Security Directory

S

Statutární město Zlín

zlin.eu

66

The website https://zlin.eu/ serves as the official online presence of the statutory city of Zlín in the Czech Republic. It provides comprehensive information about the city's administration, culture, events, public services, and citizen engagement platforms. The site targets residents, local businesses, and visitors, offering services such as an official citizen portal, public notices, event calendars, and contact information for municipal departments. The business model is that of a government entity providing transparent and accessible information and services to its constituents. Technically, the website employs a modern technology stack including jQuery, Google Analytics, Google Tag Manager, Google reCAPTCHA, OneSignal push notifications, and various UI libraries such as Slick Carousel and SweetAlert2. It is hosted by Media4web, s.r.o., a Czech hosting provider. The site is mobile-optimized, accessible, and SEO-friendly with proper meta tags and structured navigation. Cookie consent and privacy policies are implemented with high confidence in GDPR compliance. From a security perspective, the site enforces HTTPS with a Content Security Policy header and uses Google reCAPTCHA to protect forms. While no critical vulnerabilities or exposed sensitive data were detected, additional security headers could enhance protection. There is no explicit security incident response or vulnerability disclosure information published, which could be improved to strengthen trust and readiness. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively serves its role as a municipal information hub with a strong digital presence. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing clear incident response contacts to further improve security posture and stakeholder confidence.

The website visitzlin.eu serves as the official tourist information portal for the city of Zlín, Czech Republic. It provides comprehensive information about the city, including cultural events, historical background, practical visitor information, and local attractions. The portal targets tourists, local residents, and visitors interested in exploring Zlín and its surroundings. The business model is a government-operated informational service aimed at promoting tourism and local culture. Technically, the site employs a custom CMS with a modern JavaScript technology stack including jQuery and various UI libraries such as Slick Carousel and FullCalendar. It integrates Google services like Maps API, Analytics, Tag Manager, and reCAPTCHA for security and tracking. The site is hosted by Media4web, s.r.o., a Czech hosting provider, and uses HTTPS with a Content-Security-Policy header, indicating a good security baseline. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and CAPTCHA protection on forms. However, it lacks some additional security headers and a visible cookie consent mechanism, which are important for GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is transparent and consistent with the website's official city affiliation, supporting its legitimacy. Overall, the website is a well-maintained, regionally focused government portal with good content quality and technical implementation. It could improve privacy compliance and security posture by adding cookie consent, security policies, and additional headers. The risk level is low, with no critical issues detected.

N

Nextiva

nextiva.com

76

Nextiva is a well-established technology company founded in 2006, specializing in unified customer experience management platforms. Their offerings include business phone services, team communications, and AI-powered contact center solutions, targeting businesses seeking integrated communication tools. The website reflects a mature digital presence with professional design, comprehensive content, and strong branding consistency. Technically, the site is built on WordPress with modern SEO and analytics tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response details are not publicly disclosed. Overall, the site demonstrates high professionalism and trustworthiness, though the absence of WHOIS data slightly reduces domain trust.

S

Syndicat National des Professionnels de l’Audiovisuel, du Spectacle et de l’Évènement

synpase.fr

52

Synpase is a French national syndicate representing professionals in the audiovisual, spectacle, and event sectors. The website serves as an information hub offering news, agreements, documentation, and member services to its target audience of industry professionals. The organization appears to be a small-sized non-profit entity focused on advocacy and resource provision within its niche market. Technically, the website is built on WordPress using the Avada theme and several plugins including Mailchimp and document embedding tools. It employs Google Analytics and Tag Manager for visitor tracking. The site is well-designed with good mobile optimization and clear navigation, though accessibility features are basic. Security posture is moderate with HTTPS enabled but lacking visible security headers and formal privacy or cookie policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and professional presentation suggest legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

L

LiveFX

livefx.fr

40

LiveFX is a French company specializing since 2016 in the rental, provision, and sale of special effects for various types of events including festivals, concerts, corporate events, sports, and private occasions. The website serves as a basic informational and contact portal while a new site is under development. The company targets event organizers and professionals seeking specialized stage effects services. The business operates in a niche market with a small company size and a localized French presence. Technically, the website uses a modest technology stack including jQuery, Bootstrap, and Font Awesome, hosted on OVH infrastructure. The site is accessible via HTTPS and shows basic mobile optimization and SEO practices. However, it lacks advanced security headers, privacy policies, and analytics tools, indicating a low to moderate level of digital maturity. From a security perspective, the site benefits from HTTPS but lacks important security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No forms or data collection mechanisms are present, reducing immediate data protection risks. The WHOIS data aligns well with the website content and business claims, supporting legitimacy. No signs of malware, phishing, or adult content were detected. Overall, the website is functional but basic, with room for improvement in privacy compliance, security hardening, and content richness. Strategic enhancements in these areas would improve trustworthiness and regulatory adherence.

