Security Directory

U

UnionOcel s.r.o.

unionocel.cz

51

UnionOcel s.r.o. is a Czech-based medium-sized manufacturing and wholesale company specializing in steel sheets, cuttings, and CNC machining services. Established in 2001, it has developed a strong market position as a leader in its sector, offering a broad portfolio of metalworking services supported by modern facilities and technologies. The website reflects a professional and consistent brand image, targeting industrial clients and manufacturers. Technically, the site employs modern web technologies including Bootstrap, jQuery, and integrates advanced analytics and marketing tools such as Google Tag Manager and Microsoft Clarity. Security measures include HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, although some security headers are missing and no explicit security policy is published. Overall, the site is well-structured, GDPR compliant, and trustworthy, with no signs of malicious activity or content safety concerns.

Vortexvision.cz is a professional freelance graphic design studio operated by Josef Šíf, established in 2007. The business specializes in web and e-shop design, photomontages, visualizations, and other graphic services tailored to enhance brand awareness and marketing impact. The website serves as a portfolio and contact point for potential clients, primarily targeting Czech-speaking businesses and individuals seeking creative graphic solutions. The site demonstrates a consistent and professional brand image with a clear presentation of services and references.

I

International Judo Federation

ijf.org

11

The International Judo Federation (IJF) operates a comprehensive and professionally designed website serving as the official hub for the global judo community. The site offers extensive content including news, event calendars, world rankings, video libraries, and educational resources, positioning IJF as a leading authority in the sport of judo worldwide. The federation's presence in over 200 countries and its Olympic status since 1964 underscore its global influence and reach. Technically, the website employs modern web technologies such as JavaScript, CSS3, and HTML5, with integrations like Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is hosted behind Cloudflare CDN, ensuring performance and security benefits. Mobile optimization and accessibility are well addressed, providing a good user experience across devices. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting a mature approach to user privacy and data protection. However, explicit security headers and a public security policy or vulnerability disclosure page are absent, representing areas for improvement. The WHOIS data is unavailable or privacy-protected, which is common for organizations of this nature and does not detract from the site's legitimacy. Overall, IJF.org demonstrates a high level of professionalism, trustworthiness, and compliance with privacy standards. The site is safe for general audiences, free from adult or questionable content, and well-positioned to serve its community effectively.

D

Dojo de Paris | Evénements, location, spectacles, salons

dojodeparis.com

46

The website www.dojodeparis.com appears to represent a small-scale martial arts dojo or school, likely based in France given the language and domain name. The site is built on the Wix platform, utilizing standard Wix scripts and assets, indicating a basic level of digital maturity. However, the website content is minimal, with no clear business descriptions, contact information, or privacy policies, which limits its professional presentation and user trust. Technically, the site uses HTTPS but lacks advanced security headers and privacy compliance features. The absence of WHOIS registration data raises concerns about the domain's legitimacy and trustworthiness. Overall, the site is accessible without WAF or security challenges but scores low on business credibility and privacy compliance. Strategic improvements are needed to enhance security posture, legal compliance, and business transparency.

D

DS Automobiles

dsautomobiles.cz

62

DS Automobiles Czech Republic operates a professionally designed website showcasing their luxury French automobile offerings, including new models, financing, leasing, and after-sales services. The site targets B2C customers in the Czech market with a focus on premium vehicles and connected services. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries and responsive design, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and a GDPR-compliant cookie consent mechanism, though explicit privacy policies and security headers are lacking. The absence of WHOIS data reduces domain trustworthiness but the overall branding and content quality indicate a legitimate business under the Stellantis group.

P

PASSERINVEST GROUP, a.s.

pobavmeseotom.cz

48

The website 'Pobavme se o tom' is a professionally designed platform operated by PASSERINVEST GROUP, a.s., focusing on real estate development and community engagement in the Brumlovka area of Prague 4. It provides detailed information about investments, urban planning, environmental initiatives, and local community activities, targeting residents, workers, and visitors of the area. The site demonstrates a strong market position as a significant real estate developer with a clear business model centered on urban development and community relations. Technically, the website is built on the ProcessWire CMS platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, jQuery, and libraries like Fancybox and ScrollTrigger. The site is mobile-optimized with good SEO practices and moderate performance. Hosting is provided by Active24, consistent with the domain registrar data. No major technical issues or vulnerabilities were detected, though security headers are absent and could be improved. From a security perspective, the site enforces HTTPS and does not expose sensitive data or use vulnerable libraries. However, it lacks visible privacy and cookie policies, security policies, and incident response information, which are important for compliance and user trust. No tracking or analytics scripts were detected, indicating minimal user tracking. The WHOIS data confirms the domain's legitimacy and consistency with the business. Overall, the website is trustworthy, professional, and safe for general audiences. Strategic improvements include adding privacy and cookie policies, implementing security headers, and publishing security and incident response information to enhance compliance and user confidence.

