Security Directory

O

Obec Dlažov

dlazov.cz

53

Obec Dlažov operates as the official municipal government website for the village of Dlažov and its surrounding areas in the Czech Republic. The site provides essential information for residents and tourists, including local news, cultural events, administrative contacts, and community resources. It serves as a digital portal for municipal communication and public service announcements, positioning itself as a trusted local government resource. The website's content is primarily in Czech and targets a general audience including local citizens and visitors.

L

LibanPack

libanpack.org

58

LibanPack is a Lebanese non-profit organization established in 2009 that provides packaging and marketing services aimed at enhancing the competitiveness of Lebanese and Arab exporters. The organization offers a broad range of services including packaging design, branding, technical lab reviews, training, marketing, packaging testing, and networking events. It holds a reputable position as a full member of the World Packaging Organisation (WPO) since 2009, with its director serving as the WPO Vice President, underscoring its leadership in the packaging sector. The website reflects a professional and consistent brand image targeting exporters and packaging industry stakeholders in Lebanon and the Arab region. Technically, the website is built using Bootstrap and jQuery frameworks, with additional plugins for UI and slideshow functionality. It is hosted via Cloudflare, ensuring good performance and HTTPS security. The site is mobile-optimized and provides clear navigation and relevant content, although it lacks some modern security headers and DNSSEC. No CMS is detected, suggesting a custom-built platform. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and important security headers such as CSP and HSTS. There are no visible privacy or cookie policies, which is a compliance gap. No vulnerability disclosure or security.txt file is present, limiting incident response readiness. Contact information is clearly provided, enhancing trust and business credibility. Overall, LibanPack's website is a well-structured, professional platform that effectively supports its business goals but would benefit from enhanced security practices and privacy compliance measures to strengthen its risk posture and regulatory adherence.

P

PETERKA & PARTNERS

peterkapartners.hr

50

PETERKA & PARTNERS is a law firm specializing in providing comprehensive legal and tax services to businesses operating in Central and Eastern Europe, including countries such as the Czech Republic, Slovakia, Poland, Hungary, Bulgaria, Romania, Ukraine, Belarus, and Russia. The firm positions itself as a leading full-service legal partner in this regional market. The website reflects a professional and consistent brand image with a clear focus on its target audience of business clients in the region. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Fonts, Font Awesome, and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile optimized and has good SEO fundamentals, although accessibility features are basic. Hosting appears to be provided by Active24, a known regional hosting provider. From a security perspective, the site uses HTTPS and includes form validation scripts, but lacks visible security headers and published privacy or cookie policies, which are important for GDPR compliance. Contact information is limited to an email address related to sanctions inquiries, with no phone numbers or physical addresses provided. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional and trustworthy but could improve its privacy compliance and security posture by publishing relevant policies, enhancing security headers, and providing more comprehensive contact details. These improvements would strengthen user trust and regulatory compliance.

T

Technické služby Police nad Metují, s.r.o.

tspolice.cz

45

Technické služby Police nad Metují, s.r.o. is a municipal service organization responsible for maintaining cleanliness, infrastructure, and public utilities in the city of Police nad Metují, Czech Republic. Their services include road maintenance, public lighting, green area upkeep, wastewater treatment, and housing management. The company operates primarily as a local government service provider with a small organizational size and a domain age consistent with its founding in 2010. The website provides relevant business information and contact details, targeting local citizens and stakeholders. Technically, the website uses legacy JavaScript libraries such as jQuery 1.10.2 and jQuery UI, along with Google Analytics and Google Tag Manager for tracking. The site appears to be custom-built without a known CMS and shows basic mobile optimization and accessibility. SEO is basic but functional, with proper meta tags and structured data for organization and website schema. From a security perspective, the site uses HTTPS but lacks visible security headers and advanced security policies. No critical vulnerabilities or exposed sensitive data were detected, but the use of outdated libraries and absence of cookie consent mechanisms are notable gaps. GDPR compliance is partially addressed with a dedicated GDPR page but no cookie banner or explicit privacy policy link on the homepage. Contact information is clearly presented, but no incident response or security policy details are available. Overall, the website is functional and trustworthy for its municipal service purpose but would benefit from technical and security improvements to enhance compliance, user experience, and protection against emerging threats.

P

PETERKA & PARTNERS

peterkapartners.com

52

PETERKA & PARTNERS is a well-established law firm founded in 2006, specializing in providing integrated legal and tax services across Central and Eastern Europe. The firm targets businesses operating in multiple countries including the Czech Republic, Slovakia, Poland, Hungary, Bulgaria, Romania, Ukraine, Belarus, and Russia. Their market position is that of a leading full-service law firm in the region, offering expertise in sanctions advisory and other legal domains. The website reflects a professional business model focused on regional legal services with a medium-sized operational scale. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and Google Tag Manager, hosted on Active24 infrastructure. The site is mobile optimized with good SEO practices and moderate performance. However, there is room for improvement in accessibility and security configurations, such as enabling DNSSEC and adding security headers. From a security perspective, the site uses HTTPS and form validation scripts but lacks explicit security headers and DNSSEC. No privacy or cookie policies are clearly presented, which may impact GDPR compliance. The WHOIS data shows a consistent and legitimate domain registration history, supporting the firm's credibility. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

O

OBALOVÝ INSTITUT SYBA, s.r.o.

syba.cz

54

OBALOVÝ INSTITUT SYBA, s.r.o. operates the website syba.cz, a well-established Czech packaging industry portal founded in 2000. The site provides daily news, industry trends, standards, event calendars, and membership services targeting packaging professionals and companies. It holds a strong market position as a trusted source within the Czech packaging sector, supported by partnerships with national and European packaging organizations. Technically, the website is built on the Orchard CMS platform, utilizing modern web technologies such as jQuery, Bootstrap, and Font Awesome. It features a cookie consent mechanism compliant with GDPR, and uses HTTPS with good SSL configuration. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. From a security perspective, the site employs HTTPS and cookie consent but lacks explicit security headers and incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms a consistent and legitimate domain registration dating back to 2000, reinforcing trustworthiness. Overall, syba.cz is a professional, content-rich portal with good privacy compliance and a solid business reputation. Security posture is adequate but could be improved with enhanced headers and formal policies. The site is safe for general audiences and free from adult or questionable content.

