Security Directory

M

Marktplatz Mittelstand GmbH & Co. KG

agentur.de

42

Agentur.de is a German online platform operated by Marktplatz Mittelstand GmbH & Co. KG that connects businesses, freelancers, and private individuals with qualified agencies across various sectors such as online marketing, graphic design, SEO, branding, software development, and more. The platform offers a comprehensive directory with over 70,000 listed agencies and facilitates free, non-binding inquiries for clients, positioning itself as a significant player in the German agency marketplace. The website features professional design, clear navigation, and a user-friendly interface optimized for mobile devices, reflecting a mature digital presence. Technically, the site employs modern web technologies including JavaScript, CSS, Bootstrap, and integrates third-party services like eTracker for analytics and OneTrust for cookie consent management. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and a published security policy or incident response contacts. Overall, the domain registration data aligns well with the business identity, supporting the site's legitimacy and trustworthiness.

C

Community ITsax.de

itsax.de

53

ITsax.de is a specialized job board and social recruiting platform focused on the IT and software industry in Saxony, Germany. It serves as a community hub connecting IT professionals, students, and employers, facilitating job and internship placements. The platform is part of the Empfehlungsbund network, which emphasizes recommendations and referrals among partner companies. The website features a modern, responsive design with a clear focus on user experience and relevant content for its target audience. Technically, it employs contemporary web technologies including Bootstrap, Vue.js, and StimulusJS, hosted on infrastructure associated with GoDaddy. Security practices include HTTPS and CSRF protection, though explicit security headers and privacy policies are absent, indicating room for improvement in compliance and security transparency. Overall, the site is professional and trustworthy, with a strong market position in its niche.

L

Lauder Javne Zsidó Közösségi Óvoda, Általános Iskola, Gimnázium és Zenei Alapfokú Művészeti Iskola

lauder.hu

52

Lauder Javne Iskola is a well-established Jewish community educational institution in Hungary, offering comprehensive education from kindergarten through high school, including a music school and e-learning programs. The institution emphasizes Jewish cultural and religious education alongside modern pedagogical approaches, supported by a dedicated foundation and partnerships. The website reflects a mature digital presence with detailed program descriptions, admissions information, and contact details, targeting families and educators interested in Jewish education. Technically, the site uses standard web technologies with jQuery and Google Tag Manager for analytics, showing moderate performance and good mobile optimization. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security practices are basic, with no visible security headers or incident response contacts. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

K

Könyvtárellátó Nonprofit Kft.

pedig.hu

54

The website pedig.hu serves as the official platform for the Pedagógus Igazolvány, a service operated by Könyvtárellátó Nonprofit Kft. It provides Hungarian educators with a digital means to register, manage, and utilize their teacher identification cards to access discounts and cultural benefits. The platform includes a web portal and mobile applications for iOS and Android, enhancing accessibility and user convenience. The site is well-branded, consistent, and targets educators in Hungary with a nonprofit service model. Technically, the website is built using modern web technologies including Next.js and React, ensuring a responsive and performant user experience. The site is mobile-optimized and includes essential SEO and accessibility features, although some accessibility enhancements could be made. The hosting provider is not explicitly identified, but the site uses HTTPS with excellent SSL configuration. From a security perspective, the site enforces HTTPS and secure user registration/login flows. However, it lacks explicit security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Contact information is available via a dedicated contact page, though no direct emails or phone numbers are visible on the homepage. Overall, pedig.hu presents a trustworthy, professional, and secure platform for its target audience. Strategic recommendations include implementing security headers, publishing a vulnerability disclosure policy, enhancing accessibility, and maintaining regular security audits to sustain and improve the security posture.

B

BWmedien GmbH

bwmedien.biz

52

BWmedien GmbH is a German-based full-service IT and media provider established in 2001, specializing in web development, digital marketing, hosting, and proprietary software solutions including CMS, CRM, and ERP systems. The company positions itself as a regional pioneer with a strong focus on delivering tailored digital solutions to businesses and organizations. Their website reflects a professional and comprehensive service offering with clear navigation, modern design, and mobile optimization. Technically, the site uses a proprietary CMS (BWcms), modern JavaScript libraries like Swiper.js, and HTML5 video, hosted on infrastructure with DNS servers under net-build.net and domain registration via RegistryGate GmbH. Security posture is good with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and some security headers are not explicitly detected. Privacy compliance is strong with visible GDPR-aligned privacy and cookie policies and consent mechanisms. Contact information is clearly provided including phone and social media channels. Overall, BWmedien GmbH demonstrates a mature digital presence with high trustworthiness and professional credibility.

Y

YOOtheme

yootheme.com

58

YOOtheme is a well-established company specializing in premium WordPress themes, Joomla templates, and a powerful page builder called YOOtheme Pro. With over 150,000 customers, it holds a strong market position in the web development tools sector, offering a suite of products including plugins and extensions to enhance website functionality. The company targets web developers, designers, and businesses seeking professional and responsive website solutions. Technically, the website leverages modern frameworks such as Vue.js and UIkit, hosted on Bunny.net CDN infrastructure, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is mostly addressed with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-structured, with room for improvement in security headers and explicit incident response disclosures.

