Security Directory

Společenství obcí Broumovsko is a regional non-profit association of municipalities in the Czech Republic focused on enhancing administrative capacities, organizing community events, and supporting local services such as volunteer fire brigades and social care. The website serves as an information hub for residents and local officials, providing news, event calendars, and official notices. The organization appears well-integrated within the local government ecosystem, with clear contact points and project acknowledgments. Technically, the website employs a custom or proprietary CMS with common JavaScript libraries such as jQuery and Google Analytics for tracking. The site is served over HTTPS with a cookie consent mechanism, indicating basic compliance with privacy regulations. However, the absence of a privacy policy and terms of service pages suggests room for improvement in privacy compliance. The website design and navigation are user-friendly and accessible, though mobile optimization is basic. From a security perspective, the site benefits from HTTPS but lacks explicit security headers and a vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is missing, which raises concerns about domain registration transparency but does not necessarily indicate malicious intent. Overall, the security posture is moderate with recommendations for enhanced header implementation and privacy documentation. The overall risk assessment is moderate with a trustable business presence but some gaps in compliance and domain transparency. Strategic improvements in privacy policy publication, security headers, and WHOIS data clarity would enhance trust and security posture significantly.

O

Opera PLUS

operaplus.cz

53

Opera PLUS is a Czech media portal established in 2009, specializing in classical music, opera, and dance. It provides news, reviews, interviews, and multimedia content targeting enthusiasts and professionals in the performing arts sector. The website maintains a consistent brand presence with active social media channels and a newsletter service, positioning itself as a reputable source in its niche market. Technically, the site is built on WordPress with modern plugins for SEO, advertising, and structured data, hosted via REG-WEDOS with Cloudflare DNS services. The site is mobile-optimized and performs moderately well, with room for accessibility improvements. Security practices include HTTPS enforcement and use of reCAPTCHA, though additional HTTP security headers could enhance protection. Privacy and cookie policies are present and GDPR compliant, but no explicit security or incident response policies are published. Overall, the site is professional, trustworthy, and content-rich, with minor technical and security enhancements recommended.

L

Litostroj Power

litostrojpower.com

51

Litostroj Power is a European industrial company specializing in hydro turbines, pumps, valves, and automation solutions primarily serving the energy sector. The company emphasizes its long history dating back to 1848 and its membership in the Wikov Group, positioning itself as a reliable and flexible partner for hydro power projects worldwide. The website reflects a professional corporate presence with clear navigation and relevant content focused on their manufacturing and service offerings. Technically, the site is built on ASP.NET Web Forms with jQuery and uses Google Analytics for traffic monitoring. The site is mobile optimized and uses HTTPS, but some technologies like jQuery are outdated, and security headers are missing. The cookie consent mechanism is implemented, but no explicit privacy policy page was found in the provided content. WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy despite the active website. Overall, the site demonstrates moderate digital maturity with room for security and compliance improvements.

S

Svět bot

svetbot.cz

59

SvětBot.cz is a Czech Republic-based e-commerce platform specializing in footwear retail, positioning itself as the largest shoe e-shop in the country. The website offers a broad catalog of footwear products with promotional sliders and customer reviews, indicating a mature online retail business. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and a proprietary CMS (ineShop), delivering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit privacy policies, security headers, and incident response contacts, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the website's content and customer feedback suggest a legitimate operation. Overall, the site scores well on business credibility and user experience but should enhance privacy compliance and security best practices.

The website mt-nabytek.cz currently serves as a placeholder indicating that the domain is registered, with no substantive content or business information presented. The domain has been registered since 2009, suggesting a stable registration history, but the lack of content limits the ability to assess the business or its market position. The site uses Google Analytics and Google Tag Manager for tracking, indicating some level of digital infrastructure, but no privacy or cookie policies are present to inform users about data collection or compliance with GDPR. From a technical perspective, the site includes basic tracking scripts but lacks visible security headers or HTTPS status information, which raises concerns about security posture. The minimal content and absence of contact or business details reduce trustworthiness and business credibility. No forms, social media links, or contact information were found, limiting user engagement and transparency. Security-wise, the absence of HTTPS and security headers, combined with no visible privacy or cookie policies, indicates a low security maturity level. There are no indications of incident response policies or vulnerability disclosures. The WHOIS data is consistent and legitimate, with no privacy protection or suspicious patterns detected. Overall, the website is in an early or inactive state, with critical gaps in content, security, and compliance. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, providing clear contact information, and enhancing website content to improve trust and user experience.

M

MobileSoftJungle Ltd.

freecurrencyrates.com

57

FreeCurrencyRates.com is an established online currency conversion service operated by MobileSoftJungle Ltd., founded in 2010. The website offers a comprehensive currency converter supporting 364 world currencies with hourly updated exchange rates and historical data. It targets a general audience including individuals and businesses needing currency conversion tools. The service is complemented by mobile apps and widgets, enhancing accessibility and user engagement. The website is multilingual, supporting many languages to cater to a global user base. Technically, the website uses a modern tech stack including JavaScript, jQuery, and Materialize CSS for UI components. It integrates analytics and advertising services such as Google Analytics and Yandex Metrika, and uses Yandex RTB for ad placements. Hosting and DNS are managed via Hurricane Electric's DNS servers. The site is mobile optimized and has good SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS and has domain transfer protection enabled. However, DNSSEC is not enabled, and no security headers were detected in the provided data, indicating room for improvement. There is no published privacy or cookie policy, which is a compliance gap, especially under GDPR. No incident response or vulnerability disclosure information is available, limiting transparency in security management. Overall, the website is functional, professional, and trustworthy for currency conversion services but would benefit from enhanced privacy compliance, improved security headers, and clearer contact and security policies to strengthen user trust and regulatory adherence.

