Security Directory

A

Associazione Aeronautica

assoaeronautica.it

50

Associazione Aeronautica is an Italian aeronautical association focused on serving professionals and stakeholders in the aviation and transportation sector. The website is built on the Wix platform, indicating a moderate level of digital maturity with basic content and design. The technical infrastructure relies on Wix's Thunderbolt framework and standard web technologies. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and policies. Privacy compliance is minimal, with no visible privacy or cookie policies. Overall, the site presents a basic but functional online presence for the association.

R

Rieker

rieker-karriere.com

59

The website rieker-karriere.com/en/jobs/iframe serves as a job listing portal for Rieker, a company specializing in footwear manufacturing and retail. The site lists various job opportunities including apprenticeships and professional roles in marketing, IT, design, and management. The business appears to target job seekers interested in the footwear industry, supporting career development within a medium-sized retail and manufacturing company. The website content is well-structured and relevant, though limited to job postings without additional corporate or policy information. Technically, the site uses basic HTML5 and CSS3 with no detected advanced frameworks or CMS. The performance and mobile optimization are moderate to good, but accessibility and SEO features are basic. There is no evidence of analytics or tracking technologies, and no forms or data collection mechanisms are present on the analyzed page. From a security perspective, the site lacks visible security headers and SSL configuration details, and no privacy or cookie policies are found, indicating potential compliance gaps. The WHOIS data is missing or the domain is not registered, which raises concerns about domain legitimacy despite the professional content. Overall, the security posture is weak, and privacy compliance is poor. The overall risk assessment suggests the website is functional and business-relevant but requires improvements in domain registration transparency, security best practices, and privacy compliance to enhance trust and reduce risk.

The website www.zamg.ac.at represents the former Zentralanstalt für Meteorologie und Geodynamik (ZAMG), a governmental meteorological and geodynamic authority in Austria. The site itself is a simple placeholder informing visitors that the original ZAMG website has been discontinued and that services have migrated to the successor organization GeoSphere Austria. The content is minimal, with no interactive elements, policies, or contact information provided. The website targets the general public and stakeholders interested in meteorological and geodynamic data and services. The business model is governmental service provision, with a medium-sized organizational footprint typical for national meteorological agencies. Technically, the site is very basic, built with simple HTML and CSS, lacking modern frameworks, CMS, or advanced hosting indicators. There is no evidence of analytics, tracking, or advertising technologies. The site is accessible without WAF or security challenges but lacks security headers and HTTPS status is unknown. Mobile optimization and accessibility are basic, and SEO features are minimal. From a security perspective, the site shows limited maturity. No privacy or cookie policies are present, no incident response or security contact information is provided, and no security best practices such as headers or secure forms are observed. The WHOIS data is unavailable due to NIC.AT restrictions, limiting transparency but not necessarily indicating malicious intent. The domain appears legitimate given its governmental nature and the redirection to a successor official site. Overall, the site scores low to moderate on AI evaluation due to minimal content, lack of security and privacy features, and absence of business contact details. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, publishing security and incident response information, and improving technical and security configurations to enhance trust and compliance.

The Belgian Science Policy Office (BELSPO) operates as the Federal Public Planning Service Science Policy, providing coordination and support for scientific research and federal scientific institutions in Belgium. The website serves as an official government portal offering multilingual content in Dutch, French, and English, targeting government stakeholders, researchers, and the public interested in science policy. Key services include support for federal museums, participation in European and international scientific organizations, research funding, and management of the Belnet telematics network. Technically, the website uses basic HTML, CSS, and JavaScript without advanced frameworks or CMS detected. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. Security headers and SSL configuration details are not visible in the provided data, suggesting room for improvement in security hardening. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy and cookie policies are present, though cookie consent mechanisms are not implemented. WHOIS data is restricted by DNS Belgium policy, which is typical for government domains, and does not raise legitimacy concerns. Overall, the site is trustworthy and professional but could enhance its security posture and privacy compliance. The overall risk is low given the official nature and content safety, but strategic improvements in security headers, HTTPS enforcement, and transparency in incident response would strengthen the security and trust profile.

Sencor is a consumer electronics and home appliances brand offering a wide range of products including televisions, audio-video equipment, kitchen appliances, and health and beauty devices. The website serves as a retail and informational platform targeting general consumers primarily in the French language market, with multiple regional versions available. The company provides customer support, product downloads, and dealer location services, positioning itself as an established player in the retail electronics sector with a medium-sized market presence based in the Czech Republic. Technically, the website is built on modern web technologies including HTML5, CSS3, JavaScript, Bootstrap 4, and Kentico CMS. It employs structured data (JSON-LD) for enhanced SEO and contact information presentation. The site is mobile-optimized with good navigation and content quality, although some accessibility features are basic. Performance is moderate with use of Google Fonts and asynchronous JavaScript loading. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, no explicit security headers were detected, and there is no visible cookie consent mechanism, which may impact GDPR compliance. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website presence. Overall, the website is functional, professional, and trustworthy in content and design but would benefit from improved security headers, cookie consent implementation, and verification of domain registration details to enhance trust and compliance.