W

WEDOS Internet, a.s.

wedos.com

58

WEDOS Internet, a.s. operates wedos.com, a technology-focused website offering global anycast DNS services designed to provide worldwide DNS infrastructure for enhanced protection, speed, and cost efficiency. The company is established since 2003 and targets businesses and organizations requiring reliable DNS and security services. The website is built on WordPress with multilingual support via Weglot, indicating a mature digital presence. The site demonstrates good content quality, professional design, and clear navigation, optimized for mobile devices. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, DNSSEC is not enabled and security headers are absent, representing areas for improvement. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Business credibility is high given the consistent WHOIS data and long domain age. Overall, the website is trustworthy and professional but could enhance security and compliance transparency.

K

KF

kf.no

66

KF is a Norwegian organization focused on providing solutions, courses, and professional literature to the municipal sector, aiming to simplify daily operations within municipalities. The website presents a professional and consistent brand image, targeting municipal employees and public sector stakeholders in Norway. Their offerings include software solutions, educational courses, and specialized publications tailored for municipal needs. Technically, the website is built on Drupal 10, leveraging modern web technologies and integrating analytics tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks some advanced security headers and a public security policy or incident response contact. Overall, the domain registration data aligns well with the website content, indicating a trustworthy and legitimate entity. The site does not contain any adult or questionable content and maintains a high level of professionalism and trustworthiness.

SUTOR GLOBAL s.r.o. is a small Czech Republic-based company specializing in installation, repair, and inspection services for reserved lifting, pressure, gas, and electrical equipment. The company targets industrial clients requiring specialized maintenance and compliance services in the energy sector. The website is minimalistic, primarily image-driven, and uses Bootstrap for responsive design, indicating a basic but functional digital presence. Technical infrastructure is modest with no advanced CMS or analytics detected, hosted likely via Forpsi based on DNS information. Security posture is limited with no evident security headers or privacy policies, and no HTTPS status was explicitly confirmed. The domain registration is consistent and stable, supporting the legitimacy of the business. Overall, the website serves as a basic informational portal without advanced digital marketing or security features.

U

UDG

udg.de

9

UDG is a German-based digital brand consultancy focused on enabling authentic, real-time, and networked interactions between consumers and brands. The company positions itself as a partner for smart brands navigating the digital world, offering services in brand management and integrated communication across channels. The website reflects a modern digital presence built on the Astro framework and Storyblok CMS, with analytics and consent management implemented via Google Tag Manager and Usercentrics respectively. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the website is professional and well-structured, targeting business clients in the technology and marketing sectors.

B

BASF

basf.com

74

BASF is a globally recognized chemical company with a strong presence in Finland, providing chemical products and industrial solutions primarily targeting business customers in the energy and chemical sectors. The website reflects a professional corporate image with consistent branding and good content quality, aimed at industry professionals and partners. The technical infrastructure is modern, leveraging Angular framework and JavaScript technologies, with moderate performance and good mobile optimization. Security posture is moderate with HTTPS likely enabled but lacks visible security headers and explicit security policies, indicating room for improvement in security best practices. Privacy compliance is weak due to absence of visible privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced transparency and security measures.

N

NEXTUP s.r.o.

nextup.cz

45

NEXTUP s.r.o. is a Czech-based technology company specializing in custom software development and IT solutions with over 20 years of market presence. The company serves business clients with tailored e-commerce platforms, mobile applications for Android and iOS, and system integration services. Their portfolio includes notable clients such as Activa, Bank of Georgia, and Blue Sky Media, reflecting a strong market position in the technology sector. The website presents a professional image with clear project showcases and comprehensive contact information, supporting their credibility and business maturity. Technically, the website employs modern web standards and Google Analytics for user tracking, with good mobile optimization and SEO practices. However, it lacks published privacy and cookie policies, which are critical for GDPR compliance. Security-wise, HTTPS is enforced, but the absence of security headers and incident response contacts indicates room for improvement. Overall, the site is trustworthy and well-structured but should enhance privacy and security transparency to align with best practices.

I

Innovasjon Norge

innovationnorway.no

60

Innovasjon Norge is a Norwegian government agency dedicated to fostering sustainable growth and export opportunities for Norwegian businesses. The organization provides comprehensive support services including advisory, capital funding, and networking to entrepreneurs and companies at various stages such as starting, scaling, internationalizing, and renewing their business models. The website reflects a strong market position as a key national innovation facilitator with a clear focus on sustainability and international growth. Technically, the website is built on modern frameworks such as Next.js and React, ensuring a responsive and accessible user experience. The site employs best practices in SEO, accessibility, and performance optimization, with a well-structured layout and clear navigation. The presence of a cookie consent mechanism and privacy policy indicates a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS, implements security headers, and avoids exposing sensitive data. However, explicit security policies and incident response information are not publicly available, and no vulnerability disclosure program is evident. Overall, the security posture is strong but could benefit from enhanced transparency and formalized disclosure mechanisms. The domain WHOIS data is not publicly available due to Norwegian registry privacy policies, but the domain and website content strongly indicate legitimacy as the official site of Innovasjon Norge. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences.

H

HARFASPORT

harfasport.cz

63

HARFASPORT is a specialized retail business focused on cycling and skiing equipment, serving primarily Czech-speaking customers. The website presents a modern and mobile-optimized interface with clear navigation and professional design, targeting customers interested in sports gear. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate gaps in transparency and compliance. Technically, the site uses modern JavaScript modules and CSS frameworks, likely built with Vue.js and Radix UI components, but lacks visible security headers and analytics integrations. The security posture is moderate but could be improved with better header configurations and explicit privacy measures. Overall, the site appears legitimate and functional but would benefit from enhanced compliance and security practices to increase trust and reduce risk.

