Security Directory

J

Jezebel

jezebel.com

67

Jezebel is a well-established online media outlet founded in 2007, specializing in celebrity, politics, and entertainment news with a distinctive editorial voice. It operates under the Paste Media Group umbrella, sharing relationships with sister sites such as Paste Magazine and A.V. Club. The website employs a modern technical infrastructure based on WordPress, integrating advanced advertising and analytics technologies including Google Tag Manager, Amazon Ads, and Prebid.js. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. From a security perspective, Jezebel enforces HTTPS and employs standard cache-control headers but lacks advanced security headers like Content-Security-Policy and X-Frame-Options. No explicit privacy or cookie policies were detected in the provided content, which may impact compliance with GDPR and other privacy regulations. The WHOIS data for the domain is not publicly available, likely due to privacy protection, which slightly reduces trust but is common for media companies. Overall, Jezebel presents a professional and trustworthy online presence with moderate risk. Key recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, enhancing security headers, and providing clear contact information for security and incident response. These improvements would strengthen compliance and user trust while maintaining the site's strong market position.

New York YIMBY is a specialized media outlet focused on real estate development and construction news in New York City. Established in 2012, it provides detailed coverage of projects, neighborhoods, and industry trends from a pro-growth perspective. The website targets real estate professionals, developers, urban planners, and interested residents, offering news articles, research, advertising opportunities, and community forums. Its market position is that of a niche, trusted source within the NYC real estate media landscape. Technically, the website is built on WordPress and leverages a modern technology stack including jQuery, Yoast SEO, and various advertising and analytics tools such as Google Analytics, Facebook Pixel, and Quantcast. It uses Cloudflare for DNS and likely CDN services, ensuring good performance and security. The site is mobile-optimized with good SEO and accessibility features, although some accessibility aspects could be improved. From a security standpoint, the site employs HTTPS with excellent SSL configuration but lacks some security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic; while a privacy policy is present, there is no cookie consent mechanism or GDPR-specific compliance information. Incident response and vulnerability disclosure policies are absent. Overall, the website is professional, content-rich, and trustworthy with moderate tracking and advertising practices. Recommendations include enhancing privacy compliance with cookie consent, publishing security and incident response policies, enabling DNSSEC, and adding security headers to improve security posture and regulatory compliance.

R

Robb Report

robbreport.com

69

Robb Report is a well-established luxury lifestyle media brand founded in 1995, focusing on high-end products such as luxury cars, jets, yachts, travel, and watches. It operates primarily as a media and publishing company with a strong market position in the luxury segment, targeting affluent consumers. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site is built on WordPress, hosted on AWS infrastructure, and employs modern tracking and advertising technologies including Google Tag Manager, Facebook SDK, and Quantcast. Security posture is good with HTTPS enforced and standard security headers present, though DNSSEC is not enabled and no public security policy or incident response information is found. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. Overall, the domain registration data supports legitimacy and trustworthiness. Recommendations include enabling DNSSEC, publishing a security policy, and implementing a vulnerability disclosure program to enhance security transparency and resilience.

Northern Virginia Magazine is a well-established regional media outlet founded in 2005, focusing on local news, dining, culture, and events in Northern Virginia. The website offers rich content including restaurant reviews, event guides, and a directory service branded as 'Best of NoVA'. The business model relies on advertising, subscriptions, and sponsored content. Technically, the site is built on WordPress with modern plugins and uses Cloudflare for DNS and CDN services, ensuring good performance and mobile optimization. However, there is room for improvement in privacy compliance and security headers implementation. The security posture is solid with HTTPS and domain registration locks, but DNSSEC is not enabled and no explicit security policies or incident response contacts are published. Overall, the site is professional, trustworthy, and serves a general audience with safe content.

B

Brownstoner

brownstoner.com

60

Brownstoner is a Brooklyn-focused real estate news and listing platform providing local market news, NYC sales and rental searches, and directories for home improvement contractors and architects. The site targets Brooklyn residents, real estate professionals, and home buyers/renters in New York City. It operates as a media and real estate service platform with advertising and directory revenue streams. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Fonts, and multiple third-party marketing and analytics tools. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is moderate with HTTPS usage but lacks explicit security headers and privacy policies. No WHOIS registration data was found, which raises legitimacy concerns but the professional site presentation and content quality suggest a legitimate business. Overall, the site is safe for general audiences and provides valuable local real estate information.

I

Inman

inman.com

59

Inman is a well-established media company specializing in real estate news, insights, and education targeted at real estate professionals including agents, brokers, and executives. The website serves as a comprehensive platform offering news articles, industry research, educational videos, events, and awards, positioning itself as a leading source in the real estate sector. Technically, the site is built on WordPress and integrates a modern technology stack including analytics, marketing automation, and advertising platforms, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly found. Overall, the site demonstrates high professionalism, good privacy compliance, and extensive user tracking for marketing and analytics purposes. The absence of WHOIS data is a notable anomaly but does not detract from the site's legitimacy given its content quality and market presence.