M

Medialink Communications Consult s.r.o.

interpraca.pl

57

Interpraca.pl is a Polish-German job portal specializing in employment opportunities abroad, primarily in Germany, Austria, Switzerland, and the Czech Republic. The platform targets Polish-speaking job seekers interested in cross-border work, offering categorized job listings and paid advertisement services. The company behind the portal is Medialink Communications Consult s.r.o., based in Prague, Czech Republic. The website demonstrates a solid market position within its niche, providing valuable services to its audience. Technically, the website is built on Drupal CMS with a modern frontend stack including jQuery and Bootstrap. It integrates Google Analytics and Facebook SDK for tracking and social media engagement. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is generally good with HTTPS enforced, though some security headers and cookie consent mechanisms are missing. The absence of WHOIS data for the .pl domain reduces transparency and trust slightly, but the presence of clear contact information and professional content supports legitimacy. No adult or questionable content is present, and privacy policy compliance is basic but adequate. Overall, the site is a functional, professional job portal with room for improvement in privacy and security practices.

M

Medialink Communications Consult s.r.o.

interpraca.sk

59

The website interpraca.sk operates as a Slovak-German employment portal specializing in job offers primarily in Germany, Austria, Switzerland, and the Czech Republic. It targets Slovak-speaking job seekers interested in working abroad, offering categorized job listings across multiple sectors including construction, healthcare, logistics, and hospitality. The business is operated by Medialink Communications Consult s.r.o., with a clear market position as a niche job portal facilitating cross-border employment opportunities. Technically, the site is built on the Drupal CMS platform, leveraging common web technologies such as jQuery, Bootstrap 3.4.0, and integrates Google Analytics and Facebook SDK for analytics and social media engagement. The site demonstrates moderate performance and good mobile optimization, with a structured and user-friendly interface. From a security perspective, the website enforces HTTPS and includes standard security headers, but lacks explicit Content-Security-Policy headers and a security.txt file for vulnerability disclosure. There is no visible incident response contact, and cookie consent mechanisms are absent, which may impact GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional front with good business credibility and technical implementation. However, improvements in privacy compliance and security best practices are recommended to enhance user trust and regulatory adherence.

L

loudmark

loudmark.cz

41

Loudmark is a Czech-based comprehensive graphic and digital studio established in 2010, specializing in identity creation, web development, campaigns, and video production for both Czech and international clients. The website showcases a professional portfolio with numerous projects, reflecting a strong market presence in the creative media sector. Technically, the site is built on WordPress, utilizing modern web technologies including Google Analytics and Mailchimp integration, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced, but lacks important security headers and explicit privacy and incident response policies. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency. Overall, the site is professional and trustworthy from a content perspective but would benefit from enhanced security and privacy compliance measures.

NOMOS Lawyers International is a European legal network comprising member law firms dedicated to delivering comprehensive and cost-effective legal advice. The network emphasizes practical results and client partnership, serving businesses and legal professionals seeking cross-border legal expertise. The website presents member firms across multiple European countries and highlights recent meetings and events, reflecting an active and collaborative network. Technically, the website is built on CMS Made Simple, employs HTTPS, and integrates Google Analytics for visitor tracking. The site is moderately optimized for mobile and accessibility, with a clean design and clear navigation. However, it lacks advanced SEO features and security headers, which could be improved to enhance security and search visibility. From a security perspective, the site enforces HTTPS but does not implement common security headers or publish privacy and cookie policies, indicating gaps in compliance with GDPR and best practices. No incident response or vulnerability disclosure information is provided. The WHOIS data is not publicly available due to EURid privacy restrictions, which is typical for .eu domains and justified for professional entities. Overall, the website is professional and trustworthy with good business credibility but would benefit from enhanced privacy compliance and security hardening to reduce risk and improve user trust.

V

Vysoká škola ekonomie a managementu, a.s.

rezervacevsem.cz

60

Vysoká škola ekonomie a managementu, a.s. operates a reservation system website primarily for academic admissions and consultations. The platform targets students and academic staff, providing scheduling services for consultations with academic personnel and study advisors. The website is built on a modern Angular framework and leverages CDN services for content delivery, ensuring moderate performance and good mobile optimization. The presence of Google Analytics with IP anonymization and a cookie consent banner indicates a basic level of privacy compliance. However, the absence of a dedicated privacy policy and terms of service pages limits full compliance and transparency. Security posture is generally good with HTTPS enforced and some security best practices observed, though explicit security headers and incident response contacts are missing. Overall, the website is professional, trustworthy, and serves its educational purpose effectively.

A

Art D – Grafický atelier Černý, s. r. o.

tiskjednoduse.cz

46

Art D – Grafický atelier Černý, s. r. o. operates the website tiskjednoduse.cz, providing online printing services including offset, digital, and large format printing with additional binding and installation options. Established since 1997, the company targets businesses and individuals seeking professional printing solutions in the Czech Republic. The website features interactive price calculators and an e-shop, supporting a user-friendly experience. Technically, the site uses legacy jQuery 1.8 alongside modern analytics and marketing tools such as Google Analytics, Hotjar, and AddThis. Cookie consent is implemented to comply with GDPR regulations. Security posture is moderate with HTTPS usage implied but lacks visible security headers and explicit incident response policies. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and business information appear professional and credible. Overall, the site is well-designed, content-rich, and suitable for its target audience.

