Security Directory

L

Останні новини України та світу. Війни в Україні

liga.net

67

LIGA.net is a prominent Ukrainian news portal delivering up-to-date news on Ukraine and global events, with a focus on the ongoing conflict involving Russia. The website offers comprehensive news coverage, multimedia content, and live updates, targeting a broad general audience interested in current affairs. It holds a strong market position as a leading media outlet in Ukraine. Technically, the site employs modern web technologies including JavaScript, Google Analytics, Google Tag Manager, and AMP for performance and tracking. The site is mobile-optimized and SEO-friendly, with consistent branding and professional design. Security-wise, the site uses HTTPS but lacks explicit security headers and visible privacy or cookie policies, indicating room for improvement in compliance and security best practices. Overall, the site is trustworthy and professionally maintained, though it would benefit from enhanced privacy compliance and security measures.

H

HELP UKRAINE ROMANIA

helpukraineromania.org

46

HELP UKRAINE ROMANIA is a small non-profit humanitarian aid organization focused on providing medical and humanitarian assistance to Ukraine, primarily through a logistics hub in Chernivtsi. The organization collaborates with Ukrainian government bodies, local authorities, and volunteer business initiatives to coordinate aid transport and delivery. Their services include receiving aid requests, organizing logistics from Europe and worldwide, and partnering with major Ukrainian logistics companies for targeted aid distribution. The website is multilingual and targets donors, volunteers, and aid recipients. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and integrates Google Analytics and Google Tag Manager for tracking. Hosting is provided by Mirohost, and the site is mobile-optimized with good SEO practices. However, there is no detected CMS or advanced frameworks. Performance is moderate, and accessibility is basic. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers. There are no visible privacy or cookie policies, which is a compliance gap. No vulnerability disclosure or security.txt file is present. The WHOIS data is consistent with the organization's founding date and shows no suspicious patterns, supporting legitimacy. Overall, the website is trustworthy and professional but would benefit from improved privacy compliance and enhanced security practices to better protect users and build trust.

B

Агенти крові — все про донорство крові в Україні

bloodagents.com

58

Bloodagents.com is an informational website dedicated to blood donation in Ukraine, providing details about projects and initiatives related to blood donors. The site targets Ukrainian donors and organizations involved in blood donation, positioning itself as a niche platform in the non-profit sector. The website was established in 2020 and maintains a consistent branding and good content quality focused on its mission. Technically, the site is built using the Weblium website builder, employs modern web standards, and integrates Google Tag Manager for analytics. Hosting and DNS services are managed through reputable providers including NS1 and Squarespace DNS. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC, which are recommended for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is safe, professional, and serves its informational purpose well but would benefit from enhanced security and privacy practices.

U

UkraineNow

ukrainenow.org

64

UkraineNow is a non-profit initiative focused on providing humanitarian aid and tech support to Ukrainians affected by the war. It operates as a decentralized platform connecting volunteers, tech talents, private companies, and non-profits to deliver immediate assistance and sustainable impact through technology and resources. The organization is backed by Radical Philanthropies, a 501c3 IRS-approved non-profit, and has established partnerships with leading tech companies and media outlets, enhancing its credibility and reach. Technically, the website is built on the Webflow platform, leveraging modern web technologies including Google Analytics for tracking, Google reCAPTCHA for form security, and Weglot for multilingual support. The site is well-optimized for mobile devices, fast loading, and accessible, with a professional design and clear navigation. However, some security best practices such as explicit security headers and cookie consent mechanisms could be improved. From a security perspective, the site uses HTTPS and implements reCAPTCHA to protect forms, with no visible vulnerabilities or exposed sensitive data. The lack of WHOIS data due to privacy protection is typical for non-profits but slightly reduces transparency. Privacy compliance is basic with a privacy policy present, but cookie policy and terms of service are missing. Overall, UkraineNow presents a trustworthy and professional online presence with a strong humanitarian mission. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing a security policy, and adding security headers to improve security posture and user trust.

The website prytulafoundation.org is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to content. As a result, no business information, contact details, or policies are available for analysis. The domain is registered with NameCheap since March 2022 with a long expiry date, indicating a stable registration. The site uses Cloudflare for DNS and security services. Due to the access restriction, the technical infrastructure cannot be fully assessed beyond the presence of Cloudflare security mechanisms. Security posture evaluation is limited, but the use of Cloudflare indicates some baseline protection. Overall risk assessment is constrained by lack of content access, and strategic recommendations focus on enabling access for proper evaluation and ensuring transparency of policies and contact information.

D

DeConf.com

deconf.com

58

DeConf.com is a niche technology website specializing in WordPress plugins and Joomla extensions, with a strong focus on analytics insights and SEO tutorials. The site targets website owners, developers, and digital marketers seeking tools and knowledge to improve website performance and analytics. The business operates on a content and software distribution model, supported by advertising and subscription updates. Technically, the site is built on WordPress using the Genesis Framework, integrates Google Analytics and Jetpack, and employs modern web technologies with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and domain registration consistent with the business age, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and provides valuable content to its audience.

D

Deník.cz

denik.cz

61

Deník.cz is a prominent Czech news portal providing comprehensive regional, national, and international news coverage. It serves a broad audience in the Czech Republic with content spanning politics, culture, sports, and everyday life. The website is part of the Vltava Labe Media group, a significant player in the Czech media landscape. The site demonstrates a mature digital presence with structured data, social media integration, and a professional design tailored for desktop and mobile users. Technically, Deník.cz employs modern web technologies including Google Tag Manager, Gemius analytics, and content delivery via Cloudfront, ensuring moderate performance and good SEO practices. Security-wise, the site enforces HTTPS and includes standard security headers, though it lacks a publicly visible security policy or vulnerability disclosure program. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, Deník.cz presents a trustworthy and professional media outlet with a strong market position in Czech regional news.

