Security Directory

A

Agentura ochrany přírody a krajiny České republiky

dppalava.cz

52

Dům přírody Pálavy operates as a visitor and educational center for the Pálava Protected Landscape Area under the auspices of the Czech government agency Agentura ochrany přírody a krajiny České republiky. The website provides information about the natural diversity of the region, educational programs, exhibitions, events, and a souvenir shop. The target audience includes general visitors, nature enthusiasts, and schools. Technically, the site uses a proprietary CMS (Vizus CMS), integrates Google Analytics and Tag Manager for traffic analysis, and implements a cookie consent mechanism. The site is mobile-optimized with good navigation and content relevance. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit privacy policies. WHOIS data is missing, which reduces domain trustworthiness, but the website's government affiliation supports legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy transparency.

R

Regionální muzeum v Mikulově

archeoparkpavlov.cz

42

Archeopark Pavlov is a specialized cultural and historical museum located in the Czech Republic, focusing on prehistoric mammoth hunters and the Gravettian culture. The site offers modern exhibitions, educational programs, and virtual tours, managed by the Regional Museum in Mikulov. The website reflects a well-structured and content-rich platform targeting general visitors, schools, and researchers interested in prehistory. Technically, the site uses established frameworks such as Nette and jQuery, integrates Google Maps and Analytics, and implements email obfuscation and cookie consent mechanisms to enhance privacy and user experience. Security posture is moderate with room for improvement in HTTP security headers and explicit privacy policies. The absence of WHOIS data reduces domain trust from a registration perspective, but the website's content and external references support its legitimacy. Overall, the site is professional, user-friendly, and compliant with basic privacy standards.

A

Affidea

affidea.com

74

Affidea is a leading European healthcare provider specializing in advanced diagnostic imaging and outpatient services, operating over 315 centers across 15 countries. The company focuses on delivering personalized, high-quality care through a network of specialized medical experts and state-of-the-art technology. Their services include MRI, CT, X-Ray, Ultrasound, Mammography, Nuclear Medicine, PET/CT, laboratory analysis, and outpatient specialty consultations. The website reflects a large, well-established healthcare network with a strong presence in multiple European markets. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and integrates multiple analytics and tracking tools including Google Analytics, Microsoft Application Insights, LinkedIn Insight Tag, and Facebook Pixel. The site is mobile-optimized with good SEO practices and moderate performance. Security-wise, HTTPS is enforced and some security best practices are observed, though explicit security headers and incident response information are lacking. The WHOIS data is notably absent, with no registrar or creation date information available, which raises some concerns about transparency. However, the professional presentation, extensive contact information, and multi-country presence support the legitimacy of the business. Privacy and cookie policies are not detected in the provided content, indicating an area for compliance improvement. Overall, the website is professional and trustworthy from a business and content perspective but could enhance its privacy compliance and security posture to align with best practices and regulatory requirements.

I

IDENTITY – grafické studio & agentura

identity.cz

43

IDENTITY is a Czech graphic design studio and agency based in Pardubice, specializing in corporate identity and branding services, with a strong portfolio showcasing diverse projects. The website is professionally designed using WordPress with the Yootheme theme and UIkit framework, providing a good user experience and mobile optimization. The technical infrastructure includes modern analytics and tracking tools such as Google Analytics and Facebook Pixel, with standard security measures like HTTPS and reCAPTCHA implemented. However, some security headers and explicit security policies are missing, which could be improved to enhance security posture. Overall, the website is legitimate, trustworthy, and compliant with basic privacy regulations, though it lacks terms of service and incident response information.

M

Model Obaly a.s.

packshop.cz

58

Packshop.cz is a well-established Czech e-commerce platform specializing in the sale of cardboard boxes, packaging materials, adhesive tapes, and related products. Operated by Model Obaly a.s., a company with over 30 years of experience and own manufacturing capabilities, the website serves both small and large business customers as well as retail buyers. The platform offers a comprehensive product catalog, loyalty programs, and co-packing services, positioning itself as a trusted supplier in the packaging industry within the Czech Republic. Technically, the website employs modern web technologies including jQuery, Bootstrap, and various analytics and marketing tools, ensuring a responsive and user-friendly experience. Privacy and cookie policies are implemented with GDPR compliance and user consent mechanisms. Security posture is solid with HTTPS enforced and secure form handling, though improvements in security headers are recommended. Overall, the website demonstrates a professional, trustworthy, and mature digital presence aligned with its business operations.

P

PROSAZ

prosaz.cz

43

PROSAZ is a Czech non-profit organization dedicated to supporting people with disabilities through a variety of services including personal assistance, caregiving, employment support, and protected workshops. With a history spanning approximately 30 years, PROSAZ has established itself as a reputable entity in the social services sector in the Czech Republic. The website reflects a mature digital presence with comprehensive content, donation options, and employee stories that enhance trust and engagement. Technically, the site is built on WordPress using the Jupiter theme and WPBakery Page Builder, leveraging modern web technologies and Google services for fonts and maps. Security posture is adequate with HTTPS and captcha-protected contact forms, though it lacks some advanced security headers. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanisms. The absence of WHOIS data suggests domain privacy protection, which is common for organizations but slightly reduces transparency. Overall, PROSAZ presents a professional and trustworthy online presence aligned with its mission and audience.