L

Le Gouvernement du Grand-Duché de Luxembourg

etat.lu

64

The website etat.public.lu serves as the official directory and portal for public administration websites of the Grand Duchy of Luxembourg. It provides comprehensive listings and links to government ministries, agencies, and related public services primarily in French. The site is government-operated, targeting public sector employees, citizens, and stakeholders seeking official information. The business model is informational and public service oriented, with a strong market position as the authoritative government directory. Technically, the site is built on Adobe Experience Manager, uses modern web standards, and is mobile optimized with good accessibility features. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and incident response information. The absence of WHOIS data limits domain trust verification, though the content and branding strongly indicate legitimacy. Overall, the site is professional, trustworthy, and serves its public information purpose effectively.

L

Le Gouvernement du Grand-Duché de Luxembourg

guichet.lu

67

Guichet.public.lu is the official government portal of Luxembourg dedicated to providing citizens with easy access to a wide range of public services and administrative information. The website offers comprehensive coverage of topics such as financial aids, citizenship, family and education, taxation, immigration, inclusion, justice, housing, leisure, health, transport, and employment. It serves as a centralized digital gateway for Luxembourg residents to navigate government procedures efficiently. Technically, the site is built on Adobe Experience Manager (AEM), leveraging modern web technologies including SVG icons, JavaScript, and CSS for a responsive and accessible user experience. The presence of Adobe Dynamic Tag Manager indicates a mature approach to analytics and marketing tag management. The site is mobile-optimized and includes accessibility features, ensuring usability for a broad audience. From a security perspective, the website enforces HTTPS and integrates secure login mechanisms linking to official government authentication services. Cookie consent and privacy policies are clearly presented, reflecting compliance with GDPR requirements. While explicit security headers are not fully visible in the provided data, the overall posture appears strong with no evident vulnerabilities or exposed sensitive data. Overall, guichet.public.lu demonstrates a high level of professionalism, trustworthiness, and user-centric design, making it a reliable resource for Luxembourg citizens. The main limitation in the analysis is the absence of WHOIS data, which restricts domain registration trust assessment. Nonetheless, the official branding and domain extension support its legitimacy.

L

Le Gouvernement du Grand-Duché de Luxembourg

luxembourg.lu

57

The website luxembourg.public.lu is the official government portal of the Grand Duchy of Luxembourg, providing comprehensive information about the country’s culture, living conditions, tourism, education, work, and investment opportunities. It serves a broad audience including residents, tourists, investors, and the general public. The site is well-branded with consistent government logos and multilingual support, reflecting Luxembourg’s multicultural and multilingual identity. Technically, the site is built on Adobe Experience Manager, uses modern web technologies, and includes accessibility and SEO best practices. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers could be improved. The absence of WHOIS data is likely due to registry restrictions rather than malicious intent, but it slightly impacts trust metrics. Overall, the site is professional, trustworthy, and well-maintained.

K

KALTMEYER s.r.o.

kaltmeyer.cz

56

KALTMEYER s.r.o. is a Czech Republic based company specializing in mechanical and mechatronic access control systems for residential buildings. With over 30 years of market presence, the company offers a range of products including key systems, chip systems, self-locking locks, and innovative bike storage solutions. They also provide a unique lost key return service protected by utility model rights. The company targets property managers, owners, and residents, positioning itself as a trusted local provider with ISO 9001 certification and a solid reputation. Technically, the website is built on a Bootstrap framework with jQuery and Font Awesome, featuring responsive design and moderate performance. Google Analytics is used for visitor tracking. The site includes secure login and contact forms but lacks some advanced security headers and a dedicated privacy policy page, which are areas for improvement. Cookie consent is implemented via a banner. From a security perspective, HTTPS is enforced, and forms use password fields, but the absence of explicit security headers and a published security policy reduces the overall security posture. No critical vulnerabilities or WAF blocks were detected. WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the website is professional and trustworthy with good business credibility but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

C

CSG Foundation

csgfoundation.com

67

CSG Foundation is a non-profit organization dedicated to supporting communities, first responders, promising talents, and CSG Group employees. The foundation focuses on three key pillars: firefighter support, science and education, and employee assistance. The website is professionally designed using modern technologies such as Next.js and Sanity CMS, providing a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS enforced and secure forms, though some security policies and incident response information are missing. Privacy and cookie policies are comprehensive and GDPR compliant. The absence of WHOIS data is a concern but the website's linkage to the reputable Czechoslovak Group supports its legitimacy.

WaveFoods Catering & Private Events is a small local catering business based in Halifax, Nova Scotia, specializing in event catering services including weddings, corporate events, and private parties. Their offerings include custom menu planning, handcrafted cocktails, and desserts, targeting event organizers and private clients in the hospitality sector. The website presents a professional and clean design with clear navigation but lacks advanced technical features and compliance documentation. Technically, the website is built with basic HTML and CSS without detectable CMS or advanced frameworks. It lacks HTTPS information and security headers, which weakens its security posture. The site does not include privacy or cookie policies, nor does it show evidence of analytics or tracking tools, indicating minimal user tracking but also a lack of compliance with common privacy standards. From a security perspective, the absence of HTTPS and security headers, combined with no visible incident response or security policies, suggests a low security maturity level. The WHOIS data is missing, raising concerns about domain registration legitimacy and increasing risk. The contact method is limited to a form without alternative contact details, which may impact trust and user confidence. Overall, the website is functional and provides relevant business information but requires significant improvements in security, privacy compliance, and domain legitimacy verification to enhance trustworthiness and reduce risk.