S

Digital audio guide for your visitors | SmartGuide

smart-guide.org

67

The website www.smartguide.app is a small business site built on the Wix platform, utilizing Wix Thunderbolt framework and integrating marketing and analytics tools such as HubSpot and Facebook Ads Pixel. The site content is minimal with no visible privacy, cookie, or terms of service policies, and lacks explicit contact information. Technically, the site uses HTTPS and standard Wix hosting but does not implement advanced security headers or visible compliance mechanisms. The security posture is moderate with some best practices in cookie handling and script hardening but lacks comprehensive policies or incident response information. Overall, the site presents a basic digital presence with room for improvement in privacy compliance, security transparency, and business credibility.

A

Asociace turistických informačních center České republiky

aticcr.cz

44

Asociace turistických informačních center České republiky is a well-established non-profit association founded in 2006, dedicated to supporting and certifying tourist information centers across the Czech Republic. The website serves as a comprehensive resource for certification, education, and promotional activities targeting tourist centers and regional tourism stakeholders. The association holds recognized ISO certifications and maintains a strong presence in the Czech tourism sector. Technically, the website uses a legacy CMS (Vismo) with standard web technologies including jQuery and Google Analytics, and implements GDPR-compliant cookie consent mechanisms. Security posture is moderate with room for improvement in security headers and updating legacy libraries. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

B

BippesBrandão GmbH

bippesbrandao.de

65

BippesBrandão GmbH is a small, professional digital agency based in Offenbach, Germany, specializing in tailored digital solutions including strategy, user experience, visual design, and development. The company targets national and international clients seeking high-quality digital agency services. Their market position is supported by a portfolio of notable clients and a consistent, professional web presence. Technically, the website employs modern web standards, including HTML5, CSS3, JavaScript, and integrates multimedia content via Vimeo. The use of a headless CMS (Directus) for media management indicates a modern content infrastructure. Security-wise, the site enforces HTTPS, implements cookie consent for analytics, and anonymizes IPs in Google Analytics (though GA is currently commented out). However, security headers are not explicitly detected, and no incident response or vulnerability disclosure policies are published. Overall, the site is well-designed, user-friendly, and trustworthy, with minor improvements recommended in security headers and explicit security policies.

C

CREATIVE sites

creativeshop.sk

57

CREATIVE sites is a Slovak-based company specializing in providing a professional e-commerce platform named CREATIVE shop. The platform offers a comprehensive suite of services including an intuitive CMS, custom UX and graphic design, continuous feature development, bespoke programming, e-commerce and SEO consulting, and dedicated customer support. Positioned as one of the top e-commerce solutions in Slovakia, CREATIVE sites targets ambitious entrepreneurs and businesses seeking tailored online shop solutions with integrated marketing and automation capabilities. Technically, the website employs modern JavaScript libraries, integrates analytics and tracking tools such as Google Tag Manager and Facebook Pixel, and uses Amazon Cloudfront CDN for content delivery. Security measures include HTTPS enforcement, Google reCAPTCHA v3, CSRF tokens in forms, and Sentry for error monitoring, reflecting a mature security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The WHOIS data aligns with the website's business claims, supporting legitimacy and trustworthiness. Overall, the website demonstrates strong professionalism, technical maturity, and business credibility.

The website ebz-ak.de currently serves only a 404 error page indicating that the requested content is not found. The visible branding indicates the entity 'EBZ Akademie', but no further business description or services are presented on this page. The site is hosted on HubSpot CMS and uses HubSpot's analytics and marketing tools. The technical infrastructure is modern but minimal in content and SEO optimization. Security posture is weak due to lack of visible security headers and absence of privacy or cookie policies. No contact or incident response information is provided, limiting transparency and trust. Overall, the site is accessible but lacks substantive content, which severely limits its business credibility and user experience.

A

Sklep militarny: broni, amunicji i airsoft broni | AFG-obrona.pl

afg-obrona.pl

57

AFG-obrona.pl is an e-commerce platform specializing in military, outdoor, and airsoft equipment retail and wholesale primarily targeting Polish customers. The website offers a broad range of products including firearms, ammunition, airsoft guns, tactical gear, and outdoor supplies. It supports multiple languages and provides user account management with social login options, indicating a mature digital presence. Technically, the site uses a proprietary CMS (CREATIVE shop) with modern JavaScript libraries, CDN delivery, and tracking tools such as Google Tag Manager and Sentry for monitoring. Security posture is adequate with HTTPS and reCAPTCHA integration, but lacks visible security headers and explicit privacy and cookie policies, which are critical for compliance and user trust. The WHOIS data is unavailable from the official .pl registry, which limits domain trust assessment and raises some concerns about transparency. Overall, the site is functional and professional but would benefit from enhanced privacy disclosures and security hardening.

A

AFG-obrana.cz - army shop. Prodej zbraní a střeliva.

afg-obrana.cz

58

AFG-obrana.cz is an e-commerce retail and wholesale business specializing in firearms, ammunition, airsoft equipment, archery, and tactical gear primarily serving the Czech Republic market. The website presents a professional and well-structured platform with clear navigation and multiple product categories targeting enthusiasts and professionals in defense and outdoor sectors. The business model focuses on both retail and wholesale customers, leveraging multilingual support and social login capabilities to enhance user experience. Technically, the website employs a modern technology stack including JavaScript frameworks, Google Tag Manager, Facebook SDK, Google reCAPTCHA, and Sentry for error tracking. It is built on the CREATIVE shop CMS platform and demonstrates good mobile optimization and SEO practices. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, with active error monitoring via Sentry. However, it lacks explicit security headers and a publicly accessible privacy policy, which are areas for improvement. The WHOIS data is not publicly available, likely due to privacy protection, which is common for businesses dealing with sensitive products like firearms. Overall, the website is legitimate and professionally maintained but would benefit from enhanced transparency and security best practices to improve trust and compliance. Strategic recommendations include publishing comprehensive privacy and security policies, implementing security headers, and establishing a vulnerability disclosure process.