T

Homepage - Travel FREE – Europe's No. 1 Bordershop

travel-free.cz

58

Travel FREE is a retail business operating Europe's No. 1 Bordershop, targeting general consumers interested in cross-border shopping. The website presents a professional appearance with a clear business focus on retail and travel-related shopping services. The company promotes a mobile app available on both Apple App Store and Google Play, indicating a digital engagement strategy. The technical infrastructure includes modern web technologies such as Google Tag Manager and Usercentrics for consent management, ensuring compliance with cookie regulations. The website is accessible without any blocking or WAF challenges, and it uses HTTPS to secure communications. However, the absence of publicly available WHOIS data and lack of explicit privacy policy or contact information reduces transparency and trustworthiness to some extent. Security posture is moderate with room for improvement in security headers and published policies. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.

D

Dot Creative

dotcreative.hu

57

Dot Creative is a Hungarian creative agency established in 2018, specializing in digital design, branding, and marketing services. The company targets businesses and professionals seeking innovative digital presence solutions. The website reflects a modern, professional design with clear navigation and strong branding consistency. The technical infrastructure is based on Next.js and React, indicating a modern and performant digital platform. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit security policies and incident response contacts are not found. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. Overall, the website presents a trustworthy and professional business presence with minimal risk exposure.

M

MVM Oroszlányi Távhőtermelő és Szolgáltató Zrt.

mvmtavho.hu

61

MVM Oroszlányi Távhőtermelő és Szolgáltató Zrt. is a regional energy company specializing in district heating services for the Oroszlány and Szolnok areas in Hungary. The website acts as a portal directing users to localized district heating service sites, reflecting a focused business model in the energy utility sector. The company appears to be a medium-sized entity founded in 2020, likely part of the larger MVM group, a major Hungarian energy provider. Technically, the website employs modern web technologies including Google Tag Manager and Google Analytics for tracking, and uses responsive design techniques to ensure usability across devices. However, the site lacks advanced SEO and accessibility features and does not appear to use a CMS or complex frameworks. Performance is moderate with no critical errors detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or forms on the landing page, which is positive. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is available, indicating room for improvement in security transparency. Overall, the website is functional and consistent with its business purpose but requires enhancements in privacy compliance, security best practices, and user contact information to improve trust and regulatory adherence.

PPP-T S.A. operates as a modern business and innovation development space primarily serving the Płock subregion in Poland. The company offers approximately 60 hectares of connected investment areas equipped with technical infrastructure, office spaces, conference rooms, and acceleration programs to support entrepreneurship. The website reflects a professional and regionally focused business entity linked to the ORLEN group, a major energy sector player. Technically, the website is built on Adobe Experience Manager, employs HTTPS, and integrates a comprehensive cookie consent mechanism via Cookiebot, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and consent management, but lacks some advanced security headers and explicit incident response or security policy disclosures. WHOIS data for the domain pppt.orlen.pl is unavailable from the Polish registry, which slightly reduces trustworthiness, but the website content and branding strongly indicate legitimacy. Overall, the site is well-structured, accessible, and compliant with GDPR requirements, targeting business clients and entrepreneurs in the region.

ORLEN Ochrona is a Polish security service provider affiliated with the PKN ORLEN group, focusing on comprehensive physical and digital protection services for strategic national units, individual clients, and institutions. The website presents a professional image with a clear business focus on security solutions including physical protection, transport of valuables, security systems, and specialist training. The company leverages Adobe Experience Manager for content management and employs Cookiebot for GDPR-compliant cookie consent management. The site is well-structured, mobile-optimized, and provides clear navigation to various service offerings and corporate information. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers are not visible in the HTML source. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data for the subdomain is unavailable, which is typical for subdomains under the .pl registry, but the domain's affiliation with the reputable PKN ORLEN group supports its legitimacy. Overall, the website demonstrates good technical maturity, privacy compliance, and business credibility.

E

eealibrary.org

eealibrary.org

60

The website eealibrary.org currently presents no accessible content beyond a loading spinner, indicating that the site is either under development or protected by a web application firewall or security mechanism that blocks content delivery. The domain is registered since 2014 with easyDNS Technologies Inc., showing a stable registration history but no publicly available registrant details. There is no metadata, privacy, cookie, or terms of service information available, and no contact or social media links are present. Technically, the site uses Angular framework components and standard web technologies but lacks performance and SEO optimizations. Security posture is weak with no HTTPS enforcement or security headers detected, and DNSSEC is not enabled. Overall, the site is not currently providing meaningful business or user information and lacks compliance and trust indicators.

P

Page Builder s.r.o.

pobo.hu

49

Pobo Page Builder, operated by Page Builder s.r.o., is a technology company specializing in providing a page building tool primarily targeting e-commerce businesses in Hungary and the Czech Republic. The website showcases their services including AI-powered content generation and design tools, supported by customer service and marketing teams. The company positions itself as a niche SaaS provider with a focus on enhancing online shops' page design and functionality. Technically, the website employs modern tracking and chat technologies such as Google Tag Manager, Google Optimize, Freshchat, and Abgar widgets, hosted on VasHosting.cz. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is partial, with privacy and terms documents available as PDFs but no cookie consent mechanism or security incident contact information. Overall, the website is professional but shows some content placeholders indicating incomplete localization or content delivery. The WHOIS data aligns well with the website's business claims, supporting legitimacy. Strategic improvements in security policies, privacy compliance, and content completeness would enhance trust and compliance.

