Security Directory

B

BOHEMIA INSTITUT

bi.cz

47

BOHEMIA INSTITUT is a well-established educational institution in the Czech Republic, specializing in language courses, professional training, and corporate education services. Operating since 1991, it offers a broad portfolio including post-secondary language studies, management courses, computer training, and international language certification testing. The institute holds multiple certifications and memberships in reputable professional organizations, enhancing its credibility and market position. The website reflects a professional and content-rich platform targeting students, professionals, and corporate clients seeking quality education and training services. From a technical perspective, the website employs common web technologies such as jQuery, Facebook SDK, and Google Analytics, with a moderate performance profile and basic mobile optimization. The presence of cookie consent mechanisms and marketing tools indicates a degree of digital maturity, although the absence of a dedicated privacy policy page and security headers suggests room for improvement in compliance and security hardening. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the lack of WHOIS data and domain registration details introduces some uncertainty regarding domain legitimacy. The website does not display critical security or privacy policies, nor incident response contacts, which are recommended for enhanced trust and compliance. Overall, the site is trustworthy and professional, serving its educational mission effectively. Strategic improvements in privacy documentation, security headers, and mobile responsiveness would further strengthen its security and user experience profile.

A

AKCENT International House Prague

akcent.cz

45

AKCENT International House Prague is a well-established language school founded in 1990, offering a broad range of language courses including English, German, Spanish, Italian, and Czech for various audiences such as children, youth, adults, and corporate clients. The school is a recognized Cambridge English Platinum Exam Centre and Goethe-Institut Exam Centre, positioning it as a reputable leader in language education within the Czech Republic. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the website employs modern JavaScript libraries such as jQuery, AOS, and LightGallery, and uses Google Fonts for typography. It is mobile-optimized with good SEO practices and a cookie consent mechanism compliant with GDPR. However, there is room for improvement in security headers and explicit security policies. The site uses HTTPS with a good SSL configuration and integrates Google Analytics for user tracking. From a security perspective, the site demonstrates a solid baseline with HTTPS and cookie consent but lacks published security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain trust analysis, but the presence of international certifications and clear contact information supports legitimacy. Overall, the website presents a trustworthy and professional online presence for a medium-sized educational institution. Strategic improvements in security policies and WHOIS transparency would enhance trust and compliance further.

L

LABO – SK, s.r.o.

labo.sk

48

LABO – SK, s.r.o. is a Slovakian company specializing in the distribution and wholesale of laboratory technology and equipment. Established in 2006, it serves laboratories and scientific institutions primarily within Slovakia. The company maintains a professional online presence with a website that provides product catalogs, contact information, and service details. The business holds an ISO 9001 certification, indicating a commitment to quality management standards. The website content is relevant and well-structured, targeting laboratory professionals and institutions. From a technical perspective, the website uses a variety of JavaScript libraries including jQuery 2.1.1, jQuery UI, and jwplayer 5, managed via the CMS Airis 3.3.11. While the site is functional and moderately optimized for performance and mobile use, some technologies are outdated, which may introduce security risks. The website lacks modern security headers and visible HTTPS enforcement details, though DNSSEC is enabled at the domain level, enhancing DNS security. Security posture shows room for improvement. The absence of privacy and cookie policies indicates non-compliance with GDPR and related privacy regulations. No incident response or vulnerability disclosure information is provided. The use of outdated JavaScript libraries and missing security headers could expose the site to vulnerabilities. However, no WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, LABO – SK, s.r.o. presents a credible and established business with a solid market position in laboratory equipment distribution in Slovakia. Strategic improvements in security practices, privacy compliance, and technology modernization are recommended to enhance trust, compliance, and resilience against cyber threats.

L

Lomtec.com

lomtec.com

65

Lomtec.com is a Slovak-based technology company specializing in custom software development, information systems, and web portal solutions. With over 20 years of experience and a portfolio of more than 1000 projects, the company serves a diverse range of clients including government entities and private sector organizations. Their website is professionally designed, content-rich, and targets organizations seeking tailored IT solutions. Technically, the site uses ASP.NET framework with jQuery and Google Analytics integration, and it is well-optimized for mobile devices. Security practices include HTTPS enforcement, anti-forgery tokens, and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS registration data raises some concerns about domain legitimacy, but the overall business presence and client references support its credibility.

O

OREDO s.r.o.

oredo.cz

54

OREDO s.r.o. is a regional public transport integrator owned by the Hradec Králové and Pardubice regions in the Czech Republic. The company manages the integrated tariff system IREDO, which allows passengers to travel across buses and trains in these regions using a single ticket. The website provides basic information about the company, contact details, and links to the IREDO tariff system. The business model focuses on public transport organization and tariff integration within a defined geographic area, targeting local residents and travelers. Technically, the website uses older JavaScript libraries such as jQuery 1.8.16 and jQuery UI, indicating some technical debt and potential modernization needs. The site lacks modern SEO and accessibility features and does not show evidence of a CMS or advanced frameworks. Performance appears moderate, with basic mobile optimization and limited interactive elements. No analytics or tracking scripts were detected, suggesting minimal user tracking. From a security perspective, the website lacks visible HTTPS enforcement and security headers, which are critical for protecting user data and ensuring secure communications. No privacy or cookie policies are present, which is a compliance gap given GDPR requirements in the EU. The absence of WHOIS data reduces domain trustworthiness, although the website content and contact information align with a legitimate regional public transport entity. No forms or incident response contacts were found, limiting the ability to report security issues. Overall, the website is functional but basic, with significant room for improvement in security posture, privacy compliance, and technical modernization. Strategic recommendations include implementing HTTPS with HSTS, adding security headers, publishing privacy and cookie policies, updating technical libraries, and verifying domain registration details to enhance trust and compliance.

