Security Directory

G

Google LLC

google.si

74

Google LLC is a global leader in internet-related services and products, including its flagship search engine, advertising platforms, cloud computing, and software solutions. As a subsidiary of Alphabet Inc., Google maintains a dominant market position with a broad portfolio of services targeting general consumers and businesses worldwide. The website reflects a high level of professionalism, technical sophistication, and user-centric design, supporting a seamless user experience across devices. Technically, the site employs modern web standards, robust security headers, and is hosted on Google Cloud Platform, ensuring fast performance and high availability. Security posture is strong, with enforced HTTPS, comprehensive security headers, and no detected vulnerabilities, reflecting mature security practices. Privacy compliance is well addressed with clear policies and consent mechanisms, aligning with GDPR requirements. Overall, Google.com demonstrates excellent business credibility, technical maturity, and security readiness, making it a trustworthy and authoritative web presence.

P.A.TISK s.r.o. is a Czech Republic based small business specializing in comprehensive printing and polygraphic services. Their offerings include digital and screen printing, large format printing, packaging design, textile printing, and logistics services, supported by expert consulting and seminars. The company presents itself as experienced with a good understanding of the graphic industry and printing technologies. The website is professionally designed with clear navigation and relevant content targeting businesses and clients needing printing solutions. Technically, the site is a static Adobe Muse generated site using older JavaScript libraries and basic mobile optimization. Security posture is moderate with HTTPS assumed but lacking modern security headers and using outdated libraries. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is comprehensive and trustworthy, including company registration details. Overall, the site is functional and credible but would benefit from improved security and privacy compliance.

Základní škola a mateřská škola Jetřichov is a small local educational institution in the Czech Republic providing primary and preschool education. The school is municipally operated and offers various educational and community services including school dining and after-school care. The website presents comprehensive information about the school, its projects, and contact details, targeting parents and the local community. Technically, the site uses a standard web stack with Bootstrap 3 and jQuery, hosted by Active24. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. No forms or tracking scripts are present, reducing privacy risks. Overall, the site is professional and trustworthy but would benefit from improved privacy compliance and security best practices.

I

Institut pro památky a kulturu, o.p.s.

mamevybrano.cz

59

Institut pro památky a kulturu, o.p.s. operates the website www.mamevybrano.cz, a Czech non-profit project dedicated to inspiring and supporting the preservation of cultural heritage through conferences, competitions, and a printed bulletin. The organization has a long-standing presence in the Czech cultural sector, targeting individuals and institutions interested in heritage conservation. The website reflects a professional and consistent brand image with clear organizational and contact information, including social media channels on Facebook and LinkedIn. Technically, the site uses modern web technologies including Google Fonts, Google Analytics, Hotjar, and is built on the Solidpixels CMS platform. The site is mobile-optimized and performs moderately well with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and formal security policies are absent. WHOIS data is unavailable, limiting domain trust verification, but the website content and contact details support legitimacy. Overall, the site is safe, compliant with GDPR, and serves its non-profit mission effectively.

I

Institut pro památky a kulturu, o.p.s.

propamatky.cz

53

PROPAMÁTKY is a Czech non-profit organization operating an information portal dedicated to cultural heritage preservation. The website offers comprehensive resources including news, funding opportunities, expert catalogs, and educational content aimed primarily at monument owners, professionals, and the general public interested in heritage conservation. The organization positions itself as a key player in the Czech heritage sector, providing valuable services and fostering community engagement through partnerships and events.

K

KlasikaPlus.cz

klasikaplus.cz

63

KlasikaPlus.cz is a specialized Czech media portal focused on classical music, offering news, interviews, event coverage, and cultural insights. The website targets classical music enthusiasts and professionals within the Czech Republic, providing rich and regularly updated content. Technically, the site is built on WordPress with modern web technologies like jQuery and JavaScript, and it is served over HTTPS ensuring secure connections. However, the absence of WHOIS data is a notable anomaly, though the site itself is active and professionally maintained. Security posture is decent with HTTPS and no exposed sensitive data, but lacks important security headers and formal privacy or cookie policies. Overall, the site presents a trustworthy and professional front for its niche audience but could improve compliance and security practices.

L

Lentiamo

vasecocky.cz

68

Lentiamo.cz is a professional e-commerce retailer specializing in contact lenses, eyewear, and related accessories, targeting primarily the Czech market and other European countries. The website offers a broad product range including daily, monthly, toric, and multifocal lenses, supported by a well-structured navigation and multi-language support. The presence of trust signals such as Heureka Golden Badge and integration with Google and Facebook login services enhances customer confidence. Technically, the site employs modern analytics and tracking tools like Google Tag Manager and Microsoft Clarity, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement and secure form handling, though explicit security policies and incident response information are not prominently available. The absence of WHOIS data for the domain is a concern, potentially indicating privacy protection or registration issues, which slightly impacts the trust score. Overall, Lentiamo.cz presents a reliable and user-friendly platform for optical products with room for improvement in transparency of security and compliance documentation.

