Security Directory

K

Komunitní nadace Blanicko – Otavská

konabo.cz

59

Komunitní nadace Blanicko – Otavská is a Czech community foundation dedicated to supporting local projects that benefit residents and foster regional development. The foundation operates primarily in the Blanicko – Otavská region, providing grants and managing donor funds to support social services, environment, culture, education, and local development. The website reflects a small but established non-profit organization with a clear mission and local focus. Technically, the site is built on the Webnode CMS platform, uses HTTPS with Cloudfront CDN for asset delivery, and implements a cookie consent mechanism, indicating a moderate level of digital maturity. However, the absence of WHOIS domain registration data and lack of published privacy and terms policies represent gaps in transparency and compliance. Security posture is adequate with HTTPS but could be improved by adding security headers and formal vulnerability disclosure mechanisms. Overall, the website is professional and trustworthy in content but would benefit from enhanced compliance and security practices.

H

Hello Glocal Ltd.

coworkiesbook.com

65

Coworkiesbook.com is a professionally developed website dedicated to promoting and selling the book 'Around the World in 250 Coworking Spaces' published by Hello Glocal Ltd. The business operates in a niche market focused on coworking spaces, offering a comprehensive guidebook, a readers club subscription, and related services such as workshops and consulting. The site demonstrates a mature digital presence with strong SEO, structured data, and secure payment processing via Stripe. The technical infrastructure is modern and optimized for performance and mobile devices. Security posture is good with HTTPS and no exposed sensitive data, though some security headers could be improved. Privacy compliance is partial due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy and professional, targeting coworking professionals, entrepreneurs, and related audiences worldwide.

Č

Černovická dechovka

cernovickadechovka.cz

57

Černovická dechovka is a traditional Czech brass band with a rich history dating back to 1933. The band performs a variety of traditional music styles including polkas, waltzes, tangos, marches, and seasonal music such as Christmas carols. It actively participates in festivals, concerts, and community celebrations, and has recorded CDs and DVDs that have been broadcast on Czech radio and television. The website serves as an informational and promotional platform for the band, targeting music enthusiasts and local community members interested in traditional Czech brass music. Technically, the website is built using the Webnode CMS platform and hosted on AWS Cloudfront CDN, employing modern web technologies such as HTML5, CSS3, and JavaScript. The site is mobile-optimized and includes basic SEO and accessibility features. It uses HTTPS for secure communication and implements a cookie consent banner to comply with basic privacy regulations. However, it lacks advanced security headers and comprehensive privacy or terms of service documentation. From a security perspective, the site shows a moderate security posture with HTTPS enabled and cookie consent mechanisms in place. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness, as it conflicts with the band's claimed long history. No critical vulnerabilities or exposed sensitive data were detected. The site does not collect user data through forms beyond cookie consent, reducing privacy risks. Overall, the website is a well-maintained informational site for a cultural music group with good content quality and user experience. Security and privacy compliance can be improved by adding security headers, privacy policies, and domain registration transparency. The lack of WHOIS data is a notable risk factor that should be addressed to enhance trust and legitimacy.

M

Město Žirovnice

panistavkazirovnice.cz

50

The website 'Kemp Žirovnice' represents a small hospitality business operated by the municipal entity Město Žirovnice, offering camping and accommodation services in a natural setting. The business targets families, nature lovers, and organized groups such as schools and sports teams, providing modern amenities including cottages with kitchens and bathrooms. The site is well-branded and consistent with its local tourism focus. Technically, the website uses a modern CMS platform (Vismo) with frontend technologies including Vue.js and Google reCAPTCHA v3 for spam protection. The site is mobile-optimized, accessible, and SEO-friendly, though some security best practices like explicit security headers are missing. The domain is newly registered in early 2024, consistent with the business launch timeline. Security posture is good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and a formal security or incident response policy reduces the overall security maturity. Privacy compliance is basic, with cookie and privacy policies present but lacking active consent mechanisms. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in security headers, privacy consent, and published security policies would enhance compliance and trustworthiness.

Nová Lípa, s.o. is a voluntary association of municipalities in the Czech Republic focused on regional development and community projects. The website provides information about member municipalities, ongoing projects, official notices, and contact options primarily via a contact form. The organization appears to be a small, local government entity established in 2015, with a clear focus on serving local residents and stakeholders. Technically, the website uses a combination of Bootstrap, jQuery, and is hosted on the Estranky.cz CMS platform, with external integrations including Google Analytics and Facebook SDK for tracking and marketing purposes. Security posture is moderate but could be improved by updating JavaScript libraries and implementing security headers. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures.

Scholz Promotion operates a retail business focused on promotional products, as indicated by the domain and contact email. The current website is inactive, displaying a simple notice that the shop is not active and providing a customer service email and a link to the main company website. The technical infrastructure is minimal, relying on basic HTML and CSS with Google Fonts, and no advanced frameworks or CMS detected. The domain is registered in Germany with a reputable registrar and shows no privacy protection, aligning with the business location and language. Security posture is weak due to lack of HTTPS confirmation, missing security headers, and absence of privacy or cookie policies. No analytics or tracking technologies are present, indicating minimal digital maturity. Overall, the website is low in content quality and professionalism, reflecting its inactive status.

F

FERI

feri.de

71

FERI is a German-based financial services company specializing in multi-asset management and global investment solutions. With over 30 years of experience, it targets sophisticated private wealth and institutional investors, offering independent research and asset management services. The website reflects a professional and consistent brand image, emphasizing trust and expertise in the finance sector. Technically, the site uses modern web technologies including Cookiebot for consent management and Google Tag Manager for analytics, hosted on Colt's infrastructure. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a mature digital presence aligned with its business model and regulatory compliance requirements.

