Security Directory

M

MIT Sloan Management Review México

mitsloanreview.mx

60

MIT Sloan Management Review México is a Spanish-language digital media platform focused on management, leadership, and business insights tailored for Spanish-speaking leaders and decision makers in Mexico. It operates as a localized edition of the prestigious MIT Sloan Management Review brand, supported by Grupo Medios. The website offers articles, newsletters, and digital magazines, monetized primarily through advertising networks and partnerships. Technically, the site is built on WordPress with Bootstrap and integrates modern ad tech and analytics tools, providing a responsive and professional user experience. Security posture is strong with HTTPS, cookie consent, and no visible vulnerabilities, though explicit security policies and incident response information are absent. Overall, the site is trustworthy, well-branded, and compliant with privacy regulations, serving a medium-sized media business in Mexico.

V

Vysoké učení technické v Brně

vut.cz

62

Vysoké učení technické v Brně (Brno University of Technology) is a prestigious Czech technical university with over 120 years of tradition. It offers a wide range of technical, economic, natural science, and artistic study programs across eight faculties and three university institutes. The university maintains a strong position in scientific research and international cooperation, supported by memberships in notable university networks and awards such as the HR Excellence in Research Award. The website reflects a mature digital presence with comprehensive content targeting prospective and current students, researchers, and academic partners. Technically, the website employs a mix of legacy and modern technologies including jQuery 1.12.4, Google Tag Manager, CookieHub for cookie consent, and Cloudflare for hosting and security. The site is well-optimized for mobile devices and accessibility, with good SEO practices and structured navigation. Security posture is strong with HTTPS enforcement and multiple security headers, although the use of an older jQuery version suggests some technical debt. Privacy compliance is robust, featuring detailed privacy and cookie policies with consent mechanisms aligned with GDPR requirements. However, explicit vulnerability disclosure and incident response information are not publicly available, which could be improved to enhance transparency and security readiness. Overall, the site is professional, trustworthy, and well-maintained, representing a large educational institution with a strong market position. Strategic recommendations include updating legacy libraries, publishing vulnerability disclosure policies, and enhancing incident response visibility to further strengthen security and compliance.

T

Transparency International – Česká republika, o. p. s.

transparentnivolby.cz

45

The website 'transparentnivolby.cz' is operated by Transparency International – Česká republika, a recognized non-profit organization focused on monitoring the transparency of pre-election campaigns for the Czech Poslanecká sněmovna 2025 elections. The site provides detailed evaluations of political parties, news updates, and channels for reporting election fraud, targeting Czech voters and civil society interested in political transparency. The business model is centered on non-profit advocacy and public awareness, supported by donations and partnerships with reputable organizations. Technically, the site is built on WordPress with a modern but somewhat dated technology stack including Bootstrap and jQuery 1.12.4. The site is mobile-optimized and SEO-friendly but lacks some accessibility features and uses an outdated jQuery version that poses security risks. Security posture is generally good with HTTPS enforced and nonce usage for AJAX, but missing security headers and outdated libraries reduce the overall security score. Privacy compliance is weak due to the absence of explicit privacy and cookie policies, and Google Analytics is present but not configured. WHOIS data is unavailable, which reduces domain trustworthiness from a registration perspective, but the website content and branding strongly indicate legitimacy. Overall, the site scores well on content quality and business credibility but should improve privacy compliance and update technical components to enhance security and trust.

G

Gaston, s.r.o.

yuton.biz

45

Gaston, s.r.o. is a Czech-based distributor specializing in canned fish, vegetables, and fruits under multiple brands such as Gianna and Franz Josef. The company operates a medium-sized business with a regional presence supported by several subsidiaries across Central and Eastern Europe. Their website reflects a professional and consistent brand image with clear product categories and contact information. Technically, the site uses legacy JavaScript libraries like jQuery but implements modern UI components such as sliders and cookie consent mechanisms. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and updated libraries. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact details appear legitimate. Privacy and terms policies are not explicitly found, indicating room for compliance improvements.

G

GIANA d.o.o.

giana.hr

45

GIANA d.o.o. is a Croatian-based distributor specializing in canned fish, vegetables, and fruits under multiple brand names. The company operates primarily in the retail sector with a regional presence in Central and Eastern Europe, supported by a network of partner domains within the Gaston group. The website presents a professional and consistent brand image with good content quality and clear navigation, targeting a general audience interested in food products. Technically, the site uses legacy and modern JavaScript libraries but lacks HTTPS implementation and security headers, which are critical for secure operations. The cookie consent mechanism is implemented, but privacy and terms of service policies are missing, indicating compliance gaps. Overall, the security posture is moderate with room for significant improvements in encryption and vulnerability management.

S

S.C. GAROM FOOD S.R.L.

garomfood.ro

42

S.C. GAROM FOOD S.R.L. operates as a regional distributor and retailer of canned fish, vegetables, fruits, and related food products in Romania. The company is part of the larger Gaston group, which has multiple regional partners across Central and Eastern Europe. The website presents a professional image with clear branding and product focus, targeting general consumers and business clients interested in quality food products. The business model centers on distribution and retail within the food sector, leveraging established brand partnerships.

G

Gaston, s.r.o.

giana.pl

47

Gaston, s.r.o. operates as a regional distributor specializing in canned fish, vegetables, and fruits under multiple brand names including Gianna and Franz Josef. The company targets general consumers and retail businesses primarily in Poland and neighboring countries. Their business model focuses on wholesale distribution with a portfolio of premium and exotic food products, positioning them as an established player in the retail food sector. Technically, the website employs a traditional jQuery-based stack with UI enhancements such as sliders and modals, indicating moderate digital maturity. The site is mobile optimized and provides a clear navigation structure, though it lacks modern CMS or advanced frameworks. Security posture is moderate; HTTPS is used but no explicit security headers or privacy policies are present, and WHOIS data is missing, which impacts trust. Overall, the website is functional and professional but could benefit from enhanced security and compliance documentation.

