Security Directory

C

Click & Pledge

clickandpledge.com

68

Click & Pledge is a well-established technology company specializing in providing comprehensive fundraising solutions for nonprofit organizations. With over 25 years of experience, the company offers a robust SaaS platform that includes customizable donation forms, peer-to-peer fundraising sites, text-to-give, video fundraising, and Salesforce integration. Their market position is strong within the nonprofit fundraising sector, supported by a professional website, consistent branding, and active social media presence. The company targets nonprofit organizations and fundraising professionals seeking integrated and scalable fundraising tools. Technically, the website is built on WordPress using the Avada theme, enhanced with modern JavaScript libraries and plugins such as Slider Revolution, Yoast SEO, and Google reCAPTCHA v3. Hosting is provided via Amazon AWS infrastructure, ensuring reliable performance and scalability. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be improved. From a security perspective, the site enforces HTTPS and employs reCAPTCHA to protect forms. While some security headers are not explicitly detected, no critical vulnerabilities or exposed sensitive data were found. The WHOIS data confirms domain legitimacy with a long registration history consistent with the company's claims. Privacy and cookie policies are present and indicate GDPR compliance, although no explicit incident response or vulnerability disclosure pages were found. Overall, Click & Pledge presents a trustworthy and professional online presence with a solid technical foundation and a good security posture. Strategic improvements in security headers, accessibility, and formal vulnerability disclosure could further enhance their security and compliance standing.

The Independence Hall Association operates ushistory.org as a nonprofit educational platform dedicated to providing comprehensive U.S. history resources, including free online textbooks and historical documents. The website targets students, educators, homeschoolers, and history enthusiasts, positioning itself as a reputable and long-standing resource with a history dating back to 1995 online and organizational roots from 1942. The business model focuses on educational outreach without commercial sales as a primary driver, supported by donations and merchandise sales. Technically, the site uses a legacy technology stack including Bootstrap 3 and jQuery 1.12.2, with additional components like WOWSlider and Google Custom Search. Hosting and DNS are managed via Cloudflare, providing some performance and security benefits. However, the site serves some resources over HTTP, uses outdated JavaScript libraries with known vulnerabilities, and lacks modern security headers and DNSSEC, indicating moderate digital maturity with room for modernization. Security posture is moderate; the domain is secured with transfer prohibitions and uses Cloudflare DNS, but the absence of DNSSEC, outdated libraries, and missing security headers present risks. No privacy or cookie policies are visible despite use of Google cookies and Facebook SDK, indicating compliance gaps. Contact information is clearly provided, enhancing trust. Overall, the site is a trustworthy, content-rich educational resource with a strong nonprofit background but requires technical and compliance improvements to enhance security and privacy posture. Strategic recommendations include upgrading libraries, enforcing HTTPS for all resources, implementing privacy and cookie policies, enabling DNSSEC, and adding security headers to improve resilience and user trust.

E

Ecere Corporation

ecere.org

47

Ecere Corporation operates the Ecere SDK, an open-source cross-platform software development kit designed for building applications and games across multiple platforms including desktop, mobile, and web. The SDK includes a compiler for the eC language and offers extensive features such as GUI, 2D/3D graphics, networking, and an integrated development environment. The website positions itself as a niche provider with a long history dating back to 1997, targeting developers and technical users seeking a comprehensive development toolkit. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and integrates third-party analytics and social SDKs such as Google Analytics and Facebook SDK. The site is hosted with a reputable registrar and shows moderate performance and basic mobile optimization. However, it lacks advanced SEO and accessibility features and does not appear to use a CMS. From a security perspective, the website lacks visible security headers, does not enable DNSSEC, and does not provide HTTPS enforcement details in the HTML content. No privacy, cookie, or terms of service policies are published, and no incident response or security contact information is provided. These gaps indicate a low maturity in privacy compliance and security posture, which could expose the organization to compliance risks and reduce user trust. Overall, the website is functional and provides relevant technical content for its target audience but requires improvements in security, privacy compliance, and transparency to enhance trustworthiness and meet modern standards. Strategic recommendations include implementing DNSSEC, publishing privacy and cookie policies, adding security headers, enforcing HTTPS, and providing clear contact information for security incidents.

H

Husité - Ktož jsú boží bojovníci - husitstvi.cz

husitstvi.cz

44

The website husitstvi.cz is a well-established Czech informational and educational platform dedicated to the Hussite period in Czech history. It offers a comprehensive range of content including historical articles, indexes, literature references, galleries, multimedia, and a discussion forum, targeting historians, researchers, students, and enthusiasts. The site is multilingual and has a consistent branding approach with a clear focus on cultural heritage. Technically, it is built on an older WordPress CMS version with common plugins like Yoast SEO and jQuery libraries, hosted by a reputable Czech provider (REG-WEDOS). While the site is functional and moderately optimized for SEO and mobile, it uses outdated software versions which pose security risks. Security posture is moderate with HTTPS usage but lacks modern security headers and explicit privacy or cookie policies, indicating compliance gaps. No contact emails or phone numbers are directly visible, but a contact form page exists. The site integrates Facebook social media but does not use analytics or advertising networks extensively, resulting in minimal user tracking. Overall, the site is trustworthy and safe, with a good content quality score but needs improvements in security and privacy compliance.

Kameleo Sàrl is a small Swiss web agency based in Fribourg specializing in website creation, optimization, SEO, and digital communication services. The company recently merged with Agence MiNT, indicating strategic growth and partnership expansion. Their website is professionally designed, targeting businesses, institutions, and associations seeking tailored web solutions. The site content is primarily in French with alternate language support for German, reflecting a regional focus. Technically, the website uses a custom CMS with legacy jQuery libraries, Google Tag Manager, and Facebook SDK for analytics and marketing. The site is mobile optimized and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Overall, the website presents a trustworthy and professional digital presence with room for enhanced security transparency and incident response readiness.