D

Daikin

daikinegypt.com

70

Daikin Egypt operates as a regional branch of the global HVAC leader Daikin, providing air conditioning, heating, ventilation, and air purification solutions primarily targeting residential and commercial customers in the Middle East and Africa region. The website reflects a mature digital presence with comprehensive product information, customer support, and corporate branding consistent with Daikin's global standards. Technically, the site leverages Adobe Experience Manager CMS and integrates modern analytics and marketing tools such as Matomo and Google Tag Manager, ensuring good performance and SEO optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating privacy protection or a recent registration, which slightly impacts trustworthiness. Overall, the site is professional, content-rich, and trustworthy from a business and user perspective.

The website www.estaregistrierung.org is a German-language service focused on assisting travelers from Visa Waiver Program countries with their ESTA (Electronic System for Travel Authorization) applications for entry into the United States. It provides detailed information about the ESTA process, requirements, costs, and FAQs, along with an online application form and status checking service. The site targets German-speaking travelers seeking a streamlined and supported ESTA application experience. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript with jQuery, and integrates third-party services such as Tawk.to for live chat support and Google Analytics for visitor tracking. The site is mobile-optimized and structured for good SEO and user navigation. Security-wise, while HTTPS is implied, the site lacks visible security headers and explicit cookie consent mechanisms, which are areas for improvement. The WHOIS data for the domain is not publicly available, indicating privacy protection, which is common but reduces transparency. Overall, the site presents a professional and trustworthy front for its niche service but could enhance its security posture and privacy compliance to increase user trust and regulatory alignment.

F

Felix a spol. advokátní kancelář, s.r.o.

doadvokacie.cz

55

Felix a spol. advokátní kancelář, s.r.o. is a well-established Czech law firm offering internships and employment opportunities primarily targeting law students and junior lawyers. The firm emphasizes professional development, practical legal experience, and a supportive work environment. The website serves as a recruitment and informational platform, highlighting the firm's location, benefits, and contact details. Technically, the website is built on the Webnode CMS platform, leveraging modern web technologies including JavaScript, CSS, and Amazon Cloudfront CDN for hosting static assets. Google Tag Manager is used for analytics and tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. The absence of WHOIS data reduces transparency and trustworthiness, although the website content and presentation suggest a legitimate business. No critical vulnerabilities or malicious content were detected. Overall, the website is functional and professional but would benefit from enhanced security practices and compliance documentation to improve trust and legal adherence.

V

VŠEM

eshopvsem.cz

44

The website eplatbyvsem.cz functions as an official payment and administrative portal for VŠEM, a Czech educational institution. It provides students and staff with access to tuition payment, study administration, educational literature, professional courses, campus information, and academy programs. The site is well-branded and consistent with the parent institution's identity, targeting primarily students and affiliates of VŠEM. The business model revolves around supporting educational services through digital payment and administrative tools. Technically, the website is built on the Contao Open Source CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. No advanced analytics or tracking scripts were detected, indicating a minimal user tracking approach. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie consent mechanisms, which are important for GDPR compliance. No WHOIS data is publicly available, which reduces transparency but does not necessarily indicate illegitimacy. The site links to official VŠEM domains and social media channels, reinforcing trustworthiness. Overall, the website presents a moderate risk profile with room for improvement in security headers, privacy compliance, and WHOIS transparency. Strategic recommendations include implementing security headers, adding cookie consent, publishing clear privacy and security policies, and improving accessibility features to enhance user trust and regulatory compliance.

The website 'Rozhovory Václava Havla' is a specialized cultural and historical archive project managed by the Václav Havel Library. It provides a comprehensive digital collection of interviews given by Václav Havel from the 1960s through 1989, serving researchers, historians, and the general public interested in Czech history and Václav Havel's life. The site is non-commercial and supported by the Czech State Cultural Fund, emphasizing its cultural and educational mission. Technically, the website uses standard web technologies including HTML5, CSS, and JavaScript libraries such as jQuery and Colorbox. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. There is no detected CMS or modern framework, indicating a relatively simple technical infrastructure. From a security perspective, the site lacks visible HTTPS confirmation, security headers, and privacy or cookie policies, which are critical for user trust and compliance with data protection regulations. No contact information or incident response channels are provided, and no WHOIS registration data is available, which raises concerns about domain legitimacy and transparency. Overall, the website is a valuable cultural resource with good content quality and user experience but requires significant improvements in security posture, privacy compliance, and domain registration transparency to enhance trustworthiness and compliance with modern standards.

P

P3CHEM s.r.o.

p3chem.cz

57

P3CHEM s.r.o. is a small Czech company specializing in services related to refining and petrochemical products across Central Europe, including the Czech Republic, Germany, Poland, Austria, and Slovakia. The company collaborates with major multinational refining and petrochemical firms and also serves smaller business partners. Founded in 2005, P3CHEM holds certifications such as ISCC EU and is a registered distributor of PHM in the Czech Republic, indicating a credible and compliant business operation within its sector. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript with jQuery 1.7.2, and uses Mixpanel for analytics tracking. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features and modern frameworks. No CMS or hosting provider details beyond registrar and DNS are evident. The website is accessible without any WAF or security challenges. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No forms or user input fields reduce attack surface, but the use of outdated JavaScript libraries may pose risks. The absence of contact information and incident response details limits transparency and user trust. The site uses HTTPS (assumed but not explicitly confirmed), but security posture could be improved with better headers and policies. Overall, the website is professionally presented with good content quality and business credibility but falls short on privacy compliance and security best practices. Strategic improvements in these areas would enhance trust and regulatory adherence.