G

GA FOOD Kft.

gafood.hu

45

GA FOOD Kft. is a Hungarian company specializing in the distribution of premium and exotic food products, including seafood, fruits, vegetables, oils, and specialty items. It operates as part of the Gaston Group, which includes multiple partner brands and domains, positioning itself as a medium-sized player in the retail food sector. The website provides clear business contact information and brand consistency, targeting both general consumers and business clients interested in quality food products. Technically, the website uses multiple versions of jQuery and several JavaScript libraries to enhance user experience, but lacks modern security practices such as HTTPS and security headers. The cookie consent mechanism is implemented, but no privacy policy or terms of service pages are found, indicating gaps in compliance. Overall, the site is functional and professional but requires improvements in security and privacy compliance to enhance trust and protect users.

G

GORAL, spol. s r.o.

goral.sk

45

GORAL, spol. s r.o. is a Slovak-based distributor specializing in canned fish, vegetables, and fruit products under well-known brands such as Franz Josef Kaiser, Giana, and Marinna. The company operates primarily in the retail sector, targeting general consumers in Slovakia and neighboring countries. It is part of the Gaston Group, which includes several partner companies across Central and Eastern Europe. The website reflects a medium-sized business with a consistent brand presence and recognized market position, evidenced by awards like Superbrands 2025. Technically, the website employs a traditional tech stack centered around jQuery and related plugins for UI components and sliders. While the site is mobile-optimized and has good SEO fundamentals, it lacks modern security practices such as HTTPS enforcement and security headers. Multiple versions of jQuery are loaded, which could introduce security vulnerabilities. The site does not appear to use a known CMS, and no advanced analytics or tracking tools are detected. From a security perspective, the site shows basic compliance with cookie consent requirements but lacks a published privacy policy, terms of service, or incident response contacts. The absence of HTTPS and security headers reduces the overall security posture. No critical vulnerabilities or malware indicators were found, but improvements are needed to align with best practices and GDPR compliance. Overall, the website is functional and professional but requires enhancements in security and privacy documentation to improve trust and compliance. Strategic recommendations include implementing HTTPS, consolidating JavaScript libraries, publishing privacy and security policies, and adding security headers to protect users and data.

I

Nejlevnější IQOS ILUMA, koupit v akci se slevou, návody a novinky

iqfan.cz

53

The website www.iqfan.cz is a Czech language platform focused on providing information, reviews, tips, and purchasing guidance related to IQOS tobacco heating devices, particularly the IQOS ILUMA series. It targets Czech-speaking users interested in IQOS products, offering discount codes and links to dealers and e-shops. The site maintains a moderate market position within the niche retail sector for tobacco alternatives. Technically, the site is built on ASP.NET Web Forms, uses jQuery 1.12.4, and integrates Google Analytics and Tag Manager for tracking. The design is professional and mobile-optimized, though accessibility features are basic. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and privacy policies. No WHOIS data is available, which limits domain trust verification. Overall, the site is content-rich and functional but would benefit from enhanced privacy compliance and security hardening.

G

Gaston, s.r.o.

gaston.cz

9

Gaston, s.r.o. is a Czech-based distributor specializing in canned food products such as fish, vegetables, and fruits under multiple brands including Franz Josef Kaiser, Giana, and Marinna. The company operates a medium-sized business model focused on retail and wholesale distribution within the food sector, supported by a network of subsidiaries across Central and Eastern Europe. The website reflects a professional presence with clear branding and product categorization, targeting both retail customers and business clients. Technically, the website uses legacy jQuery libraries alongside modern tracking tools like Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of security headers and outdated JavaScript libraries present potential risks. The lack of WHOIS data and privacy policy documentation reduces trust and compliance confidence. Overall, the website is functional and professional but would benefit from enhanced security practices and privacy transparency.

R

ROYAL MEDIA s. r. o.

ortopedicke-matrace.sk

55

Ortopedicke-matrace.sk is a Slovak e-commerce website specializing in the sale of orthopedic and health mattresses. The company, Royal Media s. r. o., operates a well-structured online store with a focus on quality products and customer convenience, including installment purchase options and a wide range of mattress categories. The website demonstrates a solid market position within Slovakia's retail mattress sector, targeting consumers seeking health-oriented sleep solutions. Technically, the site uses a combination of jQuery, sliders, and cookie consent management tools, hosted likely by Forpsi, with DNSSEC and SSL enabled, reflecting a good level of digital maturity. Security-wise, the site employs HTTPS, Cloudflare Bot Management, and cookie consent mechanisms, but could improve by adding more security headers and publishing incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR, with room for technical and security enhancements.

A

Apartmány Milovice

apartmanymilovice.cz

45

Apartmány Milovice is a small hospitality business providing apartment rentals near Mikulov in the South Moravia region of the Czech Republic. The website presents a professional and well-structured digital presence showcasing their accommodation offerings, amenities such as a pool, wine cellar, and bike storage, targeting tourists and visitors seeking a comfortable stay in a scenic area. The business appears legitimate with consistent WHOIS data and clear contact information.