T

Tumblr

labearenaracice.com

72

The analyzed website is a Tumblr blog operated under the domain www.tumblr.com, owned by Automattic Inc. The blog focuses on marketing and listing available domain names for sale, targeting various niche industries such as maritime, moving services, home improvement, and event venues. The business model relies on affiliate marketing, linking visitors to domain registrars like GoDaddy for domain purchases. The content is professionally presented, with clear descriptions and relevant tags to attract potential buyers. Technically, the site leverages modern web technologies including JavaScript, CSS3, and web fonts, hosted on the Tumblr platform. It uses third-party advertising networks such as PubMatic and Google Ad Manager, and incorporates a consent management platform to comply with GDPR regulations. The site is mobile optimized and demonstrates good SEO practices. From a security perspective, the site enforces HTTPS and employs privacy and cookie policies consistent with GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers were not confirmed in the provided data and could be further audited. The WHOIS data for www.tumblr.com was not retrievable from the raw output, but the domain is well-known and legitimate. Overall, the website presents a low-risk profile with a solid security posture and compliance framework. Strategic recommendations include verifying security headers, enhancing accessibility, and maintaining regular security audits for third-party scripts and advertising integrations.

WP4you.cz is a small Czech-based service provider specializing in custom WordPress theme development and hosting solutions. The company offers a range of services including theme creation, plugin installation, WooCommerce store setup, client installation management, and migration to WordPress. Their market position is that of a niche local provider focused on WordPress technologies, targeting clients who want control over their website content and design. The website is built on WordPress 6.6.4 with Elementor page builder, indicating a modern and flexible technical infrastructure. Google Tag Manager and Google Analytics are used for tracking, showing some level of digital maturity. Security posture is moderate with HTTPS enabled but lacking advanced security headers and cookie consent mechanisms. The absence of WHOIS data reduces transparency but is likely due to privacy protection, which is common for small businesses. Overall, the website is professional, safe, and business-focused with room for improvement in security and privacy compliance.

The website automotivemag.sk operates as an online magazine focused on the automotive industry, engineering, and economic topics primarily targeting Slovak and Czech audiences. It provides industry news, articles, and advertising opportunities, positioning itself as a niche media outlet in the regional automotive sector. The business appears to be recently established in 2023, consistent with the domain registration date. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript, hosted on Hetzner servers. The site has moderate performance and basic mobile optimization. SEO practices are adequate with proper meta tags and Open Graph data. However, no CMS or advanced frameworks are detected, indicating a simple custom or static site. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. Google Analytics is used for tracking without a visible consent mechanism. No contact information or incident response channels are provided, limiting transparency and trust. The SSL status is unknown but likely present given Google Analytics usage. Overall, the site is professional and content-rich but has notable gaps in privacy compliance and security best practices. The domain registration is consistent and legitimate, supporting the business credibility. Strategic improvements in privacy policies, security headers, and contact transparency are recommended to enhance trust and compliance.

W

Web Commerce GmbH

kath-musterhausen.de

47

The website www.kath-musterhausen.de represents SESAM, a web platform service designed for church institutions within the Erzdiözese Freiburg. It is developed and hosted by Web Commerce GmbH, providing a comprehensive web-building toolkit including event management, news, forms, newsletters, and room and duty scheduling. The site targets church organizations seeking a versatile and supported online presence. Technically, the site uses Edith CMS, jQuery, and Matomo analytics, with good mobile optimization and accessibility. Security posture is solid with HTTPS and some security headers, though cookie consent mechanisms and explicit security policies are lacking. Overall, the site is professional, trustworthy, and well-aligned with its niche audience.

K

Katholische Arbeitsstelle für missionarische Pastoral

kamp-erfurt.de

46

The website kamp-erfurt.de represents a small non-profit Catholic organization focused on missionary pastoral work in Germany. The site provides informational content aimed at religious communities and pastoral workers. Technically, the website is built on TYPO3 CMS with Bootstrap 4, offering a responsive and moderately performant user experience. However, the site lacks explicit privacy and terms of service policies, and no contact information is readily available in the analyzed content. Security posture is basic, with no detected security headers or advanced protections, and no analytics or tracking scripts are present, indicating minimal user tracking. Overall, the domain registration aligns well with the website's purpose, suggesting legitimacy and consistency. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and compliance.

D

Dana Petroleum

dana-petroleum.com

67

Dana Petroleum is a medium-sized exploration and production company operating primarily in the UK, Netherlands, and Egypt. It is a wholly owned subsidiary of the Korea National Oil Corporation, focusing on oil and gas extraction with significant operations in the North Sea. The website presents a professional corporate image with clear business descriptions, key service offerings, and a consistent brand presence. The company targets investors, partners, industry professionals, and potential employees through detailed sections on management, operations, and careers. Technically, the website uses modern web standards including HTML5, CSS3, and JavaScript, with integration of Google Analytics, Google Tag Manager, and Plausible Analytics for user tracking and performance monitoring. The site is mobile optimized with good SEO practices and a cookie consent mechanism aligned with GDPR requirements. However, no CMS or hosting provider details were detected, and accessibility features are basic. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks visible security headers and explicit incident response or vulnerability disclosure information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data reduces confidence in domain legitimacy, but the professional content and company registration details support trustworthiness. Overall, Dana Petroleum's website is a well-structured, professional corporate site with good technical implementation and privacy compliance. The main risk is the lack of WHOIS transparency and limited published security policies, which could be improved to enhance trust and compliance.