U

Ultimate Store Kit

storekit.pro

28

Ultimate Store Kit is a specialized WooCommerce Elementor addon provider offering a plugin with over 69 widgets designed to enhance WooCommerce websites. The business targets web designers and WooCommerce users seeking to build custom product pages and dynamic checkout experiences. The website is built on WordPress with WooCommerce and Elementor frameworks, reflecting a modern and professional digital infrastructure. SEO optimization is evident with Rank Math integration and structured data usage. Security posture is moderate with HTTPS enabled but lacks advanced security headers and privacy compliance features. The absence of contact information and privacy policies suggests room for improvement in transparency and compliance. Overall, the domain appears legitimate though WHOIS data is unavailable due to TLD restrictions and privacy protection, which is common for small plugin businesses.

W

Waldhart Software

onlineshop.ws

45

Waldhart Software operates the onlineshop.ws domain, providing specialized e-commerce solutions primarily for ski schools, snow sports schools, and related outdoor sports businesses. The website serves as a reference portal showcasing over 300 live client online shops, indicating a focused B2B business model targeting the winter and summer sports education sector. The company appears to be a small-sized entity founded in 2018, with a consistent brand presence and a clear market niche in Austria and neighboring countries. Technically, the website leverages modern web technologies including the Quasar Framework and Google Maps API, delivering a responsive and user-friendly experience. Hosting is likely provided by profiwebspace.at, with domain registration managed by InterNetX GmbH. The site uses HTTPS, but lacks DNSSEC and security headers, which are areas for improvement. No analytics or advertising scripts were detected, suggesting a privacy-conscious or minimalistic approach. From a security perspective, the site has a moderate posture with HTTPS enabled but missing important security headers and DNSSEC. There are no visible vulnerabilities or exposed sensitive data in the provided content. However, the absence of privacy and cookie policies, as well as terms of service, indicates compliance gaps with GDPR and general privacy best practices. Overall, the website is professional and trustworthy within its niche but would benefit from enhanced privacy compliance and improved security configurations to strengthen user trust and regulatory adherence.

P

Perfectweb

perfectweb.at

48

Perfectweb is a small regional web design and advertising agency based in Austria, specializing in web design, CMS, graphic design, marketing, and online shop solutions primarily serving Vienna and the Weinviertel region. The website presents a basic but professional digital presence with clear navigation and references to client projects. Technical infrastructure is modest, relying on standard HTML, CSS, and JavaScript with a cookie consent plugin for GDPR compliance. Security posture is limited with no visible HTTPS confirmation or security headers, and WHOIS data is unavailable, which raises concerns about domain transparency. Overall, the site is functional but would benefit from enhanced security and technical modernization.

M

MAFRA, a.s.

mfdnes.cz

59

MF DNES is a major Czech media company offering subscription-based access to daily newspapers and thematic magazines in both digital and print formats. The website provides clear subscription options, loyalty programs, and regional news coverage, targeting a broad audience interested in news and lifestyle content. The business is positioned as one of the largest media outlets in the Czech Republic with a professional editorial team and consistent branding. Technically, the website employs modern tracking and analytics technologies including Google Tag Manager, Google Analytics, Gemius, and a consent management platform (Didomi) to ensure GDPR compliance. The site is well-structured with good mobile optimization and SEO practices, although some security headers are not explicitly detected. The SSL configuration is excellent, and secure login forms with client-side validation are implemented. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and consent management but lacks publicly available security policies or incident response contacts. The absence of WHOIS data is a notable anomaly that reduces domain registration trustworthiness, although the website content and business information strongly indicate legitimacy. No vulnerabilities or adult content were detected, and the site is fully accessible without WAF blocking. Overall, the website is professional, secure, and compliant with privacy regulations, but improvements in domain transparency and security policy publication are recommended to enhance trust and security posture.

B

Blogosvět.cz

blogosvet.cz

58

Blogosvět.cz is a Czech media platform providing an open space for bloggers and authors to freely express their opinions. It hosts a variety of articles covering political, social, and cultural topics, targeting a general Czech-speaking audience. The platform partners with established media companies such as SPM MEDIA and Echo24.cz, enhancing its credibility within the local media landscape. Technically, the website is built using modern web technologies including React and Next.js, offering good mobile optimization and user experience. Security posture is adequate with HTTPS enforced and secure forms, but lacks some advanced security headers and explicit privacy compliance mechanisms. The absence of WHOIS data for the domain raises concerns about domain registration transparency, which impacts trustworthiness. Overall, the platform is functional and professional but would benefit from improved privacy and security disclosures.

R

Radio Prostor

radioprostor.cz

56

Radio Prostor is a Czech media outlet providing a platform for information, politics, economy, business, sports, culture, and modern lifestyle content. It operates a live radio streaming service alongside a rich collection of news articles and interviews, targeting a broad audience interested in current affairs and cultural topics. The website demonstrates a professional and consistent brand presence with active social media engagement and accessible contact information. Technically, the site is built on modern web technologies including React and Next.js, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, though additional security headers and explicit policies could enhance protection. The absence of WHOIS data reduces domain transparency and trust slightly, but the overall content quality and business credibility remain high. Strategic recommendations include improving security headers, publishing incident response information, and monitoring domain registration status to ensure ongoing legitimacy.