Z

Západoslovenská vodárenská spoločnosť, a.s.

zsvs.sk

57

Západoslovenská vodárenská spoločnosť, a.s. is a regional water utility company based in Nitra, Slovakia, serving multiple districts with potable water supply, sewage, and stormwater management services. The company targets households and businesses within its service area, positioning itself as a key regional player in the energy sector focused on water utilities. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Cookiebot for cookie consent management, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities. However, the site lacks publicly available security policies or incident response information, which could be improved. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a detailed privacy policy in Slovak, aligned with GDPR requirements. Overall, the website is trustworthy, professional, and well-maintained, supporting the company's business credibility and customer engagement.

M

MODEL PACK SHOP Bratislava

packshop.sk

58

MODEL PACK SHOP Bratislava operates a well-established e-commerce platform specializing in packaging materials including cardboard boxes, adhesive tapes, foils, and bags. With over 24 years of tradition and own manufacturing capabilities under the parent company Model Obaly, a.s., the company holds a strong position in the Slovak packaging market. The website offers a comprehensive product catalog, loyalty programs, and free shipping above a purchase threshold, targeting both businesses and individual customers. Technically, the site uses modern JavaScript libraries such as jQuery, Bootstrap, and Ekko Lightbox, with responsive design and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit incident response or security policy pages were found. Overall, the site is professional, trustworthy, and compliant with GDPR regulations.

V

Výskumný ústav potravinársky

vup.sk

52

Výskumný ústav potravinársky (VÚP) is a Slovak national research institute specializing in food science, research, and related services. Established in 2003, it provides scientific research outputs, consulting, testing laboratory services, and publishes journals and bulletins targeting both professional and general audiences interested in food and nutrition. The website reflects a well-established institutional presence with consistent branding and a clear focus on its research mission. Technically, the site uses a traditional web stack with jQuery and related UI libraries, delivering moderate performance and good mobile responsiveness. Security posture is adequate with cookie consent and privacy policy compliance, though some improvements in security headers and library updates are recommended. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

S

Slovenská poľnohospodárska a potravinárska komora

sppk.sk

61

Slovenská poľnohospodárska a potravinárska komora (SPPK) is a well-established Slovak non-profit chamber focused on representing and supporting the agricultural and food sectors. Founded in 2003, it provides a broad range of services including legislative updates, market statistics, education, and international cooperation. The website serves as a comprehensive information portal for stakeholders in agriculture and food industries, policymakers, and the general public interested in these sectors. It maintains a strong presence through multiple language options and social media channels, enhancing its outreach and engagement. Technically, the website is built on a custom CMS leveraging the Yii PHP framework, with a tech stack including jQuery, jQuery UI, and various UI enhancement libraries. It is hosted behind Cloudflare with DNSSEC enabled, ensuring good baseline security and performance. The site implements GDPR-compliant cookie consent mechanisms and uses Google Analytics and AddThis for analytics and marketing. While the site is moderately optimized for mobile and accessibility, there is room for improvement in security headers and updating legacy libraries. From a security perspective, the site enforces HTTPS and uses DNSSEC, indicating a strong commitment to secure communications. However, the absence of advanced security headers like CSP and potential use of outdated JavaScript libraries present moderate risks. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear policies and consent mechanisms. The WHOIS data confirms the domain's legitimacy and long-standing registration consistent with the organization's profile. Overall, the website is professional, trustworthy, and serves its target audience effectively. Strategic improvements in security headers, library updates, and enhanced mobile optimization could further strengthen its posture and user experience.

E

eBIZ Corp s.r.o.

elektronickaplatforma.sk

51

Elektronickaplatforma.sk is a Slovak electronic platform dedicated to public procurement processes, offering a suite of integrated modules such as eZakazky, eAukcie, eProcurement, and Verejné súťaže. The platform serves government entities and private companies involved in public procurement, providing certified electronic auction systems and management tools to streamline procurement workflows. The business is operated by eBIZ Corp s.r.o., established in 2021, positioning itself as a key player in Slovakia's public procurement digital ecosystem. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Font Awesome, with good mobile optimization and SEO practices. The site is well-structured with clear navigation and professional design, though no CMS or hosting provider details are evident. Google Analytics is used for user tracking, but no cookie consent or privacy policies are present, indicating room for compliance improvement. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal security or incident response policies. The absence of privacy and cookie policies is a notable compliance gap. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, elektronickaplatforma.sk presents a professional and trustworthy platform with solid business credibility and technical implementation. However, enhancements in privacy compliance, security headers, and formal policies are recommended to strengthen its security posture and regulatory adherence.

E

eBIZ Corp s.r.o.

eaukcie.sk

52

eAukcie.sk is a certified electronic auction platform primarily serving public procurement entities and suppliers in Slovakia. Operated by eBIZ Corp s.r.o., the platform has been established since 2003, indicating a mature presence in the government technology sector. The website offers secure login options including integration with the Slovak UPVS eID system, enhancing trust and compliance with national digital identity standards. The business model focuses on providing a specialized B2G service facilitating transparent and certified electronic auctions for public tenders. Technically, the site uses a custom ColdFusion-based CMS with common JavaScript libraries such as jQuery and Font Awesome, supplemented by Google Analytics and LiveAgent for analytics and customer support respectively. While the site is functional and professionally presented, it lacks some modern security headers and a cookie consent mechanism, which are important for GDPR compliance and security best practices. Overall, the platform demonstrates a solid security posture with room for improvement in privacy compliance and technical modernization.