Minimlékárna pod Řípem is a small family-owned dairy farm business based in the Czech Republic, specializing in fresh milk vending and production of various dairy products such as yogurts, kefir, and cheeses. The business leverages a combination of traditional farming heritage and modernized facilities funded partly by EU programs. Their market position is local and regional, supported by a recognized regional food award. The website serves as an informational and e-commerce platform targeting local consumers interested in fresh farm products. Technically, the website uses a simple but effective technology stack including HTML5, CSS3, jQuery, and Font Awesome. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. The hosting and domain registration are consistent with the business location and claims, with no signs of privacy protection or suspicious WHOIS data. From a security perspective, the site lacks visible HTTPS confirmation and security headers, which are critical for protecting user data and trust. The presence of a cookie consent banner indicates some GDPR awareness, but the absence of a privacy policy and terms of service is a compliance gap. No incident response or vulnerability disclosure information is provided, limiting transparency in security matters. Overall, the website is functional and trustworthy for its business purpose but would benefit from improved security practices, formal privacy documentation, and enhanced technical optimization to increase user trust and compliance with data protection regulations.

ASTUR Straškov a.s. is a medium-sized agricultural company based in the Czech Republic, specializing in both crop and livestock production. The company operates over 3,100 hectares of agricultural land and offers a range of services including mechanization and land leasing. The website reflects a well-established business with a history dating back to 2004 and a strong local presence supported by partnerships with reputable agricultural machinery and service providers. Technically, the website uses modern web technologies and frameworks, providing a good user experience with mobile optimization and clear navigation. However, there are gaps in privacy and security policies, with no visible privacy policy or incident response information, and missing security headers. The cookie consent mechanism is implemented, indicating some level of GDPR awareness. Overall, the site is professional and trustworthy but could improve in compliance and security transparency.

S

stredohori-podripsko.cz

stredohori-podripsko.cz

46

The website stredohori-podripsko.cz operates as an online magazine focused on the beauty and cultural richness of the Středohoří and Podřipsko regions in the Czech Republic. It offers a variety of articles covering health, economy, culture, travel, and practical advice, targeting a general audience interested in local topics. The business model centers on content publishing with monetization through Google Adsense advertising. The site is relatively new, with a domain creation date indicating 2025, which appears inconsistent and may reflect a placeholder or data anomaly. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, Matomo analytics for user tracking, and Google Adsense for advertising. The site is mobile optimized with good navigation and SEO practices, though accessibility features are basic. Hosting is provided via vas-hosting.com, with domain registration through REG-GRANSY. Performance is moderate, and no content blocking or WAF mechanisms were detected. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible security or incident response policy, nor a vulnerability disclosure mechanism. Privacy compliance is partial; a privacy policy and terms of use are published, but no cookie consent mechanism is present, which is a compliance gap under GDPR. No direct contact emails or phone numbers were found, only a contact form. Overall, the website presents a professional and trustworthy front for a small regional media outlet, but the WHOIS data anomaly and lack of some security and privacy features suggest areas for improvement. Strategic enhancements in privacy compliance, security headers, and transparency would strengthen trust and regulatory adherence.

G

Gesellschaft für Informatik e.V.

gi.de

55

Gesellschaft für Informatik e.V. (GI) is a well-established German non-profit association dedicated to the field of informatics. The organization provides a broad range of services including membership, publications, events, and educational projects aimed at informatics professionals, academics, and students. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the site is built on TYPO3 CMS with Bootstrap, employs Matomo for privacy-conscious analytics, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are not published. WHOIS data aligns with the website's legitimacy, showing consistent domain registration without privacy protection, appropriate for a professional association. Overall, the website scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy and professional online presence for the GI association.

G

GETPIONEERS

getpioneers.com

45

GETPIONEERS is a German-based technology service provider specializing in visual and interactive digital solutions for B2B communication. Their offerings include interactive applications, AR/VR training, high-end visualization and design, film and video production, virtual events, and consulting services. The company positions itself as an innovative partner enabling clients to enhance their marketing, sales, and training through cutting-edge digital experiences. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive service descriptions. The domain registration aligns well with the company's founding date and business claims, indicating legitimacy and transparency. Technically, the website leverages modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for animations and interactive elements. Hosting is provided by Hetzner Online GmbH, a reputable German hosting provider. Performance is moderate with good mobile optimization, though accessibility and SEO could be improved. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and explicit security policies on the site. Privacy compliance is partial; a privacy policy is present and GDPR compliant, but no cookie consent mechanism or terms of service are found. Contact information including phone and email is clearly provided, along with active social media profiles. No analytics or tracking scripts were detected in the provided HTML content, indicating minimal user tracking. Overall, GETPIONEERS presents a trustworthy and professional digital presence with room for improvement in security headers, privacy compliance, and SEO. The business is well-positioned in the technology visualization sector with a clear focus on B2B clients.

M

Marthy’s Kitchen

marthyskitchen.cz

57

Marthy’s Kitchen is a small hospitality business based in Prague, Czech Republic, specializing in high-quality breakfasts and brunches served in a cozy French-style interior. The website reflects a local restaurant with a focus on quality ingredients, home-style preparation, and friendly service. The business targets general audiences seeking elegant dining experiences. Technically, the website is built on the Wix platform, leveraging modern web technologies and providing a mobile-optimized experience. However, the site lacks comprehensive privacy and cookie policies, which are important for GDPR compliance. Security-wise, HTTPS is enabled, but security headers are missing, and no incident response or vulnerability disclosure information is provided. The use of Facebook Pixel indicates moderate user tracking for marketing purposes. Overall, the website is professional and trustworthy but could improve in privacy compliance and security best practices.

