Security Directory

M

Metropolitní kapitula u sv. Víta

katedrala.tv

47

Katedrála TV is an official streaming media platform operated by Metropolitní kapitula u sv. Víta, providing live and archived religious services primarily related to St. Vitus Cathedral in Prague. The website serves a general audience interested in religious content, offering scheduled programming and video archives. The business operates as a small non-profit entity within the media and government/non-profit sectors, with a clear focus on religious broadcasting. Technically, the website employs modern web technologies including Google Fonts, Google Analytics with consent, Cookiebot for cookie management, and Cloudflare for DNS and CDN services. The site is mobile optimized with good navigation and SEO practices, though it lacks a detected CMS and some advanced accessibility features. Performance is moderate, supported by CDN usage. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, it lacks DNSSEC, security headers, and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business identity, enhancing trustworthiness. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could improve security posture by enabling DNSSEC, adding security headers, and publishing security policies. Contact information is minimal on the site, which could be enhanced for better user support and trust.

L

LaValette

lavaletteclub.com

58

LaValette Club Malta operates as an airport lounge and VIP service provider at Malta International Airport, offering memberships, one-time passes, and VIP terminal services. The website presents a professional and user-friendly interface targeting travelers seeking luxury and comfort during their airport experience. The business model focuses on membership sales and premium services, positioning itself as a key hospitality player within the transportation sector in Malta. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure with good SEO and mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and incident response policies. The absence of WHOIS registration data is a notable concern, impacting domain legitimacy and trust. Overall, the website is functional, secure, and compliant with privacy regulations, but would benefit from enhanced transparency and security documentation.

I

International Federation of Red Cross and Red Crescent Societies

ifrc.org

76

The International Federation of Red Cross and Red Crescent Societies (IFRC) operates the world’s largest humanitarian network, supporting local Red Cross and Red Crescent Societies in over 191 countries with more than 16 million volunteers. The organization focuses on disaster response, health and care, community resilience, and advocacy. The website is professionally designed using Drupal 10, with modern web technologies and good mobile optimization. It features comprehensive content, clear navigation, and strong branding consistency. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. WHOIS data is unavailable due to malformed output, which limits domain registration trust analysis, but the website’s professional appearance and trusted external links support its legitimacy. Privacy compliance is good with clear policies and consent mechanisms. Overall, the site demonstrates a mature digital presence suitable for a large non-profit humanitarian organization.

The website 1000statecnych.cz represents a Czech non-profit initiative dedicated to funding and supporting optimizing clinical studies in pediatric oncology and hematology. The project aims to improve treatment outcomes for children with tumors and leukemias by raising donations and awareness. The site is professionally designed with clear navigation and good content quality, targeting donors and supporters interested in pediatric cancer research. Technically, the site is built on WordPress, uses common JavaScript libraries like jQuery and Slick Carousel, and is hosted by a Czech hosting provider. HTTPS is enabled, but security headers are missing, and there are no visible privacy or cookie policies, which are compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy and serves its non-profit mission effectively.

M

MEDIA MARKETING SERVICES a.s.

radioblanik.cz

56

Rádio BLANÍK is a well-established Czech media company specializing in radio broadcasting, podcasts, and cultural content. The website offers live streaming of multiple radio channels, a rich podcast library, and engaging articles targeting Czech-speaking audiences interested in music and culture. The business operates under MEDIA MARKETING SERVICES a.s., with a domain registered since 1999, indicating a mature market presence. The company leverages digital channels including social media and an e-commerce platform to enhance listener engagement and revenue streams. Technically, the website employs modern web technologies such as jQuery, Foundation framework, and slick carousel for UI components. It integrates Google Tag Manager and Facebook Pixel for analytics and marketing purposes. The site is mobile-optimized with responsive design and includes accessibility features, although some improvements could be made. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and includes CSRF tokens, demonstrating good baseline security practices. However, security headers are not explicitly detected, and no public security policy or incident response contacts are available. Cookie consent mechanisms are implemented in compliance with GDPR, reflecting a strong privacy posture. Overall, the website is professional, trustworthy, and compliant with relevant privacy regulations. It presents no signs of malicious activity or content blocking. Strategic recommendations include enhancing security headers, publishing a security policy, and continuous monitoring of third-party scripts to maintain security and compliance.

S

SEDIGAS. Asociación Española del Gas

sedigas.es

48

SEDIGAS is a well-established Spanish non-profit association representing the gas industry, founded in 1970. The organization focuses on promoting the gas sector, ecological transition, renewable gases, training, certification, and communication within Spain. The website reflects a professional and comprehensive digital presence with rich content, including sector data, press releases, and educational resources. The target audience includes industry professionals, companies, and the general public interested in energy and gas topics. Technically, the website uses a modern tech stack including Bootstrap, jQuery, FontAwesome, and Google reCAPTCHA, ensuring a responsive and user-friendly experience. The site is well-optimized for SEO and mobile devices, with good accessibility features. Performance is moderate, with multimedia content such as videos and sliders enhancing engagement. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks visible security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear cookie and privacy policies and consent mechanisms aligned with GDPR requirements. Overall, the website presents a low-risk profile with strong business credibility and digital maturity. The main limitation is the lack of publicly accessible WHOIS data due to registry restrictions, which slightly reduces domain trust analysis completeness. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further improve trust and security posture.