N

Nadace města Karlovy Vary

nadace-karlovyvary.cz

41

Nadace města Karlovy Vary is a non-profit foundation established by the statutory city of Karlovy Vary, Czech Republic. The foundation focuses on supporting cultural, sports, health, social, educational, architectural, and tourism-related initiatives within the city and its surroundings. The website serves as an informational portal providing details about the foundation's mission, supported areas, partners, and grant opportunities. The target audience includes local residents, cultural organizations, and potential grant applicants. Technically, the website is built using HTML5, CSS3, and JavaScript with jQuery 1.8.3 and RequireJS, likely generated by Adobe Muse. Mobile optimization is basic with separate mobile and tablet pages. Security posture is moderate but weakened by the use of outdated JavaScript libraries and lack of visible security headers or privacy policies. No forms or direct contact information are present on the main page, limiting user engagement and transparency. Overall, the site is functional and professional but requires updates to improve security and compliance.

S

Studio Fresh Net, s.r.o.

mediaas.cz

52

Mediaas.cz is a Czech advertising and publishing agency operating since 2013, offering comprehensive marketing services across the Czech Republic. The website presents a professional image with clear branding and a focus on various marketing disciplines including promotion, print, events, and social marketing. The technical infrastructure includes modern web technologies such as HTML5, CSS3, JavaScript, Google Fonts, and integration of marketing analytics tools like Google Analytics and Facebook Pixel. The site is mobile optimized and uses a cookie consent mechanism to comply with privacy regulations. Security posture is moderate with HTTPS implied but lacks explicit security headers and detailed privacy policies. No contact emails or phone numbers were found in the provided content, which limits direct communication channels. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and stability.

F

FANSHOP BK Mladá Boleslav

fanshopbkboleslav.cz

53

FANSHOP BK Mladá Boleslav operates an e-commerce platform dedicated to selling fan merchandise for the BK Mladá Boleslav hockey team. The website offers a variety of products including apparel, accessories, and souvenirs targeted at fans and supporters. The business model is focused on niche retail e-commerce within the Czech Republic, catering to a specific sports fan base. The site demonstrates consistent branding and good content quality with clear product listings and pricing. Technically, the site uses a custom or proprietary e-commerce platform with JavaScript, CSS, and Matomo analytics integration. The website is mobile optimized and provides a cookie consent mechanism aligned with GDPR principles, although a formal privacy policy page is not clearly identified. Security posture is adequate with HTTPS enforced and secure form handling, but lacks some security headers and explicit security policies. WHOIS data is unavailable, which impacts domain trust and legitimacy assessment. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.

E

eSports s.r.o.

pop.cz

50

POP Airport is a well-established retail and entertainment center located near Prague’s Václav Havel Airport, offering a wide range of services including outlet shopping with over 200 global brands, family amusement parks, a dinosaur museum, classic car exhibitions, and plane spotting facilities. The business targets tourists, families, and shoppers seeking discounted products and leisure activities. The website reflects a mature digital presence with consistent branding and comprehensive content that supports the business model effectively. Technically, the site employs modern web technologies such as JavaScript, Google reCAPTCHA, and font loading optimizations, ensuring good performance and mobile responsiveness. Security measures include HTTPS enforcement, cookie consent management, and use of security headers, contributing to a strong security posture. Privacy compliance is evident through a detailed privacy policy and cookie consent mechanisms. Overall, the domain’s WHOIS data aligns with the business claims, indicating legitimacy and trustworthiness.

P

Pražské služby a.s.

psas.cz

65

Pražské služby a.s. is a large municipal service company based in the Czech Republic, primarily serving Prague with waste management, road maintenance, and waste incineration services. The company targets both residential customers and businesses, including small entrepreneurs and large firms requiring waste disposal solutions. Their website reflects a professional and comprehensive presentation of their services, including detailed legal and operational information. Technically, the website uses modern web technologies such as Google Analytics and Bootstrap components, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit incident response contacts. The absence of WHOIS data is a concern for domain trust but does not detract from the overall legitimacy of the business as presented on the site.

H

Holcim Česko

lafarge.cz

62

Holcim Česko is a large manufacturing company specializing in sustainable construction materials, including cement, aggregates, and concrete products. As part of the global Holcim group, it leverages international expertise and a strong sustainability strategy focused on decarbonization and circular economy principles. The website reflects a professional corporate presence with clear branding and a focus on innovation and environmental responsibility. Technically, the site uses Drupal CMS with modern JavaScript libraries and Google Tag Manager for analytics, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies could be improved. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the overall business credibility remains high based on content and branding. No direct contact emails or phone numbers are present on the homepage, but social media channels are linked for engagement. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is well-structured, secure, and aligned with corporate standards.

Nadoraz.cz is the official website of a Czech music band named Nadoraz, based in Hradec Králové, with a history spanning nearly four decades. The band offers live music performances across various genres including swing, dixieland, country, rap, funky, and rock, and participates in numerous festivals and events both domestically and internationally. Their business model centers on entertainment services, music sales, and event appearances targeting Czech-speaking music fans and event organizers. The website provides detailed band member information, upcoming event dates, and contact details for bookings. Technically, the website is built with basic HTML5, CSS, and JavaScript technologies including jQuery and Modernizr. The site has a moderate performance profile with basic mobile optimization and accessibility features. However, it lacks modern CMS integration and advanced technical frameworks. SEO optimization is basic with minimal meta tags and no structured data or Open Graph tags. From a security perspective, the site lacks HTTPS enforcement and security headers, and does not provide privacy or cookie policies, which are critical for GDPR compliance. No vulnerability disclosure or incident response information is present. The absence of analytics and tracking scripts indicates minimal user tracking, which is positive for privacy but also suggests limited marketing insights. Overall, the security posture is weak and needs improvement to protect user data and enhance trust. The overall risk assessment indicates a low to moderate risk profile primarily due to missing security best practices and compliance documentation. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and establishing vulnerability disclosure mechanisms to improve security and compliance posture.