The website www.hrvatska.cz is an online accommodation platform focused on Croatian mountains, islands, and coastal regions, operated by eProgress s.r.o. It targets tourists primarily from Czech Republic and neighboring countries, offering commission-free accommodation listings and weather forecasts. The site supports multiple languages and has sister sites catering to different language audiences. Technically, the site uses standard web technologies including JavaScript, jQuery, and Google Analytics for tracking. It is served over HTTPS with a valid SSL certificate, ensuring secure data transmission. Privacy and cookie policies are implemented with a consent mechanism, indicating basic GDPR compliance. However, the absence of WHOIS data and security headers slightly reduces trustworthiness. Overall, the site presents a professional and user-friendly experience with moderate technical maturity and a good security posture.

ČD Nostalgie is a service operated under České dráhy, a.s., offering nostalgic railway experiences including historic train rides and museum visits across the Czech Republic. The website serves as a portal for event information, bookings, and visitor engagement, targeting railway enthusiasts and families. The company holds a strong market position as the national railway operator's nostalgic branch, providing unique cultural and leisure services. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. The presence of cookie consent mechanisms and clear contact information reflects a basic level of privacy compliance. Security posture is moderate with HTTPS usage and cookie consent but lacks visible advanced security headers or published security policies. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

O

OAZA - Ochranná Asociace Zvukařů - Autorů

oaza.eu

48

OAZA is a professional collective management organization founded in 2003, authorized by the Czech Ministry of Culture to protect and manage copyright rights of sound engineers and sound designers. The organization operates as a non-profit entity with a clear mission to support its members through rights administration and collective management. The website reflects a mature digital presence built on WordPress with modern plugins and a cookie consent mechanism ensuring GDPR compliance. The site is well-structured, visually consistent, and provides comprehensive information about statutory bodies, partners, documents, and contact details. Security posture is moderate with room for improvement in HTTP security headers and explicit security policies. No WHOIS data is publicly available due to EURid privacy policies, but the domain and business information are consistent and trustworthy. Overall, the website demonstrates a professional, credible, and compliant digital footprint suitable for its sector.

Domeinenbank is a specialized domain brokerage company operating since 1999, offering services such as buying, renting, selling, and appraising domain names. The website targets individuals and businesses interested in domain acquisition and leasing, positioning itself as an experienced player in the domain market. Technically, the site is built on WordPress with Elementor and uses modern SEO and analytics tools, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and DNSSEC enabled, though it lacks some security headers and visible privacy compliance elements. Overall, the site is trustworthy and professional but could improve compliance and security transparency. Strategic recommendations include adding privacy and cookie policies, enhancing security headers, and providing direct contact information for incident response.

T

TV Třebíč

tvtrebic.cz

58

TV Třebíč is a local media outlet providing official television news coverage for the city of Třebíč in the Czech Republic. The website offers video news content focused on local news, culture, and society, targeting residents and citizens interested in community updates. The business operates under the auspices of the city government, as indicated by the official contact details and domain ownership. The site uses Joomla CMS and integrates multiple third-party services for analytics and advertising, including Google Analytics, Facebook Pixel, and Google Ads. The technical infrastructure is modern and supports mobile responsiveness, though performance is moderate. From a security perspective, the website employs HTTPS and uses embedded content securely but lacks visible security headers and a privacy or cookie policy, which are important for GDPR compliance. Tracking and retargeting scripts are present without a consent mechanism, indicating privacy compliance gaps. The WHOIS data is consistent with the business claims, showing a domain registered in 2019 with transparent registrant information matching the local media focus. Overall, the website is professionally designed and trustworthy for its intended audience but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and establishing a vulnerability disclosure process.

Česká pošta, s.p. operates the official e-commerce platform postshop.cz, offering postal supplies such as envelopes, cardboard boxes, postal vouchers, and data security products including chip cards and readers. The website targets both general consumers and businesses within the Czech Republic, positioning itself as a trusted retail channel for postal and related products. The business is well-established with a domain age dating back to 2001, reflecting a mature market presence. Technically, the website is built on ASP.NET Web Forms with a frontend leveraging jQuery and various slider plugins. Hosting and domain registration are managed by Active24, a known provider. The site performs moderately well with basic mobile optimization and SEO practices. Google Tag Manager is used for analytics, indicating some level of digital maturity. From a security perspective, the site uses HTTPS but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. There is no cookie consent mechanism, which is a compliance gap under GDPR. No direct contact emails or phone numbers are present on the main page, limiting immediate user support access. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional and trustworthy with good content quality and business credibility. However, improvements in privacy compliance and security best practices are recommended to enhance user trust and regulatory adherence.

Č

Česká pošta

postsignum.cz

60

PostSignum is an electronic certification authority service operated by Česká pošta, providing qualified and commercial digital certificates, qualified time stamps, and secure key solutions primarily for Czech public administration, businesses, entrepreneurs, and individuals. The website is professionally designed with clear navigation and offers multiple services including online certificate issuance and customer portals. The technical infrastructure relies on standard web technologies such as jQuery and Google Translate widgets, with a CMS from Macron Software. Security posture is moderate with HTTPS usage but lacks explicit security headers and cookie consent mechanisms. WHOIS data is unavailable, which slightly impacts trust but the strong branding and government affiliation mitigate concerns. Overall, the website is a credible and professional government service platform.

