Security Directory

H

HFO Health Facility Operations Services GmbH

vamed-care.com

45

VAMED care operates a network of over 60 healthcare facilities across Germany, Austria, Switzerland, and the Czech Republic, specializing in acute medical care, rehabilitation, nursing, and prevention. With a workforce exceeding 13,000 employees, the organization emphasizes medical and therapeutic excellence, aiming to improve patient well-being and quality of life. The website reflects a professional healthcare provider targeting patients, medical professionals, and potential employees, offering detailed information about services and career opportunities. Technically, the website employs modern web technologies including jQuery 3.6.0 and custom JavaScript for interactive features such as cookie consent management and image sliders. The site is mobile-optimized with good SEO practices and a clear navigation structure. However, no CMS or hosting provider details are evident, and no advanced frameworks are detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, it lacks visible security headers and explicit incident response or security policy disclosures. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and business information appear consistent and professional. Overall, the website presents a trustworthy and professional healthcare service provider but would benefit from enhanced transparency in domain registration, improved security headers, and clearer contact information for security and compliance inquiries.

P

Profigrass s.r.o.

profigrass.cz

56

Profigrass s.r.o. is a Czech-based company specializing in the retail and service of irrigation and garden equipment, established in 1996. The company represents the American brand Toro in the Czech and Slovak markets, leveraging extensive experience in sales, service, and marketing. Their website serves both B2B and B2C customers, offering a broad range of products including control units, valves, pumps, and accessories for irrigation systems. The company targets private gardens, commercial parks, sports fields, and agricultural sectors. Technically, the website is built on the Shoptet e-commerce platform, utilizing standard web technologies and tracking tools such as Google Analytics and Microsoft Clarity. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and cookie consent implemented, though some security headers and updated libraries are recommended. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear legitimate and professional. Overall, the site demonstrates a solid digital presence with room for security and compliance enhancements.

Coworking Příbram z.s. is a small local business providing coworking spaces, meeting rooms, and office rentals in the center of Příbram, Czech Republic. The company targets freelancers, remote workers, and small businesses seeking flexible office solutions with amenities such as fast WiFi, coffee, and 3D printing. Their business model is membership and rental-based with tiered pricing plans and daily access options. The website is professionally designed with clear navigation and relevant content, supporting their market position as a community-focused coworking provider. Technically, the website uses modern frontend technologies including Bootstrap, jQuery, and Owl Carousel, with Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well, though accessibility and SEO optimizations are basic. No CMS or hosting provider details are evident. Security practices are minimal with no detected security headers or privacy policies, indicating room for improvement in compliance and protection. Security posture is moderate; HTTPS is assumed but no explicit security headers or privacy policies are present. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is consistent with the business claims, showing domain registration in 2021, appropriate for a small startup. Contact information is clear and trustworthy, with no suspicious external links or content detected. Overall, the website is functional and professional but lacks critical privacy and security policies. Strategic improvements in security headers, privacy compliance, and incident response readiness are recommended to enhance trust and regulatory adherence.

C

CNC Obrábění Pavlišen

cncobrabenipavlisen.cz

41

CNC Obrábění Pavlišen is a small Czech manufacturing business specializing in CNC machining, metalworking, and locksmith services. The company offers both serial and custom production of machine parts and tools using modern CNC equipment. Their website presents basic business information, including contact details and product images, targeting local industrial clients. The technical infrastructure is simple, relying on standard HTML and CSS without advanced frameworks or CMS. The site lacks privacy and cookie policies, security headers, and visible HTTPS confirmation, indicating a minimal security posture. No forms or tracking technologies are present, suggesting limited data collection. Overall, the business appears legitimate and consistent with its domain registration data, but the website could improve in security and compliance aspects.

B

Bc. Jiří Trnka

musicgate.cz

44

MUSICGATE.cz is a Czech Republic-based media portal specializing in music-related content including news, event invitations, press releases, photo and video reports, interviews, and reviews. Founded in 2016 and operated by Bc. Jiří Trnka, the site targets music enthusiasts primarily within the Czech Republic. The business model revolves around content publishing supported by advertising partnerships and sponsored banners. The portal maintains a consistent brand presence and offers a comprehensive range of music-related services, positioning itself as a niche leader in the Czech music media space. Technically, the website employs a custom CMS with a technology stack including jQuery, jQuery UI, Google Fonts, and standard web technologies. Hosting is linked to the registrar REG-GRANSY and nameserver svethostingu.eu. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Advertising is managed primarily through the Sklik network, with transparent ad placements and cookie consent mechanisms in place. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers such as CSP or HSTS. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. However, the site lacks a formal security policy or vulnerability disclosure mechanism. Overall, the security posture is adequate but could be improved with additional headers and incident response documentation. The overall risk assessment is low, with no signs of malicious content or blocking mechanisms. The site is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic recommendations include enhancing security headers, implementing a security.txt file, and formalizing incident response policies to further strengthen the security posture and user trust.

E-solutions, s.r.o. is a Czech-based technology company specializing in custom internet projects including web development, internet applications, mobile apps, and price monitoring services. With over 21 years of market presence and a solid client base, the company positions itself as a professional and experienced service provider in the Czech Republic. The website reflects a modern and professional digital presence with good design and user experience, supporting both Czech and English languages. Technically, the site uses modern JavaScript libraries, Google Analytics, Tag Manager, and Google Maps API, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and cookie consent implemented, though some security headers and formal privacy policies are missing. The absence of WHOIS data limits domain trust verification, but the detailed contact information and business presentation support legitimacy. Overall, the website is a reliable representation of a small technology service company with room for improvement in privacy and security transparency.