P

Pilot Institute

pilotinstitute.com

62

Pilot Institute is a reputable online education provider specializing in aviation training, including drone and airplane pilot certification courses. Established in 2019, it has grown to serve over 250,000 students with a strong market presence supported by positive reviews and a 4.9-star rating. The company offers expert-designed curriculums aimed at helping students pass FAA exams and achieve pilot licenses. Their business model centers on online course enrollment and learning management systems, targeting individuals seeking pilot certification and drone business skills. Technically, the website is built on WordPress with modern SEO and tracking tools such as Yoast SEO, Google Tag Manager, and Facebook SDK. The site is mobile-optimized, accessible, and performs moderately well. Security is solid with HTTPS enabled and no exposed sensitive data, though it lacks some advanced security headers and published security policies. Privacy compliance is partial, with a clear privacy policy but no cookie consent mechanism. Overall, the security posture is good but could be improved by implementing security headers, incident response disclosures, and cookie consent. The domain WHOIS data is consistent with the business claims, showing transparency and legitimacy. The website is safe for general audiences, with no adult or questionable content detected. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving privacy compliance mechanisms.

C

Contact Privacy Inc. Customer 0139170451

photojoseph.com

53

PhotoJoseph.com is a specialized media website providing photography, video, and YouTube tips, tutorials, and training, with a focus on LUMIX cameras and related software tools. The site targets photographers and content creators seeking expert guidance and resources. The business operates a content publishing model supplemented by a store offering training materials and affiliate marketing. Technically, the site is built on Drupal 7 with modern front-end frameworks and integrates social media and analytics tools. While the site uses HTTPS and domain transfer protections, it lacks DNSSEC and uses an older CMS version, which may pose security risks if not properly maintained. Privacy compliance is basic with a privacy policy and cookie consent but no explicit GDPR statements. Contact is primarily via forms and social logins, with no direct emails or phone numbers published. Overall, the site is professional, trustworthy, and content-rich, but could improve security and compliance transparency.

P

Performance Marketing World

performancemarketingworld.com

62

Performance Marketing World is a specialized media platform delivering news, analysis, and insights focused on the performance marketing industry. It targets marketing professionals, agencies, and advertisers with a variety of content including subscriber-only reports, podcasts, and events. The website demonstrates a solid market position within its niche, leveraging subscription and advertising revenue models. Technically, the site employs a mix of legacy and modern technologies such as jQuery, Google Tag Manager, and OneTrust for cookie consent, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policy or incident response contacts are found. The absence of WHOIS registration data is a notable concern, suggesting either privacy protection or an unregistered domain, which impacts trustworthiness. Overall, the site is professional, content-rich, and safe for general audiences, but further verification of domain legitimacy is recommended.

M

Mining the Social Web | Transforming Curiosity into Insight

miningthesocialweb.com

60

Mining the Social Web is a niche educational website focused on providing technical content, tutorials, and resources related to social web data mining and analysis. The site supports a book project and offers supplemental materials for data scientists and developers interested in social media data. Technically, the site is built on WordPress.com, leveraging modern JavaScript libraries and ad networks, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS and standard protections, though additional security headers could improve resilience. Privacy compliance is basic, with a cookie consent mechanism but no explicit privacy or terms of service pages. Overall, the site presents a professional and trustworthy front with active social media engagement and transparent domain registration.

W

World YWCA

shespeaksworldywca.org

53

World YWCA operates a well-established non-profit digital platform focused on empowering women and girls globally through advocacy, storytelling, and community engagement. The website 'She Speaks' serves as a hub for sharing stories, resources, and opportunities, positioning itself as a key voice in women's leadership and rights. The organization is registered in Switzerland and maintains a consistent brand presence across multiple social media channels. Technically, the site is built on WordPress with a modern plugin ecosystem, including analytics and social integrations, hosted on Infomaniak servers. Security measures include HTTPS and reCAPTCHA, though there is room for improvement in DNS security and HTTP headers. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy policy found in the provided content. Overall, the site demonstrates a solid business credibility and technical foundation with moderate security posture.

H

Husitské muzeum v Táboře

husitskemuzeum.cz

57

Husitské muzeum v Táboře is a cultural institution focused on presenting historical and educational content related to the Hussite movement and medieval history in the Czech Republic. The website serves as an information portal for museum exhibitions, educational programs, and cultural events, targeting general visitors and history enthusiasts. The site is multilingual, primarily in Czech with English support, and provides detailed event information and partner references. Technically, the website is built on WordPress with a variety of plugins for multilingual support, GDPR compliance, and user engagement. It uses standard web technologies including jQuery, Google Fonts, Google Analytics, and Facebook SDK. The site is served over HTTPS, ensuring secure communication, but uses an outdated jQuery version which may pose security risks. The site has moderate performance and basic mobile optimization. From a security perspective, the site implements GDPR-compliant cookie consent mechanisms and uses HTTPS. However, it lacks advanced security headers and uses an outdated JavaScript library version. No explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are found. WHOIS data is unavailable, limiting domain legitimacy verification. Overall, the website is professionally maintained with good content quality and user experience. The main risks relate to outdated libraries and lack of visible security policies. Strategic improvements in security headers, library updates, and enhanced contact transparency would strengthen the site's security posture and trustworthiness.