A

Albatros Media

knihynasbavi.cz

61

Albatros Media is a well-established Czech media company specializing in book publishing and online retail. Their website serves as a professional portal showcasing their publishing brands, retail offerings, and corporate information. The company targets a broad audience including children, adults, and professionals interested in literature and educational materials. The business model combines e-commerce with traditional publishing, positioning Albatros Media as a significant player in the Czech book market. Technically, the website is built on ASP.NET with modern frontend technologies including jQuery and third-party libraries like Fancyapps UI. It integrates Google Analytics and Google Tag Manager for analytics and marketing, alongside Cookiebot for GDPR-compliant cookie consent management. The site is mobile optimized and SEO friendly, though accessibility features are basic. Performance is moderate with room for improvement. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible advanced security headers. No vulnerabilities or exposed sensitive data were detected. WHOIS data is privacy protected, which is common for commercial entities, and does not raise immediate concerns. Privacy compliance is well addressed with clear cookie policies and consent banners. Overall, the website presents a professional and trustworthy digital presence with good privacy compliance and moderate security posture. Strategic improvements in security headers, contact transparency, and accessibility would enhance trust and compliance further.

M

Moravská galerie

moravska-galerie.cz

57

Moravská galerie is a well-established cultural institution based in Brno, Czech Republic, specializing in fine arts, design, and architecture exhibitions. The website serves as a comprehensive portal for visitors to explore current and upcoming exhibitions, educational programs, and library services. The institution targets a broad audience interested in cultural and artistic experiences. The business model focuses on public engagement through exhibitions and educational outreach, supported by ticket sales and an online shop. The domain age and WHOIS data confirm the legitimacy and long-standing presence of the gallery in the region. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies such as jQuery, Font Awesome, and Swiper.js for interactive content. Performance optimizations are evident through caching and lazy loading, and the site is mobile-optimized with good accessibility features. SEO practices are well implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and includes a GDPR-compliant cookie consent mechanism. While some security headers are not explicitly detected, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy policies are comprehensive and clearly presented, supporting compliance with EU regulations. However, the site lacks a dedicated security policy, incident response contacts, and vulnerability disclosure mechanisms. Overall, Moravská galerie's website demonstrates a high level of professionalism, security, and compliance suitable for a public cultural institution. Strategic improvements could include enhancing security headers, publishing a security.txt file, and providing clearer direct contact information for security incidents.

F

Franklin Electric

franklin-electric.com

74

Franklin Electric is a well-established global manufacturer and distributor specializing in systems and technologies for moving and protecting critical resources such as water, fuel, and electricity. The company serves a diverse range of sectors including residential, commercial, agricultural, industrial, municipal, and energy applications. With over 80 years of history and multiple industry recognitions, Franklin Electric holds a strong market position as a leader in its field. The website reflects a professional corporate presence with clear navigation and comprehensive content about its products, services, and corporate social responsibility initiatives. Technically, the site employs modern JavaScript libraries, Google Tag Manager, and Microsoft Application Insights for analytics and telemetry, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy and well-maintained, supporting the company's credibility and business objectives.

Art Lighting Production, s.r.o. is a Czech-based company specializing in the manufacture, sale, and servicing of stage and scenic lighting equipment. Founded in 1999 with roots dating back to 1924, the company offers a comprehensive range of lighting products including fixtures, control consoles, video equipment, and accessories. Their market position is that of an established regional player with a strong tradition and a focus on professional customers in the entertainment and architectural lighting sectors. The website reflects a medium-sized business with a B2B and B2C e-commerce model, providing detailed product information and customer references. Technically, the website is built on the Nette CMS framework with UIkit for UI components and jQuery for scripting. It is mobile-optimized with moderate performance and basic accessibility features. The site uses HTTPS with a well-configured SSL setup and includes a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and a dedicated security policy page. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, anti-spam measures on forms, and user consent for cookies. No critical vulnerabilities or exposed sensitive data were detected. The absence of incident response contacts and security policy documentation suggests room for improvement in transparency and preparedness. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It serves its target audience effectively but could enhance its security posture and transparency to further build trust and resilience.

Život na cestách is a Czech travel portal targeting authentic travelers interested in exploring beautiful places domestically and worldwide. The website offers travel articles, tips, interviews, and photography, positioning itself as a niche media outlet for Czech-speaking audiences. The business model primarily revolves around content publishing and advertising revenue. Technically, the site is built on WordPress with common plugins such as Yoast SEO, Jetpack, and Google Analytics integration, indicating a moderate level of digital maturity. The site is mobile-optimized and has good SEO practices but lacks some advanced accessibility features. Security posture is decent with HTTPS enforced and spam prevention via recaptcha, but it lacks important security headers and explicit privacy/cookie policies, which are areas for improvement. The absence of WHOIS data reduces transparency but is likely due to privacy protection. Overall, the site is safe, family-friendly, and professionally maintained, with moderate trustworthiness.

SDH Jaroměřice nad Rokytnou is a small, local volunteer fire department organization based in the Czech Republic, supported by municipal subsidies. The website serves as an informational portal for community members and volunteers, providing details about firefighting activities, sports, events, and facility rentals. The organization maintains active social media channels to engage with the community. Technically, the website is built using Incomedia WebSite X5 Evo, employing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site includes embedded social media widgets and video content but lacks advanced SEO and accessibility features. Security posture is basic, with no detected security headers or privacy policies, and no explicit HTTPS enforcement visible in the content. The domain is well-established since 2005, consistent with the organization's local presence and legitimacy. Overall, the website is functional but requires improvements in privacy compliance, security best practices, and richer content to enhance trust and professionalism.