K

Křesťanská střední škola, základní škola a mateřská škola Elijáš

elijas.cz

48

The website www.elijas.cz represents a Christian educational institution located in Prague, offering kindergarten, primary, and secondary education along with associated services such as a school canteen and after-school programs. The institution is operated by the České sdružení CASD, a recognized Christian association. The website is well-structured, professionally designed, and targets parents and students seeking faith-based education in the Czech Republic. Technically, the site uses modern web standards with HTML5, CSS3, and JavaScript, and integrates Matomo analytics for user tracking with a cookie consent mechanism, reflecting a moderate level of digital maturity. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers could enhance protection. The absence of WHOIS data limits domain trust assessment, but the website content and contact information support legitimacy. Overall, the site is a credible digital presence for the educational institution with room for security and compliance improvements.

Krčák žije is an online magazine dedicated to the Krčský les area in Prague, providing local news, event calendars, interactive maps, and community information. It is initiated and supported by Passerinvest Group, a real estate developer active in the region. The website serves local residents and visitors interested in nature, sports, and cultural activities. Technically, the site uses modern web technologies including Bootstrap, jQuery, Font Awesome, and integrates Google Analytics and Facebook Pixel for tracking, with a cookie consent mechanism in place. The site is hosted on Czech infrastructure with consistent WHOIS data indicating legitimacy. Security posture is good with HTTPS and form validation, but lacks some advanced security headers and published security policies. Privacy compliance is basic, with no explicit privacy policy or terms of service found. Overall, the website is professional, trustworthy, and safe for general audiences.

Mobile Industrial Robots (MiR) is a Denmark-based company specializing in autonomous mobile robots designed to automate internal transportation for businesses. Founded in 2012 and now part of Teradyne Robotics, MiR offers versatile robotic solutions complemented by service portals, training academies, and community engagement platforms. The company targets industrial and manufacturing sectors seeking automation to improve operational efficiency. The website reflects a mature digital presence with professional design and clear navigation, supporting a global B2B audience. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, leveraging Storyblok CMS for content management. Performance and mobile optimization are good, though accessibility features are basic. Security posture is solid with HTTPS enforced and domain transfer protections, but lacks advanced security headers and explicit incident response policies. Privacy compliance is adequate with privacy and cookie policies present, though no active consent mechanism is detected. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

J

JSNŠ

jsns.cz

59

The website www.jsns.cz represents an educational initiative named Jeden svět na školách (JSNS), focused on providing free and legal documentary film screenings for schools in the Czech Republic. The platform supports educators by offering activities and projects to enrich teaching. The site targets schools and educators, positioning itself as a niche non-profit educational content provider. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for consent management, Leaflet.js for mapping, and standard web libraries such as Font Awesome and Select2. The site is mobile optimized and demonstrates good SEO and accessibility basics. Security-wise, HTTPS is enforced with appropriate security headers, and no vulnerabilities or exposed sensitive data were detected. Cookie consent mechanisms are implemented, indicating GDPR awareness, although no explicit privacy policy or terms of service pages were found in the provided content. WHOIS data is unavailable, which reduces transparency and trustworthiness from a domain registration perspective. Overall, the website is professionally designed, secure, and serves a clear educational purpose, but would benefit from enhanced privacy disclosures and contact information to improve compliance and trust.

C

Comité National Olympique et Sportif Français (CNOSF)

franceolympique.com

66

The website represents the Comité National Olympique et Sportif Français (CNOSF), the French National Olympic and Sports Committee. It serves as an official platform to promote Olympic sports and support athletes in France. The site targets sports professionals, athletes, and the general public interested in Olympic activities. The business model is non-profit and government-related, focusing on sports promotion and Olympic movement support. The website is professionally designed using modern frameworks such as Bootstrap and custom fonts, providing a good user experience with clear navigation and mobile optimization. However, the technical implementation lacks advanced security headers and privacy compliance indicators, which are critical for enhancing user trust and regulatory adherence. The WHOIS data for the subdomain is unavailable, but the domain's branding and content strongly indicate legitimacy as part of the French Olympic Committee's digital presence.

REJ.cz is a regional Czech website providing local information including accommodation options, snow reports, trip tips, news, classifieds, and event programs primarily for Šumperk, Olomouc, and surrounding areas. The site targets residents and visitors interested in local services and tourism. The business model appears to be a local information and advertising portal with a focus on regional content. Technically, the website uses basic HTML and CSS with Google Fonts for typography, but lacks modern frameworks or CMS indications. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is weak due to absence of HTTPS, security headers, and privacy policies. WHOIS data is missing, reducing domain transparency and trust. Overall, the site is functional but basic, with significant room for improvement in security, privacy compliance, and technical sophistication.

B

Barum

barum-reifen.de

66

Barum is a well-established tire brand operating under the Continental umbrella, offering affordable and durable tires for passenger cars, SUVs, vans, trucks, and industrial vehicles. The website is professionally designed using Adobe Experience Manager, featuring comprehensive product information, dealer search, and customer support options. The digital infrastructure includes modern tracking and consent management tools, ensuring compliance with GDPR and cookie regulations. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. The absence of WHOIS data reduces domain trustworthiness, but the brand association and website professionalism support legitimacy. Overall, the site serves its target audience effectively with good user experience and content quality.