S

Střední průmyslová škola Třebíč

spst.cz

50

Střední průmyslová škola Třebíč is a well-established regional technical secondary school in the Czech Republic, offering a variety of vocational and technical education programs including energy, IT, mechanical engineering, and artistic metalworking. The school maintains strong industry partnerships and has received multiple certifications and awards, positioning it as a reputable educational institution in its region. The website is built on Drupal 10, leveraging modern web technologies and providing a good user experience with clear navigation and mobile optimization. However, the absence of explicit privacy and cookie policies and missing WHOIS data present compliance and trust challenges. Security posture is moderate with HTTPS implied but lacking visible security headers and incident response information. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

C

Contipro a.s.

geloren.cz

54

Geloren.cz is the official e-commerce website for Geloren, a brand of joint health supplements produced by Contipro a.s., a Czech biotechnology company established in 1990. The company specializes in the production of hyaluronic acid and related products for both human and veterinary use. The website offers a range of dietary supplements and veterinary products, targeting consumers seeking joint care solutions. The business model is direct-to-consumer e-commerce, leveraging the Shoptet platform for online sales and marketing. Contipro holds a strong market position as a leading Czech manufacturer and a significant global player in hyaluronic acid production. Technically, the website employs a modern e-commerce stack including jQuery, Google Tag Manager, Facebook SDK, and Slick Carousel, hosted on the Shoptet platform. The site is mobile-optimized, accessible, and SEO-friendly with proper metadata and structured data. Performance is moderate with room for improvement. Security posture is good with HTTPS enforced and CSRF protections on forms, though explicit security headers are missing. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The security posture is solid but could be enhanced by adding security headers and explicit incident response contacts. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness. However, the website content and business information align with a legitimate and established company. Overall, the site is professional, trustworthy, and compliant with relevant regulations, serving its target audience effectively.

S

Spain Tourism Official Website

spain.info

45

The website www.spain.info is the official tourism portal for Spain, operated under government auspices to provide comprehensive travel information, destination guides, and booking resources for tourists. It targets a global audience with multilingual support and extensive content on culture, nature, gastronomy, and practical travel tips. The site employs a modern technical infrastructure including Bootstrap, jQuery, Leaflet maps, and integrates Google Analytics and Facebook SDK for marketing and analytics purposes. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. WHOIS data is not publicly available, likely due to privacy protection, but the domain's legitimacy is supported by consistent branding and government association. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity.

S

Středisko společných činností AV ČR, v. v. i.

hotelyspribehem.cz

46

The website hotelyspribehem.cz represents a hospitality business operated under the auspices of the Academy of Sciences of the Czech Republic (Akademie věd ČR). It offers a portfolio of historical and stylistic hotels, conference and event spaces, gastronomic experiences, and wedding services. The business targets tourists, corporate clients, and event organizers seeking unique, historically rich accommodations combined with modern comfort. The domain is relatively new, registered in 2022, consistent with the business launch timeline. Technically, the website is built on the OpenCms platform, utilizing modern JavaScript libraries such as jQuery and Slick Carousel for UI components, and integrates analytics tools including Google Analytics and Plausible Analytics. The site is hosted on servers managed by Gransy, as indicated by the nameservers. The website demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML. However, it lacks important security headers like Content-Security-Policy and X-Frame-Options, and does not provide a cookie consent mechanism, which is a GDPR compliance gap. No explicit security or incident response policies are published. The WHOIS data is transparent and consistent with the business identity, supporting legitimacy. Overall, the website is professional, trustworthy, and well-positioned in its niche market. Strategic improvements in privacy compliance and security headers would enhance its security posture and regulatory adherence.

S

Správa železnic, státní organizace

zeleznicenaletiste.cz

57

Správa železnic, státní organizace, operates the official website zeleznicenaletiste.cz to provide information about the modernization and construction of railway infrastructure connecting Prague, Václav Havel Airport, and Kladno. The website serves as a communication platform for residents, commuters, and travelers, offering project updates, news, and detailed descriptions of the railway sections. The organization holds a strong market position as a government entity responsible for transportation infrastructure in the Czech Republic. Technically, the website is built on the Liferay CMS platform, utilizing modern JavaScript libraries such as jQuery, Slick Carousel, and Unite Gallery. It integrates analytics and marketing tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized with good navigation and accessibility features, although some improvements in accessibility could be made. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, explicit security headers and a public security policy or vulnerability disclosure program are absent. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the organization's profile. Overall, the website demonstrates a solid security posture and good privacy compliance, with room for enhancements in security policy transparency and accessibility. The site is trustworthy, professionally maintained, and serves its public sector mission effectively.

Fantova budova is a culturally significant Secessionist building in Prague, managed by Správa železnic, the Czech state railway organization. The website serves as an informational and promotional platform for the ongoing restoration project and event space rental. The site is well-structured, professionally designed, and provides relevant content primarily in Czech with English alternatives. Technically, it is built on the Liferay CMS platform and uses modern JavaScript libraries and tracking tools. Security posture is good with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and published security policies. Overall, the site is trustworthy and serves its purpose effectively.