N

National Heritage Institute

zamek-jaromerice.cz

43

The website for Jaroměřice nad Rokytnou state chateau serves as the official digital presence for a significant Baroque heritage site managed by the National Heritage Institute of the Czech Republic. It provides comprehensive visitor information including tours, opening hours, admission details, and contact information, targeting tourists and cultural heritage enthusiasts. The site is well-branded, consistent, and professionally maintained, reflecting its government affiliation and cultural importance. Technically, the website employs a modern technology stack including jQuery, Leaflet.js for maps, Google Analytics, and Google Tag Manager for analytics and tracking. It uses asynchronous script loading and external font services to enhance performance and user experience. The site is mobile-optimized and accessible, with clear navigation and multilingual support. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. While explicit security headers like Content-Security-Policy are not detected, the overall security posture is good with no visible vulnerabilities or exposed sensitive data. The WHOIS data confirms the domain's legitimacy and long-standing registration, consistent with the business purpose. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers and publishing a dedicated security policy or incident response information to further strengthen trust and compliance.

E

EBOOST s.r.o.

eboost.cz

54

EBOOST s.r.o. is a Czech online marketing agency specializing in PPC advertising, social media marketing, SEO, email marketing, copywriting, and web design services. The company positions itself as a results-driven team helping businesses maximize their online advertising investments. The website demonstrates a professional and consistent brand presence with client testimonials and recognized partner certifications such as Google Partner and Mergado Zlatý Partner. Technically, the site is built on WordPress using Elementor and integrates multiple marketing and analytics tools including Google Tag Manager, Facebook Pixel, and Hotjar. While HTTPS is properly configured, the site lacks some security headers and an explicit cookie consent mechanism, which are areas for improvement. The WHOIS data for the domain is unavailable, which slightly reduces trust but does not outweigh the strong business indicators present on the site. Overall, the website is well-designed, content-rich, and trustworthy for its target audience of businesses seeking online marketing services.

J

Jan Schejbal

jan-schejbal.cz

41

Jan Schejbal is a professional freelance photographer based in the Czech Republic with over 30 years of experience. The website showcases his portfolio including portrait photography, architecture, reportage, and artistic collages. He has notable collaborations with leading Czech media outlets and the Forbes magazine, positioning him as an experienced and credible professional in the media sector. The business model focuses on freelance photography services and artistic creation, targeting a general audience interested in professional photography and art. Technically, the website is built using modern web technologies including Nuxt.js, jQuery, Bootstrap, and Revolution Slider. It is hosted via WEDOS, a Czech hosting provider, and uses Google Fonts and Google Analytics for styling and analytics respectively. The site demonstrates good mobile optimization and SEO practices but lacks some accessibility features and security headers. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS (assumed from modern standards though not explicitly confirmed in HTML), but no security headers were detected in the provided content. There is no visible privacy or cookie policy, which is a compliance gap especially under GDPR. No incident response or vulnerability disclosure information is provided. Tracking is done via Google Analytics without visible consent mechanisms, indicating privacy compliance issues. Overall, the website is professional and credible but would benefit from enhanced security practices, privacy compliance improvements, and clearer contact mechanisms. Strategic recommendations include implementing security headers, adding privacy and cookie policies, and establishing incident response contacts to improve trust and compliance.

E

ERST Finance

erstfinance.com

60

ERST Finance is a Latvian financial services company specializing in short-term business financing solutions. The website presents a professional and well-structured platform targeting businesses seeking quick access to funds for growth and operational needs. The company appears to be a small-sized entity founded in 2017, with a clear focus on the Latvian market. The site includes essential business information, a phone contact, and a privacy and cookie policy compliant with GDPR standards. Technically, the website is built on WordPress with modern SEO and analytics tools integrated, including Google Analytics and Facebook Pixel, managed via Google Tag Manager. Cookie consent is implemented with granular user controls, reflecting a good privacy posture. Security-wise, the site uses HTTPS and domain registration protections but lacks DNSSEC and some HTTP security headers, which could be improved. No critical vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website is professional, secure, and compliant, suitable for its business purpose.

S

Scenerie

scenerie.cz

44

Scenerie is a Czech-based online photo bank specializing in tourist-themed photography from the Czech Republic and worldwide. The platform targets photographers, tourists, souvenir sellers, and photography enthusiasts, offering services such as photo sales, tourist destination information, exhibitions, and contests. The website demonstrates a good level of content quality and user experience with clear navigation and relevant business information. Technically, it employs common web technologies including jQuery, Google Analytics, Google Maps API, Facebook SDK, and reCAPTCHA for form security. However, the site lacks advanced security headers and explicit privacy policies, which are areas for improvement. The absence of WHOIS registration data reduces domain trustworthiness, although the website itself appears professional and legitimate. Overall, the site maintains a moderate security posture with room for enhancement in compliance and technical security measures.