H

HC VÍTKOVICE RIDERA

hc-vitkovice.cz

48

HC VÍTKOVICE RIDERA operates an official website serving as the primary digital platform for the Czech ice hockey club. The site provides comprehensive information including news articles, match schedules, team rosters, ticket sales, and fan engagement features. It targets hockey fans and the local community, positioning itself as a reputable sports club with a medium-sized presence in the Czech Republic. Technically, the website employs modern web standards with responsive design, custom fonts, and JavaScript libraries such as Swiper.js for interactive elements. Security-wise, the site enforces HTTPS, includes cookie consent mechanisms, and implements standard security headers, reflecting a good security posture. However, explicit security policies and incident response contacts are not publicly available, indicating room for improvement in transparency and compliance. Overall, the website is professional, trustworthy, and well-maintained, with no signs of blocking or malicious content.

M

Město Letohrad

letohrad.eu

48

The website letohrad.eu serves as the official online presence for the town of Letohrad, Czech Republic. It provides comprehensive information about municipal services, news, events, public administration, and community resources. The site targets residents, visitors, and local businesses, offering a centralized portal for accessing city-related information and services. The business model is that of a government entity focused on public service and community engagement. Technically, the site is built on a proprietary CMS platform (vismo) common among Czech municipalities, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google Translate for multilingual support and maintains a moderate performance profile with good mobile optimization. Accessibility features are basic but present, and SEO practices are adequate for the site's purpose. From a security perspective, the website enforces HTTPS and uses secure form submissions but lacks advanced security headers and explicit incident response or security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy and cookie policy present but no active consent mechanism. Contact information is clearly provided, enhancing trust and credibility. Overall, the site is a well-maintained municipal portal with a good balance of content quality, usability, and security. Strategic improvements in security headers, privacy consent, and incident response documentation would further enhance its posture and compliance.

The website www.rychnov-city.cz serves as the official municipal portal for the city of Rychnov nad Kněžnou in the Czech Republic. It provides residents and visitors with comprehensive information about city life, administration, social and technical services, cultural events, and public utilities. The site is well-structured and targets local citizens and stakeholders seeking official city information and services. The business model is that of a government entity providing public services and information dissemination. Technically, the website is built on the Vismo CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google services including reCAPTCHA for form security and Google Translate for multilingual support. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some improvements in security headers could be made. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms from abuse. However, no explicit security policies or incident response contacts are published, and no security.txt file is present. The absence of WHOIS data limits the ability to fully verify domain registration legitimacy, though the presence of official contact information and consistent branding supports trustworthiness. Overall, the website is a reliable and professional municipal portal with good content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing security policies, and improving WHOIS transparency to strengthen trust and compliance.

U

U Rudolfa | Restaurant Hradec Králové

urudolfa.restaurant

44

The website www.urudolfa.restaurant represents a small hospitality business operating a restaurant named 'U Rudolfa' located in Hradec Králové, Czech Republic. The business offers restaurant dining services and catering for events, including romantic dinners. The website content is accessible and well-structured, with a professional design using modern front-end technologies such as Bootstrap and JavaScript libraries. However, the site lacks critical compliance documents such as privacy and cookie policies, and no explicit contact information is found on the site. The WHOIS data is unavailable or protected, which limits the ability to fully verify domain legitimacy and ownership details. HTTPS is enabled, but security headers are missing, which could be improved to enhance security posture.

K

Královéhradecká provozní, a.s.

khp.cz

59

Královéhradecká provozní, a.s. is a regional water utility company operating primarily in the Hradec Králové region of the Czech Republic. It provides essential services including water supply, wastewater treatment, and customer support. The company is part of the larger Veolia group, which is a significant player in the energy and water sectors. The website reflects a professional and service-oriented business model targeting local residents and businesses. Technically, the site uses a proprietary CMS (Vizus CMS) and integrates Matomo analytics for traffic measurement, indicating a moderate level of digital maturity. The site is mobile-optimized and provides clear navigation and content relevant to its audience. Security-wise, the site uses HTTPS and has a cookie consent mechanism with granular controls, but lacks visible security headers and a published privacy policy, which are areas for improvement. The absence of WHOIS data limits domain trust verification, but the website content and branding strongly suggest legitimacy. Overall, the site is functional, professional, and trustworthy with room for enhanced compliance and security transparency.

L

LAMAX

lamax.cz

71

LAMAX operates a professional e-commerce website specializing in electric mobility products such as e-quads, e-scooters, and e-dirtbikes, alongside photo and video equipment and audio accessories. The company targets consumers interested in reliable and durable everyday technology, positioning itself as a niche player with a focus on quality and fair pricing. The website is built on the Shopify platform, leveraging modern web technologies and integrations with major analytics and marketing tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, GDPR-compliant cookie consent, and no visible vulnerabilities, although some improvements like DNSSEC and explicit security policies could enhance trust further. Overall, the site presents a trustworthy and professional online presence suitable for its market segment.

