Security Directory

M

Marek Žmijovský

zmickey.sk

55

The website zmickey.sk is a personal portfolio for Marek Žmijovský, a Slovak web designer specializing in WordPress and Joomla development. The site presents his skills, work history, education, and portfolio samples, targeting potential clients seeking freelance web design services. The business model is that of an individual freelancer with a small-scale operation primarily serving Slovak and English-speaking markets. The domain age and WHOIS data align well with the professional timeline presented, indicating legitimacy and consistency. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, Font Awesome, and Google Fonts. It is hosted on Websupport, a Slovak hosting provider, with DNSSEC enabled, which adds to the security trustworthiness. The site is responsive and well-structured, though some accessibility and SEO optimizations could be improved. No CMS is detected, indicating a custom-coded site. From a security perspective, the site lacks explicit HTTP security headers and does not provide privacy or cookie policies, which are important for GDPR compliance. There is no visible incident response or vulnerability disclosure information. The contact form collects user data but no anti-spam or security measures are evident in the provided content. No analytics or tracking scripts are present, indicating minimal user tracking. Overall, the site is professional and functional but could improve its security posture and privacy compliance. The risk level is moderate with no critical vulnerabilities detected but with room for improvement in security best practices and legal compliance.

T

Tudio, družstvo

tudio.cz

46

Tudio is a newly established Czech innovation and communication agency founded in 2023. The company offers services in innovation consulting, strategic development, marketing, branding, digitalization, and social media management, targeting organizations seeking to enhance resilience through innovation and marketing. The website reflects a professional and consistent brand image with clear contact information and subsidiary details. Technically, the site uses modern web technologies including Google Tag Manager, Google Fonts, Font Awesome, and is built on the proprietary Websy platform hosted by WEDOS. Performance and mobile optimization are moderate to good, though accessibility and SEO could be improved. Security posture is adequate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and published security policies. No privacy policy or terms of service are present, representing compliance gaps. Overall, the domain registration data aligns well with the business information, supporting legitimacy. Recommendations include publishing privacy and security policies, enhancing security headers, and improving accessibility and SEO.

M

Mladí praktici z.s.

mladipraktici.cz

49

Mladí praktici z.s. is a Czech non-profit association dedicated to supporting young general practitioners preparing for certification and those within five years post-certification. The organization provides educational resources, community building, international internship opportunities, and financial support for conferences and training. Their market position is well-established within the Czech healthcare sector, with active international affiliations such as EYFDM and cooperation with official bodies like IPVZ and the Ministry of Health of the Czech Republic. The website serves as a portal and informational hub for their target audience of young doctors and medical trainees. Technically, the website is built using modern web standards with HTML5, CSS3, JavaScript, and is generated by Websy 4 CMS. It uses Google Fonts and Font Awesome for styling and icons, and Google Analytics for visitor tracking. The site is hosted by Wedos, a reputable Czech hosting provider. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS with good SSL configuration and secure form handling. However, it lacks explicit security headers and documented security policies or incident response contacts. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, though GDPR compliance indicators could be more explicit. No critical vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professionally maintained, and serves its community well. Strategic improvements in security headers and incident response documentation could enhance its security posture and compliance maturity.

M

Mapa školitelů

mapaskolitelu.cz

58

Mapa školitelů is a Czech Republic-based informational platform dedicated to connecting medical trainees with qualified trainers for pre-certification preparation in General Practical Medicine. The website offers a searchable map interface with filtering options by region, district, and accreditation status, supported by partnerships with reputable Czech medical organizations. The platform targets medical professionals and trainees seeking accredited training resources within the Czech healthcare education sector. Technically, the website employs modern JavaScript libraries including Mapbox GL JS for interactive mapping, Google reCAPTCHA for form security, and Google Tag Manager for analytics. It is built using the Websy 4 CMS and hosted via Czech providers, ensuring regional relevance and performance. The site is mobile-optimized with good design quality and basic accessibility features, though SEO and advanced accessibility could be improved. From a security perspective, the site uses HTTPS and implements CAPTCHA on forms, but lacks published privacy and cookie policies, security headers, and incident response information. The contact form is currently commented out, reducing attack surface but also limiting user interaction. No critical vulnerabilities or exposed sensitive data were detected, but compliance gaps with GDPR and security best practices exist. Overall, the website is functional, professional, and trustworthy within its niche but would benefit from enhanced privacy compliance, security hardening, and expanded contact information to improve user trust and regulatory adherence.

О

Общественное объединение инвалидов "Помощь больным рассеянным склерозом"

msbelarus.com

35

The website represents a Belarusian non-profit organization dedicated to supporting individuals with multiple sclerosis. It provides information, advocacy, and assistance to patients and their families, focusing on awareness, employment support, social participation, and international cooperation. The organization appears small and community-focused, with a clear mission and active content updates. Technically, the site is built on WordPress with common plugins and frameworks, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy/cookie policies, indicating room for compliance improvement. The absence of WHOIS data for the domain is a notable anomaly, reducing domain trustworthiness despite the legitimate content and contact information. Overall, the site is professional and trustworthy from a content and business perspective but should address privacy and security best practices to enhance compliance and trust.

Sdružení praktických lékařů České Republiky (SPL ČR) is a professional association serving general practitioners in the Czech Republic. The website provides member-exclusive content, public information, and resources related to healthcare and professional development. It supports member registration, communication, and discussion forums, positioning itself as a key national association in the healthcare sector. Technically, the site is built on WordPress with a Bootstrap-based theme and common plugins for community and form management. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and multi-factor authentication. Privacy and cookie policies are present, though cookie consent mechanisms are missing. No terms of service or vulnerability disclosure policies were found. Overall, the site is professional, trustworthy, and well-aligned with its business purpose, but could improve security and privacy compliance aspects.