Země Světa is a well-established Czech travel magazine with a strong online presence, including an e-commerce shop and subscription services. The website targets a broad audience interested in travel and culture, offering monothematic monthly issues and related products. The business is positioned as a niche media provider with a history dating back to 2002, supported by consistent branding and active social media channels. Technically, the site is built on WordPress with WooCommerce, leveraging modern themes and SEO tools, and is hosted with Cloudflare DNS services. The site demonstrates good mobile optimization and accessibility, with moderate performance. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks explicit security headers and incident response information. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the site is professional and trustworthy but could improve transparency and compliance aspects.

B

Bluetech s.r.o.

bluetech.cz

62

Bluetech s.r.o. is a well-established Czech manufacturer specializing in the design and production of conveyor systems, including belt and chain conveyors, for a variety of industrial and agricultural applications. The company offers custom solutions tailored to client needs, supported by consulting, manufacturing, installation, and after-sales service. Their market position is that of a traditional, trusted supplier within the Czech Republic, supported by recognized ISO certifications that underscore their commitment to quality and environmental management. Technically, the website employs a modern set of analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Ahrefs Analytics, integrated via Google Tag Manager. The site is served over HTTPS with a cookie consent mechanism in place, indicating a baseline level of privacy compliance. The technical implementation is solid with good mobile optimization and SEO practices, although some security headers appear to be missing, which could be improved. From a security perspective, the site demonstrates good practices like HTTPS enforcement and cookie consent but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of WHOIS data due to privacy protection is typical for this business type and does not raise immediate concerns. Overall, the security posture is moderate with room for enhancement in headers and transparency. The overall risk assessment is low; the company presents a professional and trustworthy online presence with clear business information and certifications. Strategic recommendations include enhancing security headers, publishing detailed security and privacy policies, and establishing a vulnerability disclosure process to further strengthen trust and compliance.

E

Emco spol s.r.o.

myslinazdravi.cz

46

Emco spol s.r.o. operates a website focused on promoting its food products that are free from palm oil, including musli, mysli, oat porridges, cookies, bars, and other cereal products. The company emphasizes health benefits and sustainability by replacing palm oil with domestic rapeseed oil since 2014. The website targets health-conscious consumers in the Czech Republic and positions Emco as a reputable brand in the retail food sector. The domain is well-established since 2008, consistent with the company's history. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, with Google Tag Manager for analytics. The site is moderately optimized for mobile devices and SEO but lacks advanced accessibility features. Hosting appears to be with REG-ZONER, a Czech registrar and hosting provider. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS (assumed from URL), but no explicit security headers were detected in the provided data. There are no visible vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, as well as contact information, reduces the site's compliance with GDPR and general transparency. No incident response or vulnerability disclosure information is provided. Overall, the website is professional and trustworthy in terms of content and business legitimacy but lacks important privacy and security disclosures. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and compliance posture.

T

Trigama International s.r.o.

trigama.eu

61

Trigama International s.r.o. is a Czech Republic based medium-sized IT services company specializing in custom mobile and web application development, corporate online education, IT outsourcing, and digital transformation solutions. The company targets corporate clients and educational institutions, offering a comprehensive portfolio of services including custom development, LMS, e-learning, and consulting. The website reflects a professional and consistent brand image with strong client references and partner relationships. Technically, the site employs modern tracking and marketing technologies such as Google Analytics, Google Tag Manager, and Leady, with appropriate privacy and cookie consent mechanisms in place. Security posture is solid with HTTPS enforced and reCAPTCHA protecting contact forms, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is well-structured, user-friendly, and trustworthy, supporting the company's market position as a reputable IT service provider.

D

DPD

dpd.cz

70

DPD is a leading European parcel delivery company operating in the Czech Republic as part of the Geopost group. The website offers comprehensive parcel shipping, tracking, and pickup services targeting both individual and business customers. It maintains a strong market position with a wide network of pickup points and boxes across Europe. The digital infrastructure is built on WordPress with modern technologies such as jQuery, Bootstrap, and FontAwesome, providing a responsive and user-friendly experience. Security practices include HTTPS enforcement, cookie consent mechanisms, and user warnings about phishing scams, reflecting a mature security posture. However, the absence of WHOIS data transparency and lack of explicit security policies or vulnerability disclosure programs represent areas for improvement. Overall, the website is professional, trustworthy, and well-optimized for its business purpose.

F

Fakultní nemocnice v Motole

fnmotol.cz

46

Fakultní nemocnice v Motole is the largest healthcare institution in the Czech Republic and among the largest in Europe, offering extensive medical services including hospitalization, clinics, and specialized care such as oncology. The website targets patients, healthcare professionals, and the general public, providing comprehensive information and digital services such as appointment booking and patient resources. The institution maintains a strong market position as a public healthcare provider with a large capacity and workforce. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Complianz GDPR for compliance. It uses jQuery and other libraries for interactive features and multimedia content. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. The presence of cookie consent and privacy policies indicates good digital maturity. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and explicit security policies or incident response contacts. No vulnerabilities or suspicious content were detected. The WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and official contact details support its legitimacy. Overall, the site demonstrates a high level of professionalism, compliance, and user experience, with recommendations to enhance security headers, publish security policies, and consider vulnerability disclosure mechanisms to further strengthen trust and security posture.