D

Dětský domov Liptál

ddliptal.cz

51

Dětský domov Liptál is a longstanding educational and child care institution operating under the auspices of the Zlínský kraj regional government in the Czech Republic. The organization provides residential care and educational support to children who cannot live with their parents, emphasizing a safe and nurturing environment. The website reflects this mission with clear content and a professional presentation, targeting families, children, and regional stakeholders. Technically, the site is built on the Webnode CMS platform, leveraging modern web technologies and Amazon Cloudfront CDN for hosting static assets. Google Tag Manager is used for analytics, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced, but the absence of security headers and privacy policies suggests room for improvement. The lack of WHOIS data limits domain trust verification, though the website content and regional affiliation support legitimacy. Overall, the site is functional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

G

GARVIS Solutions s.r.o.

rezervace.online

69

REENIO, operated by GARVIS Solutions s.r.o., is a Czech-based online reservation system offering a cloud-hosted SaaS platform tailored for businesses providing direct customer services such as wellness centers, sports facilities, and cultural events. The platform features flexible booking options, automated notifications, integrated online payments, and a user-friendly interface optimized for desktop and mobile devices. It holds a strong market position in the Czech Republic with a growing customer base and recognized certifications including GDPR readiness and payment provider certifications. Technically, the website employs modern web technologies including Bootstrap, Font Awesome, and cloud hosting on Microsoft Azure, ensuring fast performance and mobile responsiveness. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and secure payment integrations, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable service provider in its domain.

P

Povodňový plán České republiky

dppcr.cz

50

The website dppcr.cz serves as the official digital flood plan portal for the Czech Republic, providing comprehensive flood-related information, meteorological data, flood commission activities, and thematic maps. It targets government agencies, emergency responders, and public stakeholders involved in flood management. The site is well-structured with clear navigation and integrates links to national and European meteorological services, positioning itself as a key resource in national flood preparedness and response. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript with jQuery, and Google Fonts. It employs HTTPS and Google Analytics for tracking, though lacks advanced security headers and cookie consent mechanisms. Mobile optimization is basic but functional, and accessibility features are minimal. The hosting and domain registration are consistent with a Czech government entity, enhancing trustworthiness. From a security perspective, the site benefits from HTTPS and absence of visible vulnerabilities or sensitive data exposure. However, it lacks explicit privacy and cookie policies, security headers, and incident response contact information, which are important for compliance and user trust. The use of Google Analytics without consent mechanisms may pose privacy compliance risks under GDPR. Overall, the website is a credible and authoritative government resource with good content quality and business credibility. To improve, it should implement privacy and cookie policies with consent, enhance security headers, and provide clear contact information for security and data protection matters. These steps will strengthen compliance, user trust, and security posture.

G

GoPay s.r.o.

gopay.com

71

GoPay s.r.o. operates a professional payment gateway service targeting merchants and e-commerce businesses primarily in the Czech Republic and surrounding European markets. The company offers a comprehensive payment solution with over 80 features including support for Apple Pay, Google Pay, multiple currencies, and localized payment experiences in 19 languages. The website reflects a mature business with over 18,000 merchants and more than 10 years of operational history, positioning GoPay as a trusted player in the payment processing industry. Technically, the website is built with modern web technologies including HTML5 video, JavaScript, and CSS3, and integrates Google Tag Manager for analytics and marketing. The site is hosted on Amazon Web Services, indicating a robust infrastructure. The website is mobile optimized, fast loading, and includes cookie consent mechanisms compliant with GDPR, reflecting a high level of digital maturity. From a security perspective, the site enforces HTTPS and PCI DSS certification is prominently displayed, indicating adherence to industry security standards. However, the absence of explicit security headers and a published security policy or incident response contact represents areas for improvement. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is professional, trustworthy, and compliant with privacy regulations, but the lack of WHOIS domain registration data raises concerns about domain legitimacy. Strategic recommendations include publishing a security policy, adding security headers, and clarifying domain registration details to enhance trust and security posture.

Glia Media is a specialized medical marketing and communications agency with a focus on neuroscience and healthcare sectors. Established in 2012 and operating as a division of Mayfield Brain & Spine, the company offers a range of services including medical marketing, illustration, writing, academic publication support, event planning, and patient education. Their website reflects a professional and consistent brand presence targeting healthcare professionals and organizations seeking expert communications support. Technically, the website employs a modern but straightforward technology stack including Bootstrap, jQuery, and Google Analytics. It is hosted by Bluehost Inc., a reputable hosting provider. The site is mobile optimized and SEO friendly, though accessibility features are basic. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. The WHOIS data shows a consistent and legitimate domain registration with no privacy protection, supporting trustworthiness. Overall, the website is professional and functional with moderate security and privacy posture. Strategic improvements in privacy compliance and security headers would enhance trust and regulatory adherence.