A

AFG.eu

afg-defense.eu

65

AFG.eu operates as a specialized e-commerce retailer focused on military, hunting, airsoft, and outdoor equipment. The company targets enthusiasts and professionals seeking weapons, ammunition, tactical gear, and related accessories primarily in the European market. The website demonstrates a solid market position with multiple regional domains supporting localized audiences. Technically, the site is built on the CREATIVE shop CMS platform, leveraging modern JavaScript libraries, Google reCAPTCHA for bot protection, and Sentry for error monitoring. The presence of Google Tag Manager and Facebook SDK indicates active marketing and analytics efforts. Security posture is generally good with HTTPS enforced and CSRF protections in place, though the absence of explicit privacy and cookie policies and security.txt files suggests room for compliance improvement. Overall, the site is professional, accessible, and trustworthy with moderate risk due to limited WHOIS transparency and incomplete privacy disclosures.

M

Magistrát města Hradec Králové

mmhk.cz

41

The website www.hradeckralove.org is the official municipal portal for the city of Hradec Králové in the Czech Republic. It serves as a comprehensive information hub for residents, visitors, and businesses, providing access to city news, public services, cultural events, social programs, and administrative resources. The site is well-positioned as the authoritative source for local government information and community engagement. Technically, the site employs a custom CMS platform (VismoWeb), uses modern web technologies including HTML5, CSS3, and JavaScript, and integrates Google services such as Analytics, Tag Manager, reCAPTCHA, and Translate to enhance functionality and user experience. The website is mobile-optimized and accessible, with good SEO practices and clear navigation. Security-wise, the site enforces HTTPS, implements standard security headers, and uses reCAPTCHA to protect forms, indicating a solid security posture. However, the absence of a visible security policy or vulnerability disclosure page suggests room for improvement in transparency and incident response readiness. The WHOIS data is unavailable due to a malformed query response, limiting domain registration trust assessment, but the official nature of the site and consistent branding mitigate concerns. Overall, the site is professional, trustworthy, and serves its public function effectively.

L

Landeshauptstadt Kiel

kiel.de

62

The website kiel.de serves as the official digital portal for the Landeshauptstadt Kiel, providing extensive information and services related to the city’s governance, culture, health, environment, education, and public administration. It targets residents, visitors, and stakeholders interested in the city’s offerings and developments. The site is well-structured with comprehensive content in German, reflecting a mature and professional public sector digital presence. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and Matomo analytics for visitor tracking. The CMS identified is PANSITE (TM), indicating a specialized content management system for municipal websites. The site is mobile optimized and accessible, with good SEO practices evident from meta tags and Open Graph data. Security posture is adequate with HTTPS enabled and deferred script loading, but lacks visible security headers and explicit security policies or incident response contacts. Privacy compliance is limited due to absence of explicit privacy and cookie policies or consent mechanisms. WHOIS data aligns well with the official city identity, confirming legitimacy and trustworthiness. Overall, the site is a reliable and authoritative source for city-related information but would benefit from enhanced privacy and security disclosures.

I

Investitionsbank Schleswig-Holstein

ib-sh.de

67

The Investitionsbank Schleswig-Holstein (IB.SH) is a government-affiliated promotional bank serving the Schleswig-Holstein region in Germany. It provides advisory, funding, and financing services to a broad audience including private individuals, companies, municipalities, and public institutions. The bank holds a strong market position, evidenced by its AAA credit rating from Fitch Ratings, and emphasizes sustainability and digital transparency in its operations. The website reflects a professional and comprehensive digital presence with multiple customer-focused services and extensive content in German, targeting diverse customer groups. Technically, the site is built on TYPO3 CMS, with good mobile optimization and accessibility features, and employs modern web technologies. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are not publicly disclosed. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

E

Evangelisch-Lutherische Kirche in Norddeutschland

nordkirche.de

61

The Evangelisch-Lutherische Kirche in Norddeutschland (Nordkirche) operates as a large non-profit religious organization serving the regions of Hamburg, Schleswig-Holstein, and Mecklenburg-Vorpommern in Germany. The website provides comprehensive information about their religious services, community engagement, pastoral care, and digital initiatives. It targets Christians and residents in Northern Germany, positioning itself as a leading regional Protestant church organization. The content is well-structured, professionally designed, and consistent with the organization's mission and audience. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including JavaScript and CSS, with good mobile optimization and accessibility features. SEO practices are well implemented, including meta tags, Open Graph, and JSON-LD structured data. The site uses Piwik (Matomo) for analytics, indicating moderate user tracking with basic privacy compliance. No blocking or WAF challenges were detected, and the site is fully accessible. From a security perspective, HTTPS is implied though explicit security headers are not detected in the provided data. No exposed sensitive data or vulnerabilities were found in the HTML content. However, the site lacks explicit security policies and incident response information. Privacy compliance is good with a detailed privacy policy but lacks a cookie consent mechanism. Contact information is clearly provided, enhancing trust and credibility. Overall, the website demonstrates a solid digital presence with good content quality, technical implementation, and business credibility. Security posture is adequate but could be improved with enhanced headers and documented policies. Privacy compliance is mostly met but would benefit from explicit cookie consent. The domain registration data aligns well with the organization's identity, supporting legitimacy and trustworthiness.