B

BREDFORD Consulting, s.r.o.

bredford.cz

49

BREDFORD Consulting, s.r.o. is a well-established Czech boutique consulting firm specializing in tax advisory, accounting, payroll, and recruitment services. With over 20 years of market presence and a team of more than 20 professionals, the company targets small to medium-sized businesses primarily in the Czech Republic. Their service offerings are comprehensive, covering legal tax minimization, accounting accuracy, payroll management, and recruitment support, positioning them as a trusted partner for business clients seeking reliable financial and HR services. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics, Google Tag Manager, and Google reCAPTCHA v3 for analytics and security. The site is mobile-optimized with good SEO practices and moderate performance. Security measures include HTTPS enforcement and CSRF tokens on forms, though some security headers are missing. From a security posture perspective, the site demonstrates good practices with encrypted connections and anti-bot protections. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement in transparency and readiness. The lack of WHOIS data reduces domain trust slightly but is offset by the professional presentation and business registration details displayed on the site. Overall, BREDFORD Consulting's website is professional, trustworthy, and compliant with GDPR and cookie regulations. It effectively communicates its business services and contact information, making it a credible online presence for their consulting business.

G

Google

superbos.top

69

Google LLC is a global leader in technology, primarily known for its dominant search engine and extensive portfolio of internet-related services including advertising, cloud computing, and software products. As a subsidiary of Alphabet Inc., Google maintains a strong market position with a broad target audience ranging from individual users to enterprises worldwide. The website reflects Google's brand consistency and professionalism, offering a fast, mobile-optimized, and accessible user experience. Technically, the site employs modern web standards and technologies, ensuring high performance and SEO optimization. Security posture is robust with HTTPS enforcement and secure form handling, although explicit security headers were not detected in the provided data. Privacy compliance indicators such as privacy and cookie policies were not explicitly found in the analyzed HTML snippet, but given Google's global presence, compliance is expected. Overall, the domain is highly trustworthy and well-established, despite the lack of WHOIS data due to privacy protections.

U

Uniworld

uniworld.com

64

Uniworld is a luxury river cruise company offering curated travel experiences across Europe, India, Vietnam, Cambodia, Peru, and Egypt. The website positions itself as the world's most renowned river cruise line, targeting travelers seeking intimate cultural and historical experiences. The business model focuses on high-end hospitality services with a global reach. Technically, the website employs modern marketing and analytics tools such as Google Tag Manager and Cookiebot for cookie consent management, indicating a mature digital marketing infrastructure. However, there is no visible privacy policy or terms of service in the provided content, which is a compliance gap. Security posture is moderate with cookie consent implemented but lacking visible security headers or detailed security policies. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for commercial entities. Overall, the website is professional and trustworthy but could improve transparency and security documentation.

T

Trafalgar

trafalgar.com

74

Trafalgar is a well-established travel company specializing in guided tours and travel packages primarily across Europe and other global destinations. The website presents a professional and user-friendly interface, targeting travelers seeking organized vacation experiences with flexible travel plan options. The company leverages modern web technologies including React and integrates multiple third-party analytics and marketing tools to optimize user engagement and advertising effectiveness. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response contacts are not evident in the provided data. The absence of WHOIS registrant information reduces transparency but is common for commercial entities protecting privacy. Overall, the website is credible, secure, and compliant with privacy regulations, serving a large audience in the hospitality sector.

S

SD Software-Design GmbH

software-design.de

63

SD Software-Design GmbH is a German IT company specializing in custom software development, including web portals, cloud software, cross-platform mobile apps, and data-driven systems. With over 13 years of experience, the company serves a diverse clientele including SMEs, startups, public sector entities, and associations primarily in Germany, Austria, and Switzerland. Their offerings extend to IT consulting, digital marketing, and data analysis, supported by multiple certifications and memberships that reinforce their market credibility. The website reflects a professional and comprehensive digital presence with clear service descriptions and strong trust signals. Technically, the site employs modern web technologies, is mobile-optimized, and demonstrates good SEO and accessibility practices. Security posture is robust with HTTPS, security headers, and privacy compliance, although no explicit incident response or vulnerability disclosure policies were found. Overall, the company presents a mature, trustworthy, and client-focused IT service provider profile.

B

Burge Agency

burgeagency.com

53

Burge Agency is a well-established creative and design agency based in Winchester, Hampshire, UK, founded in 2009. The company specializes in branding, graphic design, website design, packaging, advertising campaigns, and print media, serving a diverse clientele including both large and small brands. Their website reflects a professional and consistent brand image with a comprehensive portfolio showcasing their work. Technically, the website is built on WordPress with Bootstrap and uses modern web technologies and analytics tools, indicating a moderate to good level of digital maturity. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from improved privacy and security practices.