F

Fondation C.Genial

cgenial.org

47

Fondation CGénial is a French non-profit organization established in 2006, dedicated to promoting science, technology, and related careers among youth. It acts as a bridge between the education sector and industry, engaging students, educators, engineers, and companies through various programs and contests. The foundation enjoys a solid market position supported by partnerships with major corporations such as EDF, Sanofi, and Arkema. The website reflects this mission with relevant content, testimonials, and partner showcases. Technically, the site uses a modern JavaScript stack including jQuery, Matomo analytics, Google Tag Manager, and Google reCAPTCHA for form security. Hosting is provided by OVH, a reputable French provider. Security posture is good with HTTPS enforced and anti-bot measures on forms, but lacks published security policies and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and well-structured, serving its educational and non-profit goals effectively.

Livea is a French e-commerce retailer specializing in sanitary equipment, bathroom fixtures, WC, and kitchen products. The website offers a wide range of over 20,000 references from major brands such as Grohe, Axor, Geberit, Franke, and Duravit. The company targets both professional and consumer markets, providing an extensive catalog and a physical store presence in Woippy, France. Technically, the website is built on the Prestashop CMS platform, utilizing modern JavaScript libraries and modules to enhance user experience and functionality. The site is mobile-optimized, has good SEO practices, and includes privacy and cookie policies compliant with GDPR. Security posture is strong with HTTPS enforced and appropriate security headers present. No critical vulnerabilities or suspicious WHOIS data were detected, although WHOIS information is privacy protected. Overall, Livea presents a professional, trustworthy, and well-structured online retail platform.

P

PETROF, spol. s r.o.

muzeumpetrof.cz

45

PETROF, spol. s r.o. operates a museum and manufacturing facility specializing in pianos and musical instruments in Hradec Králové, Czech Republic. The website serves as a portal for visitors to learn about the company's history, book tours of the factory and museum, and purchase gift vouchers. The company has a strong market position with a heritage of over 160 years and offers cultural tourism experiences alongside its manufacturing business. Technically, the website is built on WordPress with modern JavaScript libraries, Google Maps integration, and tracking tools such as Google Tag Manager and Facebook Pixel. Security measures include HTTPS, reCAPTCHA on forms, and a cookie consent mechanism compliant with GDPR. However, there is room for improvement in security headers and explicit security policies. Overall, the website is professional, well-structured, and trustworthy, with a good balance of content quality and technical implementation.

D

Dr. Müller Pharma s.r.o.

muller-pharma.cz

43

Dr. Müller Pharma s.r.o. is a prominent Czech manufacturer specializing in pharmaceuticals, medical devices, cosmetics, and dietary supplements. The company maintains a professional online presence with a well-structured website offering product information and an e-commerce platform. Their market position is strong within the Czech healthcare sector, targeting general consumers and healthcare professionals. The website demonstrates consistent branding and provides essential business information, including company registration details and social media links. From a technical perspective, the website employs standard web technologies such as jQuery and Google reCAPTCHA, ensuring basic security and user interaction features. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. However, there is room for improvement in accessibility and security headers implementation to enhance overall resilience. Security posture is adequate with HTTPS enforced and consent management in place, but the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms indicates a moderate maturity level. The missing WHOIS data for the domain is a notable concern, potentially impacting trustworthiness and legitimacy perceptions. Overall, the website is functional, professional, and compliant with privacy norms but would benefit from enhanced transparency in security practices and verification of domain registration details to strengthen stakeholder confidence.

動

動腦傳播股份有限公司

brain.com.tw

46

動腦傳播股份有限公司 operates Brain.com.tw, a well-established marketing, advertising, and creative digital platform targeting marketing professionals and advertisers primarily in Taiwan. The website offers rich content including marketing news, creative insights, events, and subscription services, positioning itself as a key media player in the Taiwanese marketing industry. The platform integrates multiple modern web technologies such as Bootstrap, jQuery, and OneSignal for push notifications, alongside analytics tools like Google Analytics and Facebook SDK for user tracking and marketing optimization. Technically, the website demonstrates moderate to good performance with mobile optimization and clear navigation. However, it lacks some advanced security headers and cookie consent mechanisms, which are important for enhancing security posture and privacy compliance. The site uses HTTPS and avoids exposing sensitive data, but could improve by implementing security policies and incident response contacts. From a security perspective, the site is generally secure with no visible vulnerabilities or blocking by WAFs. The WHOIS data confirms domain legitimacy with consistent registration information. Privacy policies and terms of service are present but could be enhanced for GDPR compliance. Overall, the site maintains a professional and trustworthy presence with room for security and privacy improvements. Strategically, the company should focus on strengthening security headers, implementing cookie consent for privacy compliance, and publishing clear security and incident response policies to enhance user trust and regulatory adherence.

B

Bibellesebund Deutschland

bibellesebund.de

57

Bibellesebund Deutschland is a medium-sized non-profit religious organization focused on encouraging people of all ages to engage with the Bible through various educational and spiritual resources. Their offerings include printed and digital Bible reading materials, events, seminars, youth and family retreats, and a podcast. The organization is part of the international Scripture Union movement and maintains a professional web presence with clear branding and consistent messaging. Technically, the website is built on the Contao CMS platform with modern JavaScript libraries and provides a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

Biblica is a well-established global Bible ministry focused on releasing widely read Scriptures and providing innovative resources to support Bible ministry worldwide. The organization targets a global Christian audience and mission organizations, positioning itself as a leader in the non-profit religious sector. The website reflects a mature digital presence built on WordPress with modern technologies and monitoring tools, offering a professional user experience with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though there is room for improvement in publishing dedicated security policies and incident response information. The absence of WHOIS registration data introduces some uncertainty about domain registration legitimacy, but the overall branding and content quality support the organization's credibility. Strategic recommendations include enhancing transparency around security and incident response, clarifying domain registration details, and continuing to monitor third-party scripts for vulnerabilities.

