Security Directory

AMCA, spol. s r. o. operates the website cslr.cz, serving as the online presence for the Czech Society for Wound Healing (ČSLR). The organization focuses on providing professional resources, organizing congresses, and offering educational courses related to wound care. The website targets healthcare professionals and members of the wound care community primarily in the Czech Republic. The business model is that of a professional society supported by memberships, events, and partnerships. The domain has been active since 2003, indicating a well-established presence in the healthcare sector. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager for analytics, and cookie consent mechanisms compliant with GDPR. The site is mobile optimized and uses structured data (JSON-LD) to enhance search engine understanding. Performance is moderate with good SEO and accessibility basics, though some improvements could be made in accessibility and security policy disclosures. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. Cookie consent is implemented properly, but there is no explicit security policy or incident response information published. The WHOIS data is consistent with the website content and business claims, supporting legitimacy. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, the website presents a professional and trustworthy image with good content quality and technical implementation. Recommendations include publishing a security policy, adding incident response contacts, and improving accessibility features to enhance compliance and user experience further.

W

Whow Games GmbH

merkur24.com

69

Merkur24 is a social casino gaming platform operated by Whow Games GmbH, offering free-to-play casino games such as slots, blackjack, and roulette. The platform targets adult users across multiple European languages and markets, emphasizing entertainment without real money gambling. The website demonstrates a solid technical infrastructure with modern web technologies, fast performance, and mobile optimization. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanisms aligned with GDPR standards. Security posture is good with HTTPS enforcement and secure login forms, though explicit security policies and incident response details are absent. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, but overall business credibility is supported by consistent branding and privacy practices.

A

adSYSTEM

adsystem.eu

51

adSYSTEM is a Czech-based technology company specializing in the design and implementation of internet e-shops, websites, CMS, and CRM systems with rental options. The company targets businesses and organizations seeking integrated administration and publication systems for internet and intranet applications. Their market position is niche-focused within the Czech Republic, offering a proprietary CMS platform and related modules such as e-shop management, CRM, cash register integration, and SEO optimization. The website content is professional, well-structured, and optimized for mobile devices, reflecting a good level of digital maturity. Technically, the website employs standard web technologies including HTML5, CSS3, and jQuery 3.2.1, hosted by a reputable Czech registrar and hosting provider (INTERNET CZ, a.s.). The site enforces HTTPS with strong SSL configuration and basic security headers, though there is room for improvement by adding advanced security headers and publishing a security policy. The cookie consent mechanism and privacy policy indicate awareness of GDPR compliance, enhancing the site's privacy posture. From a security perspective, the site demonstrates good practices such as secure login forms and no visible vulnerabilities or exposed sensitive data. However, the absence of a formal security policy, incident response contacts, and vulnerability disclosure mechanisms suggests areas for maturity growth. Overall, the risk level is low with no critical issues detected. Strategically, adSYSTEM should focus on enhancing security transparency, expanding accessibility features, and maintaining up-to-date technical components to sustain trust and compliance. The website's professional presentation and clear contact information support strong business credibility within its market segment.

W

WWK Lebensversicherung a. G.

wwkarena.com

65

WWK Lebensversicherung a. G. operates the WWK ARENA official website, providing comprehensive information about the stadium in Augsburg, Germany. The site serves fans and visitors with details on ticketing, hospitality, sustainability, and visitor services, positioning itself as a key digital touchpoint for the stadium experience. The business model focuses on information dissemination and enhancing visitor engagement, supported by strong branding aligned with the parent insurance company WWK. Technically, the website employs modern web technologies including JavaScript, CSS, and integrates third-party services like YouTube and eTracker analytics, with a cookie consent mechanism ensuring GDPR compliance. Accessibility is enhanced by tools such as Eye-Able, reflecting a commitment to inclusive design. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though improvements like enabling DNSSEC and adding security headers are recommended. Overall, the website is professional, trustworthy, and well-structured, supporting the business's digital presence effectively.

P

Pedro's Foodtruck

pedrosfoodtruck.cz

42

Pedro's Foodtruck is a small hospitality business operating a street food truck and bistro in the South Moravia region of the Czech Republic. They specialize in American-style comfort food such as pulled meat burgers, hot dogs, tacos, and quesadillas, emphasizing local ingredients and homemade sauces. The business has a strong local presence with positive customer reviews and media recognition, positioning itself as a leader in the regional street food market. Technically, the website is built on Joomla CMS using the UIkit framework, offering a visually appealing and mobile-optimized experience. However, the site lacks critical privacy and cookie policies, which impacts compliance and trust. Security posture is moderate with HTTPS usage but missing security headers and incident response information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

A

Agentura Osma a.s.

nutrivino.cz

51

Nutrivino.cz is a specialized digital platform launched in 2023 by Agentura Osma a.s. to assist wine producers in the Czech Republic with compliance to new EU legislation requiring detailed nutritional and ingredient labeling on wine products. The platform offers QR code management, label design integration, and online presentation of mandatory information, targeting wine producers and distributors. The website is professionally designed using modern web technologies like Bootstrap and provides clear contact information for sales and technical support. However, it lacks privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS implied but no visible security headers or incident response contacts. Overall, the domain registration aligns well with the business claims, indicating legitimacy.