RCsoft sro operates a professional website focused on architectural services under the brand Études. The company offers a range of services including renovation, consulting, project management, and architectural solutions targeting homeowners and commercial developers. The website is built on WordPress and demonstrates a moderate level of technical maturity with good mobile optimization and accessibility. However, the absence of privacy and cookie policies, contact information, and security headers indicates gaps in compliance and security best practices. The domain WHOIS data is unavailable, likely due to privacy protection, which limits verification of ownership and domain age. Overall, the website presents a professional image but would benefit from enhanced transparency and security measures.

Č

Česká kongregace sester dominikánek

dominikanky.cz

59

The website represents the Česká kongregace sester dominikánek, a small non-profit religious congregation in the Czech Republic dedicated to spiritual life and community service. Their offerings include spiritual guidance, educational services through affiliated schools, accommodation for students, and publishing theological literature. The organization maintains an active social media presence and provides a contact form for prayer requests and communication. Technically, the site is built on the Webnode CMS platform, uses Amazon Cloudfront CDN for content delivery, and implements HTTPS with a cookie consent mechanism. However, it lacks explicit privacy and terms of service pages and security headers, which are areas for improvement. The WHOIS data is missing, which reduces domain trustworthiness, but the website content and affiliations indicate a legitimate entity. Overall, the site is well-structured, mobile-optimized, and safe for general audiences.

M

Město Broumov

broumov.net

38

Město Broumov operates an official municipal website serving residents and visitors with comprehensive local government information, news, cultural events, and public services. The site is positioned as the authoritative digital presence for the city of Broumov in the Czech Republic, targeting local citizens and tourists. Key services include municipal updates, event calendars, contact details for city offices, and online forms for administrative requests. The business model is typical for a government entity, focusing on public information dissemination and community engagement. Technically, the website employs a modern CMS platform (vismoWeb5) with integration of Google services such as Analytics, reCAPTCHA, and Translate. The site is HTTPS secured and includes cookie consent mechanisms compliant with GDPR. The design is responsive and accessible, with good SEO practices and clear navigation. However, some security best practices like HTTP security headers are not visibly implemented. From a security perspective, the site demonstrates a moderate security posture with HTTPS enforcement and form protections via reCAPTCHA. There is no evidence of exposed sensitive data or vulnerable libraries. However, the absence of a published security policy, incident response contacts, or vulnerability disclosure reduces transparency and preparedness. The missing WHOIS data for the domain is a concern for domain legitimacy verification, though the official content and contact details support authenticity. Overall, the website is a well-maintained municipal portal with good content quality and user experience. The main risks relate to incomplete domain registration transparency and minor security hardening opportunities. Strategic recommendations include improving security headers, publishing security policies, and verifying domain registration details to enhance trust and compliance.

A

Agentura pro rozvoj Broumovska z.ú.

aprb.cz

60

Agentura pro rozvoj Broumovska z.ú. is a Czech non-profit organization founded in 2004, dedicated to supporting regional development, cultural activities, and community life in the Broumovsko region. The organization operates cultural and educational programs, manages the Broumov monastery complex, and fosters collaboration among individuals, companies, and organizations to enhance the region's attractiveness and quality of life. The website reflects this mission with rich content in Czech, including event announcements, historical background, and community engagement initiatives. Technically, the website employs modern web technologies including HTML5, CSS, JavaScript, and integrates Google Analytics for visitor tracking. It uses HTTPS for secure communication and includes a cookie consent banner, indicating some level of privacy compliance. The site is mobile-optimized and features interactive elements such as slideshows and embedded videos. However, no CMS or hosting provider details are explicitly identified, and some security best practices like security headers are missing. From a security perspective, the site benefits from HTTPS and form validation but lacks visible security headers and a published privacy policy, which are important for GDPR compliance and user trust. The absence of WHOIS data for the domain reduces domain trustworthiness, although the website content and contact information appear legitimate and consistent with a reputable non-profit entity. No vulnerabilities or suspicious content were detected. Overall, the website presents a professional and trustworthy front for the organization but would benefit from enhanced security measures, clearer privacy documentation, and resolving the WHOIS data absence to improve domain legitimacy and compliance posture.

P

Premium OOH, a.s.

premiumooh.com

45

Premium OOH, a.s. operates a premium digital out-of-home advertising network focused on innovative 3D billboards located in prime locations in Prague, Czech Republic. The company targets brands seeking high-impact advertising solutions in Central Europe. Their website reflects a modern, professional digital presence built on Nuxt.js and Tailwind CSS, offering good mobile optimization and user experience. Contact and company information is clearly presented, supporting business credibility. However, the absence of WHOIS data raises questions about domain registration legitimacy and age. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies, which are compliance gaps. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security transparency.