C

Concert Systemes

concert-systemes.com

46

Concert Systemes is a French audiovisual technical service provider specializing in sound, lighting, structures, video, and event engineering for spectacles and events. The company offers services including technical assistance, rental, sales, and installation, targeting event organizers and audiovisual professionals primarily in France. The website is built on Joomla CMS and incorporates modern web technologies such as Bootstrap and jQuery, with Google Analytics for visitor tracking. The site is accessible, mobile-optimized, and includes a cookie consent mechanism, but lacks privacy and terms of service pages. Security posture is moderate with HTTPS enabled but missing key security headers and no visible incident response or data protection policies. WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy despite the professional appearance of the website and business. Overall, the site demonstrates a good level of content quality and business credibility but requires improvements in security and compliance documentation.

P

Prestatech-Artifices

prestatech-artifices.com

34

Prestatech-Artifices is a French company specializing in the design and production of fireworks and pyrotechnic displays, established in 1990. The company targets event organizers and clients seeking artistic and prestigious pyrotechnic shows. Their website is professionally designed using WordPress and includes a portfolio of projects, team information, and social media links. Technically, the site uses common web technologies and is mobile optimized with good SEO practices. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy or cookie policies. The absence of WHOIS registration data is a notable concern that impacts trustworthiness. Overall, the site presents a professional image but would benefit from improved compliance and security practices.

P

Peters Surgical USA

peters-surgical.us

44

Peters Surgical USA is a medium-sized international healthcare company specializing in the design, manufacture, and distribution of surgical medical devices, including sutures, manual ligation products, and atraumatic occlusion instruments. The company targets healthcare professionals and partners globally, with a strong presence in the United States and affiliated sites in France, Germany, India, and worldwide. The website reflects a professional and consistent brand image with clear product categorization and dedicated services for surgical teams. Technically, the website is built on WordPress using the Salient theme and leverages modern web technologies such as jQuery, Gravity Forms, and YouTube API for multimedia content. Hosting is provided by OVH sas, a reputable provider. The site is mobile optimized and includes SEO best practices, though performance is moderate. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. From a security perspective, the site uses HTTPS and has domain transfer and deletion protections enabled. However, DNSSEC is not enabled, and no explicit security policy or incident response contacts are published. The site uses validated forms but could improve security headers and publish vulnerability disclosure information. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security policy transparency and DNS security would enhance trust and resilience.

P

Peters Surgical Deutschland & Catgut GmbH

peters-surgical.de

38

Peters Surgical Deutschland & Catgut GmbH is a medium-sized German healthcare company specializing in the production and distribution of surgical medical devices, including sutures, clips, staplers, and tissue adhesives. The company emphasizes its expertise and long-standing experience in surgical practice, supported by MDR certification and an international presence through partner sites. The website is built on WordPress using a modern theme and includes interactive elements such as AJAX-powered forms and video content. While the technical infrastructure is solid with HTTPS and modern libraries, there is room for improvement in security headers and privacy compliance mechanisms. Contact information and business details are clearly presented, enhancing trust and credibility.

P

Peters Surgical

peters-surgical.com

48

Peters Surgical is a French-based medical device company specializing in the design, manufacture, and distribution of surgical products such as sutures, titanium clips, and surgical glue. The company has a strong international presence with dedicated country-specific websites and was acquired in 2024 by Advanced Medical Solutions (AMS), enhancing its global footprint. The website is professionally designed using WordPress with modern technologies and provides clear information targeting healthcare professionals, partners, and job candidates. Contact details and legal information are readily available, supporting business credibility. Technically, the site uses a solid tech stack including Gravity Forms and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but could be improved by adding DNSSEC and security headers. Privacy compliance is partially met with privacy and terms pages present but lacks a cookie consent mechanism. Overall, the site is trustworthy and well-maintained, suitable for its healthcare audience.

W

WPScale

wpscale.es

59

WPScale is a specialized WordPress hosting provider based in Spain, offering fast, secure, and high-performance hosting solutions tailored exclusively for WordPress websites. The company emphasizes ease of use, security guarantees, automatic backups, and professional support in Spanish. Their market position is focused on delivering advanced hosting features such as cloning, development environments, file integrity checks, centralized updates, and free SSL certificates. The website reflects a modern and professional digital presence with good SEO and user experience.

W

WPSERVEUR

wpscale.com

55

WPScale is a specialized WordPress hosting provider emphasizing speed, security, and ease of use. The company offers a comprehensive suite of WordPress-specific hosting features including automatic backups, free migration, cloning environments, security monitoring, and domain registration services. Their market position is that of a niche player focused on WordPress users who require high performance and dedicated support. The website content is professionally presented, targeting WordPress site owners and developers, with a business model based on subscription hosting services and value-added features. Technically, the site runs on WordPress with WooCommerce integration, uses modern technologies such as PHP 8, Nginx, and Let's Encrypt SSL certificates, and incorporates analytics and marketing tools like Google Analytics and Mautic. The security posture is strong with HTTPS enforced, nightly backups, integrity checks, and rollback capabilities, although explicit security headers and policies are not visible. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or registration issues, which impacts domain legitimacy assessment. Overall, the site is well-built and trustworthy from a content and technical perspective but would benefit from improved transparency in privacy and security policies.