D

Dřevoprogram Břeclav s.r.o.

drevoprogram.cz

39

Dřevoprogram Břeclav s.r.o. is a small, family-owned carpentry business based in the Czech Republic, specializing in custom manufacturing of doors, windows, stairs, gates, furniture, and other wood products. The company emphasizes quality materials and craftsmanship, serving a local customer base with a 25-year history. The website reflects a professional but modest digital presence, with clear contact information and social media integration. Technically, the site uses a combination of jQuery, Bootstrap, and other JavaScript libraries, hosted likely by WEDOS, with a custom CMS backend. While the site loads well and is mobile-optimized, there are some technical issues such as a broken Google Maps integration and use of an outdated jQuery version. Security posture is moderate, with no visible security headers and missing privacy and cookie policies, indicating compliance gaps. Overall, the site is trustworthy but would benefit from improved security and privacy practices.

L

Le Palais Megève

lepalaismegeve.com

57

Le Palais Megève operates the largest sports and leisure complex in the French Alps, offering a wide range of activities including aquatic facilities, ice rink, spa, fitness, climbing, tennis, and event spaces. The website targets families, sports enthusiasts, and general visitors seeking multisport and wellness experiences. The business is positioned as a key regional leisure destination with a medium-sized operation founded in 2017. Technically, the website is built on WordPress with a modern tech stack including jQuery, Slick Slider, and various UI libraries, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements such as DNSSEC and security headers are recommended. No critical vulnerabilities or blocking mechanisms were detected, and privacy compliance is well addressed with GDPR-consistent policies and cookie management. Overall, the website is professional, trustworthy, and well-aligned with the business objectives.

Prestige advertise is a small Czech Republic-based advertising and marketing service provider offering a range of services including promotional work, graphic design, printing, event marketing, internet marketing, and web services. The website is built on WordPress 4.6.30 with common plugins such as Contact Form 7 and SiteOrigin Panels, using technologies like jQuery and Bootstrap. The site is accessible without any WAF or security challenge, but it lacks modern security practices and compliance documentation. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the website presents a professional business front but requires significant improvements in security, privacy compliance, and domain transparency.

C

Cestikon

cestikon.cz

53

Cestikon is a Czech travel portal specializing in travel hacking, budget flights, accommodation, and travel stories. It targets travel enthusiasts seeking cost-effective travel solutions and inspirational travel content. The website is built on WordPress with a moderate technology stack including plugins for ratings, newsletters, and affiliate marketing. The site enforces HTTPS and includes some security headers, but uses outdated WordPress and jQuery versions, which may pose security risks. No privacy or cookie policies were found, indicating potential compliance gaps. WHOIS data is unavailable, limiting trust verification. Overall, the site appears to be a legitimate small travel blog with good content quality but requires improvements in security and privacy compliance.

S

SIGMA GROUP a.s.

sigma.cz

42

SIGMA GROUP a.s. is a well-established Czech manufacturing company specializing in the development, production, sales, and servicing of pumps for domestic, garden, and industrial use. Founded in 1868, it holds a leading market position as the largest Czech manufacturer of industrial pumps. The company operates multiple subsidiaries including SIGMA PUMPY HRANICE, s.r.o. and SIGMAshop.cz, targeting both industrial clients and general consumers. The website reflects a professional and consistent brand image with clear business information and multiple contact points. Technically, the site uses standard web technologies including Google Maps API and jQuery, though the jQuery version is outdated. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Privacy compliance is basic with a cookie consent banner but no visible privacy or terms of service pages. Overall, the site is functional, trustworthy, and suitable for its business purpose but could improve in security and compliance transparency.

T

Tělovýchovná jednota Sokol Kobeřice, z. s.

sokolkoberice.cz

58

TJ Sokol Kobeřice is a small local sports club based in Kobeřice u Brna, Czech Republic, primarily focused on organizing football teams across various age groups and leagues. The website serves as a community hub providing news updates, team information, cultural events, and photo galleries. The organization operates as a non-profit entity with a clear local community orientation. Technically, the website uses a custom CMS (H-optimal) and common web technologies such as jQuery, Bootstrap, and Fancybox, hosted likely by Wedos, a Czech hosting provider. The site is moderately optimized for mobile and performance but uses an outdated jQuery version which may pose security risks. Security posture is basic with no visible security headers and no published privacy or cookie policies, indicating compliance gaps with GDPR and related regulations. Contact information is clearly presented, enhancing business credibility. Overall, the website is functional and trustworthy for its intended audience but requires improvements in security and privacy compliance to reduce risk and enhance user trust.

9

90Phut TV

freethework.com

55

90Phut TV is a Vietnamese media company specializing in live streaming of football and other sports events, along with providing sports news, match schedules, results, and betting odds. Founded in 2020 and headquartered in Hanoi, Vietnam, it targets Vietnamese-speaking sports fans seeking free, high-quality online sports content. The website operates on WordPress CMS and integrates various modern web technologies including Google Analytics and Facebook SDK for analytics and social media integration. Advertising revenue, including betting affiliate programs, appears to be a key business model component. The company maintains a consistent brand presence across multiple social media platforms and provides clear contact information, enhancing business credibility. Technically, the website demonstrates moderate performance with good mobile optimization and SEO practices. However, some outdated JavaScript libraries and missing security headers indicate areas for improvement. The site uses HTTPS with good SSL configuration, but lacks explicit privacy and cookie policies, which impacts privacy compliance. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Security posture is moderate with HTTPS enabled and no exposed sensitive data, but the absence of security policies and vulnerability disclosures suggests limited formal security governance. The WHOIS data aligns well with the website's claims, showing transparency and legitimacy. Overall, the site is a functional and credible regional sports streaming platform with room for enhanced security and privacy compliance. Strategic recommendations include implementing comprehensive privacy and cookie policies, updating outdated libraries, adding security headers, and publishing incident response and vulnerability disclosure information to strengthen trust and compliance.