H

Hotel Veba Broumov

hotelveba.cz

47

Hotel Veba Broumov is a boutique historic hotel located in Broumov, Czech Republic, housed in a villa built in 1927. It offers accommodation, a renowned restaurant, wellness, congress facilities, and leisure amenities targeting business and family clientele. The website is professionally designed with clear navigation and multilingual support, integrating modern booking and analytics technologies. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security headers. Privacy policy and cookie management are present but basic. WHOIS data is unavailable, likely due to privacy protection, which limits domain ownership verification but does not detract from the site's professional appearance and trustworthiness. Overall, the site presents a credible and user-friendly digital presence for the hospitality business.

O

Obec Otovice

otovice.cz

48

The website www.otovice.cz serves as the official municipal portal for the village of Otovice in the Karlovy Vary region of the Czech Republic. It provides residents and visitors with access to local government information, official documents, news updates, cultural events, and contact details for the municipal office. The site is built on the DotNetNuke CMS platform and uses common web technologies such as jQuery and Bootstrap, indicating a moderate level of technical maturity. The content is well-structured and relevant to its target audience, primarily local citizens and government officials. From a security perspective, the site is accessible over HTTPS, which is a fundamental security requirement. However, the absence of visible security headers and lack of published privacy or cookie policies indicate areas for improvement in compliance and security posture. The WHOIS data for the domain is unavailable, which limits the ability to fully verify domain legitimacy and trustworthiness. Despite this, the website content and contact information appear authentic and consistent with a local government entity. Overall, the site demonstrates a good level of professionalism and usability for its intended purpose but would benefit from enhanced security practices, privacy compliance measures, and transparency regarding domain registration. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, and clarifying domain registration details to improve trust and compliance.

S

Úvod | Svicky.cz

svicky.cz

45

Svicky.cz is a Czech Republic based e-commerce website specializing in the retail sale of candles and related products. The website targets general consumers interested in purchasing candles online. The business model is typical of small retail e-commerce, leveraging multiple delivery service integrations such as Packeta, PPL, and Cpost to facilitate product shipment. The website is built using common JavaScript libraries including jQuery, Fancybox, and Slick Carousel, and integrates Google Maps API for location services. Tracking and analytics are implemented via Google Tag Manager and Microsoft Clarity, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and CSRF tokens in place, but lacks comprehensive security headers and formal privacy and terms policies. The absence of WHOIS data reduces trustworthiness from a domain registration perspective, but the website content and technical setup appear legitimate and professional for a small retail business. Strategic recommendations include publishing privacy and terms policies, enhancing security headers, and adding incident response and vulnerability disclosure information to improve compliance and trust.

M

Medialink Communications Consult s.r.o.

interpraca.sk

59

The website interpraca.sk operates as a Slovak-German employment portal specializing in job offers primarily in Germany, Austria, Switzerland, and the Czech Republic. It targets Slovak-speaking job seekers interested in working abroad, offering categorized job listings across multiple sectors including construction, healthcare, logistics, and hospitality. The business is operated by Medialink Communications Consult s.r.o., with a clear market position as a niche job portal facilitating cross-border employment opportunities. Technically, the site is built on the Drupal CMS platform, leveraging common web technologies such as jQuery, Bootstrap 3.4.0, and integrates Google Analytics and Facebook SDK for analytics and social media engagement. The site demonstrates moderate performance and good mobile optimization, with a structured and user-friendly interface. From a security perspective, the website enforces HTTPS and includes standard security headers, but lacks explicit Content-Security-Policy headers and a security.txt file for vulnerability disclosure. There is no visible incident response contact, and cookie consent mechanisms are absent, which may impact GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional front with good business credibility and technical implementation. However, improvements in privacy compliance and security best practices are recommended to enhance user trust and regulatory adherence.

T

Tschechien Online

tschechien-online.org

58

Tschechien Online is a German-language media and information portal focused on providing comprehensive news, travel information, event calendars, accommodation listings, and classifieds related to the Czech Republic and Prague. The site targets German-speaking audiences interested in Czech culture, tourism, and regional updates. Technically, the website is built on Drupal 7 with a variety of modules and uses jQuery 1.8, Google Analytics for tracking, and Google Adsense for advertising. The site is mobile-optimized and features a clear navigation structure with good content quality. Security-wise, the site uses HTTPS and some best practices but lacks explicit security headers and privacy/cookie policies, which are recommended for compliance and user trust. WHOIS data is unavailable or malformed, limiting domain registration insights, but the site content and technical setup appear legitimate and professional.

J

Jednota tlumočníků a překladatelů

jtpunion.org

47

Jednota tlumočníků a překladatelů (JTP) is a Czech non-profit professional association representing translators, interpreters, and audiovisual translators. The organization provides a membership platform, professional directories, events, training, and advocacy for its members. The website serves as a resource for clients seeking qualified language service providers and for professionals interested in joining the association. The site is well-branded and clearly targets the Czech professional translation and interpreting community. Technically, the website is built on WordPress using the Kadence theme and several professional plugins including Advanced Custom Fields Pro and The Events Calendar. The site is mobile-optimized, uses HTTPS, and includes structured data for SEO and event promotion. Performance is moderate with good accessibility and SEO practices. From a security perspective, the site enforces HTTPS and uses secure forms but lacks some advanced security headers and a cookie consent mechanism. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected or unavailable, but the domain age and content consistency support legitimacy. Overall, the website is professional, secure, and compliant with basic privacy regulations. Strategic improvements include adding cookie consent, security headers, and publishing security policies to enhance trust and compliance.