N

Nadační fond Zikmundova vila

zikmundovavila.cz

45

Zikmundova vila is a cultural heritage site located in Zlín, Czech Republic, managed by the Nadační fond Zikmundova vila, a non-profit organization founded in 2020. The website provides rich historical and cultural information about the villa, its notable past residents, and ongoing cultural programs. It targets a broad audience including tourists, cultural enthusiasts, and the general public interested in history and architecture. The organization positions itself as a key cultural institution in the region, offering guided tours, educational events, and long-term projects supported by regional and international partners.

N

Nadace Tomáše Bati

nadacetomasebati.cz

68

Nadace Tomáše Bati is a Czech non-profit foundation focused on preserving the legacy of the Baťa family and supporting social, cultural, and educational initiatives primarily in the Zlín region. The foundation operates from the historically significant Baťa villa and offers a variety of community events, educational programs, and an e-commerce platform for branded merchandise. The website is professionally designed with consistent branding and clear navigation, targeting a general audience interested in culture and community development. Technically, the website employs a modern JavaScript stack including jQuery, Vue.js, and various UI libraries, ensuring good mobile optimization and user experience. The site uses HTTPS with valid SSL certificates and incorporates Google reCAPTCHA and cookie consent mechanisms, reflecting a reasonable security posture. However, the absence of explicit security headers and incident response information suggests room for improvement. From a security perspective, the site shows good practices such as encrypted connections and form protections but lacks detailed security policies and vulnerability disclosure mechanisms. The missing WHOIS data for the domain is a concern for trust and legitimacy, although the website content and external partnerships support its authenticity. Overall, the website presents a trustworthy and professional front for the foundation but should address WHOIS transparency and enhance security disclosures to improve credibility and compliance.

K

KOMA Modular

pavilon-expo2015.cz

44

The website pavilon-expo2015.cz is dedicated to the Czech pavilion at EXPO2015 in Milan, showcasing modular architecture by KOMA Modular. It serves as an informational and promotional platform for the pavilion's history, design, and current use as a cultural and exhibition center in Vizovice, Czech Republic. The site is well-structured, professionally designed, and targets a general audience interested in architecture and cultural exhibitions. Technically, it uses modern JavaScript libraries, the Bolt CMS platform, and integrates Piwik analytics for visitor tracking. However, it lacks visible privacy and cookie policies, and no contact information is explicitly provided on the main pages, which are areas for improvement. Security-wise, the site uses HTTPS but does not show advanced security headers or policies in the HTML content, indicating moderate security posture. WHOIS data confirms the domain's legitimacy and consistency with the business purpose. Overall, the site is trustworthy, informative, and professionally maintained but could enhance privacy compliance and security transparency.

M

Městys Pozlovice

pozlovice.cz

49

Městys Pozlovice operates an official municipal website serving the local community and visitors with comprehensive information about local news, events, public notices, and services. The website targets residents, local organizations, and tourists, providing a centralized platform for community engagement and municipal communication. The business model is government/public service with a focus on transparency and accessibility. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Swiper.js, and Leaflet for interactive maps, supported by a Nette PHP framework backend. The site is hosted by REG-ZONER and uses HTTPS with a valid SSL certificate, ensuring secure communications. The design is responsive and accessible, with good SEO practices and clear navigation. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and use of reCAPTCHA to protect forms. However, it lacks some security headers and a formal incident response or vulnerability disclosure page. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. The WHOIS data confirms the domain's legitimacy and long-standing registration, consistent with the municipal nature of the site. Overall, the website is trustworthy, professionally maintained, and suitable for its intended audience. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance its security posture and compliance.

Z

ZÁLESÍ a.s.

pohoda-luhacovice.cz

44

Wellness Hotel Pohoda is a medium-sized hospitality business located in Luhačovice, Czech Republic, offering wellness, accommodation, and family-friendly services. The hotel is positioned as a reputable regional player with strong customer ratings and partnerships with local tourism and wellness platforms. Technically, the website uses a modern tech stack including jQuery, Google Analytics, and Facebook Pixel, with a CMS likely provided by Previo. The site is well-structured, mobile-optimized, and SEO-friendly, though some accessibility and security header improvements are possible. Security posture is solid with HTTPS and secure forms, but lacks explicit security headers and a dedicated security policy. Privacy compliance is strong with a comprehensive GDPR privacy policy and cookie consent mechanism. The absence of WHOIS data reduces domain trustworthiness, but the business information and certifications support legitimacy. Overall, the website is professional, trustworthy, and safe for general audiences.

M

Město Luhačovice

luhacovice.eu

10

The website www.luhacovice.eu serves as the official online presence for the town of Luhačovice in the Czech Republic, providing comprehensive information for residents and visitors including local news, cultural events, tourism, and municipal services. The site is well-structured, professionally designed, and targets both local citizens and tourists interested in wellness and cultural activities. The business model is focused on municipal communication and tourism promotion, positioning the site as a trusted source of local information. Technically, the site uses a custom CMS with standard web technologies such as HTML5, CSS, JavaScript, jQuery, and Tiny Slider for UI components. It is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured navigation. Performance is moderate, with room for improvement in loading speed and modern security headers. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, indicating awareness of privacy compliance. However, it lacks advanced security headers and does not provide explicit incident response or vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected, and the site maintains a good security posture for a municipal website. Overall, the website is a credible, safe, and professional municipal portal with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding a vulnerability disclosure policy to further strengthen trust and security posture.

