Security Directory

A

Agentura Paseo, s.r.o.

vyletnik.cz

61

Vyletnik.cz is a well-established Czech travel and tourism portal operated by Agentura Paseo, s.r.o. The website offers over 20,000 tips for trips, events, hiking, castles, cycling routes, swimming, and other leisure activities primarily focused on the Czech Republic. It targets a broad audience interested in travel and outdoor activities, providing daily updated content and user-generated contributions. The business model relies on advertising revenue and content engagement, positioning Vyletnik.cz as a key player in the Czech travel media sector. Technically, the site is built on WordPress with a modern tech stack including Google Tag Manager, Google Adsense, Seznam Ads, and Yoast SEO for optimization. The site is mobile-optimized with good navigation and content structure, though some accessibility features could be improved. Performance is moderate with responsive design and SEO best practices implemented. From a security perspective, the site enforces HTTPS and uses common security practices such as reCAPTCHA and ad network integrations. However, explicit security headers are not clearly present, and no published security or incident response policies were found. Privacy compliance is partial, with a comprehensive privacy policy available but lacking a visible cookie consent mechanism. The absence of WHOIS data reduces domain trustworthiness, though the website content and business information appear legitimate and professional. Overall, Vyletnik.cz presents a solid digital presence with good content quality and business credibility. The main risks relate to incomplete WHOIS data and privacy compliance gaps. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance trust and compliance.

M

Městský úřad Litovel

litovel.eu

59

The website www.litovel.eu serves as the official digital portal for the city of Litovel, Czech Republic. It provides comprehensive municipal information, citizen services, event calendars, official announcements, and tourism-related content. The site targets residents and visitors, positioning itself as a trusted local government resource. The business model is that of a government municipal service portal, focusing on transparency and community engagement. Technically, the site employs a modern yet straightforward technology stack including jQuery, Google Tag Manager, and a custom CMS named Public4u. It integrates accessibility features such as a voice assistant and supports multiple languages via Google Translate. The site is mobile-optimized and demonstrates good SEO practices with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks explicit security headers and a published security policy or vulnerability disclosure program. Cookie consent and privacy policies are implemented, indicating basic GDPR compliance. The absence of WHOIS data limits transparency but does not detract from the site's legitimacy given its official nature. Overall, the site presents a low-risk profile with a solid foundation for municipal digital services. Strategic improvements in security headers, incident response transparency, and enhanced privacy disclosures would further strengthen its posture.

C

Citymind

citymind.tech

65

Citymind is a technology company specializing in AI-powered customer care solutions, primarily targeting municipalities, cities, and organizations. Their flagship offering is the Citymind AI Agent, an advanced chatbot that automates customer question resolution by leveraging sophisticated language models. The company positions itself as a trusted partner for digital transformation in public sector customer service, supported by industry leaders and municipalities. The website reflects a professional and consistent brand image with clear calls to action for demos and contact.

K

Kadlec - elektronika, s.r.o.

kadlecelektro.cz

48

Kadlec - elektronika, s.r.o. is a specialized Czech manufacturer of electronic display and queue management systems, operating since 1998. The company offers a broad portfolio of products including call systems, reservation systems, payment terminals, LED panels, and custom industrial displays. Their market position is that of a quality-focused, flexible provider serving business and industrial clients requiring advanced electronic visualization and queue management solutions. The website is professionally designed, bilingual (Czech and English), and provides clear contact channels and GDPR-compliant data collection mechanisms. Technically, the site is built on WordPress with modern libraries such as jQuery and Bootstrap, and integrates marketing and analytics tools with user consent. Security posture is solid with HTTPS and cookie consent, though some security headers and explicit policies could be improved. Overall, the site reflects a mature, trustworthy business with good digital maturity and compliance.

H

Horská služba ČR, o.p.s.

horskasluzba.cz

62

Horská služba ČR, o.p.s. is a Czech non-profit organization dedicated to mountain rescue and safety services. The website serves as an official information portal providing updates on rescue operations, avalanche warnings, and safety guidelines for mountain visitors. It is supported by government funding and partnerships with recognized entities, positioning it as a trusted national mountain rescue service. The site targets outdoor enthusiasts and the general public seeking safety information in mountainous regions of the Czech Republic. Technically, the website employs modern web technologies including Leaflet.js for interactive maps and Google Tag Manager for analytics, with a basic but functional mobile experience. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response disclosures are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, but the absence of WHOIS data introduces some uncertainty in domain legitimacy.

C

CGI IT Czech Republic s.r.o.

jiz50.cz

50

The website jiz50.cz represents the official platform for the 59th edition of the ČEZ Jizerská 50, a prestigious cross-country skiing race in Central Europe. The event is organized by CGI IT Czech Republic s.r.o. and targets both professional and hobby skiers. The site provides comprehensive information about the races, registration, results, partners, and charity initiatives, positioning itself as a leading event in the regional winter sports calendar. The business model revolves around event management, sponsorship, merchandise sales, and community engagement.