ALARIS Czech Republic s.r.o. is a Czech company specializing in manufacturing and retailing high-quality shading systems including bioclimatic pergolas, screen roller blinds, aluminum sunshades, and carports. The company positions itself as a modern, design-focused brand serving residential and commercial customers seeking aesthetic and functional outdoor shading solutions. The website content is well-structured, professionally designed, and provides detailed product information and company background. Technically, the website uses modern web technologies including JavaScript, CSS, and a chatbot widget, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and explicit incident response information suggests room for improvement. The lack of WHOIS data for the domain is a notable concern, reducing trust in domain legitimacy despite the professional appearance and business information presented. Overall, the website is safe, compliant with GDPR, and trustworthy for general users.

W

Wellness resort Jánošíkov dvor

janosikovdvor.sk

56

Wellness resort Jánošíkov dvor is a hospitality business located in Slovakia, offering accommodation in traditional wooden cottages, wellness services, and a restaurant with traditional Slovak cuisine. The website positions the resort as a regional wellness destination in the Malá Fatra National Park, targeting families, couples, and corporate clients for events and teambuilding. The business is part of the Absolutum Group, indicating a structured corporate backing. Technically, the website uses modern web technologies including JavaScript libraries, lazy loading, and Google reCAPTCHA for form security. It is mobile optimized and provides multilingual support. Security posture is good with HTTPS and consent mechanisms, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

D

David Houška

lodartemis.cz

54

Artemis Boat Club, represented by David Houška, is a small-scale service provider based in Prague, Czech Republic, specializing in boat trips, excursions, and networking events. The website is professionally designed using the Wix platform and targets a general audience interested in leisure and networking activities on boats. The business operates locally within the transportation sector, focusing on experiential services rather than product sales. Technically, the website leverages Wix's infrastructure with modern web technologies, ensuring moderate performance and good mobile optimization. However, the site lacks advanced SEO and accessibility features. Security-wise, the site uses HTTPS but lacks important security headers and privacy compliance mechanisms such as cookie consent and privacy policies. The absence of WHOIS data reduces domain trustworthiness, though the visible content and structured data suggest a legitimate business presence. Overall, the website is functional and professional but requires improvements in privacy, security, and transparency to enhance trust and compliance.

P

Poradce podnikatele

pp.cz

56

The website 'Poradce podnikatele' appears to be a Czech business advisory platform aimed at entrepreneurs and business owners. It provides guidance and information related to business operations, although explicit details about services and company information are limited. The domain is well-established, created in 1999, and WHOIS data aligns with a Czech business presence, supporting legitimacy. Technically, the site uses Bootstrap 5.3.3 and Google Fonts, indicating a modern but basic frontend implementation. Mobile optimization appears good, but accessibility and SEO are basic. Security posture is weak due to lack of security headers, privacy policies, and contact information for incident response. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the site is safe for general audiences with no adult or questionable content detected.

M

Městský úřad Votice

mesto-votice.cz

45

The website www.mesto-votice.cz serves as the official online portal for the town of Votice, Czech Republic. It provides residents and visitors with municipal information, news, public services, event calendars, and contact details. The site is clearly targeted at local citizens and stakeholders interested in town governance and community activities. The business model is that of a government municipal service portal, focusing on transparency and public communication. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google services like Maps and Translate to enhance user experience and accessibility. The site demonstrates good mobile optimization and accessibility features, with a clear navigation structure and consistent branding. From a security perspective, the site uses HTTPS, which is a fundamental security measure. However, it lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance and enhanced security posture. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data is a concern for domain legitimacy but does not directly impact the website's operational security. Overall, the website is a well-maintained municipal portal with good content quality and user experience. Strategic improvements in security headers, privacy compliance mechanisms, and domain registration transparency would enhance trust and security posture significantly.

M

Město Benešov

benesov-city.cz

50

The website benesov-city.cz serves as the official digital portal for the city of Benešov, Czech Republic. It provides residents and visitors with comprehensive municipal information, including news, events, public services, and administrative contacts. The site is well-positioned as a government entity portal, offering key services such as online citizen services, event calendars, and official announcements. The target audience primarily consists of local citizens and visitors seeking city-related information and services. From a technical perspective, the website employs a traditional web stack with HTML5, CSS, and JavaScript, leveraging the Vismo CMS platform. It integrates modern tools such as Google Analytics for visitor tracking and Google reCAPTCHA for form security. The site is hosted under a Czech registrar with a domain age dating back to 1998, indicating a mature and stable online presence. Mobile optimization and accessibility features are well implemented, contributing to a positive user experience. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms. Cookie consent mechanisms comply with GDPR requirements, enhancing privacy compliance. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, representing an area for improvement. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively serves its role as a municipal information hub with good technical and security practices. Strategic recommendations include enhancing security headers, publishing a formal security policy, and considering a vulnerability disclosure program to further strengthen security posture.