D

Dřevoterm, s.r.o.

drevoterm.cz

46

Dřevoterm, s.r.o. is a Czech manufacturing company specializing in shading technology and wood products including planed wood and construction timber. The company targets construction professionals and carpenters within the Czech Republic, offering a broad product range and related services such as impregnation and drying. The website is professionally designed with clear navigation and relevant business content, supporting its market presence as a regional manufacturer. Technically, the website employs legacy JavaScript libraries such as jQuery 1.7.1 and uses common UI plugins like Fancybox and Tooltipster. While the site is accessible and uses HTTPS, it lacks modern security headers and cookie consent mechanisms, indicating room for improvement in security and privacy compliance. The site is moderately optimized for performance and mobile devices but could benefit from modernization. From a security perspective, the site shows basic good practices such as HTTPS usage but lacks explicit security policies, incident response information, and updated libraries, which could expose it to vulnerabilities. The absence of WHOIS data limits domain trust evaluation, though the presence of company registration details and contact information supports legitimacy. Overall, the website presents a trustworthy business front with moderate technical maturity and security posture. Strategic improvements in security headers, privacy compliance, and technology updates are recommended to enhance trust and resilience.

G

Gymnázium Broumov

gybroumov.cz

42

Gymnázium Broumov is a public multi-year secondary school located in Broumov, Czech Republic, providing education primarily to local students. The website serves as an information portal for students, parents, and staff, offering news, schedules, educational programs, and contact points. The institution maintains a presence on social media platforms such as Facebook and YouTube, enhancing community engagement. The business model is typical of a public educational institution, focusing on delivering quality secondary education and related student activities. Technically, the website employs legacy JavaScript libraries such as jQuery 1.7.1 and jQuery UI, along with plugins like Fancybox and Tooltipster. While the site is functional and moderately optimized for mobile, it lacks modern security headers and cookie consent mechanisms, which are important for compliance and security. The website's SEO and accessibility are basic but sufficient for its audience. Hosting and CMS details are not explicitly identified. From a security perspective, the site uses HTTPS as indicated by URLs, but no security headers were detected in the provided data. The absence of a cookie consent banner and detailed privacy policy reduces GDPR compliance confidence. No incident response or vulnerability disclosure information is present. The WHOIS data is missing, which limits domain trust verification, but the website content and external references suggest legitimacy. Overall, the website is a functional and trustworthy educational resource with room for improvement in security posture and privacy compliance. Strategic enhancements in security headers, privacy policies, and updated technology stacks would strengthen its digital maturity and trustworthiness.

K

Klub přátel Člověka v tísni

klubpratel.cz

74

Klub přátel Člověka v tísni is a Czech non-profit organization focused on humanitarian aid and disaster relief both domestically and internationally. The website serves as a platform to engage supporters and donors, providing information about their mission and encouraging membership. The organization appears established with a consistent brand presence and a clear target audience of humanitarian supporters. Technically, the website employs modern JavaScript libraries such as jQuery and integrates Google Tag Manager, Microsoft Clarity for analytics, and Google reCAPTCHA v3 for bot protection. Cookie consent is managed via Cookiebot, indicating a commitment to privacy compliance. Security posture is solid with HTTPS enforced and error tracking via Sentry, though some security headers are not explicitly detected. The absence of WHOIS data limits domain trust analysis, but the website content and technical setup suggest legitimacy. Privacy and terms of service pages were not found in the provided content, which is a gap in compliance and user transparency. Overall, the site is professionally designed, mobile-optimized, and trustworthy for its intended audience.

E

E-KU Inštitút jazykovej a interkultúrnej komunikácie s.r.o.

eku.sk

56

E-KU Inštitút jazykovej a interkultúrnej komunikácie is a well-established Slovak language education institute founded in 1992, offering a broad range of language courses, exam preparation, and authorized certification services including Cambridge English and Goethe-Zertifikat. The website reflects a professional and consistent brand presence targeting children, teens, adults, and corporate clients. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and themes, providing a moderate performance and good mobile optimization. Security posture is solid with HTTPS and secure forms, though lacking some security headers and incident response information. Privacy compliance is partial with a privacy policy present but no visible cookie consent mechanism. Overall, the website is trustworthy and credible with clear contact information and partner relationships.

CTM Academy is a well-established Czech non-profit organization focused on providing individualized academic programs and international education preparation for children and students from early school age through high school graduation. The organization offers a comprehensive suite of services including online courses, Advanced Placement exam preparation, and study abroad support, positioning itself as a leader in talent development within the Czech educational landscape. The website reflects a professional and consistent brand image with strong trust signals such as testimonials and reputable partner logos. Technically, the website employs a mature technology stack including jQuery, Google Analytics, Facebook Pixel, and Hotjar, integrated with cookie consent mechanisms and reCAPTCHA for form security. While the site is mobile-optimized and SEO-friendly, some legacy JavaScript libraries pose potential security risks. The site uses HTTPS and standard security headers but lacks a published security policy or incident response information. From a security perspective, the site demonstrates good baseline practices such as encrypted connections and consent-based tracking but would benefit from modernizing its JavaScript dependencies and enhancing transparency around security policies. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the organization's profile, supporting legitimacy. Overall, CTM Academy's website is a secure, professional, and content-rich platform that effectively supports its educational mission. Strategic improvements in security policy publication and technical updates would further strengthen its security posture and trustworthiness.