M

Mayfield Education & Research Foundation

mayfieldfoundation.org

52

The Mayfield Education & Research Foundation is a specialized non-profit organization focused on advancing care for patients with brain and spine disorders through education and research. Established in 2011 and based in Cincinnati, Ohio, the foundation offers educational programs, supports research initiatives, and engages donors to further its mission. The website reflects a professional and consistent brand presence targeting patients, medical professionals, researchers, and donors. Technically, the website employs a modern tech stack including Bootstrap 4.3.1, jQuery, and Google Tag Manager for analytics. The site is mobile-optimized with good SEO practices and clear navigation, though accessibility features are basic. Hosting details are not explicit but DNS is managed via Register.com. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS and Google Tag Manager but lacks DNSSEC and visible security headers such as CSP or HSTS. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. No forms or data collection fields are detected on the main page, reducing immediate risk exposure. WHOIS data aligns well with the website's claims, supporting legitimacy. Overall, the site is trustworthy and professional but would benefit from enhanced security headers, DNSSEC implementation, and explicit privacy and cookie policies to improve compliance and user trust.

M

Ministerstvo obrany ČR a Charity Česká republika

digimak.cz

59

DiGiMÁK.cz is a government and charity-backed campaign website launched in 2024 to honor war veterans in the Czech Republic through a virtual poppy initiative. The site serves as an informational platform for the campaign organized by the Ministry of Defence of the Czech Republic and Charity Czech Republic. It targets Czech citizens and supporters of veterans, providing campaign details and links to the Military Solidarity Fund for donation results. The website is professionally designed with consistent branding and clear messaging but lacks privacy and cookie policies as well as contact information. Technically, the site uses standard HTML5 and CSS3 with Google Fonts, hosted under a recently registered domain consistent with the campaign launch. Security posture is basic with no detected security headers or explicit policies, and no analytics or tracking scripts are present, indicating minimal user tracking. Overall, the site is trustworthy and safe, but improvements in privacy compliance and security best practices are recommended.

B

BriberyMatters

briberymatters.com

57

BriberyMatters is a website focused on the topic of bribery, likely aiming to provide information or advocacy related to anti-bribery issues. The site is built on the Wix platform, indicating a small to medium scale digital presence with basic technical infrastructure. The website content is accessible and safe, with no adult or explicit material detected. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and ownership transparency. The site lacks critical compliance elements such as privacy and cookie policies, contact information, and security policies, which impacts its trustworthiness and business credibility. Technically, the site uses standard Wix technologies and scripts, with moderate performance and basic SEO and accessibility features. Security posture is basic with HTTPS enabled but missing advanced security headers and policies.

B

Úvodní stránka | BEST

bestvisio.cz

65

BESTVISIO.cz is a Czech Republic based small business specializing in providing innovative digital tools for customers to select and visualize paving and fencing products. Their offerings include online configurators for paving and fences and a virtual reality application that allows users to preview fencing options in real environments using mobile devices. The website is professionally designed with good content quality and consistent branding, targeting homeowners and customers interested in outdoor home improvement products. Technically, the site uses modern web technologies including lazy loading images, responsive CSS, and integrates Google Analytics and CookieHub for tracking and cookie consent management. Security posture is moderate with cookie consent and Google reCaptcha usage but lacks visible security headers and published privacy policies. WHOIS data is unavailable, indicating privacy protection, which slightly reduces transparency but is not uncommon for small businesses. Overall, the site is safe, user-friendly, and provides useful tools for its niche market.

Mobirise Ltd operates the Mobirise AI Website Generator, a technology platform that enables users to create professional websites easily using AI and drag-and-drop tools. The company targets a broad audience including small businesses, freelancers, bloggers, and e-commerce startups, positioning itself as a flexible and user-friendly alternative to other AI website builders. Technically, the website is built on modern frameworks like Bootstrap 5 and integrates analytics and advertising tools such as Google Tag Manager and Facebook Pixel. The security posture is solid with HTTPS and domain protections, though some headers and explicit security policies could be improved. Privacy compliance is adequate with clear privacy and terms pages, but lacks cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for SEO and mobile use.

S

Spin On

spin-on.fr

61

Spin On is a small, professional web agency based in Besançon, France, specializing in the creation of websites, e-commerce platforms, mobile applications, and custom software development. The company has been operating since 2013 and serves primarily local and regional businesses. Their website demonstrates a solid digital presence with a focus on GDPR compliance and user privacy, evidenced by the integration of Cookiebot for cookie consent management. The agency leverages modern web technologies and frameworks such as WordPress, Drupal, Prestashop, and Laravel to deliver tailored solutions to clients. Technically, the website employs a modern tech stack including JavaScript libraries like jQuery, TweenMax, and Rellax for enhanced user experience and performance optimizations such as lazy loading. Hosting is provided via DigitalOcean, a reputable cloud provider, ensuring reliable infrastructure. The site is mobile-optimized and SEO-friendly, although accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS and implements a comprehensive cookie consent mechanism, but lacks explicit security headers and documented security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The use of Facebook Pixel and Google Analytics indicates moderate user tracking, balanced with GDPR compliance. Overall, Spin On presents a trustworthy and professional digital footprint with room for improvement in security hardening and accessibility. The domain registration data aligns well with the business profile, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility compliance to strengthen trust and compliance posture.

S

SK Slavia Praha

slavia.cz

46

SK Slavia Praha is a prominent Czech football club with a well-established online presence through its official website. The site serves as a comprehensive platform for fans and stakeholders, offering news, match schedules, ticket sales, team information, and fan engagement content. The business model revolves around sports media, merchandising, and ticketing services, targeting football enthusiasts primarily in the Czech Republic. The website reflects a professional brand image consistent with the club's reputation and partnerships.