The website www.fotojanout.cz is a personal photography portfolio showcasing the work of František Janout, focusing primarily on nature and landscapes of the Šumava region and various international travel destinations. The site targets photography enthusiasts and travelers interested in these regions. It operates as a small-scale personal project without commercial business registration details or contact information. Technically, the site uses basic web technologies including HTML, CSS, JavaScript with jQuery and Facebook SDK integration. It is hosted on the eStránky.cz platform and shows moderate performance and basic mobile optimization. Security posture is weak due to lack of HTTPS confirmation, missing security headers, and absence of privacy or cookie policies. No WHOIS data is available, raising concerns about domain registration legitimacy. Overall, the site is safe for general audiences but lacks professional security and privacy compliance features.

The website www.boubin.cz/boubin/ serves as an informational portal focused on the Boubín mountain and the Šumava region in the Czech Republic. It provides detailed descriptions of natural landmarks, hiking trails, and local accommodation options, targeting tourists and visitors interested in nature and outdoor activities. The business model centers on tourism promotion and accommodation listings, primarily serving a regional audience. The site content is primarily in Czech with some German and English keywords, reflecting the local cultural context. From a technical perspective, the website uses basic HTML and CSS without modern frameworks or CMS platforms. There is no evidence of HTTPS or advanced security headers, and no analytics or tracking technologies are detected. The site appears to have moderate performance but lacks mobile optimization and accessibility features, which could limit user experience on mobile devices. Security posture is weak due to the absence of HTTPS, security headers, and privacy or cookie policies. No contact information or incident response details are provided, limiting transparency and trust. The WHOIS data is unavailable, which raises concerns about domain registration legitimacy and reduces overall trustworthiness. No forms or user data collection mechanisms are present, minimizing data protection risks but also indicating limited interactivity. Overall, the website is a small-scale, regionally focused tourism information site with basic technical implementation and significant security and compliance gaps. Strategic improvements in security, privacy compliance, and technical modernization are recommended to enhance trust and user experience.

A

Alpiro s.r.o.

ssls.cz

57

SSLS.cz is an established Czech online reseller specializing in SSL certificates and digital security products. Operated by Alpiro s.r.o., it holds a strong market position as the largest SSL certificate provider in the Czech Republic, offering a wide range of certificates from multiple trusted certificate authorities. The website provides comprehensive services including SSL certificates by brand and validation type, wildcard and multidomain certificates, digital signatures, code signing, CSR generation, and API integration for automation. The business model focuses on competitive pricing and extensive product selection targeting businesses and individuals seeking web security solutions in the Czech market. Technically, the website employs standard web technologies such as JavaScript and jQuery, with responsive design and good SEO practices. While performance is moderate, mobile optimization is good, and accessibility is basic. The site includes a cookie consent mechanism and secure login options, including certificate-based authentication, indicating a reasonable level of digital maturity. However, the absence of explicit security headers and a formal security policy page suggests room for improvement in security hardening. From a security perspective, the site enforces HTTPS and offers secure user authentication methods. No vulnerabilities or exposed sensitive data were detected in the content. The lack of WHOIS data reduces transparency and slightly impacts trustworthiness, but the overall security posture is solid for an e-commerce platform of this nature. Privacy compliance is supported by a privacy policy and cookie consent, aligning with GDPR requirements. Overall, SSLS.cz presents a professional and trustworthy platform for SSL certificate procurement with a strong local market presence. Strategic enhancements in security headers, incident response transparency, and WHOIS data availability would further strengthen its security and compliance profile.

Č

Česká spořitelna a.s.

tradergo.cz

64

TraderGO is a modern online trading platform operated under the Česká spořitelna brand, offering professional investment services including trading in stocks, commodities, currencies, and other assets. The platform targets retail and professional investors primarily in the Czech Republic, providing a multi-device accessible application and educational resources. The website is well-branded, professionally designed, and integrates secure login and demo account features. Technically, the site uses modern web technologies including JavaScript modules, Google Tag Manager, and ElasticSearch for search functionality, hosted likely on Erste Group infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be further verified. The absence of WHOIS data is a notable gap but does not significantly detract from trust due to the strong brand presence. Overall, the site demonstrates good digital maturity and compliance with privacy regulations.

W

WPCodeBox

wpcodebin.com

56

WPCodeBin is a niche technology platform offering a free service for sharing WordPress code snippets, targeting WordPress developers and users. The website is built using modern web technologies including React and Next.js, hosted with DNS managed by Cloudflare and domain registered via NameCheap. The platform is relatively new, founded in 2022, and operates under the parent brand WPCodeBox. The site demonstrates good technical infrastructure with responsive design and moderate performance. Security posture is decent with HTTPS enabled and some security headers indicated in code snippets, though DNSSEC is not enabled and no explicit security or privacy policies are published. The absence of privacy and cookie policies represents a compliance gap. No contact information or incident response details are provided, limiting direct communication channels. Overall, the site is professional and trustworthy within its niche but could improve compliance and security transparency.