P

Prodom spol. s r.o.

prodom.sk

55

Prodom spol. s r.o. is a well-established Slovak company specializing in the design and sale of family house projects, with a strong market presence since 1991 and over 27,000 houses built based on their designs. Their website offers a comprehensive catalog of residential projects, targeting individuals and families seeking modern, energy-efficient homes in Slovakia. The company maintains a consistent brand image and leverages multiple social media platforms to engage with its audience. Technically, the website employs modern frameworks such as Bootstrap and jQuery, integrates Google Tag Manager and Facebook SDK for analytics and marketing, and uses structured data to enhance SEO. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS, includes standard security headers, and restricts ad and analytics storage by default, indicating a privacy-conscious approach. However, the absence of explicit privacy and cookie policies, as well as security incident response information, represents compliance gaps that should be addressed. Overall, the website is professional, trustworthy, and technically sound, with room for improvement in privacy compliance and security transparency.

B

BOHEMIA INSTITUT

bi.cz

47

BOHEMIA INSTITUT is a well-established educational institution in the Czech Republic, specializing in language courses, professional training, and corporate education services. Operating since 1991, it offers a broad portfolio including post-secondary language studies, management courses, computer training, and international language certification testing. The institute holds multiple certifications and memberships in reputable professional organizations, enhancing its credibility and market position. The website reflects a professional and content-rich platform targeting students, professionals, and corporate clients seeking quality education and training services. From a technical perspective, the website employs common web technologies such as jQuery, Facebook SDK, and Google Analytics, with a moderate performance profile and basic mobile optimization. The presence of cookie consent mechanisms and marketing tools indicates a degree of digital maturity, although the absence of a dedicated privacy policy page and security headers suggests room for improvement in compliance and security hardening. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the lack of WHOIS data and domain registration details introduces some uncertainty regarding domain legitimacy. The website does not display critical security or privacy policies, nor incident response contacts, which are recommended for enhanced trust and compliance. Overall, the site is trustworthy and professional, serving its educational mission effectively. Strategic improvements in privacy documentation, security headers, and mobile responsiveness would further strengthen its security and user experience profile.

A

AKCENT International House Prague

akcent.cz

45

AKCENT International House Prague is a well-established language school founded in 1990, offering a broad range of language courses including English, German, Spanish, Italian, and Czech for various audiences such as children, youth, adults, and corporate clients. The school is a recognized Cambridge English Platinum Exam Centre and Goethe-Institut Exam Centre, positioning it as a reputable leader in language education within the Czech Republic. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the website employs modern JavaScript libraries such as jQuery, AOS, and LightGallery, and uses Google Fonts for typography. It is mobile-optimized with good SEO practices and a cookie consent mechanism compliant with GDPR. However, there is room for improvement in security headers and explicit security policies. The site uses HTTPS with a good SSL configuration and integrates Google Analytics for user tracking. From a security perspective, the site demonstrates a solid baseline with HTTPS and cookie consent but lacks published security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain trust analysis, but the presence of international certifications and clear contact information supports legitimacy. Overall, the website presents a trustworthy and professional online presence for a medium-sized educational institution. Strategic improvements in security policies and WHOIS transparency would enhance trust and compliance further.

L

LABO – SK, s.r.o.

labo.sk

48

LABO – SK, s.r.o. is a Slovakian company specializing in the distribution and wholesale of laboratory technology and equipment. Established in 2006, it serves laboratories and scientific institutions primarily within Slovakia. The company maintains a professional online presence with a website that provides product catalogs, contact information, and service details. The business holds an ISO 9001 certification, indicating a commitment to quality management standards. The website content is relevant and well-structured, targeting laboratory professionals and institutions. From a technical perspective, the website uses a variety of JavaScript libraries including jQuery 2.1.1, jQuery UI, and jwplayer 5, managed via the CMS Airis 3.3.11. While the site is functional and moderately optimized for performance and mobile use, some technologies are outdated, which may introduce security risks. The website lacks modern security headers and visible HTTPS enforcement details, though DNSSEC is enabled at the domain level, enhancing DNS security. Security posture shows room for improvement. The absence of privacy and cookie policies indicates non-compliance with GDPR and related privacy regulations. No incident response or vulnerability disclosure information is provided. The use of outdated JavaScript libraries and missing security headers could expose the site to vulnerabilities. However, no WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, LABO – SK, s.r.o. presents a credible and established business with a solid market position in laboratory equipment distribution in Slovakia. Strategic improvements in security practices, privacy compliance, and technology modernization are recommended to enhance trust, compliance, and resilience against cyber threats.

L

Lomtec.com

lomtec.com

65

Lomtec.com is a Slovak-based technology company specializing in custom software development, information systems, and web portal solutions. With over 20 years of experience and a portfolio of more than 1000 projects, the company serves a diverse range of clients including government entities and private sector organizations. Their website is professionally designed, content-rich, and targets organizations seeking tailored IT solutions. Technically, the site uses ASP.NET framework with jQuery and Google Analytics integration, and it is well-optimized for mobile devices. Security practices include HTTPS enforcement, anti-forgery tokens, and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS registration data raises some concerns about domain legitimacy, but the overall business presence and client references support its credibility.

O

OREDO s.r.o.

oredo.cz

54

OREDO s.r.o. is a regional public transport integrator owned by the Hradec Králové and Pardubice regions in the Czech Republic. The company manages the integrated tariff system IREDO, which allows passengers to travel across buses and trains in these regions using a single ticket. The website provides basic information about the company, contact details, and links to the IREDO tariff system. The business model focuses on public transport organization and tariff integration within a defined geographic area, targeting local residents and travelers. Technically, the website uses older JavaScript libraries such as jQuery 1.8.16 and jQuery UI, indicating some technical debt and potential modernization needs. The site lacks modern SEO and accessibility features and does not show evidence of a CMS or advanced frameworks. Performance appears moderate, with basic mobile optimization and limited interactive elements. No analytics or tracking scripts were detected, suggesting minimal user tracking. From a security perspective, the website lacks visible HTTPS enforcement and security headers, which are critical for protecting user data and ensuring secure communications. No privacy or cookie policies are present, which is a compliance gap given GDPR requirements in the EU. The absence of WHOIS data reduces domain trustworthiness, although the website content and contact information align with a legitimate regional public transport entity. No forms or incident response contacts were found, limiting the ability to report security issues. Overall, the website is functional but basic, with significant room for improvement in security posture, privacy compliance, and technical modernization. Strategic recommendations include implementing HTTPS with HSTS, adding security headers, publishing privacy and cookie policies, updating technical libraries, and verifying domain registration details to enhance trust and compliance.

