Security Directory

M

Mölnlycke Health Care

molnlycke.cz

72

Mölnlycke Health Care is a globally recognized MedTech company specializing in innovative wound care and surgical solutions. The company positions itself as a leader in sustainable healthcare products, targeting healthcare professionals and institutions. Their website reflects a mature digital presence with comprehensive product catalogs, educational resources, and corporate information. Technically, the site employs modern JavaScript frameworks, integrates Azure Application Insights and Google Tag Manager for analytics, and supports responsive design for mobile users. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though some security headers are missing and no explicit security policy or vulnerability disclosure is published. The absence of WHOIS data limits domain trust analysis, but the professional branding and certifications support legitimacy. Overall, the site is well-structured, trustworthy, and compliant with privacy regulations.

M

Multimedium BV

multimedium.be

67

Multimedium BV is a Belgian digital agency with a strong market presence, offering custom online applications, webshops, and websites tailored to organizational needs. With over 20 years of experience, they position themselves as a reliable and solid partner for digital transformation. Their website reflects a professional and modern digital infrastructure, utilizing contemporary marketing and analytics tools such as Google Tag Manager and Mautic, alongside a robust cookie consent mechanism ensuring GDPR compliance. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and incident response information suggests areas for improvement. Overall, the website is well-designed, accessible, and trustworthy, supporting a positive business credibility profile.

P

Pieter Rubberecht

zologie.com

52

The website piru.be is a personal portfolio for Pieter Rubberecht, showcasing a variety of creative projects including board game design, illustration, infographics, branding, and video production. The site targets creative professionals and potential clients interested in visual and design services. It operates as a digital portfolio hosted on Adobe Portfolio, leveraging modern web technologies such as HTML5, CSS3, JavaScript, and Typekit fonts. The website is well-structured with good design quality and mobile optimization, providing a positive user experience. However, it lacks essential compliance and security features such as privacy and cookie policies, contact information, and security headers. HTTPS is enabled, but no advanced security configurations are detected. Overall, the site is safe, professional, and trustworthy but could improve in privacy compliance and security posture.

C

CaptchaFox

captchafox.com

52

CaptchaFox is a Germany-based technology company specializing in GDPR-compliant captcha and bot protection services for websites and mobile applications. Founded in 2020, it positions itself as a privacy-first alternative in the bot mitigation market, emphasizing compliance with European data protection standards and adaptive bot detection technologies. The website reflects a professional SaaS business model targeting companies seeking to protect their digital assets from malicious bot traffic while maintaining user privacy. Technically, the website is built using modern frameworks such as Next.js and React, hosted on bunny.net, and optimized for performance and accessibility. The site demonstrates good SEO practices and mobile responsiveness, with rich SVG graphics and structured data enhancing its digital maturity. However, explicit privacy and cookie policies are not directly found in the provided content, which could be improved to enhance transparency. From a security perspective, the site uses HTTPS and has domain transfer protections in place. There is no evidence of security.txt or vulnerability disclosure mechanisms, and security headers are not detected in the provided data. The absence of explicit contact information and security policies suggests areas for improvement in incident response readiness and user trust. Overall, CaptchaFox presents a credible and professional online presence with a strong focus on privacy and compliance. Strategic enhancements in policy disclosures, security headers, and contact transparency would further strengthen its security posture and compliance standing.

T

tovi

tovi.cz

34

tovi.cz is a Czech-based small technology company specializing in custom web and mobile application development, web design, process automation, and digital marketing services such as SEO and PPC. Founded in 2017, the company presents a professional portfolio of completed projects and transparent pricing examples, targeting businesses seeking tailored digital solutions. The website is well-structured, mobile-optimized, and uses modern web technologies including Google Fonts, Font Awesome, and jQuery, with analytics integrated via Google Analytics and Tag Manager. Security posture is moderate with HTTPS usage implied but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies, which is a notable gap given GDPR requirements. Contact information is clearly provided with email, phone, and a contact form, enhancing business credibility. Overall, the site is professional and trustworthy but would benefit from improved privacy and security disclosures.

P

Pilulka.cz - vaše online lékárna s více než 1247 odběrnými místy po ČR

pilulka.cz

54

Pilulka.cz is a leading Czech online pharmacy offering a wide range of health-related products including supplements, cosmetics, and over-the-counter medicines. The company emphasizes prevention and modern pharmacy trends, serving a broad general audience with over 1247 pickup points across the Czech Republic. Their business model includes direct online sales and a subscription service called Pilulka PRO, which offers benefits such as free blood tests and discounts. Technically, the website is built on modern frameworks like Nuxt.js and Vue.js, hosted on a reliable CDN infrastructure, and optimized for mobile and SEO. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit privacy and cookie policies are not clearly found in the provided content. The absence of WHOIS data limits domain trust analysis, but the website's professional presentation and extensive product catalog support its legitimacy. Overall, Pilulka.cz demonstrates a mature digital presence with good security and business credibility.