M

www.motyleksiazkowe.pl | Dystrybucja wyjątkowych książek - www.motyleksiazkowe.pl

motyleksiazkowe.pl

45

The website www.motyleksiazkowe.pl is a Polish online bookstore specializing in the distribution and sale of niche and unique books. It targets Polish-speaking customers looking for interesting books for themselves or as gifts, with a broad catalog covering various literary genres and educational materials. The business operates on an e-commerce model using the PrestaShop CMS platform, offering detailed product listings, pricing, and discounts. The site includes standard e-commerce features such as a shopping cart, wishlist, and category navigation. Technically, the site employs modern JavaScript libraries including jQuery, Google Analytics, Google Tag Manager, and Facebook SDK, indicating a moderate level of digital maturity. The website is mobile-optimized and has good SEO practices, though accessibility features are basic. Security-wise, the site uses HTTPS and has a cookie consent banner, but lacks visible security headers and explicit privacy or terms of service pages, which are important for compliance and user trust. WHOIS data for the domain is unavailable from the official .pl registry, which reduces trustworthiness slightly but may be due to registry policies or query timing. Overall, the site presents a professional and trustworthy e-commerce presence but would benefit from enhanced transparency and security disclosures.

W

Woblink

woblink.com

63

Woblink is a Polish online bookstore specializing in ebooks available in popular digital formats such as MOBI, EPUB, and PDF. Established in 2010, it serves the Polish-speaking market with a focus on digital reading content and related products like ebook readers. The website demonstrates a professional and consistent brand presence with good mobile optimization and user experience. Technically, it employs modern JavaScript frameworks (likely Vue.js) and integrates multiple analytics and marketing tools including Google Analytics, Crazy Egg, Microsoft Clarity, and BuyBox. Security posture is adequate with HTTPS enforced and a reputable domain registration, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service in the analyzed content. Overall, the site is trustworthy and well-positioned in the Polish ebook retail market.

D

Deník revoluce

denikrevoluce.cz

55

The website 'Deník revoluce' is a cultural and historical project dedicated to documenting the Velvet Revolution in Czechoslovakia, primarily through the perspective of Vladimír Hanzel, secretary to Václav Havel. Supported by the Václav Havel Library, it offers detailed daily chronicles and archival materials, targeting historians, researchers, and the general public interested in this pivotal period. The site operates as a non-profit educational resource with a niche focus. Technically, the site employs a custom PHP backend with gzip compression for assets and integrates Google Analytics and Tag Manager for visitor tracking. It uses HTTPS for secure communication but lacks advanced security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security best practices. The site is moderately optimized for mobile and accessibility, with a straightforward navigation structure. From a security perspective, the site is accessible without WAF or blocking mechanisms, but the absence of WHOIS data limits domain trust evaluation. No critical vulnerabilities or exposed sensitive data were detected, but the lack of privacy and cookie policies and missing security headers reduce the overall security posture. The site’s content is safe, educational, and free from adult or questionable material. Overall, the site scores well in content quality and business credibility but should enhance privacy compliance and security measures. The domain’s legitimacy is supported by the association with the Václav Havel Library, despite missing WHOIS data. Strategic improvements in security headers, privacy disclosures, and domain transparency would strengthen trust and compliance.

O

The Other Europe

othereurope.com

56

The Other Europe website is an archival and educational platform hosting a unique collection of interviews and documentary footage from Central and Eastern Europe during the late 1980s, focusing on life behind the Iron Curtain. The project is linked to reputable cultural institutions such as the Imperial War Museum and the Václav Havel Library, indicating a strong historical and educational mission. The website targets historians, researchers, students, and general audiences interested in Cold War history and Eastern European political and social developments. Technically, the site uses a moderate modern tech stack including Google Analytics, jQuery, and YouTube APIs, with good mobile optimization and clear navigation. However, there is no evidence of a CMS or advanced frameworks, and performance is moderate. Security posture is average with no visible security headers and unknown SSL configuration, and privacy compliance is low due to absence of privacy and cookie policies. WHOIS data is missing or unavailable, raising concerns about domain registration legitimacy, though the website content itself is professional and trustworthy. Overall, the site is a valuable educational resource but would benefit from improved security and privacy transparency.

The Rockefeller Brothers Fund is a well-established philanthropic foundation focused on advancing social change for a more just, sustainable, and peaceful world. Their website clearly communicates their mission, thematic programs, grantmaking activities, and mission-aligned investing initiatives. The organization targets philanthropic partners, grantees, and social change advocates, positioning itself as a key player in the non-profit sector with a global reach. Technically, the website is built on Drupal 10, leveraging modern analytics tools such as Google Analytics, Hotjar, and Plausible Analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a professional and user-friendly experience. However, some security best practices like security headers and explicit cookie consent mechanisms could be improved. From a security perspective, the site uses HTTPS and secure forms, with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data reduces transparency but does not significantly impact the trustworthiness given the strong branding and external social media presence. Overall, the site maintains a solid security posture but could enhance compliance and transparency. The overall risk assessment is low, with recommendations focusing on improving security headers, cookie consent, and publishing security policies to further strengthen trust and compliance.