N

NEXT REALITY GROUP a.s.

nextreality.cz

61

NEXT REALITY GROUP a.s. operates a professional real estate website targeting clients and partners across the Czech Republic. The company emphasizes honesty, quality client care, and professional service, offering property sales, rentals, and franchise opportunities. The website is well-structured, with clear navigation and a professional design that supports its market position as a significant player in the Czech real estate sector. Technically, the site employs modern web technologies including Google Analytics, Microsoft Clarity, and CookieHub for analytics and cookie management, alongside a chatbot for customer interaction. The site is mobile-optimized and uses HTTPS to secure communications. Security posture is generally good with enforced HTTPS and cookie consent mechanisms; however, the absence of visible security headers and explicit security policies suggests room for improvement. The WHOIS data is missing, which impacts trust and transparency, but the website content and business information appear legitimate and professional. Overall, the site is safe, GDPR compliant, and provides a positive user experience.

E

Edacy SA

edacy.com

55

Edacy SA operates a French-language online education platform specializing in intensive 3-month bootcamp programs focused on technology, artificial intelligence, product management, UX/UI design, and entrepreneurship. The company targets individuals seeking career transformation in tech, primarily in West Africa and French-speaking regions, offering project-based learning, mentorship, and strong employability support. The website is professionally designed with clear navigation and good mobile optimization, leveraging Google Tag Manager for analytics. However, the absence of privacy and cookie policies and missing WHOIS registration data present compliance and transparency concerns. Security posture is moderate with HTTPS usage but lacks explicit security headers and published security policies. Overall, Edacy presents a credible educational service with room for improvement in privacy compliance and security transparency.

S

SmartMailer.cz

smartmailer.cz

53

SmartMailer.cz is a Czech-based small technology company founded in 2021, offering a SaaS email marketing platform tailored for businesses, especially e-commerce users on Prestashop and WooCommerce. The platform provides easy-to-use tools for creating and managing email campaigns, newsletter automation, and detailed campaign analytics. The business model is subscription-based with tiered pricing according to the number of contacts. The website is professionally designed, multilingual, and provides clear contact and legal information, positioning SmartMailer as a trustworthy niche player in the Czech and Slovak markets. Technically, the website uses modern web technologies including JavaScript, Google Analytics, and Google reCAPTCHA for security and analytics. Hosting is inferred to be with WEDOS, a Czech hosting provider. The site is mobile optimized with good SEO practices but lacks some accessibility features. Security posture is solid with HTTPS and anti-spam measures on forms, though it lacks published security policies and some HTTP security headers. From a security and compliance perspective, the site does not publish a privacy or cookie policy, which is a notable GDPR compliance gap. The terms of service are comprehensive and available via a modal on the homepage. No incident response or vulnerability disclosure information is provided. WHOIS data is consistent with the business claims, showing no suspicious patterns. Overall, the site is safe, professional, and business-focused with room for improvement in privacy compliance and security transparency. Strategic recommendations include publishing privacy and cookie policies with consent mechanisms, adding security headers, and providing incident response contacts to enhance trust and compliance. These improvements will strengthen the security posture and regulatory adherence, supporting business growth and customer confidence.

D

DeepCloud

deepcloud.swiss

64

DeepCloud AG is a Swiss technology company specializing in AI-powered cloud services designed to optimize collaboration, efficiency, and business performance. The company positions itself as a trusted partner for digital transformation, offering a comprehensive ecosystem of integrated solutions tailored to the Swiss market and compliant with international standards such as ISO 27001:2022. Their product suite includes services for document sharing, digital signatures, digital identity, data capture AI, data visualization, banking integrations, secure communications, business management, and signature validation. Technically, the website is built on WordPress with modern SEO and analytics tools, including Google Tag Manager, Matomo, and LinkedIn Insight, all implemented with user consent mechanisms. Security posture is strong, with HTTPS enforced and ISO certification, though some security headers could be improved. The domain WHOIS data is privacy protected, which is typical for Swiss domains and justified for this business type. Overall, DeepCloud demonstrates a mature digital presence with a professional, secure, and privacy-conscious approach.

B

Boutique CentraleSupélec

boutique-centralesupelec.com

64

Boutique CentraleSupélec is an official e-commerce merchandise store serving the CentraleSupélec community, including students, alumni, faculty, and partners. The website offers branded textiles, accessories, and goodies to reinforce the institution's identity and community belonging. The site is built on the Shopify platform, leveraging standard Shopify technologies and integrations, hosted on Google Cloud infrastructure. It features a cookie consent mechanism and privacy policy compliant with GDPR, presented in French. However, no explicit contact information or terms of service pages are found, which could be improved for transparency and trust. The domain WHOIS data shows an anomalous future creation date, which may be a data error but warrants attention. Security posture is generally good with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Overall, the site is professional, accessible, and trustworthy for its niche audience.

D

Online procvičování DRILL & SKILL

drillandskill.com

40

The website 'Online procvičování DRILL & SKILL' is an educational platform primarily targeting Czech-speaking students and teachers. It offers ready-made and customizable drills across various subjects including math, chemistry, natural sciences, and geography. The platform aims to save schools money on paper and teachers time by providing efficient online practice tools. The market position is niche, focusing on educational institutions in the Czech Republic with a small-scale operation. Technically, the website uses standard web technologies such as HTML5, CSS, JavaScript with jQuery and Shadowbox.js for video content. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. There is no detected CMS or hosting provider information. The site is functional with a login form but lacks modern security headers and visible HTTPS confirmation. From a security perspective, the site shows basic security hygiene with POST method login forms but lacks critical security headers like Content-Security-Policy and anti-CSRF protections. No privacy or cookie policies are present, indicating poor privacy compliance. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and trustworthiness despite the professional and safe content. Overall, the website is a functional educational tool with moderate technical quality but significant gaps in security, privacy compliance, and domain registration transparency. Strategic improvements in security posture, privacy policies, and domain legitimacy verification are recommended to enhance trust and compliance.