C

Centralplast s.r.o.

centralplast.cz

59

Centralplast s.r.o. is a Czech manufacturing company specializing in custom plastic products, including luxury pools, rainwater tanks, boats, and industrial containers. With over 30 years of tradition, the company serves customers across Europe, positioning itself as a trusted provider of high-quality, tailor-made plastic solutions. The website reflects a professional and consistent brand image, targeting both B2B and B2C audiences interested in bespoke plastic manufacturing. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and popular libraries like Swiper.js for UI components. It integrates Google Tag Manager, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and provides a good user experience with clear navigation and multilingual support. From a security perspective, the site uses HTTPS and includes Google reCAPTCHA in its forms, enhancing protection against automated abuse. However, it lacks several important security headers such as X-Frame-Options and a robust Content-Security-Policy, which are recommended to improve security posture. Privacy compliance is partially addressed with a comprehensive privacy policy and GDPR consent on forms, but no explicit cookie consent mechanism was detected. Overall, Centralplast's website demonstrates a solid business credibility and technical foundation with room for security and privacy improvements. The domain registration data aligns well with the company's history and location, supporting legitimacy. No signs of malicious activity or content safety concerns were found.

B

Kandidát na evropské město kultury | Broumov2028

broumov2028.cz

60

Broumov2028.cz is a professionally designed website representing the cultural initiative of the Broumov region in the Czech Republic, aiming to become the European Capital of Culture in 2028. The site provides extensive information about cultural events, projects, and community engagement, supported by testimonials from ambassadors and partners. The technical infrastructure includes modern web technologies and tracking tools such as Google Analytics and Facebook Pixel, indicating a moderate level of digital maturity. However, the absence of explicit privacy and cookie policies, as well as missing WHOIS registration data, presents gaps in privacy compliance and domain transparency. Security posture is moderate with HTTPS implied but lacking visible security headers or incident response information. Overall, the website serves its cultural promotion purpose well but would benefit from enhanced privacy, security, and transparency measures.

L

Latvijas Loto

latloto.lv

57

Latvijas Loto is the national lottery operator of Latvia, offering a variety of lottery games including Eurojackpot, Vikinglotto, SuperBingo, Keno, and instant lotteries. The company positions itself as a socially responsible gaming provider, funding important projects in Latvia through lottery participation. The website is professionally designed, mobile-optimized, and provides comprehensive information about games, results, and company news. Technical infrastructure includes modern JavaScript libraries and error monitoring tools, ensuring a stable user experience. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and transparent in its operations.

Z

Zabbix

zabbix.com

77

Zabbix is a globally recognized enterprise-class open-source network and application monitoring solution. The company offers a comprehensive suite of products including on-premise software, a fully managed cloud platform, professional services, and extensive training and certification programs. Their market position is strong, supported by a large deployment base and trusted by Fortune 500 companies and government entities. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site uses modern JavaScript libraries and tracking tools, with good performance and mobile optimization. Security posture is solid with HTTPS enforced and published security policies, though some security headers could be improved and a cookie consent mechanism is missing, which may affect GDPR compliance. Overall, the business credibility is high, supported by case studies, partner programs, and active community engagement. The WHOIS data is unavailable or protected, which is a minor concern but does not detract from the overall trustworthiness given the company's established reputation.

The website 'Tajemství Zvířetického trezoru' is a professionally designed platform promoting a seasonal interactive treasure hunt game for families and tourists at the Zvířetice castle ruins in the Czech Republic. It is organized by the local Tourist Information Center and supported by the city of Bakov nad Jizerou. The site effectively communicates the event's story, schedule, and contact information, targeting families with children and local visitors interested in cultural heritage and educational activities. Technically, the site uses standard web technologies including jQuery and the Mapy.cz API for map integration, though the map API version is deprecated, posing a technical risk. The site is moderately optimized for mobile and accessibility but lacks advanced SEO and performance optimizations. Security posture is basic with no visible security headers and no privacy or cookie policies, indicating compliance gaps. No blocking or WAF mechanisms were detected, and the domain registration data aligns well with the website's local business focus, supporting legitimacy. Overall, the site is functional and trustworthy but would benefit from improved security and privacy compliance measures.

M

Město Mšeno

mestomseno.cz

46

Město Mšeno operates an official municipal website serving residents, visitors, and local businesses with comprehensive information about the town, local government, services, events, and tourism. The site is well-structured, professionally designed, and provides key services such as news updates, public notices, payment portals, and contact mechanisms. The target audience includes local citizens and tourists interested in the region. Technically, the website uses modern web technologies including Google Fonts, reCAPTCHA v3, and a proprietary CMS (Vizus CMS). It is mobile-optimized and employs HTTPS for secure communications. Security posture is solid with HTTPS and bot protection, but lacks some security headers and formal security policies. Privacy compliance is partially addressed with a cookie consent banner but lacks a dedicated privacy policy page. WHOIS data is unavailable, which reduces domain registration transparency and trustworthiness. Overall, the website is functional, trustworthy, and serves its government role effectively, but could improve in privacy and security documentation.