I

INFO-DRÁČEK z.s.

info-dracek.cz

54

INFO-DRÁČEK z.s. is a small non-profit organization based in the Czech Republic dedicated to fostering mutual understanding of different cultures, with a particular focus on Vietnamese and Asian cultural integration. The organization operates through cultural festivals, educational projects, and community events, targeting the general public interested in cultural exchange and minority communities. Their website reflects a professional and consistent brand presence, featuring event galleries, contact information, and social media links, primarily Facebook. The business model is centered on non-profit cultural activities without commercial e-commerce components. Technically, the website is built on the Webnode CMS platform and hosted via AWS Cloudfront CDN, utilizing modern web technologies such as JavaScript and CSS. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with proper HTTPS implementation ensuring secure communication. Google Tag Manager is used for analytics and tracking, indicating moderate user tracking levels. From a security perspective, the site employs HTTPS and some basic security headers but lacks advanced headers like Content-Security-Policy. No vulnerabilities or exposed sensitive data were detected. However, the absence of privacy and cookie policies represents a compliance gap, especially under GDPR regulations. The WHOIS data for the domain is unavailable, which limits the ability to verify domain legitimacy and registration details, posing a potential risk factor. Overall, the website is safe, professional, and serves its non-profit cultural mission effectively. Strategic improvements include adding comprehensive privacy and cookie policies, enhancing security headers, and publishing incident response or security policies to bolster trust and compliance. The lack of WHOIS data should be investigated to ensure domain registration transparency and legitimacy.

U

Український журнал. Час для...

ukrzurnal.eu

7

The website ukrzurnal.eu operates as an online cultural-political monthly magazine targeting the Ukrainian diaspora in Europe. It provides archived issues, subscription options, and information about projects and partners. The content is primarily in Ukrainian with additional language options, focusing on cultural and political topics relevant to Ukrainians living in Europe. The business model centers on digital publication and community engagement through social media integration. Technically, the site uses basic web technologies including HTML, CSS, JavaScript, Facebook SDK, and Google Analytics. The site lacks modern CMS indicators and advanced frameworks, suggesting a simple, possibly custom-built platform. Performance and mobile optimization are basic, with room for improvement in accessibility and SEO practices. From a security perspective, the site does not explicitly confirm HTTPS usage in the HTML base tag, and no security headers such as CSP or HSTS are detected. External scripts are loaded without integrity checks. Privacy and cookie policies are absent, indicating potential GDPR compliance gaps. No forms collecting sensitive data are present, reducing immediate risk exposure. The WHOIS data shows the domain is registered via a Czech registrar, consistent with the European focus but no direct registrant organization is disclosed. Overall, the website is functional and serves its niche audience but requires improvements in security posture, privacy compliance, and technical modernization to enhance trust and resilience against threats.

A

ABC Kovopit-engineering, spol. s r.o.

abckovopit.cz

47

ABC Kovopit-engineering, spol. s r.o. is a Czech-based company specializing in the supply of machinery and equipment for the beverage industry, focusing on wine, liqueurs, and non-alcoholic beverage producers. Established in 1994, the company serves primarily small and medium-sized enterprises both domestically and internationally. Their offerings include processing equipment, filtration and stabilization systems, and filling and packaging machinery, complemented by consultation, leasing, sales, and service support. The website reflects a professional and consistent brand image with clear contact information and partner affiliations. Technically, the site is built on Joomla CMS with modern UI frameworks, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and formal privacy or terms policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

S

STROM PRAHA a. s.

strompraha.cz

72

STROM PRAHA a.s. is a specialized distributor of agricultural, garden, municipal, and sports equipment, notably serving as the exclusive distributor for John Deere products in the Czech Republic. The company also distributes other reputable brands such as Bednar, Kramer, Pronar, Kuhn, Mazzotti, and Milwaukee. Their target audience includes agricultural businesses, municipal service providers, and sports facility managers within the Czech market. The website reflects a medium-sized enterprise with a professional online presence, offering financing options, used machinery sales, and customer support services.

The website www.andtanks.eu is a small-scale business site hosted on the Wix platform. The site lacks detailed business information, contact details, and privacy or cookie policies, which limits its transparency and trustworthiness. The technical infrastructure is based on Wix's standard stack with JavaScript and Sentry for error tracking, indicating a basic digital maturity level. Security posture is minimal with no advanced headers or policies detected, and WHOIS data is fully privacy protected, preventing verification of domain ownership and age. Overall, the site presents a low-risk profile but lacks critical compliance and trust indicators.

V

Vinarsky raj

vinarskyraj.cz

56

The website 'Vinarsky raj' appears to be a small business site built on the Wix platform, targeting Czech and Polish audiences with content related to wine or vineyards. The site uses standard Wix technologies and scripts, with moderate mobile optimization and basic SEO features. However, the absence of WHOIS data and registrant information reduces transparency and trustworthiness. Security posture is moderate with HTTPS usage but lacks explicit security headers and policies. Privacy compliance is poor due to missing privacy and cookie policies. Overall, the site is functional but lacks critical business and security information, limiting its credibility and compliance.

W

Wines from Czech Republic

wineofczechrepublic.cz

63

The website www.vinazmoravyvinazcech.cz serves as a regional informational and promotional platform focused on wines from the Moravia and Bohemia regions of the Czech Republic. It targets wine enthusiasts, tourists, and consumers interested in Czech wines, offering details about wine varieties, events, and related content. The site uses modern web technologies such as React and Next.js, providing a good user experience with responsive design and clear navigation. However, the absence of WHOIS registration data and lack of visible privacy, cookie, and contact policies reduce its trustworthiness from a security and compliance perspective. No security headers or SSL configuration details were available, and no explicit security or incident response contacts were found. Overall, the site is functional and informative but would benefit from enhanced transparency and security practices.