F

Fotbalový Klub Jablonec a.s.

fkjablonec.cz

47

FK Jablonec is a well-established Czech football club with a strong digital presence through its official website. The site serves as a comprehensive platform for fans and stakeholders, offering news, match information, player statistics, ticketing details, and a merchandise e-shop. The club maintains active engagement with its audience via multiple social media channels and partners with various sponsors and organizations, reflecting a solid market position within Czech football. The website's design is professional and consistent with the club's branding, targeting football enthusiasts and the local community. Technically, the site employs modern web technologies including JavaScript, Google Tag Manager, and custom CSS, hosted on a Czech hosting provider, ensuring moderate performance and good mobile optimization. Security-wise, the site uses HTTPS and implements a detailed cookie consent mechanism aligned with GDPR requirements, though it lacks explicit security headers and incident response contact information. Overall, FK Jablonec's website demonstrates a mature digital infrastructure with room for enhanced security practices and transparency. Strategic recommendations include adding security headers, publishing a security.txt file, and providing clearer contact information for privacy and incident response. These improvements would strengthen the club's trustworthiness and compliance posture while maintaining its strong fan engagement and business credibility.

E

eSports.cz, s.r.o.

fkmb.cz

46

FK Mladá Boleslav operates an official website serving as the primary digital platform for the Czech football club. The site provides comprehensive information about the club's teams, match schedules, youth academy, partners, and multimedia content, targeting fans and the local community. The business model focuses on fan engagement, merchandising through an integrated fanshop, and promoting club partners. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

V

Vilgain

vilgain.co.uk

73

Vilgain is a UK-based e-commerce business specializing in sports nutrition, functional foods, sportswear, and fitness equipment. The company targets athletes and health-conscious consumers, offering a range of products designed to improve athletic performance and overall health. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience. The business has a moderate market position with a focus on quality and customer satisfaction, as evidenced by trust signals such as a money-back guarantee and positive reviews on Trustpilot. Technically, the website employs modern web technologies including JavaScript, Sentry for error tracking, and Google Tag Manager for analytics and marketing. The site is mobile-optimized and uses HTTPS with a good SSL configuration, though it lacks some advanced security headers. Performance is moderate, and SEO practices are adequately implemented. Privacy compliance is weak due to the absence of explicit privacy and cookie policies and consent mechanisms. From a security perspective, the site benefits from HTTPS and nonce attributes on scripts, reducing risks of injection attacks. However, the lack of security headers and formal incident response or vulnerability disclosure policies indicates room for improvement. No critical vulnerabilities or suspicious patterns were detected. The domain registration is consistent and appropriate for the business age and scope. Overall, Vilgain presents a trustworthy and professional e-commerce platform with good technical and security foundations but requires enhancements in privacy compliance and security best practices to further strengthen its posture.

F

Feedify

feedify.net

60

Feedify is a technology company specializing in push notification and web push marketing solutions aimed at e-commerce businesses and marketers. Their SaaS platform helps clients increase customer engagement and conversions through targeted push notifications. The website presents a professional design with consistent branding and clear service offerings, positioning Feedify as a niche player in the push marketing space. Technically, the site uses modern web technologies including Google Tag Manager and reCAPTCHA, hosted on a CDN, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and bot protection, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is limited to a contact form without direct emails or phone numbers. WHOIS data indicates a legitimate and consistent domain registration supporting business credibility. Overall, the site is professional and safe but would benefit from enhanced privacy and security disclosures.

Y

Yoomigo

espacestrail.run

49

Espacestrail.run is a specialized platform dedicated to trail running, offering detailed information on trail running routes across over 40 territories primarily in France and nearby regions. The website serves trail runners and outdoor enthusiasts by providing route maps, event calendars, and mobile app integrations to enhance the trail running experience. The business operates as a niche outdoor sports network with a focus on promoting territories and facilitating trail running activities. Technically, the site uses modern web technologies including Bootstrap, OpenLayers for mapping, FontAwesome icons, and Matomo for analytics, delivering a responsive and user-friendly experience. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though privacy compliance could be improved by adding cookie consent and clearer GDPR statements. Overall, the site is professional, trustworthy, and well-positioned in its niche, though it would benefit from enhanced privacy and security policy disclosures.

Myriad Media, Inc. is a small, established multimedia communications agency founded in 1997, specializing in the intersection of design, technology, and strategy. They serve a diverse clientele including private sector companies, government agencies, educational institutions, and nonprofits. Their key services include graphic design, custom application development, content management, responsive websites, branding, UX/UI design, and IoT solutions. The company holds relevant certifications such as 8(a) and Virginia SWaM, positioning them well for government contracting opportunities. Technically, the website employs modern web technologies including HTML5, CSS3, Bootstrap, jQuery, and various JavaScript libraries for UI enhancements. The presence of Sitefinity CMS and ASP.NET C# in portfolio descriptions suggests a robust backend infrastructure. The site is mobile optimized and demonstrates good design and navigation, though accessibility and SEO optimizations are basic. Hosting appears to be supported by AWS DNS services. From a security perspective, the domain is well-established with a long registration history and clientTransferProhibited status, indicating domain transfer protection. However, the site lacks DNSSEC, security headers, and explicit privacy or cookie policies, which are areas for improvement. No incident response or vulnerability disclosure information is provided. The contact information is clearly presented, including a company email and phone number, enhancing business credibility. Overall, the website is professional and trustworthy with good business credibility and technical implementation. Privacy compliance and security posture require enhancement to meet modern standards. There are no indications of adult or questionable content, and no WAF or blocking mechanisms interfere with content accessibility.