M

MagShop

magshop.com.au

66

MagShop is a well-established Australian e-commerce retailer specializing in magazine subscriptions, offering a wide catalog of over 300 titles including exclusive deals from Are Media, Australia's largest publisher. The website is professionally designed with good content quality and clear navigation, targeting Australian consumers interested in magazine subscriptions and related products such as books and gift vouchers. Technically, the site uses a mature technology stack including ASP.NET, jQuery, and multiple analytics and marketing tools, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although privacy compliance could be improved by adding a cookie consent mechanism. Overall, the business credibility is high with clear contact information, social media presence, and trust indicators such as awards and verified reviews. WHOIS data is unavailable due to AU domain privacy policies but the site’s association with Are Media and professional presentation support legitimacy.

N

NET4GAS

blizprirode.cz

64

NET4GAS Blíž přírodě is a corporate philanthropy program by NET4GAS focused on supporting nature conservation and environmental education in the Czech Republic. The website serves as an informational and promotional platform for the program, highlighting projects, news, and educational content related to nature protection. The site targets environmentally conscious individuals and organizations interested in nature and outdoor activities. The business model centers on corporate social responsibility and long-term sponsorship of environmental initiatives, positioning NET4GAS as a significant contributor in this sector within the Czech market. Technically, the website employs a traditional web stack with jQuery 1.11.1, Bootstrap 3.1.1, and Google Maps API integration. While functional and moderately optimized for mobile, the site uses somewhat outdated libraries which could pose security risks. The site includes basic SEO and accessibility features but lacks advanced modern frameworks or CMS identification. Hosting and domain registration are consistent with Czech providers, supporting the legitimacy of the site. From a security perspective, the site uses HTTPS and implements GDPR-compliant cookie consent mechanisms. However, no explicit security headers were detected, and the use of outdated JavaScript libraries suggests potential vulnerabilities. There is no visible security policy or incident response contact information, which could be improved. The privacy policy is present and reasonably comprehensive for GDPR compliance. Overall, the website is trustworthy and professional, with good content quality and business credibility. Security posture is moderate but could benefit from updates and enhancements. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include updating technical components, enhancing security headers, and adding explicit security and incident response policies to improve trust and compliance.

Masarykova střední škola chemická is a traditional secondary chemical industry school located in the center of Prague, offering specialized education in applied chemistry fields such as clinical and toxicological analysis, pharmaceutical synthesis, and forensic analysis. The school maintains strong partnerships with local universities and research institutions, positioning itself as a reputable educational institution with modern laboratories and a qualified teaching staff. The website reflects a well-structured and content-rich platform targeting prospective students, parents, and the educational community. Technically, the site uses modern JavaScript libraries and the Nette framework, providing good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and form validation, though security headers and explicit policies could be improved. The absence of WHOIS data reduces domain trust from a registration perspective, but the website's content and partner affiliations support its legitimacy. Overall, the site is professional, trustworthy, and serves its educational mission effectively.

F

Festival vedy a techniky AMAVET

festivalvedy.sk

55

Festival vedy a techniky AMAVET is a well-established Slovak non-profit organization focused on promoting youth engagement in science and technology through competitions and festivals. The website serves as a central hub for event information, registration, news, and educational resources, targeting students and educators. The organization is supported by the Slovak Ministry of Education and operates with a clear educational mission. Technically, the website is built on WordPress with modern plugins and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site reflects a credible and trustworthy educational entity with active community engagement.

Z

Západoslovenská distribučná, a. s.

zsdis.sk

70

Západoslovenská distribučná, a. s. operates as a major electricity distribution company in western Slovakia, serving both households and businesses. The website provides comprehensive information about their services including new connections, changes, disconnections, and e-mobility solutions. The company positions itself as a reliable utility provider with a focus on customer service and regulatory compliance. Technically, the website employs modern JavaScript libraries such as jQuery and Swiper.js, and integrates Cookiebot for cookie consent management, reflecting a mature digital infrastructure. Security measures include HTTPS enforcement and standard security headers, with no critical vulnerabilities detected in the visible content. Privacy compliance is well addressed through detailed cookie policies and consent mechanisms, although explicit security and incident response policies are not publicly available. Overall, the site demonstrates a professional and trustworthy online presence consistent with a large utility provider.

The website 'Mapa tepelných čerpadiel — SZ CHKT' is operated by the Slovak Association for Refrigeration, Air Conditioning and Heat Pumps (SZ CHKT). It provides a comprehensive map and database of installed heat pumps across Slovakia, serving as a valuable resource for industry professionals and stakeholders interested in renewable energy systems. The site acts as a certification authority, reinforcing its authoritative position in the Slovak energy sector. Technically, the website employs a custom or proprietary CMS with a technology stack including jQuery 1.8.3, jQuery UI, Google Maps API, and Matomo analytics. While the site uses HTTPS and DNSSEC, indicating a strong security foundation, it lacks modern security headers and uses an outdated jQuery version, which could pose risks. Privacy compliance is partial, with cookie consent mechanisms in place but no explicit privacy or cookie policies found. Overall, the website is professional, trustworthy, and relevant to its niche audience, but there is room for improvement in security and privacy transparency.