S

Spolek vinařů Dunajovské kopce

dunajovskepecky.cz

40

Dunajovské pecky is a regional project operated by Spolek vinařů Dunajovské kopce, focused on promoting unique local places, businesses, events, and projects within the Dunajovské kopce region in the Czech Republic. The website serves as a curated guide for visitors and locals, emphasizing quality, local authenticity, and community spirit. The project is relatively new, with domain registration and founding year in 2024, targeting tourists and regional enthusiasts through recommendations, event calendars, maps, and newsletters. Technically, the website is built on Joomla CMS with Yootheme and UIkit frameworks, enhanced by accessibility features via the DJ Accessibility plugin. The site is mobile-optimized, uses modern web standards, and includes SVG graphics and Google Fonts. Hosting is provided by REG-WEBGLOBE, consistent with the domain registration data. Performance is moderate with good accessibility and SEO practices, though some improvements in security headers and privacy compliance are recommended. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks explicit security headers and vulnerability disclosure mechanisms. No analytics or tracking scripts were detected, indicating minimal user tracking. Contact information is clearly provided, but privacy and cookie consent policies are either missing or basic, which may pose compliance risks. No signs of malicious content or vulnerabilities were found. Overall, the website presents a trustworthy and professional regional project with good content quality and technical implementation. Strategic improvements in privacy policies, cookie consent, and security headers would enhance compliance and security posture, supporting long-term trust and user confidence.

3

3DFindit / CADENAS

bimcatalogs.net

66

3DFindit, operated by CADENAS, is a specialized online platform offering free access to an extensive collection of 3D CAD and BIM models, serving industries such as mechanical engineering and architecture. The platform supports multiple search methods including 3D geometric, 2D sketch, and color search, enhancing user experience for engineers, architects, and manufacturers. The website is professionally designed with consistent branding and integrates with CADENAS' corporate ecosystem, indicating a strong market position in digital product content services. Technically, the website employs modern web technologies including JavaScript, SVG, and web components, with external integrations such as consent management and Freshworks support widgets. The site is mobile optimized and SEO friendly, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and incident response transparency. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies and incident response contacts, which are recommended for enhanced trust and compliance. Privacy compliance is strong, with comprehensive privacy and cookie policies and GDPR adherence. Contact information is limited to a web form, with no direct emails or phone numbers publicly listed. Overall, the website presents a low-risk profile with a high degree of professionalism and business credibility. The absence of WHOIS data suggests privacy protection, which is justified for this business type. Strategic recommendations include enhancing security headers, publishing security policies, and expanding contact options to improve user trust and compliance posture.

3

3DFindit

3dfindit.com

65

3DFindit is an online platform operated by CADENAS that provides free access to a vast collection of 3D CAD and BIM models aggregated from over 4500 catalogs. The service targets engineers, architects, and designers seeking technical models for mechanical engineering and architectural projects. The website is professionally designed with consistent branding and offers multiple search modalities including 3D geometric, 2D sketch, and color search. Technically, the site uses modern web technologies such as JavaScript, SVG, and web components, and integrates third-party services like Freshworks for user interaction. While HTTPS is used, explicit security headers and detailed security policies are not evident, indicating room for improvement in security posture. The absence of WHOIS data for the domain is unusual but the association with CADENAS supports legitimacy. Overall, the site is trustworthy, well-structured, and compliant with privacy regulations, though it lacks direct contact information and explicit incident response details.

The analyzed content corresponds to a Chrome browser internal error page (chrome-error://chromewebdata/) displayed when a website is inaccessible or offline. This page contains no actual website content, business information, or external links. It primarily serves as a placeholder with embedded JavaScript and CSS for the Chrome offline dinosaur game. Consequently, no privacy, cookie, or terms of service policies are present, nor is there any contact or security policy information. The technical infrastructure is limited to Chromium internal scripts and canvas-based game logic, with no hosting or CMS details available. Security posture cannot be meaningfully assessed due to the nature of the content. Overall, this is not a public-facing website but a browser-generated error page, and thus lacks business credibility or compliance indicators.

E

EDELWEISS Werbeagentur GmbH

edelweiss-werbeagentur.at

53

EDELWEISS Werbeagentur GmbH is a small Austrian full-service advertising agency specializing in sustainable brand building for small and medium-sized enterprises. Their services include corporate design, logo creation, website and webshop development, SEO, social media marketing, and traditional advertising. The company emphasizes long-term partnerships and comprehensive marketing solutions. Technically, the website is built on a custom CMS with modern front-end technologies such as UIkit and jQuery, and integrates Google Analytics and Google Ads for marketing and analytics. The site is mobile-optimized and SEO-friendly, providing a professional user experience. Security-wise, the site uses HTTPS and implements a detailed cookie consent mechanism, but lacks advanced HTTP security headers and explicit security policies or incident response contacts. WHOIS data is unavailable, which slightly reduces trust but the website content and business presence appear legitimate and professional. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, with room for improvement in security best practices and transparency.

The website plus4u.net appears to represent a digital services platform focused on enabling users to compose their own online services from various applications. The site uses modern web technologies including React, UU5 framework, and Google Tag Manager for analytics. However, the visible content in the provided HTML snapshot is minimal, primarily technical scaffolding without substantive user-facing content or business details. The WHOIS data is unavailable or indicates the domain is not registered, which raises significant concerns about the legitimacy and trustworthiness of the domain. No contact information, privacy policies, or terms of service are present, limiting compliance and user trust. Security posture is weak due to lack of visible security headers and SSL configuration details. Overall, the site appears to be in an early or incomplete state or possibly a placeholder.