M

Multiple Sclerosis Nurses International Certification Board

msnicb.org

51

The Multiple Sclerosis Nurses International Certification Board (MSNICB) is a specialized non-profit organization focused on certifying nurses in the field of multiple sclerosis care. Established in 2001 and affiliated with the International Organization of Multiple Sclerosis Nurses (IOMSN), MSNICB provides certification, recertification, and emeritus status for MS nurses globally. Their website serves as an information hub for certification guidelines, exam schedules, resources, and board governance, targeting healthcare professionals specializing in MS nursing. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Revolution Slider, hosted behind Cloudflare DNS and CDN services. The site demonstrates moderate performance and good mobile optimization but uses an outdated jQuery version that could pose security risks. SEO practices are well implemented, though accessibility features are basic. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and important security headers. No explicit security or incident response policies are published, and cookie consent mechanisms are absent, indicating partial privacy compliance. Contact information is clear and professional, enhancing business credibility. Overall, MSNICB's website is a trustworthy and professional platform with good content quality and business credibility. However, improvements in security headers, updated libraries, and privacy compliance would strengthen its security posture and user trust.

V

Vila Jiřinka

vilajirinka.cz

45

Vila Jiřinka is a small wellness hotel and pension located in the center of the spa town Luhačovice, Czech Republic. The business offers accommodation, wellness services including whirlpool, sauna, salt cave, massages, and cosmetic procedures. The website is built on WordPress with a moderate technical infrastructure and basic mobile optimization. Security posture is good with HTTPS enabled but lacks advanced security headers and incident response information. Privacy and cookie policies exist but are basic and not fully GDPR compliant. The domain WHOIS data is missing, which reduces trustworthiness, but the website content and customer reviews indicate a legitimate and reputable business. Overall, the site provides a professional user experience with clear contact information and trust signals such as certifications and customer ratings.

I

International Organization of Multiple Sclerosis Nurses (IOMSN)

iomsn.org

47

The International Organization of Multiple Sclerosis Nurses (IOMSN) operates as a well-established non-profit professional association dedicated to supporting nurses specializing in multiple sclerosis care. Founded in 1998 and based in the USA, the organization offers membership services, educational programs, research grants, clinical guidelines, and hosts annual events to foster professional development and advocacy in MS nursing. The website reflects a mature digital presence with comprehensive content tailored to healthcare professionals and patients alike. Technically, the website is built on WordPress 4.9.28, hosted on DigitalOcean, and utilizes common plugins such as Contact Form 7 and Revolution Slider. While the site is mobile-optimized and provides a good user experience with clear navigation and relevant content, some technical debt is evident due to outdated software versions and missing security headers. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site benefits from HTTPS and domain transfer protections but lacks DNSSEC and critical security headers like CSP and HSTS. The absence of a cookie consent mechanism and outdated platform versions pose compliance and security risks. WHOIS data confirms the domain's legitimacy and long-standing registration, aligning with the organization's profile. Overall, the website is professional and trustworthy but would benefit from technical and security updates to enhance compliance and resilience. Strategic improvements in security posture and privacy compliance are recommended to maintain trust and safeguard user data.

T

TCHIKEBE

tchikebe.com

57

TCHIKEBE is a small French cooperative specializing in the edition and printing of contemporary artworks using serigraphy and fine art pigment printing techniques. The company also offers photographic shooting and custom framing services, targeting artists, galleries, and collectors. The website is built on the Artlogic CMS platform and integrates e-commerce capabilities for selling limited edition signed artworks. Technically, the site uses modern web technologies including jQuery and cloud-based image hosting with Cloudinary. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and detailed privacy policies. WHOIS data for the domain is missing, raising concerns about domain registration legitimacy. Overall, the website is professional and functional but would benefit from enhanced transparency and security practices.

J

JURA Elektroapparate AG

juragastroworld.de

58

JURA Deutschland Gastro is a professional division of JURA Elektroapparate AG, specializing in the sale and support of professional coffee machines and accessories for the hospitality sector in Germany. The website provides detailed product information, support resources, and partner network access tailored to professional customers. The company is positioned as a premium brand with a strong market presence in Germany's hospitality industry. Technically, the site is built on ASP.NET WebForms with jQuery and integrates Google Tag Manager for analytics. The site is mobile optimized with good navigation and professional design. Security posture is solid with HTTPS enforced and secure forms, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, supporting user consent mechanisms. No direct contact emails or phone numbers are exposed on the site, with contact facilitated via support pages. Overall, the site is trustworthy, professional, and safe for general audiences.

L

LIFE IN TOWN s.r.o.

lifein.town

62

JSMEZ.CZ is a Czech community portal operated by LIFE IN TOWN s.r.o., providing localized city information, news, events, and community services across multiple Czech cities. The website targets general public users interested in local happenings and community engagement. The business model focuses on regional community portals with additional services like electronic business cards and career opportunities. Technically, the site uses a traditional web stack including jQuery, Bootstrap, Font Awesome, and integrates analytics and social media SDKs. While the site is functional and moderately optimized, it uses an outdated jQuery version and lacks some modern security headers. Security posture is adequate with HTTPS and cookie consent implemented, but could be improved with enhanced headers and updated libraries. The absence of WHOIS data reduces domain trustworthiness, though the website content and business information appear professional and consistent. Overall, the site is safe for general audiences and compliant with GDPR requirements.