H

Hotel AGH Rožnov p. R.

hotel-agh.cz

57

Hotel AGH Rožnov p. R. is a well-established hospitality business located in Rožnov pod Radhoštěm, Czech Republic, with a history dating back to 1783. The hotel offers accommodation, dining, event hosting including conferences and weddings, and various stay packages targeting tourists and business travelers. The website reflects a professional and consistent brand image with clear service offerings and customer trust indicators such as high customer ratings and certifications. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, providing a good user experience with mobile optimization and clear navigation. However, the site lacks visible privacy and cookie policies, security headers, and incident response information, which are important for compliance and security posture. Overall, the website is safe, accessible, and trustworthy but could improve in privacy compliance and security transparency.

C

CHIRANA T. Injecta, s.r.o.

chirmax.cz

51

CHIRANA T. Injecta, s.r.o. is a Czech-based manufacturer specializing in surgical sutures, atraumatic needles, and surgical meshes. The company emphasizes advanced research and technology in producing over 1500 individual products, serving healthcare professionals and medical institutions. Their market position is supported by ISO 13485 certification and CE marking, indicating compliance with medical device quality standards. The website reflects a professional and consistent brand image with clear contact information and partner affiliations. Technically, the website employs modern frontend technologies such as jQuery, Bootstrap, and Google Fonts, with a custom or unknown CMS. It is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced, and cookie consent mechanisms are implemented, though additional security headers could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid but could benefit from formal vulnerability disclosure policies and incident response contacts. Privacy compliance is well addressed with comprehensive privacy and cookie policies in Czech language, aligned with GDPR requirements. The absence of WHOIS data limits domain trust analysis, but the website's content and certifications support its legitimacy. Overall, the website is a reliable digital presence for a medium-sized healthcare manufacturing company, with good technical and security practices. Strategic improvements in security headers and transparency policies would further strengthen trust and compliance.

T

Teleflex Incorporated

teleflex.com

60

Teleflex Incorporated operates a global healthcare technology website providing regional access to its medical device products and services. The company is positioned as an established enterprise in the healthcare sector with a broad international presence across Americas, EMEA, and Asia Pacific. The website serves primarily healthcare professionals and regional distributors, offering localized content and contact points. Technically, the site uses a modern and common technology stack including jQuery, Bootstrap, and Font Awesome, with a CMS likely based on DotCMS. The site is mobile-optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks advanced security headers and explicit security policies. Privacy compliance is supported by a clear privacy policy and cookie consent banner powered by Osano, indicating GDPR awareness. No critical security issues or blocking mechanisms were detected, and the domain registration is consistent with a mature, legitimate business. Overall, the website is professional, secure, and trustworthy with room for improvement in security policy transparency and technical security hardening.

M

MEDIPRAX CB s.r.o.

mediprax.cz

58

MEDIPRAX CB s.r.o. is a Czech Republic based company specializing in the sale and servicing of medical equipment. Established in 2000, it operates an e-commerce platform built on PrestaShop, targeting healthcare professionals and institutions within the Czech market. The website presents a professional and consistent brand image with clear business information and contact details. Technically, the site uses modern web technologies including HTTPS, Google Fonts, Font Awesome, and Material Icons, ensuring a good user experience with mobile responsiveness and moderate performance. Security posture is solid with HTTPS and tokenized forms, though it lacks explicit security headers and incident response information. Privacy compliance is addressed with a visible cookie consent mechanism and a privacy policy page in Czech, indicating GDPR awareness. Overall, the site is trustworthy, safe, and well-positioned within its niche healthcare retail sector.

The International Committee of Medical Journal Editors (ICMJE) operates as a small, specialized non-profit organization focused on improving the quality and integrity of medical journal publishing worldwide. Their website serves as a central hub for publishing editorial recommendations, disclosure forms, and guidance for authors and editors in the medical research community. The organization is well-established with a domain age of over 20 years, reflecting its longstanding presence and authority in the healthcare publishing sector. Technically, the website employs a basic but functional technology stack including jQuery, Google Analytics, and Font Awesome. Hosting appears to be supported by Amazon AWS DNS infrastructure. While the site is moderately optimized for performance and mobile use, there are opportunities for modernization, especially upgrading outdated JavaScript libraries and enhancing accessibility features. SEO and navigation are well implemented, supporting a positive user experience. From a security perspective, the site uses HTTPS and Google Analytics but lacks DNSSEC and important security headers, which lowers its security posture. No explicit privacy or cookie policies were found, indicating compliance gaps with GDPR and other privacy regulations. The absence of a published security policy or incident response contact further limits transparency. Overall, the security risk is moderate but manageable with improvements. The website content is professional, trustworthy, and safe for general audiences, with no adult or questionable content detected. The business credibility is high due to clear organizational information and association with reputable medical journals. Strategic recommendations include implementing privacy and cookie policies, upgrading technical components, enabling DNSSEC, and publishing security policies to enhance trust and compliance.

L

Lázně Teplice nad Bečvou a.s.

ltnb.cz

49

Lázně Teplice nad Bečvou a.s. is a historic spa and rehabilitation center located in the Czech Republic, offering specialized healthcare services including treatment for circulatory and nervous system diseases, metabolic disorders, and post-surgical rehabilitation. The company targets both insured patients and self-paying clients, including pediatric care through its subsidiary. The website reflects a mature digital presence with modern technologies such as WordPress and Elementor, supported by Matomo analytics and Google Tag Manager for marketing and tracking. Privacy and cookie policies are well implemented, demonstrating GDPR compliance. Security posture is good with HTTPS and consent mechanisms, though additional security headers could enhance protection. The absence of WHOIS data is a notable anomaly that slightly impacts trust assessment but does not detract from the professional presentation and comprehensive business information available on the site.