A

ABADIA a.s.

balkony-a-lodzie.cz

43

ABADIA a.s. is a Czech-based company specializing in the manufacturing and installation of suspended balconies and lodžies, primarily targeting panel houses. Established in 2012, the company has built a strong market presence in the Czech Republic and Slovakia, with some projects in Germany. Their services include design proposals, static assessments, 3D visualizations, manufacturing, and installation, positioning them as a leading supplier in their niche. The website reflects a professional business with clear contact information and a portfolio of completed projects, supporting their credibility. Technically, the website employs common marketing and analytics tools such as Google Tag Manager, Google Analytics, Facebook SDK, and CookieYes for cookie consent management. The site appears to be custom-built without a known CMS and is hosted via Active24. While the site has moderate performance and basic mobile optimization, some technical improvements are needed, particularly regarding HTTPS enforcement and security headers to enhance security posture. From a security perspective, the site implements a detailed cookie consent mechanism aligned with GDPR principles but lacks visible privacy policies, terms of service, or incident response information. The absence of HTTPS on some resources introduces mixed content risks. No critical vulnerabilities or blocking mechanisms were detected, but security best practices could be improved to protect user data and enhance trust. Overall, the website is functional and professional but would benefit from enhanced security measures, explicit privacy documentation, and technical modernization to improve user trust and compliance.

HANDBALL CLUB MILEVSKO is a local sports organization based in Milevsko, Czech Republic, focused on promoting handball among youth and adult players. The website serves as a community hub for news, events, tournaments, and team information. The club appears to be a small-scale, community-driven entity without commercial business operations. Technically, the website uses legacy JavaScript libraries such as jQuery 1.12.4 and jQuery UI 1.12.1, hosted on the eStránky CMS platform. The site includes Facebook integration and Google Fonts for styling. However, there is no evidence of modern security practices such as HTTPS enforcement or security headers. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. The WHOIS data is unavailable, which reduces domain trustworthiness but may be due to registry policies rather than malicious intent. Overall, the website is functional and informative for its target audience but requires improvements in security, privacy, and contact transparency.

I

isekacka.cz

isekacka.cz

58

isekacka.cz is a specialized retailer and service provider focused on robotic lawn mowers, primarily representing brands such as Husqvarna Automower, Segway, Mammotion, Stiga, and Ecovacs. The company offers comprehensive services including expert consultation, professional installation, servicing, and sales of accessories and spare parts. Their market position is strengthened by official certifications and dealer badges, indicating a trusted presence in the Czech Republic's retail sector for robotic garden equipment. The website is well-structured, professionally designed, and optimized for mobile devices, providing a good user experience with clear navigation and relevant content tailored to residential and commercial customers seeking automated lawn care solutions. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Facebook SDK and Google Fonts. It is built on the JZShop.cz e-commerce platform, which supports AJAX-based forms and dynamic content loading. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, no explicit security headers were detected, and there is no dedicated security policy or incident response contact information available. The absence of WHOIS data for the domain reduces trust from a domain registration standpoint, though the website content and certifications suggest legitimate business operations. No vulnerabilities or exposed sensitive data were identified in the analyzed content. Overall, isekacka.cz presents a credible and professional online presence for a niche retail and service business in robotic lawn mowers. Strategic improvements in security headers, domain registration transparency, and incident response readiness would enhance their security posture and trustworthiness.

L

LEBEDA Tools s.r.o.

ronda.cz

60

LEBEDA Tools s.r.o. is a well-established Czech retail company specializing in garden, workshop, and pet supplies with over 30 years of experience. The company operates both a physical store and an e-commerce platform, offering a wide range of products including garden machinery, tools, and accessories from reputable brands. Their services include expert installation, authorized repairs, and customer training, positioning them as a reliable partner in their market segment. Technically, the website is built on the JZShop.cz platform, utilizing standard web technologies and integrating social media and marketing tools such as Facebook SDK and pixel tracking. The site is accessible, mobile-optimized, and includes GDPR-compliant privacy and cookie policies. Security posture is adequate with HTTPS enforced, though improvements in security headers and explicit incident response policies are recommended. Overall, the website presents a professional and trustworthy digital presence aligned with its business goals.

K

Kulturistika.com

kulturistika.com

65

Kulturistika.com operates as a Czech-based fitness e-commerce platform combined with a magazine offering content on bodybuilding, fitness, strength sports, crossfit, and healthy lifestyle. The site targets fitness enthusiasts and athletes primarily in the Czech and Slovak regions, providing a broad range of sports nutrition products, clothing, equipment, and informative articles. The business model integrates online retail with content publishing to engage and convert its audience. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, Google reCAPTCHA Enterprise, Facebook SDK, and OneSignal for push notifications. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. Performance is moderate, with multiple external scripts for analytics and advertising. From a security perspective, the site uses HTTPS and implements bot protection on login forms. However, no explicit security headers were detected, and there is no published privacy policy or terms of service in the provided content. The WHOIS data is missing, which raises concerns about domain registration legitimacy. Cookie consent is implemented with advanced user controls, indicating some GDPR compliance awareness. Overall, the website presents a professional and functional platform with moderate security and privacy posture. The lack of WHOIS transparency and absence of privacy policy are notable gaps. Strategic improvements in security headers, privacy documentation, and domain registration verification are recommended to enhance trust and compliance.

V

Verso Versicherungstreuhand AG

verso.ch

53

Verso Versicherungstreuhand AG is a Swiss insurance brokerage firm established in 2004, providing comprehensive and independent insurance management services. The company targets individuals and businesses seeking reliable insurance consulting and brokerage, positioning itself as a trusted regional player with over 30 experts and multiple locations in Eastern Switzerland. The website reflects a professional and consistent brand image with clear service offerings and customer engagement channels. Technically, the site is built on Joomla CMS with modern frameworks like UIkit and integrates common web technologies such as jQuery and Google Tag Manager. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and CSRF protections, though some security headers are missing and no explicit security policies are published. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with no signs of malicious activity or content safety concerns.

A

Animals life

animalslife.net

65

Animals Life NET is a small non-profit organization based in Latvia that operates a global platform for live streaming animal shelters to support animal welfare. The website facilitates donations and purchases of supplies for shelters worldwide, targeting animal lovers and donors. The platform is technically built on WordPress with integrations for live chat, push notifications, and analytics. While the site is professionally designed and content-rich, some security best practices such as advanced headers and cookie consent are missing. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the site presents a trustworthy and functional platform for its niche audience.