The website visitzlin.eu serves as the official tourist information portal for the city of Zlín, Czech Republic. It provides comprehensive information about the city, including cultural events, historical background, practical visitor information, and local attractions. The portal is operated by the city's magistrate and targets tourists, local residents, and cultural enthusiasts. It holds a strong market position as the authoritative source for tourism-related content in the region. Technically, the website employs a modern JavaScript-based tech stack including jQuery, FullCalendar, Slick Carousel, and Google Maps API. It uses HTTPS with a Content-Security-Policy header and integrates Google Analytics and reCAPTCHA for analytics and bot protection. The site is mobile-optimized with good navigation and content structure, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses CSP headers, but lacks several other recommended security headers. The subscription form is protected by Google reCAPTCHA. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism and explicit security or incident response policies indicates room for improvement in privacy compliance. Overall, the website is trustworthy, professionally maintained, and aligned with its municipal purpose. Strategic recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, publishing security policies, and maintaining regular security audits to ensure ongoing protection.

M

Město Brumov-Bylnice

brumov-bylnice.cz

9

Město Brumov-Bylnice operates an official municipal website serving residents and visitors with comprehensive information about local government services, news, events, and public notices. The site is well-structured with clear navigation and provides essential contact details including phone, email, and social media links. The business model is focused on public service and community engagement within the Czech Republic. Technically, the website uses a custom CMS with modern JavaScript libraries such as jQuery, Bootstrap, and Swiper.js, offering a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of security headers and privacy policy reduces compliance maturity. The lack of WHOIS data from the CZ.NIC registry is a notable gap, impacting domain trust assessment. Overall, the site is professional and trustworthy as a government portal but would benefit from enhanced privacy disclosures and security best practices.

O

Obec Tlumačov

tlumacov.cz

10

Obec Tlumačov operates an official municipal website serving the local community in the Zlínský kraj region of the Czech Republic. The site provides comprehensive information including news, events, public documents, and contact points relevant to residents and visitors. The business model is focused on governmental and community service, positioning itself as a trusted local authority portal. The website is well-branded with consistent municipal logos and regularly updated content, reflecting an active and engaged administration. Technically, the site is built on WordPress with popular plugins such as Yoast SEO and Modern Events Calendar Lite, hosted on a Czech hosting provider. The infrastructure supports good mobile responsiveness and accessibility, with moderate performance. Security posture is solid with HTTPS enabled and no visible sensitive data exposure, though it lacks some security headers and formal security policies. Privacy compliance is partial, with cookie usage disclosed but no explicit privacy policy or consent mechanism. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

M

Město Napajedla

napajedla.cz

45

Město Napajedla operates an official municipal website serving the residents and visitors of the town Napajedla in the Czech Republic. The site provides comprehensive local government information including public notices, event calendars, administrative contacts, and downloadable forms. It targets local citizens seeking municipal services and information. The business model is a government service portal with a focus on transparency and community engagement. The website is well-structured with consistent branding and good content quality, reflecting a small-sized government entity.

APSIS Lead operates as a technology-driven marketing platform specializing in lead management and marketing automation, providing users with a secure login portal. The website content is minimal, focusing primarily on user authentication without public-facing business or compliance information. The technical infrastructure leverages common web technologies including JavaScript, jQuery, Google Fonts, and tracking tools such as Google Analytics and ProspectEye. Hosting and domain registration are managed through reputable providers, with the domain established in 2015, aligning with the company's operational timeline. From a security perspective, the site employs basic best practices such as form POST methods and domain status locks to prevent unauthorized domain changes. However, it lacks DNSSEC, visible security headers, and explicit HTTPS enforcement details, indicating potential areas for security enhancement. Privacy and cookie policies are absent, which may impact GDPR compliance and user trust. No incident response or security contact information is provided, limiting transparency in security governance. Overall, the website presents a moderate risk profile with no critical vulnerabilities detected but notable gaps in privacy compliance and security hardening. The absence of contact information and policies reduces business credibility and user confidence. Strategic improvements in security headers, privacy disclosures, and user communication channels are recommended to elevate trust and compliance standards.

T

TruMerit

trumerit.org

57

TruMerit is a leading healthcare credential evaluation and certification organization with a global focus on nursing and allied health professionals. The company offers a comprehensive suite of services including credentials evaluation, verification, certification, and document management, targeting healthcare workers, recruiters, licensing authorities, and academic institutions worldwide. The website reflects a mature digital presence with multiple portals tailored for different user groups and a strong emphasis on research and thought leadership. Technically, the site is built on WordPress with modern analytics and marketing tools integrated, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and anti-spam measures in place, though explicit security headers could be improved. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, TruMerit presents a professional, trustworthy, and well-maintained online presence suitable for its healthcare industry role.