B

Bakala Foundation

bakalafoundation.org

62

Bakala Foundation is a Czech non-profit organization dedicated to supporting young talents through scholarships, educational programs, and mentoring, with a strong focus on quality education and democratic values. The foundation has a well-established presence with approximately 18 years of operation, offering various programs including scholarships for university studies abroad, high school scholarships in the USA and UK, journalism bootcamps, and architectural internships. The website is professionally designed, mobile-optimized, and content-rich, targeting students and young talents seeking educational opportunities. Technically, the website leverages modern web technologies such as React and Gatsby, ensuring fast performance and good SEO. It integrates Google Analytics and Google Tag Manager for user tracking and marketing insights. Security posture is strong with HTTPS enforced and appropriate security headers present, although explicit privacy and terms of service pages are missing, which impacts privacy compliance scoring. The absence of WHOIS data limits the ability to fully verify domain legitimacy and registration details, which is a notable gap in trust verification. No security vulnerabilities or incidents were detected in the website content. Overall, the site demonstrates a mature digital presence with room for improvement in privacy transparency and domain registration verification.

K

Knihovna Václava Havla

havelnavzdy.cz

52

The website www.havelnavzdy.cz represents a non-profit initiative affiliated with the Václav Havel Library, focused on promoting Václav Havel's legacy through educational and cultural programs. It operates primarily through donations and membership fees, targeting supporters of Czech culture and democracy. The site offers detailed information about membership benefits and donation options, reflecting a clear and professional presentation of its mission and activities. Technically, the site uses modern web technologies such as Bootstrap and integrates Google Analytics for visitor tracking. The design is responsive and user-friendly, though accessibility features are basic. Security posture is moderate with HTTPS usage but lacks visible security headers and privacy compliance documentation. The absence of WHOIS data limits domain trust verification, but the content and external references support legitimacy. Overall, the site is trustworthy and well-positioned within its niche but would benefit from enhanced privacy and security practices.

S

Storm Type Foundry

stormtype.com

65

Storm Type Foundry is a specialized digital type foundry offering a broad catalog of professional fonts including serif, sans-serif, blackletter, and decorative styles. The company targets publishers, graphic designers, and creative studios with font licensing, font packages, custom fonts, and printed typographic materials. The website is professionally designed with good navigation and mobile optimization, reflecting a mature digital presence. The technical infrastructure includes modern JavaScript libraries, Google Analytics, and New Relic for performance monitoring. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are absent. The WHOIS data is unavailable, which raises some concerns about domain legitimacy, but the website content and branding are consistent and trustworthy. Overall, the site presents a credible business with room for improvement in transparency and security documentation.

T

Tschechien Online

tschechien-online.org

58

Tschechien Online is a German-language media and information portal focused on providing comprehensive news, travel information, event calendars, accommodation listings, and classifieds related to the Czech Republic and Prague. The site targets German-speaking audiences interested in Czech culture, tourism, and regional updates. Technically, the website is built on Drupal 7 with a variety of modules and uses jQuery 1.8, Google Analytics for tracking, and Google Adsense for advertising. The site is mobile-optimized and features a clear navigation structure with good content quality. Security-wise, the site uses HTTPS and some best practices but lacks explicit security headers and privacy/cookie policies, which are recommended for compliance and user trust. WHOIS data is unavailable or malformed, limiting domain registration insights, but the site content and technical setup appear legitimate and professional.

M

Medialink Communications Consult s.r.o.

interprace.cz

58

Interprace.cz is a Czech-German employment portal specializing in job offers and employment information for Czech speakers seeking work in Germany, Austria, Switzerland, and neighboring countries. The portal provides job listings, employer advertising services, and useful information about working and living in the EU. The website targets job seekers and employers interested in cross-border employment, positioning itself as a niche regional job portal with a focus on transportation and manual labor sectors. Technically, the website is built on Drupal CMS, utilizing common web technologies such as jQuery and Bootstrap 3.3.7. It integrates Google Analytics and Facebook SDK for analytics and social media engagement. The site is mobile-optimized with a moderate performance profile and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS with a good SSL configuration but lacks several important security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism was found, which is a compliance gap under GDPR. Contact information is clearly available, enhancing business credibility. Overall, the website is professional, trustworthy, and serves its business purpose well. However, the absence of WHOIS data and domain registration details reduces trustworthiness from a domain legitimacy standpoint. Strategic improvements in security headers and privacy compliance would enhance the site's security posture and regulatory adherence.

L

Language school AJODA

ajoda.eu

41

Language school AJODA is a small educational institution specializing in Czech language courses, particularly summer courses for foreigners in the Bohemian-Moravian Highlands. The website is built on WordPress using the Divi theme and incorporates common web technologies such as Google Analytics and Google Tag Manager for tracking. The site is accessible without any WAF or security challenges, indicating good availability. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership. Security posture is moderate with HTTPS enabled but lacks important security headers and privacy compliance documentation. Overall, the website presents a professional and focused educational service but would benefit from enhanced security and compliance measures.