Z

Západoslovenská vodárenská spoločnosť, a.s.

zsvs.sk

57

Západoslovenská vodárenská spoločnosť, a.s. is a regional water utility company based in Nitra, Slovakia, serving multiple districts with potable water supply, sewage, and stormwater management services. The company targets households and businesses within its service area, positioning itself as a key regional player in the energy sector focused on water utilities. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Cookiebot for cookie consent management, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities. However, the site lacks publicly available security policies or incident response information, which could be improved. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a detailed privacy policy in Slovak, aligned with GDPR requirements. Overall, the website is trustworthy, professional, and well-maintained, supporting the company's business credibility and customer engagement.

M

MODEL PACK SHOP Bratislava

packshop.sk

58

MODEL PACK SHOP Bratislava operates a well-established e-commerce platform specializing in packaging materials including cardboard boxes, adhesive tapes, foils, and bags. With over 24 years of tradition and own manufacturing capabilities under the parent company Model Obaly, a.s., the company holds a strong position in the Slovak packaging market. The website offers a comprehensive product catalog, loyalty programs, and free shipping above a purchase threshold, targeting both businesses and individual customers. Technically, the site uses modern JavaScript libraries such as jQuery, Bootstrap, and Ekko Lightbox, with responsive design and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit incident response or security policy pages were found. Overall, the site is professional, trustworthy, and compliant with GDPR regulations.

V

Výskumný ústav potravinársky

vup.sk

52

Výskumný ústav potravinársky (VÚP) is a Slovak national research institute specializing in food science, research, and related services. Established in 2003, it provides scientific research outputs, consulting, testing laboratory services, and publishes journals and bulletins targeting both professional and general audiences interested in food and nutrition. The website reflects a well-established institutional presence with consistent branding and a clear focus on its research mission. Technically, the site uses a traditional web stack with jQuery and related UI libraries, delivering moderate performance and good mobile responsiveness. Security posture is adequate with cookie consent and privacy policy compliance, though some improvements in security headers and library updates are recommended. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

S

Slovenská poľnohospodárska a potravinárska komora

sppk.sk

61

Slovenská poľnohospodárska a potravinárska komora (SPPK) is a well-established Slovak non-profit chamber focused on representing and supporting the agricultural and food sectors. Founded in 2003, it provides a broad range of services including legislative updates, market statistics, education, and international cooperation. The website serves as a comprehensive information portal for stakeholders in agriculture and food industries, policymakers, and the general public interested in these sectors. It maintains a strong presence through multiple language options and social media channels, enhancing its outreach and engagement. Technically, the website is built on a custom CMS leveraging the Yii PHP framework, with a tech stack including jQuery, jQuery UI, and various UI enhancement libraries. It is hosted behind Cloudflare with DNSSEC enabled, ensuring good baseline security and performance. The site implements GDPR-compliant cookie consent mechanisms and uses Google Analytics and AddThis for analytics and marketing. While the site is moderately optimized for mobile and accessibility, there is room for improvement in security headers and updating legacy libraries. From a security perspective, the site enforces HTTPS and uses DNSSEC, indicating a strong commitment to secure communications. However, the absence of advanced security headers like CSP and potential use of outdated JavaScript libraries present moderate risks. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear policies and consent mechanisms. The WHOIS data confirms the domain's legitimacy and long-standing registration consistent with the organization's profile. Overall, the website is professional, trustworthy, and serves its target audience effectively. Strategic improvements in security headers, library updates, and enhanced mobile optimization could further strengthen its posture and user experience.

E

eBIZ Corp s.r.o.

elektronickaplatforma.sk

51

Elektronickaplatforma.sk is a Slovak electronic platform dedicated to public procurement processes, offering a suite of integrated modules such as eZakazky, eAukcie, eProcurement, and Verejné súťaže. The platform serves government entities and private companies involved in public procurement, providing certified electronic auction systems and management tools to streamline procurement workflows. The business is operated by eBIZ Corp s.r.o., established in 2021, positioning itself as a key player in Slovakia's public procurement digital ecosystem. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Font Awesome, with good mobile optimization and SEO practices. The site is well-structured with clear navigation and professional design, though no CMS or hosting provider details are evident. Google Analytics is used for user tracking, but no cookie consent or privacy policies are present, indicating room for compliance improvement. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal security or incident response policies. The absence of privacy and cookie policies is a notable compliance gap. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, elektronickaplatforma.sk presents a professional and trustworthy platform with solid business credibility and technical implementation. However, enhancements in privacy compliance, security headers, and formal policies are recommended to strengthen its security posture and regulatory adherence.

E

eBIZ Corp s.r.o.

eaukcie.sk

52

eAukcie.sk is a certified electronic auction platform primarily serving public procurement entities and suppliers in Slovakia. Operated by eBIZ Corp s.r.o., the platform has been established since 2003, indicating a mature presence in the government technology sector. The website offers secure login options including integration with the Slovak UPVS eID system, enhancing trust and compliance with national digital identity standards. The business model focuses on providing a specialized B2G service facilitating transparent and certified electronic auctions for public tenders. Technically, the site uses a custom ColdFusion-based CMS with common JavaScript libraries such as jQuery and Font Awesome, supplemented by Google Analytics and LiveAgent for analytics and customer support respectively. While the site is functional and professionally presented, it lacks some modern security headers and a cookie consent mechanism, which are important for GDPR compliance and security best practices. Overall, the platform demonstrates a solid security posture with room for improvement in privacy compliance and technical modernization.