M

Metal Arsenal s.r.o.

metalarsenal.eu

53

Metal Arsenal s.r.o. is a Czech family-owned manufacturing company specializing in complete custom metal production services. With a claimed 30-year tradition, the company offers a full spectrum of services from design and 3D CAD modeling to production, assembly, and delivery. The website positions Metal Arsenal as a flexible and quality-focused B2B service provider in the metalworking industry. Technically, the website is built on OctoberCMS, uses modern web technologies including Google Tag Manager and Typekit fonts, and provides a responsive and user-friendly experience. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and detailed security policies. The WHOIS data is privacy protected, which is common for small businesses, and no suspicious indicators were found. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though improvements in security transparency and contact information clarity are recommended.

M

Město Jaroměř

jaromer-josefov.cz

42

Město Jaroměř operates an official municipal website providing comprehensive information about the city, its municipal office, leisure activities, practical information, and contact details. The site targets residents and visitors, offering services such as news updates, event calendars, and access to municipal departments. The website is professionally designed with consistent branding and multilingual support, enhancing accessibility for a broader audience. Technically, the website employs a custom CMS with modern JavaScript libraries including jQuery, Bootstrap, and Swiper.js, ensuring a responsive and user-friendly experience. The site is served over HTTPS, indicating a secure connection, and includes a cookie consent mechanism aligned with GDPR requirements. However, some security headers are not explicitly detected, and no incident response or vulnerability disclosure policies are publicly available. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent but lacks visible advanced security headers and explicit incident response contacts. The absence of WHOIS data for the domain is a notable concern, potentially impacting trust from a domain registration standpoint. Overall, the website is safe, professional, and serves its purpose effectively, though improvements in security transparency and domain registration verification are recommended.

V

VSŠ a VOŠ MO v Moravské Třebové | webové stránky školy

vsmt.cz

45

The website www.vsmt.cz represents an educational institution, specifically a secondary and higher vocational school located in Moravská Třebová, Czech Republic. The site serves as an informational portal for students, parents, and the local educational community, offering details about educational programs, school news, and resources. The business model is typical for a small educational entity, focusing on providing accessible information rather than commercial services. Technically, the website is built on WordPress using the Divi theme, a popular choice for small to medium organizations due to its flexibility and ease of use. The site shows moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. There is no evidence of advanced analytics or marketing tools, indicating a basic digital maturity level. From a security perspective, the site lacks visible security headers and privacy-related policies, which are critical for compliance with GDPR and general best practices. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness, although the site content itself appears legitimate and safe. No WAF or blocking mechanisms were detected, and the site is accessible without challenge. Overall, the website is functional and serves its purpose as an educational resource but requires improvements in security posture, privacy compliance, and domain registration transparency to enhance trust and protect user data effectively.

B

Bc. Miroslav Tomášek

miroslavtomasek.cz

60

Miroslav Tomášek operates a small, independent web development business focused on creating custom web applications primarily using WordPress. The website presents a professional image with clear service offerings, including development, WordPress site management, and consulting. The business targets clients seeking tailored web solutions in the Czech Republic. Technically, the site uses a modern stack including jQuery, Bootstrap, and Google Tag Manager, hosted on a WordPress platform with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers are missing and no incident response or vulnerability disclosure information is provided. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear legitimate and consistent. Overall, the site is well-structured and compliant with GDPR, providing clear contact details and policies.

A

Abplanalp Baltic

abplanalp.lv

62

Abplanalp Baltic operates a professional e-commerce platform specializing in metalworking machinery, industrial equipment, and automation solutions primarily targeting B2B customers in Latvia and surrounding regions. The company offers a broad range of CNC machines, tools, and technical support services, positioning itself as a knowledgeable and experienced regional player with strong partnerships with leading manufacturers such as Haas and Nakamura-Tome. The website is well-structured, with clear navigation and product categorization, supporting an effective user experience for industrial clients. Technically, the website is built on the Magento Commerce platform, leveraging modern web technologies including jQuery, Knockout.js, and Google Tag Manager for analytics and marketing. The site is mobile-optimized and implements cookie consent mechanisms aligned with GDPR requirements, although a dedicated privacy policy page is not found. HTTPS is enforced, and security best practices such as CSRF protection are observed, but additional security headers could enhance the security posture. From a security perspective, the site shows a good baseline with no detected vulnerabilities or WAF blocking. The WHOIS data indicates an active domain registered to a natural person in Latvia, consistent with the website's regional focus. However, the lack of detailed registrant organization information and absence of explicit privacy and security policies suggest areas for improvement in transparency and compliance. Overall, the website presents a credible and professional business front with moderate to good technical and security maturity. Strategic enhancements in privacy disclosures, security headers, and incident response information would strengthen trust and compliance, supporting the company's market position and customer confidence.

SIA Sertifikācijas centrs is a well-established Latvian certification institution founded in 2012, accredited by the Latvian National Accreditation Bureau and notified in EU institutions. The company specializes in product, personnel, and management system certifications, serving a broad regional market including Latvia and neighboring countries. Their website reflects a professional business presence with clear service descriptions and contact information. Technically, the site uses standard web technologies such as HTML, CSS, and jQuery, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website and WHOIS data indicate a legitimate and credible business with room for improvement in security and privacy practices.