1url.cz is a Czech-based URL shortening service established in 2010, offering users the ability to shorten, anonymize, and preview URLs with permanent 301 redirects. The service targets general internet users, social media participants, and affiliate marketers seeking reliable and permanent link redirection. The website is implemented with basic but functional technologies including HTML5, CSS, Google Fonts, and Google reCAPTCHA to prevent abuse. Hosting and domain registration are managed by Wedos, a reputable Czech provider, supporting the site's legitimacy and stability. Security posture is moderate with HTTPS enforced and reCAPTCHA integration; however, the absence of security headers and formal privacy or cookie policies indicates room for improvement. No direct contact emails or phone numbers are provided, but a contact form is available. Overall, the site is safe for general audiences and operates without suspicious content or practices.

K

Kreativní Praha, z. ú.

poznejvltavu.cz

52

Poznej Vltavu is a cultural festival organized by Kreativní Praha, a non-profit entity focused on celebrating the Vltava river through family-friendly events, workshops, and entertainment in Prague. The website serves as an information hub for the festival, providing event details, maps, partner information, and updates. The organization has established partnerships with local government and cultural institutions, enhancing its credibility and community reach. The website is well-branded, consistent, and targets a broad audience including families and cultural enthusiasts. Technically, the website uses modern JavaScript libraries such as Leaflet for interactive maps and Swiper for carousels, hosted on WEDOS servers. It employs Google Tag Manager for analytics with a privacy-conscious default denying tracking until consent is given. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and explicit security policies. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Cookie consent mechanisms and GDPR policy pages indicate good privacy compliance. However, there is no explicit incident response or security policy documentation, which could be enhanced. Overall, the site is trustworthy, safe, and professionally maintained. The risk assessment is low, with recommendations focusing on improving security headers, adding incident response contacts, and enhancing accessibility. The domain is newly registered but consistent with the event timeline, and WHOIS data aligns with the website's claims, supporting legitimacy.

M

Moudrá Sovička z.s.

moudrasovicka.cz

40

Moudrá Sovička z.s. is a small Czech non-profit organization focused on providing assistance with the initial setup of computers, tablets, and phones. The website serves as an informational and service platform targeting individuals who need help with technology setup. The organization maintains a modest but professional online presence, including a Facebook page and clear contact information. The business model revolves around educational and technical support services, positioning itself as a niche local service provider in the Czech Republic. Technically, the website is built on WordPress using the Radiate theme and employs standard web technologies such as PHP, JavaScript, and CSS. It includes a cookie consent mechanism compliant with GDPR, indicating a reasonable level of digital maturity and privacy awareness. Performance and mobile optimization are adequate, with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and includes common security headers, contributing to a good security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a security.txt file and explicit incident response contacts suggests room for improvement in security transparency and incident readiness. Overall, the website presents a low-risk profile with a solid foundation for a small non-profit. The lack of WHOIS data reduces trust slightly but does not outweigh the positive indicators from the website content and technical setup. Strategic recommendations include enhancing security disclosures, maintaining up-to-date software, and improving transparency around incident response.

N

NET4GAS, s.r.o.

net4gas.cz

67

NET4GAS, s.r.o. operates as the exclusive operator of the natural gas transmission system in the Czech Republic, managing over 4,000 km of pipeline infrastructure. The company provides reliable, safe, and economically efficient gas transportation services year-round, playing a key role in integrating Central European energy markets and supporting the transition to a low-carbon economy. The website reflects a professional and business-focused presence with comprehensive information for customers, investors, and partners. Technically, the site uses established web technologies such as jQuery and Bootstrap, hosted on a CMS platform (WebJET CMS), and is mobile optimized with good navigation and content quality. Security-wise, the site implements cookie consent mechanisms and GDPR compliance but lacks visible advanced security headers or explicit security policies. The absence of WHOIS data limits full domain legitimacy verification, though the website content and contact details support a credible business identity. Overall, the site is well-structured and trustworthy for its intended audience but could improve transparency and security posture.

Svazek obcí mikroregionu Zábřežsko is a local government association focused on supporting the development of municipal self-governance and enhancing the economic, social, and cultural life of the Zábřežsko microregion in the Czech Republic. The website serves as an information portal for residents and local officials, providing access to documents, event announcements, and contact information. The organization positions itself as a community-centric entity facilitating regional cooperation and development. Technically, the website employs basic web technologies including HTML, CSS, JavaScript, and an older version of jQuery (1.3.2). Google Analytics is integrated for visitor tracking. The site shows moderate performance and basic mobile optimization but lacks modern frameworks or CMS indications. Accessibility and SEO optimizations are basic, with room for improvement. From a security perspective, the site uses HTTPS (implied by external scripts loaded over HTTPS), but no security headers were detected in the provided data. The use of an outdated jQuery version presents a potential vulnerability. There is no visible privacy or cookie policy, which raises compliance concerns, especially under GDPR. WHOIS data is missing, which limits domain legitimacy verification and reduces trustworthiness. Overall, the website is functional and serves its purpose for the local government audience but requires improvements in security, privacy compliance, and technical modernization to enhance trust and resilience against threats.

L

LightWidget

lightwidget.com

61

LightWidget is a specialized technology company offering responsive Instagram widgets for embedding Instagram feeds on websites, blogs, and online stores. Founded in 2016, it serves a niche market of website owners and businesses seeking customizable Instagram feed solutions. The company operates a SaaS business model with free and paid add-ons, maintaining a strong market position supported by positive user ratings and a clean, ad-free product offering. Technically, the website is well-built using modern web standards, hosted via Cloudflare CDN, and optimized for performance and mobile responsiveness. The use of the official Instagram Graph API enhances service reliability and trust. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though improvements such as enabling DNSSEC and publishing security policies could enhance trust further. Privacy compliance is good with clear privacy and cookie policies, though no explicit consent mechanism for cookies is present. Overall, the website is professional, trustworthy, and well-maintained, with a high AI score reflecting strong content quality, technical implementation, and business credibility.