Č

Česká lingvistická olympiáda

lingol.cz

43

The website www.lingol.cz represents the Česká lingvistická olympiáda, a Czech national educational competition focused on linguistics for high school students. It is co-organized by faculties of Charles University and supported by the Ministry of Education and Palacký University. The site provides information about the competition, its structure, and participation details, targeting students and educators interested in linguistic problem-solving. The business model is non-profit and educational, with a small organizational size and a clear focus on academic collaboration. Technically, the website uses standard web technologies including jQuery, Highcharts, and DataTables for interactive content presentation. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features and modern frameworks. No CMS or hosting provider details are evident. The site is well-branded and professionally designed with consistent navigation and clear content structure. From a security perspective, the site lacks visible security headers and published privacy or cookie policies, which impacts compliance and trust. The WHOIS data is missing, which reduces transparency and trustworthiness, although the site’s academic affiliations mitigate some concerns. No WAF or blocking mechanisms were detected, and no vulnerabilities or exposed sensitive data were found in the provided content. Overall, the website is a credible educational resource with good content quality and business credibility but requires improvements in security posture, privacy compliance, and transparency to enhance trust and compliance with modern standards.

K Faktor is a certified testing laboratory specializing in measuring physical risk factors in both occupational and non-occupational environments within the Czech Republic. The company offers a range of accredited services including lighting intensity measurement, noise and vibration analysis, dust measurement, microclimate condition assessments, and energy audits. Their market position is supported by official accreditation and a clear focus on safety and compliance with government regulations. The website reflects a small but professional business targeting clients who require certified environmental and workplace safety measurements. Technically, the website is built using modern web technologies such as Bootstrap 5.1.3, ensuring responsive design and good user experience across devices. Hosting is managed via websupport.cz, a known Czech hosting provider. The site is moderately performant with good SEO practices but lacks advanced accessibility features. No CMS or analytics tools are detected, indicating a simple but effective technical infrastructure. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable scripts. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is available, which could be improved to enhance trust and security posture. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user confidence.

V

Vyšší odborná škola, Střední průmyslová škola a Střední odborná škola, Varnsdorf, příspěvková organizace

skolavdf.cz

47

The website represents Vyšší odborná škola, Střední průmyslová škola a Střední odborná škola, Varnsdorf, a public educational institution in the Czech Republic offering secondary and higher vocational education. It targets students and prospective students with detailed program offerings, events, and student services. The institution maintains a professional online presence with clear branding and comprehensive content relevant to its educational mission. Technically, the website is built with standard web technologies (HTML5, CSS3, JavaScript) and is well-optimized for mobile devices. It uses HTTPS with a good SSL configuration and includes privacy-first cookie consent mechanisms without marketing or tracking cookies, reflecting a strong commitment to user privacy. The site lacks some advanced security headers but follows good security practices overall. Security posture is solid with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data limits domain trust verification, but the presence of official contact information, certifications (ISO 9001), and GDPR compliance indicate a legitimate and trustworthy institution. No signs of malicious or adult content were found, making the site safe for general audiences. Overall, the website scores well on content quality, technical implementation, security, privacy compliance, and business credibility. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding vulnerability disclosure information to further strengthen trust and security.

S

Střední uměleckoprůmyslová škola sklářská Valašské Meziříčí

sklarskaskola.cz

28

Střední uměleckoprůmyslová škola sklářská Valašské Meziříčí is a specialized secondary educational institution focused on glass art, design, and related artistic crafts. The school offers various study programs including glass design, applied painting, industrial design, and artistic crafts, targeting students interested in these creative fields. The website reflects a professional and consistent brand presence with clear navigation and relevant content for prospective students and parents. Technically, the site uses modern web technologies such as jQuery, Google Fonts, and Lottie animations, providing a visually engaging experience, though mobile optimization and accessibility could be improved. Security-wise, the site uses HTTPS and Google Analytics but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the website content and contact information appear trustworthy. Strategic improvements in security headers, privacy compliance, and domain registration verification are recommended.

A

ART ECON

artecon.cz

38

ART ECON is a Czech-based educational organization with a website focused on promoting educational services or institutions, as indicated by the slogan 'Školy plné talentu'. The site uses WordPress CMS with the Divi theme and includes common tracking technologies such as Facebook Pixel, Microsoft Clarity, and Google Tag Manager. The technical infrastructure is moderate with basic mobile optimization and SEO practices. However, the site lacks critical privacy and security policies, contact information, and security headers, which lowers its overall security posture and privacy compliance. No WAF or blocking mechanisms were detected, and the content is safe for general audiences.