K

Kenya Diaspora Alliance

kenyadiasporaalliance.org

46

Kenya Diaspora Alliance (KDA) is a registered trust and federation representing over sixty diaspora organizations with a combined membership of approximately 300,000 Kenyans worldwide. The organization focuses on advocacy, investment facilitation, and community networking for the Kenyan diaspora. Their website reflects a mature and established entity with a clear mission and active partnerships. Technically, the site is built on WordPress using Elementor and integrates anti-spam and multimedia features, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and anti-spam measures, though lacking some security headers and GDPR cookie consent mechanisms. WHOIS data confirms domain legitimacy and appropriate age, supporting the organization's credibility. Overall, the site is professional, trustworthy, and serves its target audience effectively.

T

Tropical Health and Education Trust (THET)

globalhealthpartnerships.org

70

The Tropical Health and Education Trust (THET) operates as a UK-based non-profit organization dedicated to supporting health workers globally through partnerships, grant management, policy work, and volunteer programs. The website positions THET as an established entity with a clear mission and vision focused on universal health coverage and quality healthcare access worldwide. The organization targets health professionals, donors, volunteers, and policy makers, leveraging partnerships and digital transformation to advance its goals. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Hotjar, and Google reCAPTCHA for security and analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some improvements in security headers and cookie consent mechanisms could enhance compliance and security posture. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, with no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security headers and incident response information suggests room for improvement. WHOIS data is unavailable due to privacy protection, which is common and justified for non-profits, but it slightly reduces trust signals. Overall, the website is professional, trustworthy, and well-maintained, with strong content quality and business credibility. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security policies to further strengthen compliance and user trust.

K

Kenyan Nurses And Midwives Association

kenmauk.org

45

Kenyan Nurses And Midwives Association (KENMA-UK) is a professional association dedicated to supporting Kenyan nurses and midwives who have relocated to the United Kingdom. The organization focuses on empowering its members through professional development, advocacy, networking, and well-being initiatives. The website serves as a hub for membership registration, event information, news updates, and resources tailored to the Kenyan nursing diaspora in the UK. The association operates on a membership-based model with multiple tiers including standard, student, retired nurse, pre-registered nurse, and women's health forum memberships. Technically, the website is built on WordPress using Elementor for design and WooCommerce for e-commerce functionality, supplemented by plugins for memberships, donations, and event management. The site is mobile-optimized and performs moderately well, with a clean and professional design. Security measures include HTTPS enforcement and domain transfer protection, though DNSSEC is not enabled and some security headers are missing. No privacy or cookie policies were found, indicating room for improvement in compliance. The security posture is adequate but could be enhanced by enabling DNSSEC, adding security headers, and publishing a security policy or incident response contact. The absence of privacy and cookie policies suggests potential GDPR compliance gaps. Contact information is clearly provided, including a UK physical address, email, and phone number, enhancing business credibility. Overall, the website presents a trustworthy and professional image suitable for its niche audience. Strategic improvements in privacy compliance and security practices would further strengthen its position and user trust.

G

Ghana Nurses Association

gna-uk.org

50

Ghana Nurses Association UK is a well-established non-profit organization dedicated to supporting Ghanaian nurses and midwives in the UK, particularly Internationally Educated Nurses and Midwives (IENMs). The website reflects a mature community-focused entity with a 30-year history, offering pastoral support, educational resources, events, and advocacy. The digital presence is built on a WordPress platform with modern plugins and tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and GDPR compliance, though there is room for improvement in security headers and explicit incident response policies. Overall, the website is professional, trustworthy, and aligned with its mission to support healthcare professionals from Ghana in the UK.

M

ML Promotion s.r.o.

mlpromotion.cz

45

ML Promotion s.r.o. is a Czech-based small creative agency founded in 2016, specializing in marketing, web development, graphic design, and multimedia services. The company targets local businesses seeking comprehensive digital marketing and creative solutions. Their website is professionally designed with clear navigation and good mobile optimization, reflecting a mature digital presence. Technically, the site is built on WordPress using Elementor and integrates modern tools such as Cloudflare Turnstile captcha for form security and Google Analytics for tracking. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with a clear privacy policy and cookie management. Contact information is complete and transparent, enhancing business credibility.

V

VINAŘSTVÍ OBELISK s.r.o.

vinarstviobelisk.cz

49

Winery Obelisk is a small Czech winery located in Valtice, focusing on traditional and ecological wine production inspired by classical antiquity and regional heritage. The company offers wine production, tasting, and event hosting services, targeting wine enthusiasts and event organizers. The website is built on Joomla CMS with modern web technologies and includes privacy and cookie consent mechanisms, reflecting a moderate level of digital maturity. Security posture is good with HTTPS and no exposed sensitive data, though security headers and incident response info are lacking. The absence of WHOIS data limits domain legitimacy verification, but the website content and business information appear professional and trustworthy. Overall, the site is suitable for mature audiences interested in wine and winery experiences.