P

PricewaterhouseCoopers

pwclegal.lv

63

PwC Legal Latvija is a regional branch of the global professional services firm PricewaterhouseCoopers, specializing in legal services within Latvia. The website serves as a corporate portal providing information about PwC's legal offerings in the Latvian market. The site is built on Adobe Experience Manager CMS and integrates Adobe DTM for analytics and OneTrust for cookie consent management, reflecting a mature digital infrastructure. While the site demonstrates good design quality and mobile optimization, explicit privacy and terms of service policies are not detected in the provided content, which could be improved for enhanced compliance and transparency. Security posture is solid with HTTPS and cookie consent mechanisms in place, but lacks visible security headers and incident response contacts. Overall, the domain registration aligns well with the business identity, indicating high legitimacy and trustworthiness.

S

SIA Universitātes Vetfonds

vetfonds.lv

60

SIA Universitātes Vetfonds operates a comprehensive veterinary supply and service website targeting veterinarians and animal owners primarily in Latvia. The company, established in 1995, offers an extensive range of veterinary products through an online pharmacy, supports veterinary professionals with equipment and educational seminars, and provides laboratory testing services. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support focused on Latvian. Technically, the site is built on WordPress with WooCommerce, leveraging modern libraries and integrations such as Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, the site demonstrates a trustworthy and credible business with strong market positioning in the veterinary healthcare sector.

V

VividMarketing

vividmarketing.cz

48

VividMarketing is a Czech Republic based marketing agency established in 2020, offering comprehensive marketing services including strategy development, web and e-shop design, PPC campaign management, workshops, and corporate event organization. The company targets businesses seeking to enhance their marketing efforts and corporate presence. The website is built on Joomla CMS using the Helix Ultimate framework and integrates modern technologies such as Google Analytics and Tag Manager for analytics and tracking. The site is mobile optimized and presents a professional design with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and a robust cookie consent mechanism, though additional security headers and explicit security policies could enhance protection. The domain registration data aligns well with the website's claims, supporting legitimacy. Overall, the site demonstrates good digital maturity and business credibility.

S

Střední průmyslová škola a Obchodní akademie, Bruntál, příspěvková organizace

spsoa.cz

63

The website represents Střední průmyslová škola a Obchodní akademie, Bruntál, a public secondary school in the Czech Republic focused on technical and business education. It offers a variety of study programs and collaborates with industry partners to provide modern educational experiences. The site is built on WordPress, leveraging common web technologies and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and no visible vulnerabilities, though additional security headers could enhance protection. The absence of WHOIS data limits domain registration transparency but does not detract from the site's legitimacy as an educational institution.

A

ARONN

aronn.cz

57

ARONN is a Czech Republic-based producer of sparkling wines using the traditional champagne method, complemented by hospitality services including wine tasting, events, and accommodation. The company has achieved notable recognition such as the Prague Wine Champion award, positioning it as a quality-focused small business in the hospitality sector. The website is built on WordPress with modern technologies and offers a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent implemented, though security headers and formal privacy policies are missing. Contact information is transparent and consistent with the business location and domain registration. Overall, ARONN presents a professional and trustworthy online presence with room for improvement in privacy and security documentation.

W

Wehes

wehes.com

48

Wehes is a sales coaching and consulting company founded in 2020, focused on helping sales professionals and service businesses improve their sales performance through psychology-backed, sustainable methods. The company offers a range of services including coaching, 3-day sales transformations, call reviews, sales courses, and talent acquisition. Their market position is that of a trusted partner delivering measurable results with a high customer satisfaction rating. Technically, the website is built on WordPress with modern plugins like Elementor and SureCart, and employs anti-spam and SEO tools. The site is well-structured, mobile-optimized, and uses HTTPS with good security practices, though DNSSEC is not enabled. Privacy compliance is limited due to missing explicit privacy and terms of service pages, but a cookie policy with consent is present. Overall, the security posture is solid with no major vulnerabilities detected. The domain registration is consistent with the business profile and partner relationships are evident through DNS and client logos. The website content is safe for general audiences and professionally presented.

Č

Československá obec legionářská, z.s.

csol.cz

44

Československá obec legionářská (ČsOL) is a well-established non-profit organization in the Czech Republic dedicated to supporting war veterans, their supporters, and promoting historical awareness about legions and military conflicts. The organization operates a professional website that provides rich content including news, projects, events, and a searchable database of legionnaires. The site is supported by a strong network of governmental and cultural partners, enhancing its credibility and outreach. Technically, the website is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile responsiveness. Privacy and cookie compliance are well implemented with visible consent mechanisms. However, the absence of WHOIS registration data for the domain introduces some uncertainty regarding domain legitimacy. Security posture is generally good with HTTPS enforced, but the lack of security headers and absence of published security policies or incident response information suggest areas for improvement. Overall, the website is trustworthy, professionally maintained, and serves its target audience effectively.