F

Fondation C.Genial

cgenial.org

47

Fondation CGénial is a French non-profit organization established in 2006, dedicated to promoting science, technology, and related careers among youth. It acts as a bridge between the education sector and industry, engaging students, educators, engineers, and companies through various programs and contests. The foundation enjoys a solid market position supported by partnerships with major corporations such as EDF, Sanofi, and Arkema. The website reflects this mission with relevant content, testimonials, and partner showcases. Technically, the site uses a modern JavaScript stack including jQuery, Matomo analytics, Google Tag Manager, and Google reCAPTCHA for form security. Hosting is provided by OVH, a reputable French provider. Security posture is good with HTTPS enforced and anti-bot measures on forms, but lacks published security policies and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and well-structured, serving its educational and non-profit goals effectively.

Livea is a French e-commerce retailer specializing in sanitary equipment, bathroom fixtures, WC, and kitchen products. The website offers a wide range of over 20,000 references from major brands such as Grohe, Axor, Geberit, Franke, and Duravit. The company targets both professional and consumer markets, providing an extensive catalog and a physical store presence in Woippy, France. Technically, the website is built on the Prestashop CMS platform, utilizing modern JavaScript libraries and modules to enhance user experience and functionality. The site is mobile-optimized, has good SEO practices, and includes privacy and cookie policies compliant with GDPR. Security posture is strong with HTTPS enforced and appropriate security headers present. No critical vulnerabilities or suspicious WHOIS data were detected, although WHOIS information is privacy protected. Overall, Livea presents a professional, trustworthy, and well-structured online retail platform.

P

PETROF, spol. s r.o.

muzeumpetrof.cz

45

PETROF, spol. s r.o. operates a museum and manufacturing facility specializing in pianos and musical instruments in Hradec Králové, Czech Republic. The website serves as a portal for visitors to learn about the company's history, book tours of the factory and museum, and purchase gift vouchers. The company has a strong market position with a heritage of over 160 years and offers cultural tourism experiences alongside its manufacturing business. Technically, the website is built on WordPress with modern JavaScript libraries, Google Maps integration, and tracking tools such as Google Tag Manager and Facebook Pixel. Security measures include HTTPS, reCAPTCHA on forms, and a cookie consent mechanism compliant with GDPR. However, there is room for improvement in security headers and explicit security policies. Overall, the website is professional, well-structured, and trustworthy, with a good balance of content quality and technical implementation.

D

Dr. Müller Pharma s.r.o.

muller-pharma.cz

43

Dr. Müller Pharma s.r.o. is a prominent Czech manufacturer specializing in pharmaceuticals, medical devices, cosmetics, and dietary supplements. The company maintains a professional online presence with a well-structured website offering product information and an e-commerce platform. Their market position is strong within the Czech healthcare sector, targeting general consumers and healthcare professionals. The website demonstrates consistent branding and provides essential business information, including company registration details and social media links. From a technical perspective, the website employs standard web technologies such as jQuery and Google reCAPTCHA, ensuring basic security and user interaction features. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. However, there is room for improvement in accessibility and security headers implementation to enhance overall resilience. Security posture is adequate with HTTPS enforced and consent management in place, but the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms indicates a moderate maturity level. The missing WHOIS data for the domain is a notable concern, potentially impacting trustworthiness and legitimacy perceptions. Overall, the website is functional, professional, and compliant with privacy norms but would benefit from enhanced transparency in security practices and verification of domain registration details to strengthen stakeholder confidence.

動

動腦傳播股份有限公司

brain.com.tw

46

動腦傳播股份有限公司 operates Brain.com.tw, a well-established marketing, advertising, and creative digital platform targeting marketing professionals and advertisers primarily in Taiwan. The website offers rich content including marketing news, creative insights, events, and subscription services, positioning itself as a key media player in the Taiwanese marketing industry. The platform integrates multiple modern web technologies such as Bootstrap, jQuery, and OneSignal for push notifications, alongside analytics tools like Google Analytics and Facebook SDK for user tracking and marketing optimization. Technically, the website demonstrates moderate to good performance with mobile optimization and clear navigation. However, it lacks some advanced security headers and cookie consent mechanisms, which are important for enhancing security posture and privacy compliance. The site uses HTTPS and avoids exposing sensitive data, but could improve by implementing security policies and incident response contacts. From a security perspective, the site is generally secure with no visible vulnerabilities or blocking by WAFs. The WHOIS data confirms domain legitimacy with consistent registration information. Privacy policies and terms of service are present but could be enhanced for GDPR compliance. Overall, the site maintains a professional and trustworthy presence with room for security and privacy improvements. Strategically, the company should focus on strengthening security headers, implementing cookie consent for privacy compliance, and publishing clear security and incident response policies to enhance user trust and regulatory adherence.

B

Bibellesebund Deutschland

bibellesebund.de

57

Bibellesebund Deutschland is a medium-sized non-profit religious organization focused on encouraging people of all ages to engage with the Bible through various educational and spiritual resources. Their offerings include printed and digital Bible reading materials, events, seminars, youth and family retreats, and a podcast. The organization is part of the international Scripture Union movement and maintains a professional web presence with clear branding and consistent messaging. Technically, the website is built on the Contao CMS platform with modern JavaScript libraries and provides a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

Biblica is a well-established global Bible ministry focused on releasing widely read Scriptures and providing innovative resources to support Bible ministry worldwide. The organization targets a global Christian audience and mission organizations, positioning itself as a leader in the non-profit religious sector. The website reflects a mature digital presence built on WordPress with modern technologies and monitoring tools, offering a professional user experience with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though there is room for improvement in publishing dedicated security policies and incident response information. The absence of WHOIS registration data introduces some uncertainty about domain registration legitimacy, but the overall branding and content quality support the organization's credibility. Strategic recommendations include enhancing transparency around security and incident response, clarifying domain registration details, and continuing to monitor third-party scripts for vulnerabilities.