Slovensky zvaz pre chladiacu a klimatizacnu techniku (SZ CHKT) is a Slovak professional association specializing in refrigeration, air conditioning, and heat pump technologies. Established in 2009, it serves as a certification body and training provider, offering courses, exams, and technical resources to professionals and companies in the energy and HVAC sectors. The organization maintains strong ties with international bodies and promotes regulatory compliance and industry best practices in Slovakia. The website reflects a mature digital presence with comprehensive content including events, e-learning, and certification services. Technically, the site uses a custom CMS with legacy JavaScript libraries and integrates Matomo analytics with cookie consent mechanisms. Security posture is generally good with HTTPS and domain transfer protections, though improvements are needed in updating libraries, enabling DNSSEC, and adding security headers. Privacy policy and terms of service pages are not found, indicating a compliance gap. Overall, the site is professional, trustworthy, and well-positioned in its niche.

V

Visteria sp. z o.o.

vogue.pl

71

Vogue Polska is a Polish media company specializing in fashion, beauty, and cultural news, operating since 2018 under the legal entity Visteria sp. z o.o. The website serves as a digital magazine providing editorial content, trends, and cultural updates targeted at a general audience interested in fashion and lifestyle. The company maintains a strong market position as a national fashion magazine with consistent branding and professional content quality. Technically, the website employs modern analytics and advertising technologies including Google Analytics (GA4), Facebook SDK, Gemius, and Cookiebot for GDPR compliance. The site is well-optimized for mobile devices and SEO, with a moderate performance profile. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are absent. Overall, the domain and business information align well, though WHOIS data is privacy-protected as typical for .pl domains. The website is safe for general audiences with no adult content detected.

Z

Zdravotní pojišťovna ministerstva vnitra České republiky

zdravijakovasen.cz

42

The website zdravijakovasen.cz is a health information portal operated by the Health Insurance Company of the Ministry of the Interior of the Czech Republic. It offers a wide range of health-related content including articles, videos, and seasonal health topics aimed at promoting healthy lifestyles, prevention, and wellness for a general audience including families and individuals with chronic conditions. The site is professionally designed using Drupal 10 CMS and integrates modern web technologies such as jQuery, Slick Carousel, and embedded YouTube videos to enhance user engagement. It also employs Google Tag Manager and Facebook Pixel for analytics and marketing purposes. The website demonstrates strong GDPR and cookie compliance with a clear cookie consent mechanism and a dedicated privacy policy page. However, no direct contact emails or phone numbers are found on the main pages, and there is no explicit security.txt or incident response information available. The WHOIS data for the domain is unavailable, likely due to registry privacy policies, which slightly reduces trust but does not detract from the overall professionalism and legitimacy of the site. Security posture is good with HTTPS enforced, but the absence of explicit security headers is noted as an area for improvement. Overall, the site is a trustworthy and valuable resource for health information in the Czech Republic.

S

Szkoła Mistrzostwa Sportowego Polskiego Związku Piłki Siatkowej

smspzps.pl

47

Szkoła Mistrzostwa Sportowego Polskiego Związku Piłki Siatkowej is a specialized educational institution focused on volleyball sports training and general education for youth in Poland. The school operates under the auspices of the Polish Volleyball Federation and offers a comprehensive program combining academic studies with athletic development. The website reflects a medium-sized organization with a clear target audience of students, parents, and sports professionals. Technically, the website uses a modern tech stack including jQuery, Bootstrap, and slick carousel, providing a responsive and accessible user experience with WCAG features. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit security policies. Privacy compliance is basic with a privacy policy document available but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve in transparency and security best practices.

D

Département des Pyrénées-Atlantiques

le64.fr

53

The website le64.fr is the official digital portal for the Pyrénées-Atlantiques Department in France, providing comprehensive information and services related to social solidarity, education, territory development, infrastructure, culture, sports, environment, and local government activities. It targets residents, families, youth, seniors, local businesses, associations, visitors, and government entities within the region. The site is built on Drupal 9 with modern frontend technologies, offering good mobile optimization, accessibility, and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. The WHOIS data confirms domain legitimacy and consistency with the official government entity. Overall, the site is professional, trustworthy, and content-rich, serving as a key resource for the local population.

O

OKNOSTUDIO, s.r.o.

oknostudio.cz

46

OKNOSTUDIO, s.r.o. is a Czech Republic-based company specializing in the manufacturing and supply of high-quality plastic, wooden, and aluminum windows, doors, and shading technology. The company operates primarily in the Brno and Prague regions and offers comprehensive services including showroom consultations, installation, and after-sales service. The website reflects a mature business with over 15 years of market presence, supported by extensive customer testimonials and project references. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, and various UI and animation libraries. It is well-optimized for mobile devices and SEO, with clear navigation and professional design. The site uses HTTPS and implements cookie consent mechanisms compliant with GDPR, though it lacks some advanced security headers and explicit security policy documentation. From a security perspective, the site shows good baseline practices such as HTTPS and consent management but could improve by adding security headers, publishing vulnerability disclosure policies, and incident response contacts. No vulnerabilities or suspicious content were detected. The WHOIS data is unavailable, likely due to privacy protection, which is common and acceptable for this business type. Overall, the website is professional, trustworthy, and well-maintained, with minor areas for security enhancement. It poses low risk and serves as a credible digital presence for the company.

B

Bundeszentrale für politische Bildung

zusammenhalt-durch-teilhabe.de

60

The website zusammenhalt-durch-teilhabe.de represents a German government program managed by the Bundeszentrale für politische Bildung and the Bundesministerium des Innern und für Heimat. It focuses on promoting democratic participation and combating extremism in rural and structurally weak areas through project funding and community engagement. The site targets regional associations and volunteers, providing resources, event information, and program details. The business model is government-funded and oriented towards social cohesion and democracy promotion. Technically, the site is built on Drupal CMS with common JavaScript libraries such as jQuery and Video.js for multimedia content. The site is moderately optimized for performance and mobile devices, with basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS (implied by URL) but lacks visible security headers in the provided HTML. No privacy or cookie policies are explicitly found, which is a compliance gap. The site uses Piwik analytics, indicating moderate user tracking. No incident response or vulnerability disclosure information is provided, limiting transparency in security management. Overall, the site is trustworthy and professional, reflecting its government affiliation. However, improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance security posture and user trust.