W

Witzenmann Opava, spol. s r.o.

witzenmann.cz

64

Witzenmann Opava, spol. s r.o. is a manufacturing company specializing in flexible metal components such as metal hoses, compensators, and bellows, serving industries including automotive, aerospace, and industrial sectors. The company is part of the Witzenmann Group with a global presence across 16 countries and 22 subsidiaries. Their website is professionally designed, multilingual, and provides comprehensive product and solution information targeting B2B customers. Technically, the site uses modern web technologies including Usercentrics for consent management and Google Tag Manager for analytics, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and consent mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the domain registration and WHOIS data align well with the business identity, indicating a legitimate and trustworthy entity.

Základní škola Sušice, Lerchova ulice, is a primary educational institution serving the local community in the Czech Republic. The website provides information about school activities, projects, events, and educational resources primarily targeting students, parents, and school staff. The school holds a recognized certification from Scio, indicating a commitment to educational quality. The website content is well-structured with regular updates and photographic documentation of school events, reflecting active community engagement. Technically, the website employs a basic but functional technology stack including HTML, CSS, JavaScript, and a third-party cookie consent library. Hosting is provided by Active24, a known Czech hosting provider. The site lacks advanced CMS or modern frameworks and shows basic mobile optimization and accessibility features. SEO is minimal but sufficient for the target audience. From a security perspective, the site implements a cookie consent banner but lacks visible HTTPS enforcement confirmation, security headers, or published security policies. No forms or sensitive data collection mechanisms are present, reducing immediate risk exposure. However, the absence of explicit privacy and security policies and lack of incident response contacts indicate room for improvement in compliance and security posture. Overall, the website is a functional, community-focused educational portal with moderate technical maturity and basic security measures. Strategic improvements in HTTPS enforcement, security headers, privacy policy clarity, and accessibility would enhance trust and compliance.

V

VOŠ, SŠ, JŠ, ZŠ a MŠ MILLS, s.r.o.

mills.cz

45

The website mills.cz represents a private educational institution in the Czech Republic offering a broad spectrum of educational services including kindergarten, primary, secondary, higher vocational, language education, and lifelong learning programs. The institution appears well-established with a domain age dating back to 2007 and clear physical address information. The website is professionally designed with good navigation and mobile optimization, targeting students and lifelong learners primarily within the Czech Republic. From a technical perspective, the site uses standard HTML5 and CSS3 technologies with Adobe Typekit fonts for typography. Hosting and domain registration are consistent with the Czech-based registrar WEDOS. The website performance is moderate with good SEO practices but lacks advanced frameworks or CMS indications. Accessibility is basic but functional. Security posture is limited based on the provided data. No security headers or HTTPS enforcement details were found, and no privacy or cookie policies are published, which impacts compliance and trust. No contact emails or phone numbers are provided, limiting direct communication channels. No forms or data collection mechanisms are present on the main page, reducing immediate data protection concerns but also limiting user engagement. Overall, the website is safe and suitable for general audiences with no adult or questionable content. The domain registration data supports legitimacy and trustworthiness. Strategic improvements in security headers, privacy compliance, and contact information publication would enhance the site's security and user trust.

C

Charita Opava

charitaopava.cz

53

Charita Opava is a well-established non-profit Catholic organization based in the Czech Republic, providing a broad range of social and health care services including protected housing, social rehabilitation, day care, therapeutic workshops, and senior care. The organization targets residents of the Opava region, donors, volunteers, and partners, positioning itself as a trusted regional social service provider with multiple governmental and community partnerships. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website uses a custom CMS named HandMade, with standard web technologies including HTML5, CSS3, and JavaScript. It integrates multiple Google Analytics and Tag Manager scripts for user tracking and analytics, and implements a cookie consent mechanism compliant with GDPR. The site is mobile optimized with moderate performance and basic accessibility features. From a security perspective, the website enforces HTTPS and uses cookie consent to manage user privacy preferences. However, it lacks explicit security headers and a vulnerability disclosure policy, which are recommended for improved security posture. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's identity. Overall, Charita Opava's website demonstrates a solid digital presence with good privacy compliance and business credibility. Strategic improvements in security headers, accessibility, and explicit security policies would further enhance trust and resilience.

S

Statutární město Opava

opava-city.cz

64

Statutární město Opava operates an official municipal website serving as the primary digital platform for city residents, visitors, and local businesses. The site provides comprehensive information about city governance, public services, news, events, and contact details. It targets a broad audience including citizens, municipal employees, and tourists, positioning itself as a trusted source of local government information. The business model is that of a government service portal, focusing on transparency and community engagement. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript with jQuery, Bootstrap framework, and mapping libraries like Leaflet.js. It uses WebJET CMS for content management and integrates Google Tag Manager and Google Analytics for tracking and analytics. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit privacy policy and terms of service pages, security headers, and incident response contacts, which are areas for improvement. No vulnerabilities or malicious content were detected, and the site maintains a good security posture overall. Overall, the website is a professional and trustworthy municipal portal with good content quality and technical implementation. The absence of WHOIS data limits domain transparency, but the official branding and comprehensive contact information support its legitimacy. Strategic recommendations include publishing privacy and security policies, enhancing security headers, and providing incident response contacts to strengthen compliance and trust.

C

Cercle Communication

cerclecommunication.com

59

Cercle Communication is a small Canadian marketing and communication agency focused on providing personalized and multidisciplinary services to businesses. The website is built on the GoDaddy Website Builder platform, indicating a moderate level of digital maturity with basic technical infrastructure including HTTPS and service worker support. However, the site lacks comprehensive privacy and security policies, contact information, and advanced SEO or accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and incident response contacts. Overall, the website presents a basic but functional online presence suitable for a small agency, with room for improvement in privacy compliance and security best practices.