A

ANYCARE s.r.o.

anycare.cz

50

ANYCARE s.r.o. is a Czech healthcare company specializing in telemedicine services by providing remote medical examination devices (TytoCare) and online doctor consultations. The company targets patients, healthcare professionals, organizations, and social care institutions, addressing the shortage of practical doctors in the Czech Republic. The website is professionally designed, mobile-optimized, and uses modern analytics and tracking tools such as Google Tag Manager and Hotjar. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is good with HTTPS and secure forms, but could be improved by adding security headers and publishing incident response information. WHOIS data is unavailable, which raises some concerns about domain registration transparency. Overall, the website is trustworthy and provides clear contact information and business details, but should address compliance and transparency gaps to enhance trust and security.

Oborová zdravotní pojišťovna zaměstnanců bank, pojišťoven a stavebnictví (OZP) is the third largest employee health insurance company in the Czech Republic. The company offers a broad range of benefits including free preventive check-ups, financial contributions to preventive programs, and discount programs. OZP emphasizes convenience by enabling clients to handle basic administrative tasks online, supported by their VITAKARTA online service and mobile applications. The website reflects a mature digital presence with comprehensive content, clear navigation, and multiple client engagement channels including a chatbot and online appointment booking. Technically, the site employs modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Smartlook, all integrated with a robust cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be explicitly confirmed. The absence of WHOIS data limits domain trust analysis, but the website's professional presentation, clear business information, and social media presence strongly support legitimacy. Overall, OZP demonstrates a well-established healthcare insurance business with a solid digital infrastructure and compliance focus.

WWW.KOTVA.CZ, a.s. operates a real estate rental business specializing in office, residential, storage, and parking spaces located in a historic building in the center of Prague. The company targets businesses and individuals seeking premium rental spaces in Prague 1, leveraging the unique architectural and historical value of their property. The website presents a professional image with clear descriptions of services and contact information, positioning the company as a niche local real estate provider with a small but stable tenant community. Technically, the website uses modern web technologies including Google Analytics for tracking and Google Maps API for location services. The site is mobile responsive and well-structured, though it lacks some advanced accessibility features and explicit security headers. The absence of a CMS or hosting provider information limits deeper infrastructure insights. Performance is moderate with good SEO practices evident through meta tags and structured content. From a security perspective, the website uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency and readiness. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is not uncommon for small businesses. Overall, the website is safe, professional, and functional with moderate risk due to missing privacy and security policy disclosures. Strategic improvements in compliance and security posture would enhance trust and reduce potential regulatory risks.

E

EUC

euc.cz

69

EUC.cz is the largest outpatient healthcare provider in the Czech Republic, operating clinics, mamocenters, pharmacies, and laboratories serving approximately one million patients annually. The website presents a professional and consistent brand image targeting Czech healthcare consumers. Technically, the site employs modern JavaScript libraries, Google Tag Manager, Facebook Pixel, and Cookiebot for GDPR-compliant cookie consent management. The site is mobile optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and cookie consent denying tracking by default, though security headers and explicit incident response policies are absent. No contact emails or phone numbers are directly visible, and no terms of service page was found. Overall, the site is trustworthy and well-positioned in its market segment.

The website www.vci-protection.cz is a minimal WordPress site with default placeholder content and no substantive business information or services described. The lack of WHOIS data suggests the domain is either privacy protected or unregistered, which combined with minimal content, indicates the site may be under development or inactive. Technically, the site uses WordPress with the Twenty Twenty-One theme and basic modern web technologies. HTTPS is enabled, but no advanced security headers or policies are present. There is no evidence of privacy, cookie, or terms of service policies, nor any contact or incident response information, which limits compliance and trust. Overall, the site has a low security posture and minimal business credibility.

O

Ooni USA

ooni.com

64

Ooni USA operates a professional e-commerce website specializing in the sale of pizza ovens, including outdoor wood-fired, gas, and electric indoor models. The company targets consumers interested in outdoor cooking and pizza making, positioning itself as a leading niche brand in this market segment. The website is built on the Shopify platform, leveraging modern web technologies and integrations to provide a smooth shopping experience. The site includes comprehensive privacy and cookie policies, indicating GDPR compliance and a commitment to user privacy. However, explicit contact information and detailed security policies are not prominently published on the main site. The domain is well-established since 2002, with strong domain status protections, supporting the legitimacy of the business.

F

Finvalda

finvalda.lt

51

Finvalda is a Lithuanian company specializing in financial management software solutions for businesses of various sizes, offering modular products, integrations, and data protection features. Established in 2004, it holds a stable market position with a focus on serving small to large enterprises. The website is built on WordPress and incorporates modern technologies such as Google Tag Manager, reCAPTCHA, and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, the site reflects a professional and trustworthy business presence with good technical and privacy compliance maturity.

Edisoft Group OU operates as the largest EDI (Electronic Data Interchange) operator in the Baltic states, providing electronic document exchange services to over 2500 clients. Their website, primarily in Lithuanian, showcases a comprehensive portfolio of EDI-related services including integration solutions, B2B order systems, and international EDI connections. The company emphasizes automation and efficiency in commercial document exchange, targeting businesses in Lithuania, Latvia, Estonia, and beyond. The market position is strong within the Baltic region, supported by certifications such as PEPPOL and a significant volume of processed documents annually.