C

Citfin – Finanční trhy, a.s.

citfin.cz

56

Citfin – Finanční trhy, a.s. is a Czech financial services company specializing in foreign currency exchange and international payments for corporate clients. The company positions itself as an expert in currency exchange with a focus on personalized service and competitive rates for multiple currencies including Euro and US Dollar. The website reflects a professional and consistent brand image targeting businesses requiring efficient and reliable foreign exchange solutions. Technically, the site is built on WordPress with modern optimizations such as WP Rocket for performance and Yoast SEO for search engine visibility. Cookiebot is used for GDPR-compliant cookie consent management, and Google Tag Manager is implemented for analytics. Security posture is good with HTTPS enforced and security headers present, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the professional presentation and comprehensive contact information. Overall, Citfin demonstrates a mature digital presence suitable for its financial services market segment.

M

Mravenčí chůva

mravencichuva.cz

53

Mravenčí chůva is a Czech educational platform specializing in contemporary children's literature. The website offers a variety of services including book clubs, courses, webinars, e-books, and seminars aimed at helping children and adults engage with reading. The business is positioned as a niche provider within the Czech educational sector, focusing on quality literary content and community engagement through newsletters and social media. Technically, the website is built on WordPress using popular themes and plugins, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong, with clear GDPR-aligned policies and cookie management. Overall, the site presents a professional and trustworthy image suitable for its target audience.

E

Eccotarp

eccotarp.com

56

Eccotarp is a specialized manufacturer focused on producing foldable containment products designed to manage leakage of hazardous substances. Their product range includes collapsible utility trays, electric fire hose rollers, quarantine containers for electric vehicles, and high-capacity collapsible tanks, targeting industrial clients, emergency responders, and chemical handling facilities. The company maintains a professional online presence with product certifications and active participation in international trade fairs, supporting their niche market position. Technically, the website is built on a modern stack including Bootstrap, jQuery, Lightbox, and OctoberCMS, with Google Tag Manager for analytics. The site is mobile-optimized and well-structured, though performance is moderate. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit vulnerability disclosure mechanisms. The WHOIS data is unavailable, which slightly impacts trust and transparency. However, the professional website, certifications, and social media presence mitigate concerns. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is good with clear policies and GDPR consent mechanisms. Overall, the website and business present a low-risk profile with room for improvement in security headers, direct contact information, and domain registration transparency.

N

Nemocnice Rudolfa a Stefanie Benešov

hospital-bn.cz

66

Nemocnice Rudolfa a Stefanie Benešov is a regional hospital in the Czech Republic providing a wide range of healthcare services including inpatient care, outpatient clinics, emergency services, and specialized departments. The website serves as an information portal for patients and visitors, offering detailed department listings and news updates. The hospital positions itself as a trusted healthcare partner in the region. Technically, the website employs modern web technologies such as Bootstrap for responsive design, Google Analytics for visitor tracking, and Cookiebot for cookie consent management. The site is mobile-optimized and accessible, with good SEO practices and performance. Security measures include HTTPS enforcement, security headers, and reCAPTCHA on forms, indicating a mature digital infrastructure. Security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies and user consent mechanisms aligned with GDPR. However, the absence of WHOIS data and lack of published security policies or incident response contacts represent areas for improvement. Overall, the website is professional, trustworthy, and serves its healthcare audience effectively. Strategic recommendations include publishing explicit security and incident response policies, verifying domain registration details, and maintaining regular security audits to sustain trust and compliance.

L

Limes Litomyšl s.r.o.

limes.cz

48

Limes Litomyšl s.r.o. is a well-established Czech manufacturer and retailer specializing in garden greenhouses and related accessories. With over 30 years of experience and a domain registered since 2000, the company positions itself as the largest greenhouse producer in Czechia, targeting professional growers, health-conscious consumers, and hobby gardeners. Their product range includes multiple greenhouse variants, cold frames, composters, and garden accessories, supported by a 10-year warranty on rusting and Czech product certification. The website reflects a professional e-commerce platform with clear branding and consistent messaging.

A

Advatec E&S

advatec-es.cz

54

AdvaTec E&S s.r.o. is a Czech-based manufacturing company specializing in custom industrial equipment and workshop furniture. The company targets industrial and manufacturing clients seeking tailored solutions to improve workplace efficiency, safety, and comfort. With over 1100 projects and 3000 products delivered across 10 countries, AdvaTec E&S positions itself as a reliable regional player in the manufacturing sector. The website reflects a professional business model focused on B2B sales with direct manufacturing and on-site assembly services. Technically, the website is built on WordPress using Elementor and several plugins for SEO and analytics, though Google Analytics is not fully configured. The site is mobile-optimized and SEO-friendly, with good content quality and clear navigation. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks explicit security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The website is safe for general audiences and free from adult or questionable content.