M

Muzeum skla a bižuterie v Jablonci nad Nisou

msb-jablonec.cz

45

Muzeum skla a bižuterie v Jablonci nad Nisou is a specialized cultural institution in the Czech Republic dedicated to the preservation and exhibition of glass and bijouterie artifacts. It holds unique and extensive collections, including the world's largest public collection of glass Christmas ornaments. The museum operates under the auspices of the Czech Ministry of Culture, positioning it as a significant governmental and non-profit entity in the cultural sector. The website reflects a professional and comprehensive digital presence, offering detailed information about exhibitions, events, and visitor services, targeting a broad audience including families, tourists, and researchers. Technically, the website employs modern web standards with responsive design, accessibility considerations, and integration of Google Tag Manager for analytics and marketing. Cookie consent mechanisms are implemented, demonstrating awareness of privacy regulations such as GDPR. However, some security best practices like explicit security headers and published security policies are absent, representing areas for improvement. The security posture is solid with HTTPS enforced and no visible vulnerabilities, but the lack of WHOIS data limits domain registration trust analysis. Despite this, the website's affiliation with the Ministry of Culture and consistent business information support its legitimacy. Overall, the site is well-maintained, user-friendly, and trustworthy, serving its cultural mission effectively.

K

Kulturní centrum Zahrada

kczahrada.cz

42

Kulturní centrum Zahrada is a small, community-focused cultural and social center based in Prague 11, Czech Republic. It offers a broad range of cultural events including concerts, theater, film screenings, educational programs, workshops, and leisure activities targeting a diverse audience from children to seniors. The website reflects a well-maintained digital presence with clear navigation, multilingual support, and integration of event management and ticketing systems. Technically, the site is built on WordPress using the Avada theme and several popular plugins, with modern JavaScript libraries and tracking tools implemented. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place, although no explicit security policy or incident response contacts are published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, serving as a reliable information hub for its community.

C

Chodovská Tvrz

chodovskatvrz.cz

45

Chodovská Tvrz is a cultural center located in a historic building in Prague, offering a wide range of cultural activities including concerts, art exhibitions, theater, cinema for children, and art workshops. The website positions itself as a unique cultural landmark on Jižní Město, targeting local residents, families, and art enthusiasts. The business model revolves around event hosting, space rentals, and ticket sales, supported by partnerships with local government and cultural organizations. Technically, the site is built on WordPress with a modern tech stack including popular plugins for SEO, event management, and user engagement. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and compliant with GDPR, with no signs of blocking or malicious activity.

P

Policie České republiky

policie.cz

62

The website policie.gov.cz is the official online presence of the Police of the Czech Republic, providing comprehensive information about police services, news updates, public safety resources, and contact points for citizens and foreigners. It serves as a critical government portal for law enforcement communication and public engagement. The site is well-branded, consistent, and targets a broad audience including the general public and foreign visitors seeking police-related information. Technically, the site uses legacy jQuery alongside modern analytics tools such as Google Tag Manager and Google Analytics. It enforces HTTPS and includes a Content Security Policy header, contributing to a solid security baseline. However, the use of an outdated jQuery version and minimal additional security headers represent areas for improvement. The site includes a cookie consent mechanism, supporting privacy compliance, though no explicit privacy policy or terms of service pages were found. Security posture is generally good with no visible vulnerabilities or blocking mechanisms detected. The absence of WHOIS data limits domain registration insights, but the official .gov.cz domain and consistent government branding strongly support legitimacy. The site does not contain any adult or questionable content and is safe for general audiences. Overall, the website is a professional government portal with good content quality and security practices, though it would benefit from modernizing its technical stack, enhancing security headers, and publishing clear privacy and terms policies to improve compliance and trust.

H

Health of the Ukranian people ICF

houp.org

49

Health of the Ukranian people ICF is an international charitable foundation established in 2009, focused on supporting healthcare access and innovation in Ukraine. The foundation aims to improve population health by providing quality medical care, educating doctors, and fostering systematic charity efforts. The website reflects a non-profit healthcare mission with a consistent brand and good content quality. Technically, the site is built on WordPress using the Divi theme, integrating multiple analytics and tracking services such as Google Analytics, Microsoft Clarity, TikTok, and Facebook pixels. While the site uses HTTPS and has a stable domain registration, it lacks key privacy and cookie policies, and security headers are not detected, indicating room for security and compliance improvements. No WAF or blocking mechanisms were detected, and the content is safe for general audiences.

L

Останні новини України та світу. Війни в Україні

liga.net

67

LIGA.net is a prominent Ukrainian news portal delivering up-to-date news on Ukraine and global events, with a focus on the ongoing conflict involving Russia. The website offers comprehensive news coverage, multimedia content, and live updates, targeting a broad general audience interested in current affairs. It holds a strong market position as a leading media outlet in Ukraine. Technically, the site employs modern web technologies including JavaScript, Google Analytics, Google Tag Manager, and AMP for performance and tracking. The site is mobile-optimized and SEO-friendly, with consistent branding and professional design. Security-wise, the site uses HTTPS but lacks explicit security headers and visible privacy or cookie policies, indicating room for improvement in compliance and security best practices. Overall, the site is trustworthy and professionally maintained, though it would benefit from enhanced privacy compliance and security measures.