SEB bankas is a leading Lithuanian financial institution offering a wide range of banking and financial services to private individuals, businesses, and large enterprises. The website demonstrates a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. The technical infrastructure is modern, leveraging Drupal 10 CMS and standard web technologies, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response information are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy. Overall, the website reflects a professional and trustworthy financial services provider with room for improvement in transparency around security and domain registration details.

P

Paysera LT, UAB

paysera.lt

65

Paysera LT, UAB operates a comprehensive financial services platform primarily targeting private individuals and businesses in Lithuania and surrounding regions. The company offers a wide range of services including IBAN accounts, currency exchange at competitive rates, payment collection solutions for e-commerce, contactless Visa cards with mobile wallet integration, and additional services such as event ticketing and gold trading. The website reflects a mature business with a strong regional presence and multiple localized versions for different countries and languages. Technically, the site employs modern web technologies including AngularJS, Bootstrap, and lazy loading techniques to optimize user experience and performance. Security is a clear priority, with HTTPS enforced and a dedicated security information page, although some security headers and incident response disclosures could be improved. The absence of WHOIS data limits domain registration verification, but the overall business credibility is supported by licensing references and customer testimonials. Privacy compliance is mostly addressed with a comprehensive privacy policy, though cookie consent mechanisms are not explicitly visible. Overall, the site presents a professional, trustworthy, and functional digital presence for a large financial services provider.

R

Revolut

revolut.com

73

Revolut is a leading global fintech company providing a comprehensive suite of financial services including personal and business accounts, international money transfers, currency exchange, savings, investments, cryptocurrency, and insurance products. With over 65 million customers worldwide and strong regulatory authorizations from the UK's Financial Conduct Authority, Revolut holds a significant market position in the digital banking and fintech space. The website reflects a mature digital presence with excellent content quality, user experience, and mobile optimization. Technically, the website leverages modern web technologies such as React and Next.js, delivering fast performance and strong SEO optimization. Security measures are robust, including HTTPS enforcement and multiple security headers, alongside a proactive fraud detection team and a responsible disclosure program. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR adherence is evident. Overall, Revolut demonstrates a strong security posture with no critical vulnerabilities detected. The absence of WHOIS data is likely due to privacy protection, which is common for fintech companies to mitigate spam and abuse risks. The website is trustworthy, professional, and well-aligned with industry best practices, making it a reliable platform for financial services users.

Virgin Media operates a dedicated abuse reporting portal at netreport.virginmedia.com, providing a structured form for reporting internet security issues related to their IP addresses and accounts. The site is clearly branded and targets users needing to report abuse, phishing, or security threats. The business is a major UK telecommunications provider with a large customer base. The portal supports reporting various abuse types and provides guidance on child abuse image reporting via the Internet Watch Foundation. The site content is professional but basic, focusing on functionality over design. Technically, the site uses standard HTML, CSS, and JavaScript with no advanced frameworks or CMS detected. The performance and mobile optimization are basic, with no visible analytics or tracking scripts. Security posture is moderate but could be improved; no HTTPS enforcement or security headers were detected in the provided content, and no privacy or cookie policies are linked. The form includes client-side validation and warnings about phishing and abuse reporting. Security-wise, the portal facilitates incident response by providing a contact email for phishing reports and options to report various abuse types. However, the absence of a published security policy or vulnerability disclosure document limits transparency. WHOIS data for the subdomain is unavailable, which is typical for subdomains, but the branding and content align with Virgin Media's official services, supporting legitimacy. Overall, the site is functional for its purpose but would benefit from enhanced security and privacy compliance measures.

M

Mölnlycke Health Care

molnlycke.com

70

Mölnlycke Health Care is a globally recognized MedTech company specializing in innovative and sustainable solutions for wound care and surgical procedures. The company positions itself as a leader in healthcare technology, targeting healthcare professionals and institutions with a strong emphasis on improving patient outcomes and operational efficiency. The website reflects a mature digital presence with comprehensive corporate information, product offerings, and sustainability initiatives. Technically, the site employs modern JavaScript frameworks, Google Tag Manager, and Microsoft Application Insights for analytics and telemetry, indicating a commitment to performance monitoring and user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are absent. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. The WHOIS data is unavailable, which slightly reduces trust but the website's professional presentation and consistent branding support legitimacy. Overall, the site scores well on content quality, technical implementation, security, privacy, and business credibility, making it a reliable and professional corporate web presence.

S

Schindlerova pletárna s.r.o.

schindlerovapletarna.cz

10

Schindlerova pletárna s.r.o. is a Czech manufacturer specializing in knitted clothing with a rich tradition dating back to 1854. The company produces a variety of knitted garments including sweaters, cardigans, hats, scarves, and socks, serving both retail and custom order markets. Their website reflects a medium-sized manufacturing business with a strong emphasis on heritage and quality craftsmanship. The company maintains an active online presence with e-commerce capabilities and social media engagement. Technically, the website is built on the Upgates e-commerce platform using modern web technologies such as Bootstrap and jQuery, with integrations for Facebook Pixel and Smartlook for analytics and marketing purposes. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though it lacks advanced security headers and published security policies. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear professional and legitimate. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations, targeting general audiences interested in quality knitted apparel.