Centre de la Nature Montagnarde is a French non-profit organization established in 2005, specializing in nature education and activities in the Mont-Blanc region. The organization targets schools, the general public, professionals, and groups with children, offering a variety of educational programs, public events, naturalist courses, and professional training. Their business model revolves around membership fees, activity registrations, and partnerships with local entities. The website reflects a consistent and professional brand image with clear contact information and partner logos, supporting its credibility in the regional education and environmental sector. Technically, the website is built using WebAcappellaFx CMS with a modern but straightforward tech stack including HTML5, CSS3, JavaScript, and libraries such as Blueimp Gallery and Animate.css. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, performance is moderate and accessibility features are basic. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, representing a compliance gap with GDPR requirements. The WHOIS data confirms the domain's legitimacy and long-term registration consistent with the organization's history. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk assessment is low, with no signs of malicious content or vulnerabilities. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and conducting regular security audits to maintain compliance and trust. These steps will enhance the site's security posture and regulatory adherence while reinforcing user trust.

Z

Zlín Film Workshops

zfw.cz

65

Zlín Film Workshops is a small Czech Republic-based business specializing in film education and workshops, including camera, sound, lighting, and photography training. The website is professionally designed using the Wix platform and targets film professionals and enthusiasts seeking practical training. The business operates in a niche media education sector with a regional focus. Technically, the website uses Wix's Thunderbolt framework and standard web technologies, offering moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacking advanced security headers and privacy policies. No WHOIS data is available, likely due to privacy protection, but the website content and structured data indicate legitimacy. Overall, the site is functional and credible but would benefit from enhanced privacy compliance and security best practices.

M

Mayfield Brain & Spine

mayfieldclinic.com

56

Mayfield Brain & Spine is a well-established healthcare provider specializing in neurological and spine care with a history dating back to 1937. The organization operates multiple locations across Cincinnati, Dayton, and Northern Kentucky, offering specialized services including brain tumor care, neurovascular services, spine care, interventional pain management, and physical therapy. Their market position is strong as a regional leader with a comprehensive care team and partnerships with related healthcare organizations. The website reflects a professional and patient-focused business model targeting individuals seeking expert neurological and spine treatment in the region. Technically, the website employs modern web technologies such as Bootstrap and Piwik PRO analytics, providing a responsive and accessible user experience with good SEO practices. However, some improvements in security headers and privacy compliance could enhance their digital maturity. Security posture is solid with HTTPS and domain transfer protections, but lacks advanced security headers and explicit incident response or vulnerability disclosure information. Overall, the site is trustworthy, professionally maintained, and compliant with basic privacy standards, though cookie consent and detailed security policies are absent. Strategic recommendations include enhancing security headers, implementing cookie consent mechanisms, and publishing comprehensive privacy and security policies to improve compliance and user trust.

W

WANET s.r.o.

warioweather.com

57

WarioWeather, operated by WANET s.r.o., provides IP weather stations designed for smart homes, precision agriculture, and intelligent building management. Their product offers integrated weather data collection, forecasting, and device control capabilities accessible via web interfaces. The company targets niche markets requiring precise environmental monitoring and automation. Technically, the website uses standard web technologies including jQuery and Google Analytics, with basic mobile optimization and cookie consent mechanisms in place. Security posture is moderate with HTTPS enabled but lacking advanced security headers and explicit incident response policies. The absence of WHOIS domain registration data raises concerns about domain legitimacy, impacting overall trust. Strategic improvements in security headers, contact transparency, and domain registration verification are recommended to enhance credibility and compliance.

Storybuilt is a small design and development collective specializing in modern architecture and spatial storytelling. The company focuses on creating sustainable, modern structures that merge form and function, targeting clients interested in contemporary architectural solutions. The website reflects a professional and consistent brand image with a modern design and clear navigation, although it lacks explicit contact details beyond a contact form. Technically, the site uses standard web technologies with Cloudflare DNS and CDN services but lacks advanced security headers and DNSSEC. Security posture is moderate with HTTPS enabled and domain status protections in place, but the absence of privacy and cookie policies indicates compliance gaps. Overall, the website is safe, professional, and trustworthy but would benefit from enhanced privacy compliance and security practices.