W

Waldemar Behn GmbH

behn.de

47

Waldemar Behn GmbH is a well-established beverage wholesaler and retailer based in Schleswig-Holstein, Germany, with a history dating back to 1892. The company offers a wide assortment of beverages including spirits and operates an online shop alongside employer branding initiatives. The website is professionally designed, mobile-optimized, and provides clear navigation with multilingual support (German and English). The digital infrastructure is built on Silverstripe CMS with Matomo analytics for privacy-conscious visitor tracking. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and published security policies. Overall, the site is trustworthy and compliant with GDPR, though contact information is not directly visible in the provided content.

F

FiftyFifty kreativní agentura s.r.o.

fifty-50.cz

58

FiftyFifty kreativní agentura s.r.o. is a Czech-based creative marketing agency specializing in design, communication, and strategic marketing services. Established in 2012, the company has positioned itself as a leading regional marketing agency in the Královéhradecký region, offering a comprehensive portfolio including branding, online marketing, and audio/video production. The website reflects a professional and consistent brand image supported by multiple industry awards and recognitions. Technically, the website employs modern web technologies such as JavaScript with StimulusJS controllers and deferred script loading to optimize performance. The presence of Google Tag Manager indicates a mature approach to analytics and marketing tracking. Mobile optimization and SEO practices are well implemented, although accessibility features are basic. Hosting is managed by REG-ACTIVE24, a Czech registrar, consistent with the business location. From a security perspective, the site uses HTTPS and implements a GDPR-compliant cookie consent mechanism. However, no explicit security headers were detected, and no incident response or security policy information is provided. No vulnerabilities or exposed sensitive data were found in the analysis. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website demonstrates a solid business credibility and privacy compliance posture with room for improvement in security best practices. The content is safe for general audiences, and the site is fully accessible without WAF or blocking mechanisms.

T

Tomáš Kořínek

tomaskorinek.cz

54

Tomáš Kořínek is a seasoned web developer and consultant based in the Czech Republic, offering custom web development, website improvements, and consulting services with over 19 years of experience. The website showcases a professional portfolio of over 170 projects, emphasizing personalized service and technical expertise. The business operates as a small entity focused on delivering tailored web solutions to clients seeking quality and reliability. Technically, the website is well-built using modern web standards, responsive design, and optimized images, hosted by a reputable Czech provider. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and published policies. Overall, the site is trustworthy, professional, and user-friendly, with clear contact channels and a transparent business presence.

Indexhibit.org is a niche technology website offering an open source portfolio content management system (CMS) targeted at artists, photographers, and designers. The site provides access to the CMS software via GitHub and community support through a forum. The business model centers on providing a lightweight, customizable portfolio CMS solution for individual users and small creative professionals. The website has been active since 2006, indicating a stable presence in its niche market. Technically, the website uses standard HTML5, CSS3, and JavaScript with a custom CMS named Indexhibit. Hosting is provided by DreamHost, a common provider for small to medium websites. The site shows basic mobile optimization and SEO practices but lacks advanced technical features or frameworks. No analytics or advertising scripts were detected, indicating a minimalistic approach to tracking and monetization. From a security perspective, the domain is registered with eNom, LLC since 2006 with clientTransferProhibited status, which is a positive trust indicator. However, DNSSEC is not enabled, and no security headers were detected in the provided data. There is no visible privacy policy, cookie policy, or terms of service, which are important for compliance and user trust. No incident response or vulnerability disclosure information is published. The site does not appear to be behind a WAF or security challenge, and no vulnerabilities or exposed sensitive data were found. Overall, the website is functional and trustworthy for its niche but lacks comprehensive privacy and security policies. Strategic improvements in security headers, policy publication, and DNSSEC implementation would enhance its security posture and compliance. The site’s minimal tracking and advertising footprint support a privacy-respecting user experience.

B

Bürocratik

burocratik.com

65

Bürocratik is a digital branding and design agency presenting itself as a transdisciplinary practice with global reach and critical acclaim. The website showcases a professional and modern digital presence built on Nuxt.js and Vue.js frameworks, optimized for performance and mobile responsiveness. Despite the high-quality content and design, the absence of WHOIS domain registration data raises concerns about the domain's legitimacy and registration status. Security posture is generally good with HTTPS enabled, but lacks explicit security headers and formal privacy or cookie policies. The site uses analytics tools such as Umami and Google Analytics without visible consent mechanisms, indicating potential privacy compliance gaps. Overall, the business appears credible and professional, but domain registration inconsistencies and missing compliance documentation suggest areas for improvement.

M

MultiSport Benefit, s.r.o.

multisport.cz

58

MultiSport Benefit, s.r.o. operates a well-established employee benefit program in the Czech Republic, providing access to over 1900 sports and relaxation facilities via the MultiSport card. The company targets employers, employees, students, and partners, positioning itself as a leading provider in the corporate wellness sector. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. Technically, the site is built on WordPress, leveraging modern analytics and marketing tools, hosted on Azure DNS infrastructure, and optimized for mobile and SEO. Security posture is strong with HTTPS, cookie consent, and no visible vulnerabilities, though formal security policies and incident response details are absent. Overall, the domain registration data aligns with the business history, supporting legitimacy and trustworthiness.