Unicorn a.s. is a well-established European IT company founded in 1990, specializing in delivering large-scale information systems and IT solutions. The company targets business customers primarily in the Czech Republic and broader European market, offering a range of IT products, services, and solutions that provide competitive advantages and high added value. The website reflects a professional business presence with consistent branding and clear contact information, supporting its market position as a reputable technology provider. Technically, the website employs modern web technologies including React and UU5 frameworks, with integration of Google Tag Manager for analytics and marketing. The site is hosted with a reputable registrar and DNS providers, though DNSSEC is not enabled. Performance and mobile optimization are good, though accessibility features are basic. SEO is adequately addressed with proper meta tags and structured data. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and does not provide explicit privacy or cookie policies, which impacts GDPR compliance. No incident response or vulnerability disclosure information is published, indicating room for improvement in security transparency and governance. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security header implementation, and published security policies to strengthen its security posture and regulatory adherence.

The Technical University of Košice (TUKE) is a well-established public university in Slovakia, offering a broad range of higher education and research programs in innovative technical fields. The website reflects a strong market position as a leading educational institution with a large student body and international collaborations, including Erasmus+ and the Ulysseus European University alliance. The digital presence is modern, leveraging Next.js and React technologies, with excellent mobile optimization and user experience. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the university's mission and audience.

H

Hotel Troja, ubytování a restaurace v Praze 8 | hoteltroja.cz

hoteltroja.cz

54

Hotel Troja is a hospitality business located in Prague 8, offering hotel accommodation, restaurant services, conference room rentals, and event hosting including weddings. The website presents a professional and user-friendly interface with integrated booking systems from third-party providers. The business targets general audiences seeking lodging and dining in the Prague area. Technically, the site uses jQuery and custom JavaScript with CSS styling, managed via the adSYSTEM CMS platform. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is moderate with HTTPS usage but lacks visible security headers and explicit incident response policies. Privacy and cookie policies are present and GDPR compliant. WHOIS data is unavailable, which limits domain trust verification, but the website content and contact details appear legitimate. Overall, the site is functional and trustworthy for its business purpose.

F

FRABEX GmbH

frabex.com

51

FRABEX GmbH is an Austrian company specializing in the distribution of high-quality bearings and linear technology products, representing brands such as FBJ, HIWIN, and MYT. The company serves a diverse clientele including industrial, agricultural, commercial, and private customers, offering both a physical presence and an online webshop tailored for business customers. Their market position is strengthened by being the European distribution center for FBJ and a key dealer for HIWIN in Austria, supported by an in-house linear workshop enabling customized solutions. Technically, the website is built on modern web technologies including UIkit and jQuery, with a proprietary CMS by EWAY. The site is mobile optimized, SEO friendly, and includes essential accessibility features. Performance is moderate with good design and navigation clarity, supporting a positive user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policies and incident response contacts, which are recommended for enhanced trust and compliance. No vulnerabilities or exposed sensitive data were detected, and the WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, FRABEX GmbH presents a professional and trustworthy online presence with solid business credibility and compliance posture. Strategic improvements in security transparency and incident response readiness would further strengthen their security maturity and customer trust.

The website totalizatorsportowy.pl currently serves as a parked domain page with no active business content or services. The domain is registered since 2003 via Aftermarket.pl Limited, a domain aftermarket provider, and the website content aligns with this by indicating the domain is for sale. There is no visible business information, contact details, or privacy and cookie policies, which significantly limits the site's credibility and trustworthiness. Technically, the site uses basic HTML, CSS, and JavaScript with external scripts for advertising and tracking, but lacks HTTPS enforcement and security headers, exposing it to potential security risks. The embedded iframe points to an external suspicious domain, which could pose security concerns. Overall, the site is low trust and minimal in content, serving primarily as a domain sales landing page.

The website www.pawduketreats.com/retail-order-form/ presents itself as an e-commerce platform promoting an online slot gaming application named WASLOT, targeting the Indonesian market. It offers bonus promotions and claims a high user rating with numerous reviews. The site is built on or heavily integrated with the Etsy platform, utilizing various modern JavaScript libraries and tracking tools such as Google Tag Manager, Bing Ads, and Sentry for error monitoring. However, the absence of WHOIS registration data and domain legitimacy concerns reduce overall trust. The site lacks visible privacy, cookie, or terms of service policies, which impacts compliance and user trust. Security headers are not detected, and no explicit company contact information is provided, limiting transparency. Overall, the site appears functional but has significant gaps in security posture and compliance.

S

Home | Smart Mobile Gamers

smartmobilegamers.org

41

The website www.smartmobilegamers.org appears to be a basic Wix-built site with minimal content and no visible business or contact information. The lack of privacy policies, terms of service, or security disclosures indicates a low level of digital maturity. Technically, the site uses standard Wix scripts and polyfills but lacks advanced SEO, accessibility, and security features. The absence of WHOIS data and registrant information reduces trust and raises concerns about domain legitimacy. Overall, the security posture is weak with no evident security headers or incident response mechanisms. The site is accessible without WAF or security challenges but provides limited business or user engagement value.