K

Kastner & Pieš, advokátní kancelář s.r.o.

kastnerpies.cz

67

Kastner & Pieš, advokátní kancelář s.r.o. is a Czech law firm specializing in legal advisory services primarily for the life sciences, healthcare, technology, and real estate sectors. The firm offers a broad range of services including compliance, corporate law, GDPR and data protection, IT and technology law, labor law, and legislative consulting. Their target audience includes pharmaceutical companies, healthcare providers, technology startups, marketing firms, and private clients. The firm positions itself as a trusted partner for both local and international clients, emphasizing expertise in complex regulatory environments and cross-border projects. Technically, the website is built on WordPress and leverages modern web technologies such as jQuery, Google Tag Manager, Google Analytics, and Google reCAPTCHA to ensure functionality, analytics, and security. The site is well-optimized for mobile devices, features a professional design, and includes comprehensive cookie and privacy policies that comply with GDPR requirements. Contact mechanisms include email, phone, and a secure contact form with CAPTCHA protection. From a security perspective, the site uses HTTPS with a strong SSL configuration and employs reCAPTCHA to protect forms from abuse. Cookie consent is managed with a detailed banner allowing granular user control. However, the site lacks some advanced security headers which could further enhance protection. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the professional presentation and content quality support a positive trust assessment. Overall, Kastner & Pieš demonstrates a mature digital presence with strong content quality, good technical implementation, and solid privacy compliance. Strategic improvements in security headers and domain registration transparency would further enhance trust and security posture.

I

IPOPI

ipopi.org

42

IPOPI is a well-established non-profit international organization dedicated to representing and supporting primary immunodeficiency (PID) patients worldwide. The website clearly targets patients, healthcare professionals, and stakeholders in the immunology field, providing advocacy, education, and research support. The organization has a consistent brand presence and a professional website that reflects its mission and services. Technically, the website is built on WordPress using the Enfold theme, hosted by Scaleway SAS, and incorporates modern tools such as Cookiebot for consent management and Matomo alongside Google Analytics for visitor tracking. The site is mobile-optimized and SEO-friendly with structured data enhancing search visibility. Security-wise, the site enforces HTTPS and uses clientTransferProhibited status on the domain, but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy policy or terms of service were detected in the provided content, which is a compliance gap. Overall, the website is trustworthy, professional, and compliant with cookie consent regulations but could improve transparency and security posture by publishing privacy and security policies and implementing additional security headers.

E

EURORDIS-Rare Diseases Europe

eurordis.org

71

EURORDIS-Rare Diseases Europe is a well-established non-profit organization dedicated to advocating for and empowering people living with rare diseases across Europe. The website reflects a professional and comprehensive digital presence, targeting patients, healthcare stakeholders, and advocacy groups. The organization provides resources, engagement opportunities, and information to support its mission. Technically, the website is built on WordPress with modern plugins and analytics tools, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. The absence of WHOIS data limits full domain legitimacy verification, but the overall site quality and trust indicators suggest a credible entity. Strategic recommendations include enhancing security headers, publishing incident response contacts, and maintaining up-to-date software.

LYMFOM HELP, z.s. is a Czech non-profit patient organization established in 2005 that supports patients with malignant lymphoma, their families, and friends. The website provides extensive educational content, patient stories, event information, and charity initiatives aimed at improving patient quality of life and awareness. The organization appears well-established within its niche healthcare sector in the Czech Republic. Technically, the website uses modern web technologies including Bootstrap, jQuery, Kendo UI, and Google Analytics, hosted on a platform likely based on ASP.NET Web Forms. The site is mobile-optimized with good navigation and content relevance. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks some security headers and explicit privacy/cookie policies. WHOIS data is missing, which reduces domain trustworthiness, but the website content and external references support legitimacy. Overall, the site is a valuable resource for lymphoma patients in the Czech Republic but should improve privacy compliance and security headers.

R

Royal College of Midwives

rcm.org.uk

63

The Royal College of Midwives (RCM) is a well-established professional organization and trade union dedicated to supporting midwifery professionals across the UK. Founded in 1997, the RCM provides membership services, professional development, policy advocacy, and workplace support. The website reflects a mature digital presence with a clear focus on healthcare and midwifery sectors, targeting professionals, students, and stakeholders in maternity services. The organization maintains a consistent brand and professional content quality, positioning itself as a trusted authority in its field. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site employs Google Tag Manager for analytics and marketing, integrated with a cookie consent mechanism to comply with privacy regulations. Performance and mobile optimization are good, though accessibility could be improved. Hosting is provided by a reputable UK registrar, and the domain age supports the organization's credibility. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent management. However, explicit security headers are not detected, and there is no visible security or incident response policy published. No vulnerabilities or suspicious content were found in the analysis. Privacy compliance is partial, with cookie consent but lacking a visible privacy policy or terms of service in the provided content. Overall, the RCM website presents a professional, secure, and credible digital presence suitable for its audience. Strategic improvements in security headers, privacy documentation, and accessibility would enhance trust and compliance further.

The Ukrainian Council of Nursing and Midwifery operates as a national public organization focused on the registration, certification, and professional support of nurses and midwives in Ukraine. It aims to integrate Ukrainian healthcare standards with those of the European Union and provides services such as document legalization, language courses, and professional examinations. The website is multilingual, targeting healthcare professionals and students within Ukraine and abroad. Technically, the site is built on WordPress using Elementor, hosted by a reputable registrar, and employs HTTPS for secure communications. However, it lacks advanced security headers and privacy compliance documentation, which are areas for improvement. The security posture is moderate, with no detected vulnerabilities or blocking mechanisms. Overall, the site presents a professional image but would benefit from enhanced privacy and security policies to increase trust and compliance.