H

Hugo na cestách

hugonacestach.info

42

Hugo na cestách is a Czech educational and cultural project centered around travel and heritage exploration within the Czech Republic and occasionally abroad. The website offers rich content including travel reports, photo galleries, and cultural insights, targeting a general audience interested in Czech history, architecture, and nature. The project appears to be run by an individual or small team, with the author identified as Michal Plaňanský. The site maintains a consistent brand and provides social media links to Google+, Facebook, and Twitter, enhancing its outreach. Technically, the website uses standard HTML5, CSS3, and JavaScript with jQuery and Lightbox libraries for interactive image galleries. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. There is no evidence of a CMS or modern frameworks. Security posture is limited due to missing HTTPS confirmation and absence of security headers. Privacy and cookie policies are not present, indicating compliance gaps. The WHOIS data is incomplete due to unsupported TLD WHOIS service, with no registrant or domain creation information available. This reduces trustworthiness from a domain registration perspective, although the website content itself appears legitimate and professional. No signs of malicious content or adult material were found. Overall, the site is a niche educational resource with good content quality but requires improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

G

Girasole, z. s.

girasole.cz

58

Girasole, z. s. is a Czech non-profit organization providing healthcare and social services focused on home hospice care, personal assistance, and emergency care for seriously ill and elderly individuals in the Hustopeče region. Their mission is to support patients and families to live dignified lives at home during serious illness. The website reflects a local healthcare service provider with a clear focus on palliative and hospice care, supported by community and regional partnerships.

Č

ČeskoZdravě.cz

ceskozdrave.cz

42

ČeskoZdravě.cz is a well-established Czech online magazine focused on healthy lifestyle, natural treatment, prevention, and nutrition. Founded in 2015, it offers a broad range of articles and a disease database targeting a general audience interested in health and wellness. The website is built on WordPress using the Jannah theme, hosted by Wedos, a Czech hosting provider, reflecting a mature digital infrastructure. The site demonstrates good SEO practices, mobile optimization, and a consistent brand presence. Security posture is solid with HTTPS and security headers, though there is room for improvement in privacy compliance, particularly regarding cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, indicating stable and accessible content.

P

Podřipské muzeum v Roudnici nad Labem - příspěvková organizace města Roudnice n. L.

podripskemuzeum.cz

57

Podřipské muzeum in Roudnice nad Labem is a public cultural institution operated as a contributory organization of the city. It focuses on preserving and presenting the history and culture of the Podřipsko region through permanent and temporary exhibitions, workshops, lectures, and public events. The museum targets local residents and visitors interested in regional heritage and cultural education. The website reflects a small but professionally managed institution with clear contact information and active social media presence. Technically, the website is built on the Webnode platform, leveraging modern web technologies including HTTPS, CDN hosting via Amazon Cloudfront, and Google Tag Manager for analytics. The site is mobile-optimized with good design and navigation, though some SEO and accessibility features could be enhanced. The cookie consent mechanism is implemented, but privacy and terms of service pages are missing, indicating partial compliance with GDPR requirements. From a security perspective, the site uses HTTPS and basic security headers but lacks advanced headers and a security.txt file for vulnerability disclosure. No WHOIS data is available, which limits domain trust assessment, but the website content and contact details suggest legitimacy. Overall, the security posture is moderate with room for improvement in compliance and security best practices. The overall risk is low given the nature of the institution and the website content. Strategic recommendations include adding privacy and terms policies, improving security headers, and publishing vulnerability disclosure information to enhance trust and compliance.

Geveko Markings is a well-established company specializing in the development, manufacturing, and distribution of road marking materials and solutions globally. The website reflects a mature business with a comprehensive product portfolio targeting municipalities, contractors, and businesses involved in traffic safety and infrastructure. The company emphasizes quality, sustainability, and innovation with over 100 years of industry experience. Technically, the website is built on modern web standards using a CMS platform (Swift CMS), with responsive design and good SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and registration transparency, which should be investigated further to ensure trustworthiness.

Geveko Markings is a well-established company specializing in the development, manufacturing, and distribution of road marking materials and solutions globally. With over 100 years of industry experience, the company offers a comprehensive product portfolio including preformed materials, hot-applied materials, paints, beads, aggregates, and equipment. Their website reflects a strong market position with detailed product lines, solutions for various traffic and safety needs, and a global presence through multiple regional domains. Technically, the website is built on a modern CMS platform (Swift CMS) with responsive design, good SEO, and accessibility features. The use of Google Tag Manager indicates moderate user tracking with privacy compliance mechanisms in place. Security posture is strong with HTTPS enforced and multiple security headers present, although public security policies and incident response information are not disclosed. The absence of WHOIS data suggests privacy protection, which is justified for a large enterprise. Overall, the website is professional, trustworthy, and business-focused with no signs of malicious activity or content blocking.

Geveko Markings is a well-established company specializing in the development, manufacturing, and distribution of horizontal road and surface markings tailored to various segments. The company offers a broad portfolio of solutions including regulatory traffic markings, parking and traffic area markings, decorative surfacing, accessibility and safety markings, road and surface repair, and event/sports-related markings. With a global presence and nearly a century of industry experience, Geveko Markings positions itself as a trusted supplier in the transportation sector. The website reflects a professional and comprehensive digital presence, supporting multiple regions and languages, and providing clear contact and corporate information. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, with a well-structured navigation system. The use of a proprietary CMS (Swift) and various JavaScript libraries enhances user experience. Security posture is good with HTTPS enforced and privacy compliance evident through detailed privacy and cookie policies with consent mechanisms. However, the absence of visible security headers and lack of explicit incident response or security policy pages suggest areas for improvement. The WHOIS data for the domain www.geveko-markings.co.uk is unavailable due to a Nominet UK naming rules error, which is unusual and raises questions about domain registration legitimacy. Despite this, the website content and business information appear consistent and professional. This discrepancy warrants further investigation to confirm domain ownership and legitimacy. Overall, Geveko Markings demonstrates a strong business and digital presence with good security and privacy practices. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and resolving WHOIS data issues to strengthen trust and compliance.