Obec Bedřichov is the official municipal government website serving the village of Bedřichov in the Czech Republic. It provides comprehensive local government information, including public notices, official documents, community events, and tourism resources. The site targets local residents and tourists, offering services such as waste management, local fee payments, and contact information for municipal offices. The website is built on the Public4u CMS platform and uses common web technologies like jQuery and JavaScript. It features a clear navigation structure and is mobile optimized, providing a good user experience. From a security perspective, the website uses HTTPS and implements GDPR-compliant privacy policies and cookie consent mechanisms. However, no explicit security headers were detected in the provided data, and no incident response or vulnerability disclosure information is available. The absence of WHOIS registration data is a notable gap, reducing the ability to fully verify domain legitimacy. Despite this, the presence of official contact details and consistent branding supports the site's authenticity. Overall, the website demonstrates a moderate to good level of technical maturity and security posture, with room for improvement in security headers, incident response transparency, and SEO optimization. The site is safe for general audiences, with no adult or questionable content detected. Strategic recommendations include enhancing security headers, updating libraries, and adding incident response contacts to strengthen trust and compliance.

The website www.bedrichov.cz serves as a regional tourism portal for the municipality of Bedřichov in the Czech Republic. It provides comprehensive information on local tourism activities, accommodation, events, and cultural highlights, targeting visitors and tourists interested in the Jizerské hory region. The site is supported by local government and regional tourism partners, reflecting a small but focused business model centered on hospitality and community engagement. The presence of multiple partner links and official municipal references enhances its credibility within the local tourism ecosystem. Technically, the site is built on the Public4u CMS platform, utilizing jQuery and JavaScript libraries to deliver a responsive and content-rich experience. The design is professional with good navigation and mobile optimization, although accessibility features are basic. Security posture is moderate; HTTPS is implied but no explicit security headers were detected in the provided data. Privacy compliance is limited, with no dedicated privacy or terms of service pages found, though a cookie consent mechanism is present. The absence of WHOIS data limits domain trust verification, but the website content and partner ecosystem suggest legitimacy. Overall, the site is a functional and informative regional tourism resource with room for improvement in security and privacy transparency.

A

as4u.cz, s.r.o.

muzeumharmonik.cz

61

Muzeum harmonik is a Czech cultural museum website dedicated to the exhibition and education about harmonicas and accordions. The site is professionally designed with a clear focus on showcasing historical musical instruments and providing visitor information. The target audience includes general visitors interested in musical heritage and cultural artifacts. The business model is non-commercial, focusing on cultural preservation and education. Technically, the website uses a custom CMS called Public4u and includes JavaScript libraries such as jQuery and jQuery UI. The site is moderately optimized for mobile devices and has a good user experience with clear navigation. Security posture is moderate; HTTPS is used but no security headers were detected in the HTML source. Privacy and cookie policies are absent, which is a compliance gap. The WHOIS data for the domain is missing, which reduces transparency and trustworthiness. Overall, the website is functional and professional but would benefit from improved security practices and privacy compliance.

M

Městský úřad Šumperk

sumperk.cz

63

The website www.sumperk.cz serves as the official municipal portal for the city of Šumperk in the Czech Republic. It provides comprehensive information including municipal news, event calendars, public notices, and citizen services. The site targets residents and visitors, offering easy access to government contacts, forms, and local updates. The business model is that of a government service portal, positioning itself as a trusted source for local governance and community engagement. The site is well-branded and consistent with municipal identity. Technically, the website is built on the Public4u CMS platform and utilizes common web technologies such as jQuery and JavaScript. It is served over HTTPS, ensuring secure communication. The site demonstrates good mobile optimization and accessibility features, with a moderate performance profile. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses secure form submissions. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected in the content. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR requirements. No incident response or vulnerability disclosure information is available, which could be enhanced to improve security posture. Overall, the website is a reliable and professional municipal portal with good content quality and user experience. The absence of WHOIS data for the domain is a concern that slightly impacts trustworthiness, suggesting the need for external verification of domain registration. Strategic recommendations include implementing additional security headers, publishing security policies, and verifying domain registration details to strengthen legitimacy and trust.

M

Městský úřad Moravská Třebová

moravskatrebova.cz

57

Moravská Třebová's official municipal website serves as a comprehensive portal for residents, tourists, and citizens, providing timely news, event calendars, public notices, and essential contact information. The site is positioned as a local government authority platform, focusing on public service delivery and community engagement. It offers multilingual support with Czech as the primary language and English and German alternatives, enhancing accessibility for international visitors. The business model is centered on government service provision without commercial intent. Technically, the website is built on the Public4u CMS platform, utilizing jQuery and JavaScript libraries for interactive features. While the site employs HTTPS and includes a cookie consent mechanism, it lacks advanced security headers and comprehensive privacy documentation. Performance and mobile optimization are moderate, indicating room for technical enhancements to improve user experience and accessibility. From a security perspective, the site demonstrates basic best practices such as HTTPS and cookie consent but misses critical security headers and explicit privacy policies. No vulnerabilities or malicious content were detected, and the site maintains a trustworthy presence with official contact details and social media links. The absence of WHOIS data is typical for Czech domains and does not detract from the site's legitimacy. Overall, the website presents a solid foundation for municipal digital presence but would benefit from enhanced security measures, privacy transparency, and technical modernization to align with best practices and regulatory compliance.

Cestovatelský fotodeník is a Czech travel photo diary platform focused on historical landmarks and monuments, primarily serving travel enthusiasts and cultural tourists interested in Czech heritage. The website is operated by as4u.cz, s.r.o., a small company specializing in publishing and editorial systems. The platform offers user registration, photo uploads, and competitions, supported by an interactive map and categorized listings of monuments. Technically, the site uses the Public4u CMS, jQuery libraries, and Leaflet.js for mapping, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent, but lacks explicit security headers and a published privacy policy, which are areas for improvement. WHOIS data is unavailable, likely due to privacy protection, which reduces transparency and trustworthiness. Overall, the site is functional, professionally presented, and safe for general audiences, but could enhance compliance and security practices.