A

Anadolu Ebeler Derneği

anadoluebelerdernegi.org

57

Anadolu Ebeler Derneği is a Turkish non-profit professional association dedicated to midwives, providing professional support, legal consultancy, educational commissions, and organizing events and projects related to midwifery. The organization maintains a strong presence in Turkey and is affiliated with the European Midwives Association, enhancing its credibility and international connections. The website is well-structured, professionally designed, and mobile-optimized, offering clear navigation and relevant content for its target audience of healthcare professionals and families. Technically, the website employs modern web technologies including Bootstrap, jQuery, Owl Carousel, and SweetAlert2, hosted behind Cloudflare for DNS and CDN services. The site uses HTTPS with domain transfer protection enabled, though DNSSEC is not activated. Performance is moderate with room for improvement in accessibility and SEO. Analytics are implemented via Google Analytics and Google Tag Manager, with moderate user tracking. Security posture is adequate with HTTPS and transfer lock, but lacks advanced security headers and a vulnerability disclosure policy. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Contact information is clearly provided, including a contact form, email, and physical address, supporting business credibility. Overall, the website is a trustworthy and professional platform for the association, but should improve privacy compliance and security disclosures to enhance user trust and regulatory adherence.

S

Svenska Barnmorskeförbundet

barnmorskeforbundet.se

52

Svenska Barnmorskeförbundet is a well-established professional association for midwives and midwifery students in Sweden, with a history dating back to 1886. The organization focuses on promoting professional development, knowledge advancement, and research within reproductive, perinatal, and sexual health. Their website serves as a hub for members and the public, offering information about the association, membership, publications, events, and advocacy positions. The site is professionally designed, mobile-optimized, and provides clear navigation and relevant content tailored to its target audience of healthcare professionals in midwifery.

A

ASOCIAȚIA MOAȘELOR INDEPENDENTE

moasele.ro

44

ASOCIAȚIA MOAȘELOR INDEPENDENTE is a Romanian non-profit organization dedicated to supporting women in their reproductive health choices and promoting the midwifery profession aligned with European standards. The organization offers free prenatal and postnatal courses, helpline services, breastfeeding consultancy, and advocates for respectful birth practices. Their website is professionally designed, content-rich, and targets pregnant women, new mothers, midwives, and healthcare professionals. Technically, the site is built on WordPress with modern plugins for SEO, e-commerce, and marketing, hosted likely on Romanian providers. Security posture is adequate with HTTPS enabled but lacks explicit security headers and documented security policies. Privacy compliance is partial due to missing privacy and terms of service pages, though a cookie consent mechanism is present. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the organization.

S

Stowarzyszenie Dobrze Urodzeni

dobrzeurodzeni.pl

43

Stowarzyszenie Dobrze Urodzeni is a Polish non-profit organization dedicated to supporting parents by providing comprehensive information and resources related to childbirth. The website serves as an educational platform to alleviate fears and answer questions about childbirth, targeting parents and families primarily in Poland. The organization appears to be relatively young, with content dating back to 2021, and maintains a consistent and professional online presence including social media engagement via Facebook. Technically, the website is built on WordPress using the Kadence theme and WooCommerce plugin, although e-commerce functionality is not prominently featured on the homepage. The site demonstrates good SEO practices, mobile optimization, and basic accessibility features. Cookie consent mechanisms are implemented, reflecting GDPR compliance awareness. However, some security best practices such as security headers and explicit incident response policies are not evident. From a security perspective, the site uses HTTPS with a good SSL configuration and does not expose sensitive data or vulnerable libraries. No web application firewall or blocking mechanisms were detected, and no critical vulnerabilities were found in the visible content. The absence of WHOIS data limits the ability to fully verify domain registration legitimacy, but the overall trust signals from the website content and social presence support a positive security posture. Overall, the website is a well-maintained, niche non-profit platform with a clear mission and good technical foundation. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its security and compliance posture.

D

Den norske jordmorforening

jordmorforeningen.no

61

Den norske jordmorforening is a well-established Norwegian midwives' association founded in 1908, serving as a professional body providing advocacy, education, and member services to midwives and related healthcare professionals in Norway. The website reflects a professional and consistent brand presence, targeting midwives, students, and healthcare stakeholders with relevant content, events, and resources. Technically, the site uses eZ Publish CMS with modern web technologies including jQuery, Font Awesome, Google Analytics, and Facebook SDK, delivering a moderately performant and mobile-optimized experience. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust. However, WHOIS data is unavailable, limiting domain registration transparency, though the website's professional content supports legitimacy. Overall, the site is a credible digital presence for a healthcare professional association in Norway.

K

Koninklijke Nederlandse Organisatie van Verloskundigen

knov.nl

64

The Koninklijke Nederlandse Organisatie van Verloskundigen (KNOV) operates as the professional association for midwives in the Netherlands, providing comprehensive support including professional development, advocacy, education, and quality assurance in maternity care. The website reflects a well-established organization with a clear focus on serving its members and the broader healthcare community. The content is relevant, professionally presented, and targeted primarily at midwives and healthcare professionals. The organization maintains a strong market position as the leading body for midwives in the country. Technically, the website employs a moderate technology stack including jQuery, Bootstrap, Google Tag Manager, and a chat widget for user engagement. The site is mobile-optimized with good navigation and SEO practices, although some technical debt is noted with the use of an outdated jQuery version. Performance is moderate, and accessibility features are basic but present. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms, reflecting compliance with GDPR. However, the absence of explicit security policies, incident response contacts, and security.txt files indicates room for improvement in transparency and readiness. The use of an older JavaScript library introduces a minor vulnerability risk. No critical security issues were detected. Overall, the website is trustworthy, professional, and compliant with privacy regulations. Strategic recommendations include updating third-party libraries, publishing detailed security and incident response policies, and enhancing security headers to strengthen the security posture and user trust.