T

Tourismus Marketing Gesellschaft Sachsen mbH

sachsen-angebote.de

52

Tourismus Marketing Gesellschaft Sachsen mbH operates the website www.sachsen-angebote.de to promote tourism offers and facilitate accommodation bookings in the Saxony region of Germany. The site targets tourists and travelers interested in exploring Saxony, providing curated travel packages and booking options. The business is positioned as a regional tourism marketing entity with a medium-sized operational scale. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including JavaScript, CSS, and accessibility tools such as Eye-Able. Hosting is provided by SchlundTech, a reputable provider. The site demonstrates good mobile optimization and basic SEO practices, with consent management implemented for GDPR compliance. From a security perspective, the site enforces HTTPS and integrates consent management, but lacks explicit security headers and a published security policy. No vulnerabilities or malicious content were detected. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Contact information is available via a clearly labeled phone number and booking form. Overall, the website presents a professional and trustworthy front for regional tourism marketing, with moderate technical maturity and security posture. Strategic improvements in privacy policy publication, security header implementation, and incident response readiness would enhance compliance and trustworthiness.

The website www.priserkyvhlave.cz is an educational platform in Czech language focused on teaching about monsters through interactive games and resources, primarily targeting schools and children. It is a project supported and co-financed by the European Union and the Czech Ministry of Interior, indicating a non-commercial, public service nature. The site uses modern web technologies such as React and Next.js, providing a good user experience with responsive design and clear navigation. However, the site lacks visible privacy, cookie, and terms of service policies, and no contact information is provided, which limits transparency and user trust. From a technical perspective, the site is built on a modern JavaScript framework with client-side rendering and moderate performance. No analytics or tracking scripts were detected, suggesting minimal user tracking. Security posture is limited due to the absence of security headers and no visible SSL configuration details. The WHOIS data for the domain is unavailable, likely due to privacy protection or domain registration issues, which negatively impacts the trustworthiness assessment. Overall, the website is safe and suitable for general audiences, with no adult or explicit content detected. The lack of WHOIS transparency and privacy policies are the main concerns. Strategic recommendations include implementing comprehensive privacy and cookie policies, improving security headers, providing clear contact and incident response information, and verifying domain registration details to enhance trust and compliance.

A

Atlas předsudků

atlaspredsudku.cz

39

Atlas předsudků is a Czech Republic based educational and informational website focused on debunking prejudices and misinformation about foreigners and integration within the country. The site is funded by the European Union and the Czech Ministry of Interior, positioning it as a government-backed public awareness campaign. It offers interactive quizzes, detailed factual content, and multimedia resources to educate the general public on migration and integration topics. The target audience is the Czech general public interested in social issues and combating misinformation. Technically, the website uses modern web technologies including Bootstrap 5 and Google Analytics, with a cookie consent mechanism that respects user privacy by default denying ad and analytics cookies. The site is hosted on a Czech hosting provider and uses a domain registered in 2020, consistent with its recent campaign nature. Security posture is moderate with room for improvement in security headers and incident response transparency. No privacy policy or terms of service pages were found, which is a compliance gap. Overall, the website is professional, trustworthy, and serves an important social function with good content quality and user experience.

OPA Group s. r. o. operates the website oculocin.cz, specializing in the development, manufacturing, and distribution of natural eye care products, including eye drops designed to treat chronic conjunctivitis and irritated eyes without antibiotics. The company positions itself as a provider of safe, effective, and innovative healthcare products with certifications such as ISO 13485 and CE MDD 0434, targeting consumers seeking natural and hygienic eye care solutions. The website is professionally designed using WordPress with multilingual support and SEO optimization, providing clear product information and customer engagement through a registration form and social media links. Technically, the site employs modern web technologies and is hosted by Wedos, with good SSL configuration and basic security practices in place. However, security headers and explicit security policies could be enhanced. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the website demonstrates a high level of business credibility and technical maturity, with no signs of blocking or malicious content.

A

Asseco Solutions, a. s.

asseco-qasida.com

10

Asseco Solutions, a. s. operates the Asseco QASIDA platform, a comprehensive cloud-based ecosystem of business applications including ERP, CRM, AI-driven inventory prediction, service management, and rental management. The company targets small and medium enterprises in Slovakia and offers modular SaaS solutions designed to optimize business processes and enhance operational efficiency. The website reflects a modern, professional digital presence with clear business focus and strong branding consistency. Technically, the website employs modern JavaScript libraries such as jQuery, Swiper.js, and Google reCAPTCHA v3 for security. Hosting is provided via Websupport.cz, and the site is well-optimized for mobile devices with good SEO and accessibility features. The presence of cookie consent mechanisms and GDPR compliance documents indicates a mature approach to privacy. Security posture is solid with HTTPS enforced and secure form handling, though the absence of explicit security policies and incident response contacts suggests room for improvement. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business profile, enhancing trustworthiness. Overall, the website and business demonstrate a strong market position in cloud ERP and business applications within Slovakia, with a good balance of technical sophistication and compliance. Strategic recommendations include enhancing security transparency and incident response readiness to further strengthen trust and resilience.