N

noBrother

nobrother.cz

46

noBrother is a small Czech Republic-based design and development studio specializing in UI/UX, graphic design, frontend and backend development, CMS, and 3D modeling. Their portfolio includes reputable clients such as CASIO and OMG Research, positioning them as a niche player in the technology and creative services market. The website is professionally designed with clear navigation and good mobile optimization, reflecting a mature digital presence. Technically, the site uses modern web technologies including HTML5, CSS3, PHP with the Nette framework, and JavaScript libraries like Swiper.js. Google Tag Manager is implemented for analytics and tracking, though privacy and cookie policies are absent, indicating compliance gaps. Security posture is moderate with HTTPS implied but lacking explicit security headers and vulnerability disclosures. WHOIS data is unavailable, which reduces domain trustworthiness but the website content and social media presence support legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

G

Google

google.lu

74

Google is a leading global technology company primarily known for its search engine and extensive internet-related services including advertising, cloud computing, and software products. The website reflects a highly professional and well-branded digital presence consistent with its market leadership. Technically, the site employs modern web technologies, optimized performance, and strong security measures including HTTPS and security headers. No blocking or WAF challenges were detected, allowing full content accessibility. The WHOIS data is not publicly available, likely due to privacy protection or registry restrictions, which is common for major brands. Overall, the site demonstrates a mature digital infrastructure and a strong security posture with minimal vulnerabilities detected.

G

Google LLC

google.nl

74

Google LLC is a global leader in internet-related services and products, including its flagship search engine, advertising platforms, cloud computing, and software solutions. As a subsidiary of Alphabet Inc., Google maintains a dominant market position with a broad portfolio of key services targeting a general audience worldwide. The website reflects Google's strong brand identity and commitment to user experience, offering localized content and comprehensive privacy and cookie policies aligned with GDPR requirements. Technically, the site leverages proprietary Google technologies and is hosted on Google Cloud infrastructure, ensuring fast performance, mobile optimization, and accessibility. Security is robust with enforced HTTPS, modern security headers, and no detected vulnerabilities. Overall, Google.com demonstrates a mature digital presence with high trustworthiness and compliance standards.

U

userstack

userstack.com

66

userstack is a technology company specializing in providing a real-time User-Agent lookup and device detection API service. Established in 2011, it offers scalable and accurate user-agent parsing solutions trusted by thousands of customers worldwide, including major brands such as Amazon, Apple, and Zendesk. The company operates a freemium business model with free API access and tiered paid plans, targeting developers and businesses requiring device and browser detection capabilities. The website demonstrates strong branding consistency and professional content quality, with extensive code examples and clear calls to action.

F

Frontio NET s.r.o.

frontio.net

50

Frontio NET s.r.o. is a Czech Republic-based small technology company specializing in custom web development, front-end coding, and e-commerce solutions primarily using WordPress CMS. The company targets businesses and agencies seeking tailored web solutions and has a professional web presence with client references and contact information clearly displayed. Technically, the website is built on a modern WordPress stack with JavaScript libraries such as jQuery and Swiper.js, and it integrates Google Analytics and Yoast SEO for performance and search optimization. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and domain transfer protections but lacks DNSSEC and security headers, and it does not publish a security policy or incident response contacts. Privacy compliance is partial, with a cookie consent banner but no visible privacy policy or terms of service. Overall, the website is trustworthy and professional but could improve in security and privacy transparency.

H

HubSpot

hubs.la

76

HubSpot is a leading enterprise in the technology sector providing CRM, marketing automation, and customer service software solutions. The analyzed subdomain focuses on abuse prevention policies, reflecting the company's commitment to security and compliance. The website content is professional and targeted towards businesses and marketers, consistent with HubSpot's SaaS business model and market position. The technical infrastructure leverages HubSpot's CMS platform with modern web technologies, offering good mobile optimization and accessibility. However, explicit privacy and cookie policies were not found on this specific page, which may be located elsewhere on the main domain. Security posture assessment indicates a lack of visible security headers and explicit security policies in the provided content, suggesting room for improvement in security best practices. Overall, the domain and content align with a reputable enterprise, with no signs of blocking or WAF interference, and the site is safe for general audiences.

H

HTML5 UP

html5up.net

55

HTML5 UP is a niche technology provider specializing in free, fully responsive HTML5 and CSS3 website templates designed by @ajlkn. The website offers a large catalog of templates with live demos and download options, targeting web developers and designers seeking high-quality free templates. The business model includes free Creative Commons licensed templates and a paid subscription service (Pixelarity) for attribution-free templates and support. Technically, the site uses modern web standards, integrates social media widgets, and employs Google Analytics and Tag Manager for tracking. Hosting and domain registration are stable and professional, with Cloudflare as registrar and HTTPS enabled. Security posture is good but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Overall, the site is professional, trustworthy, and well-maintained, with moderate user tracking and no adult or questionable content.

S

Specialista na reality

specialistanareality.cz

59

Specialista na reality is a Czech real estate specialist website focused on assisting individuals in selling their properties, including houses, apartments, and land. The site offers free property valuation and collaborates with selected real estate agents to provide a smooth sales process. The business targets property owners in the Czech Republic seeking to maximize sale prices and expedite transactions. The website content is professionally presented in Czech and includes educational resources and listings. Technically, the site uses standard web technologies such as HTML5, CSS3, JavaScript with jQuery, and Font Awesome icons. It employs HTTPS with a Let's Encrypt certificate, ensuring secure connections. However, the WHOIS data for the domain is missing, which raises concerns about domain registration transparency and trustworthiness. The site lacks a cookie consent mechanism and some security headers, which are recommended for GDPR compliance and enhanced security. Forms are present but currently disabled, limiting user interaction. Overall, the website is functional and trustworthy from a content perspective but would benefit from improved transparency and security practices.