L

Latvijas Vecmāšu Asociācija

vecmasuasociacija.lv

45

Latvijas Vecmāšu Asociācija is a Latvian non-profit professional association representing midwives. The organization focuses on promoting professional growth, defending legal and professional interests, and enhancing the prestige of the midwifery profession in Latvia. The website serves as an information portal for members and the public, providing updates, certification information, and resources. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses SEO best practices via Yoast plugin. It employs Google Analytics and Tag Manager for visitor tracking and has implemented a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The site lacks explicit incident response or security policy pages. Overall, the website is professional, trustworthy, and well-maintained, serving a niche professional community effectively.

I

Irish Nurses & Midwives Organisation

inmo.ie

63

The Irish Nurses & Midwives Organisation (INMO) is Ireland's largest professional nursing and midwifery trade union and association, serving members across all health service areas. The organization provides tailored support, professional development, employment rights advice, and advocacy services to nurses and midwives. The website reflects a strong market position with comprehensive member resources, events, and campaigns, targeting healthcare professionals in Ireland. Technically, the website is built on the DNN CMS platform with modern JavaScript frameworks including Angular 14 and Alpine.js, supported by jQuery libraries. It integrates Matomo analytics and cookie consent mechanisms, demonstrating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. From a security perspective, the site enforces HTTPS and uses anti-forgery tokens in forms, but lacks explicit security headers and documented incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and GDPR compliant, with clear contact information and social media presence enhancing trust. Overall, the site presents a professional, trustworthy, and well-maintained digital presence for a large healthcare union. The main limitation is the absence of WHOIS data, which restricts domain registration trust verification. Strategic recommendations include enhancing security headers, publishing security policies, and obtaining full WHOIS transparency to improve trust and compliance.

M

MTÜ Eesti Ämmaemandate Ühing

ammaemand.org

46

MTÜ Eesti Ämmaemandate Ühing is a national professional association in Estonia representing midwives and midwifery students. The organization focuses on promoting and developing midwifery as a profession, providing education, guidelines, and community support. The website is well-structured, professionally designed, and targets healthcare professionals and families in Estonia. Technically, the site is built on WordPress with modern plugins and themes, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and domain transfer protection, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, but no explicit incident response or security policy is published. Overall, the site is trustworthy and serves its niche effectively.

Unie porodních asistentek, z. s. (UNIPA) is a Czech non-profit professional organization dedicated to supporting midwives and students of midwifery. Established in 2005, it plays a significant role in advancing the profession through education, advocacy, and providing psychological and informational support. The organization targets midwives, students, and parents, positioning itself as a trusted authority in the Czech midwifery sector. The website reflects a professional and consistent brand image with comprehensive content and active engagement through social media and partner collaborations. Technically, the site is built on WordPress with WooCommerce for e-commerce capabilities, leveraging modern frameworks like Bootstrap and plugins for SEO and GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates a mature digital presence suitable for its non-profit mission.

Π

Παγκύπριος Σύνδεσμος Νοσηλευτών και Μαιών (ΠΑ.ΣΥ.Ν.Μ.)

cyna.org

45

The Παγκύπριος Σύνδεσμος Νοσηλευτών και Μαιών (ΠΑ.ΣΥ.Ν.Μ.) is a well-established professional association representing nurses and midwives in Cyprus. The organization provides educational programs, organizes conferences, and represents its members both nationally and internationally. The website reflects a medium-sized non-profit entity with a clear focus on healthcare professionals in Cyprus. The domain age and WHOIS data confirm the legitimacy and long-standing presence of the organization. Technically, the website is built on WordPress with a standard theme and uses common web technologies such as jQuery and CSS3. The site is moderately optimized for mobile and SEO, with a good user experience and clear navigation. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and advanced security headers. Privacy compliance is basic with a privacy policy and cookie consent mechanism present but not fully comprehensive or explicitly GDPR compliant. Contact information and social media presence are clearly provided, enhancing business credibility.

H

Hrvatska Komora Primalja

komora-primalja.hr

57

Hrvatska Komora Primalja is the official Croatian Chamber of Midwives, providing professional membership services, education, and regulatory information to midwives in Croatia. Established in 2009, it serves as a national professional body with a clear focus on healthcare professionals specializing in midwifery. The website offers resources such as membership guidance, educational portals, job postings, and important announcements, targeting midwives and healthcare stakeholders in Croatia. The organization maintains a consistent brand presence with active social media channels and structured data enhancing its digital footprint. Technically, the website is built on WordPress using WPBakery Page Builder, with integrations including Google Tag Manager and Mailchimp for marketing and analytics. Hosting and DNS services are provided by CARNET and Cloudflare respectively, ensuring reliable performance and security. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting compliance with GDPR requirements. However, explicit security headers are not clearly present, and no formal security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data aligns well with the website's Croatian healthcare identity, supporting legitimacy and trustworthiness. Overall, Hrvatska Komora Primalja presents a professional, secure, and compliant online presence suitable for its role as a healthcare professional chamber. Strategic improvements in security headers, accessibility, and published security policies would further enhance its posture and trust.

