financial brand with a strong focus on customer rewards and digital banking convenience.

The Slovenská hepatologická spoločnosť (Slovak Hepatological Society) is a well-established professional organization dedicated to uniting the hepatology community in Slovakia since 1968. The society focuses on providing modern, quality, and accessible treatment and preventive care for liver disease patients and the general population. Their website serves as a platform for members and the public to access educational resources, event information, and membership benefits. The organization maintains partnerships with pharmaceutical companies and participates in European research consortia such as Liver Aim.

The website omniva.lt is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to content. This prevents extraction of meaningful business, contact, or policy information from the site. The domain is registered since 2018 with a reputable registrar and appears legitimate. The business likely operates in the transportation sector, consistent with the domain name and country of registration (Lithuania). The technical infrastructure includes Cloudflare protection and JavaScript-based captcha verification, indicating a focus on security and bot mitigation. However, the lack of accessible content limits the ability to assess the website's design, user experience, and compliance posture. Security posture is difficult to evaluate fully, but the presence of Cloudflare WAF is a positive indicator. Overall, the site is protected but currently not analyzable beyond the security challenge.

Ú

Ústav zdravotnických informací a statistiky ČR

kolorektum.cz

52

Kolorektum.cz is the official website for the National Colorectal Cancer Screening Program in the Czech Republic, managed by the Institute of Health Information and Statistics of the Czech Republic (ÚZIS ČR). The site provides comprehensive educational and organizational materials aimed at both the general public and healthcare professionals to promote early detection and prevention of colorectal cancer. It is well-branded with official logos from multiple Czech health institutions, reinforcing its authoritative position in the healthcare sector. The website targets Czech residents and medical practitioners involved in colorectal cancer screening, offering detailed program descriptions, data, and contact information.

S

Společnost klinické výživy a intenzivní metabolické péče

skvimp.cz

56

SKVIMP is a specialized professional society in the Czech Republic dedicated to clinical nutrition and intensive metabolic care. The organization serves healthcare professionals including doctors, pharmacists, nurses, and nutrition therapists by providing expert recommendations, organizing international congresses, and offering educational resources. The website reflects a well-established entity with a domain age since 2001, consistent with its professional stature. Technically, the site is built on WordPress using a modern theme and integrates Google Tag Manager for analytics, indicating a moderate level of digital maturity. The site is mobile optimized and offers good user experience with clear navigation and relevant content updates. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security practices.

M

Masarykova univerzita

svod.cz

50

The SVOD portal is an academic and governmental platform providing epidemiological data and analyses on cancer incidence and related statistics in the Czech Republic. It is developed in collaboration with Masaryk University, the Czech oncological society, and national health institutions, positioning it as an authoritative source for healthcare professionals and researchers. The portal offers interactive analyses, reports, and open data access, supporting public health monitoring and research. Technically, the website employs modern web technologies including JavaScript, CSS frameworks like Foundation, and integrates Google Analytics for user tracking. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. However, some technical improvements such as enhanced security headers and explicit privacy documentation are recommended. From a security perspective, the site uses HTTPS and a cookie consent mechanism, but lacks visible security headers and formal incident response contacts. The absence of WHOIS data reduces domain trustworthiness, though the institutional backing and content quality mitigate concerns. No vulnerabilities or sensitive data exposures were detected. Overall, the portal is a reliable and professional resource with moderate technical maturity and a good security posture. Strategic improvements in privacy compliance and security best practices would enhance trust and resilience.

I

Institut biostatistiky a analýz LF MU

onconet.cz

53

NOP Online is a Czech national oncology portal providing comprehensive information and resources related to cancer care, screening programs, and epidemiological data. It is supported by academic and governmental institutions, notably the Institut biostatistiky a analýz LF MU and the Ministry of Health of the Czech Republic. The portal targets patients, healthcare professionals, and researchers within the Czech Republic, offering interactive maps, data visualizations, and up-to-date news on oncology programs. Technically, the website employs modern web technologies including Leaflet.js for mapping and Google Analytics for user tracking, with a responsive and accessible design. Security posture is moderate with HTTPS usage and cookie consent implemented, but lacks visible security headers and formal privacy or terms of service documentation. WHOIS data confirms the domain's legitimacy and long-term registration consistent with the academic institution managing the site. Overall, the website is professional, trustworthy, and serves an important healthcare informational role in the Czech Republic.