M

MagShop

magshop.com.au

66

MagShop is a well-established Australian e-commerce retailer specializing in magazine subscriptions, offering a wide catalog of over 300 titles including exclusive deals from Are Media, Australia's largest publisher. The website is professionally designed with good content quality and clear navigation, targeting Australian consumers interested in magazine subscriptions and related products such as books and gift vouchers. Technically, the site uses a mature technology stack including ASP.NET, jQuery, and multiple analytics and marketing tools, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although privacy compliance could be improved by adding a cookie consent mechanism. Overall, the business credibility is high with clear contact information, social media presence, and trust indicators such as awards and verified reviews. WHOIS data is unavailable due to AU domain privacy policies but the site’s association with Are Media and professional presentation support legitimacy.

N

NET4GAS

blizprirode.cz

64

NET4GAS Blíž přírodě is a corporate philanthropy program by NET4GAS focused on supporting nature conservation and environmental education in the Czech Republic. The website serves as an informational and promotional platform for the program, highlighting projects, news, and educational content related to nature protection. The site targets environmentally conscious individuals and organizations interested in nature and outdoor activities. The business model centers on corporate social responsibility and long-term sponsorship of environmental initiatives, positioning NET4GAS as a significant contributor in this sector within the Czech market. Technically, the website employs a traditional web stack with jQuery 1.11.1, Bootstrap 3.1.1, and Google Maps API integration. While functional and moderately optimized for mobile, the site uses somewhat outdated libraries which could pose security risks. The site includes basic SEO and accessibility features but lacks advanced modern frameworks or CMS identification. Hosting and domain registration are consistent with Czech providers, supporting the legitimacy of the site. From a security perspective, the site uses HTTPS and implements GDPR-compliant cookie consent mechanisms. However, no explicit security headers were detected, and the use of outdated JavaScript libraries suggests potential vulnerabilities. There is no visible security policy or incident response contact information, which could be improved. The privacy policy is present and reasonably comprehensive for GDPR compliance. Overall, the website is trustworthy and professional, with good content quality and business credibility. Security posture is moderate but could benefit from updates and enhancements. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include updating technical components, enhancing security headers, and adding explicit security and incident response policies to improve trust and compliance.

Masarykova střední škola chemická is a traditional secondary chemical industry school located in the center of Prague, offering specialized education in applied chemistry fields such as clinical and toxicological analysis, pharmaceutical synthesis, and forensic analysis. The school maintains strong partnerships with local universities and research institutions, positioning itself as a reputable educational institution with modern laboratories and a qualified teaching staff. The website reflects a well-structured and content-rich platform targeting prospective students, parents, and the educational community. Technically, the site uses modern JavaScript libraries and the Nette framework, providing good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and form validation, though security headers and explicit policies could be improved. The absence of WHOIS data reduces domain trust from a registration perspective, but the website's content and partner affiliations support its legitimacy. Overall, the site is professional, trustworthy, and serves its educational mission effectively.

F

Festival vedy a techniky AMAVET

festivalvedy.sk

55

Festival vedy a techniky AMAVET is a well-established Slovak non-profit organization focused on promoting youth engagement in science and technology through competitions and festivals. The website serves as a central hub for event information, registration, news, and educational resources, targeting students and educators. The organization is supported by the Slovak Ministry of Education and operates with a clear educational mission. Technically, the website is built on WordPress with modern plugins and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site reflects a credible and trustworthy educational entity with active community engagement.

Z

Západoslovenská distribučná, a. s.

zsdis.sk

70

Západoslovenská distribučná, a. s. operates as a major electricity distribution company in western Slovakia, serving both households and businesses. The website provides comprehensive information about their services including new connections, changes, disconnections, and e-mobility solutions. The company positions itself as a reliable utility provider with a focus on customer service and regulatory compliance. Technically, the website employs modern JavaScript libraries such as jQuery and Swiper.js, and integrates Cookiebot for cookie consent management, reflecting a mature digital infrastructure. Security measures include HTTPS enforcement and standard security headers, with no critical vulnerabilities detected in the visible content. Privacy compliance is well addressed through detailed cookie policies and consent mechanisms, although explicit security and incident response policies are not publicly available. Overall, the site demonstrates a professional and trustworthy online presence consistent with a large utility provider.

The website 'Mapa tepelných čerpadiel — SZ CHKT' is operated by the Slovak Association for Refrigeration, Air Conditioning and Heat Pumps (SZ CHKT). It provides a comprehensive map and database of installed heat pumps across Slovakia, serving as a valuable resource for industry professionals and stakeholders interested in renewable energy systems. The site acts as a certification authority, reinforcing its authoritative position in the Slovak energy sector. Technically, the website employs a custom or proprietary CMS with a technology stack including jQuery 1.8.3, jQuery UI, Google Maps API, and Matomo analytics. While the site uses HTTPS and DNSSEC, indicating a strong security foundation, it lacks modern security headers and uses an outdated jQuery version, which could pose risks. Privacy compliance is partial, with cookie consent mechanisms in place but no explicit privacy or cookie policies found. Overall, the website is professional, trustworthy, and relevant to its niche audience, but there is room for improvement in security and privacy transparency.

Slovensky zvaz pre chladiacu a klimatizacnu techniku (SZ CHKT) is a Slovak professional association specializing in refrigeration, air conditioning, and heat pump technologies. Established in 2009, it serves as a certification body and training provider, offering courses, exams, and technical resources to professionals and companies in the energy and HVAC sectors. The organization maintains strong ties with international bodies and promotes regulatory compliance and industry best practices in Slovakia. The website reflects a mature digital presence with comprehensive content including events, e-learning, and certification services. Technically, the site uses a custom CMS with legacy JavaScript libraries and integrates Matomo analytics with cookie consent mechanisms. Security posture is generally good with HTTPS and domain transfer protections, though improvements are needed in updating libraries, enabling DNSSEC, and adding security headers. Privacy policy and terms of service pages are not found, indicating a compliance gap. Overall, the site is professional, trustworthy, and well-positioned in its niche.