Ö

Österreichisches Hebammengremium

hebammen.at

51

The Österreichisches Hebammengremium (ÖHG) website serves as the official online presence of the Austrian Midwives Association, representing midwives and providing information to parents about pregnancy, birth, and baby care. The site targets a German-speaking Austrian audience and positions itself as a trusted non-profit organization in the healthcare sector. The business model focuses on advocacy and education rather than commercial activities. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, incorporating modern web technologies such as jQuery, FontAwesome, and third-party tools like Doofinder for search and Borlabs Cookie for cookie consent management. The site demonstrates good mobile optimization and SEO practices but lacks some advanced accessibility features. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but it lacks visible security headers and explicit privacy or terms of service policies. No direct contact information or incident response channels are found in the provided content, which could be improved to enhance trust and compliance. The domain registration data aligns well with the organization's identity, indicating legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures, security headers, and clearer contact information to improve compliance and user trust.

E

European Federation of Nurses Associations

efn.eu

48

The European Federation of Nurses Associations (EFN) is a well-established non-profit organization representing nurses across Europe. The website serves as a comprehensive platform for policy advocacy, EU project participation, and dissemination of nursing-related information. It targets healthcare professionals, policymakers, and EU institutions, providing detailed resources such as position statements, reports, and competency frameworks. The EFN maintains a medium-sized presence with consistent branding and professional content quality. Technically, the site is built on WordPress with Elementor and uses reputable plugins, hosted by InterNetX GmbH. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS and secure forms, but lacks advanced security headers and a vulnerability disclosure mechanism. Privacy compliance is moderate with a clear privacy policy but no cookie consent mechanism. Overall, the site is trustworthy and professional, with minor areas for security and privacy enhancement.

Č

Česká asociace pro vzácná onemocnění

plazmaticke-proteiny.cz

45

The website 'Plazmatické proteiny' is operated by the Czech Association for Rare Diseases (Česká asociace pro vzácná onemocnění) and serves as an informational and support platform for patients using plasma proteins in the Czech Republic. It provides educational content, patient stories, expert interviews, and updates on relevant events, aiming to raise awareness and improve access to plasma protein therapies. The site targets patients, caregivers, and patient organizations, positioning itself as a niche non-profit healthcare advocacy platform. Technically, the site is built on WordPress using the Bricks theme builder, leveraging modern web technologies such as jQuery, Font Awesome, and Google Fonts. It includes a cookie consent mechanism compliant with GDPR and integrates Google Analytics for visitor insights. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though HTTP security headers and explicit security policies could be improved. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profit organizations. Overall, the website is professional, trustworthy, and well-structured, supporting its mission effectively.

M

MediMerck - portál pro pacienty i lékaře

medimerck.cz

64

The website www.medimerck.cz appears to be a healthcare portal targeting patients and doctors in the Czech Republic. It is built on Adobe Experience Manager CMS and uses common web technologies such as jQuery, Adobe Launch for tag management, and OneTrust for cookie consent. The site content is accessible without any WAF or security blocking mechanisms. However, the WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency and trustworthiness. The website lacks explicit privacy policies, contact information, and security policies, which are important for compliance and user trust in healthcare-related services. The technical infrastructure is moderately modern but could benefit from enhanced security headers and clearer business information.

D

DMA Praha

dmapraha.cz

71

DMA Praha is a Czech Republic-based company specializing in the distribution, sale, and rental of medical and compensatory aids primarily targeting seniors and physically disabled individuals. The company offers a wide range of products including new, refurbished, and rental aids, supported by a network of physical stores and an e-commerce platform. Their market position is strengthened by 25 years of experience and a broad product catalog tailored to healthcare needs. Technically, the website employs modern web technologies including Google Maps API, Sentry for error tracking, and Google Tag Manager for analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and error tracking in place, though some security headers and policies are missing. Privacy compliance is partially addressed with cookie consent mechanisms but lacks a visible privacy policy or detailed GDPR compliance statements. Overall, the website is professional, user-friendly, and trustworthy, with no signs of malicious content or adult material. The absence of WHOIS data due to privacy protection slightly reduces transparency but is justified given the business nature. Strategic recommendations include enhancing security headers, publishing security and privacy policies, and adding vulnerability disclosure information to improve trust and compliance.

E

European Multiple Sclerosis Platform

emsp.org

60

The European Multiple Sclerosis Platform (EMSP) is a well-established non-profit organization dedicated to supporting people living with multiple sclerosis across Europe. Founded in 2004, EMSP acts as a pan-European umbrella organization representing over 1.2 million people with MS. The website reflects a mature digital presence with comprehensive content about MS, advocacy projects, events, and resources. It targets patients, healthcare professionals, policymakers, and MS societies, positioning itself as a leading voice in MS advocacy and support. Technically, the website is built on WordPress with the BuddyBoss platform, leveraging modern JavaScript libraries such as Swiper.js and Leaflet.js for interactive features. It uses Google Analytics and Google Tag Manager for analytics and tracking, and employs hCaptcha for form spam protection. The site is hosted under eNom, LLC registrar with ehostpros.com name servers, and uses HTTPS with a good SSL configuration. Mobile optimization and SEO are well implemented, though accessibility could be improved. From a security perspective, the site follows good practices including HTTPS enforcement and spam protection on forms. However, DNSSEC is not enabled and some security headers are not explicitly detected, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear privacy and cookie policies, including GDPR consent mechanisms. Overall, EMSP's website demonstrates a high level of professionalism, trustworthiness, and digital maturity. It effectively supports its mission to improve the lives of people with MS through advocacy, education, and community engagement. Strategic recommendations include enabling DNSSEC, enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security posture and trust.