M

Město Dolní Bousov

dolni-bousov.cz

9

The website dolni-bousov.cz serves as the official municipal portal for the town of Dolní Bousov in the Czech Republic. It provides residents and visitors with information about the town's history, local government, cultural events, and public services. The site promotes a mobile app and offers contact details for the municipal office, positioning itself as a trusted source of local information. Technically, the site is built on WordPress with a moderate performance profile and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is minimal, with a basic accessibility statement but no comprehensive GDPR-aligned privacy or cookie policies. Overall, the site is credible and professionally maintained but could improve in privacy and security best practices.

M

Městský úřad Dobrovice

dobrovice.cz

49

The website dobrovice.cz serves as the official municipal portal for the town of Dobrovice in the Czech Republic. It provides residents and visitors with comprehensive information about local government services, contacts, public notices, events, and community resources. The site is well-structured and targets local citizens and stakeholders interested in municipal affairs. The business model is that of a government service portal, focusing on transparency and public communication. The domain age and WHOIS data confirm the legitimacy and long-standing presence of the site as a trusted local government resource. Technically, the website uses a CMS platform called vismo, with standard web technologies including HTML5, CSS3, and JavaScript. It incorporates Google reCAPTCHA for form security and includes a smart app banner for mobile users. The site is mobile-optimized and accessible, with good SEO practices evident. Performance is moderate, with room for optimization. No major technical risks or vulnerabilities were detected. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were found. Privacy compliance is basic but present, with a privacy policy and cookie policy linked clearly. Contact information is prominently displayed, enhancing trust. Overall, the site scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility. It is a safe, professional, and trustworthy municipal website with minor areas for improvement in security policy transparency and technical headers. No adult or questionable content is present, making it suitable for a general audience.

ZIMNÍ STADION KUŘIM s.r.o. operates a local ice hockey and recreational sports facility in the Czech Republic, targeting youth and recreational players. The website presents a professional and well-structured digital presence with clear information about services such as ice rink rental, public skating, sports equipment sales, hospitality, and accommodation. The company maintains active social media channels and provides a contact phone number for customer engagement. Technically, the website uses modern web technologies including Google Analytics and CookieHub for analytics and cookie consent management. Security posture is adequate with HTTPS enforced, though security headers and incident response information are lacking. Privacy compliance is partially addressed through cookie consent but lacks explicit privacy and terms of service pages. WHOIS data is unavailable, indicating privacy protection, which reduces transparency but does not raise immediate concerns given the professional website content. Overall, the site is safe, well-maintained, and suitable for its target audience.

C

Contimex spol. s r.o.

contimex.cz

66

Contimex spol. s r.o. is a Czech strategic advertising and digital agency operating since 1993, specializing in marketing strategies, digital marketing, creativity, production, and event organization. The company serves business clients seeking comprehensive marketing solutions and maintains a professional web presence with client testimonials and a clear team structure. Technically, the website uses modern web technologies including Google Tag Manager and CookieHub for cookie consent management, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit privacy policies are absent. The absence of WHOIS data limits domain legitimacy verification, but the website content and contact information suggest a trustworthy and established business. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in privacy compliance and security best practices.

B

brno-prorodiny.cz

brno-prorodiny.cz

46

brno-prorodiny.cz is a Czech language online magazine targeting parents and families in the Brno region, providing practical advice, tips, and inspiration for family well-being. The site covers a broad range of topics including health, finance, law, technology, and local activities. It operates primarily as a content publishing platform monetized through Google Adsense advertising. The website demonstrates a good level of content quality and user experience with clear navigation and mobile optimization. Technically, it uses standard web technologies including HTML5, CSS, JavaScript, Google Adsense, and Matomo analytics, hosted on vas-hosting.com. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. WHOIS data shows inconsistencies with domain creation date in the future, which may indicate placeholder data or require further verification. Overall, the site is professional and safe for general audiences but could improve in privacy and security transparency.

K

Kubíček Balloons

kubicekballoons.cz

55

Kubíček Balloons is a Czech-based manufacturer specializing in hot air balloons, offering innovative and reliable products inspired by pilot needs. The company provides a comprehensive range of services including pilot training, custom balloon design, and sales of stock balloons. Their market position is strong within the ballooning community, supported by decades of experience and a reputation for quality and innovation. The website is professionally designed, mobile-optimized, and rich in content, targeting balloon pilots and enthusiasts globally. Technically, the site employs modern JavaScript frameworks and libraries, with good SEO and accessibility features. Security posture is solid with HTTPS, security headers, and privacy compliance, though it lacks explicit incident response and vulnerability disclosure information. Overall, the site is trustworthy and well-maintained, with a moderate risk profile primarily due to the absence of public WHOIS data and some missing policy pages.

W

Wellness Kuřim s.r.o.

wellnesskurim.cz

69

Wellness Kuřim s.r.o. operates a multi-service wellness and recreational facility in the Czech Republic, offering aquapark, fitness, relaxation and massage services, a restaurant, and an e-shop for related products and vouchers. The company targets families, fitness enthusiasts, and wellness customers, positioning itself as a local/regional leader in hospitality and wellness services. The website is professionally designed with clear navigation and mobile optimization, integrating social media and cookie consent mechanisms. Technically, it uses common web technologies including jQuery, Google Analytics, Facebook SDK, and CookieHub for cookie management. Security posture is moderate with HTTPS implied but lacking explicit security headers and detailed security policies. WHOIS data is unavailable, which reduces transparency and trustworthiness. Contact information is clearly provided, but privacy and terms of service policies are not explicitly found. Overall, the website is functional, user-friendly, and trustworthy from a business perspective but could improve in security and compliance documentation.