The website www.multihub.cz is currently inaccessible beyond a maintenance placeholder page indicating that the site is undergoing maintenance. The only active content is a message in Czech stating 'Probíhá údržba webu' (Website under maintenance) with a link to the company PSHK s.r.o. No WHOIS registration data is available, which raises concerns about the domain's registration status or privacy protection. The lack of privacy policies, contact information, and security headers indicates a very low digital maturity and security posture. The site does not provide any business or service information, limiting the ability to assess market position or business model. Overall, the site appears inactive or in transition, with minimal technical implementation and no visible security or compliance measures.

RealEyez360 is a Dubai-based professional service provider specializing in architectural, real estate, and corporate event photography and videography, including advanced 3D Matterport virtual tours. The company targets real estate agents, hospitality businesses, and corporate clients, positioning itself as a regional expert with a portfolio of notable clients. The website is well-structured, visually appealing, and provides clear contact channels, supporting a small-sized business founded in 2017. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and integrates analytics and tracking tools such as Google Analytics, Facebook Pixel, and Mouseflow. Hosting is via Amazon AWS DNS services, indicating reliable infrastructure. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

D

Dream Labs

dream-labs.com

65

Dream Labs is a premium escape room provider located in Bad Steben / Hof, Germany, offering immersive and high-end escape room experiences targeted at families and groups. The business is well-positioned in the hospitality sector with multiple prestigious awards and excellent customer reviews, indicating a strong market presence and customer satisfaction. The website is professionally designed using WordPress with a custom theme, providing a rich user experience with multimedia content and clear navigation. However, the absence of privacy and cookie policies and lack of visible contact information on the provided content are notable gaps in compliance and user trust. Security-wise, the site enforces HTTPS but lacks visible security headers and vulnerability disclosure mechanisms, which could be improved to enhance security posture. The WHOIS data is missing or indicates the domain may be unregistered or recently expired, which is inconsistent with the active and professional website presence, warranting further verification. Overall, Dream Labs presents a trustworthy and professional business with room for improvement in privacy compliance and security transparency.

T

Top Escape Rooms Project

terpeca.com

62

The Top Escape Rooms Project is a niche community-driven platform dedicated to recognizing and awarding the best escape rooms worldwide. It leverages the expertise of experienced escape room enthusiasts to curate annual awards and provides tools such as a room finder and voter portal to engage its audience. The website presents a professional and consistent brand image with good content quality and user experience, targeting escape room players, owners, and designers globally. Technically, the website employs modern web technologies including Bootstrap, Google Fonts, and Google Tag Manager for analytics. The domain is registered with a reputable registrar and uses Google Domains for DNS, though DNSSEC is not enabled. The site is mobile optimized and has a moderate performance profile. However, it lacks explicit privacy and cookie policies, which are important for compliance and user trust. From a security perspective, the domain is locked against unauthorized transfer or deletion, but the absence of DNSSEC and security headers indicates room for improvement. No sensitive data exposure or vulnerabilities were detected in the content. The site uses Google Tag Manager for tracking but does not provide cookie consent mechanisms, which may pose compliance risks. Overall, the website is a credible and professional platform with a solid business model and community focus. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and reduce risk.

The website roemhild.de serves as a minimalistic personal domain dedicated exclusively to email and XMPP chat communications. It does not operate as a commercial business but rather as a private communication channel, emphasizing privacy and voluntary communication. The site explicitly states that no personal data, log files, IP addresses, cookies, or analytics tools are used, reflecting a strong privacy stance. The provision of an OpenPGP key further supports encrypted communication, indicating a privacy-conscious user or owner. From a technical perspective, the website is simple, built with basic HTML and CSS, without any detected CMS, frameworks, or advanced technologies. There are no forms, scripts, or tracking mechanisms, which reduces the attack surface but also limits functionality. The site appears to have moderate performance and basic mobile optimization but lacks SEO and accessibility enhancements. No security headers or HTTPS status were provided, suggesting room for improvement in security hardening. Security-wise, the site demonstrates good privacy practices by not collecting user data and encouraging encrypted communication. However, the absence of formal privacy and cookie policies, security headers, and incident response information indicates gaps in compliance and security posture. The WHOIS data is minimal but consistent with the domain's personal use, showing no suspicious patterns. Overall, the site is low risk but could benefit from improved security and compliance documentation. Strategically, the site is a personal or small-scale communication platform with limited business relevance. Recommendations include implementing HTTPS, publishing formal privacy and cookie policies, adding security headers, and considering incident response contacts to enhance trust and compliance.

3

37signals LLC

basecamp.com

65

Basecamp is a mature and reputable project management software company operated by 37signals LLC, with a strong market position serving small to medium-sized businesses globally. The company emphasizes straightforward, no-nonsense collaboration tools that replace multiple other software products, offering a comprehensive suite of project management, communication, and client collaboration features. Their business model is subscription-based SaaS, supported by a long history and a transparent, customer-focused approach. Technically, the website is well-built using modern web standards, optimized for mobile and desktop platforms, and hosted with Cloudflare DNS and registrar services. The site employs progressive web app features and uses SVG graphics and modular JavaScript. Performance and SEO are strong, with good accessibility features. The company provides multiple platform apps and extensive support resources including live classes and detailed documentation. Security posture is solid with HTTPS enforced, data backups, and transparent security policies. However, DNSSEC is not enabled, and no security.txt or explicit incident response contacts are published. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. The company provides direct contact emails to founders, enhancing trust and transparency. Overall, Basecamp presents a low-risk, trustworthy profile with excellent business credibility and technical maturity. Strategic improvements could include enhanced DNS security, formal vulnerability disclosure channels, and additional security headers to further strengthen their security posture.