M

Multiple Sclerosis International Federation

msif.org

57

The Multiple Sclerosis International Federation (MSIF) operates as a global non-profit network dedicated to supporting people affected by Multiple Sclerosis (MS) worldwide. With 44 member organizations and a broad international reach, MSIF provides authoritative information, advocates for improved healthcare access, supports research initiatives, and fosters community engagement. Their market position is unique as the only global federation of MS organizations, emphasizing collaboration and leadership in the MS healthcare sector. Technically, the MSIF website is built on WordPress and leverages modern web technologies including jQuery, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag for analytics and marketing. The site demonstrates good performance, mobile optimization, and accessibility, supported by SEO best practices and structured data for enhanced search visibility. From a security perspective, the website enforces HTTPS, employs Cloudflare for CDN and security, and uses a consent management platform to comply with privacy regulations. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy or incident response information, which could be improved to enhance transparency and preparedness. Overall, the MSIF website presents a professional, trustworthy, and well-maintained digital presence aligned with its mission. The domain's WHOIS data is privacy protected, common for non-profits, but the site provides sufficient trust signals including charity registration and comprehensive contact information. Strategic recommendations include publishing security and incident response policies, adding vulnerability disclosure mechanisms, and enhancing data protection officer visibility to further strengthen security posture and compliance.

O

Otto Bock ČR s.r.o.

mojeproteza.cz

48

Mojeproteza.cz is a Czech Republic-based healthcare information portal operated by Otto Bock ČR s.r.o., focusing on providing comprehensive support, education, and product information for amputees and prosthesis users. The website serves as a trusted resource with detailed content including tips, videos, and community engagement, positioning itself as a niche leader in prosthetics support within the region. Technically, the site is built on WordPress with a modern tech stack including Bootstrap and various plugins for SEO, GDPR compliance, and user interaction. The site is well-optimized for mobile and SEO, with good performance and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security policy or incident response information is published. Overall, the site demonstrates a high level of professionalism and trustworthiness, with active social media presence and clear business legitimacy. Recommendations include enhancing security headers, publishing security policies, and improving accessibility.

L

Liga proti rakovině Praha z.s.

lpr.cz

56

Liga proti rakovině Praha z.s. is a well-established non-profit organization dedicated to reducing mortality from malignant tumors in the Czech Republic for over 35 years. The organization focuses on cancer prevention, patient quality of life improvement, and support for oncology research and equipment. Their website reflects a mature digital presence with comprehensive content, active social media engagement, and multiple partnerships. Technically, the site is built on WordPress with modern JavaScript libraries and includes GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the website is professional, trustworthy, and serves its mission effectively.

S

Spiralis, o.s.

spiralis-os.cz

47

Spiralis, o.s. is a Czech non-profit organization established in 2001, focusing on supporting vulnerable groups, especially women, through leadership academies, educational programs, and social advocacy. The organization operates primarily within the Czech Republic and maintains a consistent brand presence with active social media engagement and EU-supported projects. Technically, the website is built on Joomla! CMS with common JavaScript libraries and plugins, providing a moderate performance and good mobile responsiveness. Security posture is basic with HTTPS enabled but lacking advanced security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security best practices. Overall, the website is professional and trustworthy, serving a clear social mission with transparent contact information and active community engagement.

Č

Černá louka s.r.o.

ostravacard.eu

54

Ostravacard.eu is a website promoting the OSTRAVACARD!!! visitor discount card for tourists staying in Ostrava, Czech Republic. The card is distributed free of charge by selected accommodation providers for stays of at least two nights and offers various discounts and benefits at partner locations. The website is professionally designed with a focus on tourism and hospitality, featuring partner logos from recognized Czech tourism organizations. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, Flickity carousel, Leaflet maps, and Google Analytics for visitor tracking. The site is served over HTTPS and implements a cookie consent mechanism with opt-in for analytics cookies, indicating a basic level of privacy compliance. However, no explicit privacy policy or terms of service pages were found, and no direct contact information is provided on the homepage, which limits transparency. WHOIS data is privacy protected by EURid, which is typical for EU domains and does not raise immediate concerns. Overall, the website presents a legitimate, small-scale tourism promotion business with moderate technical maturity and a generally good security posture.

BIG LED SCREEN s.r.o. is a Czech Republic based company specializing in the distribution, sale, and rental of LED display technologies and large-format LED screens. Established in 2015, the company targets businesses and organizations within the Czech Republic seeking advanced LED display solutions. Their offerings include mobile LED walls, touch screen kiosks, advertising players, and complete installation and servicing. The website reflects a mature business with a clear market position supported by client references and a professional online presence. Technically, the site is built on WordPress with modern plugins and frameworks such as Bootstrap and Yoast SEO, providing a good user experience and SEO optimization. Security posture is adequate with HTTPS and cookie consent implemented, though lacking advanced security headers and explicit privacy or terms policies. Overall, the site is functional, professional, and trustworthy with room for improvement in privacy compliance and security hardening.

D

Danone a.s.

nutriklub.cz

68

Nutriklub.cz is a professionally maintained website operated by Danone a.s., a leading company in the healthcare and nutrition sector. The site serves as an expert guide for pregnancy, motherhood, and infant nutrition, combining e-commerce with expert advisory services. It targets parents and caregivers in the Czech Republic, offering a comprehensive product range and informational content. The website is well-branded and consistent with Danone's corporate identity. Technically, the site leverages Adobe Experience Manager as its CMS, integrates Salesforce Live Agent for customer support, and uses modern tracking and marketing tools such as Google Tag Manager and Channelsight. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks visible security headers and published security policies. No vulnerabilities or suspicious content were detected. Privacy compliance is well addressed with accessible privacy and cookie policies, and GDPR compliance is evident. Overall, Nutriklub.cz presents a low-risk profile with strong business credibility and a solid technical foundation. Recommendations include enhancing security headers, publishing incident response information, and continuous monitoring of third-party scripts.