N

Nadace Sekyra Foundation

sekyrafoundation.cz

44

Nadace Sekyra Foundation is a Czech non-profit organization founded by entrepreneur Luděk Sekyra, focusing on supporting human rights, liberal values, philosophical and critical thinking, and intergenerational dialogue about planetary responsibility. The foundation collaborates with prestigious academic institutions and civil society organizations internationally, positioning itself as a reputable entity in the non-profit educational sector. The website is built on WordPress with modern JavaScript libraries and includes multimedia content such as videos and event information, reflecting a mature digital presence. Security posture is good with HTTPS and no visible vulnerabilities, but lacks some security headers and formal privacy and cookie policies. WHOIS data is unavailable, which slightly reduces trust but is mitigated by the professional site and transparent business information. Overall, the foundation demonstrates a strong commitment to its mission with a well-structured online presence.

M

Město Broumov

broumov.net

38

Město Broumov operates an official municipal website serving residents and visitors with comprehensive local government information, news, cultural events, and public services. The site is positioned as the authoritative digital presence for the city of Broumov in the Czech Republic, targeting local citizens and tourists. Key services include municipal updates, event calendars, contact details for city offices, and online forms for administrative requests. The business model is typical for a government entity, focusing on public information dissemination and community engagement. Technically, the website employs a modern CMS platform (vismoWeb5) with integration of Google services such as Analytics, reCAPTCHA, and Translate. The site is HTTPS secured and includes cookie consent mechanisms compliant with GDPR. The design is responsive and accessible, with good SEO practices and clear navigation. However, some security best practices like HTTP security headers are not visibly implemented. From a security perspective, the site demonstrates a moderate security posture with HTTPS enforcement and form protections via reCAPTCHA. There is no evidence of exposed sensitive data or vulnerable libraries. However, the absence of a published security policy, incident response contacts, or vulnerability disclosure reduces transparency and preparedness. The missing WHOIS data for the domain is a concern for domain legitimacy verification, though the official content and contact details support authenticity. Overall, the website is a well-maintained municipal portal with good content quality and user experience. The main risks relate to incomplete domain registration transparency and minor security hardening opportunities. Strategic recommendations include improving security headers, publishing security policies, and verifying domain registration details to enhance trust and compliance.

A

AnalogStore.cz

analogstore.cz

49

AnalogStore.cz is a specialized e-commerce retailer focused on analog photography products including cameras, films, photo printers, and accessories. The company positions itself as an authorized reseller of FUJIFILM products, targeting photography enthusiasts and analog camera users primarily in the Czech Republic. The website offers additional services such as photo scanning, printing, framing, and camera rentals, enhancing its value proposition in the niche analog photography market. Technically, the site is built on the Shoptet e-commerce platform, leveraging modern JavaScript libraries and third-party analytics tools with a cookie consent mechanism to comply with GDPR. Security posture is adequate with HTTPS enforced and secure login forms, though explicit security headers and a public security policy are absent. WHOIS data is not publicly available, indicating privacy protection, which is common for retail businesses but limits domain age and registrant verification. Overall, the site is professional, trustworthy, and safe for general audiences.

Z

Za poklady Broumovska

zapoklady.cz

52

Za poklady Broumovska is a small-scale cultural festival organization based in the Czech Republic, focused on organizing classical music concerts in unique Baroque churches in the Broumovsko region. The festival has a long-standing tradition, reportedly over 20 years, and relies on voluntary donations and partnerships with cultural and governmental entities. The website presents a professional and user-friendly interface with clear navigation and relevant content for its target audience of classical music enthusiasts and cultural heritage supporters. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Analytics and Tag Manager, with good mobile optimization and SEO practices. However, the absence of WHOIS data limits domain legitimacy verification, and no explicit privacy or security policies are found on the site. Security posture is moderate with HTTPS usage but lacks visible security headers. Cookie consent is implemented, indicating some privacy compliance. Overall, the site is trustworthy for its purpose but would benefit from enhanced transparency and security measures.

M

Město Broumov

broumov-mesto.cz

48

The website www.broumov-mesto.cz serves as the official digital presence of the town of Broumov, Czech Republic. It provides residents and visitors with municipal news, cultural event information, public service announcements, and contact details for various city departments. The site is well-structured, accessible, and includes features such as a search function, event calendar, and subscription form for newsletters. Social media integration with Facebook and YouTube enhances community engagement. Technically, the site uses the Vismo CMS platform, integrates Google Analytics for visitor insights, and employs Google reCAPTCHA to protect forms from abuse. The presence of a cookie consent mechanism and a detailed privacy policy indicates good privacy compliance. However, the absence of WHOIS data for the domain raises questions about domain registration transparency, which slightly impacts trustworthiness. No explicit security policy or incident response information is published, which could be improved to enhance security posture. Overall, the site is professional, secure, and serves its governmental function effectively.

A

Agentura pro rozvoj Broumovska z.ú.

aprb.cz

60

Agentura pro rozvoj Broumovska z.ú. is a Czech non-profit organization founded in 2004, dedicated to supporting regional development, cultural activities, and community life in the Broumovsko region. The organization operates cultural and educational programs, manages the Broumov monastery complex, and fosters collaboration among individuals, companies, and organizations to enhance the region's attractiveness and quality of life. The website reflects this mission with rich content in Czech, including event announcements, historical background, and community engagement initiatives. Technically, the website employs modern web technologies including HTML5, CSS, JavaScript, and integrates Google Analytics for visitor tracking. It uses HTTPS for secure communication and includes a cookie consent banner, indicating some level of privacy compliance. The site is mobile-optimized and features interactive elements such as slideshows and embedded videos. However, no CMS or hosting provider details are explicitly identified, and some security best practices like security headers are missing. From a security perspective, the site benefits from HTTPS and form validation but lacks visible security headers and a published privacy policy, which are important for GDPR compliance and user trust. The absence of WHOIS data for the domain reduces domain trustworthiness, although the website content and contact information appear legitimate and consistent with a reputable non-profit entity. No vulnerabilities or suspicious content were detected. Overall, the website presents a professional and trustworthy front for the organization but would benefit from enhanced security measures, clearer privacy documentation, and resolving the WHOIS data absence to improve domain legitimacy and compliance posture.