Geveko Markings is a well-established company specializing in the development, manufacturing, and distribution of road marking materials and solutions globally. With over 100 years of experience, the company offers a comprehensive range of products including preformed materials, hot-applied materials, paints, plural components, beads, aggregates, and equipment. Their market position is strong, supported by a consistent brand presence and a wide regional footprint with dedicated country-specific domains. The target audience primarily consists of businesses and organizations involved in road infrastructure and traffic management. Technically, the website is built with modern web technologies, including responsive design and accessibility features, and integrates Google Tag Manager for analytics with privacy-conscious consent defaults. Security posture is good with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved and explicit security policies are absent. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, but the overall business credibility remains high due to the professional website, certifications, and social media presence. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration details to improve trust.

Geveko Markings Germany GmbH is a well-established company specializing in the development, production, and distribution of horizontal road marking materials tailored to various sizes, materials, colors, and forms to meet segment-specific requirements. With over 100 years of experience and ISO 9001 certification, the company holds a strong market position in the transportation sector, serving primarily B2B customers focused on traffic safety and infrastructure. The website reflects a mature digital presence with comprehensive content, clear navigation, and multi-channel contact options. Technically, the site uses modern web technologies including Bootstrap, Google Analytics, Hotjar, and Facebook Pixel, hosted by Kortermann Hosting in Germany. Security posture is good with HTTPS enforced and privacy compliance evident through cookie consent mechanisms and a detailed privacy policy. No critical vulnerabilities or suspicious patterns were detected, indicating a trustworthy and professional online presence.

Geveko Markings is a well-established company specializing in the development, manufacturing, and distribution of road marking materials globally. With over 100 years of experience, the company offers a comprehensive range of products including preformed materials, hot-applied materials, paints, beads, aggregates, and equipment. Their market position is strong, supported by ISO9001 certification and a broad international presence with multiple regional domains. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content tailored to business and municipal clients. Technically, the site uses modern web technologies and Google Tag Manager for analytics, with a good security posture including HTTPS enforcement. However, explicit security headers and incident response information are not prominently published, and the WHOIS data for the domain is missing, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and professional but would benefit from enhanced security disclosures and WHOIS transparency.

P

PAKKA s.r.o.

pakka.cz

44

PAKKA s.r.o. operates as a specialized retail business focused on swimming pools and related accessories in Pardubice, Czech Republic. The company is an authorized partner of Albixon a.s., a leading European manufacturer of pools and enclosures, positioning itself as a trusted provider with over 15 years of experience in the industry. Their offerings include custom pool enclosures, pool chemicals, robotic and manual pool cleaners, and comprehensive pool maintenance products. The website reflects a professional retail presence targeting both consumers and businesses interested in pool products in the region. Technically, the website is built using modern web standards including HTML5, CSS3, JavaScript, and Bootstrap framework, with additional libraries such as Swiper.js for carousels and SVGInject for image handling. The site is hosted on a Czech hosting provider, with good mobile optimization and moderate performance. SEO and accessibility are adequately addressed, though some improvements could be made. From a security perspective, the site enforces HTTPS and includes a Content-Security-Policy header to upgrade insecure requests. However, other important security headers are missing, and there is no visible privacy or cookie policy, which indicates compliance gaps with GDPR and related regulations. No forms or analytics scripts are present, minimizing data collection risks but also limiting user engagement and tracking capabilities. Overall, the website is trustworthy and professionally presented but would benefit from enhanced privacy compliance and security hardening. The domain registration data is consistent and transparent, supporting the legitimacy of the business. Strategic improvements in privacy policy implementation, security headers, and user data protection would strengthen the company's digital maturity and customer trust.

G

GTM West

gtmwest.com

9

GTM West is a travel industry event platform focused on connecting travel advisors and suppliers primarily in the western region. The website provides detailed sections about the event's mission, agenda, advisory board, and participant qualifications, targeting travel professionals. Technically, the site is built on Squarespace, leveraging modern web technologies and third-party analytics tools such as Google Tag Manager and LinkedIn Insight. The site is well-designed, mobile-optimized, and uses HTTPS with HSTS for secure communications. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Additionally, the lack of privacy, cookie, and terms of service policies indicates gaps in compliance and user trust. Overall, the site is functional and professional but would benefit from enhanced transparency and compliance documentation.

R

Rittal GmbH & Co. KG

rittal.com

63

Rittal GmbH & Co. KG operates a professional website focused on industrial manufacturing solutions including enclosures, power distribution, climate control, IT infrastructure, software, and automation services. The company targets industrial and manufacturing sectors globally, as evidenced by multiple language versions of the site. The website demonstrates a moderate level of digital maturity with modern frontend technologies such as Vue.js and good SEO practices. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate gaps in transparency and privacy compliance. Security posture is moderate with no explicit security headers detected, and no visible incident response or vulnerability disclosure information. Overall, the website is professional and trustworthy in content but would benefit from enhanced security and privacy disclosures to improve compliance and user trust.