V

VITAPUR spol. s r.o.

teplodomova.cz

49

VITAPUR spol. s r.o. operates the website teplodomova.cz, a Czech family-owned business specializing in manufacturing and retailing wool products since 1990. The company positions itself as a trusted specialist with a WOOLMARK license, targeting general consumers interested in high-quality woolen goods. Their business model combines direct manufacturing with e-commerce sales, supported by a professional website featuring product catalogs, customer service, and clear contact channels. Technically, the site uses modern web technologies including Upgates e-commerce platform, Google Analytics 4, Facebook Pixel, and Smartlook for analytics and marketing, ensuring a responsive and user-friendly experience.

V

VITAPUR spol. s r.o.

vitapur.sk

50

VITAPUR spol. s r.o. is a family-owned Czech company established in 1990, specializing in manufacturing and supplying healthcare products such as anti-decubitus mattresses and bed equipment. The company serves both professional healthcare institutions and end consumers through wholesale and retail e-commerce channels. Their market position is solid within the Czech and Slovak healthcare sectors, supported by ISO 9001 certification and active participation in healthcare associations. Technically, the website is built on the Upgates e-commerce platform, utilizing modern JavaScript libraries, Google Analytics 4, and Facebook Pixel for marketing and analytics. The site is well-optimized for mobile and SEO, with good user experience and clear navigation. Security posture is strong with HTTPS, cookie consent, and form validation, though additional security headers could enhance protection. Privacy compliance is robust, with clear policies and consent mechanisms. Overall, the website reflects a professional and trustworthy business with a good digital maturity level.

H

HARTMANN – RICO a.s.

zivotsestomii.cz

10

The website www.zivotsestomii.cz represents a healthcare-focused business under the brand Dansac, operated by HARTMANN – RICO a.s. It specializes in the development, manufacturing, and distribution of ostomy care products, targeting stomy patients and their families in the Czech Republic. The site offers comprehensive educational content, product information, and customer support, positioning itself as a trusted resource in the stomy care market. Technically, the site employs modern JavaScript frameworks, cookie consent management via Cookiebot, and analytics tools including Google Analytics and Sitecore Engagement Analytics. The site is well-structured, mobile-optimized, and SEO-friendly, providing a professional user experience. Security posture is solid with HTTPS enforced and CSRF protections, though some security headers are missing and should be implemented to enhance protection. Privacy compliance is robust with clear cookie and privacy policies and consent mechanisms in place. However, the WHOIS data for the domain is unavailable, limiting the ability to fully verify domain legitimacy and registration details. Overall, the site is a credible and professional platform with minor technical and security improvements recommended.

H

HARTMANN

hartmanndirect.com

9

HARTMANN direct is a healthcare-focused business providing wound care, incontinence, disinfection, and surgical efficiency products globally through a network of distributors and country-specific websites. The company positions itself as a professional partner with a strong international presence. Technically, the website uses Cloudflare for CDN and security, employs basic JavaScript and CSS, and has moderate performance and mobile optimization. However, the site lacks comprehensive metadata, structured data, and visible privacy or cookie policies, which limits its compliance posture. Security-wise, HTTPS is enabled and Cloudflare provides protection, but the absence of security headers and incident response contacts indicates room for improvement. Overall, the website is functional but basic, with moderate trustworthiness and a need for enhanced privacy and security features.

H

HARTMANN

linkforwoundhealing.info

10

LINK for Wound Healing is a professional educational platform operated by HARTMANN, dedicated to providing medical professionals with comprehensive wound care knowledge through e-learning, webinars, scientific content, and events. The platform is positioned as a global hub for wound care expertise, supported by partnerships such as Wounds International. The website demonstrates a high level of digital maturity with modern technologies including Sitecore CMS, Cloudflare security, and integrated analytics tools like Google Analytics and Hotjar. Security posture is strong with HTTPS enforcement, CSRF protection, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly available. Overall, the site is well-designed, accessible, and trustworthy, serving a specialized healthcare audience effectively.

I

Invoice123

invoice123.com

51

Invoice123 is a well-established SaaS platform specializing in online invoicing and accounting automation tailored for freelancers, self-employed individuals, and small to medium businesses. Founded in 2014 and operating primarily in the European market, it offers a comprehensive suite of services including invoice generation, VAT reporting, expense tracking, and integrations with popular e-commerce and accounting software. The platform emphasizes ease of use, cost-effectiveness, and continuous feature enhancements, supported by a strong user base of over 30,000 customers. Technically, Invoice123 leverages modern web technologies with a focus on performance, mobile responsiveness, and user experience. The site is hosted behind Cloudflare DNS services, uses Google Tag Manager for analytics, and integrates Crisp Chat for customer support. The website is well-structured with clear navigation, professional design, and SEO optimization, reflecting a mature digital presence. From a security perspective, the platform enforces HTTPS with SSL encryption and holds ISO 9001 certification, indicating adherence to quality management standards. However, there is room for improvement in DNS security (lack of DNSSEC) and implementation of security headers. Privacy compliance is generally good with a comprehensive privacy policy and terms of use, but lacks an explicit cookie consent mechanism. Contact information is transparent and readily available, enhancing trust. Overall, Invoice123 presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security headers, DNSSEC, and privacy consent mechanisms would further strengthen its security posture and compliance standing.