L

LEFEEN

lefeen.com

48

LEFEEN is a specialized company operating in the healthcare and technology sectors, focusing on longevity and biohacking technologies. Their offerings include medical devices, physiotherapy equipment, beauty treatments, and sports rehabilitation technologies. The website is professionally designed using WordPress with modern frameworks and plugins, indicating a moderate level of digital maturity. Contact information and social media presence enhance their business credibility. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Privacy compliance is weak due to missing privacy and terms of service pages, though a cookie consent banner is present. Overall, the website is functional and professional but requires improvements in security and compliance documentation.

D

Diesel Plus

diesel-plus.com

45

Diesel Plus is a small professional content production company specializing in creating custom content and graphic design services for business websites across various sectors including business, finance, industrial, lifestyle, science, and technology. The website is built on WordPress with modern plugins and demonstrates good design quality, clear navigation, and mobile optimization. However, the absence of privacy and cookie policies, as well as missing WHOIS registration data, present compliance and trust concerns. The security posture is moderate with HTTPS enabled but lacks visible security headers and formal security policies. Overall, the website is functional and professional but would benefit from enhanced compliance and security transparency.

A

Associação Portuguesa dos Enfermeiros Obstetras

apeo.pt

48

The Associação Portuguesa dos Enfermeiros Obstetras (APEO) is a Portuguese non-profit association founded in 1997, dedicated to representing midwives and obstetric nurses. The organization provides professional development through congresses, courses, workshops, and publications, including hosting the International Confederation of Midwives Congress in Lisbon in 2026. The website reflects a professional and consistent brand image targeting healthcare professionals and the general public interested in midwifery. Technically, the site is built on WordPress with Elementor and Astra theme, using modern libraries and ensuring HTTPS security. However, it lacks explicit privacy and cookie policies, security headers, and direct contact information, which are areas for improvement. Overall, the site is well-designed, mobile-optimized, and trustworthy, with minimal tracking or advertising.

D

Den norske jordmorforening

jordmorforeningen.no

61

Den norske jordmorforening is a well-established Norwegian midwives' association founded in 1908, serving as a professional body providing advocacy, education, and member services to midwives and related healthcare professionals in Norway. The website reflects a professional and consistent brand presence, targeting midwives, students, and healthcare stakeholders with relevant content, events, and resources. Technically, the site uses eZ Publish CMS with modern web technologies including jQuery, Font Awesome, Google Analytics, and Facebook SDK, delivering a moderately performant and mobile-optimized experience. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust. However, WHOIS data is unavailable, limiting domain registration transparency, though the website's professional content supports legitimacy. Overall, the site is a credible digital presence for a healthcare professional association in Norway.

S

Schindlerova pletárna s. r. o.

elite-cz.cz

46

Schindlerova pletárna s. r. o. operates the ELITE e-commerce website specializing in hosiery products with a rich tradition dating back to 1854 in the Czech Republic. The company targets consumers seeking quality hosiery and related products, offering both retail and wholesale options. The website is professionally designed with clear navigation and a consistent brand presence, supported by active social media channels and comprehensive customer contact information. Technically, the website leverages a mature technology stack including jQuery, Bootstrap 3.3.7, Font Awesome, and integrates Google Tag Manager, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. However, some technical improvements are recommended, such as implementing security headers and enhancing accessibility features. From a security perspective, the site enforces HTTPS and uses consent-based tracking but lacks explicit security policies and incident response information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data is a concern for domain legitimacy, though the website content and business information appear trustworthy and professional. Overall, the website presents a solid business and technical foundation with good privacy compliance and user experience. Strategic improvements in security posture and domain registration transparency would enhance trust and reduce risk.

U

Universidad de La Laguna

ull.es

56

Universidad de La Laguna is a public higher education institution based in Spain, offering a wide range of academic programs, research opportunities, and cultural services. The website serves students, faculty, researchers, and the public with multilingual content and comprehensive institutional information. Technically, the site is built on WordPress with modern libraries such as Bootstrap and jQuery, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS and some best practices, but lacks certain security headers and explicit vulnerability disclosure mechanisms. Privacy compliance is partially met with a privacy policy present but no visible cookie consent mechanism. Overall, the domain appears legitimate and consistent with a public university, though WHOIS data is unavailable due to registrar restrictions. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security policies to improve trust and compliance.

E

Efpia E4Ethics

efpia-e4ethics.eu

55

Efpia E4Ethics is a French-language lifestyle blog offering a wide range of articles on topics such as employment, beauty, fashion, practical information, home and garden, wellness, sports, and vacations. The website targets a general audience interested in lifestyle content and operates as a small content publishing platform. Technically, the site is built on WordPress, utilizing common web technologies like jQuery, Font Awesome, and Google Fonts. The site is mobile-optimized with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enabled and a cookie consent banner present, but lacks advanced security headers and explicit privacy policy documentation. No direct company contact emails or phone numbers are provided, though a contact form is available. The domain WHOIS data is not publicly accessible due to EURid privacy policies, but no suspicious indicators were found in the website content or structure. Overall, the website is safe, professional, and suitable for general audiences.