P

Praděd Vysílač s.r.o.

hotelpradedvysilac.cz

47

Hotel Praděd Vysílač is a small hospitality business operating the highest located hotel and restaurant in the Czech Republic, situated at the summit of the Jeseníky mountains. The website offers comprehensive information about accommodation, dining, an observation tower, and seasonal activities, targeting tourists and visitors interested in mountain experiences. The business maintains clear contact channels and provides gift vouchers and reservation options online. Technically, the website uses a traditional jQuery-based stack with several plugins for UI and multimedia, including Google Maps and Google Analytics for location and visitor tracking. The site is mobile optimized and presents a good user experience with clear navigation and multimedia content. However, some technical improvements could be made, such as updating libraries and enhancing accessibility. From a security perspective, the site uses HTTPS and implements a cookie consent banner compliant with GDPR requirements. No advanced security headers were detected, and no vulnerability disclosure or incident response policies are publicly available. The WHOIS data is unavailable, likely due to privacy protection, which is common for small businesses. Overall, the security posture is moderate but could be improved with additional headers and policies. The overall risk assessment is low to moderate, with recommendations to enhance security headers, update libraries, and publish privacy and security policies to increase trust and compliance. The website is safe for general audiences and does not contain adult or questionable content.

EuroInstytut Polsko-Czesko-Słowacki is a small non-profit organization dedicated to fostering cross-border cooperation between Poland, Czech Republic, and Slovakia. The institute provides specialized training, consultancy, research, and educational services aimed at regional development and partnership building. The website reflects a professional and consistent brand presence with clear contact information and EU funding acknowledgments, positioning it as a credible regional educational entity. Technically, the website uses standard JavaScript libraries such as jQuery and Cycle2 for UI components and integrates a cookie consent management platform to comply with privacy regulations. While the site is accessible and well-structured, there is room for improvement in SEO, accessibility, and security headers implementation. Security posture is moderate with no critical vulnerabilities detected, but the absence of visible security headers and detailed security policies suggests opportunities for enhancement. Overall, the website is trustworthy and compliant with GDPR, with a low risk profile for users and stakeholders.

C

CHAPS spol. s r.o.

chaps.cz

43

CHAPS spol. s r.o. is a Czech IT company specializing in the development, maintenance, and operation of software applications and systems primarily for the personal transportation sector, including rail and road transport. Established in 1997, the company holds a solid market position supported by partnerships with major transportation entities such as České dráhy and regional public transport companies. Their business model focuses on B2B software solutions, including timetable data management and ticketing systems. The website reflects a professional and consistent brand image with clear business information and active social media presence. Technically, the website employs legacy JavaScript libraries like jQuery 1.9.1 and jQuery UI, indicating potential modernization opportunities. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. SEO practices are adequately implemented with proper meta tags and Open Graph data. Hosting and domain registration are consistent with the company's history and location. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. The use of outdated JavaScript libraries may expose the site to vulnerabilities. No forms or sensitive data exposure were detected on the homepage, reducing immediate risk. The domain's WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the security posture is moderate but could benefit from enhancements in headers, consent management, and library updates. The overall risk assessment is low with no critical issues detected. Strategic recommendations include implementing security headers, updating JavaScript libraries, adding cookie consent banners, and publishing security and incident response policies to enhance trust and compliance. These steps will improve the company's digital maturity and security resilience while maintaining its strong market credibility.

On The Green Move is an environmental advocacy movement focused on promoting Living Green through nature and social responsibility. The website presents a professional and consistent brand image with clear messaging about their mission and partner collaborations. Technically, the site uses modern frontend technologies such as Bootstrap and jQuery, providing a responsive and user-friendly experience. However, there is no evidence of a CMS or advanced backend infrastructure. Security posture is moderate with no visible vulnerabilities but lacks HTTPS confirmation and security headers. Privacy and cookie policies are absent, which impacts compliance and user trust. The WHOIS data is missing, raising concerns about domain legitimacy and longevity. Overall, the site is functional and informative but requires improvements in security, privacy compliance, and domain registration transparency.

Z

Zwiazek Gmin i Powiatow Subregionu Zachodniego Wojewodztwa Slaskeigo z siedziba w Rybniku

krainagornejodry.travel

45

Kraina Górnej Odry is a regional tourism website focused on promoting the Upper Odra region in Poland, managed by the Zwiazek Gmin i Powiatow Subregionu Zachodniego Wojewodztwa Slaskeigo z siedziba w Rybniku. The site offers comprehensive information on thematic trails, cultural heritage, events, accommodation, gastronomy, and multimedia resources to attract tourists and visitors interested in the Silesian region. The website is professionally designed with good navigation and mobile optimization, supporting multiple languages including Polish, English, German, and Czech. Technically, it uses a modern tech stack including jQuery, Bootstrap, Font Awesome, and integrates analytics and user behavior tracking tools such as Google Tag Manager and Hotjar. The site is hosted by OVH SAS and uses HTTPS with domain status protections, though DNSSEC is not enabled.