V

Visteria sp. z o.o.

vogue.pl

71

Vogue Polska is a Polish media company specializing in fashion, beauty, and cultural news, operating since 2018 under the legal entity Visteria sp. z o.o. The website serves as a digital magazine providing editorial content, trends, and cultural updates targeted at a general audience interested in fashion and lifestyle. The company maintains a strong market position as a national fashion magazine with consistent branding and professional content quality. Technically, the website employs modern analytics and advertising technologies including Google Analytics (GA4), Facebook SDK, Gemius, and Cookiebot for GDPR compliance. The site is well-optimized for mobile devices and SEO, with a moderate performance profile. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are absent. Overall, the domain and business information align well, though WHOIS data is privacy-protected as typical for .pl domains. The website is safe for general audiences with no adult content detected.

Z

Zdravotní pojišťovna ministerstva vnitra České republiky

zdravijakovasen.cz

42

The website zdravijakovasen.cz is a health information portal operated by the Health Insurance Company of the Ministry of the Interior of the Czech Republic. It offers a wide range of health-related content including articles, videos, and seasonal health topics aimed at promoting healthy lifestyles, prevention, and wellness for a general audience including families and individuals with chronic conditions. The site is professionally designed using Drupal 10 CMS and integrates modern web technologies such as jQuery, Slick Carousel, and embedded YouTube videos to enhance user engagement. It also employs Google Tag Manager and Facebook Pixel for analytics and marketing purposes. The website demonstrates strong GDPR and cookie compliance with a clear cookie consent mechanism and a dedicated privacy policy page. However, no direct contact emails or phone numbers are found on the main pages, and there is no explicit security.txt or incident response information available. The WHOIS data for the domain is unavailable, likely due to registry privacy policies, which slightly reduces trust but does not detract from the overall professionalism and legitimacy of the site. Security posture is good with HTTPS enforced, but the absence of explicit security headers is noted as an area for improvement. Overall, the site is a trustworthy and valuable resource for health information in the Czech Republic.

S

Szkoła Mistrzostwa Sportowego Polskiego Związku Piłki Siatkowej

smspzps.pl

47

Szkoła Mistrzostwa Sportowego Polskiego Związku Piłki Siatkowej is a specialized educational institution focused on volleyball sports training and general education for youth in Poland. The school operates under the auspices of the Polish Volleyball Federation and offers a comprehensive program combining academic studies with athletic development. The website reflects a medium-sized organization with a clear target audience of students, parents, and sports professionals. Technically, the website uses a modern tech stack including jQuery, Bootstrap, and slick carousel, providing a responsive and accessible user experience with WCAG features. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit security policies. Privacy compliance is basic with a privacy policy document available but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve in transparency and security best practices.

D

Département des Pyrénées-Atlantiques

le64.fr

53

The website le64.fr is the official digital portal for the Pyrénées-Atlantiques Department in France, providing comprehensive information and services related to social solidarity, education, territory development, infrastructure, culture, sports, environment, and local government activities. It targets residents, families, youth, seniors, local businesses, associations, visitors, and government entities within the region. The site is built on Drupal 9 with modern frontend technologies, offering good mobile optimization, accessibility, and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. The WHOIS data confirms domain legitimacy and consistency with the official government entity. Overall, the site is professional, trustworthy, and content-rich, serving as a key resource for the local population.

O

OKNOSTUDIO, s.r.o.

oknostudio.cz

46

OKNOSTUDIO, s.r.o. is a Czech Republic-based company specializing in the manufacturing and supply of high-quality plastic, wooden, and aluminum windows, doors, and shading technology. The company operates primarily in the Brno and Prague regions and offers comprehensive services including showroom consultations, installation, and after-sales service. The website reflects a mature business with over 15 years of market presence, supported by extensive customer testimonials and project references. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, and various UI and animation libraries. It is well-optimized for mobile devices and SEO, with clear navigation and professional design. The site uses HTTPS and implements cookie consent mechanisms compliant with GDPR, though it lacks some advanced security headers and explicit security policy documentation. From a security perspective, the site shows good baseline practices such as HTTPS and consent management but could improve by adding security headers, publishing vulnerability disclosure policies, and incident response contacts. No vulnerabilities or suspicious content were detected. The WHOIS data is unavailable, likely due to privacy protection, which is common and acceptable for this business type. Overall, the website is professional, trustworthy, and well-maintained, with minor areas for security enhancement. It poses low risk and serves as a credible digital presence for the company.

B

Bundeszentrale für politische Bildung

zusammenhalt-durch-teilhabe.de

60

The website zusammenhalt-durch-teilhabe.de represents a German government program managed by the Bundeszentrale für politische Bildung and the Bundesministerium des Innern und für Heimat. It focuses on promoting democratic participation and combating extremism in rural and structurally weak areas through project funding and community engagement. The site targets regional associations and volunteers, providing resources, event information, and program details. The business model is government-funded and oriented towards social cohesion and democracy promotion. Technically, the site is built on Drupal CMS with common JavaScript libraries such as jQuery and Video.js for multimedia content. The site is moderately optimized for performance and mobile devices, with basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS (implied by URL) but lacks visible security headers in the provided HTML. No privacy or cookie policies are explicitly found, which is a compliance gap. The site uses Piwik analytics, indicating moderate user tracking. No incident response or vulnerability disclosure information is provided, limiting transparency in security management. Overall, the site is trustworthy and professional, reflecting its government affiliation. However, improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance security posture and user trust.