S

SCR interactive

scrinteractive.sk

57

SCR interactive is a Slovak digital marketing agency specializing in PPC, SEO, social media marketing, content marketing, and creative graphic services. With over 13 years of market presence and a portfolio of 138 satisfied customers, the company positions itself as a boutique agency focused on delivering integrated digital marketing solutions to businesses and e-shops. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site is built on WordPress with modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Yoast SEO. The site is mobile optimized and provides a good user experience with clear navigation. Security posture is adequate with HTTPS enforced and some security best practices observed, though security headers and explicit policies are limited. Privacy compliance is basic, lacking explicit privacy and cookie policies or consent mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

L

Life in Town s.r.o.

jsmezpardubic.cz

57

JSEM Z PARDUBIC is a Czech community portal operated by Life in Town s.r.o., targeting residents of Pardubice. The website offers local news, event listings, places of interest, job offers, photo galleries, and user profiles, positioning itself as a central hub for community engagement. It is part of a network of similar city portals across the Czech Republic, indicating a focused regional media business model. The site is professionally branded and consistent with its sister sites, serving a small but engaged local audience. Technically, the website is built on ASP.NET WebForms with a tech stack including jQuery, Bootstrap, Font Awesome, and integrates Google Custom Search and Facebook SDK for social and search functionalities. It uses HTTPS and includes cookie consent mechanisms, reflecting a moderate level of digital maturity. Performance and mobile optimization are adequate, though some libraries like jQuery are outdated, suggesting room for modernization. From a security perspective, the site enforces HTTPS and has privacy and cookie policies aligned with GDPR. However, no advanced security headers were detected, and no explicit incident response or security policies are publicly available. The absence of WHOIS data limits domain trust verification, but the website content and business information appear legitimate and consistent with a community media portal. Overall, the site presents a trustworthy and professional community platform with moderate technical and security maturity. Strategic improvements in security headers, library updates, and transparency of security policies would enhance its posture and trustworthiness.

J

JURA Suomi

jura.com

60

JURA Suomi is the Finnish localized website for JURA, a Swiss manufacturer of high-quality automatic coffee machines and related accessories. The site targets both home consumers and professional users in Finland, offering product catalogs, support, and dealer information. The brand is well-established globally with a consistent and professional online presence. Technically, the website is built on ASP.NET WebForms with jQuery and uses Google Tag Manager for analytics. The site is mobile-optimized and accessible, with good SEO practices. Security posture is adequate with HTTPS and form validation, though some improvements like updated libraries and security headers are recommended. Privacy and cookie policies are present and GDPR compliant, supporting user trust and regulatory adherence. Overall, the site reflects a mature digital infrastructure supporting a medium-sized retail and professional business in the hospitality sector.

L

Life in Town s.r.o.

jsemzezlina.cz

57

JSEM ZE ZLÍNA is a Czech community portal operated by Life in Town s.r.o., focusing on local news, events, places, and job offers primarily for the city of Zlín and surrounding regions. The website serves as a hub for residents to engage with community content and access localized information. It is part of a network of sister sites covering other Czech cities, indicating a regional community portal business model. The site is professionally branded and provides clear contact information, including company details and social media presence, enhancing its credibility. Technically, the website is built on ASP.NET WebForms with legacy jQuery and Bootstrap for frontend styling. It integrates modern analytics and tracking tools such as Microsoft Application Insights, Google Tag Manager, and Facebook SDK. The site is mobile-optimized and includes cookie consent mechanisms, reflecting a moderate level of digital maturity. However, some technical improvements are recommended, such as updating JavaScript libraries and implementing security headers. From a security perspective, the site enforces HTTPS and does not expose sensitive data in its HTML content. Privacy and cookie policies are present and appear GDPR compliant. No explicit security or incident response policies are found, and no WHOIS data is available due to privacy protection, which is common for small businesses. Overall, the security posture is moderate with room for enhancement in headers and incident response transparency. The overall risk assessment is low, with no signs of malicious or adult content. Strategic recommendations include improving security headers, updating legacy libraries, and adding explicit security policies to strengthen trust and compliance. The website is a legitimate, well-maintained community portal with a clear business focus and moderate technical sophistication.

Q

QI GROUP a. s.

qiakademie.cz

44

QI Akademie is a Czech-based educational and support platform operated by QI GROUP a. s., targeting users and implementation partners of the QI information system. The website offers training, webinars, support materials, and partner resources to facilitate effective use and implementation of the QI system. It positions itself as a key knowledge hub within its market segment in the Czech Republic. Technically, the website is built on WordPress 5.4 with Bootstrap 3.3.6 and jQuery 1.12.4, leveraging common web technologies and third-party services such as Microsoft Clarity and Google Analytics (though the latter is not fully configured). The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers and privacy compliance features. From a security perspective, the site enforces HTTPS and uses secure login forms but does not explicitly implement or advertise security policies, privacy policies, or cookie consent mechanisms. The absence of WHOIS data limits domain trust assessment, though the website content and contact information suggest a legitimate business presence. No critical vulnerabilities or adult content were detected. Overall, the site demonstrates a moderate to good level of technical and business maturity but requires improvements in privacy compliance, security headers, and WHOIS transparency to enhance trust and regulatory adherence.

Taneční škola A. & A. Mědílkovi is an established dance school based in Zlín, Czech Republic, with a history spanning over 70 years. The school offers a variety of dance courses including social dance for students, adult dance classes, salsa and Latin dance for women, and children's dance and movement courses. They also provide private dance lessons and organize dance performances for events. The website is professionally designed using WordPress with popular plugins such as WPBakery Page Builder and Slider Revolution, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and formal privacy and cookie policies, which are areas for improvement. WHOIS data is unavailable, which raises some concerns about domain registration transparency. Overall, the business appears legitimate and well-positioned in the local education sector, but should enhance privacy compliance and domain registration transparency to improve trust and security.