N

Nakup na Dobro

nakupnadobro.cz

56

Nakup na Dobro is a Czech Republic-based e-commerce business specializing in sustainable and meaningful gifts. The website offers a variety of eco-friendly products, including gift packages, food items, fashion, and household goods, targeting consumers interested in socially responsible shopping. The business positions itself as a niche leader in sustainable gifts within its regional market. Technically, the website is built on the Shoptet e-commerce platform, utilizing common web technologies such as JavaScript, jQuery, and integrates marketing and analytics tools like Google Analytics, Facebook SDK, and LinkedIn Insight Tag. The site demonstrates good digital maturity with responsive design and cookie consent mechanisms, reflecting GDPR compliance. Security posture is solid with HTTPS enforced and CSRF protections in forms, though some security headers are missing and some libraries are outdated, suggesting room for improvement. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not detract significantly from the site's legitimacy. Overall, Nakup na Dobro presents a professional, trustworthy online retail presence with a focus on sustainability and social impact.

The website www.stops.lt provides comprehensive public transport route schedules and trip planning services primarily for Vilnius, Lithuania. It offers detailed information on bus, trolleybus, express bus, and night routes, targeting local commuters and visitors. The site supports multiple languages and includes interactive features such as maps and route planners. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates third-party analytics and social media SDKs. While the content quality and user experience are good, the site lacks visible privacy and cookie policies, which impacts compliance with GDPR and privacy best practices. Security posture is moderate with no evident advanced security headers or policies, and WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency. Overall, the site is functional and informative but would benefit from enhanced security and privacy measures.

M

MASPEX Czech s.r.o

tigerenergydrink.cz

29

Tigerenergydrink.cz is the official website for Tiger Energy Drink, a brand operated by MASPEX Czech s.r.o, a medium-sized company in the energy beverage sector in the Czech Republic. The website serves as a marketing and informational platform targeting general consumers interested in energy drinks. The site features professional branding, consistent messaging, and comprehensive privacy and cookie policies, reflecting a mature digital presence. Technically, the website employs modern web technologies including Google Analytics, Facebook SDK, and a consent management platform, ensuring compliance with GDPR and user tracking transparency. Security posture is solid with HTTPS enforced and CSRF tokens implemented, though some security headers could be improved. Overall, the domain appears legitimate despite the lack of public WHOIS data, which is common for commercial entities protecting registrant privacy.

A

AUTOJOB s.r.o.

autojob.cz

41

AUTOJOB s.r.o. operates AUTOJOB.cz, a specialized online job portal focused on the automotive and transport industries primarily in the Czech Republic and Slovakia. The platform offers job listings, candidate databases, employer services, and industry-related content including an automotive magazine and a competition called Autoopravář Junior. The site targets job seekers and employers within the automotive sector, providing a niche service that supports recruitment and industry engagement. Technically, the website uses legacy JavaScript libraries such as jQuery 1.3.2 and jQuery UI 1.7.3, alongside modern analytics tools like Google Analytics and Facebook SDK. While the site is functional and moderately optimized, it shows signs of technical debt and could benefit from modernization, especially in updating libraries and improving mobile responsiveness and accessibility. From a security perspective, the site uses HTTPS but lacks visible security headers and employs outdated JavaScript libraries that may expose it to vulnerabilities. Privacy compliance is partially addressed with a privacy policy and terms of service, but the absence of a cookie consent mechanism and security.txt reduces compliance maturity. No WAF or blocking mechanisms were detected, and the site content is safe for general audiences. Overall, the site is a credible and professional niche job portal with room for technical and security improvements. The lack of WHOIS data reduces domain trust slightly, but the presence of partner logos and clear contact information supports legitimacy. Strategic enhancements in security headers, library updates, and privacy compliance would strengthen the platform's risk posture and user trust.

C

Carvago.com

carvago.com

63

Carvago.com operates as an online platform specializing in the buying and selling of used cars across Europe. The service offers a unique value proposition by providing a CarAudit inspection certificate and home delivery of vehicles, targeting consumers seeking a convenient and trustworthy used car purchasing experience. The website is built on modern web technologies including React with Next.js and Chakra UI, hosted on AWS infrastructure, indicating a mature and scalable technical foundation. The presence of multiple advertising and tracking scripts such as Google Ads, Facebook SDK, and Bing Ads reflects an active digital marketing strategy. Security posture is adequate with HTTPS enforced and stable domain registration; however, the absence of DNSSEC and explicit security headers suggests room for improvement. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. Overall, the website is professional and trustworthy but should enhance its privacy and security disclosures to improve compliance and user trust.

ITES RACING s.r.o. operates the website ites.cz, a Czech e-commerce platform specializing in slot car racing products and accessories. The company offers a range of products including slot cars in various scales, sets, track parts, accessories, and spare parts. The website targets hobbyists and enthusiasts of slot car racing, positioning itself as a niche market leader in the Czech Republic. The business model is retail-focused, leveraging an online storefront powered by the Shoptet e-commerce platform. Technically, the website employs a modern tech stack including jQuery, Google Analytics (GA4), Google Tag Manager, Facebook SDK, and Smartsupp Chat for customer interaction. The site is well-structured with good SEO and mobile optimization, though accessibility features are basic. Performance is moderate, with CDN usage for static assets. The site uses HTTPS with good SSL configuration and standard security headers, though some headers like Content-Security-Policy are not confirmed. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, CSRF protection on login forms, and cookie consent mechanisms aligned with GDPR. However, there is no published security policy or incident response contact information, and no vulnerability disclosure or security.txt file is found. The WHOIS data for the domain is unavailable, which reduces trustworthiness and raises questions about domain registration legitimacy. Overall, the website is professional, trustworthy, and safe for general audiences. The lack of WHOIS data and absence of explicit security policies are notable gaps. Strategic recommendations include verifying domain registration, publishing security and incident response policies, implementing a security.txt file, and enhancing accessibility and security headers. These steps will improve trust, compliance, and security posture.