H

HELP UKRAINE ROMANIA

helpukraineromania.org

46

HELP UKRAINE ROMANIA is a small non-profit humanitarian aid organization focused on providing medical and humanitarian assistance to Ukraine, primarily through a logistics hub in Chernivtsi. The organization collaborates with Ukrainian government bodies, local authorities, and volunteer business initiatives to coordinate aid transport and delivery. Their services include receiving aid requests, organizing logistics from Europe and worldwide, and partnering with major Ukrainian logistics companies for targeted aid distribution. The website is multilingual and targets donors, volunteers, and aid recipients. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and integrates Google Analytics and Google Tag Manager for tracking. Hosting is provided by Mirohost, and the site is mobile-optimized with good SEO practices. However, there is no detected CMS or advanced frameworks. Performance is moderate, and accessibility is basic. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers. There are no visible privacy or cookie policies, which is a compliance gap. No vulnerability disclosure or security.txt file is present. The WHOIS data is consistent with the organization's founding date and shows no suspicious patterns, supporting legitimacy. Overall, the website is trustworthy and professional but would benefit from improved privacy compliance and enhanced security practices to better protect users and build trust.

Save the Children Federation, Inc. operates a comprehensive and professionally designed website focused on child welfare, humanitarian aid, and education. The organization is positioned as a leading non-profit with a century-long history, serving children in the U.S. and globally. The website effectively targets donors, volunteers, and partners with clear messaging and secure donation mechanisms. Technically, the site uses a modern Drupal CMS infrastructure with integrations for analytics and marketing, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and incident response details are not published. Overall, the site demonstrates high trustworthiness and compliance with privacy regulations, including GDPR. The lack of WHOIS data is mitigated by strong on-site trust signals and recognized charity certifications.

B

Blue / Yellow

blue-yellow.lt

59

Blue / Yellow is a Lithuanian non-governmental organization established in 2014 that provides critical supplies and support to Ukrainian soldiers and volunteers in their fight against Russian aggression. The organization operates multiple fundraising campaigns focused on drones, medical aid, vehicles, and training, positioning itself as a key humanitarian aid facilitator with a strong presence in Lithuania and active media coverage. The website is built on WordPress with modern web technologies and integrates analytics and tracking tools such as Google Tag Manager and Facebook Pixel. Security posture is adequate with HTTPS and Cloudflare DNS, but lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is partial, with cookie consent implemented but no visible privacy or terms of service pages. Overall, the site is professional, trustworthy, and well-branded, serving a general audience interested in supporting Ukraine.

Б

Благодійний фонд «Схід SOS»

east-sos.org

60

Благодійний фонд «Схід SOS» є українською неприбутковою організацією, що надає всебічну допомогу постраждалим від збройного конфлікту, внутрішньо переміщеним особам, а також підтримує громади через гуманітарні, правові, психологічні та освітні проєкти. Організація має стабільну позицію на ринку благодійних фондів в Україні, активно співпрацює з міжнародними донорами та партнерами. Технічна інфраструктура сайту базується на WordPress з використанням сучасних плагінів для SEO, доступності та інтерактивності, що забезпечує добру продуктивність та мобільну оптимізацію. З точки зору безпеки, сайт використовує HTTPS, має налаштований статус домену clientTransferProhibited, але не використовує DNSSEC, а також не має видимих політик безпеки чи контактів для інцидентів. Загалом, сайт є професійним, надійним і орієнтованим на користувача, але може покращити відповідність GDPR шляхом впровадження механізму згоди на куки та публікації політики безпеки.

U

United Help Ukraine

unitedhelpukraine.org

50

United Help Ukraine is a registered 501(c)(3) non-profit organization founded in 2014, dedicated to supporting the Ukrainian people through humanitarian aid, tactical medicine, and medical assistance. The organization has a strong market position as a trusted charity with multiple programs targeting defenders, medical aid, and humanitarian welfare. Their website is professionally designed, content-rich, and optimized for user engagement and donations. Technically, the site is built on WordPress with modern plugins and tracking tools, hosted by InMotion Hosting, and employs HTTPS with good security practices, although some security headers and DNSSEC are missing. Privacy compliance is well addressed with a cookie consent mechanism, but explicit privacy and security policies are not clearly found. The domain registration data aligns well with the organization's history, enhancing trustworthiness. Overall, the website demonstrates a mature digital presence suitable for its non-profit mission.

P

People’s Project.com

peoplesproject.com

57

People’s Project.com is a Ukrainian volunteer center focused on supporting the Ukrainian Army and providing treatment for severely wounded soldiers using unique technologies. The website positions itself as a national non-profit organization with a medium-sized presence in Ukraine. Technically, the site is built on WordPress with common plugins such as Elementor and photo gallery tools, and it integrates analytics and tracking services like Google Analytics, Facebook Pixel, and Hotjar. The site is accessible, uses HTTPS, and has moderate performance and mobile optimization. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site appears legitimate in content and purpose but requires improvements in transparency and security practices.

R

Razom

razomforukraine.org

69

Razom is a well-established non-profit organization dedicated to supporting Ukraine through humanitarian aid, advocacy, cultural promotion, and community engagement. The website reflects a mature digital presence with comprehensive program descriptions and active social media integration, positioning Razom as a credible and impactful entity in its sector. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good performance and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and privacy compliance are recommended. The absence of WHOIS data limits domain trust analysis but is likely justified given the organization's geopolitical context. Overall, Razom's website is professional, trustworthy, and effective in communicating its mission and services.