V

VHS Olomouc, a.s.

vhs-ol.cz

45

VHS Olomouc, a.s. is a regional utility company specializing in water management services within the Olomouc district of the Czech Republic. The company manages a significant portion of the water infrastructure including water supply networks, reservoirs, springs, water treatment plants, and some sewage systems. Their services target municipalities, customers, developers, and shareholders, positioning them as a key regional player in the energy and water utility sector. The website reflects a professional and comprehensive presentation of their business, services, and customer engagement portals. Technically, the website is built on WordPress and leverages modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Google Maps API for interactive features. SEO is enhanced using the Yoast SEO plugin, and the site is hosted by cesky-hosting.eu. The site demonstrates good mobile optimization and moderate performance, with clear navigation and structured content. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some security headers and explicit published security policies or incident response information. There is no cookie consent mechanism detected, which is a minor GDPR compliance gap. No vulnerabilities or suspicious activities were identified in the analysis. Overall, VHS Olomouc, a.s. maintains a secure, professional, and user-friendly online presence that aligns well with its business operations and regional market position. Strategic improvements in security headers, privacy compliance mechanisms, and incident response transparency would further enhance their security posture and trustworthiness.

K

KIRKBI A/S

kirkbi.com

65

KIRKBI A/S is a large, family-owned holding company based in Denmark, primarily managing the LEGO Group and other investments focused on building a better future for children globally. The company emphasizes sustainability, education, and responsible financial investments, reflecting a long-standing family legacy dating back to 1932. The website is professionally designed, mobile-optimized, and provides comprehensive information about the business, including financial highlights and leadership insights. Technically, the site uses modern technologies such as Umbraco CMS, Cloudflare for hosting and security, and Google Tag Manager for analytics. The security posture is strong with HTTPS enforced and a detailed cookie consent mechanism, although some security headers are not visibly implemented. Privacy compliance is well addressed with clear policies and GDPR-aligned consent. However, the absence of WHOIS registration data for the domain reduces trust slightly and should be investigated. Overall, the site presents a trustworthy and professional digital presence aligned with the company's reputable business operations.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which serves as a placeholder or offline dinosaur game page when a real website is not accessible. There is no actual business website content, metadata, or contact information available. The page is primarily composed of embedded JavaScript and styles related to the Chrome offline game, with no external links or business-related data. Due to the nature of this content, no privacy, cookie, or terms of service policies are present, and no security or compliance frameworks are indicated. The lack of accessible content and business information severely limits the ability to perform a meaningful security or compliance analysis.

The website aiprodukce.cz is a newly registered domain (created March 21, 2024) serving as a landing page for Gransy, a domain registrar and DNS service provider. The site primarily promotes Gransy's services including domain reseller programs, Anycast DNS protection, and a white label registrar platform. The content is minimal and focused on encouraging visitors to learn more about Gransy’s offerings. The technical infrastructure is basic, using standard HTML5 and CSS3 with Google Fonts, hosted likely by Gransy itself. There is no evidence of advanced CMS or third-party analytics tools, indicating a simple and lightweight setup. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are important for compliance and trust. No contact information or incident response details are provided, limiting transparency. The domain registration data aligns well with the website content and registrar branding, suggesting legitimacy despite the domain's recent creation. No suspicious or malicious indicators were found. Overall, the website is functional as a placeholder and informational page but lacks comprehensive business, security, and privacy details that would enhance trust and compliance. The risk level is moderate due to the absence of critical security features and policies, but no immediate vulnerabilities or malicious content were detected. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to strengthen the site's credibility and security posture.

S

SIGMA GROUP a.s.

sigma.cz

42

SIGMA GROUP a.s. is a well-established Czech manufacturing company specializing in the development, production, sales, and servicing of pumps for domestic, garden, and industrial use. Founded in 1868, it holds a leading market position as the largest Czech manufacturer of industrial pumps. The company operates multiple subsidiaries including SIGMA PUMPY HRANICE, s.r.o. and SIGMAshop.cz, targeting both industrial clients and general consumers. The website reflects a professional and consistent brand image with clear business information and multiple contact points. Technically, the site uses standard web technologies including Google Maps API and jQuery, though the jQuery version is outdated. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Privacy compliance is basic with a cookie consent banner but no visible privacy or terms of service pages. Overall, the site is functional, trustworthy, and suitable for its business purpose but could improve in security and compliance transparency.

M

M+MP spol. s r.o.

pribramdnes.cz

47

PříbramDnes.cz is a regional information portal serving the Příbram area in the Czech Republic, operated by M+MP spol. s r.o. The site provides a comprehensive range of services including local news, job listings, company directories, event calendars, and classified ads. It targets residents and businesses in the region, positioning itself as a trusted local media source with a focus on community engagement and regional information dissemination. The business model relies on advertising and listing services, supported by partnerships with larger regional networks such as InfoDnes.cz.