L

Life in Town s.r.o.

jsemzhradce.cz

56

The website www.jsemzhradce.cz operates as a community portal primarily serving the Hradec Králové region in the Czech Republic. It is managed by Life in Town s.r.o., a small company based in Olomouc. The portal offers local news, event listings, places of interest, job offers, photo galleries, and user profiles, targeting local residents and community members. The business model focuses on community engagement and local information dissemination, positioning itself as a regional hub for social and cultural activities.

L

LIFE IN TOWN s.r.o.

jsemzbudejovic.cz

57

JSEM Z BUDĚJOVIC is a Czech community portal operated by LIFE IN TOWN s.r.o., providing localized content such as news, events, places, job offers, and photo galleries primarily for the České Budějovice region and other Czech cities. The website serves as a digital hub for community engagement and local information sharing, supported by a network of sister sites across multiple Czech cities. The business model appears to be based on community-generated content and local advertising, targeting residents and community members. Technically, the website is built on ASP.NET WebForms with a tech stack including jQuery 1.12.4, Bootstrap, Font Awesome 6, and integrates Google Custom Search and Microsoft Application Insights for analytics. The site is mobile responsive with good navigation and SEO practices, though some technical improvements such as updating libraries and adding security headers could enhance security and performance. From a security perspective, the site uses HTTPS and implements a cookie consent banner indicating GDPR compliance. However, no advanced security headers or explicit incident response policies are visible. The WHOIS data is unavailable, likely due to privacy protection, but the website content and business information appear legitimate and consistent with a small media company. No adult or explicit content is present, making the site safe for general audiences. Overall, the website demonstrates a good balance of content quality, technical implementation, and privacy compliance, with room for security enhancements. The domain's privacy-protected WHOIS is typical for small businesses and does not raise immediate concerns. Strategic recommendations include improving security headers, updating outdated libraries, and formalizing incident response and vulnerability disclosure policies.

L

LIFE IN TOWN s.r.o.

jsmezbrna.cz

62

JSME Z BRNA is a Czech community portal operated by LIFE IN TOWN s.r.o., focusing on local news, events, places, job offers, and photo galleries primarily for the city of Brno and other Czech cities. The platform serves as a community hub, offering user-generated content and localized information to residents and visitors. It maintains a network of sister sites for other Czech cities, indicating a regional media presence. The business model centers on providing community engagement and localized advertising opportunities. Technically, the website is built on ASP.NET WebForms with a tech stack including jQuery, Bootstrap, Font Awesome, and integrates Google Tag Manager, Facebook SDK, and Microsoft Application Insights for analytics and marketing. The site is mobile-optimized with a clear navigation structure and uses HTTPS with a valid SSL certificate. Cookie consent and privacy policies are implemented, reflecting compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms but lacks advanced security headers and uses an outdated jQuery version, which could pose vulnerabilities. No exposed sensitive data or signs of malware were detected. The absence of a security.txt or incident response contact limits transparency in vulnerability handling. WHOIS data is unavailable, likely due to privacy protection, which is common for small businesses. Overall, the site presents a good security posture for its size and purpose, with moderate technical maturity and good privacy compliance. Strategic recommendations include updating libraries, enhancing security headers, and adding vulnerability disclosure information to improve trust and resilience.

L

Life in Town s.r.o.

jsemzostravy.cz

57

JSEM Z OSTRAVY is a Czech community portal operated by Life in Town s.r.o., focusing on local news, events, places, job offers, and social engagement primarily for the Ostrava region and other Czech cities. The website serves as a hub for community interaction, providing various services such as event calendars, photo galleries, and user profiles. It maintains a consistent brand presence across sister sites in multiple Czech cities, indicating a regional network approach. Technically, the website is built on ASP.NET WebForms with a tech stack including jQuery, Bootstrap, Font Awesome, Google Tag Manager, Facebook SDK, and Microsoft Application Insights. The site is mobile-optimized and uses HTTPS with good SSL configuration. However, some outdated libraries and missing security headers suggest room for technical improvements. From a security perspective, the site implements cookie consent and privacy policies compliant with GDPR, but lacks explicit security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected, but the absence of WHOIS data for the domain raises some trust concerns. Overall, the security posture is moderate with recommendations for enhanced headers and updated libraries. The overall risk assessment is moderate with a good balance of business credibility and technical implementation. Strategic recommendations include improving security headers, updating third-party libraries, and publishing clear security and incident response policies to enhance trust and compliance.

M

Maxdorf

maxdorf.cz

56

Maxdorf.cz is a well-established Czech medical publishing house specializing in professional healthcare literature and educational materials. The website serves as a portal for news, book releases, and access to an e-commerce platform for purchasing specialized medical books. The target audience primarily consists of healthcare professionals, medical students, and specialists within the Czech Republic. The business operates a niche publishing model with a strong reputation supported by expert authors and multiple awards. Technically, the website uses a combination of classic JavaScript libraries (MooTools, jQuery) and modern media players (Flowplayer), with Google Analytics and Tag Manager for user tracking. The site is hosted by REG-ZONER, a reputable Czech registrar and hosting provider. Security posture is moderate, with HTTPS usage implied but lacking visible security headers and modern security policies. Privacy and cookie policies are absent, indicating compliance gaps with GDPR. Overall, the website is professional, content-rich, and trustworthy but would benefit from enhanced security and privacy compliance measures.