J

JASS a. s.

jass.cz

57

JASS a. s. is a Czech joint-stock company specializing in manufacturing electric overhead cranes, crane runways, and related crane components. With over 30 years of experience, the company serves industrial clients requiring material handling and lifting solutions. Their product portfolio includes overhead cranes, portal cranes, slewing column cranes, light crane systems, and special custom manufacturing. The website is professionally designed, providing clear navigation, contact information, and references, indicating a well-established business presence. Technically, the site uses modern JavaScript libraries, Google Analytics, and a cookie consent management system, reflecting a moderate level of digital maturity. Security-wise, the site implements cookie consent and uses HTTPS (assumed), but lacks visible security headers and explicit security policies, suggesting room for improvement. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and contact details appear authentic. Overall, the site presents a credible industrial manufacturing business with moderate technical and security posture.

aaareklama.cz is a Czech Republic-based small business specializing in the production and printing of advertising materials including lighted advertising, banners, company signs, orientation systems, engraving, and vehicle wraps. The company targets businesses and organizations primarily in Prague and surrounding areas, offering a broad portfolio of signage and printing services. The website is built on WordPress and employs modern plugins and technologies to deliver a professional user experience. While the site is well-structured and content-rich, it lacks privacy and cookie policies, which are important for compliance with data protection regulations. Security measures such as HTTPS and Google reCAPTCHA are implemented, but the absence of security headers and WHOIS transparency reduces the overall security posture. The domain WHOIS data is unavailable, which raises some concerns about registration legitimacy but does not necessarily indicate malicious intent. Overall, the website presents a credible business presence with room for improvement in privacy compliance and security hardening.

B

Bíza víno

bizavino.cz

45

Bíza víno is a small family-owned winery based in Čejkovice, Czech Republic, specializing in the production and sale of quality wines with French roots. The website serves as a digital storefront and informational hub for their wine offerings, wine education, and family heritage. The business targets wine enthusiasts and consumers interested in regional family wineries. Technically, the website is built on WordPress, utilizing modern web technologies such as Bootstrap, jQuery, and Google Analytics for tracking. It features responsive design and basic accessibility features, with SEO optimization via Yoast plugin. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though additional security headers could enhance protection. The absence of WHOIS data reduces domain trustworthiness, but the website content and structure appear professional and legitimate. Overall, the site presents a moderate risk profile with room for improvement in security and compliance documentation.

Tiberina Group is a medium-sized manufacturing company based in Umbertide, Italy, specializing in automotive and industrial product and process solutions. The company emphasizes customer focus, innovation, sustainability, and quality management, positioning itself as a regional player with a commitment to continuous improvement and employee development. Their website reflects a professional corporate presence with multilingual support and detailed sections on their values, products, innovation, sustainability, and careers. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and qTranslate-X for multilingual content. It employs Google Analytics with IP anonymization and a cookie consent mechanism, indicating a moderate level of digital maturity and privacy awareness. The site is mobile-optimized with good navigation and content relevance, though accessibility features could be improved. From a security perspective, the site uses HTTPS with no visible exposed sensitive data or vulnerable libraries. However, it lacks explicit security headers and published security or incident response policies. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or data unavailability, which impacts trustworthiness. Overall, the website presents a solid business front with good content and technical implementation but would benefit from enhanced security practices and transparency regarding domain registration details.

S

Střední odborná škola, Bruntál

sosbruntal.cz

47

Střední odborná škola Bruntál is a vocational secondary school located in the Czech Republic, offering a variety of practical study programs such as catering, care services, construction trades, and technical fields. The school is regionally supported by the Moravskoslezský kraj and targets students and their parents seeking vocational education. The website reflects a medium-sized educational institution with a clear focus on regional vocational training and community engagement. Technically, the site is built on Joomla CMS with modern frameworks and libraries, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with GDPR-related content and cookie management. Overall, the site is professional, trustworthy, and well-aligned with its educational mission.

E

Element Arval

elementarval.com

60

Element Arval is a global alliance specializing in fleet management solutions, managing over 4.5 million vehicles across 55 countries. The alliance leverages nearly three decades of partnership to deliver harmonized and customized fleet services, positioning itself as a worldwide leader in the transportation sector. Their business model focuses on strategic partnerships and tailored global fleet strategies to meet diverse client needs. Technically, the website is built on WordPress with Bootstrap and integrates modern tools such as Google Analytics and 6Sense for marketing and analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and policies could enhance protection. Overall, the site is professional and trustworthy, with clear business focus and compliance with privacy regulations.

V

Vila Tugendhat, oddělení Muzea města Brna

tugendhat.eu

45

Vila Tugendhat is a cultural heritage site and museum department located in Brno, Czech Republic, dedicated to preserving and showcasing the iconic modernist villa designed by Ludwig Mies van der Rohe. The website serves as an information portal for visitors, offering details on tours, events, educational programs, and virtual experiences. It holds a unique position as a UNESCO World Heritage site and is affiliated with the Museum of the City of Brno, reinforcing its cultural significance and trustworthiness. Technically, the website is built on WordPress using modern frameworks and plugins such as Yoast SEO, Foundation, and Complianz for GDPR compliance. It demonstrates good performance, mobile optimization, and accessibility. The site employs HTTPS with strong SSL configuration and uses cookie consent mechanisms to comply with privacy regulations. Contact information is clearly provided, albeit obfuscated for spam protection, and social media channels are actively linked. From a security perspective, the site shows good practices including HTTPS enforcement and no visible sensitive data exposure. However, it lacks explicit security headers and published security or incident response policies, which could be improved. The WHOIS data is not publicly available due to EURid privacy policies, but the website's professional presentation and museum affiliation strongly indicate legitimacy. Overall, Vila Tugendhat's website is a well-maintained, secure, and privacy-conscious platform that effectively supports its mission as a cultural and educational institution. Strategic improvements in security documentation and header implementation would further enhance its security posture and trust.