C

Cookienovo

cookienovo.com

65

Cookienovo.com is a website with a focus likely related to cookie management or privacy tools, as inferred from the domain name and minimal content. The site is relatively new, registered in 2022, and hosted with Cloudflare DNS services. The technical infrastructure includes modern JavaScript frameworks and Google Tag Manager for analytics, indicating a moderate level of digital maturity. However, the website lacks critical privacy and cookie policies, contact information, and security headers, which are essential for compliance and trust. The security posture is basic with HTTPS enabled but missing advanced security headers and DNSSEC. Overall, the site is accessible and safe but requires significant improvements in privacy compliance and security best practices to enhance trustworthiness and regulatory adherence.

U

Ukrainian Independent Information Agency UNIAN

unian.info

60

UNIAN is a well-established Ukrainian independent news agency founded in 1993, providing comprehensive news coverage on politics, economy, society, and world events. The website targets a broad audience interested in Ukrainian and international news, offering content in multiple languages and maintaining a strong presence across major social media platforms. The business model revolves around news reporting, advertising, subscriptions, and media services such as image banks and monitoring. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, Matomo and Gemius analytics, and header bidding for advertising. The site is mobile-optimized, SEO-friendly, and performs moderately well. Security best practices are implemented with HTTPS, security headers, and secure forms, although explicit security policies and incident response contacts are not published. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is good, with clear privacy and cookie policies and consent mechanisms in place. WHOIS data is unavailable or malformed, likely due to privacy protection, but this is common for media organizations and does not detract from the site's legitimacy. Overall, UNIAN presents a professional, trustworthy, and content-rich platform with a strong market position in Ukrainian media. Strategic recommendations include publishing a dedicated security policy, incident response information, and vulnerability disclosure to enhance transparency and trust.

1

1+1 video: Популярні серіали, шоу та ТВ онлайн

1plus1.video

60

1+1 video is a Ukrainian online media streaming platform offering popular TV shows, series, movies, cartoons, and live TV channels such as 1+1, 2+2, TET, and others. It serves a broad general audience interested in Ukrainian and international entertainment content. The platform is well-branded and integrates multiple popular TV channels, positioning itself as a leading video archive and streaming service in Ukraine. Technically, the website uses modern JavaScript frameworks, Google Analytics, Facebook Pixel, and a consent management platform to handle cookies and user tracking. The site is mobile-optimized with good SEO and user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks some security headers and explicit privacy and terms of service documentation. WHOIS data is privacy protected, which is common for media platforms, and no suspicious patterns were detected. Overall, the site is professional and trustworthy but could improve transparency and security practices.

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) rather than an externally hosted website. This page is displayed when the browser cannot load a requested webpage, showing a default offline or error interface including the Chrome dinosaur game. Consequently, there is no actual business or organizational content, no contact or policy information, and no external links or social media references. The technical infrastructure is limited to embedded Chromium UI scripts and styles, with no hosting or CMS details applicable. Security posture is minimal due to the nature of the page being a local browser resource rather than a public website. Overall, this content does not represent a legitimate business website and cannot be evaluated for compliance, security, or business credibility.

The website tomashubik.cz represents a professional portfolio for Tomas Hubik, a Czech-based full stack developer specializing in front-end technologies such as Angular and React, with additional skills in UI/UX and graphical design. The site showcases a broad portfolio of freelance projects and indicates current employment as a lead software developer. The business model is primarily freelance and professional services targeting clients seeking development and design expertise. The website is well-structured with clear navigation and professional branding, targeting a general audience of potential clients and collaborators. Technically, the site uses a modern technology stack including JavaScript frameworks, PHP, Java, and related libraries. Hosting is provided by WEDOS, a Czech hosting provider, consistent with the domain registration data. The site includes Google Fonts and Google Analytics for tracking. The design is responsive and optimized for mobile devices, though accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site lacks published privacy and cookie policies, which is a compliance gap especially under GDPR. No security headers were detected, and the contact form lacks visible anti-spam protections. HTTPS usage is implied but not explicitly confirmed in the HTML content. There is no published incident response or vulnerability disclosure information. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, enforcing HTTPS, adding anti-spam measures on forms, and providing incident response contacts. These improvements would enhance compliance, user trust, and security maturity.

P

Porta Medica s.r.o.

portamedica.cz

53

Porta Medica s.r.o. is a small healthcare consultancy based in Prague, Czech Republic, specializing in regulatory consulting for medical devices targeting the EU market. The company offers tailored solutions for manufacturers, distributors, hospitals, and IT startups to navigate complex regulatory environments. The website is professionally designed using the Wix platform, with good content quality and clear business focus. Technical infrastructure is modern and adequate for the business size, with Wix hosting and Thunderbolt framework. Security posture is generally good with HTTPS enforced and some security best practices observed, though lacking explicit security headers and incident response information. Privacy compliance is weak due to absence of visible privacy and cookie policies. Overall, the site appears trustworthy and legitimate, but could improve transparency and compliance documentation.

A

ACRO-CZ, z.s.

acro-cz.cz

48

ACRO-CZ is a professional association representing contract research organizations (CROs) in the Czech Republic, focusing on clinical research and drug development. Established in 2005, it serves as a liaison between CROs and regulatory bodies, promotes ethical and legal standards, and supports member education and collaboration. The website reflects a professional and consistent brand with clear business information and relevant content for its target audience in healthcare and clinical research sectors. Technically, the site uses modern web technologies including Bootstrap and Material Design Bootstrap, with a moderate performance profile and good mobile optimization. Security posture is moderate; while HTTPS usage is assumed, the absence of security headers and privacy policies indicates room for improvement. No blocking or WAF challenges were detected, and the domain WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is trustworthy and functional but would benefit from enhanced privacy compliance and security hardening.