S

Správa železnic, státní organizace

vrtky.cz

59

The website vrtky.cz serves as an official public information portal for the Czech Republic's high-speed rail infrastructure project, managed by Správa železnic, a state organization. It provides comprehensive information about the development, planning, and updates of high-speed rail lines (VRT) aimed at improving transportation efficiency and regional mobility. The site targets Czech residents, transport professionals, and government stakeholders, offering news, maps, and project details. Technically, the site is built on the Liferay CMS platform and employs modern web technologies including jQuery, Slick Carousel, and Google Tag Manager. It integrates analytics and marketing tools such as Google Analytics and Facebook Pixel, and implements cookie consent mechanisms in compliance with GDPR. The site is mobile-optimized and features a professional design with clear navigation. From a security perspective, the website uses HTTPS with good SSL configuration and basic security best practices. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and there is no published security policy or incident response contact information. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, vrtky.cz is a trustworthy and professionally maintained government-related website with a strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further improve security posture and transparency.

M

Město Aš

info-as.cz

52

The website www.info-as.cz serves as an official tourism and local information portal for the city of Aš in the Czech Republic. It provides comprehensive details about local activities, events, cultural sites, accommodation, and gastronomy, targeting tourists, families, and local visitors. The site is well-structured with clear navigation and offers multilingual support. It integrates modern JavaScript libraries and tracking tools such as Google Analytics and Tag Manager, with a cookie consent mechanism ensuring GDPR compliance. However, the absence of WHOIS data limits transparency regarding domain ownership, which slightly impacts trustworthiness. Technically, the website employs a modern tech stack including jQuery, Swiper.js, and LightGallery, delivering a moderate performance with good mobile optimization. Security posture is adequate with HTTPS enforced and consent management in place, but lacks explicit security headers and dedicated security or incident response policies. Contact information is available via a GDPR-compliant form, though no direct company emails or phone numbers are explicitly listed. Social media presence on Instagram and Facebook enhances engagement and trust. Overall, the site is professional, content-rich, and user-friendly, suitable for its purpose as a local tourism hub. The main risk lies in the lack of domain registration transparency and missing formal security policies. Strategic improvements in security headers, terms of service, and WHOIS transparency would enhance credibility and security posture.

S

Strom - shop

stromshop.cz

71

Stromshop.cz is an established e-commerce platform specializing in the sale of John Deere branded products in the Czech Republic. Founded in 2013, it serves as the official John Deere online shop offering a wide range of products including garden machinery, clothing, toys, and accessories. The website demonstrates a consistent brand presence and targets consumers interested in John Deere merchandise. Technically, the site uses ASP.NET WebForms with Kentico CMS, integrates Google Tag Manager and reCAPTCHA for tracking and security, and shows moderate performance with good mobile optimization. Security practices include HTTPS and CSRF protection, though some security headers are not explicitly confirmed. Privacy and cookie policies are present, indicating basic GDPR compliance, but no explicit security policy or incident response information is found. Overall, the site is professional, trustworthy, and safe for general audiences.

B

Birdline

birdline.sk

50

Birdline is a Slovak digital marketing agency specializing in comprehensive marketing services including strategic marketing, branding, social media, SEO, web development, e-commerce solutions, innovation, digitalization, and education. The company targets entrepreneurs and businesses seeking to improve their digital presence and marketing effectiveness. The website is professionally designed using Drupal 7 CMS with modern JavaScript libraries and frameworks, providing a good user experience and mobile optimization. Social media integration is strong, supporting brand visibility and engagement. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks advanced security headers and explicit privacy and terms policies. WHOIS data confirms the legitimacy and consistency of the domain registration with the business profile. Overall, the website is trustworthy and well-positioned in its market niche.

K

KOSMAS.cz

kosmas.cz

62

KOSMAS.cz is a well-established Czech online bookstore offering a wide range of products including physical books, e-books, audiobooks, music, and games. The company operates 35 physical stores and maintains a strong online presence with a user-friendly website. Their market position is solid within the Czech retail book sector, supported by customer reviews and recognized certifications such as 'Zelená firma' and 'Ověřeno Heurekou'. The website targets Czech-speaking book buyers and readers, providing comprehensive product information and a smooth shopping experience. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Tag Manager, Google Analytics, Bing Ads, and Typekit fonts. The site is mobile-optimized and demonstrates good SEO practices. However, some security headers are missing, and no explicit security policy or incident response pages are published, which could be improved to enhance security posture. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, indicating compliance with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces transparency but does not significantly impact the overall trustworthiness given the website's professional presentation and contact information. Overall, KOSMAS.cz presents a trustworthy and professional e-commerce platform with good content quality and business credibility. Strategic improvements in security headers and transparency policies would further strengthen their security posture and compliance.

C

Cech kachliarov

cechkachliarov.sk

61

Cech kachliarov is a Slovak professional association dedicated to supporting and representing stove and fireplace professionals. The organization provides consumer guidance, educational resources, and a platform to find qualified professionals, ensuring quality and safety in the industry. Their website reflects a well-structured, professional presence with clear branding and relevant content targeted at Slovak residents seeking expert services in this niche. Technically, the site is built on Contao CMS and uses modern web technologies including Google Analytics, Facebook Pixel, and Google Tag Manager for analytics and marketing. The site is mobile optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though it lacks explicit security headers and a cookie consent mechanism, which are areas for improvement. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website is trustworthy, professional, and functional, serving its target audience effectively.