Stradasalt is a Norwegian brand under GC Rieber Minerals specializing in environmentally friendly road salt and dust-binding solutions. The company targets road maintenance and municipal clients with a focus on sustainable and chloride-free products. The website reflects a professional B2B supplier with a clear market niche and consistent branding. Technically, the site uses modern web technologies including Matomo analytics and Cookiebot for consent management, ensuring compliance with GDPR and privacy best practices. Security posture is solid with HTTPS, CSRF protection cookies, and domain transfer restrictions, though DNSSEC is not enabled and some security headers are missing. No direct contact emails or phone numbers are provided, relying on a contact form instead. Overall, the site is well-structured, mobile-optimized, and trustworthy, with room for improvement in explicit business contact details and security policy disclosures.

M

Město Pelhřimov

mupe.cz

44

The website mestopelhrimov.cz serves as the official online portal for the city of Pelhřimov in the Czech Republic. It provides comprehensive information about city administration, cultural institutions, sports facilities, educational establishments, and public services. The site targets residents, tourists, and local stakeholders seeking municipal information and services. The business model is that of a government entity providing public information and services, positioning itself as the authoritative source for city-related content. Technically, the website employs a modern tech stack including HTML5, CSS3, JavaScript, Google Analytics, Google Tag Manager, and Google reCAPTCHA for security. It uses the VismoWeb5 CMS platform and integrates translation services and a chatbot for enhanced user experience. The site is mobile optimized, accessible, and SEO friendly, though performance is moderate. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to mitigate bot traffic. It implements a GDPR-compliant cookie consent mechanism with granular user controls. However, it lacks visible security headers and does not publish explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website is trustworthy and professional, suitable for its government function. The absence of WHOIS data limits domain registration trust analysis but does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and providing clear contact information for incident response to further strengthen trust and compliance.

The website harry.cz is currently a parked domain page primarily used to advertise the domain for sale. It lacks any substantive business content, contact information, or user engagement features. The technical infrastructure is minimal, relying on basic HTML, CSS, and JavaScript with external scripts for advertising and tracking. There is no evidence of a content management system or active business operations. Security posture is weak due to absence of HTTPS confirmation, security headers, and privacy compliance mechanisms. The domain is registered since 2008 but is currently inactive, reducing its credibility as a business site. Overall, the site presents low risk but also low trustworthiness and professionalism.

M

Městský úřad Světlá nad Sázavou

svetlans.cz

48

The website svetlans.cz serves as the official online presence of the municipal government of Světlá nad Sázavou, Czech Republic. It provides residents and visitors with comprehensive information about local administration, public services, events, and official documents. The site is well-structured with clear navigation and includes essential contact information, event calendars, and online reservation systems for municipal services. The target audience is primarily local citizens and stakeholders interested in municipal affairs. Technically, the website is built on the Vismo CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google services like reCAPTCHA for form security and Google Translate for language accessibility. The site is hosted by Wedos, a reputable Czech hosting provider, and employs HTTPS for secure communications. Mobile optimization and accessibility are adequately addressed, though some improvements in SEO and security headers could enhance the overall digital maturity. From a security perspective, the site demonstrates good practices including HTTPS enforcement and use of CAPTCHA to prevent spam. However, it lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is basic, with a privacy policy and cookie information present but no active consent mechanism. The domain WHOIS data is consistent with the municipal nature of the site, showing a long registration history and no privacy protection, which aligns with transparency expectations for government entities. Overall, svetlans.cz is a trustworthy and professionally maintained municipal website with a solid foundation in content quality and business credibility. Enhancements in security policies, privacy mechanisms, and technical SEO could further strengthen its posture and user trust.

M

Město Kamenice nad Lipou

kamenicenl.cz

46

Město Kamenice nad Lipou operates an official municipal website serving residents and visitors with information about local government, culture, events, and public services. The site is well-branded with official city emblems and provides comprehensive contact details and event calendars. The target audience is primarily local citizens and tourists interested in the town's offerings. The business model is public service oriented, focusing on transparency and community engagement. Technically, the website uses a traditional HTML/CSS/JavaScript stack powered by the Vismo CMS platform. It integrates Google services such as reCAPTCHA for form security and Google Translate for language accessibility. The site is hosted under a Czech registrar and uses HTTPS, ensuring secure communications. Mobile optimization and basic accessibility features are present, though there is room for improvement in SEO and accessibility compliance. From a security perspective, the website enforces HTTPS and uses reCAPTCHA to protect forms from abuse. However, it lacks explicit security headers and a dedicated security policy or incident response page. Privacy compliance is basic, with privacy and cookie policies present but no active cookie consent mechanism. No vulnerabilities or exposed sensitive data were detected. Overall, the website is a trustworthy and professional municipal portal with a solid business credibility score. Recommendations include enhancing security headers, implementing cookie consent, and adding explicit terms of service and security policies to improve compliance and user trust.

M

Město Žirovnice

zirovnice.cz

46

The website represents the official online presence of Město Žirovnice, a municipal government entity in the Czech Republic. It provides comprehensive information about local administration, cultural events, tourism, and public services, targeting residents and visitors alike. The site is well-structured with clear navigation and includes social media integration to enhance community engagement. The business model is focused on public service and information dissemination, positioning it as a trusted local government resource. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. It incorporates Google reCAPTCHA for form security and Google Translate for multilingual support. The site is mobile-optimized and accessible, with moderate performance. However, there is room for improvement in implementing advanced security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, indicating a baseline security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response information, and vulnerability disclosure mechanisms suggests opportunities to enhance transparency and compliance. Overall, the site maintains a good security standard suitable for its public service role. The overall risk assessment is low, with the site demonstrating legitimacy, trustworthiness, and compliance with basic privacy regulations. Strategic recommendations include implementing security headers, adding clear security and incident response policies, enabling cookie consent banners, and maintaining regular security audits to strengthen the security posture and user trust.