The website www.lecba-bolesti.com serves as an informational platform focused on the treatment of chronic and acute pain, primarily targeting patients and individuals seeking medical advice in the Czech Republic. It is operated by S.A.B. Medical, s.r.o., a small healthcare-related company that also distributes medical supplies. The site provides educational content on pain types, scales, and treatment options, supported by links to related healthcare resources and partner sites. Technically, the site is built on the Estranky.cz CMS platform using legacy JavaScript libraries such as jQuery 1.12.4 and integrates Facebook SDK for social features. While the content is relevant and well-structured, the technical implementation shows moderate performance and basic mobile optimization. Security posture is weak due to lack of HTTPS enforcement and missing security headers, and privacy compliance is poor with no visible privacy or cookie policies. The WHOIS data is unavailable, which raises concerns about domain registration transparency, although the presence of company legal information on the site partially offsets this risk. Overall, the site is functional but requires significant improvements in security, privacy, and technical modernization to enhance trust and compliance.

The website 'Žilní poradna - léčba křečových žil a metliček' is operated by S.A.B. Medical, s.r.o., a small healthcare entity based in the Czech Republic specializing in venous insufficiency and varicose vein treatments. The site provides medical information, patient guidance, and details about treatment options such as radiofrequency, laser, and surgical methods. It serves a targeted audience of patients and individuals seeking specialized vascular care. The business model appears to be informational and advisory, potentially supported by medical product distribution partnerships. Technically, the website is built on the Estranky.cz CMS platform and uses legacy JavaScript libraries like jQuery 1.12.4 and jQuery UI 1.12.1. It integrates Google Analytics and Facebook SDK for user tracking and marketing purposes. The site shows basic mobile optimization and accessibility features but lacks advanced SEO and modern performance optimizations. No explicit security headers were detected, and privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. From a security perspective, the site uses HTTPS for external scripts, but the SSL configuration and security headers are unknown or missing. The absence of privacy and cookie policies, outdated libraries, and missing WHOIS domain registration data reduce the overall security posture and trustworthiness. No critical vulnerabilities or adult content were detected, but improvements are needed to enhance compliance and security. Overall, the website is functional and provides relevant healthcare content but requires significant enhancements in privacy compliance, security best practices, and technical modernization to improve trust and user experience.

Č

Česká lékařská společnost J. E. Purkyně ve společnosti STAPRO s. r. o.

casopiskbm.cz

50

The website casopiskbm.cz serves as the official online platform for the medical journal 'Klinická biochemie a metabolismus', published by the Czech Medical Society J. E. Purkyně in cooperation with STAPRO s.r.o. The journal focuses on clinical biochemistry, metabolism, and related medical fields, targeting healthcare professionals and researchers. The site provides access to current and archival issues, manuscript submission, and editorial information, positioning itself as a niche but reputable scientific publication with a legacy dating back to 1971. Technically, the website is built on the Actavia engine CMS and employs legacy JavaScript libraries such as jQuery 1.12.4, along with modern utilities like Headroom.js and Modernizr. Hosting is provided by WEDOS, a Czech registrar and hosting provider. The site demonstrates moderate performance and basic mobile optimization but lacks advanced accessibility and SEO features. The presence of Google Analytics indicates moderate user tracking without visible cookie consent mechanisms. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks modern security headers and uses outdated JavaScript libraries, which could pose vulnerabilities. No explicit privacy or cookie policies are present, and GDPR compliance is not clearly demonstrated. The WHOIS data aligns well with the website's claims, showing consistent registration and no privacy protection, which supports legitimacy. Overall, the site is a credible and professional medical journal platform with room for improvement in security practices, privacy compliance, and technical modernization. Strategic enhancements in these areas would strengthen trust and user protection.

T

TCC – sportovní služby s.r.o.

tcc-sportovnisluzby.cz

44

TCC – sportovní služby s.r.o. is a Czech Republic-based small business specializing in individual and group hockey training, sports camps, and related services targeting children, youth, and adults. The company offers a variety of hockey-related training programs including skills camps, goalie training, video analysis, and conditioning programs. Their market position is niche and regional, supported by partnerships with local sports organizations and businesses. The website is professionally designed with consistent branding and clear navigation, providing good user experience and relevant content for its audience. Technically, the website uses a modern CMS (ProcessWire) and incorporates several popular JavaScript libraries and frameworks such as Foundation, jQuery, and Owl Carousel. It integrates multiple analytics and marketing tools including Google Analytics, Google Tag Manager, Hotjar, and retargeting services. The site is mobile optimized and performs moderately well, though some technical debt is present due to the use of an outdated jQuery version. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in the HTML. However, it lacks important security headers and uses an outdated jQuery version with known vulnerabilities, which could pose risks. Privacy compliance is weak as no privacy or cookie policies are found, and no consent mechanism is implemented despite the use of tracking scripts. Contact information is clearly provided, enhancing business credibility. Overall, the site scores moderately well but would benefit from improvements in security and privacy compliance.

V

VISTA car

vistacar.cz

58

VISTA car is an established automotive dealership and authorized service partner for Škoda and Hyundai vehicles, operating primarily in the Czech Republic since 1999. The company offers new and used car sales, servicing, and rental services, targeting regional customers in Kyjov and Hodonín. The website reflects a professional business presence with clear branding and relevant content for its audience. Technically, the site uses common web technologies including jQuery, Google Tag Manager, Google Analytics, Facebook Pixel, and Cookiebot for cookie consent management. The site is hosted under a Czech registrar consistent with the business location. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though improvements are recommended in security headers and updating legacy libraries. Privacy compliance is well addressed with detailed cookie classifications and opt-in consent. Overall, the website demonstrates a good level of digital maturity and business credibility, supporting its market position as a trusted automotive partner.