F

ForPasiv

forpasiv.cz

50

ForPasiv.cz is a professionally maintained website representing the 13th edition of a trade fair focused on low-energy, passive, and zero-energy buildings held in Prague. The event is well-established since 2012 and targets visitors, exhibitors, and media professionals interested in energy-efficient construction technologies and materials. The website provides comprehensive information about the event, including exhibitor registration, visitor tickets, media accreditation, and partner details. Technically, the site is built on WordPress with modern plugins and libraries, ensuring good SEO, mobile responsiveness, and user experience. Security posture is solid with HTTPS, cookie consent management, and no visible vulnerabilities, though some security headers could be improved. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the site is trustworthy, well-branded, and serves its audience effectively.

K

Komerční banka, a. s.

nastartujtese.cz

62

Nastartujtese.cz is a Czech entrepreneurship support platform sponsored by Komerční banka, offering a competition and marketplace for starting entrepreneurs. The website provides information about the competition, prizes, partners, and business advice, targeting new business founders in the Czech Republic. The platform is positioned as a reputable grant and support program with a medium-sized presence and a focus on finance and non-profit sectors. Technically, the website uses modern web technologies including React and Google Tag Manager, with good mobile optimization and performance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response details are missing. The absence of WHOIS data is a concern for domain legitimacy verification but the website's branding and partner ecosystem support its credibility. Overall, the site is professional, trustworthy, and compliant with GDPR, serving its target audience effectively.

Z

Zemědělský svaz ČR

zscr.cz

36

Zemědělský svaz ČR is a Czech agricultural association representing agricultural companies, cooperatives, farmers, and related entrepreneurs. The organization provides a range of services including legal advice, information services, training seminars, and employment assistance. It holds a significant position within the Czech agricultural sector and maintains partnerships with notable companies and financial institutions. The website is professionally designed, mobile-optimized, and provides comprehensive content relevant to its target audience. Technically, it uses modern web technologies such as jQuery, Bootstrap, and Google Tag Manager, and is powered by the SUITU CMS platform. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit incident response or vulnerability disclosure policies are found. The absence of WHOIS data is a concern for domain legitimacy verification, but the website content and partner ecosystem support its credibility. Overall, the site is a reliable resource for agricultural stakeholders in the Czech Republic.

V

VINO CIBULKA | Rodinné BIO vinařství

vinocibulka.cz

54

VINO CIBULKA is a family-owned BIO winery based in the Czech Republic, operating an e-commerce platform offering organic and low-histamine wines and sparkling wines. The business emphasizes sustainable production and local heritage, managing 16 hectares of vineyards. Their market position is regional with a focus on quality and environmentally conscious products. The website supports online sales, local sales points, and event hosting, targeting mature consumers interested in organic wines. Technically, the site uses the Shoptet e-commerce platform with modern JavaScript libraries and integrates Google Analytics and Facebook SDK for marketing and analytics. Security posture is good with HTTPS and CSRF protections, though some security headers are missing. Privacy compliance is well addressed with cookie consent and privacy policies. WHOIS data is unavailable, limiting domain trust assessment, but the website content and business presence appear legitimate and professional. Overall, the site is well designed, user-friendly, and compliant with GDPR, with moderate user tracking and good marketing transparency.

C

Centrum pasivního domu

pasivnidomy.cz

46

Centrum pasivního domu is a Czech non-profit organization dedicated to promoting passive houses and sustainable building practices. The website serves as a comprehensive resource offering catalogs, educational events, consulting services, and membership opportunities targeting both laypersons and professionals in the energy-efficient building sector. The organization holds a leading position in the Czech Republic's passive house community, providing trusted information and fostering collaboration among industry stakeholders. Technically, the website employs modern web technologies including the Nette framework, jQuery, Bootstrap, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing, all managed with user consent mechanisms. Security posture is solid with HTTPS enforcement and email obfuscation, though explicit security policies and incident response details are absent. The missing WHOIS data is a notable concern but does not detract significantly from the site's legitimacy given its professional presentation and comprehensive privacy compliance. Overall, the site is well-structured, user-friendly, and trustworthy, serving its mission effectively.

F

FlexiSystems s.r.o.

flexiportal.cz

42

FlexiSystems s.r.o. is a Czech-based technology company specializing in modern web solutions with a focus on e-learning platforms. Their product FlexiPortal offers a comprehensive system for selling and managing online and in-person training courses, integrating e-learning management, e-commerce, content editing, and payment processing. The company targets business clients seeking tailored educational solutions and has a professional web presence with a portfolio of clients showcased. Technically, the website uses common JavaScript libraries such as jQuery, Slick Carousel, and Font Awesome, and employs Google Tag Manager for analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and well-structured, though accessibility features are basic. Security posture is adequate with HTTPS usage implied, but lacks visible security headers and formal security policies. WHOIS data is unavailable, which slightly reduces domain trust but the website content and contact information appear legitimate. Overall, the site is professional and functional with room for improvement in privacy compliance and security transparency.

B

Baobab

baobab-books.net

50

Baobab Books is a Czech-based publisher specializing in illustrated children's books, offering a curated catalog of books, authors, and literary events. The website targets children, educators, and book enthusiasts within the Czech Republic, operating primarily as an e-commerce platform for book sales and event promotion. The business appears to be a small-sized entity focused on niche publishing and retail within the Czech market. Technically, the website is built on Drupal 8 CMS, leveraging modern frontend libraries such as Slick Carousel and Google Analytics for user insights, with a moderate performance profile and good mobile optimization. Security posture is generally good with HTTPS enforced and privacy-conscious analytics settings; however, the absence of security headers and cookie consent mechanisms are areas for improvement. The lack of WHOIS data for the domain is a notable anomaly that reduces trustworthiness, though the professional presentation and comprehensive privacy and terms policies support legitimacy. Overall, the website is safe, well-structured, and suitable for its target audience, but the domain registration inconsistency warrants further verification.