F

Freie und Hansestadt Hamburg

hamburg.de

63

Hamburg.de is the official city portal of the Free and Hanseatic City of Hamburg, Germany. It serves as a comprehensive information and service platform for residents and visitors, providing access to public services, news, events, and city-related information. The website is positioned as a trusted government resource with a clear focus on serving the local community and stakeholders. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and accessibility tools such as the eyeAble plugin, alongside analytics via eTracker. The hosting is managed through mcs.de, with secure HTTPS connections ensuring data privacy during user interactions. Security posture is solid with no evident vulnerabilities or exposed sensitive data, although the absence of explicit security policies and vulnerability disclosure mechanisms suggests room for improvement. Privacy compliance is moderate due to the lack of visible privacy and cookie policies in the provided content. Overall, the site demonstrates a high level of business credibility and technical maturity appropriate for a government portal.

E

Element Studio s.r.o.

elementstudio.cz

46

Element Studio s.r.o. is a Czech-based digital agency specializing in web development, marketing, graphic design, and multimedia production. The company targets businesses seeking to establish or enhance their online presence with custom websites, e-shops, and creative marketing solutions. Their market position is that of a small, professional agency with a portfolio of diverse client projects and active social media engagement. Technically, the website is built on modern web standards, likely using OctoberCMS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and secure forms, though lacking some advanced security headers and cookie consent mechanisms. The absence of WHOIS domain registration data is a notable gap, impacting trust assessment. Overall, the website is professional, content-rich, and trustworthy, but could improve transparency and compliance aspects.

Wetter.de is a prominent German weather information website providing current weather forecasts, radar maps, weather news, and travel weather information primarily targeting the German-speaking audience. The site leverages modern web technologies such as Next.js and React to deliver a responsive and content-rich user experience. It integrates advertising and tracking services including Outbrain and Google Tag Manager to monetize and analyze user interactions. However, the site lacks visible privacy and cookie policies, which is a compliance gap in the context of GDPR. Security posture is moderate with no explicit security headers detected and no visible incident response or vulnerability disclosure information. Overall, the website is professional and content-rich but would benefit from enhanced privacy compliance and security transparency.

O

Operátor ICT, a. s.

operatorict.cz

58

Operátor ICT, a. s. is a government-affiliated technology operator focused on providing information and communication technology services for the City of Prague. The website presents a professional and consistent brand image targeting government entities and citizens of Prague, emphasizing technological advancement for the city. The business is medium-sized, founded in 2015, and operates primarily in the technology and government sectors. The website is built using Framer CMS and leverages modern web fonts and JavaScript for presentation. Technical infrastructure appears moderate in performance with good mobile optimization and basic accessibility features. Security posture is moderate but lacks explicit security headers and published security policies. Privacy compliance is low due to absence of privacy and cookie policies or consent mechanisms. No contact information or incident response details are found in the provided content. WHOIS data is consistent and legitimate, registered with a Czech registrar matching the business profile. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy disclosures.

The website 'InWIS - Interaktive Standortanalyse (ISA)' offers interactive location analysis services including residential area evaluation, target group analysis, interactive maps, comparables, and ratings. The business appears to target users interested in real estate and location data analysis, providing free testing options. The site uses modern JavaScript technologies such as Mapbox GL JS and Highcharts for data visualization, indicating a moderate level of technical maturity. However, the website content is minimal with no visible contact details, privacy or cookie policies, or terms of service, which limits user trust and compliance. Security posture is basic with no detected security headers or incident response information, and no analytics or tracking scripts were found. Overall, the site is functional but lacks comprehensive business and security information, resulting in a moderate risk profile.

B

BaseLinker Sp. z o.o.

base.com

69

Base.com, operated by BaseLinker Sp. z o.o., is a mature and established e-commerce integration platform founded in 1994 and headquartered in Wrocław, Poland. The company offers a SaaS solution that enables businesses to manage sales across multiple marketplaces such as Amazon, eBay, Etsy, and Shopify, with over 1700 integrations. The platform targets e-commerce sellers seeking streamlined order processing and bulk listing capabilities. The website reflects a professional and consistent brand image with good content quality and clear business focus. Technically, the site employs modern tracking and consent management tools including Google Tag Manager, Hotjar, and Cookiebot, and is hosted with Cloudflare DNS services, ensuring reliable performance and security. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers and explicit security policies are not evident. Privacy compliance is strong, supported by a comprehensive privacy policy and cookie consent mechanism. Overall, the website and domain registration data align well, indicating high legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding a vulnerability disclosure policy to further strengthen security and compliance.

F

FAVI.cz - Vyhledávač nábytku a dekorací

favi.cz

64

FAVI.cz is a Czech Republic-based online furniture and decoration product search engine aggregating over 650 e-shops and physical stores. The website offers a broad range of product categories including furniture, textiles, lighting, and home renovation items, targeting consumers seeking home decor and furniture solutions. Established in 2012, the platform appears to be a significant player in the local retail and e-commerce market, providing users with comprehensive product listings and discount offers. Technically, the website employs modern web technologies including asynchronous JavaScript, web fonts, and Cloudflare CDN services, ensuring moderate performance and good mobile optimization. Security-wise, the site enforces HTTPS and leverages Cloudflare for DNS and CDN, but lacks explicit security headers and publicly available security policies. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security transparency.