Č

Česká asociace dodavatelů zdravotnických prostředků ("CZECHMED")

czechmed.cz

61

CzechMed is a professional association representing manufacturers and distributors of medical devices in Czechia. The organization focuses on fostering dialogue and cooperation within the healthcare industry, supporting innovation, telemedicine, public procurement, and quality assurance. The website is built on the Wix platform, featuring a professional design and structured data that clearly identifies the organization and its physical address. Technical infrastructure leverages Wix's Thunderbolt platform with modern JavaScript polyfills and security hardening scripts. Security posture is generally good with HTTPS enabled and some client-side security measures, but lacks explicit security headers and incident response contact information. Privacy and cookie policies are not found, indicating a gap in compliance. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and presentation suggest a legitimate business presence. Overall, the site is suitable for its target audience but would benefit from enhanced privacy compliance and security transparency.

C

CZECHIMPLANT, z.s.

czechimplant.cz

59

CZECHIMPLANT, z.s. is a pioneering medical cluster in the Czech Republic specializing in implantology, established in 2016. It functions as a collaborative platform uniting manufacturers, universities, and medical professionals to foster research, development, and practical application in the implantology field. The cluster supports its members through research projects, marketing, international cooperation, and events, positioning itself as a key player in the Czech healthcare technology sector. The website reflects a professional and consistent brand image with clear navigation and relevant content aimed at cluster members and stakeholders. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries, and Google Web Fonts, with a custom CMS backend. It features responsive design and basic accessibility features, ensuring usability across devices. Performance is moderate with lazy loading implemented for images. SEO practices are adequately addressed through meta tags and structured navigation. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and detailed security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security headers and incident response transparency would enhance its security posture and trustworthiness.

The website 'H.I.D.R.A Dashboard' represents an academic and governmental project focused on real-time monitoring of water quality and flood risk in urban channels of the Recife metropolitan area in Brazil. Developed by UACSA/UFRPE in partnership with Faculdade Nova Roma and supported by FACEPE, the project leverages IoT sensors and artificial intelligence to provide environmental data and predictive alerts. The platform targets academic institutions, environmental managers, and local communities, aiming to promote sustainable water management aligned with global development goals. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Chart.js for data visualization, and Leaflet.js for interactive mapping. Hosted by Hostinger, the site demonstrates moderate performance and good mobile optimization, though accessibility and SEO features are basic. The site includes user authentication forms with login and registration capabilities, and a configurable parameter interface for monitoring thresholds. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks visible security headers such as CSP or HSTS. There are no privacy or cookie policies present, and no incident response or vulnerability disclosure information is provided. The absence of these policies and security headers represents a compliance and security gap. The WHOIS data shows a recently registered domain consistent with the project timeline, registered via a hosting provider, which is typical for academic projects but reduces registrant transparency. Overall, the website is professionally designed with relevant content and clear navigation, but improvements are needed in privacy compliance, security hardening, and transparency to enhance trustworthiness and protect user data effectively.

B

Balticum

balticum.tv

52

Balticum's website is a media streaming platform primarily targeting webOS TV users and browsers. The site uses modern web technologies such as Angular 14 and custom webOS APIs to deliver video content. However, the site lacks visible business contact information, privacy policies, and security headers, which limits trust and compliance. The absence of WHOIS data further reduces transparency. Technically, the site is functional but basic in design and optimization, with moderate performance and accessibility. Security posture is weak due to missing HTTPS confirmation and security headers. Overall, the site appears legitimate but would benefit from improved compliance and security measures.

N

Nannen & Carls Steuerberatungsgesellschaft mbH

nannen-carls.de

62

Nannen & Carls Steuerberatungsgesellschaft mbH is a well-established tax consultancy firm based in Aurich, Germany, with a history dating back to 1982. The company offers a broad range of tax and economic advisory services, emphasizing digitalization, corporate succession, inheritance tax law, audits, restructuring, and business consulting. Their website reflects a professional and modern approach, leveraging Webflow CMS and Cookiebot for GDPR-compliant cookie management. The firm targets businesses and individuals in the Aurich region and Ostfriesland, focusing on personalized client service and employee development. Technically, the website is well-structured, mobile-optimized, and uses modern web technologies, although some security headers are missing. The security posture is solid with HTTPS and cookie consent mechanisms in place, but could be improved with additional security headers and explicit incident response policies. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the entity. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuous monitoring of third-party scripts.

The website metodickyweb.cz is an educational portal focused on providing teaching ideas and inspiration for integrating information technologies into education. It targets educators and educational professionals primarily in the Czech Republic. The platform offers methodical cards, user registration for enhanced interaction such as commenting and rating, and a catalog of educational content. The business appears to be a small-scale specialized educational service established around 2015, with consistent branding and a clear focus on its niche. Technically, the site uses a basic but functional technology stack including jQuery and Font Awesome, hosted by WEDOS, a Czech hosting provider. The site is moderately optimized for mobile and SEO, with a clean design and good user experience. However, there is room for improvement in accessibility and performance optimization. No advanced CMS or frameworks are detected. From a security perspective, the site lacks important security headers and uses GET methods for sensitive forms like login and registration, which is a security concern. There is no visible privacy or cookie policy, indicating compliance gaps with GDPR and related regulations. The absence of incident response contacts and vulnerability disclosure mechanisms further limits the security maturity. No WAF or blocking mechanisms are detected, and the domain registration data aligns well with the website content, supporting legitimacy. Overall, the website is functional and trustworthy for its educational purpose but requires enhancements in security practices and privacy compliance to improve its risk posture and user trust.