B

Агенти крові — все про донорство крові в Україні

bloodagents.com

58

Bloodagents.com is an informational website dedicated to blood donation in Ukraine, providing details about projects and initiatives related to blood donors. The site targets Ukrainian donors and organizations involved in blood donation, positioning itself as a niche platform in the non-profit sector. The website was established in 2020 and maintains a consistent branding and good content quality focused on its mission. Technically, the site is built using the Weblium website builder, employs modern web standards, and integrates Google Tag Manager for analytics. Hosting and DNS services are managed through reputable providers including NS1 and Squarespace DNS. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC, which are recommended for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is safe, professional, and serves its informational purpose well but would benefit from enhanced security and privacy practices.

K

Kyiv Independent

kyivindependent.com

71

The Kyiv Independent is an English-language independent news media outlet focused on providing comprehensive news coverage about Ukraine. Founded in 2021, it targets English-speaking audiences interested in Ukrainian political, social, and economic affairs. The website offers news articles, analysis, and subscription/donation options, positioning itself as a trusted source of independent journalism in the region. Technically, the site is built on modern frameworks such as Next.js and React, hosted with Cloudflare DNS, and integrates Google Analytics and Tag Manager for tracking. The site demonstrates good performance, mobile optimization, and SEO practices. Security-wise, the site enforces HTTPS, employs standard security headers, and has a clientTransferProhibited domain status, though DNSSEC is not enabled. No explicit security policy or incident response contacts are published, and no vulnerability disclosure program is evident. Overall, the site is professional, trustworthy, and safe for general audiences, with room for improvement in security transparency and DNS security. Strategic recommendations include enabling DNSSEC, publishing a security policy, and establishing a vulnerability disclosure channel.

H

hromadske

hromadske.ua

64

Hromadske is a well-established Ukrainian independent news media organization founded in 2013. It provides comprehensive news coverage including political, economic, social, and cultural topics, along with video content, podcasts, and special projects. The website targets a general audience interested in current events in Ukraine and worldwide. Technically, the site uses modern web technologies such as React and integrates analytics and advertising scripts from Google and Membrana Media. The site is mobile optimized and well-structured for user experience. Security posture is good with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies. No contact information or incident response details are publicly available, which could be improved for transparency and compliance. Overall, the site is professional, trustworthy, and content-rich, serving as a key media outlet in Ukraine.

L

LifeLine Ukraine

lifelineukraine.com

63

LifeLine Ukraine is a non-profit organization providing critical mental health support and suicide prevention services across Ukraine. Established in 2019, it operates a 24/7 hotline (short number 7333) and offers crisis intervention, educational courses, and resources. The organization targets individuals experiencing emotional crises, including veterans and the general population. The website reflects a professional and consistent brand presence with clear navigation and relevant content. Technically, the site uses modern frameworks such as Nuxt.js and Prismic CMS, integrating analytics and live chat tools to enhance user engagement. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements like DNSSEC and security headers are recommended. Overall, the domain registration aligns well with the organization's history, supporting its legitimacy.

У

Українська Жіноча Варта

uavarta.org

61

Українська Жіноча Варта is a Ukrainian non-profit organization dedicated to women's resistance movement, providing training in self-defense, medical skills, and survival during combat situations, alongside daily news updates about the war in Ukraine. The organization targets civilians and the general public interested in these services. The website is built on WordPress with a modern plugin ecosystem including WooCommerce, Elementor, and event calendar tools, hosted by Hosting Ukraine LLC and utilizing Cloudflare DNS and CDN services. The site is multilingual and optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS enforced and use of Cloudflare, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is limited as no explicit privacy or cookie policies were found. Contact information includes a verified phone number and multiple social media profiles. Overall, the website is professional, trustworthy, and safe for general audiences.

M

Medical battalion "Hospitallers"

hospitallers.life

51

The Medical Battalion "Hospitallers" is a Ukrainian volunteer paramedic organization founded in 2014 by Yana Zinkevich. It operates on the front lines providing first aid, evacuation, and rehabilitation support to wounded individuals during the ongoing conflict in Ukraine. The organization relies heavily on charitable donations and volunteer efforts, with a strong presence across multiple donation platforms including bank transfers, PayPal, and cryptocurrencies. Their mission is encapsulated in the slogan "For the sake of every life." The website serves as a hub for information, fundraising, and volunteer recruitment, targeting donors and supporters globally. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Fonts, Google Tag Manager, and Weglot for multilingual support. The site is mobile optimized and provides a good user experience with clear navigation and professional design. However, some accessibility features are basic, and SEO is adequately implemented. From a security perspective, the site uses HTTPS with good SSL configuration but lacks several important security headers. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. The WHOIS data for the domain is malformed and unavailable, which slightly reduces trust in domain legitimacy. No incident response or vulnerability disclosure information is provided. Overall, the website is a credible and professional platform for a small non-profit healthcare organization, with room for improvement in privacy compliance and security best practices. The lack of WHOIS transparency is a concern but is mitigated by the organization's visible operational history and social media presence.