D

Daikin Airconditioning LLC

daikinuae.com

69

Daikin Airconditioning LLC operates a professional and comprehensive website focused on air conditioning and HVAC solutions primarily targeting the UAE and Middle East & Africa markets. The company is positioned as a leading brand with a century-long history and offers a wide range of products including VRV systems, air purifiers, chillers, and wall-mounted units. The website demonstrates strong branding consistency, excellent content quality, and clear navigation, supporting a positive user experience. Technically, the site leverages Adobe Experience Manager CMS, integrates modern analytics and marketing tools, and shows good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. However, the WHOIS data is unavailable, which slightly impacts trustworthiness and suggests a need for further verification of domain registration details. Overall, the site reflects a mature digital presence aligned with a reputable global HVAC brand.

H

HERZ, s.r.o.

herz.cz

54

HERZ, s.r.o. is a Czech-based manufacturer specializing in heating and regulation technology, notably thermostatic valves and underfloor heating systems. The company holds a strong market position in Europe as a leading producer in its sector, targeting both professional installers and end consumers. Their website reflects a medium-sized enterprise with a professional digital presence, including product catalogs and e-commerce links. Technically, the site uses modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS and security headers, but lacks explicit privacy and security policies. The absence of WHOIS data limits domain trust assessment, though the website content and branding are consistent and professional. Overall, the site is safe, well-structured, and serves its business purpose effectively.

The website buzzman.com is currently a parked domain with no active business content or services. The page primarily serves as a placeholder indicating the domain is for sale, with monetization through advertising networks such as Google Adsense and DoubleClick. The domain is registered since 2002 with GoDaddy Online Services Cayman Islands Ltd., consistent with domain parking practices. There is no identifiable company or business information on the site, and no contact details are provided. The technical infrastructure relies on basic HTML and JavaScript with advertising scripts, but lacks modern security features such as HTTPS and DNSSEC. Privacy compliance is minimal, with only a basic privacy policy accessible via a JavaScript popup and no cookie consent mechanism.

V

Vzdělávací a kulturní centrum Broumov, o. p. s.

broumovskediskuse.cz

60

The website www.broumovskediskuse.cz represents a small non-profit educational and cultural organization named Vzdělávací a kulturní centrum Broumov, o. p. s., which organizes the Broumovské diskuse conference. This event focuses on culture, history, architecture, and community discussions held at the Broumov Monastery, a national cultural monument in the Czech Republic. The site targets conference attendees, students, and cultural enthusiasts, providing event information, partner details, and newsletter subscription options. Technically, the website uses modern web technologies including Google Analytics and Tag Manager for tracking, a slick slider for UI, and custom CSS and JavaScript. The site is mobile-optimized with good navigation and SEO practices. However, no CMS or hosting provider details are evident, and performance is moderate. Accessibility is basic but functional. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks visible security headers and a published privacy policy or security incident response information. Forms include validation and anti-spam measures, but no vulnerability disclosure or security.txt files are present. WHOIS data is unavailable, which limits domain trust assessment. Overall, the website is professional and trustworthy for its purpose but would benefit from enhanced security headers, a clear privacy policy, and published security practices to improve compliance and trustworthiness.

K

Knihovna Václava Havla

vaclavhavel.cz

58

Knihovna Václava Havla is a well-established non-profit cultural and educational institution dedicated to preserving and promoting the legacy of Václav Havel. It operates a comprehensive digital archive, organizes conferences, educational programs, and publishes related works. The website reflects a mature digital presence with rich content, clear navigation, and professional design, targeting students, researchers, and the general public interested in Czech history, democracy, and human rights. Technically, the site uses modern web technologies and integrates popular analytics and social media platforms, although some security headers and cookie consent mechanisms are missing. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's legitimacy given its institutional nature and transparent operations. Overall, the site demonstrates a strong commitment to accessibility, education, and cultural preservation.

S

Sächsische Aufbaubank

sn-cz2027.eu

64

The website www.sn-cz2027.eu represents the official Interreg Sachsen - Tschechien 2021-2027 program, a European Union funded initiative supporting cross-border cooperation projects between Saxony (Germany) and the Czech Republic. The site is managed by the Sächsische Aufbaubank and provides comprehensive information, project details, event calendars, and application guidance for stakeholders. The platform targets project applicants, beneficiaries, and interested parties in regional development and cooperation. Technically, the website is built on modern web standards with HTML5, CSS3, JavaScript, and uses Matomo analytics for privacy-conscious visitor tracking. It is mobile optimized and features a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and client-side form validation, though HTTP security headers and incident response information are not visibly published. WHOIS data is unavailable due to EURid privacy policies for .eu domains, which is typical and justified for official entities. Overall, the site is professional, trustworthy, and well-aligned with its governmental and non-profit mission.