V

Vinařství Procházka Valtice

valtickavina.cz

65

Vinařství Procházka Valtice is a well-established family-owned winery based in the Czech Republic, specializing in the production and sale of quality Moravian wines. Founded in 1999, the company operates on 73 hectares of vineyards and produces up to 350,000 bottles annually. Their business model combines traditional wine production with modern technology, selling directly to consumers via an e-shop and a physical wine shop in Valtice. The website reflects a professional and consistent brand image, targeting wine consumers primarily within the Czech Republic. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, and implements appropriate mechanisms such as cookie consent and age verification for alcohol sales. Security posture is solid with HTTPS and reCAPTCHA, though some improvements in security headers and published policies are recommended. Overall, the website is trustworthy and well-positioned in its market niche.

O

Obec Lednice

lednice.cz

47

Obec Lednice operates an official municipal website serving the residents and visitors of Lednice, Czech Republic. The site provides comprehensive information about local government, community news, official notices, tourism, and events. It positions itself as a trusted source for municipal information and services, targeting local citizens and tourists alike. The website demonstrates a consistent brand identity with official logos and regularly updated content, reflecting an active municipal administration.

M

Malovaný kraj, z.s.

malovanykraj.cz

43

Malovaný kraj, z.s. is a small non-profit cultural association dedicated to preserving and promoting the traditional folk culture of the Slovácko region through its ethnographic magazine. The website serves as an informational portal for the association, its magazine, and related cultural activities. The technical infrastructure is based on Joomla CMS with common JavaScript libraries, providing basic but functional user experience. Security posture is moderate with some best practices like CSRF tokens but lacks visible security headers and HTTPS confirmation in the provided data. The absence of WHOIS data and privacy/cookie policies reduces trust and compliance posture. Overall, the site is safe, culturally focused, and accessible but would benefit from enhanced security and privacy measures.

ALFASHOOTING.cz is a Czech Republic-based small business specializing in organizing corporate shooting events and providing shooting training for pistols, rifles, and shotguns. The company also promotes tactical and outdoor equipment through an affiliated e-commerce platform, alfatactical.cz. The website is professionally designed using the adSYSTEM CMS and incorporates jQuery and Google Translate for multilingual support. The site is accessible and mobile-optimized, with clear navigation and relevant content for its target audience of shooting enthusiasts and corporate clients. However, the absence of WHOIS registration data limits the ability to fully verify domain legitimacy. Security posture is moderate, with cookie consent implemented but lacking explicit security headers and incident response contacts. Privacy compliance is basic but present, with a privacy policy and cookie policy accessible. Overall, the website presents a trustworthy and professional front for a niche local business but would benefit from enhanced security and transparency measures.

X

Xmarton

xmarton.sk

10

Xmarton is a Slovakian technology company specializing in automotive security and mobile control solutions. Their website presents a professional and consistent brand focused on helping car owners manage and secure their vehicles remotely. The business appears to be a small-sized niche player founded around 2017, with a clear target audience of car owners seeking convenience and security enhancements. Technically, the website is built on WordPress using popular plugins and frameworks, integrating modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for consent management. The site enforces HTTPS and uses Google reCAPTCHA to secure forms, reflecting a moderate security posture. However, it lacks explicit privacy policies, terms of service, and direct contact information, which are areas for improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

H

Humans of UX

humansofux.com

51

Humans of UX is a community-driven project focused on mapping and surveying UX professionals in Slovakia and Czechia. The website serves as a platform to collect data on UX trends, tools, education, and work conditions in the region. It targets UX professionals and aims to provide insights into the local UX market. Technically, the site is built on Webflow CMS, hosted on Webflow's CDN, and uses common web technologies including Google Analytics and Tag Manager for tracking. The site is mobile-optimized and has a professional design with clear navigation. Security-wise, the site enforces HTTPS and uses secure form submissions to third-party email marketing services. However, it lacks visible security headers, privacy and cookie policies, and vulnerability disclosure mechanisms. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the active and professional website presence. Overall, the site is functional and trustworthy for its intended audience but would benefit from improved transparency and security practices.

D

dTest, o.p.s.

dtest.cz

45

dTest, o.p.s. is a well-established Czech non-profit organization specializing in independent consumer product testing, advice, and protection of consumer rights. The website serves as a comprehensive platform offering product test results, consumer advice, subscription services, and various tools to assist consumers in making informed decisions. It holds a strong market position as the largest Czech consumer organization with over 30 years of operation. Technically, the website employs modern JavaScript libraries, integrates Google Tag Manager and Facebook SDK for analytics and marketing, and implements a GDPR-compliant cookie consent mechanism. The site is well-optimized for mobile devices and provides a professional user experience with clear navigation and rich content. Security-wise, the site uses HTTPS with good SSL configuration and basic security headers but lacks advanced security policies and incident response information. The absence of WHOIS data limits domain registration transparency but does not detract significantly from the site's credibility given its extensive content and business presence. Overall, the website demonstrates a mature digital presence with strong privacy compliance and trustworthy business practices.