Б

БО “БФ “КОЛО УКРАЇНА”

koloua.com

65

KOLO is a Ukrainian non-profit charitable foundation founded in 2022 by members of the tech community to provide technological support to the Ukrainian armed forces. The foundation focuses on delivering critical devices such as communication equipment, drones, electronic warfare systems, and optics to frontline defenders. It operates a donation-based business model including one-time donations and subscription-based funding, supported by a broad community and reputable partners. The website is professionally designed, mobile-optimized, and provides transparent reporting and multiple donation channels. Technically, KOLO uses modern web technologies including Django backend, Amazon S3 hosting for assets, and integrates analytics tools like Google Analytics and Hotjar for user insights. Security posture is good with HTTPS enforced and domain transfer lock enabled, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is adequate with privacy and cookie policies present, but lacks a cookie consent mechanism. Overall, KOLO presents a trustworthy and professional online presence aligned with its mission to support Ukraine's defense through technology.

The website www.mf.cz functions primarily as a content aggregator portal recommending a variety of Czech internet websites focused on technology, finance, health, software, and media. It does not provide direct business services but serves as a gateway to partner sites. The site is modest in size and scope, targeting Czech internet users interested in these topics. Technically, the site uses modern frameworks such as Bootstrap 5 and integrates Google Tag Manager and Google Analytics for tracking. The site is mobile responsive and has a basic but functional design. Security posture is moderate with HTTPS likely enabled (not explicitly confirmed) but lacks visible security headers and privacy policies, which reduces compliance and trust. The absence of WHOIS data is a significant limitation in assessing domain legitimacy and ownership transparency. Overall, the site is safe for general audiences and does not contain adult or explicit content.

D

Deník.cz

denik.cz

61

Deník.cz is a prominent Czech news portal providing comprehensive regional, national, and international news coverage. It serves a broad audience in the Czech Republic with content spanning politics, culture, sports, and everyday life. The website is part of the Vltava Labe Media group, a significant player in the Czech media landscape. The site demonstrates a mature digital presence with structured data, social media integration, and a professional design tailored for desktop and mobile users. Technically, Deník.cz employs modern web technologies including Google Tag Manager, Gemius analytics, and content delivery via Cloudfront, ensuring moderate performance and good SEO practices. Security-wise, the site enforces HTTPS and includes standard security headers, though it lacks a publicly visible security policy or vulnerability disclosure program. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, Deník.cz presents a trustworthy and professional media outlet with a strong market position in Czech regional news.

B

BippesBrandão GmbH

bippesbrandao.de

65

BippesBrandão GmbH is a small, professional digital agency based in Offenbach, Germany, specializing in tailored digital solutions including strategy, user experience, visual design, and development. The company targets national and international clients seeking high-quality digital agency services. Their market position is supported by a portfolio of notable clients and a consistent, professional web presence. Technically, the website employs modern web standards, including HTML5, CSS3, JavaScript, and integrates multimedia content via Vimeo. The use of a headless CMS (Directus) for media management indicates a modern content infrastructure. Security-wise, the site enforces HTTPS, implements cookie consent for analytics, and anonymizes IPs in Google Analytics (though GA is currently commented out). However, security headers are not explicitly detected, and no incident response or vulnerability disclosure policies are published. Overall, the site is well-designed, user-friendly, and trustworthy, with minor improvements recommended in security headers and explicit security policies.

C

CREATIVE sites

creativeshop.sk

57

CREATIVE sites is a Slovak-based company specializing in providing a professional e-commerce platform named CREATIVE shop. The platform offers a comprehensive suite of services including an intuitive CMS, custom UX and graphic design, continuous feature development, bespoke programming, e-commerce and SEO consulting, and dedicated customer support. Positioned as one of the top e-commerce solutions in Slovakia, CREATIVE sites targets ambitious entrepreneurs and businesses seeking tailored online shop solutions with integrated marketing and automation capabilities. Technically, the website employs modern JavaScript libraries, integrates analytics and tracking tools such as Google Tag Manager and Facebook Pixel, and uses Amazon Cloudfront CDN for content delivery. Security measures include HTTPS enforcement, Google reCAPTCHA v3, CSRF tokens in forms, and Sentry for error monitoring, reflecting a mature security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The WHOIS data aligns with the website's business claims, supporting legitimacy and trustworthiness. Overall, the website demonstrates strong professionalism, technical maturity, and business credibility.

S

SEIGI

seigi.eu

44

SEIGI is a specialized technology company focused on developing and selling modules and integrations for PrestaShop and thirty bees e-commerce platforms. Their website offers a variety of extensions aimed at enhancing online store functionality and marketing capabilities. The company targets e-commerce store owners seeking to improve their platform capabilities through specialized software modules. Technically, the website employs a mature but somewhat dated technology stack including Bootstrap 3 and jQuery 1.7, supplemented by modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Hotjar, and Matomo. While the site is well-structured and mobile-optimized, it lacks some key compliance documents such as a privacy policy and terms of service. Security posture is adequate with HTTPS enforced and cookie consent implemented, but the absence of security headers and use of outdated libraries present potential risks. Overall, SEIGI appears to be a legitimate small technology business with a focused market niche, but should improve privacy compliance and update technical components to enhance security and trust.