M

Mluvím Anglicky s.r.o.

mluvim-anglicky.cz

51

Mluvím Anglicky s.r.o. is a Czech language school specializing in English language education, offering tailored individual and corporate lessons both onsite across the Czech Republic and online. The company positions itself as a modern, high-quality language school with a team of experienced Czech-speaking and native English-speaking instructors. The website reflects a professional and trustworthy business with strong client testimonials and membership in the Czech Association of Language Schools. Technically, the website is well-built using modern web technologies, hosted on Netlify, and optimized for mobile and SEO. Security posture is good with HTTPS and secure form handling, though it lacks some security headers and explicit GDPR compliance mechanisms such as cookie consent. The domain registration data is consistent with the business profile, indicating legitimacy. Overall, the website presents a credible, professional educational service with room for improvement in privacy and security policy transparency.

VAPC is a small, established language school and translation agency based in Rokycany, Czech Republic, operating since 1999. The company offers a broad range of language courses including English, German, Italian, French, Russian, and Czech for foreigners, alongside translation and interpreting services in over 80 languages. It also serves as an authorized testing center and provides corporate and individual language training. The website reflects a professional and consistent brand with good content quality and clear navigation, targeting individuals and businesses in the local region. Technically, the site uses older JavaScript libraries and lacks modern security headers, which presents some security risks. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. The site integrates Google Analytics and Facebook SDK for tracking and marketing purposes. Overall, the domain registration data is consistent with the business claims, supporting legitimacy and trustworthiness.

I

ILC International House Brno

ilcbrno.cz

55

ILC International House Brno is a private language school based in Brno, Czech Republic, specializing in English language education for children, teenagers, adults, and companies. The school offers a variety of courses including intensive programs, exam preparation, and individual lessons, targeting students seeking high-quality language education to advance academically and professionally. The website presents a professional and user-friendly interface with clear navigation and relevant content tailored to its audience. Technically, the site employs modern tracking and marketing technologies such as Google Tag Manager, Google Analytics, and Facebook Pixel, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and form validation implemented, though it lacks visible security policies or incident response contacts. The absence of WHOIS data introduces some uncertainty about domain legitimacy, but the website's content and contact information support its credibility. Overall, the site is well-positioned in the education sector with a good balance of business and technical maturity.

The website rserver.de is a minimalistic site used exclusively for private services, with no commercial or public business operations evident. The content is in German and clearly states that no personal data, cookies, or analytics are collected, emphasizing privacy and voluntary communication via email or Jabber/XMPP with OpenPGP encryption. The site lacks formal privacy, cookie, or terms of service policies, and no phone numbers or physical addresses are provided. Technically, the site is built with basic HTML and CSS, without any detected CMS or advanced frameworks. There is no evidence of analytics or advertising tools, and the site appears to have basic mobile optimization and accessibility. Security headers and HTTPS status are not confirmed from the data, but the use of encrypted communication methods is a positive indicator. From a security perspective, the site demonstrates a privacy-conscious approach by not collecting user data and encouraging encrypted communication. However, the absence of security headers, privacy policies, and cookie consent mechanisms are gaps that could be improved. The WHOIS data is consistent with the website's private use, showing no suspicious patterns or privacy protection that would raise concerns. Overall, the site presents a low-risk profile focused on privacy and minimal data exposure but would benefit from enhanced security practices and formalized compliance documentation.

B

Beyond Pixels

beyondpixels.at

50

Beyond Pixels is a small Austrian media website focused on entertainment content including games, movies, TV, hardware, manga, and related news. The site provides daily updates, reviews, tests, and giveaways targeting a general audience interested in various entertainment forms. Technically, the website is built on WordPress, using standard web technologies such as PHP, JavaScript, and CSS. The site is moderately optimized for performance and mobile devices, with good SEO practices evident from meta tags and canonical links. Security posture is basic with HTTPS enabled but lacks advanced security headers and explicit incident response or vulnerability disclosure information. Privacy compliance is partial with a cookie consent mechanism present but no visible privacy policy or terms of service pages. WHOIS data is unavailable due to NIC.AT restrictions, limiting domain registration transparency. Overall, the website is functional and professional but could improve in security and compliance areas to enhance trust and protection.

T

Two Bears' Life

twobearslife.com

42

Two Bears' Life is a niche blog and community platform dedicated to escape room enthusiasts, providing detailed reviews, travel adventures, and special food experiences primarily focused on European escape rooms. Founded in 2016, the site has established itself as a trusted source within its niche, offering curated content and guides to escape rooms in various cities. The website leverages WordPress CMS with a modern theme and common plugins, ensuring a good user experience and mobile optimization. The technical infrastructure is standard for a content-driven site, with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, though no terms of service or security policies are present. Contact is available via a web form, with no direct emails or phone numbers published. Overall, the site is professional, trustworthy, and safe for general audiences.