S

Slaska Organizacja Turystyczna

beskidy.travel

48

The website beskidy.travel serves as a regional tourism portal for the Beskidy and Silesian Cieszyn regions in Poland, operated by the Slaska Organizacja Turystyczna. It provides comprehensive information on cultural heritage, tourist trails, events, accommodations, gastronomy, and multimedia content aimed at tourists and visitors interested in exploring the region. The business model focuses on regional tourism promotion and information dissemination, positioning itself as an important regional authority in hospitality and tourism sectors. Technically, the site employs a modern tech stack including Bootstrap, jQuery, Google Tag Manager, and Hotjar, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and DNSSEC. Privacy compliance is limited due to absence of a visible privacy policy, though cookie consent is implemented. Overall, the site is professional and trustworthy with room for improvement in security and privacy transparency.

D

Domain Protection Services, Inc.

slaskcieszynski.travel

45

The website slaskcieszynski.travel serves as a regional tourism portal focused on the Beskidy and Śląsk Cieszyński areas in Poland. It provides comprehensive travel information including thematic and tourist routes, cultural heritage sites, events, accommodation, gastronomy, and multimedia content such as galleries and virtual tours. The platform targets tourists and travelers interested in exploring these regions, positioning itself as a key regional information provider with a small-scale business model. The domain is relatively new, registered in 2019, and uses privacy protection services typical for such websites. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Font Awesome, Google Tag Manager, Google Analytics, and Hotjar for analytics and user behavior tracking. The site is mobile optimized with good accessibility and SEO practices. It uses the SonataCore CMS framework, indicating a structured content management approach. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options, which are recommended to enhance security posture. No exposed sensitive data or vulnerable libraries were detected. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service found in the analyzed content. Overall, the website is safe, professional, and trustworthy for general audiences interested in regional tourism. Strategic improvements include enabling DNSSEC, adding security headers, publishing comprehensive privacy and security policies, and enhancing incident response transparency to strengthen trust and compliance.

The website mpvnet.cz serves as a public transport monitoring platform providing departure boards and real-time vehicle locations for several integrated transport systems across Czech regions. It is operated by CHAPS, spol. s r.o., a small company specializing in transport monitoring solutions. The site targets public transport users seeking timely information on bus and train schedules and vehicle positions. Technically, the site uses basic web technologies including jQuery and FontAwesome, with no advanced frameworks or CMS detected. The design and content quality are basic but functional, with moderate mobile optimization and accessibility. Security posture is minimal, lacking HTTPS verification details, security headers, and privacy policies, which presents compliance and risk concerns. No contact information or incident response details are provided, limiting user trust and support avenues. Overall, the domain is long-established and legitimate, but the site would benefit from enhanced security, privacy compliance, and richer business information to improve trust and user experience.

D

DAV, a.s.

dav-ova.cz

60

DAV, a.s. is a Czech construction and demolition company with over 30 years of experience, providing comprehensive services including demolition, construction of new buildings, reconstruction, and earthworks. The company employs approximately 100 staff and operates with its own machinery and technical equipment, positioning itself as a reliable general contractor in the Czech market. The website reflects a professional and consistent brand image with clear contact information and references to certifications, enhancing trustworthiness. Technically, the website uses a modern but standard tech stack including jQuery, jQuery UI, Slick Carousel, and Lightbox. It is mobile optimized and provides a good user experience with clear navigation and relevant content. SEO and accessibility are adequately addressed, though some improvements could be made in accessibility features and performance optimization. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, security headers are not explicitly detected in the HTML content, and there is no visible incident response or vulnerability disclosure information. The site does not expose sensitive data and uses common analytics and marketing tools responsibly. Overall, the website is secure, compliant, and professionally maintained, supporting the company's credibility. Recommendations include enhancing security headers, publishing incident response contacts, and considering a security.txt file to improve transparency and security posture.

N

Národní realitní holding a.s.

narodnirealitniholding.cz

49

Národní Realitní Holding is a Czech Republic-based real estate holding company focused on elevating the quality and reputation of the local real estate market. The company provides a portfolio of brands, broker training, unique real estate tools, and advisory services aimed at real estate agencies and brokers. Their market position is supported by strategic partnerships with key industry bodies such as the Realitní komora České republiky and the Realitní Akademie České Republiky. The website content is professionally presented, targeting real estate professionals and property clients within the Czech market. Technically, the website employs a modern JavaScript stack including jQuery, Google Maps API, and Fancybox for media display. The site is mobile optimized with good SEO practices but lacks some advanced accessibility features. Security posture is moderate with HTTPS enabled and cookie consent implemented; however, no security headers were detected and no published security or privacy policies were found, which are areas for improvement. The absence of WHOIS data for the domain reduces the ability to fully verify domain legitimacy and registration details, which impacts trust assessment. Despite this, the website's professional presentation, clear contact information, and strategic partnerships indicate a legitimate business operation. Overall, the site scores well on content quality and business credibility but should improve privacy compliance and security practices to enhance trust and reduce risk.

P

Pražské reality

praguerealestate.cz

49

Pražské reality operates a specialized real estate portal focused on luxury properties for sale and rent in Prague and the Czech Republic. The website offers a catalog of houses, apartments, lands, commercial properties, and other real estate types, along with agency registration services and a real estate advisory blog. The platform targets individuals and agencies interested in the Czech real estate market, positioning itself as a niche service provider with a professional online presence. Technically, the website employs a modern technology stack including jQuery, Bootstrap, FontAwesome, Google Tag Manager, and Leaflet.js for interactive maps. The site is built on a custom CMS and demonstrates good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating awareness of privacy compliance. However, no explicit security policies or incident response contacts are published, and security headers are not detected in the provided data. The absence of WHOIS registration details limits domain trust analysis, but the professional presentation and valid contact address support legitimacy. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security policy transparency and technical security controls would enhance trust and resilience.