R

Radio Čas s.r.o.

pohodak.cz

57

Pohoďák.cz is an e-commerce website specializing in selling branded merchandise for media brands such as Radio Čas Rock, Radio Čas, and Televize Rebel. The site targets fans of these media outlets, offering a variety of products including clothing, accessories, and promotional items. The business operates primarily in the Czech Republic and leverages the Shoptet e-commerce platform for its online store. The website is professionally designed with clear navigation and good content quality, catering well to its niche audience. Technically, the site uses standard web technologies including jQuery, Google Tag Manager, and Facebook SDK, with a moderate performance profile and good mobile optimization. Security practices include HTTPS enforcement and cookie consent mechanisms, though some security headers are missing and the jQuery version is outdated. The absence of WHOIS data reduces domain transparency and trust slightly, but the overall business presentation is credible and professional. Privacy policies and terms of service are present and comprehensive, supporting GDPR compliance. No adult or explicit content is present, making the site safe for general audiences.

L

LOCAL TV PLUS spol. s r.o

ltv-plus.cz

55

LOCAL TV PLUS spol. s r.o operates the website LTV Plus, a regional television and media outlet serving the Moravskoslezský region in the Czech Republic. The company provides local news, cultural programming, sports coverage, and community event reporting, positioning itself as a key regional media source. The website is professionally designed with good content quality and consistent branding, targeting local residents interested in regional affairs. Technically, the website is built on WordPress with modern web technologies including Yoast SEO, Google Tag Manager, and Facebook SDK integration. It employs HTTPS with a valid SSL certificate and includes cookie consent mechanisms compliant with GDPR. The site is mobile-optimized and has good SEO practices, though there is room for improvement in accessibility and security headers. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent but lacks explicit security headers and incident response information. No vulnerabilities or suspicious content were detected. The absence of WHOIS data due to privacy protection slightly impacts trust but is reasonable for a small media company. Overall, the website presents a low-risk profile with a solid business presence and compliance posture. Strategic recommendations include enhancing security headers, publishing incident response policies, and improving accessibility to further strengthen trust and security.

D

DEMISPORT

demisport.cz

55

DEMISPORT operates an e-commerce platform specializing in sports and football equipment, primarily targeting teams and referees in the Czech Republic. The website offers custom printed football jerseys and a wide range of sports apparel suitable for different seasons. The business appears to be a small regional player with a focused niche in sports retail. Technically, the website is built on the Shoptet e-commerce platform, utilizing common web technologies such as jQuery, Bootstrap, and Google Tag Manager. The site is mobile optimized and includes standard SEO and accessibility features, though some accessibility aspects could be improved. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks some recommended security headers and uses an outdated JavaScript library, which could pose risks. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information suggest a legitimate business. Overall, the site is professional and functional with moderate risk due to missing WHOIS transparency and minor technical security gaps.

R

Rehasport

rehasport.cz

58

Rehasport.cz is a Czech Republic-based e-commerce platform specializing in rehabilitation and sports medicine products. The website offers a wide range of products from well-known brands such as Thera-Band, Mueller Sports Medicine, and Temtex, targeting both consumers and professionals in the healthcare and fitness sectors. The platform supports over 10,000 pickup locations, indicating a strong market presence and distribution network. Technically, the website is built on the Shoptet e-commerce platform, utilizing common web technologies including jQuery, Google Analytics, and Facebook SDK for marketing and analytics purposes. The site is mobile-optimized with good navigation and content quality, providing a professional user experience. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security policy and incident response contact information, which could be improved. WHOIS data is not publicly available, likely due to privacy protection, which slightly impacts trust but is common for e-commerce businesses. Overall, the website is legitimate, professional, and secure with room for enhanced transparency and security documentation.

Dětská hřiště is a Czech-based e-commerce retailer specializing in children's playground equipment, including complete playgrounds, modules, and accessories. The website targets parents and municipalities looking for quality, safe, and entertaining playground solutions. The business appears established with over 15 years of experience and a solid customer base. Technically, the site is built on the Shoptet platform, leveraging common web technologies such as jQuery, Google Analytics, and Facebook SDK. The site is mobile-optimized with good navigation and content quality. Security posture is adequate with HTTPS enabled and secure login forms, though some improvements like adding security headers and updating libraries are recommended. Privacy and cookie policies are present and GDPR compliant. The absence of WHOIS data limits domain trust assessment, but the website content and business presence suggest legitimacy.

D

DigitaltMuseum

digitaltmuseum.se

58

DigitaltMuseum is a well-established digital platform founded in 2008 that aggregates collections from Norwegian and Swedish museums, providing public access to over four million cultural heritage items including photographs, artworks, and buildings. The platform targets museums, researchers, and the general public interested in cultural heritage, positioning itself as a leading resource in the Nordic region for digital museum collections. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Video.js for media playback, with hosting and DNS services provided by reputable providers such as Domeneshop AS and AWS Route53. Security measures include HTTPS enforcement, CSRF token usage, and Google reCAPTCHA integration, although DNSSEC is not enabled and explicit security headers are not visible in the HTML content. Privacy compliance is limited as no explicit privacy or cookie policies were found in the provided content. Overall, the website demonstrates a high level of professionalism, content quality, and business credibility, with room for improvement in privacy policy transparency and security header implementation.