B

B Live

blive.nyc

66

B Live is a well-established digital media company based in New York City, specializing in live streaming, OTT managed services, production, and digital experience services. With over 30 years of experience servicing top brands globally, B Live offers a comprehensive suite of video technology and production solutions designed to engage audiences interactively and transactionally. Their market position is strong within the media and technology sectors, targeting enterprise clients and brands seeking advanced streaming and production capabilities. Technically, the website is built on the Webflow platform, leveraging modern JavaScript libraries, Google Analytics, and Cloudflare Turnstile captcha for security. The site is mobile-optimized and provides a professional user experience with clear navigation and rich content. Security posture is good with HTTPS enforced and secure form handling, though the absence of certain security headers and cookie consent mechanisms suggests room for improvement. The WHOIS data is privacy-protected, which is common but slightly reduces transparency. Overall, the website is professional, trustworthy, and technically sound, with minor gaps in privacy compliance and security best practices.

D

DON LEMME

donlemme.cz

53

DON LEMME is a Czech Republic based e-commerce retailer specializing in premium casual clothing for men and women. The company offers a wide range of products including jeans, sweatshirts, tracksuits, and t-shirts with unique designs and quality materials. Positioned as a niche premium brand, DON LEMME targets fashion-conscious customers seeking comfortable yet stylish apparel. The website is built on the Shoptet platform, featuring a modern tech stack with multiple analytics and marketing integrations such as Google Analytics, Facebook SDK, TikTok Pixel, and Smartlook. Privacy and cookie policies are well implemented, reflecting GDPR compliance. However, the absence of WHOIS data and explicit security policies slightly reduces transparency and trust. Overall, the site demonstrates good technical maturity and a professional online presence.

I

Ing. Kvasnička Jan

kvasnickajan.cz

30

Jan Kvasnička operates a professional website offering specialized services in usability analysis, conversion rate optimization, affiliate marketing, domain consulting, and mentoring. The business targets clients seeking to improve their online presence and e-commerce performance, positioning itself as a niche expert with a portfolio of satisfied clients. The website content is well-structured, professional, and consistent with the business focus. Technically, the website employs standard web technologies including Google Analytics and Twitter widgets. However, there is no evidence of HTTPS usage or advanced security headers, which limits the security posture. The site lacks privacy and cookie policies, which are important for GDPR compliance. Performance and mobile optimization are moderate, with room for improvement in accessibility and modern web standards. Security-wise, the absence of HTTPS and security headers is a significant concern. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The missing WHOIS data reduces trust in domain legitimacy, although the website content itself appears professional and business-oriented. Overall, the site demonstrates moderate risk with recommendations to improve security and compliance. Strategically, the business should prioritize implementing HTTPS, adding privacy and cookie policies, and enhancing security headers to protect user data and improve trust. Regular audits and updates to third-party scripts and tracking tools are also advised to maintain security and privacy standards.

ČistéDřevo.cz is a Czech e-commerce retailer specializing in wooden products and laser-engraved personalized gifts. The website offers a broad range of wooden items including home decor, kitchenware, garden accessories, and gift packaging. The company targets general consumers interested in quality wooden products and personalized gifts, positioning itself as a reputable and award-winning online store in the Czech market. The site demonstrates a professional design with clear navigation and a consistent brand identity. It integrates multiple marketing and analytics tools, including Google Analytics, Facebook Pixel, Hotjar, and Criteo, with a GDPR-compliant cookie consent mechanism. The technical infrastructure is based on the Shoptet e-commerce platform, utilizing modern JavaScript frameworks and third-party services for enhanced user experience and marketing effectiveness. Security posture is good with HTTPS enforced and secure forms, though explicit security headers and incident response information are lacking. The absence of WHOIS data limits full trust assessment but the website's operational maturity and market recognition suggest legitimacy. Strategic recommendations include improving security header implementation, publishing a security policy, and enhancing accessibility features.

A

Angry Beards s.r.o.

angrybeards.cz

52

Angry Beards s.r.o. operates an e-commerce website specializing in men's grooming and cosmetic products, targeting adult males primarily in the Czech Republic. The company offers a range of products including fragrances, beard care, body cosmetics, and related merchandise. The website is well-branded and consistent with its niche market positioning. Technically, the site uses the Shoptet e-commerce platform with modern JavaScript libraries and integrates multiple analytics and marketing tools, maintaining good performance and mobile optimization. Security posture is solid with HTTPS, security headers, and CSRF protections, although explicit security policies and incident response contacts are not present. Privacy compliance is strong with visible cookie consent and a comprehensive privacy policy. WHOIS data is unavailable, likely due to privacy protection, which is common for such businesses. Overall, the site is professional, trustworthy, and compliant with relevant regulations.