ESO travel operates a professional Slovak travel agency website specializing in exotic and cultural vacations to destinations such as Thailand, China, Cuba, and the USA. The website presents a broad portfolio of travel packages including last minute and first moment offers, supported by a clear navigation structure and multilingual options. Technically, the site uses modern frameworks like Foundation and jQuery, integrates Google Analytics and Tag Manager for marketing insights, and employs a comprehensive cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and standard security headers present, although explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-maintained, and suitable for its target audience of Slovak travelers seeking exotic holidays.

Č

ČSOB Pojišťovna

csobpoj.cz

66

ČSOB Pojišťovna is a well-established insurance company operating in the Czech Republic, offering a broad range of insurance products including property, health, and pension insurance. The website reflects a professional and trustworthy brand image consistent with its market position as part of the ČSOB financial group. The digital infrastructure is built on modern technologies such as React and Liferay CMS, supported by Adobe Launch for marketing and analytics, and OneTrust for cookie consent management. The site is mobile optimized and accessible, providing a good user experience for its target audience. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes standard security headers, indicating a solid security posture. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR adherence. However, explicit security policies and incident response information are not publicly available, and no vulnerability disclosure or security.txt file was found. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The absence of WHOIS data is attributed to privacy protection, which is justified for a financial services entity. Strategic recommendations include publishing explicit security policies, adding vulnerability disclosure mechanisms, and continuous monitoring of third-party scripts to maintain security integrity.

R

Růžový EDEN

ruzovy-eden.cz

45

Růžový EDEN is a Czech-based online florist specializing in high-quality flower bouquets, including large 100-rose arrangements, wedding decorations, and gift floral services. The company emphasizes freshness, quality, and social responsibility by donating a portion of sales to charitable organizations. The website is built on the PrestaShop platform, featuring a modern e-commerce infrastructure with responsive design and SEO-friendly structured data. Security posture is solid with HTTPS and anonymized analytics, though some security headers and explicit policies could be improved. Contact information is clearly presented, supporting customer trust and engagement. Overall, the site is professional, trustworthy, and well-positioned in the Czech retail flower market.

N

Na kole dětem

nakoledetem.cz

48

Na kole dětem is a Czech non-profit organization focused on supporting children with oncological diseases through sports-related fundraising events, primarily cycling tours. The website presents a professional and well-structured platform showcasing their activities, partners, and latest news. The organization has a strong partnership ecosystem including healthcare associations and corporate sponsors, indicating a solid market position within the charitable sector. Technically, the website is built on WordPress with modern plugins such as WooCommerce and Elementor, and uses Google Analytics for visitor tracking. Security posture is adequate with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies, which are recommended for compliance and trust. The absence of WHOIS data limits domain trust assessment, but the website content and partner references support legitimacy. Overall, the site is suitable for its purpose but could improve privacy compliance and security transparency.

N

Navigo Solutions s.r.o.

navigo3.com

11

Navigo Solutions s.r.o. operates the Navigo3 platform, a comprehensive project and company management software solution primarily targeting small to large businesses in creative and project-driven industries. The website presents a professional and well-structured digital presence, offering detailed information about their software capabilities, customer testimonials, and multiple contact channels. The company has established itself since 2012, with a consistent domain registration and a clear focus on delivering SaaS solutions for project management, financial oversight, human resources, and firm-wide information systems. The platform supports multiple languages and integrates modern web technologies to enhance user experience and accessibility. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, reCAPTCHA, and GDPR compliance plugins. Hosting is provided via Amazon AWS infrastructure, ensuring reliable performance and scalability. SEO and accessibility are well addressed, with proper meta tags, structured data, and mobile optimization. The site employs cookie consent mechanisms and privacy policies aligned with GDPR requirements. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA to protect forms, and implements cookie consent management. However, DNSSEC is not enabled, and some security headers are not explicitly detected, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found in the analysis. The domain registration is consistent with the business claims, and no suspicious patterns were detected, indicating a trustworthy and legitimate online presence. Overall, Navigo3's website demonstrates a mature digital footprint with strong business credibility, good technical implementation, and solid privacy and security practices. The site is safe for general audiences and provides a professional user experience. Strategic recommendations include enabling DNSSEC, enhancing security headers, and publishing a vulnerability disclosure policy to further strengthen security posture and trust.

F

Farma Ráječek

farmarajecek.cz

49

Farma Ráječek is a small, family-run local farm based near Brno, Czech Republic, specializing in the cultivation and sale of fresh vegetables such as salads and tomatoes. The business emphasizes ecological and sustainable farming practices, serving local consumers, restaurants, and retail outlets. The website reflects a well-structured, content-rich platform with clear branding and a focus on local community engagement. Technically, the site uses modern front-end libraries including jQuery, Bootstrap 4, and AOS for animations, hosted by a Czech hosting provider, and includes Google Analytics for visitor tracking. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. Overall, the domain registration data aligns well with the business history, indicating legitimacy and trustworthiness.