B

BWH Hotels

bwh.de

55

BWH Hotels operates as a hotel brand offering individual freedom and a strong worldwide network, targeting hotel owners and operators. The website is professionally designed using TYPO3 CMS and Bootstrap, with moderate performance and good mobile optimization. Consent management scripts indicate GDPR awareness, though explicit privacy and terms of service pages are not found. Security posture is adequate with HTTPS enabled but lacks explicit security headers and visible incident response contacts. Overall, the site is trustworthy and safe with no adult or questionable content detected.

M

MapTiler AG

openmaptiles.org

53

OpenMapTiles is an open-source mapping project operated by MapTiler AG, providing vector tiles and map hosting solutions primarily for developers and GIS professionals seeking self-hosted map infrastructure. The website demonstrates a solid market position with trusted partnerships and a strong community presence on GitHub. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics, with good mobile optimization and SEO practices, though some accessibility features could be improved. Security posture is moderate with HTTPS implied but lacking explicit security headers and published policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

D

Diplomeo

diplomeo.com

70

Diplomeo is a well-established French educational orientation platform founded in 2011, serving over 300,000 students annually. It specializes in helping users find suitable diplomas, schools, and career paths in France. The platform offers comprehensive services including diploma and school searches, career guidance, event listings, and school reviews, positioning itself as a market leader in educational orientation within France. Technically, the website employs modern web technologies such as Turbo Frames and StimulusJS, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and formal security policies. Privacy compliance is basic, with cookie consent mechanisms present but no explicit privacy or terms of service pages detected. Overall, the website is professional, trustworthy, and content-rich, though improvements in security and privacy transparency are recommended.

L

Le Télégramme

letelegramme.fr

63

Le Télégramme is a prominent regional news media organization serving the Brittany region in France. The website provides comprehensive local news coverage, digital newspaper editions, and subscription services, targeting residents and readers interested in Brittany's current events. The business model relies on advertising and subscriptions, positioning it as a leading regional news provider with a strong brand presence and consistent content quality. Technically, the website employs modern web technologies including JavaScript, CSS, and privacy management SDKs, with a responsive design optimized for mobile devices. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, with no signs of blocking or malicious activity.

M

město Dobříš

mestodobris.cz

47

The website mestodobris.cz serves as the official online presence of the town of Dobříš, Czech Republic. It provides comprehensive information about the municipality, including local government activities, public services, events, and community resources. The site targets residents, visitors, and stakeholders interested in municipal affairs and local culture. The business model is that of a government entity providing public information and services digitally, with a well-established market position supported by a domain registered since 2003. Technically, the website employs a modern CMS platform (vismo), integrates Google Analytics and Google Tag Manager for analytics, and uses LimeTalk for live chat support. The site is mobile-optimized, accessible, and includes cookie consent mechanisms aligned with GDPR requirements. Hosting is provided by REG-ZONER, a reputable registrar and hosting provider. From a security perspective, the site enforces HTTPS and uses consent-based analytics tracking. However, explicit security headers are not clearly visible in the HTML source, and no published security policy or incident response contacts were found. No vulnerabilities or suspicious content were detected, and the WHOIS data confirms the domain's legitimacy and consistency with the municipal identity. Overall, the website demonstrates a solid digital presence with good privacy compliance and user engagement features. Strategic improvements could include publishing a formal security policy, enhancing security headers, and providing incident response contact information to strengthen trust and security posture further.

C

Centrum pro rodinu a sociální péči z. s.

prorodiny.cz

54

Centrum pro rodinu a sociální péči z. s. is a well-established non-profit organization based in Ostrava, Czech Republic, dedicated to supporting families, relationships, individuals with disabilities, caregivers, and seniors. The organization offers a broad range of services including counseling, education, social support, and community engagement, with a strong focus on inclusivity and social welfare. Their website reflects a mature digital presence with rich content, active event calendars, and social media integration, positioning them as a trusted local entity in the social care sector. Technically, the website employs modern JavaScript libraries and Google Analytics with consent management, ensuring a good user experience and moderate performance. Security posture is adequate with HTTPS and cookie consent but lacks some advanced security headers and explicit privacy policies. The absence of WHOIS data for the domain is a notable concern that slightly impacts trustworthiness, though the website content and social presence strongly indicate legitimacy. Overall, the site is professional, content-rich, and user-friendly, serving its target audience effectively.

C

Centrum sociálních služeb Ostrava, o.p.s.

css-ostrava.cz

49

Centrum sociálních služeb Ostrava, o.p.s. is a well-established non-profit organization founded in 2006, providing a broad range of social services primarily in the Czech Republic. Their services focus on supporting families, children, and individuals in difficult social situations through shelters, crisis centers, family counseling, and social activation programs. The organization maintains a professional web presence with clear navigation and multiple physical locations integrated via Google Maps, enhancing accessibility for their target audience. The website encourages donations and donations with tax deduction benefits, indicating a transparent and community-focused business model. Technically, the website uses modern JavaScript libraries such as Swiper.js and Google Maps API, along with Google Tag Manager for analytics, reflecting a moderate level of digital maturity.