A

&TANKS I stainless steel tanks

andtanks.eu

57

The website www.andtanks.eu is hosted on the Wix platform and appears to have minimal content with no visible business or contact information. The lack of privacy policy, cookie policy, terms of service, and contact details limits the site's credibility and compliance posture. Technically, the site uses Wix's standard scripts and assets, including Sentry for error monitoring, but lacks advanced security headers and SEO optimizations. The WHOIS data is not publicly available due to EURid's privacy policy for .eu domains, which is common but restricts trust assessment. Overall, the site presents a low maturity level in business and security aspects, with limited user engagement features or compliance indicators.

L

ladies dance company

salsa-zeny.cz

54

The website www.salsa-zeny.cz represents a small, specialized dance school in Prague focused on ladies' Latin dance styles such as salsa, bachata, reggaeton, and kizomba. The business is led by an experienced instructor, Lenka Němcová, and has a long-standing tradition since 2007. The site is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies. It offers clear information about dance lessons and workshops targeted at women interested in Latin dance. Technically, the site is moderately optimized with good security practices including HTTPS and security headers, but lacks comprehensive privacy and cookie policies, which are important for GDPR compliance. Contact information is limited to an email address and a Facebook social media link, with no phone number or physical address explicitly provided. Overall, the site is professional and trustworthy for its niche but could improve privacy compliance and mobile optimization.

T

Taneční škola ASTRA Praha

astra-praha.cz

39

Taneční škola ASTRA Praha is a local dance school offering a wide range of dance courses and events targeting adults, youth, and children in Prague and surrounding areas. Their services include standard and Latin dance courses, competitive dance, summer dance schools, seminars, dance clubs, wedding dance lessons, and dance performances. The website is professionally designed with clear navigation and good content quality, supporting multiple dance-related offerings and event announcements. Technically, the website employs common web technologies including Google Analytics, Google Tag Manager, and Plausible Analytics for tracking, along with Google Fonts for typography. The site is mobile-optimized and uses HTTPS, though no explicit security headers were detected. The site lacks a cookie consent mechanism despite having a GDPR-compliant privacy policy, indicating partial privacy compliance. From a security perspective, the site shows no immediate vulnerabilities or exposed sensitive data. However, the absence of WHOIS data limits domain trust assessment, and no incident response or security policy information is provided. The site does not appear to be behind a WAF or security challenge, and content is fully accessible. Overall, the security posture is moderate but could be improved with better header configurations and privacy mechanisms. The overall risk is low given the nature of the business and content, but the lack of WHOIS transparency and cookie consent are notable gaps. Strategic recommendations include implementing security headers, adding cookie consent, publishing incident response contacts, and enhancing accessibility features to improve trust and compliance.

S

Salsaholics.cz | Cuban Salsa, Rueda de Casino, Multisport | Tresor Club, Vinohradská 35/25, 120 00 Prague 2 - Vinohrady, Prague, Czechia

salsaholics.cz

57

The website www.salsaholics.cz appears to be a small-scale business site built on the Wix platform. The site content is minimal and lacks detailed business descriptions, contact information, or policy disclosures. The technical infrastructure relies on Wix's standard JavaScript libraries and polyfills, with session recording scripts indicating user behavior tracking. Security posture is basic with HTTPS enabled but lacking advanced security headers and policies. The absence of WHOIS data reduces trustworthiness and raises questions about domain registration transparency. Overall, the site presents a low maturity digital presence with significant room for improvement in security, privacy compliance, and business credibility.

У

Українське незалежне інформаційне агентство УНІАН

unian.ua

61

The website www.unian.ua is the official online presence of the Ukrainian Independent Information Agency UNIAN, a major news media organization established in 1993. It provides comprehensive news coverage in Ukrainian language, including politics, economics, sports, technology, weather, and more. The site targets a broad Ukrainian-speaking audience seeking timely and reliable news. The business model is primarily content publishing supported by advertising and subscription services. The agency holds a strong market position as a trusted and long-standing news source in Ukraine. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates multiple analytics platforms such as Google Analytics, Matomo, and Gemius. It uses Google Tag Manager for marketing and tracking, and loads fonts and media efficiently. The site is mobile-optimized with responsive design and good SEO practices. Performance is moderate with room for improvement in accessibility. Security-wise, the site enforces HTTPS, implements key security headers, and uses secure forms with anti-CSRF tokens. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and GDPR compliant, with a clear cookie consent mechanism. However, explicit security policy and incident response contacts are not published, which could be improved. Overall, the website is professional, trustworthy, and well-maintained, with extensive content and transparent business information. The domain WHOIS data confirms legitimacy and consistency with the business claims. The site does not contain any adult or questionable content, making it safe for general audiences.