C

Cambridge Media

cambridgemedia.com.au

50

Cambridge Media is a specialized Australian publisher focusing on scholarly and professional publishing, particularly in healthcare. With over 30 years of experience, it serves societies, associations, and authors by providing multi-format publishing services including journals, books, and conference proceedings. The company holds memberships in reputable publishing organizations and adheres to recognized editorial and ethical standards, positioning itself as a trusted leader in its niche market. Technically, the website is built on the concrete5 CMS platform, utilizing common web technologies such as jQuery and Font Awesome. The site is hosted by HostYourServices in Australia and demonstrates moderate performance with good mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though it lacks some security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR-specific disclosures. Contact information is limited to email, with no phone numbers or social media links provided. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

P

Pan American Health Organization

paho.org

75

The Pan American Health Organization (PAHO) website serves as the official regional office for the World Health Organization in the Americas, providing comprehensive public health information, resources, and initiatives. The organization is well-established with a long history dating back to 1902 and holds a leading position in regional health governance and disease control. The website targets governments, health professionals, and the general public across the Americas, offering multilingual content and a wide range of health-related services and publications. Technically, the website is built on Drupal CMS with modern frameworks like Bootstrap and Font Awesome, and integrates analytics tools such as Google Analytics and Microsoft Clarity. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is strong with HTTPS enforced and anonymized analytics, but lacks some security headers and explicit cookie consent mechanisms. The WHOIS data for the domain is unavailable, which slightly impacts trustworthiness, but the official branding, consistent content quality, and social media presence strongly support legitimacy. No critical security vulnerabilities or suspicious content were detected. Privacy policies are comprehensive and GDPR compliant, though cookie consent could be improved. Overall, the website is a professional, authoritative source for public health information in the Americas, with recommendations to enhance security headers, cookie consent, and publish incident response policies to further strengthen trust and compliance.

J

Jeseníky Sdružení cestovního ruchu

jeseniky-rodina.cz

44

Jeseníky.cz is a well-established regional tourism portal dedicated to the Jeseníky mountain region in the Czech Republic. Founded in 1998, it serves as an authoritative source of information for tourists, providing comprehensive details on tourist destinations, accommodation, dining, events, and recreational activities. The site is operated by Jeseníky Sdružení cestovního ruchu, a recognized tourism association, and features partnerships with multiple regional and national tourism organizations. The platform targets visitors interested in outdoor activities, cultural events, and wellness experiences in the Jeseníky area. Technically, the website employs a custom CMS called Noteo Engine, utilizes modern web technologies including HTML5, CSS, JavaScript, jQuery, and integrates third-party services such as Google Analytics and YouTube embeds. The site is hosted under a reputable registrar (REG-ZONER) with a domain age dating back to 1998, indicating a mature online presence. Mobile optimization and SEO practices are implemented at a good level, though accessibility features are basic. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, but lacks visible advanced security headers and a dedicated security or privacy policy page. No critical vulnerabilities or WAF blocking were detected. Contact information is clearly provided, enhancing trustworthiness. The site does not contain any adult or questionable content, making it safe for general audiences. Overall, Jeseniky.cz demonstrates a solid business and technical foundation with room for improvement in security best practices and privacy compliance. Strategic enhancements in these areas would further strengthen its position as a trusted regional tourism resource.

N

Nsoft

nsoft.eu

53

Nsoft is a Lithuanian technology company specializing in hardware and software solutions for business process management, particularly in sectors such as retail, hospitality, and service industries. Their offerings include computerized cash registers, biometric recognition, RFID tags, and ticketing systems, positioning them as a key local player in business technology solutions. The website is professionally designed using WordPress and Elementor, indicating a moderate level of digital maturity with good SEO and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent implemented, though some security headers and policies are missing. The absence of WHOIS data and explicit privacy policies slightly reduces trustworthiness but does not negate the overall legitimacy. Strategic improvements in transparency and security documentation would enhance their risk profile.

Ambit Media a.s. operates a specialized media portal focused on the publication and subscription management of healthcare-related magazines and educational materials primarily targeting healthcare professionals and readers interested in medical topics. The company, founded in 2016 and based in the Czech Republic, offers subscription services, book sales, and educational events, positioning itself as a niche media publisher within the healthcare sector. The website reflects this focus with content primarily in Czech and includes partner links to related healthcare and medical publication sites. From a technical perspective, the website employs a modern tech stack including jQuery, Bootstrap, Google Fonts, and various UI and carousel libraries. It integrates Google Analytics and Google Tag Manager for user tracking and marketing insights. The site is moderately optimized for performance and mobile responsiveness, with good SEO practices and basic accessibility features. Hosting is managed through REG-ZONER, consistent with the domain registration data. Security posture is moderate; while HTTPS is implied and cookie consent mechanisms are in place, explicit security headers and detailed security policies are absent. No critical vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is basic but present, with a privacy policy, cookie banner, and terms of service clearly linked. Contact information is comprehensive, enhancing business credibility. Overall, the website presents a professional and trustworthy front for Ambit Media a.s., with a solid business model and consistent domain registration data. Strategic improvements in security headers, incident response transparency, and enhanced privacy compliance would further strengthen the site’s security and trustworthiness.

M

MERKUR GASTRO

merkur-gastro.de

10

MERKUR GASTRO operates as a specialized partner in the placement and management of gaming machines within the hospitality sector across Germany. The company leverages decades of experience to integrate gaming solutions seamlessly into gastronomy, hotels, and rest stops, enhancing customer engagement and business value. Their business model emphasizes partnership without requiring investments from clients, focusing on providing tailored gaming experiences and activation solutions. The website reflects a professional and consistent brand presence with clear navigation and relevant content for their target audience. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, and Usercentrics for cookie consent, alongside self-hosted Matomo analytics for privacy-conscious tracking. The site is mobile-optimized with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms, though lacking explicit security headers and published security policies. From a security and compliance perspective, the site demonstrates good GDPR compliance with a privacy policy and cookie consent but lacks visible incident response or vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected. The WHOIS data is minimal but does not raise immediate concerns, supporting a moderate legitimacy score. Overall, MERKUR GASTRO presents a trustworthy and professional online presence aligned with its business focus. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance their digital maturity and trustworthiness.