F

FK Džiugas

fcdziugas.lt

9

FK Džiugas operates a professional and content-rich website focused on providing comprehensive information about the football club's activities, players, schedules, and league standings. The site targets football fans, club members, and the local sports community in Lithuania. The business model centers on sports club operations, community engagement, and merchandise sales via a dedicated subdomain. Technically, the website is built on WordPress with popular plugins such as SportsPress Pro and WooCommerce, indicating a mature digital infrastructure. The site is mobile-optimized and uses modern JavaScript libraries and frameworks, ensuring a good user experience. Security posture is solid with HTTPS enforced and multiple security headers present, although no explicit security policy or incident response information is published. Privacy compliance is addressed with visible cookie consent and privacy policy pages, reflecting GDPR awareness. However, the absence of WHOIS data limits domain legitimacy verification, which slightly impacts overall trust. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

G

Gargždai Basketball

gargzdaibasketball.lt

54

Gargždai Basketball is a professional basketball club based in Lithuania competing in the Lithuanian Basketball League. The website serves as a hub for fans and community members to access team news, schedules, ticket sales, and partnership information. The club positions itself as a regional sports entity with active community engagement and sponsorships. Technically, the website is built on WordPress with a modern tech stack including popular plugins for sports management and e-commerce. The site is mobile optimized and uses HTTPS, ensuring secure communications. However, it lacks visible privacy and cookie policies, which is a compliance gap. Security posture is generally good with no obvious vulnerabilities detected, but could be improved with explicit security headers and incident response information. Overall, the website is professional and trustworthy, serving its target audience effectively.

L

Löwen Play

loewen-play.de

58

Löwen Play operates as a licensed German online casino platform specializing in virtual slot games and online gambling services. The website targets adult German-speaking users interested in legal and secure online gaming experiences. The platform emphasizes compliance with German licensing requirements and offers popular slot games with payment options such as PayPal. Technically, the site employs modern JavaScript frameworks, integrates Cookiebot for GDPR-compliant cookie consent, and uses Cloudflare for DNS and likely CDN services. Analytics and user engagement are tracked via etracker and Google Analytics, while customer support is facilitated through LiveChat. Security posture is solid with HTTPS enforced and CSRF protections in login forms, though explicit security headers and policies are not visible. Overall, the site presents a professional and trustworthy front with good mobile optimization and user experience.

S

Scope Productions s.r.o.

scopeproduction.cz

51

Scope Productions s.r.o. is a professional video production company based in Prague, Czech Republic, specializing in creating high-quality video content for global brands, Web3 projects, and livestream events. With over 10 years of experience, they offer a comprehensive range of services including timelapse videos, video marketing, livestreams, corporate videos, commercials, animations, and Web3 content. Their market position is that of a trusted small-sized media service provider with a strong international client base and a focus on innovation and measurable results. Technically, the website is built on modern web technologies including Webflow CMS, jQuery, Vimeo Player API, and uses Cloudflare services for CDN and security. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing an excellent user experience with smooth scrolling and interactive elements. From a security perspective, the site employs HTTPS and uses Cloudflare Turnstile CAPTCHA on its contact form to mitigate spam and bot submissions. However, it lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data due to privacy protection is common for this business type but reduces transparency slightly. Overall, the website presents a professional and trustworthy image with strong business credibility and technical maturity. Strategic recommendations include publishing comprehensive privacy and cookie policies, enhancing security headers, and providing explicit incident response contacts to improve compliance and trust.

V

Všeobecná zdravotní pojišťovna ČR

zdravakariera.cz

63

The website zdravakariera.cz serves as the official career portal for Všeobecná zdravotní pojišťovna ČR (VZP), the largest health insurance company in the Czech Republic. It provides detailed information about employment opportunities across various professional fields including healthcare, IT, law, marketing, and HR. The site emphasizes benefits, trainee programs, and inclusion initiatives for handicapped individuals, targeting job seekers, students, and graduates. The website is well-branded, consistent, and professionally designed, reflecting the stature of a major public institution. Technically, the site employs modern web technologies including Microsoft Azure hosting, Google Tag Manager, Microsoft Application Insights, and Facebook Pixel for analytics and marketing. It is mobile-optimized, accessible, and uses HTTPS with a cookie consent mechanism that complies with GDPR requirements. However, explicit security headers are not evident in the HTML source, and no direct contact or security incident response information is provided. From a security perspective, the site demonstrates good practices such as encrypted connections and privacy-aware analytics. The absence of WHOIS data is notable but likely due to registry policies or privacy protection rather than malicious intent. No vulnerabilities or exposed sensitive data were detected. Overall, the site presents a low-risk profile with strong business credibility. Strategically, the site could improve by publishing explicit security policies, incident response contacts, and implementing security.txt for vulnerability disclosure. Enhancing security headers would further strengthen its security posture. The site’s comprehensive privacy and cookie policies, combined with official social media presence, contribute to user trust and compliance.

S

Sitejabber

sitejabber.com

63

Sitejabber is a leading online platform specializing in consumer business reviews and ratings, serving over 200 million customers and featuring reviews for more than 130,000 businesses. Positioned as a trusted resource, it offers consumers insights to make informed purchasing decisions and provides businesses with a platform to engage with customers. The company emphasizes trust, consumer protection, and transparency, supported by its award-winning status and Google Partner certification. Technically, Sitejabber employs modern web technologies including React and Next.js, ensuring a fast, mobile-optimized, and accessible user experience. Security is robust with HTTPS enforcement and comprehensive security headers, although public incident response and vulnerability disclosure policies are not evident. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, Sitejabber demonstrates a mature digital presence with high professionalism and trustworthiness, though WHOIS data unavailability slightly impacts domain transparency.

T

Trade Association Forum

taforum.org

58

Trade Association Forum (TAF) is a well-established UK non-profit organization serving as an association of trade associations. Founded in 2001, it supports over 180 UK trade associations by promoting best practices and advocating their role to government, industry, and the public. The website reflects a mature business model focused on membership services, events, training, and resources tailored to trade associations. The organization holds a strong market position as a central hub for trade associations in the UK.