P

Captcha - WEDOS Global Protection

poznejsvehofarmare.cz

49

The website poznejsvehofarmare.cz is currently protected by WEDOS Global Protection and presents a captcha verification page to visitors, indicating a security mechanism that restricts direct access to content. The page itself contains minimal content, primarily focused on the captcha challenge, with no visible business information, contact details, or policies. The domain is registered since 2015 with REG-ZONER and uses WEDOS name servers, consistent with the hosting and protection provider. Due to the captcha challenge, the website content is inaccessible for full analysis, limiting insights into the business and technical infrastructure. The security posture shows basic measures such as CSRF tokens and captcha but lacks advanced security headers and policies. Privacy and cookie compliance are absent on this page. Overall, the site appears safe with no adult or questionable content detected, but the blocking mechanism significantly limits the ability to assess the website's full quality and credibility.

T

Turistické informační centrum Český Těšín

ic-tesin.cz

47

Turistické informační centrum Český Těšín operates as a local government-affiliated tourist information center serving visitors to Český Těšín and the surrounding Moravian-Silesian region. The website provides comprehensive information on tourism, cultural events, accommodation, and local businesses, positioning itself as the official source for regional visitor information. The target audience primarily includes tourists and local visitors seeking event calendars, historical insights, and practical travel information. The business model is public service funded by regional government budgets, emphasizing accessibility and community engagement. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google Translate for multilingual support, enhancing accessibility for non-Czech speakers. The site demonstrates moderate performance and basic mobile optimization, with a clear navigation structure and consistent branding. However, there is room for improvement in accessibility and SEO optimization to better serve diverse user needs. From a security perspective, the website uses HTTPS, ensuring encrypted communication, but lacks visible advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected, indicating a reasonable security posture for a public information site. Privacy compliance is basic, with privacy and cookie policies present but no active consent mechanism. Contact information is clearly displayed, enhancing trust and transparency. Overall, the website is a trustworthy and professional digital presence for a local government tourist center. Strategic recommendations include enhancing security headers, implementing cookie consent mechanisms, and improving accessibility and SEO to elevate user experience and compliance. These steps will strengthen the site's security posture and regulatory adherence while maintaining its role as a reliable regional information hub.

The website www.cz-pl.eu serves as the official portal for the Interreg Czechia – Poland cross-border cooperation program, facilitating project funding, information dissemination, and stakeholder engagement between Czech and Polish border regions. The program focuses on environmental protection, transportation development, SME growth, and strengthening cross-border community ties. The site is professionally designed with consistent branding and clear navigation, targeting applicants, project recipients, and governmental/non-profit entities involved in regional cooperation. Technically, the website employs modern web technologies including JavaScript, CSS, Google Fonts, and Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well, though accessibility features could be improved. No CMS or hosting provider details are explicitly detected. Security posture is good with HTTPS enabled and no exposed sensitive data, but lacks visible security headers and formal privacy/cookie policies. Security-wise, the site shows no signs of vulnerabilities or malicious content. However, the absence of privacy and cookie policies, as well as lack of incident response or vulnerability disclosure information, indicates room for compliance and transparency improvements. WHOIS data is unavailable due to EURid privacy restrictions, but the domain and content appear legitimate and consistent with an official government-backed program. Overall, the website is trustworthy, professional, and serves its informational and administrative purpose well. Strategic improvements in privacy compliance, security headers, and accessibility would enhance its security posture and user trust.

The website www.novehute.cz represents a small regional ski resort called Lyžařský Areál Nové Hutě located in the Czech Republic's Šumava region. It offers family-friendly skiing services including ski lifts, ski school, rental, and cross-country skiing trails. The site is integrated with partner ski areas such as Zadov, enhancing its market position within the regional winter sports tourism sector. The business model focuses on seasonal tourism and recreational services targeting families, beginners, and intermediate skiers. Technically, the website uses legacy HTML with CSS and JavaScript libraries such as jQuery, VisualLightBox, and FancyBox. It includes Google Analytics and Tag Manager for user tracking and a cookie consent mechanism, indicating some level of privacy awareness. However, the site shows signs of outdated technology (IE8 compatibility mode) and lacks modern security headers or HTTPS enforcement visible in the HTML content, which may impact user trust and security. From a security perspective, the absence of WHOIS data raises concerns about domain registration transparency. No privacy policy or terms of service are present, and security headers are missing. While cookie consent is implemented, GDPR compliance is not clearly documented. The site does not appear to be blocked by any WAF or security challenge, and no critical vulnerabilities were detected in the content. Overall, the security posture is moderate but could be significantly improved with modern best practices. The overall risk assessment suggests the site is operational and legitimate but would benefit from enhanced security measures, transparent privacy documentation, and updated technical infrastructure to improve trust and compliance. Strategic recommendations include implementing HTTPS with HSTS, adding security headers, publishing privacy and security policies, and modernizing the website technology stack.