R

Recruiterflow

recruiterflow.com

69

Recruiterflow is a technology company specializing in AI-first applicant tracking and customer relationship management software tailored for recruiting and staffing agencies. Established in 2016, it positions itself as a leading SaaS provider in the recruitment technology market, offering integrated ATS, CRM, automation, and AI-driven capabilities. The website reflects a mature digital presence with professional design, clear messaging, and a focus on AI-enhanced recruitment workflows. The technical infrastructure leverages modern web technologies including Webflow CMS, HubSpot marketing tools, and extensive analytics and tracking services, indicating a high level of digital maturity and marketing sophistication. Security posture is solid with HTTPS enforced and domain registration protections, though there is room for improvement in DNS security and explicit security policies. Overall, the website and domain data suggest a credible and established business with a strong market position in recruitment technology.

H

Hanze Hogeschool Groningen

hanze.nl

75

Hanze Hogeschool Groningen is a well-established higher education institution in the Netherlands, offering a broad portfolio of academic programs, research initiatives, and professional collaborations. The website reflects a mature digital presence with comprehensive content targeting students, professionals, and organizations. Technically, the site employs modern web technologies including Google Tag Manager and image optimization services, with good mobile responsiveness and accessibility. Security posture is solid with HTTPS and CSRF protections, though explicit security headers and formal security policies are not evident. Privacy compliance is partial, lacking visible privacy and cookie policies or consent mechanisms. Overall, the site demonstrates high business credibility and professionalism but could improve transparency on privacy and security disclosures.

U

UAB "Detalita"

detalita.lt

41

Detalita is a Lithuanian-based B2B company specializing in automotive parts supply and vehicle servicing. Established in 1998, it holds a strong market position in Lithuania's transportation and retail sectors, offering a wide range of automotive components and related services. The website targets business clients and automotive professionals, providing product search by vehicle and brand, along with utilization services for batteries, oils, and tires. Technically, the site uses modern web technologies including OXID eShop CMS, jQuery, HTMX, and Hyperscript, delivering a responsive and user-friendly experience. Security-wise, the site enforces HTTPS and uses secure forms but lacks some advanced security headers and explicit privacy compliance mechanisms. Overall, the site is professional, trustworthy, and well-maintained, though improvements in privacy compliance and security policies are recommended.

A

Alio

alio.lt

56

Alio.lt is a Lithuanian online classifieds platform providing free advertisement listings across a wide range of categories including real estate, transport, jobs, electronics, and leisure. The website targets the general Lithuanian-speaking public and operates as a marketplace for buying, selling, and trading goods and services locally. It maintains a moderate market position with a significant volume of listings and a user-friendly interface. Technically, the site employs modern JavaScript libraries, Google Tag Manager, and Google Ads for analytics and advertising, hosted likely behind Cloudflare infrastructure. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced, but the site lacks visible security headers and a cookie consent mechanism, which are recommended for GDPR compliance. WHOIS data is unavailable due to registry query failure, slightly impacting trust but the site shows legitimate business indicators such as privacy policy, terms of service, and contact email. Overall, the site is safe, professional, and functional with room for improvement in privacy compliance and security best practices.

A

Asociace inovativního farmaceutického průmyslu (AIFP)

lekarskekongresy.cz

50

The website lekarskekongresy.cz serves as a transparency platform managed by the Asociace inovativního farmaceutického průmyslu (AIFP), a Czech pharmaceutical industry association. It focuses on providing a database related to Continuing Medical Education (CME) disclosures, promoting transparency in financial support between pharmaceutical companies and healthcare professionals. The site targets medical professionals, pharmaceutical companies, and event organizers, positioning itself as a trusted resource within the Czech healthcare sector. The business model is non-commercial, emphasizing transparency and ethical collaboration in the pharmaceutical industry. The website content is professionally presented, consistent with the association's branding and mission. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Swiper.js for UI components. It integrates Google Analytics for visitor tracking and CookieHub for cookie consent management, reflecting a moderate level of digital maturity. The site is mobile-optimized with responsive design elements and provides a clear navigation structure. Hosting and domain registration are consistent with Czech providers, supporting the site's legitimacy. From a security perspective, the website uses HTTPS and implements a cookie consent mechanism, but lacks visible advanced security headers and explicit security or incident response policies. No critical vulnerabilities or suspicious patterns were detected. Privacy compliance is partial, with no dedicated privacy policy or terms of service pages found, which is a notable gap. Overall, the security posture is adequate but could be improved with formalized policies and enhanced header configurations. The overall risk assessment is low, with the site appearing trustworthy and professionally maintained. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and improving transparency around incident response and vulnerability disclosures to strengthen compliance and user trust.