M

MERKUR CASINO GmbH

meingewinn.de

64

MERKUR CASINO GmbH operates a professional career portal targeting job seekers interested in casino and gaming employment opportunities in Germany. The website effectively promotes various job roles and career development options within the MERKUR GROUP, a recognized entity in the hospitality and gaming sector. The site demonstrates consistent branding and provides comprehensive information about employment opportunities, supported by links to related MERKUR group websites and social proof such as Kununu employer reviews. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Maps API, and Usercentrics for consent management, ensuring a responsive and user-friendly experience. Analytics are implemented via Google Analytics and Matomo with proper consent mechanisms, reflecting a mature approach to data privacy. The site is well-optimized for SEO and mobile devices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and integrates cookie consent management effectively. However, it lacks explicit security headers and does not publish a security policy or incident response contacts, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be enhanced with additional best practices. The website is safe for general audiences, with no adult or explicit content detected. The domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness. Strategic recommendations include adding a terms of service page, publishing security policies, and implementing security headers to further strengthen the security and compliance posture.

B

BOSP

bosp.sk

50

BOSP is a Slovak-based manufacturer and e-commerce retailer specializing in handcrafted hiking and work footwear, including specialized shoes for police, military, and firefighters. The company emphasizes quality and advanced footwear technologies such as Goretex and Vibram, targeting outdoor enthusiasts and professionals in Slovakia and surrounding regions. The website presents a professional and consistent brand image with rich product content and clear navigation, supporting a positive user experience. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, Facebook SDK, and Hotjar, hosted on Webglobe infrastructure with DNSSEC and HTTPS enabled, indicating a mature digital presence. Security posture is solid with encrypted connections and bot protection via hCaptcha, though improvements are recommended in security headers and formal security policies. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy or terms of service policies. Overall, the site is trustworthy and well-positioned in its niche, though it would benefit from enhanced transparency and security documentation.

V

Viber Media S.à r.l.

vb.me

69

Viber Media S.à r.l. operates Viber, a global telecommunications platform providing free and secure voice and video calls, messaging, and community features. Owned by Rakuten, Viber targets a broad audience seeking reliable communication tools across mobile and desktop platforms. The website demonstrates a mature digital presence with comprehensive content, strong branding, and multilingual support. Technically, the site leverages WordPress CMS with modern analytics and marketing tools such as Google Analytics, Mixpanel, and Google Tag Manager, hosted likely on Akamai infrastructure, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS enforced, cookie consent mechanisms, and some security best practices observed, though explicit security headers could be confirmed. Privacy compliance is well addressed with detailed policies and GDPR-aligned consent. The absence of public WHOIS data indicates privacy protection, common for large brands, and does not detract from legitimacy. Overall, the site is professional, trustworthy, and well-structured, supporting Viber's market position as a leading communication service.

I

Institut vzdělávání APSS ČR

institutvzdelavani.cz

47

Institut vzdělávání APSS ČR is a well-established educational institution in the Czech Republic specializing in accredited courses and training for social service workers. The organization operates since 2010 and is affiliated with the Asociace poskytovatelů sociálních služeb ČR (APSS ČR), positioning itself as a key player in the professional development of social workers across the country. Their offerings include open courses, tailored training for organizations, and innovative virtual reality training modules. The website reflects a professional and consistent brand image with clear contact information and a focus on practical, interactive education.

F

FOREGROUND s.r.o.

4g.cz

49

FOREGROUND s.r.o. operates as a Czech advertising and graphic design agency offering comprehensive services including web development, branding, and printed graphics. The company targets businesses seeking professional marketing and advertising solutions. The website is professionally designed, mobile-optimized, and uses modern web technologies such as jQuery, Bootstrap, and Swiper, with analytics integration via Google Analytics and Tag Manager. However, the absence of WHOIS data and privacy policies indicates gaps in transparency and compliance. Security posture is moderate with HTTPS enabled and CSRF tokens present, but lacks explicit security headers and incident response information. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security best practices.

The website at saugierdve.lt/login serves as a login portal for GRIFS AG, a company presumably operating in Lithuania given the domain and registrar information. The site is primarily functional with a focus on user authentication, featuring branding elements but lacking detailed business descriptions or public-facing content. The technical infrastructure includes standard web technologies such as Google Analytics and Google Tag Manager for tracking, Google Fonts for typography, and Font Awesome for icons. The domain is registered with a Lithuanian registrar, UAB "Interneto vizija", since 2016, indicating a stable and legitimate presence. From a security perspective, the site uses HTTPS, but no explicit security headers were detected in the provided data. There is no visible privacy policy, cookie policy, or terms of service on the login page, which raises compliance concerns, especially regarding GDPR. No contact information or incident response channels are exposed, limiting user support and security communication. The site does not appear to be behind a WAF or security challenge, allowing full content access. Overall, the website demonstrates a basic level of technical implementation suitable for a corporate login portal but lacks comprehensive privacy and security disclosures. The absence of contact and policy information may impact user trust and regulatory compliance. Strategic improvements in these areas would enhance the site's security posture and business credibility.