G

GOLEM GROUP

infotip.cz

54

Infotip.cz is a long-established Czech information portal operated by GOLEM GROUP, providing a wide range of services including search, databases of companies and municipalities, weather forecasts, currency exchange rates, news aggregation, classifieds, job listings, and dating services. The website targets the general Czech public and maintains a moderate market position with a medium-sized operation. Technically, the site uses basic and somewhat outdated web technologies, including HTML with windows-1250 charset and JavaScript for menus and Google Custom Search. Google Analytics is integrated for user tracking, but no visible cookie consent or privacy policies are present, indicating compliance gaps. Security posture is moderate with no HTTPS enforcement visible in the HTML content and absence of security headers, though no critical vulnerabilities or exposed sensitive data were found. Overall, the site is functional and content-rich but would benefit from modernization and improved security and privacy compliance.

G

GOLEM GROUP s.r.o.

abecedabydleni.cz

59

Abeceda BYDLENÍ is a Czech online lifestyle magazine focusing on housing, interiors, exteriors, and gastronomy. Operated by GOLEM GROUP s.r.o., a communication agency providing advertising and publishing services, the site targets Czech-speaking audiences interested in lifestyle and real estate topics. The website is well-established with a domain age since 2001, indicating a mature presence in its market segment. The content is professionally curated, with clear navigation and a consistent brand identity. Technically, the site runs on WordPress with common plugins for GDPR compliance and user interaction, including a cookie consent mechanism and Google Analytics integration. Security posture is adequate with HTTPS enforced, though some security headers are missing and no explicit security policy or incident response information is published. Overall, the site demonstrates good digital maturity and compliance with privacy regulations, though improvements in security headers and incident response transparency are recommended.

Vpenize.cz is a Czech financial magazine and information portal specializing in investment, savings, loans, and personal finance education. The website offers a variety of articles, broker comparisons, and financial tools aimed at helping individuals achieve financial independence. It holds a solid position in the Czech market as a trusted source for financial knowledge and broker reviews. Technically, the site is built on WordPress with modern SEO and analytics integrations, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and some security best practices, though improvements in security headers are recommended. The absence of WHOIS data reduces domain trust slightly but does not detract from the professional presentation and content quality. Overall, the site is safe, well-maintained, and suitable for a general audience interested in finance.

1

10dencehispahard, S.L.

thexdoor.com

47

TheXDoor.com is a Spanish-based small business specializing in escape room entertainment services located in Valencia. The website offers immersive escape room experiences with cinematic special effects and themed ambientations, targeting a general audience interested in leisure and entertainment. The business has been established since 2014, supported by consistent domain registration data and localized content. Technically, the website is built on WordPress using Elementor and several popular plugins such as Yoast SEO and LayerSlider, indicating a moderate level of digital maturity. The site is mobile-optimized and includes SEO best practices, although accessibility features are basic. Security-wise, the site uses HTTPS and Google reCAPTCHA for form protection, but lacks DNSSEC and important security headers, which are recommended to enhance security posture. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

Your Escape is a small hospitality business based in Leiden, Netherlands, specializing in interactive escape room experiences. The website presents a professional and engaging platform for customers to learn about and book their escape room adventures. The business has been operational since 2017, with a consistent domain registration and active online presence. Technically, the site is built on WordPress, leveraging popular plugins and analytics tools such as Google Analytics and Hotjar, indicating a moderate level of digital maturity. The website is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks some advanced security headers and explicit security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and well-maintained, suitable for its target audience of general consumers seeking entertainment.

V

Verone

verone.gr

71

Verone.gr is a Greek-based small hospitality business specializing in live action escape rooms, targeting general audiences interested in entertainment experiences. The website is built using BaseKit CMS and hosted on websitestool.com infrastructure. It employs Google Analytics with IP anonymization for visitor tracking and implements a cookie consent mechanism, indicating some level of privacy awareness. However, the site lacks critical compliance documents such as a privacy policy and terms of service, and no explicit contact information is provided, which may impact user trust and regulatory compliance. Security posture is moderate with HTTPS enabled but missing important security headers and vulnerability disclosure mechanisms.

S

Start Play

startplay.es

48

Start Play is a specialized entertainment company based in Murcia, Spain, offering immersive live games such as Escape Rooms, Real Games, Murder Parties, and Escape Boxes. Established in 2020, the company targets a broad audience interested in interactive and social entertainment experiences. Their market position is that of a local niche provider with a focus on quality and customer engagement, supported by certifications like Calidad Turística and active social media presence. Technically, the website is built on WordPress with a modern tech stack including WooCommerce for e-commerce capabilities, and integrates SEO and analytics tools to enhance digital presence. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS, employs standard security headers, and uses GDPR-compliant cookie management, reflecting a solid security posture with no critical vulnerabilities detected. Overall, the website demonstrates a mature digital infrastructure suitable for its business model, with room for improvement in formal security policies and incident response documentation.

T

Trip Trap

triptrapescape.ch

58

Trip Trap is a Swiss-based company specializing in immersive escape game experiences, operating multiple themed locations in Geneva. The company has established a strong market position with multiple industry awards and a clear focus on delivering engaging entertainment for a broad audience including families, corporate clients, and children. Their business model revolves around physical escape rooms, team building events, and gift vouchers, supported by a professional online booking platform. Technically, the website is built on WordPress with modern plugins and tracking tools, offering good performance, mobile optimization, and SEO. Security posture is solid with HTTPS, security headers, and anti-bot measures, though lacking a dedicated security policy or incident response information. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website reflects a mature digital presence with high trustworthiness and professional branding.