S

Svépomocná společnost Mlýnek, z. s.

klubmlynek.cz

53

Svépomocná společnost Mlýnek, z. s. is a small non-profit organization based in Ostrava, Czech Republic, dedicated to supporting individuals with mental illness. The organization focuses on enabling these individuals to lead meaningful and active lives within their natural environment through various supportive activities and services. The website reflects this mission with clear, relevant content and a consistent brand presence. Technically, the site is built on the Webnode CMS platform, hosted via AWS Cloudfront CDN, and uses Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and uses Google Tag Manager but lacks important security headers and explicit privacy and terms of service documentation. The absence of WHOIS data for the domain raises concerns about transparency and legitimacy, although the website content and hosting appear legitimate. Overall, the site scores moderately on content quality, technical implementation, security posture, privacy compliance, and business credibility, with room for improvement in transparency and security best practices.

C

Centrum pro dítě s diabetem, z.s.

ditesdiabetem.cz

57

Centrum pro dítě s diabetem, z.s. is a Czech non-profit association established in 2004 to support children with type 1 diabetes and related autoimmune conditions. The organization provides educational services and collaborates with regional medical professionals to improve care and support for affected children and their families. The website reflects a small regional non-profit with a clear mission and target audience focused on healthcare education. Technically, the site is built on the Webnode CMS platform, hosted via AWS Cloudfront CDN, and uses modern web technologies with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and privacy compliance mechanisms such as cookie consent and privacy policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and business information appear legitimate. Overall, the site is safe, professional, and serves its niche audience effectively, but improvements in privacy compliance and security best practices are recommended.

R

Renarkon

renarkon.cz

47

Renarkon is a well-established Czech non-profit organization specializing in the prevention and treatment of addiction. Operating since 2003, it serves primarily the Moravian-Silesian region, offering a range of services including addiction treatment, accredited education for professionals, and participation in European projects. The organization maintains a transparent funding model with visible donation options and certifications, positioning itself as a trusted regional leader in healthcare services related to addiction. Technically, the website is built on WordPress with modern plugins such as Spectra Pro and Complianz GDPR for cookie management, ensuring compliance with European privacy laws. The site demonstrates good performance, mobile optimization, and basic accessibility features. Hosting appears to leverage Redis caching for enhanced speed. The technical infrastructure supports a professional online presence with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, reflecting a good security posture. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which are recommended for further strengthening. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, Renarkon’s website reflects a credible, professional, and compliant organization with a strong focus on user privacy and content quality. Strategic improvements in security transparency and incident response readiness would enhance trust and resilience against emerging threats.

M

Mozilla

mozilla.com

72

Mozilla operates the Firefox web browser, a leading privacy-focused and open-source browser available across multiple platforms including Windows, Mac, Linux, Android, and iOS. The website serves as a central hub for downloading Firefox, learning about its features, and accessing support resources. Mozilla's non-profit status and commitment to internet health and privacy position Firefox as a trusted alternative to mainstream browsers. The site demonstrates a mature digital presence with excellent content quality, mobile optimization, and user experience. Technically, the site uses modern JavaScript frameworks, Sentry for error monitoring, and Google Tag Manager for analytics, reflecting a robust and well-maintained infrastructure. Security posture is strong with HTTPS enforced and privacy mechanisms like cookie consent banners implemented, though explicit security policies and incident response contacts are not published on the site. WHOIS data for the domain is unavailable, which is unusual but does not detract significantly from the site's legitimacy given Mozilla's global reputation and consistent branding. Overall, the site is professional, secure, and privacy-conscious, serving a broad audience effectively.

L

La Venelle

lavenelle-montreuil.org

56

La Venelle is a non-profit community organization based in Montreuil, France, focused on promoting solidarity-based reuse and circular economy practices. It hosts nine associations that operate reuse shops, repair workshops, and social insertion employment programs. The organization also offers a café-cantine and hosts cultural events, positioning itself as a local hub for ecological and social initiatives. The website reflects this mission with clear content, community-oriented messaging, and accessible navigation. Technically, the site uses modern web technologies such as Ionic and React, with a moderate performance profile and good mobile optimization. However, it lacks explicit privacy and security policies, and no security headers or vulnerability disclosures are present. The site does not use tracking or analytics scripts, aligning with its privacy-conscious stance. Overall, the website is professional and trustworthy but could improve in privacy compliance and security posture.

D

Dagen

dagen.no

66

Dagen.no is a Norwegian Christian and politically independent daily newspaper offering news, reportages, opinion pieces, podcasts, and digital e-paper services. The website targets Norwegian-speaking audiences interested in religious and general news content. It operates on a subscription and advertising business model, with a paywall and user authentication mechanisms in place. The site is professionally designed with consistent branding and good content quality, positioning it as a reputable media outlet in Norway. Technically, the site uses modern web technologies including Google Fonts, Google Publisher Tags for advertising, and custom paywall and authentication scripts. It integrates multiple advertising networks and tracking services, maintaining good performance and mobile optimization. Security-wise, the site enforces HTTPS, uses paywall authentication, and avoids exposing sensitive data, but lacks some advanced security headers and explicit security policies. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. WHOIS data is unavailable due to Norid's privacy policy, but the domain appears legitimate and consistent with the business. Overall, the site demonstrates a mature digital presence with moderate to high security and privacy posture, suitable for its media business model.