Customize.cz, s.r.o. is a Czech-based company specializing in personalization solutions for e-commerce websites. Their core offering is personalized recommendation boxes that help online shops increase sales and customer satisfaction by analyzing user behavior in real-time and dynamically presenting relevant products. The company operates on a commission-based business model tied to conversion orders, positioning itself as a niche player in the Czech and Slovak e-commerce personalization market. The website is professionally designed, mobile-optimized, and provides clear contact channels and customer testimonials, supporting a trustworthy business image. Technically, the website uses a modern front-end stack including Bootstrap, jQuery, and popular UI libraries like Swiper and Owl Carousel. Google Analytics and a third-party chat service (Suppoo) are integrated for marketing and customer engagement. While the site uses HTTPS and implements a cookie consent banner with detailed user controls, it lacks visible advanced security headers and formal security or incident response policies. The site is accessible without WAF or blocking mechanisms, indicating good availability. From a security perspective, the site demonstrates basic compliance with GDPR through cookie consent and privacy policy pages but lacks explicit terms of service, security policy, or vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, showing a domain age consistent with the company's founding date and no privacy protection, enhancing trustworthiness. Overall, Customize.cz presents a solid, professional online presence with moderate technical maturity and basic security posture. Strategic improvements in security headers, formal policies, and enhanced privacy compliance could elevate their security and trust profile further.

A

Asociace výrobců a dodavatelů zdravotnických prostředků

avdzp.cz

45

Asociace výrobců a dodavatelů zdravotnických prostředků (AVDZP) is a well-established Czech healthcare industry association founded in 1992. It represents over 100 Czech manufacturers and suppliers of medical devices and related services, focusing on promoting Czech healthcare solutions domestically and internationally. The association supports its members through advocacy, export assistance, participation in international trade fairs, and collaboration with government bodies and research institutions. Technically, the website uses modern web technologies including Bootstrap, jQuery, and various vendor libraries, with a responsive design and a cookie consent mechanism supporting GDPR compliance. Security posture is moderate with HTTPS usage and cookie consent but lacks explicit security policies and vulnerability disclosures. Overall, the site is professional, trustworthy, and serves its target audience effectively, though improvements in privacy policy publication and security headers are recommended.

AdelZobel.cz is a small Czech Republic-based fashion atelier specializing in bespoke tailoring, children's fashion, and summer camps. The website presents a professional and visually appealing design with clear navigation and mobile optimization. The business targets local customers interested in fashion and tailoring services, including families with children. The domain age and WHOIS data support the legitimacy of the business, with consistent registration details and no privacy protection, which is appropriate for this business type. Technically, the website uses common web technologies such as jQuery, Font Awesome, and Google Fonts. Hosting and domain registration are managed by WEDOS, a Czech provider. The website performance is moderate, with basic SEO and accessibility features. No advanced CMS or frameworks are detected. Security posture is moderate; HTTPS is implied but security headers are missing, and no vulnerability disclosures or security policies are published. From a security and compliance perspective, the site lacks privacy and cookie policies, which is a compliance gap under GDPR. Contact information is clearly provided, including a contact form, phone number, and email. No analytics or tracking scripts are detected, indicating minimal user tracking. No adult or explicit content is present, making the site safe for general audiences. Overall, the website is functional and professional but would benefit from improved privacy compliance, enhanced security headers, and published security policies to strengthen trust and compliance posture.

The website metodickyweb.cz is an educational portal focused on providing teaching ideas and inspiration for integrating information technologies into education. It targets educators and educational professionals primarily in the Czech Republic. The platform offers methodical cards, user registration for enhanced interaction such as commenting and rating, and a catalog of educational content. The business appears to be a small-scale specialized educational service established around 2015, with consistent branding and a clear focus on its niche. Technically, the site uses a basic but functional technology stack including jQuery and Font Awesome, hosted by WEDOS, a Czech hosting provider. The site is moderately optimized for mobile and SEO, with a clean design and good user experience. However, there is room for improvement in accessibility and performance optimization. No advanced CMS or frameworks are detected. From a security perspective, the site lacks important security headers and uses GET methods for sensitive forms like login and registration, which is a security concern. There is no visible privacy or cookie policy, indicating compliance gaps with GDPR and related regulations. The absence of incident response contacts and vulnerability disclosure mechanisms further limits the security maturity. No WAF or blocking mechanisms are detected, and the domain registration data aligns well with the website content, supporting legitimacy. Overall, the website is functional and trustworthy for its educational purpose but requires enhancements in security practices and privacy compliance to improve its risk posture and user trust.

Flatimi s.r.o. operates a professional real estate website focused on rental and sale of apartments and houses primarily in Prague and the Central Bohemian region. The company positions itself as a direct buyer and investor, offering comprehensive services from inquiry to contract signing. The website is well-structured, with clear navigation and contact options, targeting individuals and investors interested in local real estate. The business is small-sized, founded in 2019, and maintains a consistent brand presence online. Technically, the website employs modern web technologies including Bootstrap, jQuery, Font Awesome, Google Maps API, and Google reCAPTCHA for security. Hosting is managed via websupport.cz, a known Czech hosting provider. The site is mobile-optimized and SEO-friendly with proper meta tags and Open Graph data. Cookie consent is managed via CookieYes, reflecting attention to privacy compliance. Security posture is solid with HTTPS enforced, use of reCAPTCHA to prevent spam, and a detailed GDPR privacy policy presented in Czech. However, there is room for improvement by adding explicit security headers and publishing incident response contacts or a security.txt file. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional front for a local real estate business with good privacy compliance and technical implementation. Strategic improvements in security transparency and accessibility could further enhance trust and compliance.