T

Top Escape Rooms Project

topescaperoomsproject.com

62

The Top Escape Rooms Project is a specialized platform dedicated to recognizing and awarding the best escape rooms globally by leveraging the expertise of experienced enthusiasts. It provides curated lists, interactive tools like the Room Finder, and a voter portal to engage the community. The project is positioned as an international authority within the niche escape room industry, serving both enthusiasts and escape room operators. The website content is well-structured, visually appealing, and rich in relevant information, including detailed descriptions and testimonials for top escape rooms.

H

Hermes LabSystems, s. r. o.

hermeslab.sk

57

Hermes LabSystems, s. r. o. is a Slovak-based supplier specializing in advanced laboratory solutions across analytical chemistry, molecular biology, diagnostics, and related fields. The company partners with leading global manufacturers to provide instruments, consumables, and services including metrology and accredited calibration. Their website reflects a professional B2B model targeting laboratories and research institutions, with a clear focus on quality and comprehensive product offerings. Technically, the website uses standard web technologies such as HTML5, CSS3, and jQuery, with moderate performance and good mobile optimization. However, there is a lack of privacy and cookie policies, and no visible security headers, indicating room for improvement in compliance and security posture. The site is fully accessible without WAF or blocking mechanisms, and contact information is clearly presented. Overall, the website demonstrates a solid business presence with trustworthy certifications but would benefit from enhanced security and privacy practices.

The website opvai.sk represents the official Slovak government operational program for Research and Innovation (OPII). It serves as a platform to provide information, updates, and support related to funding from European structural and investment funds. The site is managed jointly by the Ministry of Education, Science, Research and Sport of the Slovak Republic and the Ministry of Economy of the Slovak Republic, targeting research institutions, businesses, and stakeholders in innovation. The content is well-structured, regularly updated, and includes calls for proposals, news, and program documentation. Technically, the website uses a traditional web stack including HTML5, CSS, JavaScript with jQuery, and Bootstrap for responsive design. It integrates Google Fonts and Google Analytics for tracking. The site is mobile-optimized with good navigation clarity and professional design. However, some technologies like jQuery 1.11.3 are outdated, and there is no explicit CMS detected, suggesting a custom or proprietary solution. From a security perspective, the site uses HTTPS and implements a cookie consent banner, indicating basic privacy compliance. However, it lacks visible security headers, a published security policy, or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected, but improvements in security best practices are recommended. Overall, the website is a credible and trustworthy government resource with a moderate to good security posture and solid business credibility. It effectively serves its audience with relevant content and clear contact information, though enhancements in privacy and security transparency would strengthen its compliance and trustworthiness.

K

Kooperativa poisťovňa

koop.sk

60

Kooperativa poisťovňa is a well-established insurance company based in Slovakia, providing comprehensive life and property insurance services for over 30 years. The website reflects a professional and consistent brand image targeting a general audience seeking insurance products. The technical infrastructure uses modern web technologies such as Bootstrap and optimized font loading, indicating a moderate level of digital maturity. Mobile optimization and SEO practices are adequately implemented, though accessibility features are basic. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and explicit security policies. Privacy and cookie policies are not found in the provided content, indicating potential compliance gaps. Overall, the domain registration is consistent and legitimate, supporting the company's credibility. Strategic improvements in privacy compliance, security best practices, and contact transparency are recommended to enhance trust and regulatory adherence.

P

Potravinová banka Slovenska

pbs.sk

60

Potravinová banka Slovenska (PBS) is a Slovak non-profit humanitarian organization focused on collecting and distributing surplus food to those in need. The website serves as an informational platform targeting donors, volunteers, and beneficiaries within Slovakia. The organization is relatively new, founded in 2023, and operates primarily within the non-profit sector. The website content is primarily in Slovak and provides statements aligned with public health authorities and humanitarian principles. Technically, the website uses standard HTML and CSS with some jQuery components and is hosted behind Cloudflare DNS services. Mobile optimization and SEO are basic but functional. Security posture is moderate with HTTPS implied but lacking explicit security headers and formal security policies. Privacy and cookie policies are absent, which is a compliance gap. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the website is functional and trustworthy but would benefit from enhanced security and compliance features.

S

Sparkasse Osterode am Harz

sparkasse-osterode.de

70

Sparkasse Osterode am Harz operates as a regional savings bank in Germany, providing a broad range of financial services including retail banking, corporate banking, investment products, insurance, and real estate financing. The website targets both private and corporate customers, offering secure online banking and comprehensive product information. The bank maintains a strong regional presence with consistent branding and a professional digital interface. Technically, the website is built on Adobe Experience Manager CMS, featuring modern web technologies, good mobile optimization, and accessibility compliance. Security posture is solid with HTTPS enforcement, session management, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. The domain registration data aligns well with the business, indicating legitimacy and trustworthiness. Overall, the website demonstrates a mature digital presence suitable for a financial institution.