E

Escaperoom Katwijk

escaperoomkatwijk.com

47

Escape Room Katwijk is a Dutch-based entertainment business specializing in immersive escape room experiences. The company offers multiple themed rooms inspired by popular series and original stories, targeting a broad audience including friends, families, and corporate groups. The website reflects a well-established local presence with multiple industry awards and positive customer testimonials, indicating strong market positioning within the hospitality sector. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern SEO tools like Yoast and tracking via Google Analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers, and no privacy or cookie policies are published, indicating compliance gaps. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening.

E

EXIT19.PL - Escape Room Wrocław

exit19.pl

47

EXIT19.PL is a small hospitality business operating an escape room entertainment service in Wrocław, Poland. The company offers thrilling escape room games targeting a general audience seeking fun and team-building activities. The website is built on WordPress and integrates modern technologies such as Google Tag Manager, Google Analytics, reCAPTCHA, and Cookiebot for consent management. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service pages found. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

Lockhill is a small hospitality business operating a thematic live escape room attraction in Athens, Greece, positioning itself as the most thematic live escape room in Europe. The website showcases multiple thematic rooms and uses multimedia content to engage visitors. The business targets adventure seekers and tourists interested in immersive escape room experiences. Technically, the website is built on the Weebly platform, utilizing jQuery, Google Analytics, and standard multimedia libraries. The site has moderate performance and basic mobile optimization. Security posture is average with HTTPS usage but lacks advanced security headers and explicit privacy or cookie policies. No vulnerability disclosure or incident response information is provided. Overall, the website is professional and trustworthy but could improve privacy compliance and security practices.

M

Mayto Kingdom

maytokingdom.es

50

Mayto Kingdom is a specialized entertainment company based in Vitoria-Gasteiz, Spain, offering immersive adventure and escape room experiences that blend spectacle and interactive storytelling. The company targets families, adults, and corporate clients seeking unique team-building activities. The website is built on WordPress with modern plugins and technologies, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers and explicit privacy policies are recommended. Overall, the business presents a trustworthy and professional digital presence with clear contact information and positive customer testimonials.

Escaparium is a small regional entertainment business specializing in premium escape room games with multiple locations in Quebec, Canada. The website presents a professional and consistent brand image with clear navigation and relevant content focused on team building and group activities. The technical infrastructure uses modern frontend technologies such as Bootstrap, jQuery, and Google Analytics, hosted on SiteGround. While the website is accessible and functional, it lacks critical compliance elements such as privacy and cookie policies, and no contact information is explicitly provided, which may impact user trust and regulatory compliance. Security posture is moderate with domain protections in place but missing DNSSEC and security headers. Overall, the website is suitable for its business purpose but requires improvements in privacy, security, and contact transparency.

U

UnicanCzech s.r.o. and New Czech Education s.r.o.

educan.eu

46

Educan.eu operates as an educational platform offering free Czech language courses for foreigners residing in the Czech Republic. The courses are accredited by the Ministry of Education of the Czech Republic and financially supported by the Employment Service (Úřad práce). The business model focuses on providing accessible language education through in-person and online formats, targeting foreigners seeking integration and employment opportunities. The website demonstrates a solid market position within its niche, supported by government funding and official accreditations. Technically, the website is built on WordPress 6.8.1 using the Avada theme, complemented by standard plugins such as Complianz for GDPR compliance and Google Analytics for traffic monitoring. The site is mobile-optimized, accessible, and performs moderately well. The presence of cookie consent mechanisms and privacy policies indicates a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS and employs cookie consent banners, but lacks advanced security headers and publicly available security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is privacy protected, which is common for EU domains, and the domain appears legitimate based on business registration and website content. Overall, Educan.eu presents a trustworthy and professional online presence for an educational service with good compliance and security posture. Strategic improvements could include enhancing security headers and publishing explicit security policies to further strengthen trust and resilience.

J

Jazykové kurzy a školy v ČR

jazykovky.cz

46

Jazykovky.cz is an online directory platform focused on listing language schools and courses in the Czech Republic. It provides users with a comprehensive search and filtering system to find language learning opportunities by language, course type, location, and other criteria. The platform also features student reviews and course comparisons, positioning itself as a valuable resource for language learners in the region. Technically, the website uses legacy JavaScript frameworks such as AngularJS 1.0.6 and jQuery 1.6.1, alongside modern tracking tools like Google Analytics, Facebook Pixel, and Google reCAPTCHA v3. While HTTPS is enforced and cookie consent is implemented, the site lacks visible security headers and uses outdated libraries, which could pose security risks. The absence of WHOIS data reduces domain trustworthiness, but the website content and structure indicate a legitimate educational service. Overall, the site offers good user experience and relevant content but would benefit from technical and security updates.

S

Schoolpartner

schoolpartner.cz

55

Schoolpartner is a Czech Republic based small business offering SaaS software solutions tailored for language schools. Their platform provides comprehensive tools for course management, teacher coordination, quality assurance, automated invoicing, and economic performance tracking. The website positions the company as a niche provider focused on simplifying language school administration with modern digital tools. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and session recording tools like Smartlook and Smartsupp, indicating a mature digital infrastructure. The site is mobile optimized and SEO friendly, with clear navigation and professional design. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and policies could be improved. The absence of WHOIS data limits domain trust assessment, but the website content and structured data suggest a legitimate business. Overall, the site is professional, secure, and compliant with privacy regulations, serving its target audience effectively.