The website represents Sdružení cestovního ruchu Jizerské hory, a regional tourism association promoting the Jizera Mountains area in the Czech Republic. It serves as an informational portal with partnerships from local municipalities and ski-related businesses. The site is modest in scope, focusing on regional tourism promotion without e-commerce or complex services. Technically, the site is simple, built with basic HTML and CSS, with no detected CMS or advanced frameworks. It lacks modern SEO, accessibility, and performance optimizations but is functional and mobile responsive at a basic level. Security posture is minimal, with no HTTPS verification visible from the data, no security headers, and no privacy or cookie policies, indicating low compliance with modern privacy standards. The absence of WHOIS data reduces domain trust, though the website content and contact information appear consistent with a legitimate regional tourism entity. Overall, the site is low complexity, with moderate business credibility but requires improvements in security, privacy, and technical modernization.

M

město Židlochovice

koupalistezidlochovice.cz

60

Koupaliště města Židlochovice is a municipal swimming pool facility providing recreational services including multiple pools, playgrounds, and refreshment areas. The website is hosted on the Webnode platform as a subdomain, which explains the absence of WHOIS data for the subdomain. The site targets local residents and visitors, offering family-friendly leisure activities. Technically, the site uses modern web standards, is mobile optimized, and employs Google Tag Manager for analytics. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy policies. Overall, the site is functional and trustworthy but could improve compliance and security practices.

S

SAKO Brno a.s.

resako.cz

55

The website resako.cz serves as an informational platform for SAKO Brno a.s., a medium-sized energy sector company focused on modernizing waste-to-energy facilities in Brno, Czech Republic. The site communicates ongoing projects and public procurement notices, targeting local residents and stakeholders. Technically, the site uses modern web standards with HTTPS and Google Fonts, but lacks advanced security headers and privacy policies. Security posture is moderate with no visible vulnerabilities but could be improved with better compliance documentation and security headers. Overall, the site is professional and trustworthy but should enhance privacy and security transparency to align with best practices.

K

Kubíček Aircraft s.r.o.

kubicekaircraft.com

57

Kubíček Aircraft s.r.o. is a Czech-based manufacturer specializing in ultralight aircraft, emphasizing a family tradition and quality craftsmanship. The company targets ultralight pilots and aviation enthusiasts with versatile aircraft designed for rugged and comfortable flying experiences. Their market position is niche but credible, supported by a professional website and active social media presence. Technically, the website employs modern web technologies including Alpine.js and Splide.js, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

H

Helix Cleaner s.r.o.

helixaircleaner.eu

47

Helix Cleaner s.r.o. is a Czech company specializing in advanced photocatalytic air purification technology designed for a variety of environments including industrial, healthcare, public, and private spaces. Their patented Helix air purifier uses titanium dioxide photocatalysis activated by UV-A light to effectively eliminate harmful particles, bacteria, viruses, and odors without the need for filters. The website presents a professional and consistent brand image with clear messaging targeting businesses and households seeking high-efficiency air cleaning solutions. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and popular libraries such as Swiper.js and Google Tag Manager. It features responsive design optimized for mobile devices and includes a comprehensive cookie consent mechanism supporting GDPR compliance. The site uses HTTPS with strong SSL configuration, secure forms with CSRF tokens, and no exposed sensitive data, reflecting a good security posture. Security-wise, while the site enforces HTTPS and cookie consent, it lacks explicit security policy or incident response information. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data. The domain is registered with a reputable registrar, and the website content aligns with the business claims, supporting legitimacy. Overall, the website scores well on content quality, technical implementation, security, privacy compliance, and business credibility. Strategic improvements include publishing security and incident response policies, enhancing security headers, and adding a vulnerability disclosure policy to further strengthen trust and compliance.

S

Softballová asociace České republiky

softball.cz

54

Softball.cz is the official website of the Softball Association of the Czech Republic, providing comprehensive information about softball competitions, national teams, development projects, and an e-shop. The website targets softball players, coaches, clubs, and fans primarily within the Czech Republic but also internationally. The site is well-structured with clear navigation and regularly updated content, reflecting an active sports organization. Technically, the site uses a custom CMS with standard web technologies including JavaScript libraries like TinyMCE and tracking tools such as Google Analytics and Google Tag Manager. Hosting appears to be managed by a Czech provider, consistent with the domain's registration data. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvements. No WAF or blocking mechanisms were detected, and the domain's WHOIS data confirms a long-standing and legitimate presence since 1998. Overall, the site is professional and trustworthy but should enhance privacy compliance and security best practices.

K

Kubíček Factory s.r.o.

kubicekvisionair.com

56

Kubíček Visionair, operated by Kubíček Factory s.r.o., is a leading Czech manufacturer specializing in custom inflatables with over 30 years of experience and a portfolio exceeding 20,000 products. Their market position is strong within the manufacturing sector, targeting businesses and organizations needing inflatables for events, advertising, and artistic purposes. The company emphasizes quality craftsmanship, user-friendly designs, and expert technical support. Technically, the website is modern, mobile-optimized, and uses contemporary JavaScript frameworks like Alpine.js, with Google Tag Manager and cookie consent mechanisms implemented for privacy compliance. Security posture is solid with HTTPS and cookie consent, though DNSSEC is not enabled and security headers could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and social media presence. Strategic recommendations include enhancing DNS security, adding security headers, and publishing a formal security policy and incident response contacts.