Č

Česká advokátní komora

cak.cz

55

Česká advokátní komora is the self-governing professional organization representing all lawyers in the Czech Republic. It is the largest legal professional body in the country, responsible for public administration in the field of advocacy. The website provides a comprehensive directory of lawyers and trainees, legal news, educational and social events, and public legal information. The target audience includes legal professionals and the general public seeking legal assistance or information. Technically, the website uses modern JavaScript frameworks, Google Tag Manager for analytics, and Cookiebot for cookie consent management. The site is mobile-optimized with good navigation and professional design. Security posture is strong with HTTPS and cookie consent but lacks explicit security headers and published security policies. WHOIS data is unavailable, which limits domain trust assessment, but the website's professional appearance and content support its legitimacy. Overall, the site is a credible government-related legal portal with room for improvement in privacy and security disclosures.

P

PepiApp - Mobilní aplikace, vývoj mobilní aplikace pro Android a iOS

pepiapp.cz

60

PepiApp is a small technology service provider specializing in mobile application development for Android and iOS platforms, based in the Czech Republic. The website presents a professional image with a clear focus on their core services and target audience. The technical infrastructure leverages modern web technologies including Webflow CMS, Google Tag Manager for analytics, and Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and CSRF protection cookies in place, although some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partially addressed through a detailed cookie consent mechanism, but the absence of a visible privacy policy and contact information limits full compliance assurance. Overall, the website is functional, well-designed, and trustworthy, but could benefit from enhanced transparency and security documentation.

M

Moravskoslezská filmová kancelář

filminnorthmoravia.com

53

The website represents the Moravskoslezská filmová kancelář, a regional film office supporting film productions in the Moravian-Silesian region of the Czech Republic. It offers services such as location scouting assistance and connecting filmmakers with local service providers. The site is built on the Wix platform, leveraging modern JavaScript frameworks and polyfills to ensure compatibility and responsiveness. However, the domain WHOIS data is missing, raising concerns about domain registration legitimacy. The website lacks explicit privacy, cookie, and terms of service policies, as well as contact information, which impacts its trustworthiness and compliance posture. Security-wise, the site uses HTTPS but lacks visible security headers and incident response details, indicating room for improvement in security best practices.

J

Jeseníky Sdružení cestovního ruchu

jeseniky-rodina.cz

44

Jeseníky.cz is a well-established regional tourism portal dedicated to the Jeseníky mountain region in the Czech Republic. Founded in 1998, it serves as an authoritative source of information for tourists, providing comprehensive details on tourist destinations, accommodation, dining, events, and recreational activities. The site is operated by Jeseníky Sdružení cestovního ruchu, a recognized tourism association, and features partnerships with multiple regional and national tourism organizations. The platform targets visitors interested in outdoor activities, cultural events, and wellness experiences in the Jeseníky area. Technically, the website employs a custom CMS called Noteo Engine, utilizes modern web technologies including HTML5, CSS, JavaScript, jQuery, and integrates third-party services such as Google Analytics and YouTube embeds. The site is hosted under a reputable registrar (REG-ZONER) with a domain age dating back to 1998, indicating a mature online presence. Mobile optimization and SEO practices are implemented at a good level, though accessibility features are basic. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, but lacks visible advanced security headers and a dedicated security or privacy policy page. No critical vulnerabilities or WAF blocking were detected. Contact information is clearly provided, enhancing trustworthiness. The site does not contain any adult or questionable content, making it safe for general audiences. Overall, Jeseniky.cz demonstrates a solid business and technical foundation with room for improvement in security best practices and privacy compliance. Strategic enhancements in these areas would further strengthen its position as a trusted regional tourism resource.

V

visitostrava.eu

visitostrava.eu

60

VisitOstrava.eu is the official tourism guide website for the city of Ostrava, Czech Republic. It provides comprehensive information about local events, attractions, accommodation, and cultural activities, targeting tourists and visitors. The site also features an e-shop for souvenirs and promotes regional tourism partners, positioning itself as a key resource for exploring Ostrava. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates tracking tools such as Google Analytics and Facebook Pixel. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS and asynchronous loading of tracking scripts but lacks some security headers and a published privacy policy, which are areas for improvement. The domain WHOIS data is privacy protected by EURid, which is typical for .eu domains, and does not reveal registrant details, but the website content and external partnerships indicate legitimacy. Overall, the website is professional, trustworthy, and serves its business purpose effectively, though it would benefit from enhanced privacy and security disclosures.