D

Dům zahraniční spolupráce

dzs.cz

53

Dům zahraniční spolupráce (DZS) is a Czech government-affiliated organization under the Ministry of Education, Youth and Sports, serving as the national agency for international education. The website provides comprehensive information on international education programs, grants, projects, statistics, and events, targeting students, educational institutions, and project applicants. It holds a strong market position as an authoritative source for international education in the Czech Republic. Technically, the website is built on Drupal 9, leveraging modern web technologies including Google Tag Manager, Cookiebot for consent management, and various tracking tools for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, with good performance and clear navigation. From a security perspective, the site enforces HTTPS, uses consent management for cookies, and does not expose sensitive data. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly detected and could be improved. The absence of WHOIS data is notable but likely due to CZ NIC policies rather than malicious intent. Overall, the site demonstrates a mature security posture with room for minor enhancements. The overall risk is low given the official nature of the organization, the quality of content, and the security measures observed. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and maintaining up-to-date CMS components to mitigate vulnerabilities.

D

DPV Deutscher Pressevertrieb GmbH

dpv-hamburg.de

39

DPV Deutscher Pressevertrieb GmbH operates as a full-service subscription service provider specializing in the distribution and management of magazines, newspapers, and digital media products. The company targets publishers seeking reliable subscription fulfillment, customer service, technology solutions, logistics, and direct marketing support. Their market position is that of an established and professional service provider within the German media distribution sector, offering modular CRM solutions such as KIMBA for both print and digital offerings. The website reflects a medium-sized enterprise with consistent branding and a clear focus on their core services.

D

DMV DER MEDIENVERTRIEB

dermedienvertrieb.de

61

DMV DER MEDIENVERTRIEB is a German-based full-service media distribution company specializing in consulting, press distribution, POS marketing, digital sales, logistics, field service, and market observation. The company positions itself as a market leader with a broad portfolio serving publishers and media companies. Their website is professionally designed, mobile-optimized, and SEO-friendly, built on WordPress with modern frameworks and plugins such as Yoast SEO and WP Rocket. Security posture is strong with HTTPS and security headers implemented, though some improvements are recommended in privacy compliance and incident response transparency. Overall, the site reflects a credible and established business with a moderate to high level of digital maturity.

Ł

Łódzka Organizacja Turystyczna

ilovelodz.pl

41

The website ilovelodz.pl is an official e-commerce platform operated by the Łódzka Organizacja Turystyczna, offering a variety of souvenirs, gifts, and merchandise themed around the city of Łódź, Poland. It targets tourists and local residents interested in regional products. The site is built on the Prestashop CMS platform and incorporates modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel for marketing and analytics purposes. The design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. Security measures include HTTPS encryption, cookie consent mechanisms compliant with GDPR, and secure session management. However, some security headers could be improved, and DNSSEC is not enabled. The domain registration data is consistent with the business profile, indicating legitimacy. Overall, the site demonstrates a solid digital presence with good privacy and security practices, suitable for its business model and audience.

A

AFG-obrana.cz - army shop. Prodej zbraní a střeliva.

afg-obrana.cz

58

AFG-obrana.cz is an e-commerce retail and wholesale business specializing in firearms, ammunition, airsoft equipment, archery, and tactical gear primarily serving the Czech Republic market. The website presents a professional and well-structured platform with clear navigation and multiple product categories targeting enthusiasts and professionals in defense and outdoor sectors. The business model focuses on both retail and wholesale customers, leveraging multilingual support and social login capabilities to enhance user experience. Technically, the website employs a modern technology stack including JavaScript frameworks, Google Tag Manager, Facebook SDK, Google reCAPTCHA, and Sentry for error tracking. It is built on the CREATIVE shop CMS platform and demonstrates good mobile optimization and SEO practices. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, with active error monitoring via Sentry. However, it lacks explicit security headers and a publicly accessible privacy policy, which are areas for improvement. The WHOIS data is not publicly available, likely due to privacy protection, which is common for businesses dealing with sensitive products like firearms. Overall, the website is legitimate and professionally maintained but would benefit from enhanced transparency and security best practices to improve trust and compliance. Strategic recommendations include publishing comprehensive privacy and security policies, implementing security headers, and establishing a vulnerability disclosure process.

A

AFG.eu

afg-defense.eu

65

AFG.eu operates as a specialized e-commerce retailer focused on military, hunting, airsoft, and outdoor equipment. The company targets enthusiasts and professionals seeking weapons, ammunition, tactical gear, and related accessories primarily in the European market. The website demonstrates a solid market position with multiple regional domains supporting localized audiences. Technically, the site is built on the CREATIVE shop CMS platform, leveraging modern JavaScript libraries, Google reCAPTCHA for bot protection, and Sentry for error monitoring. The presence of Google Tag Manager and Facebook SDK indicates active marketing and analytics efforts. Security posture is generally good with HTTPS enforced and CSRF protections in place, though the absence of explicit privacy and cookie policies and security.txt files suggests room for compliance improvement. Overall, the site is professional, accessible, and trustworthy with moderate risk due to limited WHOIS transparency and incomplete privacy disclosures.

T

Travel Bakers

travelbakers.cz

43

Travel Bakers is a specialized non-profit organization dedicated to supporting municipalities, towns, and destinations in the Czech Republic and Slovakia with effective tourism management. Their offerings include strategic planning, workshops, marketing strategies, interpretation plans, and comprehensive educational programs for tourism professionals. The organization positions itself as an experienced and trusted partner with over 10 years in the tourism sector, emphasizing practical and resource-efficient solutions. Technically, the website is built on Drupal 10 with modern front-end technologies including Bootstrap 5 and Typekit fonts. It integrates Google Tag Manager and CookieHub for analytics and cookie consent management, reflecting a moderate level of digital maturity. The site is mobile-optimized, accessible, and well-structured, providing a positive user experience. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers and a published privacy policy, which are areas for improvement. The absence of WHOIS data limits domain trust verification, but the professional presentation and external references support legitimacy. Overall, the website demonstrates a solid security posture with room for enhancements in transparency and compliance. The overall risk assessment is moderate with recommendations to publish comprehensive privacy and security policies, implement security headers, and improve WHOIS transparency to enhance trust and compliance.