E

Educatius

educatius.se

74

Educatius Sweden AB operates a professional and well-established website focused on providing high school exchange programs for Swedish gymnasiet students. The company offers a variety of international exchange destinations and programs, supported by a network of related country-specific Educatius domains. The website is built on WordPress with modern technologies such as Bootstrap and jQuery, and integrates marketing and analytics tools including Google Tag Manager and Trustpilot widgets. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. WHOIS data for the exact subdomain queried is missing, which slightly reduces trust but does not negate the overall legitimacy given the professional presentation and broad international presence. Overall, the site demonstrates a mature digital infrastructure suitable for its educational business model.

N

Nobu Restaurants

noburestaurants.com

69

Nobu Restaurants is a globally recognized luxury hospitality brand specializing in Japanese-Peruvian fusion cuisine with an extensive network of restaurants and hotels worldwide. The website reflects a premium brand image with rich multimedia content, clear navigation, and strong social media integration. Technically, the site is built on Silverstripe CMS 5.0 with modern front-end frameworks and tracking tools such as Google Tag Manager and Microsoft Clarity, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and domain registration consistent with the brand's history, though improvements can be made by implementing DNSSEC and security headers. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. Overall, the site is professional, trustworthy, and well-positioned in the hospitality market.

F

Feefo Holdings Ltd

feefo.com

73

Feefo Holdings Ltd operates a SaaS-based customer review platform that enables businesses to collect, manage, display, and analyze authentic customer feedback. The company targets a broad range of sectors including retail, B2B, finance, automotive, and education, serving over 6,500 brands. The website demonstrates a mature digital presence with modern technologies such as HubSpot CMS, Google Tag Manager, and Facebook Pixel integrated for marketing and analytics. Security posture is strong with HTTPS, security headers, and secure form handling, although no explicit public security policy or incident response contacts were found. Privacy and cookie policies are present with consent mechanisms, indicating GDPR compliance. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

Lasty webdesign is a Czech Republic-based small business specializing in custom web design, e-commerce solutions, and web applications with over 24 years of experience. The company offers a comprehensive range of internet services including SEO optimization, hosting, and internet marketing, targeting businesses seeking tailored digital solutions. The website is professionally designed with modern technologies such as Bootstrap, GSAP, and jQuery, providing a good user experience and mobile optimization. Security measures include the use of Google reCAPTCHA on forms, but lack visible security headers and cookie consent mechanisms. WHOIS data is unavailable, likely due to privacy protection, which limits transparency but is common for businesses of this type. Overall, the website presents a trustworthy and professional digital presence with room for improvement in security and privacy compliance.

M

MediMedi

medimedi.cz

52

MediMedi is a Czech-based e-commerce company specializing in the sale of medical diagnostic equipment, laboratory supplies, protective healthcare products, and supplements. The company targets healthcare professionals, clinics, senior homes, and general households, positioning itself as a niche supplier in the healthcare sector within the Czech Republic. Their website is built on the Shoptet e-commerce platform, featuring a professional design with clear navigation and product categorization. The site supports multiple currencies and includes a cookie consent mechanism, reflecting a moderate level of digital maturity. From a security perspective, the website enforces HTTPS and uses CSRF tokens in forms, which are positive indicators. However, the use of an outdated jQuery version and the absence of some security headers such as Content-Security-Policy and X-Frame-Options present potential vulnerabilities. The lack of a visible privacy policy page and incident response contacts suggests room for improvement in compliance and transparency. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website demonstrates a good balance of business functionality and technical implementation but would benefit from updates to its security posture and privacy compliance to enhance trustworthiness and reduce risk.

V

VIENNA-COMPONENTS-TRADING, s.r.o.

vicomtrade.cz

38

VIENNA-COMPONENTS-TRADING, s.r.o. is a Czech-based distributor specializing in electronic and electromechanical components for industrial automation, energy, telecommunications, medical, and transportation sectors. The company operates a professional WordPress-based website offering product catalogs, support, and contact information, targeting B2B customers in specialized industries. The website is well-structured, multilingual (Czech and English), and integrates an e-shop partner link for sales. Technically, the site uses modern web technologies including WordPress 6.8.3, jQuery, and Google Analytics, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks advanced security headers and public security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data is consistent with the business claims, indicating legitimacy and trustworthiness.

E

ERA a.s.

era.cz

58

ERA a.s. is a globally recognized leader in next-generation surveillance and flight tracking solutions, specializing in multilateration and ADS-B technologies. The company serves a specialized market including air traffic management authorities, military and security agencies, and aviation industry stakeholders. With over 160 installations across 70 countries and 5 continents, ERA holds a strong market position supported by decades of tradition and experience. Their business model focuses on providing mission-critical surveillance systems and related services in a B2B context. Technically, the website demonstrates a mature digital infrastructure using modern web technologies such as HTML5, CSS3, JavaScript, and third-party libraries like Google Tag Manager and Picturefill for responsive images. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. However, there is room for improvement in security headers and accessibility compliance. From a security perspective, ERA's website enforces HTTPS and uses secure form submission methods, with no visible vulnerabilities or exposed sensitive data. The presence of ISO 27001 certification and partnerships with reputable companies like Airbus enhance trust. However, the absence of explicit security headers and incident response information suggests areas for enhancement. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, ERA's website reflects a professional, trustworthy, and well-maintained digital presence consistent with its industry standing. The lack of public WHOIS data due to privacy protection is justified given the company's international operations. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving accessibility to further strengthen the security posture and user trust.