H

Hyve

hyve.com

75

Hyve is a professional managed hosting and cloud services provider with a global footprint, offering tailored IT infrastructure solutions including private cloud, dedicated servers, and colocation. The company positions itself as a customer-centric, secure, and reliable partner with over 35 global locations and multiple industry certifications. The website demonstrates a mature digital presence with modern technologies and strong SEO and accessibility features. Security posture is robust with HTTPS, security headers, and secure forms, although explicit security policies and incident response details are not publicly available. The absence of WHOIS registration data introduces some uncertainty about domain legitimacy, but the overall professional presentation and trust signals mitigate this risk. Strategic recommendations include publishing detailed security policies and monitoring domain registration status to enhance trust.

S

StanVision

stan.vision

64

StanVision is a specialized UI/UX agency focused on SaaS product and web design, targeting B2B SaaS companies and startups. The company offers a range of services including product design, website design, Webflow development, digital strategy, and support for growth. Their market position is that of a niche agency with a portfolio of startup success stories and recognized awards, indicating a strong reputation in their field. Technically, the website is built on Webflow CMS with modern JavaScript libraries and integrations such as Google Tag Manager and Hotjar, reflecting a mature digital infrastructure. The site is well-optimized for performance and mobile devices, with excellent design and user experience. Security posture is good with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is basic with a cookie banner present but no detailed privacy policy found in the provided content. Overall, the website presents a professional and trustworthy front, though improvements in security transparency and privacy documentation are recommended.

T

Turistická oblast Opavské Slezsko, z.s.

opavskocard.cz

50

The website www.opavskocard.cz represents Turistická oblast Opavské Slezsko, a regional non-profit organization promoting tourism in the Opavské Slezsko region of the Czech Republic. The site offers information about a tourist card that provides discounts and benefits for visitors, supported by the Moravskoslezský kraj regional government. The business model focuses on enhancing regional tourism through partnerships and benefit offerings. The website is professionally designed with good content quality and clear navigation, targeting tourists and visitors interested in regional activities. Technically, the website employs modern JavaScript libraries such as Leaflet.js for mapping, Smartlook for user behavior analytics, and Google Tag Manager for tag management. The site is mobile optimized and uses HTTPS with a strong SSL configuration. However, some security best practices like security headers and cookie consent mechanisms are missing, which could be improved to enhance privacy compliance and security posture. From a security perspective, the site shows no critical vulnerabilities or exposed sensitive data. The lack of WHOIS data due to privacy protection is justified given the non-profit nature of the organization. The site does not provide direct contact emails or phone numbers but includes a physical address and social media links. Overall, the website is trustworthy and safe for general audiences, with no adult or questionable content. Strategically, the organization should focus on implementing security headers, explicit cookie consent, and publishing security and incident response policies to strengthen compliance and user trust. Enhancing transparency around data protection and vulnerability disclosure would further improve the security posture and credibility.

L

Lékaři bez hranic - Médecins Sans Frontières in Czech Republic, o.p.s.

lekari-bez-hranic.cz

50

Lékaři bez hranic (Médecins Sans Frontières in Czech Republic) is a well-established international humanitarian and medical aid organization providing neutral, independent, and impartial medical assistance worldwide. The organization is recognized with a Nobel Peace Prize and operates primarily through public donations, avoiding reliance on government funding to maintain independence. Their website targets donors, volunteers, and healthcare professionals interested in humanitarian missions. The site offers comprehensive information about their values, missions, donation options, and volunteer opportunities. Technically, the website is built on Drupal 10, leveraging modern web technologies including Google Tag Manager and Cookiebot for analytics and GDPR-compliant cookie consent. The site is mobile-optimized, accessible, and SEO-friendly, with a professional and consistent design that enhances user experience. However, some security best practices such as explicit security headers and published security policies are missing. From a security perspective, the site enforces HTTPS and uses consent-based tracking mechanisms, but lacks visible incident response or vulnerability disclosure information. The absence of WHOIS data for the domain reduces trust from a domain registration standpoint, though the website content and branding strongly support legitimacy. Overall, the site demonstrates a mature digital presence with room for improvement in security transparency and domain registration clarity. The overall risk is moderate to low, with recommendations to enhance security headers, publish security policies, and clarify domain registration details to strengthen trust and compliance.