S

Schindlerova pletárna s. r. o.

elite-cz.cz

46

Schindlerova pletárna s. r. o. operates the ELITE e-commerce website specializing in hosiery products with a rich tradition dating back to 1854 in the Czech Republic. The company targets consumers seeking quality hosiery and related products, offering both retail and wholesale options. The website is professionally designed with clear navigation and a consistent brand presence, supported by active social media channels and comprehensive customer contact information. Technically, the website leverages a mature technology stack including jQuery, Bootstrap 3.3.7, Font Awesome, and integrates Google Tag Manager, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. However, some technical improvements are recommended, such as implementing security headers and enhancing accessibility features. From a security perspective, the site enforces HTTPS and uses consent-based tracking but lacks explicit security policies and incident response information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data is a concern for domain legitimacy, though the website content and business information appear trustworthy and professional. Overall, the website presents a solid business and technical foundation with good privacy compliance and user experience. Strategic improvements in security posture and domain registration transparency would enhance trust and reduce risk.

C

Citadele

citadeleleasing.lt

57

Citadele is a financial institution operating in Lithuania, offering automobile leasing services alongside a broad portfolio of banking and financial products. The website provides detailed information about leasing options, including a leasing calculator and access to a dedicated leasing portal. The site targets private clients interested in vehicle financing, emphasizing ease of use and quick financing decisions. The presence of multiple related domains and portals indicates a mature digital ecosystem supporting their services. Technically, the website employs modern JavaScript libraries and Google Tag Manager for analytics, with a responsive design suitable for mobile users. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits domain trust verification, but the overall site professionalism and external links support legitimacy. Privacy compliance is well addressed with GDPR-aligned cookie and privacy policies. Overall, the site is a reliable digital front for Citadele's leasing services, with room for minor security enhancements.

C

Citadele

xrewards.lt

64

The website www.xrewards.lt represents the C REWARDS loyalty and discount program operated by Citadele bank for its C card users in the Baltic region. It offers customers the ability to earn points and redeem prizes, as well as access partner discounts. The site is well-branded with Citadele logos and integrates with the bank's services, targeting existing and potential bank customers. Technically, the site is built on Magento with modern JavaScript frameworks and includes Google Tag Manager for analytics. It is mobile-optimized and provides a good user experience with clear navigation and content. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers appear missing. The absence of WHOIS data limits domain trust analysis, but the site content and external links strongly indicate legitimacy. Overall, the site is professional, secure, and compliant with privacy regulations.

I

IDENTITY – grafické studio & agentura

2oom.cz

30

IDENTITY is a Czech graphic design studio and agency established in 2011, specializing in corporate identity and branding services. The company targets businesses and organizations seeking professional graphic design solutions, with a focus on logo creation and brand development. The website reflects a consistent and professional brand image, supported by a portfolio of projects and active social media channels. Technically, the site is built on WordPress with modern frameworks like YOOtheme and UIkit, integrating analytics and tracking tools such as Google Analytics and Facebook Pixel. Security measures include HTTPS and reCAPTCHA, though additional security headers could enhance protection. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, indicating GDPR awareness. Overall, the website presents a trustworthy and credible business presence with good digital maturity.

L

Lípa pro venkov z.s.

lipaprovenkov.cz

42

Lípa pro venkov z.s. is a Czech non-profit local action group dedicated to rural and community development in the Kutná Hora region. The organization supports local municipalities and community groups by providing information and assistance related to regional and European funding programs. Their website serves as an official portal offering news, project information, and resources for applicants. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Swiper.js, and is built on a CMS platform likely customized for local government use. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and has a cookie consent mechanism, but lacks explicit security headers and a privacy policy page, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact details appear legitimate and consistent with a local non-profit entity. Overall, the site is professional and trustworthy but could enhance compliance and security posture.

M

Mediaboard.com

mediaboard.site

68

Mediaboard.com is a well-established media intelligence and PR platform offering a comprehensive suite of services including media monitoring, social media listening, media analytics, and press release publishing. The company targets PR professionals, marketing teams, and corporate communications departments, serving over 2000 clients including major global brands. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the site is built on WordPress with Elementor and integrates multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Cookiebot for consent management. Security posture is solid with HTTPS and Cloudflare DNS, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy or terms of service on the main site. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the domain registration data supports legitimacy with a long domain age and consistent registration details.

V

Vitalitas

vitalitas.cz

60

Vitalitas is a Czech Republic-based insurance provider specializing in travel, accident, and health insurance products, particularly targeting insured persons under OZP and ZPŠ, children, youth, and foreigners. The company has a strong market presence with over 20 years of operation, offering online insurance services with a focus on convenience and tailored coverage. The website reflects a professional and consistent brand image with clear service offerings and multilingual support. Technically, the site is built on WordPress using the Genesis Framework and several plugins for SEO, GDPR compliance, and user experience enhancements. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the site lacks explicit security policy and incident response information. Overall, the website is trustworthy, compliant with GDPR, and provides a good user experience with moderate tracking for analytics purposes.