S

Statutární město Brno, městská část Brno-střed

brno-stred.cz

58

The website www.brno-stred.cz serves as the official online presence of the municipal district Brno-střed, part of the statutory city of Brno in the Czech Republic. It provides comprehensive information about local government services, community news, cultural events, housing rentals, social care, and administrative procedures. The site targets residents and visitors of the Brno-střed district, offering a user-friendly portal for accessing municipal resources and contact points. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics for visitor insights. It features responsive design elements such as carousels and dropdown menus, and implements cookie consent mechanisms to comply with privacy regulations. The site is served over HTTPS, ensuring secure communication. From a security perspective, the site demonstrates good practices such as secure forms with CSRF tokens and cookie consent management. However, it lacks visible HTTP security headers and explicit incident response or vulnerability disclosure information. The WHOIS data is unavailable, likely due to privacy protection, which slightly limits domain legitimacy verification but does not detract from the site's apparent authenticity. Overall, the website is a well-maintained municipal portal with strong content quality, good privacy compliance, and a solid security posture. Strategic improvements could include adding security headers, publishing a security.txt file, and enhancing incident response transparency to further strengthen trust and resilience.

E

AdmPortal

eselpoint.cz

56

The website sprava.eselpoint.cz serves as a login portal for the e-Správa system management platform, likely targeting system administrators or authorized personnel within an organizational context. The site is built using Angular 10.1.6 and PrimeNG UI components, indicating a modern JavaScript framework usage but with a somewhat basic implementation focused on login functionality. The content is minimal, with no visible privacy, cookie, or terms of service policies, and no contact or incident response information, which limits transparency and user trust. WHOIS data is unavailable, raising concerns about domain legitimacy and registration status. Security posture is moderate with HTTPS assumed but lacking visible security headers or advanced protections. Overall, the site appears functional but lacks comprehensive security and compliance features.

I

INCORP a.s.

stars24.cz

66

stars24.cz is a Czech online media portal operated by INCORP a.s., focusing on celebrity news, lifestyle, and general current events including weather and crime. The website targets a general audience interested in entertainment and news within the Czech Republic. It maintains a consistent brand presence with active social media channels and provides a variety of news categories and regularly updated content. The business model is primarily advertising-driven, leveraging Google Adsense and MGID ad networks. Technically, the site uses modern web technologies including Google Tag Manager and asynchronous JavaScript for ads and analytics, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS enforced, though some security headers could be improved. Privacy and cookie policies are present and indicate GDPR compliance, supporting user data protection. WHOIS data confirms legitimate ownership consistent with the business entity. Overall, the site is professional, trustworthy, and safe for general audiences.

The website dermanet.eu/cs/ serves as a professional portal for the Czech Academy of Dermatovenerology, targeting dermatology professionals and members of the academy. It provides educational resources, event calendars, publications, and membership services. The site is well-branded and consistent with its professional healthcare focus, primarily serving a niche audience in the Czech Republic. Technically, the site uses standard web technologies including Bootstrap and Google Analytics, with moderate performance and good mobile optimization. However, there is a lack of explicit privacy and cookie policies, and no visible security headers were detected, indicating room for improvement in security and compliance. The site is accessible without WAF or blocking mechanisms, and no suspicious WHOIS patterns were found, supporting its legitimacy.

B

BLUE-CELL, s. r. o.

dir-shop.cz

53

DIR-SHOP.cz is a specialized online retailer focused on diving equipment and accessories, operating since 2004 under the company BLUE-CELL, s.r.o. The website offers a wide range of products including analyzers, regulators, reels, lights, and underwater camera housings, targeting diving enthusiasts and professionals. The business operates primarily in the Czech Republic but offers worldwide shipping, positioning itself as a niche player in the diving retail market. The site demonstrates a good level of professionalism with clear product listings, company information, and user-friendly navigation. Technically, the website uses modern frontend technologies such as Bootstrap 5 and jQuery, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and performs moderately well. Security posture is adequate with HTTPS enforced and secure form submissions; however, it lacks important security headers which could enhance protection against common web threats. Privacy and cookie policies are present, with a cookie consent mechanism implemented, but GDPR compliance could be improved with more comprehensive disclosures and a dedicated data protection officer contact. Overall, the domain registration data aligns well with the website content, indicating a legitimate and established business. Strategic recommendations include enhancing security headers, improving privacy policy clarity, and establishing an incident response contact to strengthen trust and compliance.

Dun & Bradstreet is a globally recognized enterprise specializing in business data, analytics, and risk management solutions. The company serves a broad range of business clients, including financial institutions and compliance professionals, providing critical insights to support decision-making and compliance. Their market position is strong as a leading provider of business intelligence and credit risk data. The website reflects a mature digital presence with professional design and comprehensive content tailored to their B2B audience. Technically, the site employs modern web technologies including JavaScript frameworks and Google Tag Manager for analytics, with good mobile optimization and SEO practices. Security posture is robust with HTTPS enforcement and standard security headers, though explicit incident response and vulnerability disclosure information are not publicly available. Overall, the site demonstrates a high level of professionalism and trustworthiness, with privacy and cookie policies aligned with GDPR requirements. The absence of public WHOIS data suggests privacy protection, which is typical for large enterprises. Recommendations include enhancing transparency around security policies and incident response to further strengthen trust.