B

BAYERN CENTER s.r.o.

bayerncenter.sk

46

BAYERN CENTER s.r.o. is a professional automotive service company based in Bratislava, Slovakia, operating since 2003. It is part of the global Bosch Car Service network, offering a wide range of vehicle maintenance and repair services including inspections, diagnostics, electronics servicing, air conditioning, brake and engine services, and tire services. The company targets individual vehicle owners and fleet operators, emphasizing quality, original parts, and maintaining warranty compliance. The website reflects a well-established local business with consistent branding and clear service offerings. Technically, the website uses standard web technologies with moderate performance and good mobile optimization. However, it lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and security. The security posture is adequate but could be improved by publishing security policies and incident response contacts. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

D

Doprastav, a.s.

doprastav.sk

56

Doprastav, a.s. is a well-established Slovak construction company with over 70 years of history, specializing in infrastructure projects such as roads, highways, railways, bridges, and water management structures. The company operates primarily in Slovakia and the Czech Republic, with some international activities. Their website reflects a professional corporate presence with clear branding, certifications, and compliance information. Technically, the site uses modern web technologies including Bootstrap and JavaScript libraries, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers and incident response details are missing. Overall, the site is trustworthy and compliant with GDPR, but could improve transparency by adding direct contact information and vulnerability disclosure mechanisms.

D

dm drogerie markt

mojadm.sk

65

dm drogerie markt operates a comprehensive online drugstore platform in Slovakia, offering a wide range of cosmetic, health, and household products with convenient delivery and store pickup options. The website reflects a strong market position as a leading retail chain with a well-established brand and customer loyalty programs. Technically, the site employs modern web technologies, including advanced JavaScript frameworks and a robust consent management platform, ensuring a responsive and accessible user experience across devices. Security measures are well implemented with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts could enhance trust further. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility, suitable for its large-scale retail operations.

N

Národní síť Zdravých měst ČR

dobrapraxe.cz

46

Dobrá praxe is a Czech non-profit portal managed by the Národní síť Zdravých měst ČR, focusing on collecting and sharing good practices and inspirations related to quality of life, health, and sustainable development. The website targets municipal representatives and the general public interested in sustainable urban and regional development. It offers a database of good practices, video content, and an annual competition to promote exemplary initiatives. The domain has been registered since 2006, indicating a mature and stable presence in its niche. Technically, the site uses modern web technologies including jQuery, Google Analytics, and Google Tag Manager, hosted by WEDOS, a Czech hosting provider. The site is mobile-optimized and well-structured, providing a good user experience.

S

Sekyra Group

saratovska22.sk

62

The website www.saratovska22.sk represents a real estate development project by Sekyra Group, a leading real estate company focused on large urban developments in Slovakia and the Czech Republic. The site provides detailed information about the residential units available, project features, and local amenities, targeting young professionals, students, and investors. Technically, the site uses modern web technologies including ES modules, Google Fonts, and SVG icons, with a responsive design and basic SEO optimizations. Security posture is moderate with HTTPS enforced and a cookie consent mechanism denying ad and analytics storage by default, but lacks published privacy policies, terms of service, and incident response information. Overall, the domain registration aligns well with the business identity, indicating legitimacy and trustworthiness.

M

Mailnatives s.r.o.

maileon.cz

49

Maileon.cz is a Czech Republic-based email marketing platform operated by Mailnatives s.r.o., founded in 2016. The company offers a professional SaaS solution for managing email campaigns and transactional emails, focusing on intelligent emailing with features such as segmentation, automation, tracking, and API integration. The website presents a professional and consistent brand image targeting businesses and marketing professionals in the Czech and CEE regions. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with embedded YouTube video content. While the site is mobile optimized and accessible, some technical aspects such as the use of an outdated jQuery version and lack of visible security headers suggest room for improvement. Security posture is moderate with no critical vulnerabilities detected but lacking explicit security policies and headers. Privacy compliance is weak due to the absence of privacy and cookie policies despite GDPR badges displayed. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy and security documentation to improve compliance and user trust.

G

G SERVIS

gservis.cz

71

G SERVIS is a Czech Republic based company specializing in architectural project design for family houses and civil buildings. The company positions itself as a market leader in the Czech family house project design sector, offering a wide range of services including project design, professional services for developers, project modifications, consultations, and an online house configurator. The website is professionally designed, mobile optimized, and provides clear navigation and relevant content targeting individuals and developers interested in residential construction projects. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, SVG, and integrates Google Tag Manager, Smartsupp Chat, and CookieHub for analytics, chat support, and cookie consent management respectively. Security posture is good with HTTPS enabled and cookie consent implemented, but lacks visible security headers and explicit security policies. WHOIS data is unavailable, indicating privacy protection which slightly reduces transparency but is common for business domains. Overall, the website is trustworthy, professional, and well-positioned in its market niche.

EscapeDiem is a specialized live escape room provider based in Hamburg, Germany, offering immersive and professionally designed escape room experiences. The company holds a strong market position locally, supported by multiple awards and a top Tripadvisor ranking. Their target audience includes friends, families, and teams seeking entertainment and team-building activities. Technically, the website is built on a modern stack using UIkit and ProcessWire CMS, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and published security policies. Privacy compliance is basic with visible cookie consent and privacy policy, but no explicit data protection officer or incident response contacts. Overall, the website is professional, trustworthy, and content-rich, supporting the business's credibility and customer engagement.