M

Ministerstvo školství, mládeže a tělovýchovy

redop.cz

72

The website redop.cz serves as the official Czech government information system for the Registry of Associate Professors, Professors, and Extraordinary Professors at higher education institutions. It is managed by the Ministry of Education, Youth and Sports of the Czech Republic and provides a centralized platform for managing academic personnel data, supporting accreditation processes, and statistical reporting. The site targets academic institutions, government bodies, and educational providers, offering essential services for compliance with Czech higher education laws. Technically, the site is built on a legacy ASP.NET WebForms platform using DevExpress controls, hosted likely by Active24. The infrastructure is functional but shows signs of aging with basic mobile optimization and limited modern web practices. Performance is moderate, and SEO and accessibility features are basic. The site does not employ common modern tracking or advertising technologies, reflecting its government service nature. From a security perspective, the site uses HTTPS and standard ASP.NET security features but lacks modern HTTP security headers and cookie consent mechanisms. Password inputs are properly masked, and no sensitive data is exposed in the HTML. The privacy policy is comprehensive and GDPR compliant, with a named Data Protection Officer and clear data handling practices. No WAF or blocking mechanisms were detected, and the WHOIS data aligns well with the official nature of the site. Overall, the site is trustworthy and professionally maintained for its purpose but would benefit from modernization of its technical stack and enhanced security headers and privacy features to improve user trust and compliance with evolving standards.

N

Národní pedagogický institut České republiky

vedemeskolu.cz

65

The website vedemeskolu.npi.cz represents the Národní pedagogický institut České republiky, a government-affiliated educational institute focused on developing leadership competencies for school directors and educational leaders in the Czech Republic. The site offers comprehensive educational resources, courses, seminars, and inspirational content to support school leadership and pedagogical development. It maintains a professional and consistent brand presence with clear contact information and social media engagement. Technically, the website is built on the Solidpixels CMS platform, leveraging modern web technologies including JavaScript, Google Tag Manager, and embedded multimedia content. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience with moderate performance. Security is well-managed with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers could be improved. From a security and compliance perspective, the site demonstrates good privacy practices with a comprehensive GDPR-compliant privacy policy and cookie policy. However, no explicit security policy or incident response contacts are published. The absence of WHOIS data limits domain registration transparency but does not detract significantly from the site's legitimacy given its government affiliation and professional content. Overall, vedemeskolu.npi.cz is a trustworthy, well-maintained educational resource with a strong focus on leadership development in Czech schools. Strategic recommendations include enhancing security headers, publishing incident response information, and improving WHOIS transparency where possible.

C

Contentflow Livestreaming

contentflow.net

58

Contentflow Livestreaming is a small technology company specializing in live streaming software and content distribution services. The company offers professional live streaming solutions aimed at enhancing reach and engagement for content creators and businesses. The website reflects a focused business model centered on SaaS for live streaming, with a consistent brand presence and good content quality. Technically, the site is built on WordPress with modern integrations including Google Analytics, HubSpot, and video embedding platforms like YouTube and Vimeo. The infrastructure is stable, hosted under a reputable registrar with DNS managed via Google Domains. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some advanced security headers are missing. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience.

C

Chetty.ai

chetty.ai

59

Chetty.ai is a small technology startup founded in 2023 that offers an AI chatbot platform enabling businesses and website owners to automate communication. Their services include customizable AI web chatbots, design and script customization, knowledge base integration, Whatsapp live chat integration, and embedding ChatGPT into websites. The company positions itself as a niche provider in the AI chatbot automation market. Technically, the website is built on the Bubble.io platform, using modern JavaScript libraries and Google Fonts, with moderate performance and basic mobile optimization. Security posture is basic with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is weak with no visible privacy or cookie policies and no contact information. Overall, the website is functional but lacks comprehensive legal and security disclosures, which impacts trust and compliance scores.

Wikimedia Česká republika is a non-profit organization dedicated to supporting Wikimedia projects such as Wikipedia, Wikimedia Commons, and Wikidata within the Czech Republic. It focuses on community building, educational programs, partnerships with cultural and public institutions, and advocacy for free knowledge. The organization operates as the official Czech chapter of the Wikimedia Foundation, providing a trusted and recognized presence in the region. The website reflects this mission with comprehensive program descriptions, event calendars, and community news, targeting volunteers, educators, and cultural partners. Technically, the website is built on WordPress, leveraging modern JavaScript libraries like Leaflet.js for maps and Flickity for carousels. It integrates Google Analytics and Tag Manager for analytics and uses a cookie consent management platform to comply with privacy regulations. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. From a security perspective, the site enforces HTTPS and uses a consent mechanism for cookies, but lacks explicit security headers such as Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable, which is common for .cz domains, but the website's content and branding strongly indicate legitimacy and trustworthiness. Overall, the site demonstrates a mature digital presence with strong alignment to its non-profit mission, good technical implementation, and a solid security posture. Strategic improvements could include enhancing security headers and expanding transparency around privacy and incident response policies.

Ptejte se knihovny is a Czech Republic based cooperative virtual reference service coordinated by the National Library of the Czech Republic. It provides a platform for users to submit questions to participating libraries and access an archive of answered queries. The service is non-profit and supported by the Ministry of Culture, targeting library users and the general public interested in library information services. The website is built on the Plone CMS platform and integrates third-party tools such as Zoho SalesIQ for chat and Google Analytics for visitor tracking. It features a cookie consent mechanism compliant with GDPR and provides a comprehensive privacy policy in Czech. Security posture is generally good with HTTPS enforced and CSRF protections in place, though some security headers are missing. No WHOIS data is available due to privacy protection, but the affiliation with a national institution supports legitimacy. Overall, the website is professional, accessible, and trustworthy with a focus on educational content and library services.