E

Euroregion Silesia - CZ

euroregion-silesia.cz

48

Euroregion Silesia - CZ operates as a regional cross-border cooperation entity focused on fostering sustainable development, tourism, and institutional collaboration between Czech and Polish border regions. The organization facilitates EU-funded projects, organizes training and events, and promotes regional tourism products such as the Silesianka trail. The website reflects a well-established entity with a domain registered since 2002, indicating long-term presence and legitimacy. The content is primarily in Czech and targets local municipalities, institutions, and potential project applicants. Technically, the website uses modern web technologies including Bootstrap, jQuery, Font Awesome, and Google Analytics, hosted by Active24. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy compliance is basic with a cookie consent mechanism but lacks a dedicated privacy policy or terms of service pages. Overall, the website is professional, trustworthy, and serves its audience effectively.

Středisko korespondenčních kurzů operates as a small educational entity based in the Czech Republic, providing distance learning Bible study courses through both online and postal formats. The organization targets individuals interested in religious education and personal development, offering free course materials supported by donors and sponsors. The website is professionally designed with clear navigation and detailed course offerings, supporting user registration and communication via contact forms. Technically, the site employs AngularJS 1.8.2, Bootstrap, jQuery, and integrates live chat and cookie consent tools, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the use of an older JavaScript framework and lack of explicit security headers suggest areas for improvement. Overall, the website is trustworthy, compliant with GDPR basics, and well-aligned with its educational mission.

E

EPUAP 2026

epuap2026.org

46

EPUAP 2026 is a specialized healthcare event website promoting the 25th Annual Meeting of the European Pressure Ulcer Advisory Panel scheduled in Helsinki, Finland. The site targets healthcare professionals and researchers interested in pressure ulcers, providing event details and registration information. The business model centers on conference organization and information dissemination within the healthcare sector. The website is built on WordPress using Elementor and common plugins, reflecting a moderate level of digital maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and explicit security policies. Privacy compliance is limited, with no privacy or terms of service pages detected, though a cookie policy with consent is present. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security measures.

Ž

Žilinská univerzita v Žiline

uniza.sk

60

Žilinská univerzita v Žiline is a well-established public university in Slovakia, providing comprehensive higher education and research services. The website serves as the official digital presence, offering detailed information for students, staff, applicants, researchers, and the general public. It is positioned as a leading national university, evidenced by its top ranking in the THE World University Rankings 2025. The site supports multiple languages and integrates social media channels to engage its audience effectively. Technically, the website is built on Joomla CMS with modern frameworks and libraries, ensuring a good user experience and mobile responsiveness. Security measures such as HTTPS and security headers are implemented, and privacy compliance is addressed through a comprehensive privacy and cookie policy with consent mechanisms. However, there is no explicit terms of service or vulnerability disclosure policy published. Overall, the site demonstrates a mature digital infrastructure aligned with the university's stature and operational needs.

M

MERKUR Casino

merkur-spielhalle.de

48

MERKUR Casino operates over 350 modern gaming halls primarily in Germany and eight other European countries, positioning itself as a market leader in the gambling and hospitality sector. The website serves as a portal for information about their locations, games, prevention measures, career opportunities, and corporate information. The business model focuses on physical gaming halls with strong regulatory compliance, including age verification and prevention information. The parent company is the Gauselmann Group, a well-established entity in the industry. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Font Awesome, and integrates Usercentrics for GDPR-compliant cookie consent and Matomo for analytics. The site is mobile-optimized with good navigation and SEO practices. Hosting details are not explicit but the domain and name servers indicate stable professional hosting. From a security perspective, the site enforces HTTPS and uses a consent management platform, but lacks explicit published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The site does not use privacy protection on WHOIS, enhancing trustworthiness. The gambling nature requires adult content warnings and age verification, which are implemented. Overall, the website is professional, secure, and compliant with privacy regulations, serving a mature audience in the gambling sector. Recommendations include publishing explicit security policies, adding security headers, and implementing a vulnerability disclosure mechanism to further enhance security posture.

H

Hotel St. Florian

hotelstflorian.cz

10

Hotel St. Florian is a small hospitality business located in the historic center of Loket, Czech Republic, offering comfortable accommodation with a focus on cultural heritage and local experiences. The website presents a professional and consistent brand image, highlighting key services such as lodging, group accommodations, and unique culinary experiences tied to the family business group. Technically, the site is built on WordPress with modern front-end libraries and plugins, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and some security plugins, but lacks visible security headers and formal privacy/cookie policies. Overall, the domain appears legitimate though WHOIS data is privacy protected, which is common for this business type. Strategic improvements in privacy compliance and security headers would enhance trust and compliance.

T

tovi

tovi.cz

34

tovi.cz is a Czech-based small technology company specializing in custom web and mobile application development, web design, process automation, and digital marketing services such as SEO and PPC. Founded in 2017, the company presents a professional portfolio of completed projects and transparent pricing examples, targeting businesses seeking tailored digital solutions. The website is well-structured, mobile-optimized, and uses modern web technologies including Google Fonts, Font Awesome, and jQuery, with analytics integrated via Google Analytics and Tag Manager. Security posture is moderate with HTTPS usage implied but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies, which is a notable gap given GDPR requirements. Contact information is clearly provided with email, phone, and a contact form, enhancing business credibility. Overall, the site is professional and trustworthy but would benefit from improved privacy and security disclosures.