J

James Hardie Europe GmbH

jameshardie.eu

66

James Hardie Europe GmbH is a leading manufacturer and marketer of fiber cement cladding and fiber gypsum products in Europe, with a strong market position as the world’s number one producer in its sector. The company offers a range of high-performance building materials including Hardie® Plank and Hardie® Panel products, emphasizing durability, fire protection, and sustainability. Their operations span multiple continents with thousands of employees and several R&D and manufacturing sites. The website reflects a mature digital presence built on ASP.NET Kentico CMS, with modern tracking and cookie consent mechanisms in place. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site is professional, trustworthy, and well-structured, supporting the company’s strong brand and market leadership.

J

James Hardie Europe GmbH

fermacell.com

57

The website represents James Hardie Europe GmbH's fermacell® brand, a leading manufacturer of gypsum fibreboards and related building materials in Europe. The company has a strong market position as a European market leader with a broad product portfolio targeting construction professionals and distributors. The digital infrastructure is built on ASP.NET with Kentico CMS, supported by Cloudflare DNS and CDN services, and includes modern marketing and consent tools such as Google Tag Manager and OneTrust. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is partial with cookie consent but no visible privacy or terms policies. Overall, the site is professional, trustworthy, and content-rich, supporting a large enterprise manufacturing business.

F

Friedrich-Schiller-Universität Jena

uni-jena.de

63

Friedrich-Schiller-Universität Jena is a prominent German university focused on education, research, and community engagement. The institution offers a broad spectrum of academic programs and fosters interdisciplinary research under its key profiline themes "Light. Life. Liberty." The university serves approximately 17,000 students and 10,000 staff, positioning itself as a large, internationally connected academic entity. The website reflects this stature with rich content, professional design, and clear navigation tailored to students, researchers, and international audiences. Technically, the website employs modern web standards including HTML5, CSS, and JavaScript, with accessibility features such as ReadSpeaker integration. Hosting appears to be managed by DFN, a German research network, which aligns with the academic nature of the institution. Performance and mobile optimization are good, though no explicit CMS or frameworks were detected. SEO and accessibility are well addressed. From a security perspective, the site uses HTTPS with strong SSL configuration and deferred script loading. However, it lacks visible security headers and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is limited, with no explicit privacy or cookie policies found in the analyzed content, which is a notable gap. Overall, the website is trustworthy, professional, and content-rich, but could improve in privacy transparency and security policy disclosures. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, and establishing a vulnerability disclosure process to enhance trust and compliance.

E

Eurozel - Čerstvé a zdravé

eurozel.sk

70

Eurozel - Čerstvé a zdravé is a small retail business operating in Slovakia, specifically targeting the Bratislava region. The company specializes in the regular delivery of fresh fruits, vegetables, and supplementary goods, catering to customer requirements and agreements. The website is built on WordPress using the Divi theme, enhanced with SEO optimization via Yoast and cookie consent management through Cookiebot. The technical infrastructure reflects a moderate level of digital maturity with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service. Overall, the website presents a professional and trustworthy front for a local retail delivery service, though improvements in security and compliance documentation are recommended.

The IAU Meteor Data Center website serves as a scientific repository for meteor shower data and meteoroid orbital information under the auspices of the International Astronomical Union. It provides authoritative databases for researchers and amateur astronomers, facilitating access to published meteor shower discoveries and meteoroid orbit data. The site is informational and non-commercial, targeting the astronomy research community. Technically, the website employs a simple and stable technology stack including Bootstrap 3.4.1 and jQuery 3.5.1, hosted likely by a Slovak hosting provider. The site is functional with moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. No CMS or complex backend is evident, reflecting a straightforward static or lightly dynamic site. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which are recommended to enhance security posture. No forms or user input reduce attack surface, but absence of privacy and cookie policies indicates compliance gaps. The WHOIS data shows a consistent domain registration with no privacy protection, appropriate for a scientific entity, though the domain age is recent compared to the long history of the service. Overall, the website is safe, trustworthy, and serves its niche well but would benefit from improved security headers, privacy compliance, and contact transparency to enhance trust and compliance.

Sdružení pečujících o duševně nemocné ČR z.s. (SPDN ČR) is a Czech non-profit organization dedicated to supporting caregivers of mentally ill individuals. The organization focuses on advocacy, legislative cooperation, monitoring compliance with mental health laws, and providing awareness and counseling services. The website content is primarily in Czech and targets caregivers, mental health professionals, and government bodies within the Czech Republic. The business model is non-profit and community-focused, with a small organizational size and a founding year of 2006. Technically, the website is built with basic HTML, CSS, and JavaScript without any detected CMS or advanced frameworks. The site performs well with fast loading times but has only basic mobile optimization and accessibility features. SEO and metadata are minimal, and no structured data or Open Graph tags are present. There is no evidence of modern analytics or marketing tools beyond a single tracking pixel. From a security perspective, the site lacks visible HTTPS confirmation in the provided data, no security headers, and no privacy or cookie policies. No contact information or incident response details are provided, which limits transparency and user trust. The WHOIS data is unavailable due to a malformed request, which reduces domain registration trustworthiness but is not uncommon for non-profit organizations. Overall, the security posture is weak, and privacy compliance is minimal. The overall risk is moderate given the nature of the organization and the lack of sensitive transactional data on the site. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving security headers, and providing clear contact and incident response information to enhance trust and compliance.