Oase-Filtrace.cz is a specialized e-commerce retailer focused on water garden and aquarium products, including filtration systems, pumps, and accessories. The website targets garden owners and pond enthusiasts primarily in the Czech Republic. The business model centers on online retail with additional customer support and services such as OASE servicing and training. The site demonstrates a good level of content quality, clear navigation, and consistent branding, supporting a positive market position within its niche. Technically, the website is built on the Shoptet e-commerce platform, utilizing jQuery 1.11.3, Google Analytics (GA4), and Facebook SDK for tracking and marketing. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with room for improvement in modernizing the tech stack and enhancing security headers. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, indicating a baseline security posture. However, the absence of advanced security headers and the use of an outdated jQuery version present potential vulnerabilities. No explicit security or incident response policies are published, which could be improved to enhance trust and compliance. Overall, the website is professional and trustworthy in appearance and function, but the lack of WHOIS data and domain registration details reduces the domain's trustworthiness score. Strategic improvements in security practices and transparency would strengthen the site's risk profile and business credibility.

Dětská hřiště JungleGym is a Czech-based e-commerce retailer specializing in children's playground equipment including slides, playhouses, and swings. The company emphasizes quality, safety, and professional installation services, leveraging over 15 years of experience and Dutch quality standards. Their website is built on the Shoptet platform, featuring a well-structured catalog, customer reviews, and clear contact information. Technically, the site uses standard web technologies such as jQuery and integrates Google Analytics and Facebook SDK for marketing and analytics purposes. Security posture is generally good with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and updating legacy libraries. The absence of WHOIS data reduces domain trustworthiness, but the professional presentation and transparent contact details mitigate concerns. Overall, the website is suitable for families and customers seeking reliable children's playground products.

R

Rehabilitační pomůcky

rehabilitacnipomucky.cz

57

Rehabilitacnipomucky.cz is a Czech e-commerce platform specializing in the sale of rehabilitation and orthopedic aids from well-known global brands. The website offers a broad product range including orthoses, bandages, compensatory aids, taping products, and exercise equipment, targeting individuals requiring rehabilitation products, healthcare providers, and sports professionals. The platform demonstrates a solid market position supported by a high volume of positive customer reviews and a comprehensive product offering. Technically, the website is built on the Shoptet e-commerce platform, utilizing modern web technologies such as jQuery, Google Tag Manager, and Facebook SDK, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with GDPR-aligned policies and consent management. The absence of WHOIS data limits domain legitimacy verification, but the website's content and business signals indicate a legitimate operation. Overall, the site presents a professional and trustworthy e-commerce presence in the healthcare sector.

T

Testy-Pneumatik.sk

testy-pneumatik.sk

52

Testy-Pneumatik.sk is a Slovak online portal specializing in tire reviews and expert test aggregations, targeting motorists seeking detailed information on summer, winter, and all-season tires. The site offers extensive user-generated reviews, official test summaries from ADAC and AutoBild, and search functionalities by vehicle, tire size, and manufacturer. Technically, the site employs standard web technologies including JavaScript, jQuery, Google Tag Manager, and Facebook SDK, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks advanced security headers and explicit incident response policies. Privacy compliance is basic, with a cookie policy present but no active consent mechanism. Overall, the site is trustworthy and professionally maintained, serving a niche automotive audience effectively.

I

Info TV Brno

infotvbrno.cz

54

Info TV Brno is a regional media company providing news and video content focused on the Brno and South Moravia region in the Czech Republic. The website serves as a digital platform for broadcasting regional news, cultural events, and sports updates, targeting local residents and community members. The business operates under TP Pohoda s.r.o., with a domain registered since 2018, indicating a stable presence in the regional media market. The company leverages social media channels extensively to engage its audience and expand its reach. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Facebook SDK integrated for marketing and tracking purposes. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Hosting is provided by Active24, a reputable provider, and the site uses HTTPS with a good SSL configuration. From a security perspective, the website employs HTTPS and cookie consent mechanisms compliant with GDPR. While some security headers are not explicitly detected, the overall security posture is solid with no visible vulnerabilities or exposed sensitive data. The WHOIS data aligns well with the website content and business information, supporting the legitimacy of the domain and its operations. Overall, Info TV Brno presents a professional and trustworthy regional media platform with a good balance of content quality, technical implementation, and privacy compliance. Strategic improvements in security headers and continuous monitoring of third-party scripts would further enhance its security posture.

T

TP Pohoda s.r.o.

televizerelax.cz

56

Televize Relax is a Czech television broadcaster operated by TP Pohoda s.r.o., providing a variety of entertainment programming including series, crime shows, quizzes, cooking, and news content. The website serves as a digital platform to showcase their programming and engage viewers with a clean, well-structured design and clear navigation. The company targets a general audience seeking relaxing and entertaining TV content within the Czech Republic. The domain has been registered since 2013, consistent with the company's operational timeline. Technically, the website is built on WordPress CMS, leveraging modern SEO tools like Rank Math and performance optimizations such as WP Rocket. It integrates Google Tag Manager and Facebook SDK for analytics and marketing purposes. The site is mobile-optimized and includes accessibility features, though some areas could be enhanced. Hosting is provided by Active24, a reputable Czech hosting provider. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no public security policy or incident response contacts are provided. No vulnerabilities or suspicious activities were detected in the analyzed content. Overall, Televize Relax presents a professional and trustworthy online presence with good privacy compliance and moderate security posture. Strategic improvements in security headers and incident response transparency would further strengthen their security and trustworthiness.