J

Jasyko s.r.o.

jasyko.cz

40

Jasyko s.r.o. is a Czech Republic-based company specializing in high-end audiovisual and smart home technology solutions for both domestic and professional markets. Established in 1998, the company offers a range of services including HI-FI equipment sales and smart home system integration, supported by physical showrooms in Brno and Prague. The website reflects a niche market position with a focus on quality and recognized brand partnerships. Technically, the website employs a custom or unknown CMS with technologies such as jQuery 3.1.1 and WOWSlider, hosted by Active24. While the site is accessible and professionally designed, it shows room for improvement in mobile optimization, accessibility, and SEO. Security posture is moderate with HTTPS usage and cookie consent implemented, but lacks explicit security headers and uses an outdated JavaScript library, which could pose risks. Privacy compliance is weak due to the absence of a privacy policy and terms of service. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

W

WWK Versicherungen

wwk.de

62

WWK Versicherungen is a well-established German insurance company founded in 1884, offering a broad range of insurance products including life, health, property, liability, and retirement solutions. The company positions itself as a strong community-focused insurer with a comprehensive portfolio targeting a wide audience. Their website reflects a mature digital presence with clear navigation, multiple customer and partner portals, and a strong emphasis on compliance and service quality. Technically, the site uses modern web technologies such as Vue.js and integrates privacy and consent management tools like OneTrust, alongside analytics via eTracker. Security posture is robust with HTTPS enforcement, security headers, and ISO 27001 certification, although explicit vulnerability disclosure and incident response contacts are not publicly detailed. Overall, the website is professional, secure, and compliant, supporting WWK's market position as a trusted insurer in Germany.

Citify Pro UAB operates an online platform focused on real estate development tracking primarily in the Baltic region. The website provides a real estate development map, project news, and business products such as Pro, Pulse, and Radar, targeting real estate professionals, developers, investors, and interested public users. The business model is subscription and data-driven, offering valuable market insights and contact information. The company maintains a consistent brand presence with active social media channels and structured data enhancing SEO and discoverability. Technically, the website is built on WordPress with Nuxt.js frontend components, leveraging modern JavaScript libraries and Google services for analytics and security. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS and reCAPTCHA integration, but lacks explicit security policies and some recommended HTTP headers. Privacy and cookie policies are present and GDPR compliant, though cookie consent mechanisms are not evident. Overall, the site is professional, trustworthy, and well-positioned in its niche.

A

Aspironix - International Medtech Distributor

aspironix.com

58

The website www.aspironix.com appears to be either inactive or unregistered as indicated by the WHOIS data which returned 'No match for domain'. The site is built on the Wix platform and contains minimal content, mostly consisting of Wix's default scripts and styles. There is no meaningful business information, contact details, or privacy policies present. Technically, the site uses standard Wix technologies and polyfills but lacks advanced SEO, accessibility, or security features. The security posture is weak due to absence of security headers and no visible SSL configuration details. Overall, the site presents a high risk due to lack of verifiable business information and domain registration data.

P

ProProfs Chat

live2support.com

10

ProProfs Chat is a technology company offering AI-powered live chat software designed to enhance customer support and sales for businesses. Positioned as a mature SaaS provider, it offers a range of subscription plans including a free tier, targeting small to medium businesses seeking real-time customer engagement solutions. The company is a subsidiary of ProProfs, with a strong brand presence and positive customer ratings. Technically, the website employs modern JavaScript libraries, analytics tools, and is optimized for mobile devices, reflecting a good level of digital maturity. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response details are not publicly disclosed. Overall, the website is professional, trustworthy, and compliant with privacy regulations, but the absence of WHOIS domain registration data introduces some uncertainty regarding domain legitimacy. Strategic recommendations include verifying domain registration, publishing detailed security and incident response policies, and enhancing transparency around data protection roles.

C

Care Comm

carecomm.cz

59

Care Comm is a small Czech healthcare service provider specializing in publishing professional medical journals, website development, and organizing medical congresses. The company targets healthcare professionals and organizations within the Czech Republic. The website is built on the Wix platform, leveraging Wix Thunderbolt framework and standard web technologies such as JavaScript, CSS, and HTML5. The site demonstrates good design quality and mobile optimization but lacks advanced accessibility and SEO features. Security posture is weak due to absence of security headers and no visible privacy or cookie policies. WHOIS data is unavailable, limiting trust assessment. Overall, the website is functional and professional but requires improvements in security and compliance to enhance trustworthiness.