M

Magistrát města Hradec Králové

mmhk.cz

41

The website www.hradeckralove.org is the official municipal portal for the city of Hradec Králové in the Czech Republic. It serves as a comprehensive information hub for residents, visitors, and businesses, providing access to city news, public services, cultural events, social programs, and administrative resources. The site is well-positioned as the authoritative source for local government information and community engagement. Technically, the site employs a custom CMS platform (VismoWeb), uses modern web technologies including HTML5, CSS3, and JavaScript, and integrates Google services such as Analytics, Tag Manager, reCAPTCHA, and Translate to enhance functionality and user experience. The website is mobile-optimized and accessible, with good SEO practices and clear navigation. Security-wise, the site enforces HTTPS, implements standard security headers, and uses reCAPTCHA to protect forms, indicating a solid security posture. However, the absence of a visible security policy or vulnerability disclosure page suggests room for improvement in transparency and incident response readiness. The WHOIS data is unavailable due to a malformed query response, limiting domain registration trust assessment, but the official nature of the site and consistent branding mitigate concerns. Overall, the site is professional, trustworthy, and serves its public function effectively.

S

Stadtwerke Kiel AG

stadtwerke-kiel.de

70

Stadtwerke Kiel AG is a regional energy utility provider serving Schleswig-Holstein and Hamburg, offering electricity, gas, district heating, water, photovoltaic solutions, and e-mobility services. The company positions itself as a local, customer-focused energy supplier with comprehensive service offerings and a strong regional presence. The website reflects a mature digital infrastructure built on TYPO3 CMS, integrating modern technologies such as Google Maps API, Google Tag Manager, and Usercentrics for consent management. The site is well-optimized for mobile and accessibility, providing a professional user experience with clear navigation and rich content. Security posture is strong with HTTPS enforcement, security headers, and secure form handling, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the domain registration data aligns well with the business identity, indicating a trustworthy and legitimate online presence.

A

Alliance Of Digital Builders

aodb.com

63

Alliance Of Digital Builders (AODB) is a French digital services company specializing in secure, custom digital solutions including internet, extranet, e-commerce, cloud, and DevOps services. With approximately 18 years of experience and nearly 4000 projects, AODB holds a strong market position as a leader in Drupal solutions in France, serving notable clients including CAC 40 companies. The website reflects a mature digital infrastructure leveraging Drupal 10, React, Symfony, and cloud technologies such as AWS. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though no explicit security policy or incident response contacts are published. Overall, the site is professional, well-structured, and compliant with GDPR requirements, supporting a high trustworthiness rating.

D

Destinační společnost Hradecko, z. s.

hkinfo.cz

45

The website www.hkinfo.cz serves as the official tourist information center for Hradec Králové, Czech Republic, operated by Destinační společnost Hradecko, z. s. It provides comprehensive local cultural event calendars, ticket sales, guided tours, souvenirs, and regional products, targeting tourists and local residents interested in cultural and leisure activities. The site is well-branded, consistent, and integrates multiple partner organizations, enhancing its credibility within the local tourism ecosystem. Technically, the site uses a variety of JavaScript libraries and frameworks including jQuery, Bootstrap, and Google Analytics, with a CMS identified as Mijahoo 2.05. The site is moderately optimized for performance and mobile use, with good SEO practices evident.

D

Destinační společnost Hradecko, z. s.

poznejhradecko.cz

37

Poznej Hradecko is a regional tourism information platform operated by Destinační společnost Hradecko, z. s., a non-profit association focused on promoting cultural heritage and attractions in the Hradecko region of the Czech Republic. The website offers an interactive map with categorized points of interest including castles, museums, folk architecture, entertainment venues, accommodation, and dining options. It supports multiple languages, enhancing accessibility for international visitors. Technically, the site is built on Angular 8 with OpenLayers for mapping and integrates Google Tag Manager for analytics. The design is professional and mobile-optimized, providing a good user experience. Security posture is moderate with HTTPS enabled but lacks explicit security headers and detailed security policies. Privacy and cookie policies are present, indicating basic GDPR compliance. WHOIS data is unavailable, likely due to privacy protection, but no suspicious indicators were found. Overall, the site is a credible and useful resource for tourists, though improvements in security and contact transparency are recommended.

T

Tomáš Kořínek

tomaskorinek.cz

54

Tomáš Kořínek is a seasoned web developer and consultant based in the Czech Republic, offering custom web development, website improvements, and consulting services with over 19 years of experience. The website showcases a professional portfolio of over 170 projects, emphasizing personalized service and technical expertise. The business operates as a small entity focused on delivering tailored web solutions to clients seeking quality and reliability. Technically, the website is well-built using modern web standards, responsive design, and optimized images, hosted by a reputable Czech provider. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and published policies. Overall, the site is trustworthy, professional, and user-friendly, with clear contact channels and a transparent business presence.