D

Digital Broadcasting s.r.o.

tvrebel.cz

56

TV Rebel is a Czech rock music television channel operated by Digital Broadcasting s.r.o., established in 2013. The website serves as a digital platform for broadcasting rock music content, promoting shows, events, and providing news related to the rock music scene. It targets Czech-speaking rock music fans and maintains a niche position in the media industry. The company provides clear contact information and maintains active social media channels to engage its audience. Technically, the website is built on WordPress with modern SEO and performance optimizations, including caching and lazy loading. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and policies could enhance protection. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

T

Test-Pneumatik.cz

test-pneumatik.cz

58

Test-Pneumatik.cz is a specialized Czech online portal dedicated to aggregating thousands of tire reviews and expert test results, primarily from ADAC and AutoBild. It serves as a comprehensive resource for drivers seeking detailed information on summer, winter, and all-season tires, including user-generated reviews and ratings. The site targets Czech-speaking vehicle owners and enthusiasts, providing search capabilities by vehicle, tire size, and manufacturer. The business model appears to be content-driven with monetization likely through advertising and affiliate partnerships. The website demonstrates consistent branding and a good level of content quality, supported by structured data and social media presence. Technically, the site employs a modern JavaScript stack including jQuery, Facebook SDK, Google Tag Manager, Microsoft Clarity, and Smartlook for analytics and user behavior tracking. The site is mobile-optimized with good SEO practices and moderate performance. However, there is room for improvement in accessibility and security headers implementation. HTTPS is enforced, ensuring secure communication. From a security perspective, the site shows a solid posture with no visible vulnerabilities or exposed sensitive data. The use of multiple tracking and advertising scripts indicates extensive user data collection, but privacy compliance is basic with a cookie policy present but lacking explicit consent mechanisms. No terms of service or security policy pages were found, and no direct contact information is provided, which may impact user trust. WHOIS data is unavailable, likely due to privacy protection, but the site’s content and external signals suggest legitimacy. Overall, Test-Pneumatik.cz is a credible and useful resource within its niche, with a good balance of content and technical implementation. Strategic improvements in privacy compliance, security headers, and transparency of business contact information would enhance trust and security posture.

G

Good Sailors s.r.o.

ceskeparky.cz

58

The website ceskeparky.cz operates as an e-commerce platform focused on selling souvenirs that support Czech national parks and ecological projects. The business is run by Good Sailors s.r.o. and collaborates with national parks and environmental organizations, including endorsement by the Czech Ministry of Environment. The platform targets eco-conscious consumers and visitors to Czech natural reserves, offering products such as clothing, books, and accessories with nature-inspired motifs. The business model integrates charitable contributions from sales proceeds to support conservation efforts. Technically, the website is built on the Shoptet e-commerce platform, utilizing technologies such as jQuery 1.11.3, Google Analytics, and Facebook SDK for tracking and marketing. The site is mobile-optimized, accessible, and SEO-friendly with proper metadata and structured content. Performance is moderate, with room for improvement in updating legacy libraries. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, with a cookie consent mechanism compliant with GDPR. However, no explicit security headers were detected, and the WHOIS data is missing, which reduces transparency and trust. No vulnerabilities or malware were found, and the site maintains a good security posture overall. Overall, the website presents a professional and trustworthy front for a niche retail business with a strong social and environmental mission. Strategic improvements in security headers, WHOIS transparency, and technology updates would enhance its security and credibility further.

H

Harley-Davidson® Praha

harley-davidson-praha.cz

51

Harley-Davidson® Praha is an established authorized dealer and service center for Harley-Davidson motorcycles located in Prague, Czech Republic. Founded in 2005, the company offers a comprehensive range of services including new and used motorcycle sales, rentals, authorized servicing, and retail of branded clothing and accessories. The website reflects a strong brand presence with consistent Harley-Davidson branding and a clear focus on motorcycle enthusiasts and potential buyers in the local market. The business model integrates retail, service, and event engagement, positioning it as a key player in the regional motorcycle retail sector. Technically, the website employs modern JavaScript libraries such as jQuery and Glide.js for UI components, integrates Facebook SDK and Google Tag Manager for marketing and analytics, and uses Google reCAPTCHA for form security. Hosting is provided by Wedos, a Czech hosting provider, consistent with the domain's WHOIS data. The site is mobile optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, no explicit security headers were detected in the HTML content, and there is no visible security policy or incident response information published. Tracking and retargeting scripts are present but managed with user consent. The WHOIS data is consistent and transparent, supporting the legitimacy of the business. Overall, the website demonstrates a good balance of content quality, technical implementation, and privacy compliance, with a solid business credibility score. Strategic improvements in security headers and published security policies would enhance the security posture and trustworthiness further.

A

Autoškola Jiří Novotný

novotny-autoskola.cz

41

Autoškola Jiří Novotný is a small regional driving school based in Železný Brod, Czech Republic, specializing in comprehensive driver training for all license categories including motorcycles and tractors. The company holds a unique market position in its region by offering a broad range of driver education services and cooperating with the Czech Labor Office for retraining programs. The website reflects a service-oriented business model targeting individuals seeking driver licenses in the local area. Technically, the website uses legacy JavaScript libraries and a CMS platform called WebMaker System, with moderate performance and basic mobile optimization. Security posture is moderate but could be improved by updating libraries and implementing security headers. Privacy compliance is weak due to missing policies and consent mechanisms. Overall, the site is functional and professional but would benefit from modernization and enhanced security and privacy practices.

P

Pinterest

pinterest.pt

72

Pinterest is a globally recognized visual discovery and social media platform that enables users to find and share ideas such as recipes, home decor, and style inspiration. The pt.pinterest.com site is a localized Portuguese version of the platform, maintaining the brand's global presence and user engagement. The business operates primarily through advertising and e-commerce integrations, positioning itself as a leader in the technology and social media sectors. The website demonstrates a mature digital infrastructure with modern technologies such as React, AWS hosting, and comprehensive security measures including HTTPS and Content Security Policy enforcement. Security posture is strong with no evident vulnerabilities or exposed sensitive data, and privacy compliance is well addressed through detailed policies and consent mechanisms. Overall, the site reflects a professional, trustworthy, and enterprise-grade online presence.