H

Health Orientation Kft.

managedoc.com

55

ManageDoc is a Hungarian-based healthcare technology company offering an online medical appointment scheduling system tailored for individual practitioners and medical institutions. The platform facilitates efficient appointment management through a web-based interface and integrates with partner sites such as MeetDoc.com to enhance patient acquisition. The website is built on WordPress with Bootstrap and includes modern UI elements and tracking via Google Analytics and Tag Manager. Security posture is moderate with SSL encryption but lacks some security headers and cookie consent mechanisms. WHOIS data for the subdomain is unavailable, which is expected, but the main domain appears legitimate with consistent business information. Overall, the platform presents a professional and trustworthy service for healthcare providers in Hungary.

D

Digital Journal Inc

digitaljournal.com

65

Digital Journal Inc operates a global media platform that elevates voices in the news cycle, with a strong presence online since 1998. The website serves as a content partner and news publisher, targeting a general audience interested in world news, business, technology, entertainment, and lifestyle. The company maintains a professional brand image with consistent branding and a comprehensive content offering. Technically, the site is built on WordPress CMS, leveraging modern optimization tools such as WP Rocket and Google Tag Manager, ensuring fast performance and excellent mobile optimization. Security posture is good with HTTPS enforced, but lacks some advanced security headers and explicit incident response contacts. Privacy compliance is partially met with a comprehensive privacy policy and terms of use, but lacks a cookie consent mechanism. Overall, the site is trustworthy and professional but could improve transparency and security practices.

Jihočeské nemocnice is a regional healthcare network serving the South Bohemian region of the Czech Republic, providing advanced medical services and efficient financial management. The website presents information about their hospitals, healthcare services, and career opportunities, targeting residents and healthcare professionals in the region. The domain is well-established since 2006, supporting the legitimacy of the organization. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, incorporating modern web technologies such as Google Tag Manager and CookieYes for cookie consent management. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Performance is moderate, with room for improvement in SEO and accessibility. From a security perspective, the site uses HTTPS and implements a detailed cookie consent mechanism, but lacks visible security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with no explicit privacy policy or terms of service pages found. Contact information is not clearly presented on the homepage. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security documentation, improved accessibility, and clearer contact details to strengthen compliance and user trust.

The World Organization of Family Doctors (WONCA) operates a comprehensive and professionally designed website serving as a global hub for family doctors and related healthcare professionals. The site offers extensive resources including membership information, conferences, clinical resources, and advocacy materials. It targets a global audience of medical professionals and member organizations, positioning itself as a leading non-profit entity in the healthcare sector. The website demonstrates strong branding consistency and high content quality, supporting its role as a trusted information source in family medicine. Technically, the website employs a mature technology stack including ASP.NET WebForms, Pegboard CMS, jQuery, and Google Analytics, ensuring a modern and responsive user experience. The site is mobile optimized and accessible, with good SEO practices and clear navigation. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and publicly available incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data for the domain introduces some uncertainty regarding domain legitimacy, although the website content and external references strongly support its authenticity. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements in security header implementation and transparency around incident response would enhance its security posture and trustworthiness.

Česká Gynekologická a Porodnická Společnost (ČGPS) is a well-established professional association based in the Czech Republic, serving healthcare professionals specializing in gynecology and obstetrics. Founded in 2001, the organization provides a platform for medical professionals including doctors and pharmacists to collaborate, share knowledge, and participate in events. The website reflects this mission with comprehensive event calendars, publications, and member resources, targeting healthcare professionals in the region. The business model is non-profit and focused on professional development and community building within the healthcare sector. Technically, the website is built on WordPress 6.8.3 using the Yootheme theme and UIkit framework, supplemented by plugins such as The Events Calendar and Complianz GDPR for compliance and event management. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured data for events. From a security perspective, the site enforces HTTPS and employs a GDPR-compliant cookie consent mechanism. While no explicit security headers were detected, the site avoids exposing sensitive data and uses reputable plugins to manage privacy and consent. There is no evidence of vulnerabilities or malicious content. The WHOIS data confirms domain legitimacy with a long registration history consistent with the organization's founding date. Overall, the website presents a professional, trustworthy, and compliant digital presence for a healthcare professional association. It effectively serves its target audience with relevant content and functional features. Strategic improvements in security headers and explicit security policies could further enhance its security posture and trustworthiness.

F

Fundación ONCE

fundaciononce.es

66

Fundación ONCE is a prominent Spanish non-profit organization dedicated to the social inclusion and cooperation for people with disabilities. It operates under the Grupo Social ONCE umbrella and provides a wide range of services including training, employment support, accessibility innovation, and international cooperation. The website reflects a mature and professional digital presence with comprehensive content and strong branding consistency. Technically, the site is built on Drupal CMS with modern web technologies and integrates multiple analytics and marketing tools while maintaining good privacy compliance and security posture. Security best practices such as HTTPS, security headers, and cookie consent mechanisms are implemented, although there is room for improvement in incident response transparency and vulnerability disclosure. Overall, the website is trustworthy, well-maintained, and aligned with its mission and audience.