L

Leastex, a.s.

leastex.cz

49

Leastex, a.s. is a well-established Czech company specializing in comprehensive laundry and textile rental services, primarily serving healthcare and industrial sectors. Founded in 1992, it operates as part of the larger TSC Group, which encompasses multiple subsidiaries focused on cleaning, facility management, and related services. The company leverages modern RFID technology to provide efficient textile management and detailed tracking for clients. The website reflects a professional and modern digital presence with multimedia content and clear navigation. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and reCaptcha for form security. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though it lacks some advanced security headers and explicit incident response information. The absence of WHOIS data limits domain registration trust assessment, but the website content and business information appear legitimate and consistent with a professional service provider. Privacy and cookie policies are present and linked to the parent group, indicating compliance with GDPR. Contact information is comprehensive, including physical addresses and a secure contact form. Overall, Leastex, a.s. presents a trustworthy and professional business with a strong market position in the Czech Republic's healthcare and industrial laundry service sectors. Security and compliance practices are good but could be enhanced with additional policies and security headers.

L

L I N E T spol. s r.o.

linet.com

73

LINET spol. s r.o. is a leading global manufacturer specializing in advanced care hospital beds and related medical furniture. The company offers a comprehensive product portfolio including hospital beds, stretchers, chairs, mattresses, and various accessories, targeting healthcare providers and medical facilities worldwide. Their market position is strong as a top manufacturer in their niche, supported by a professional and content-rich website that reflects their business focus and expertise. Technically, the website employs modern web technologies such as JavaScript, Google Tag Manager, Cookiebot for consent management, and reCAPTCHA for bot protection. The site is mobile-optimized with good SEO practices and moderate performance. However, some accessibility features could be improved to enhance user experience for all visitors. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security policies or incident response contacts. No critical vulnerabilities were detected in the provided content, but the absence of WHOIS data and privacy policy pages slightly reduces trust and compliance confidence. Overall, the website presents a professional and trustworthy front for LINET, but improvements in transparency, security documentation, and accessibility would strengthen their digital maturity and compliance posture.

InterSystems Corporation is a leading enterprise software company specializing in data management and healthcare information systems. The company offers a broad portfolio of high-performance, cloud-first platforms designed to make data AI-ready, clean, and accessible across industries such as healthcare, finance, manufacturing, and supply chain. Positioned as a market leader, InterSystems competes with major cloud and data platform providers and is recognized in industry rankings such as the ISG/Ventana Buyers Guide. The website reflects a mature digital presence with comprehensive product information, customer success stories, and developer resources. Technically, the site employs modern web technologies, including Google Tag Manager, HubSpot, and OneTrust for privacy compliance, and is hosted on a robust CDN infrastructure likely powered by Akamai. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit vulnerability disclosure and incident response contacts are not publicly detailed. Overall, the website and business presence indicate a trustworthy and professional enterprise with a focus on data-driven digital transformation.

The website www.pfizer.cz is currently inaccessible due to a Cloudflare Turnstile security challenge page, which blocks direct access to the site's content. Pfizer is a well-known global pharmaceutical company, and this domain likely represents its Czech Republic presence. However, due to the WAF protection, no direct content, contact information, or policy documents are accessible for analysis. The technical infrastructure includes Cloudflare services for security and performance, but no CMS or analytics technologies are detectable in the provided HTML. The lack of WHOIS data from CZ.NIC suggests privacy protection or domain registration issues, which is common for large enterprises. Overall, the site appears legitimate but cannot be fully assessed due to access restrictions.

P

Pears Health Cyber Europe, s.r.o.

euni.cz

63

EUNI.cz is a well-established Czech e-learning platform specializing in accredited continuous education for healthcare professionals including physicians, pharmacists, and non-medical healthcare workers. Operated by Pears Health Cyber Europe, s.r.o., the platform offers a broad range of courses, congress lectures, and professional articles, positioning itself as a key player in the Czech healthcare education market. The website demonstrates a high level of professionalism, with consistent branding, comprehensive content, and strong partnerships with reputable medical organizations. Technically, the site employs modern web technologies such as Google Tag Manager, reCAPTCHA, Sentry for error monitoring, and Hotjar for user behavior analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and consent-based cookie management, though improvements could be made by adding security headers and a vulnerability disclosure policy. Overall, the site is safe, GDPR compliant, and trustworthy, though the absence of WHOIS registrant data slightly reduces transparency. Strategic recommendations include enhancing security headers, publishing a security.txt file, and maintaining up-to-date third-party libraries to further strengthen security and compliance.

L

Labtestonline.cz

labtestsonline.cz

60

Labtestonline.cz is a Czech healthcare informational website dedicated to educating patients and the general public about laboratory tests and related diseases. It is supported and guaranteed by reputable Czech clinical biochemistry and medical societies, positioning it as a trusted source in the Czech healthcare education sector. The site offers comprehensive information on laboratory tests, diseases, screening, and includes educational videos and news updates, targeting individuals seeking to understand medical testing and health conditions better. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates third-party services such as Google Tag Manager and Smartlook for analytics and user behavior tracking. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security-wise, the website enforces HTTPS, uses CSRF tokens in forms, and implements cookie consent mechanisms, although it lacks some advanced security headers and explicit security policies. The absence of WHOIS data due to privacy protection is common and justified for this type of informational healthcare site. Overall, the website demonstrates a strong security posture, good privacy compliance, and high business credibility, making it a reliable resource for its audience.