A

as4u.cz, s.r.o.

as4u.cz

69

as4u.cz, s.r.o. is a Czech software company specializing in modular content management systems and business applications tailored for municipalities, government bodies, companies, and cultural institutions. With over 20 years of market presence, the company offers products such as the Public4u editorial system, Shop4u e-commerce platform, and various intranet and reservation systems. Their solutions emphasize compliance with legislative requirements, user-friendliness, and scalability, serving a broad client base including cities, towns, and organizations. The website reflects a mature business with a solid client portfolio and a focus on digital transformation in public and private sectors. Technically, the website is built on a proprietary CMS named Public4u, utilizing jQuery and JavaScript libraries. The site is mobile-optimized and structured with good SEO practices. While performance is moderate, the site is accessible and well-organized. Security-wise, HTTPS is enforced, and cookie consent mechanisms are implemented, but there is room for improvement in security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration transparency, which slightly impacts trustworthiness. However, the extensive references to reputable municipal and cultural clients, clear contact information, and comprehensive privacy and cookie policies support the company's legitimacy. Overall, the site demonstrates a professional digital presence aligned with its business objectives. Strategic recommendations include enhancing security headers, publishing detailed security and incident response policies, and verifying domain registration details to improve trust and compliance.

M

Magistrát města Hradec Králové

hradeckralove.org

52

The website www.hradeckralove.org serves as the official digital presence of the city of Hradec Králové, Czech Republic. It provides comprehensive information and services related to municipal governance, public services, cultural events, social programs, and citizen engagement. The site targets residents, visitors, and local businesses, offering a broad range of resources including news, event calendars, contact details, and online forms. The business model is typical for a government entity, focusing on transparency, accessibility, and public service delivery. The site enjoys a strong market position as the authoritative source for city-related information.

C

CzechTourism

czechconvention.com

63

The Czech Convention Bureau, operated by CzechTourism, is a national entity supporting event organizers with free contacts, planning assistance, and insider tips for meetings in Czechia. The website positions itself as a key resource for the hospitality and event planning sector within the country, targeting professional meeting planners and event organizers. The business model focuses on facilitation and support rather than direct commercial services, indicating a government or quasi-governmental role in tourism promotion. Technically, the website employs modern JavaScript frameworks such as Vue.js and uses Matomo analytics, reflecting a moderate level of digital maturity with a focus on privacy-conscious tracking. The site is mobile-optimized and SEO-friendly, though accessibility features appear basic. Performance is moderate, with a custom CMS backend. Security posture is adequate but could be improved. HTTPS is used, but no explicit security headers were detected in the provided data. No privacy or cookie policies were found, which is a compliance gap. The WHOIS data is missing or inaccessible, which raises concerns about domain registration legitimacy despite the professional appearance of the site. Overall, the website is functional and professional but requires improvements in privacy compliance, security headers, and domain registration transparency to enhance trustworthiness and compliance with best practices.

Geopark Český ráj is a nonprofit organization managing the UNESCO Global Geopark Český ráj, located in the Czech Republic. The website provides extensive educational and tourism-related content about the geological, natural, and cultural heritage of the region. It targets tourists, researchers, educators, and local communities interested in sustainable tourism and conservation. The organization is uniquely positioned as the only UNESCO Global Geopark in the Czech Republic, offering a rich portfolio of services including educational programs, research facilitation, and tourism promotion. Technically, the website uses the Public4u CMS platform with jQuery and Mapy.cz API for interactive maps. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and good content quality. However, it lacks advanced SEO and accessibility features. Security posture is moderate with no visible security headers or incident response policies, and the SSL configuration status is unknown. Privacy compliance is weak due to the absence of privacy and cookie policies. The WHOIS data is unavailable, which limits domain legitimacy verification and reduces trustworthiness from a registration perspective. Despite this, the website content and official UNESCO affiliation strongly indicate a legitimate and professional operation. No adult or explicit content is present, making the site safe for general audiences. Overall, the website is functional and informative but would benefit from improved security practices, privacy compliance, and transparency regarding domain registration and incident response.

K

Kladské pomezí o.p.s.

festivalzazitku.cz

51

Festival zážitků is a cultural tourism initiative focused on promoting the Czech-Polish border region through themed events and experiences. The project is managed by Kladské pomezí o.p.s., a small non-profit organization dedicated to regional cultural heritage and tourism. The website serves as an information portal for visitors, offering event details, a mobile app, and interactive content to enhance tourist engagement. The site is multilingual, supporting Czech, Polish, German, and English languages, reflecting its cross-border nature. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Hosting is provided by REG-GRANSY, a known registrar and hosting provider, with a domain age consistent with the project's timeline. Security posture is solid with HTTPS enforced and a cookie consent mechanism in place, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with a clear privacy policy and cookie settings available to users. However, no explicit terms of service or security incident contact information is provided. Overall, the website is professional, trustworthy, and well-positioned to serve its target audience of cultural tourists. Strategic improvements could focus on enhancing security headers, publishing a security policy, and providing clearer contact information for security or business inquiries.

M

Meteocentrum.cz

meteocentrum.cz

46

Meteocentrum.cz is a professional weather forecasting service primarily serving the Czech Republic and European markets. The website offers detailed weather forecasts, radar maps, meteorological articles, and additional services such as weather APIs and mobile applications. It positions itself as a trusted source with over 15 years of experience and professional meteorologists. The business model relies on advertising revenue supplemented by paid services and products. Technically, the site uses a modern JavaScript stack with integrations for analytics, advertising, and consent management, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and GDPR compliance, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the professional presentation and content quality support trustworthiness. Overall, Meteocentrum.cz is a credible and well-maintained weather information platform with room for improvement in transparency and security documentation.