E

Educatius

educatius.fi

77

Educatius is an established international educational exchange organization based in Finland, specializing in high school exchange programs for students. The website offers detailed program information for multiple countries and various exchange options, targeting students and families interested in study abroad experiences. The company maintains a consistent brand presence and partners with country-specific domains to support its global reach. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates advanced SEO and analytics tools such as Yoast SEO Premium, Google Tag Manager, and Facebook Pixel. Security posture is strong with HTTPS enforcement and appropriate security headers, complemented by a GDPR-compliant cookie consent mechanism. However, the absence of explicit privacy policy, terms of service, and direct contact information represents compliance and transparency gaps. Overall, the site is professional, secure, and user-friendly but would benefit from enhanced privacy and contact disclosures.

I

Institute of Agricultural Economics and Information

iaei.cz

47

The Institute of Agricultural Economics and Information (IAEI) is a Czech research institution specializing in applied research on agricultural economics, markets, environmental impact, and rural development. It functions as an expert center providing consultancy, education, certification, and knowledge transfer services to agricultural professionals, policymakers, and educators. The website reflects a well-established organization with a domain registered since 2009 and a clear focus on agriculture and related sectors. Technically, the website is built on Drupal 10 with modern libraries such as Bootstrap and jQuery, supporting responsive design and moderate performance. The infrastructure appears stable and professionally maintained, hosted likely by Active24, a known Czech hosting provider. The site integrates Google Analytics via Google Tag Manager for user tracking but lacks visible privacy and cookie policies, which is a compliance gap. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks security headers and formal security or incident response policies. No forms are present on the homepage, reducing immediate data collection risks. The overall security posture is moderate but could be improved by adding security headers and formal policies. Overall, the website is professional, trustworthy, and serves its target audience well. Strategic improvements in privacy compliance and security best practices would enhance its risk profile and user trust.

C

CRIF - Czech Credit Bureau, a.s.

informaceofirmach.cz

10

The website www.informaceofirmach.cz is a professional business information portal operated by CRIF - Czech Credit Bureau, a.s., providing comprehensive credit and financial health data on companies primarily in the Czech Republic and Slovakia. It serves a large user base including over 7000 active users and 1150 corporate clients, offering both free and premium services such as the Semafor Cribis rating and detailed company reports. The site is well-structured, mobile-optimized, and integrates modern analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, reCAPTCHA, and privacy compliance mechanisms, though some security headers could be improved. The absence of WHOIS data due to privacy protection slightly impacts trust but is justified given the business nature. Overall, the site is a credible and valuable resource for business risk assessment and partner verification.

S

Sdružení automobilového průmyslu

autosap.cz

58

Sdružení automobilového průmyslu (AutoSAP) is a well-established Czech automotive industry association founded in 1997. The organization provides comprehensive data, statistics, publications, news, and event information relevant to the automotive sector. The website serves industry stakeholders, members, media, and the general public interested in automotive industry developments. AutoSAP maintains a strong market position as a leading industry association in the Czech Republic, offering valuable insights and member services. The digital presence is supported by a modern WordPress-based infrastructure with integrated SEO and analytics tools, ensuring good performance and user experience. Security measures include HTTPS, reCAPTCHA, and GDPR-compliant cookie consent management, although some security headers could be improved. Overall, the website reflects a professional and trustworthy organization with a clear focus on automotive manufacturing and transportation sectors.

SIDAT, spol. s r. o. is a Czech company specializing in automation and process control, industrial information systems, and system integration. Established in 1990, it has grown into a medium-sized enterprise with over 100 employees and a strong market presence in the Czech Republic and abroad. The company offers a comprehensive portfolio of services including complex automation, production informatics, digital production integration, hardware supply, 24/7 service, and professional training courses. Their client base includes major industrial players, reflecting a solid market position. Technically, the website is built on a custom CMS platform with modern JavaScript libraries such as jQuery and Bootstrap, enhanced by Google Fonts and Google Analytics for tracking. The site is mobile-optimized and features cookie consent management via CookieHub, indicating a good level of digital maturity and privacy compliance. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible HTTP security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, though the website content and business information appear legitimate and professional. Overall, SIDAT presents a trustworthy and professional online presence with room for improvement in security transparency and domain registration clarity. Strategic enhancements in security headers, incident response publication, and WHOIS data transparency would strengthen their security posture and trust signals.

P

PromoTron Solutions a.s.

reda.cz

53

REDA.cz is a Czech Republic-based e-commerce platform specializing in promotional products and corporate gifts with custom printing services. The company, operated by PromoTron Solutions a.s., has an established market presence since 1997, offering a wide range of product categories and fast production times. The website is professionally designed with clear navigation and mobile optimization, targeting business clients seeking promotional items. Technically, the site uses modern JavaScript libraries including jQuery, Bootstrap, and Stripe for payment processing, hosted likely with Active24. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and vulnerability disclosures are missing. Overall, the site is trustworthy and compliant with GDPR, with clear contact information and a consistent brand presence.