S

Stand For Ukraine

standforukraine.com

57

Stand For Ukraine is a non-profit donation aggregator website founded in 2022 to support Ukraine amid Russian military aggression. It provides a curated list of verified military and humanitarian organizations, facilitating donations through direct links. The platform targets a global audience of supporters and donors, offering multilingual support and clear categorization of aid organizations. The website is built on modern technologies including React and Next.js, hosted with Cloudflare DNS, and optimized for mobile devices with good SEO practices. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, representing compliance gaps. Contact information is limited to an email address and social media links. Overall, the site is trustworthy, professional, and serves a critical humanitarian function.

P

Polar Multimedia

polarmultimedia.cz

55

Polar Multimedia is a Czech Republic-based multimedia company specializing in a broad range of services including TV program and video production, multimedia projects, 3D virtual studios, live broadcasts, graphics and animations, virtual reality, web and application development, event organization, and broadcasting of TV stations including their own station POLAR. The company targets businesses and organizations seeking integrated multimedia solutions and broadcasting services. Their market position appears regional with a focus on comprehensive multimedia offerings. Technically, the website is built on WordPress CMS using popular plugins such as WPBakery Page Builder and Slider Revolution, with integration of Google services like Google Analytics and Tag Manager. The site is mobile optimized and uses HTTPS with good SSL configuration. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. There are no detected vulnerabilities in the visible content, but the absence of security headers and privacy/cookie policies indicates gaps in compliance and security best practices. The lack of WHOIS data limits domain legitimacy verification, though the professional website and active social media presence support the company's credibility. Overall, the website is professional and functional with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and domain registration transparency are recommended to enhance trust and compliance.

D

DroitThemes

droitthemes.com

49

DroitThemes is a specialized provider of premium WordPress themes, plugins, and templates, focusing on enhancing the WordPress ecosystem with high-quality Elementor addons and multipurpose themes. Established in 2016, the company targets WordPress users and developers seeking professional tools to build websites efficiently. Their market position is supported by positive customer testimonials, active social media presence, and partnerships with marketplaces like Themeforest. Technically, the website is built on WordPress with modern plugins such as Elementor and Yoast SEO, integrating advanced marketing and analytics tools including Google Analytics, Facebook Pixel, and Twitter Ads. The infrastructure is hosted with NameCheap and uses secure HTTPS connections, though DNSSEC is not enabled. Security measures include reCAPTCHA on forms and domain transfer protection, but the site lacks some HTTP security headers and explicit security policies. Privacy compliance is partially met with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the website demonstrates a good balance of business credibility, technical implementation, and security posture, suitable for its niche audience.

M

MultiSport Benefit, s.r.o.

multisport.cz

58

MultiSport Benefit, s.r.o. operates a well-established employee benefit program in the Czech Republic, providing access to over 1900 sports and relaxation facilities via the MultiSport card. The company targets employers, employees, students, and partners, positioning itself as a leading provider in the corporate wellness sector. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. Technically, the site is built on WordPress, leveraging modern analytics and marketing tools, hosted on Azure DNS infrastructure, and optimized for mobile and SEO. Security posture is strong with HTTPS, cookie consent, and no visible vulnerabilities, though formal security policies and incident response details are absent. Overall, the domain registration data aligns with the business history, supporting legitimacy and trustworthiness.

R

Retino

retino.com

54

Retino is a SaaS company specializing in automating post-purchase care for e-commerce businesses, offering shipment tracking and returns management solutions. The website presents a professional and modern interface, targeting online stores seeking to improve customer satisfaction and operational efficiency. The technical infrastructure leverages modern web technologies including Google Tag Manager, reCAPTCHA Enterprise, and multiple tracking pixels, indicating a mature digital marketing and analytics setup. Security posture is solid with HTTPS and form protections, though explicit security policies and incident response contacts are absent. The missing WHOIS data is a notable anomaly that slightly impacts trust but does not overshadow the professional business presence. Overall, Retino demonstrates a strong market position in e-commerce automation with room for enhanced transparency in security and compliance documentation.

N

NETservis s.r.o.

webredakce.cz

44

Webredakce.cz is a Czech Republic-based technology company operated by NETservis s.r.o., offering a comprehensive content management system (CMS) designed for easy management of websites and e-shops. The platform emphasizes responsive design, multilingual support, and custom module development, targeting businesses and individuals seeking efficient web content management solutions. The company showcases reputable client references, indicating a solid market presence in the CMS domain. Technically, the website employs common web technologies including jQuery, Fancybox, Google Analytics, and Google Tag Manager, with a custom CMS backend. The site is mobile-optimized with responsive design and includes client-side form validation and CAPTCHA tokens to mitigate spam. However, the use of an older jQuery version and lack of explicit security headers suggest areas for technical improvement. From a security perspective, the site uses HTTPS and implements basic form security measures but lacks visible security headers and published privacy or cookie policies, which are important for GDPR compliance. The absence of WHOIS data for the domain raises concerns about domain legitimacy verification, impacting overall trustworthiness. No WAF or blocking mechanisms were detected, and the site content is safe and business-oriented. Overall, Webredakce.cz presents a professional and functional CMS offering with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and domain registration transparency are recommended to enhance trust and compliance.