S

South East Asia – liaison, z. s.

sea-l.cz

57

South East Asia – liaison, z. s. (SEA-l) is a small non-profit organization established in 2014, dedicated to fostering cultural understanding and integration between the Czech Republic and Vietnam, as well as Southeast Asia more broadly. The organization offers a wide range of services including information dissemination, integration projects, intercultural work, consulting, lectures, exhibitions, translation, cultural events, and language education. Their target audience primarily consists of the Vietnamese community in the Czech Republic and individuals interested in Southeast Asian culture. The website is professionally designed using Umbraco CMS and common front-end technologies, providing good user experience and clear navigation. Contact information is comprehensive and includes multiple communication channels.

E

Erudyt.cz

erudyt.cz

42

Erudyt.cz is a Ukrainian Saturday school based in Prague, Czech Republic, providing Ukrainian education to children living abroad. The school offers education from grades 1 to 11 with the possibility of obtaining an official Ukrainian state certificate. It has been operating for over 10 years and collaborates with the International Ukrainian School in Kyiv. The website is built on WordPress, uses common web technologies, and is hosted on servers associated with fcomet.com. Contact information including phone numbers, email, and physical address is clearly provided. However, the site lacks privacy and cookie policies, security headers, and incident response information, which are areas for improvement. The content is safe, educational, and culturally focused, targeting Ukrainian families in the Czech Republic.

M

Mywebgrid s.r.o

svetlahvi.cz

48

SvetLahvi.cz is a Czech Republic based e-commerce retailer specializing in glass bottles, preserving jars, and related accessories for beverages including alcoholic drinks. The company operates on the PrestaShop platform and has been established since 2006, indicating a mature presence in its niche market. The website offers a broad catalog of products with clear pricing and availability information, targeting both consumers and businesses requiring glass packaging solutions. Technical infrastructure includes modern web technologies such as jQuery, Google reCAPTCHA, and Font Awesome, hosted likely with Czech providers consistent with the domain registration data. Security posture is adequate with HTTPS and CAPTCHA protections, but lacks some advanced HTTP security headers and formal security policies. Privacy compliance is partial, with a cookie consent banner present but no visible privacy or terms of service pages. Overall, the site is professional, functional, and trustworthy with room for improvement in compliance and security transparency.

S

STILLUS s.r.o.

stillus.cz

54

STILLUS s.r.o. is a well-established advertising agency based in Břeclav, Czech Republic, recognized as one of the largest and most successful in South Moravia. The company offers a broad range of services including graphic design, large format printing, 3D and light advertising, promotional items, textiles, gift packaging, and web services. Their market position is strong within their regional niche, targeting businesses seeking comprehensive advertising and promotional solutions. The website reflects a professional digital presence with modern design and clear navigation, supported by WordPress and Elementor technologies. Integration of Google Analytics and Tag Manager indicates a mature approach to digital marketing and user behavior analysis. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the website content and business information appear legitimate and consistent. Overall, STILLUS s.r.o. demonstrates a solid business and technical foundation with room for enhanced security practices.

C

CADENAS PARTsolutions

partsolutions.com

57

CADENAS PARTsolutions operates as a leading provider of digital solutions for industrial manufacturers, specializing in 3D CAD models, component software, and product catalogs. Their website reflects a mature business with a strong market position, offering services that enhance engineering efficiency and sales through digital product configurators and strategic parts management. The company targets industrial manufacturers and engineers globally, supported by multilingual site options and a professional online presence. Technically, the website is built on WordPress with modern performance optimizations including NitroPack and AJAX search capabilities. The infrastructure supports fast loading times and good mobile responsiveness, leveraging common web technologies and frameworks such as Bootstrap and jQuery. SEO and accessibility are adequately addressed, though accessibility could be improved further. From a security perspective, the site enforces HTTPS and includes several security headers, but lacks a publicly available security policy, incident response contacts, or vulnerability disclosure mechanisms. DNSSEC is not enabled, which is a recommended enhancement. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid baseline security posture. Overall, the website is trustworthy, professional, and well-aligned with the company’s business objectives. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and enhancing accessibility compliance to further strengthen trust and security posture.

C

Crystal BOHEMIA a.s.

24crystal.cz

39

Crystal BOHEMIA a.s. operates the e-commerce website 24crystal.cz, specializing in the sale of crystal glassware and related decorative and gift products. The company targets consumers interested in high-quality crystal products, positioning itself as a niche retailer within the Czech Republic. The website provides a professional online shopping experience with clear navigation and detailed terms of service, reflecting a mature business model founded in 2019. Technically, the website employs common JavaScript libraries such as jQuery, Slick Carousel, and tracking tools including Google Analytics and Facebook Pixel. The site is hosted under the registrar REG-WEBGLOBE and uses HTTPS, ensuring secure communication. However, the site lacks explicit privacy and cookie policies and does not implement visible security headers, indicating areas for compliance and security improvement. From a security perspective, the website shows a moderate posture with no detected vulnerabilities or blocking mechanisms. The absence of privacy and cookie consent mechanisms presents compliance risks under GDPR. Contact information is clearly provided, enhancing business credibility. The content is safe for general audiences but includes mature content related to alcohol products. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and better mobile optimization to strengthen trust and regulatory adherence.

NaturallookingSmiles is a niche gaming blog focused on legendary PlayStation 1 games, providing reviews, guides, and gaming news targeted at enthusiasts of classic PS1 titles. The website is built on WordPress with Yoast SEO plugin, uses Cloudflare DNS, and includes standard web technologies such as jQuery and Font Awesome. The site demonstrates good content quality and basic mobile optimization but lacks comprehensive privacy, cookie, and security policies. No contact information or social media presence is provided, limiting business credibility and user trust. Security posture is basic with HTTPS enabled but missing DNSSEC and security headers, and the domain WHOIS data shows inconsistencies that reduce trustworthiness.