C

CDV - Transport Research Centre

its-knihovna.cz

46

The ITS Library website is operated by the CDV - Transport Research Centre, a Czech public research institution focused on Intelligent Transport Systems (ITS). The site serves as an information hub for government, experts, and students, offering project data, software tools, research, and legislative resources related to ITS. The website is well-structured and professionally presented, targeting a specialized audience in the transportation sector. Technically, it uses ASP.NET WebForms with modern JavaScript libraries like Vue.js and jQuery, and integrates social media feeds for fresh news updates. Security measures include HTTPS and CSRF tokens, but lack explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent banner but no privacy or terms of service pages. Overall, the site is trustworthy and credible but could improve compliance and security transparency.

The American Petroleum Institute (API) website serves as the digital presence for the national trade association representing the U.S. oil and natural gas industry. The site provides comprehensive information about the industry, membership services, energy economics, and standards development. It targets industry professionals, policymakers, and consumers interested in energy topics. The business model is centered on advocacy, standards, and member services, positioning API as a key industry representative. Technically, the website employs modern frameworks such as Bootstrap, integrates multiple analytics and advertising tools, and uses Google reCAPTCHA for form security. The site is mobile optimized and demonstrates good SEO practices, though accessibility features could be improved. Security posture is solid with HTTPS and reCAPTCHA, but lacks some security headers and explicit incident response or vulnerability disclosure information. Privacy and cookie policies are not clearly found in the provided content, indicating room for compliance improvement. Overall, the site is professional, trustworthy, and content-rich, but WHOIS data is unavailable from the provided raw output, limiting domain trust verification.

Spolek přátel Národního divadla Brno is a voluntary, non-political, and non-profit association focused on promoting theatrical arts including opera, ballet, and drama in Brno, Czech Republic. The organization collaborates closely with the National Theatre Brno and related artistic institutions to deepen public interest and knowledge in performing arts. The website serves as an informational platform showcasing news, events, and publications related to their activities. Technically, the website is built on the eStránky.cz platform using legacy JavaScript libraries such as jQuery 1.12.4 and includes Facebook SDK for social media integration. The site is accessible and provides relevant content but lacks modern technical and security enhancements.

M

MARE - Centro de Ciências do Mar e do Ambiente

mare-centre.pt

59

MARE - Centro de Ciências do Mar e do Ambiente is a Portuguese national research center focused on marine and environmental sciences. It operates as a scientific research, technological development, and innovation hub with a broad territorial presence in Portugal. The center targets academic researchers, students, and environmental stakeholders, offering educational programs and engaging in collaborative projects with national and international partners. The website reflects a well-structured and professionally designed platform built on Drupal 7, featuring multilingual support and integration with social media and analytics tools. Security posture is adequate with HTTPS enabled and IP anonymization in analytics, but lacks advanced security headers and explicit privacy compliance mechanisms such as cookie consent. Contact information is limited on the website, and no dedicated security or incident response policies are published. Overall, the site is trustworthy and serves its educational and research mission effectively.

Santillana is a well-established educational content provider focused on Spanish language learning materials in Brazil. The website serves as a portal offering catalogs, educational resources, and accessible content for students and educators. The business operates under the Grupo Santillana umbrella, leveraging partnerships with related educational brands such as Moderna and Richmond. The site is professionally designed with consistent branding and targets educational institutions and learners. Technically, the site uses a custom CMS (Lumis Portal) and integrates common analytics and tracking tools such as Google Analytics and Facebook SDK. Hosting is professional, utilizing AWS DNS infrastructure. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy policies. Overall, the site is safe, accessible, and trustworthy for its intended audience.

C

Câmara Municipal de Castelo Branco

cm-castelobranco.pt

60

The Câmara Municipal de Castelo Branco website serves as the official digital presence for the municipal government of Castelo Branco, Portugal. It provides extensive information and services related to municipal administration, cultural programming, tourism, economic development, and citizen engagement. The site targets residents, visitors, investors, and local businesses, positioning itself as a key resource for the community and stakeholders. The business model is that of a government entity focused on public service delivery and community development. Technically, the website is built on ASP.NET WebForms with Umbraco CMS, leveraging common web technologies such as jQuery, Font Awesome, and Google Fonts. It integrates social media and marketing tools like Facebook SDK, AddThis, and Google Tag Manager. The site is mobile-optimized and features a structured navigation system, though some technical debt is evident due to the use of outdated JavaScript libraries. Performance is moderate, and SEO and accessibility are basic but functional. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, indicating some compliance with privacy regulations. However, the use of outdated jQuery versions and the absence of visible security headers represent moderate vulnerabilities. No explicit privacy policy or terms of service were found, which is a compliance gap. No signs of WAF or blocking mechanisms were detected, and the WHOIS data confirms the domain's legitimacy as an official municipal entity. Overall, the website is a credible and professional government portal with good content quality and business credibility. Security and privacy compliance can be improved by updating libraries, implementing security headers, and publishing clear privacy and security policies. These enhancements will strengthen trust and reduce risk exposure.

S

Sdružení knihoven ČR

sdruk.cz

52

Sdružení knihoven ČR is a well-established non-profit association founded in 2002, dedicated to supporting libraries and promoting access to cultural and informational resources in the Czech Republic. The organization holds a strong position as a key partner in the Czech library sector, offering services such as event organization, project support, publishing, and professional networking. Their website reflects a professional and consistent brand image, targeting librarians, cultural institutions, and the general public interested in library services. Technically, the site is built on WordPress with Elementor, integrating standard analytics and social media tools, and demonstrates good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS, employs cookie consent mechanisms, and avoids exposing sensitive data, though it lacks explicit security policies or incident response information. Overall, the website is trustworthy, compliant with GDPR, and provides clear contact information, supporting its credibility as a reputable non-profit entity.