M

MVM Émász Áramhálózati Kft

emaszhalozat.hu

53

MVM Émász Áramhálózati Kft is a Hungarian energy sector company specializing in electricity distribution and related technical services. The website serves residential and business customers with comprehensive information on service offerings, technical support, legal disclosures, and news updates. It is positioned as a key regional utility within the MVM Group, founded in 2020, and operates with a large organizational footprint. The site targets Hungarian consumers and business partners, providing online service portals and detailed regulatory content. Technically, the website employs a modern yet somewhat legacy technology stack including AngularJS, jQuery, and Bootstrap, with good mobile optimization and accessibility features. The site uses HTTPS with strong SSL configuration and integrates Google Analytics and Tag Manager for analytics and marketing purposes. Cookie consent mechanisms and GDPR-compliant privacy policies are implemented effectively. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, security headers are not explicitly detected, and no public vulnerability disclosure or incident response contacts are provided. The domain WHOIS data aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant, serving its business and customer needs effectively. Strategic improvements could include modernizing the frontend framework, enhancing security headers, and publishing explicit vulnerability disclosure policies to further strengthen security posture and trust.

Fachhochschule Dresden (FHD) is a private, state-recognized university located in Dresden, Germany, offering a range of bachelor and master degree programs, continuing education, and research initiatives. The institution emphasizes practical, small-group learning and supports students without traditional entry qualifications such as the Abitur. The website reflects a professional and modern educational institution with a strong focus on student success and innovation, including start-up support and international partnerships. Technically, the website employs modern JavaScript libraries such as jQuery, Splide.js, and Slick Carousel, alongside Google Tag Manager and Facebook Pixel for analytics and marketing. The site uses a cookie consent management system (PrivacyWire) to comply with GDPR requirements. The CMS appears to be Kirby, inferred from the site structure. The site is mobile-optimized and accessible with good SEO practices. Security-wise, the site enforces HTTPS and implements cookie consent but lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or suspicious domains were detected. WHOIS data is privacy protected by EURid, which is typical for EU domains and justified for this type of institution. Overall, the site is trustworthy, professional, and compliant with privacy regulations, serving its educational audience effectively.

S

San Diego State University

sdsu.edu

65

San Diego State University (SDSU) is a large, well-established public research university founded in 1897, serving a diverse student body with over 202 degree programs and extensive student organizations. The website reflects a mature digital presence with consistent branding, comprehensive academic and campus life information, and active engagement through multiple official social media channels. Technically, the site employs modern JavaScript libraries, analytics tools, and a CMS platform (OmniUpdate), delivering a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are not publicly documented. Privacy compliance is partial, with a comprehensive digital privacy statement but lacking a cookie consent mechanism. WHOIS data for the domain is unavailable, likely due to querying the subdomain 'www.sdsu.edu' or .edu WHOIS restrictions, but the website content and external references strongly support legitimacy. Overall, SDSU's website is professional, trustworthy, and well-maintained, serving its educational mission effectively.

N

NETOPIA Payments

netopia-payments.com

73

NETOPIA Payments is a Romanian-based online payment processor with over 20 years of experience, serving more than 25,000 businesses. The company provides secure and reliable online payment solutions, supporting multiple payment methods. Their website reflects a professional and consistent brand presence, targeting business customers primarily in Romania. Technically, the site is built on WordPress and leverages modern frontend libraries such as jQuery, FontAwesome, and Google Tag Manager, with hosting DNS managed by Google Cloud services. The site is mobile-optimized and SEO-friendly, with good performance and accessibility standards. Security-wise, the website enforces HTTPS and uses Cookiebot for GDPR-compliant cookie consent management, but lacks explicit security headers and published security policies. WHOIS data indicates a legitimate domain registration with no privacy protection, consistent with the business claims. Overall, the site demonstrates a solid digital presence with room for improvement in security policy transparency and contact information availability.

F

Funnelytics Inc.

funnelytics.io

63

Funnelytics Inc. operates a SaaS platform focused on visual funnel analytics and customer journey mapping to help digital marketers optimize their marketing funnels and increase revenue. The company offers both a self-serve platform and done-for-you services, targeting marketers and digital businesses. The website is professionally designed, mobile-optimized, and rich in content including testimonials, case studies, and multimedia. The technical infrastructure leverages modern web technologies including Webflow CMS, Google Tag Manager, Facebook Pixel, and other marketing and analytics tools, indicating a mature digital presence. Security posture is good with HTTPS enforced and no exposed sensitive data, though explicit security headers and cookie consent mechanisms could be improved. WHOIS data is unavailable due to privacy protection or query failure, but the website's branding and trust signals support legitimacy. Overall, the site demonstrates a strong business and technical foundation with room for enhanced privacy compliance and security transparency.

N

NN Životní pojišťovna a NN Penzijní společnost

nn.cz

66

NN Životní pojišťovna a NN Penzijní společnost is a well-established financial services company operating in the Czech Republic, offering life insurance, pension savings, and investment products as part of the NN Group. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with a large financial institution. The technical infrastructure leverages modern JavaScript libraries and tracking tools, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. Overall, the site demonstrates a high level of professionalism and trustworthiness, though the lack of WHOIS data limits domain registration transparency.