D

Donio

donio.cz

56

Donio.cz is a Czech crowdfunding platform established in 2019 that enables users to create fundraising campaigns free of charge, transferring 100% of collected funds to campaign owners. The platform targets individuals and organizations within the Czech Republic seeking to raise donations or crowdfund projects. Technically, the website employs modern JavaScript frameworks, integrates Cookiebot for GDPR-compliant cookie consent, and uses Google Tag Manager and Sentry for analytics and error monitoring. Hosting and DNS are managed via Cloudflare, ensuring good SSL/TLS security and performance. Security posture is solid with HTTPS enforced and consent mechanisms in place, but lacks published privacy policies, terms of service, and incident response contacts, which are important for compliance and trust. Overall, the website is professional, well-designed, and functional, but could improve transparency and compliance documentation to enhance user trust and legal adherence.

The domain sbceurasia.com is a recently registered website (August 2023) currently protected by Cloudflare's Turnstile human verification challenge, which blocks direct access to any substantive content. Due to this security mechanism, no business information, contact details, or policy documents are accessible for analysis. The website appears to be in an initial or protected state, with no visible metadata, structured data, or user-facing content. The technical infrastructure relies on Cloudflare for DNS and security, indicating a modern approach to protection but limiting transparency. The security posture is difficult to assess fully due to the lack of accessible content, but the presence of Cloudflare's WAF and challenge page suggests a baseline security measure is in place. Overall, the website's risk profile is elevated due to the absence of visible business or compliance information, and the domain's newness adds to uncertainty. Strategic recommendations include removing or adjusting the WAF challenge to allow legitimate user access, publishing clear business and privacy policies, and providing contact information to improve trust and compliance.

B

Bc. Petr Vyhnálek

tvorime-aplikace.cz

45

The website 'Tvoříme aplikace' represents a small Czech technology business led by Bc. Petr Vyhnálek, specializing in custom software development including mobile applications, web applications, database systems, and Linux server management. The business targets clients needing complex, cross-platform JAVA applications and offers services tailored especially for non-profit organizations. The website is professionally designed with clear navigation and detailed service descriptions, reflecting over 20 years of experience. Technical infrastructure includes modern frontend technologies such as Bootstrap, jQuery, and various UI libraries, ensuring good mobile optimization and user experience. Security posture is moderate with HTTPS usage implied but lacks explicit security headers and privacy compliance documentation. Contact information is comprehensive, but absence of privacy and cookie policies is a compliance gap. WHOIS data is unavailable, limiting domain trust assessment, but the website content and contact details suggest legitimacy. Overall, the site is functional, professional, and safe for general audiences.

K

KMU Digital

kmudigital.at

71

KMU.DIGITAL is a government-backed digitalization initiative in Austria, jointly run by the Federal Ministry for Economic Affairs, Energy and Tourism (BMWET) and the Austrian Economic Chamber (WKO). It aims to support small and medium enterprises (SMEs) in Austria by providing consulting and funding to help them conceive, implement, and market digital transformation projects. The program also includes a GREEN funding line to promote ecological transformation through digitalization. The website is professionally designed, content-rich, and provides official documentation and multimedia resources to its target audience of Austrian SMEs. Technically, the site uses modern web technologies, including a CMS (Gentics), JavaScript libraries, and consent management tools to comply with GDPR. Security posture is good with HTTPS enforced and consent mechanisms for external content, though some security headers and explicit policies could be improved. The domain registration data aligns with the Austrian Economic Chamber, supporting the site's legitimacy. Overall, the website is a trustworthy and authoritative resource for Austrian SMEs seeking digital and ecological transformation support.

S

SORAL medical s.r.o.

dekubity.cz

53

SORAL medical s.r.o. operates the website www.dekubity.cz as a specialist supplier of healthcare technology, focusing on antidecubitus systems and medical equipment for healthcare and social services. The company has a longstanding market presence since 1990 and offers products, services, and training to healthcare providers primarily in the Czech Republic. The website is professionally designed with clear navigation, comprehensive content, and strong trust indicators including detailed contact information and GDPR-compliant policies. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and integrates Google reCAPTCHA for form security. It uses HTTPS with an excellent SSL configuration and includes cookie consent mechanisms. While no explicit security headers were detected, the site follows good security practices overall. The WHOIS data for the domain is unavailable, which slightly reduces trustworthiness but does not negate the legitimacy suggested by the website content and business information. Security posture is solid with no visible vulnerabilities or suspicious external links. Privacy compliance is well addressed with clear privacy and cookie policies. The website does not contain any adult or questionable content and targets healthcare professionals and institutions. Overall, the site demonstrates a mature digital presence with room for improvement in security header implementation and domain registration transparency. Strategic recommendations include enhancing security headers, publishing incident response and security policies, and verifying domain registration details to improve trust and compliance.

V

VITAPUR spol. s r.o.

vitapur.cz

52

VITAPUR spol. s r.o. is a Czech-based manufacturer specializing in healthcare products for long-term immobile patients, offering bedding, mattresses, positioning aids, and related equipment. Established in 1990, the company serves both professional healthcare institutions and private consumers, maintaining a strong market presence with over 2700 cooperating healthcare facilities. The website reflects a mature e-commerce platform with multilingual support and comprehensive product offerings. Technically, the site employs modern web technologies including Google Analytics 4, Facebook Pixel, and live chat integrations, ensuring a robust digital presence. Security posture is solid with HTTPS and form validations, though some security headers could be improved. Privacy compliance is well addressed with detailed cookie consent and privacy policies. However, the lack of WHOIS data for the domain introduces some uncertainty regarding domain registration transparency. Overall, the site is professional, trustworthy, and well-optimized for its target audience.