P

Power Yoga Akademie

bmsa.cz

45

Power Yoga Akademie is a Czech Republic-based accredited educational center specializing in yoga instructor training. It offers certified courses recognized by the Ministry of Education, Youth and Sports (MŠMT) and Yoga Alliance, including both in-person and online programs. The website reflects a professional educational service provider targeting individuals seeking formal yoga instructor qualifications. Technically, the site employs modern web technologies such as jQuery, Google Tag Manager, and Facebook Pixel, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the site content and certifications support legitimacy. Overall, the site is well-structured, compliant with GDPR, and provides clear contact and policy information.

P

Power Yoga Akademie

yogaworld.cz

46

Yoga World is an educational platform specializing in advanced yoga instructor training and self-awareness yoga practices, targeting yoga professionals and enthusiasts in the Czech Republic. The website presents a professional and clear structure with relevant content and services, including workshops, seminars, and a voucher system for continuing education. Technically, the site uses modern web technologies such as jQuery, Google Tag Manager, and Facebook Pixel, and enforces HTTPS for secure communication. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy in Czech. However, the absence of WHOIS data and security headers slightly reduces trustworthiness. Overall, the site demonstrates a solid digital presence with room for improvement in security and transparency.

I

iMi Partner a.s.

imi.eu

44

iMi Partner a.s. operates a comprehensive e-commerce platform specializing in promotional products and advertising gifts. The website offers a wide catalog of over 30,000 items including apparel, office supplies, household goods, leisure and outdoor products, and eco-friendly options. The company targets businesses and organizations seeking customized promotional items with online ordering and logo visualization features. The site demonstrates a solid market position as a trusted supplier with a personalized approach and fast shipping services. Technically, the website uses modern JavaScript libraries such as jQuery, Bootstrap, and Slick Carousel, and integrates marketing and tracking tools like Google Tag Manager and Ecomail. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, HTTPS is enforced, but the absence of security headers and explicit privacy and cookie policies indicates room for improvement. No WHOIS registrant data is available due to EURid privacy policies, which is typical for .eu domains, but this limits direct verification of domain ownership. Overall, the website is legitimate, professional, and functional but would benefit from enhanced privacy compliance and security best practices.

P

Pražské reality

prazskereality.cz

49

Pražské reality operates a professional real estate portal primarily focused on property sales and rentals in Prague and across the Czech Republic. The website offers a comprehensive catalog of properties including houses, apartments, commercial spaces, and land, along with tools such as a mortgage calculator and a blog featuring real estate news. The platform targets individuals and businesses interested in luxury and general real estate in the region. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though it lacks some advanced security headers and explicit incident response contacts. The absence of WHOIS data for the domain is a notable concern, limiting the ability to fully verify domain legitimacy. Overall, the site is professional and trustworthy from a user perspective but would benefit from enhanced transparency and security practices.

I

iMi Partner, a.s.

imi.cz

41

iMi Partner, a.s. is a Czech Republic based company specializing in the supply and manufacture of promotional and gift items with custom printing. With a claimed 30 years of experience, the company targets B2B customers seeking a wide range of promotional products including textiles, office supplies, household items, and eco-friendly products. The website offers an extensive online catalog and ordering system, supported by modern web technologies and marketing tools. The company demonstrates a solid market position with reputable client references and a professional online presence. Technically, the site uses popular JavaScript libraries and frameworks such as jQuery and Bootstrap, and integrates tracking and live chat services to enhance customer engagement. Security posture is adequate with HTTPS and cookie consent implemented, though improvements are recommended in security headers and explicit privacy and terms documentation. The absence of WHOIS data reduces transparency and trustworthiness from a domain registration perspective, warranting further verification. Overall, the website is professional, user-friendly, and well-structured for its business purpose.

Ú

Úschova u advokáta

uschovauadvokata.cz

47

Úschova u advokáta is a Czech legal service specializing in secure escrow (advokátní úschova) for real estate transactions. The company offers an online platform allowing clients to monitor escrow status and manage documents securely. Their services include escrow of purchase prices, legal contract drafting and review, and cooperation with real estate agencies. The website positions the company as a cost-effective and efficient alternative to traditional bank or notary escrow services, emphasizing security and transparency backed by professional legal standards and insurance. Technically, the website employs a modern tech stack including jQuery, Bootstrap, WOW.js for animations, Dropzone.js for file uploads, and Google reCAPTCHA for form security. It uses HTTPS with a strict Content-Security-Policy header, ensuring a secure browsing experience. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Security posture is strong with HTTPS, CSP, and reCAPTCHA integration, but lacks published security policies or incident response information. Privacy compliance is partially met with a privacy policy present and GDPR adherence, but no cookie consent mechanism is implemented. WHOIS data is missing, which reduces domain trustworthiness, though the website content and contact details appear professional and legitimate. Overall, the site is well-constructed for its business purpose but would benefit from enhanced transparency in domain registration, cookie consent, and security documentation to improve trust and compliance.

P

PSN s.r.o.

psn.cz

58

PSN s.r.o. is a well-established real estate company operating primarily in the Czech Republic, focusing on the sale and rental of residential and commercial properties. With a domain age dating back to 1997 and multiple regional offices, PSN demonstrates a strong market presence and a comprehensive portfolio of exclusive properties. Their website reflects a professional and user-friendly design, targeting property buyers, renters, and investors with detailed project information and services including financing and legal support. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA, ensuring a secure and interactive user experience. Security measures include HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, PSN maintains a high level of trustworthiness and compliance, with GDPR adherence and transparent contact information.