Ú

Ústav zemědělské ekonomiky a informací

uzei.cz

61

Ústav zemědělské ekonomiky a informací (ÚZEI) is a Czech government-affiliated research institute specializing in applied research in agricultural economics, agrarian markets, and the relationship of agriculture to the environment and rural development. The organization serves as an expert center providing research, advisory services, education, and information dissemination in agriculture and food sectors. Their market position is that of a trusted government research entity with a broad portfolio of services including scientific projects, certification, and public services. The website reflects a mature digital presence built on Drupal 10 with modern web technologies and moderate performance. It is well-structured, mobile-optimized, and accessible, supporting a professional user experience.

M

MVM Émász Áramhálózati Kft

mvmemaszhalozat.hu

11

MVM Émász Áramhálózati Kft is a major Hungarian electricity distribution company operating under the MVM Group umbrella. The company provides a wide range of electricity network services, including technical customer support, meter reading, smart metering, and online demand management. Their website targets residential and business electricity consumers in Hungary, offering comprehensive information and online services to facilitate customer interactions. The company maintains a strong market position as a key regional utility provider with a large customer base. Technically, the website employs modern web technologies such as AngularJS, jQuery, Bootstrap, and Slick Carousel, ensuring a responsive and accessible user experience. The site is well-structured with clear navigation and good mobile optimization. Privacy and cookie consent mechanisms are implemented in compliance with GDPR, and the company provides detailed legal and privacy documentation. From a security perspective, the website enforces HTTPS and uses cookie consent banners, with no visible vulnerabilities or exposed sensitive data. However, security headers could be improved, and a security.txt file for vulnerability disclosure is absent. The WHOIS data confirms the legitimacy of the domain and company registration, aligning with the website's business claims. Overall, the website demonstrates a mature digital presence with good security and privacy practices, supporting the company's credibility and customer trust. Minor improvements in security headers and incident response transparency could further enhance their security posture.

A

Atrakcje, turystyka w Czechach | tlumaczenia-czeskie.pl

tlumaczenia-czeskie.pl

51

The website tlumaczenia-czeskie.pl is a Polish language content portal dedicated to tourism, attractions, and cultural information about the Czech Republic. It targets Polish-speaking tourists and individuals interested in Czech travel. The site operates on WordPress CMS with Yoast SEO plugin, leveraging common web technologies such as jQuery and Slick Carousel for UI components. The content is well structured with good SEO metadata and structured data, indicating a moderate level of digital maturity. However, the site lacks privacy and cookie policies, security headers, and direct contact information such as emails or phone numbers, which limits its privacy compliance and security posture. HTTPS is enabled, ensuring encrypted communication. Overall, the site is a small-scale, niche informational portal with a consistent brand presence and moderate trustworthiness.

N

NEWTON Media, a.s.

anopress.cz

58

NEWTON Media, a.s. operates the Anopress service, a sophisticated media monitoring platform focused on Czech media channels including print, TV, radio, internet, and social media. The company offers a cloud-based, real-time monitoring solution with a comprehensive historical archive dating back to 1996. Their client base spans businesses, PR agencies, government bodies, municipalities, and educational institutions, positioning them as a leading media intelligence provider in the Czech Republic. The website reflects a professional and consistent brand image with clear contact information and client references. Technically, the website employs modern JavaScript libraries such as jQuery, anime.js, and slick carousel, alongside Google Analytics and Intercom for analytics and customer engagement. The site is mobile responsive and well-structured, though some accessibility and SEO optimizations could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and cookie consent mechanisms required for full GDPR compliance. Overall, the security posture is good with no critical vulnerabilities detected. The absence of a cookie consent banner and security headers are notable gaps. WHOIS data confirms the legitimacy and consistency of the business registration, reinforcing trustworthiness. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing security policies, and improving accessibility and SEO to strengthen compliance and user trust.

K

Kreativní Praha, z.ú.

kreativnipraha.eu

58

Kreativní Praha, z. ú. is a non-profit organization dedicated to fostering cultural development and supporting the creative sector in Prague. The website serves as a platform to showcase their projects, events, and initiatives aimed at enhancing the cultural landscape of the city. Their key services include data analysis for cultural development, mapping creative industries, activating public spaces with cultural activities, and organizing conferences and networking events. The organization targets cultural professionals, community members, and stakeholders within Prague's creative ecosystem. Technically, the website is built on the Webflow CMS platform, utilizing modern JavaScript libraries such as jQuery and Slick Carousel for interactive elements. Google Analytics is implemented for user tracking, complemented by a cookie consent banner that respects user privacy preferences. The site is mobile-optimized and demonstrates good SEO practices, although some security headers are missing which could enhance the security posture. From a security perspective, the site enforces HTTPS and includes anti-spam measures in its newsletter form. However, the absence of explicit security headers and lack of visible incident response or vulnerability disclosure policies suggest areas for improvement. The WHOIS data is privacy protected by EURid, which is typical for .eu domains and does not raise immediate concerns. Overall, the site presents a professional and trustworthy front consistent with a legitimate cultural non-profit. The overall risk assessment is low, with recommendations focusing on enhancing security headers, formalizing security policies, and maintaining compliance with privacy regulations. These steps will strengthen the organization's digital trustworthiness and resilience against potential threats.