ParisHotelsfr.com operates as an online hospitality platform focusing on hotel listings and tourism information primarily for Paris and the Bourgogne region, including the Communauté d’agglomération de l’Auxerrois. The website provides rich cultural and economic insights about the Auxerrois area alongside extensive hotel listings with direct links, targeting tourists and business travelers. Technically, the site uses modern web technologies such as Leaflet.js for mapping and is served over HTTPS, ensuring secure connections. However, the absence of WHOIS data and security headers indicates areas for improvement in transparency and security hardening. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is functional and professional but would benefit from enhanced security and compliance features.

D

Defi Mode

defimode.org

60

Defi Mode is an organization dedicated to supporting and accelerating the development and transformation of actors in the French fashion and apparel industry. The website presents a professional and consistent brand image, targeting industry stakeholders and professionals in France. The business model appears to be that of a non-profit or industry support entity, with a medium-sized presence established since at least 2016. Technically, the site is built on WordPress using modern plugins such as Yoast SEO, Divi Builder, and Cookie Law Info, indicating a mature digital infrastructure with good SEO and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are lacking. Overall, the site is trustworthy and safe, with no adult or questionable content detected.

The website represents the Délégation Intergénérationnelle du Numérique, a small non-profit association within the École Normale Supérieure focused on intergenerational digital knowledge sharing and IT support for students. The site provides clear descriptive content about its mission and activities but lacks formal privacy, cookie, or terms of service policies. Technically, the site uses a simple modern CSS framework (Bulma) and is hosted by OVH, but lacks advanced security headers and visible analytics or tracking tools. The security posture is basic with no evident vulnerabilities but also no advanced protections. Overall, the domain registration is consistent with the organization's founding date and mission, supporting legitimacy. The site is safe for general audiences and does not contain any adult or questionable content.

Crowe LLP is a large, established public accounting and consulting firm specializing in audit, tax, and consulting services for public and private entities. The website reflects a mature digital presence with comprehensive service descriptions, industry insights, and a strong emphasis on client engagement. The technical infrastructure leverages modern web technologies, including JavaScript frameworks, Google Tag Manager, and TrustArc for privacy compliance, hosted likely behind Cloudflare for performance and security. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. The absence of WHOIS data is notable but does not detract from the professional presentation and trustworthiness of the site. Overall, Crowe LLP demonstrates a high level of digital maturity and compliance with privacy regulations.

E

Each One Teach One (EOTO) e.V.

eoto-archiv.de

44

Each One Teach One (EOTO) e.V. is a small non-profit community organization based in Berlin focused on education, empowerment, and cultural preservation for Black, African, and Afro-diasporic communities. Founded in 2012, it operates a neighborhood library and organizes events, workshops, and advocacy initiatives. The website reflects a well-structured and content-rich platform targeting its community with multilingual support and clear navigation. Technically, the site uses modern web technologies including HTTPS and JavaScript libraries like Swiper.js for interactive content. Security posture is good with HTTPS enabled and no exposed sensitive data, though it lacks some security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy, professional, and safe for general audiences.

П

ПАШОВИ КАРС ООД

pashovcars.com

57

Pashov Cars is a Bulgarian company specializing in the sale of high-quality used cars sourced from Europe, the USA, and Canada. The company offers a comprehensive range of services including free consultations, preferential leasing and credit terms, vehicle registration assistance, insurance services, and professional car servicing. Positioned as a trusted partner in the Bulgarian used car market, Pashov Cars targets individual and business customers seeking reliable automotive solutions. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, enhancing user experience and trust. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with integration of Google Tag Manager and Facebook Pixel for analytics and marketing. The platform is built on a custom e-commerce solution by Valival Commerce, with moderate performance and good SEO practices. Security posture is solid with HTTPS enabled and domain transfer protections, though some security headers could be improved. Privacy compliance is addressed with visible privacy and cookie policies and a consent mechanism. Overall, the security posture is adequate for the business size, with no critical vulnerabilities detected. The domain registration data aligns well with the business claims, indicating legitimacy and transparency. Strategic recommendations include enhancing security headers, publishing a formal security policy, and continuous monitoring of third-party scripts to maintain security and compliance standards.

P

PraneKilimi.bg

pranekilimi.bg

51

PraneKilimi.bg is a small local Bulgarian business specializing in professional carpet and textile cleaning services in Sofia. The company offers a range of services including washing carpets, rugs, mats, blankets, and other textiles with free pickup and delivery within Sofia. The website demonstrates a solid market position with over 10 years of experience and a loyal customer base including institutions. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though it lacks advanced security headers and explicit security policies. Privacy compliance is partial, with no visible cookie consent mechanism and only a basic privacy policy. Overall, the site is professional, trustworthy, and safe for general audiences.

Н

Нет Инфо ЕАД

abv.bg

61

АБВ Поща, operated by Нет Инфо ЕАД, is a leading Bulgarian email service provider established in 1998. The website offers a secure and user-friendly email platform with 15 GB storage, contact management, and mobile applications. It integrates a rich media ecosystem featuring news, weather, horoscopes, and entertainment content from trusted Bulgarian partners, positioning itself as a comprehensive digital portal for Bulgarian internet users. The business model combines free email services with advertising and premium offerings (ABV+). The company maintains a strong market presence with consistent branding and official mobile app distribution.