M

Město Habry

habry.cz

44

The website www.habry.cz serves as the official municipal portal for the town of Habry in the Czech Republic. It provides residents and visitors with essential information including municipal news, official documents, event calendars, and contact details. The site targets local citizens and stakeholders interested in town governance and community activities. The business model is that of a government service portal, focusing on transparency and public communication. Technically, the website is built on the Vismo CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google services like reCAPTCHA for form security and Google Translate for multilingual support. The site is mobile-optimized and accessible, with a moderate performance profile. However, some modern security headers appear to be missing, and no advanced analytics or tracking services are detected. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, indicating a baseline security posture. There is no evidence of exposed sensitive data or vulnerabilities in the visible content. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in compliance and transparency. Overall, the website is a trustworthy and professional municipal portal with good content quality and user experience. The lack of WHOIS data reduces domain trust slightly but does not detract significantly from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing detailed security and privacy policies, and maintaining regular audits of third-party scripts to strengthen the security posture.

M

Město Pelhřimov

mestopelhrimov.cz

44

The website mestopelhrimov.cz serves as the official digital presence for the city of Pelhřimov in the Czech Republic. It provides comprehensive information about municipal offices, cultural institutions, event calendars, tourist information, and various public services. The site targets residents, tourists, and local businesses, positioning itself as a key government portal for the region. The business model is typical for a municipal government, focusing on information dissemination and public service facilitation. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integrations such as Google Analytics, Google Tag Manager, and Google reCAPTCHA v3 for security and analytics. The CMS appears to be a custom solution (VismoWeb5) developed by WEBHOUSE, s.r.o. The site is mobile optimized, accessible, and includes a GDPR-compliant cookie consent mechanism. Performance is moderate, with room for improvement in security headers and technical optimizations. From a security perspective, the site uses HTTPS and integrates reCAPTCHA to mitigate automated abuse. However, no explicit HTTP security headers were detected, and no security.txt or incident response policies are published. The WHOIS data is unavailable, likely due to privacy protection, which is common for municipal domains. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the security posture is good but could be enhanced with additional headers and transparency. The overall risk assessment is low, with the site appearing legitimate and professionally maintained. Strategic recommendations include implementing security headers, publishing security and incident response policies, improving WHOIS transparency if possible, and continuing regular audits of third-party scripts. These steps will enhance trust, compliance, and security resilience.

M

Metropolitan University Prague

imup.cz

60

The website iMUP.cz is an academic and cultural portal affiliated with Metropolitan University Prague, providing news, events, and scholarly content primarily targeting students, researchers, and the academic community. The site reflects a medium-sized educational institution with a consistent brand presence and active engagement in academic discourse and cultural events. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and social media integrations, delivering a good user experience with mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit incident response information suggests room for improvement. Privacy compliance is basic, with privacy information available in Czech but lacking comprehensive multilingual policies. Overall, the domain appears legitimate and trustworthy, supported by its university affiliation and professional content.

D

DigitalPA

concorsidiprogettazione.it

41

DigitalPA operates a specialized SaaS platform named Gara Spot, focused on managing online design competitions and telematic procurement procedures primarily for public administrations and companies in Italy. The platform supports the entire competition lifecycle with compliance to relevant regulations, emphasizing security, anonymity, and procedural correctness. The company positions itself as a leader in the Italian e-procurement and design competition market, offering both software and expert consultancy services. Technically, the website employs modern web technologies including Bootstrap, jQuery, and privacy-conscious analytics via Matomo, complemented by a LiveChat support widget. The site is mobile-optimized and well-structured, providing a professional user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is partially addressed with a privacy policy present but lacking a cookie consent mechanism. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

D

DigitalPA

affidamentiegare.it

68

Affidamenti e Gare is a specialized e-procurement platform developed by DigitalPA, targeting Italian public administrations to streamline procurement processes below EU thresholds. The platform offers comprehensive services including CIG requests, automated ANAC form management, and compliance with transparency obligations. Positioned as a leading solution in Italy, it benefits from DigitalPA's over 20 years of experience and ISO certifications, reinforcing its credibility and reliability. Technically, the website is built on WordPress with a modern theme and integrates advanced tools like Google reCAPTCHA Enterprise and Matomo analytics, reflecting a mature digital infrastructure. Security practices are solid, with HTTPS enforced and certifications in place, though some HTTP security headers could be improved. Privacy compliance is an area for enhancement, as explicit privacy and cookie policies are not evident. Overall, the website presents a professional, trustworthy, and user-friendly interface tailored to its niche audience.

DigitalPA operates the website www.centraliunichedicommittenza.it, offering a comprehensive, AGID-certified e-procurement software suite tailored for Centrali Uniche di Committenza (CUC) and qualified contracting authorities in Italy. The platform supports supplier registers, electronic tenders, and centralized procurement management, targeting public sector entities seeking compliance and efficiency in procurement processes. The website positions DigitalPA as a leading provider in the Italian public procurement software market, emphasizing regulatory adherence and integration with national systems such as ANAC and DURC. Technically, the site is built on WordPress with the Avada theme, leveraging modern web technologies and privacy-respecting analytics (Matomo). Security posture is strong with HTTPS, security headers, and reCAPTCHA Enterprise, though explicit security policies and incident response contacts are not published. Overall, the site is professional, well-structured, and trustworthy, with a clear focus on government clients and compliance.