I

Institut postgraduálního vzdělávání ve zdravotnictví

ipvz.cz

60

Institut postgraduálního vzdělávání ve zdravotnictví (IPVZ) is a Czech educational institution specializing in postgraduate training and continuing education for healthcare professionals including doctors, dentists, pharmacists, and non-medical healthcare workers. The website serves as a comprehensive portal offering course catalogs, client registration, certification information, and additional services such as hotel and congress facilities. IPVZ holds a strong position in the Czech healthcare education sector with a clear focus on professional development and specialization. Technically, the website is built on ASP.NET WebForms with legacy jQuery and modern frontend libraries, delivering a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforcement and CSRF protections, though improvements are recommended in HTTP security headers and updating legacy libraries. Privacy compliance is well addressed with detailed policies and cookie consent mechanisms. However, the absence of WHOIS data for the domain reduces transparency and slightly impacts trust. Overall, IPVZ presents a professional, secure, and user-friendly platform for healthcare education in the Czech Republic.

The website spiralis.cz is a minimal WordPress site with very limited content and no detailed business information. It appears to be related to spiralis-os.cz, which may be the primary business entity. The site uses an outdated WordPress version and Divi theme, with no visible privacy or cookie policies, and lacks contact information. The absence of WHOIS data raises concerns about domain registration legitimacy. Technically, the site uses standard WordPress technologies but requires updates and security improvements. The security posture is weak due to outdated software and missing security headers. Overall, the site presents a low trust profile and minimal business credibility.

L

Lietuvos išsėtinės sklerozės sąjunga

liss.lt

37

Lietuvos išsėtinės sklerozės sąjunga is a Lithuanian non-profit organization focused on coordinating multiple sclerosis associations and providing social and psychological support, as well as advocacy for patients at the national level. The website presents a professional and consistent brand image, targeting patients, healthcare professionals, and the general public interested in multiple sclerosis. Technically, the site is built on an older WordPress version with common plugins and uses HTTPS, but lacks modern security headers and privacy policies. The security posture is moderate with no visible vulnerabilities but could be improved by updating software and adding security headers. Overall, the site is accessible and safe, but the absence of WHOIS data and contact information reduces trust and compliance levels.

R

Radix

radixcz.cz

51

Radix is a Czech Republic-based company specializing in healthcare technology products and services, offering a broad portfolio designed to assist customers in various medical scenarios. The website targets healthcare professionals and customers seeking medical technology solutions, positioning itself as a niche provider within the Czech healthcare market. The business model focuses on product sales and servicing, with content primarily in Czech and an English language option available. Technically, the website is built on WordPress 4.9.28 with several plugins including Yoast SEO and a cookie consent mechanism. While the site is accessible and moderately optimized for SEO and mobile, it uses an outdated CMS version and lacks modern security headers. Google Analytics is installed but not configured, indicating incomplete analytics setup. Performance and accessibility are basic but functional. From a security perspective, the site uses HTTPS but lacks important security headers and does not provide privacy or terms of service pages, which are critical for GDPR compliance. The WHOIS data is unavailable, which raises concerns about domain registration transparency and trustworthiness. No forms or incident response contacts are present, limiting the ability to assess data protection and incident readiness. Overall, the website is functional and provides essential business information but requires improvements in security posture, privacy compliance, and technical modernization to enhance trust and protect user data effectively.

Č

Česká lékařská společnost J. E. Purkyně

czechurol.cz

50

The website czechurol.cz serves as the official online presence of the Czech Urological Society's medical journal, publishing peer-reviewed articles and research in the field of urology. It targets medical professionals and experts in medicine and pharmacy, providing access to current and archival journal issues. The site is supported by the Czech Medical Society J. E. Purkyně and powered by the Actavia editorial system. The domain is well-established since 2006, reflecting a stable and credible publication history. Technically, the website employs a traditional web stack with jQuery, Modernizr, and a custom editorial platform. Hosting is provided by Aerohosting, a Czech hosting provider, ensuring regional consistency. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. No major technical flaws were detected, though some modernization could improve user experience. From a security perspective, the site uses HTTPS but lacks important security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security posture. No vulnerabilities or exposed sensitive data were found, but the use of an outdated jQuery version and absence of incident response contacts are notable gaps. Overall, the website is a trustworthy and professional resource for its niche audience but would benefit from enhanced privacy compliance, security hardening, and technical modernization to maintain and improve its standing in the healthcare publishing sector.

A

Agricultural Industries Confederation

agindustries.org.uk

66

The Agricultural Industries Confederation (AIC) is a leading UK trade association representing the agri-supply industry. The organization provides a broad range of services including trade assurance schemes, policy advocacy, member support, and industry events. Their website reflects a mature digital presence with comprehensive content targeting UK agri-supply businesses and stakeholders. The site emphasizes sustainability, regulatory compliance, and industry collaboration. Technically, the website employs modern frameworks such as Bootstrap and jQuery, integrates Google Tag Manager for analytics, and implements a robust cookie consent mechanism, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and cookie security best practices, though there is room for improvement in publishing explicit security policies and enhancing security headers. Overall, the website is professional, trustworthy, and well-structured, supporting the organization's market position as a key industry voice.

P

Playtech People

playtechpeople.com

9

Playtech People is a large, established technology company specializing in designing and operating gaming technology for over 150 betting and gaming brands worldwide. With a workforce of approximately 7,400 employees, the company emphasizes career development, responsible gaming, and a professional work environment. The website serves primarily as a corporate and recruitment platform, showcasing global locations and career opportunities. Technically, the site is built on WordPress with modern frameworks such as Bootstrap 5 and integrates analytics and cookie consent tools like Google Tag Manager and Cookiebot. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks explicit security policies and incident response contacts. The absence of WHOIS data for the domain is a notable anomaly that impacts trust assessment. Overall, the site is professional, well-structured, and targets job seekers and industry professionals in the gaming sector.