V

Vodafone

vodafone.cz

63

Vodafone.cz is the official website of Vodafone's Czech Republic operations, offering mobile phones, tariffs, internet, and television services. The site targets general consumers and businesses seeking telecommunications solutions, emphasizing its fast 5G network and unlimited mobile tariffs. The website reflects a major telecommunications operator's digital presence with consistent branding and professional content. Technically, the site employs modern web technologies including JavaScript frameworks, Adobe Omniture, and Tealium for analytics and marketing. It is mobile-optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be enhanced. Security-wise, the site uses HTTPS with strong security headers and a cookie consent mechanism, but lacks publicly visible privacy and terms of service pages, which are critical for compliance and user trust. The absence of WHOIS data limits domain trust analysis, but the website's content and branding strongly support legitimacy. Overall, Vodafone.cz presents a mature digital infrastructure with room for improvement in privacy transparency and incident response readiness.

AliaWeb.cz is a Czech financial and media portal operated by AliaWeb, spol. s r.o., established in 2000. The site provides financial news, currency exchange rates, investment information, and related content targeting both professionals and the general public interested in finance. It is part of a network of related portals including Kurzy.cz, Bydlet.cz, and Zajezdy.cz, indicating a strong market position in the Czech Republic's financial and media sectors. The business model is primarily advertising-driven, supported by multiple ad networks and a comprehensive cookie consent mechanism. Technically, the site uses standard web technologies including Google Fonts and Google Publisher Tags, with moderate performance and basic mobile optimization. Security posture is moderate with cookie consent implemented but lacking visible security headers or published security policies. Privacy compliance is partially met with a cookie consent banner but no explicit privacy policy found on the homepage. Overall, the website is professional, trustworthy, and well-established, but could improve in security and privacy transparency.

Č

České noviny (ČTK)

cn.cz

63

České noviny is a prominent Czech news portal operated by the Czech News Agency (ČTK), providing comprehensive news coverage across various sectors including national and international news, economy, culture, and sports. The website targets a general audience interested in current affairs and offers additional services such as weather forecasts and special thematic content. It maintains a strong market position as a trusted media source in the Czech Republic. Technically, the website employs a modern technology stack including Google Tag Manager, Google Adsense, Seznam SSP Ads, and Performax advertising solutions, alongside tracking services like Gemius and INCOMAKER. The site is well-optimized for mobile devices and accessibility, with good SEO practices and structured metadata. Performance is moderate, with a professional design and clear navigation. From a security perspective, the site enforces HTTPS and uses sandboxed iframes for advertisements, with cookie consent mechanisms compliant with GDPR and TCF v2 standards. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly implemented, representing an area for improvement. No critical vulnerabilities were detected in the visible content. Overall, the website presents a low risk profile with good privacy compliance and business credibility. The absence of WHOIS data is a notable transparency gap but does not detract significantly from the site's legitimacy given its strong brand and external references. Strategic recommendations include enhancing security headers, maintaining regular audits of third-party scripts, and publishing a clear security policy.

M

Město Poděbrady

reusepodebrady.cz

44

The website represents the Reuse Centrum of the city of Poděbrady, Czech Republic, providing municipal services focused on sustainability and reuse of items. It serves local residents with information, contact details, and operational hours. The site is professionally designed with clear navigation and multilingual support via Google Translate. Technically, it uses a CMS platform (Vismo), modern web technologies, and integrates Google Analytics with a privacy-conscious default consent setting. Security posture is adequate with HTTPS enforced and cookie consent mechanisms, but lacks explicit security headers and published security policies. WHOIS data is unavailable, limiting domain registration trust analysis, but the official municipal content and domain usage support legitimacy. Overall, the site is functional, trustworthy, and compliant with GDPR, serving its public service role effectively.

Reactdatepicker.com is a specialized website offering a simple and reusable datepicker component for React developers. The site is branded and crafted by HackerOne, a reputable company known for security and open source contributions. The website provides extensive code examples, documentation, and badges indicating active maintenance and testing. The target audience is primarily developers seeking UI components for React applications. The business model revolves around open source software distribution and community engagement. Technically, the site uses modern frontend technologies including React, TypeScript, Font Awesome, and Google Fonts, delivering a fast and mobile-optimized experience with good accessibility and SEO basics. Security posture is moderate; while the domain is secured with transfer and update prohibitions and uses HackerOne name servers, DNSSEC is not enabled and no security headers were detected in the provided data. Privacy compliance is low due to absence of privacy and cookie policies. No contact information or incident response details are published on the site. Overall, the domain registration is consistent with the website content and company branding, indicating high legitimacy and trustworthiness.

P

Platforma VIZE 0, z. ú.

vize0.cz

59

Platforma VIZE 0 is a Czech non-profit organization dedicated to improving road safety and reducing fatalities and serious injuries on Czech roads. The platform actively engages in education, advocacy, and public awareness campaigns, targeting drivers, cyclists, motorcyclists, and pedestrians. Their projects include practical safety tools and virtual reality experiences to educate the public. The website reflects a well-established presence since 2018, with consistent branding and a clear mission. Technically, the site uses modern JavaScript frameworks and libraries, integrates Google Tag Manager for analytics, and is hosted likely by Wedos, a Czech hosting provider. The site is mobile-optimized and SEO-friendly, with good user experience and navigation. Security-wise, HTTPS is enforced and cookie consent mechanisms are implemented, but there is room for improvement in security headers and incident response transparency. Overall, the platform demonstrates a strong commitment to privacy compliance and trustworthy communication.

E

EQS Group GmbH

reveal.sport

64

The website ita.whistleblowernetwork.net serves as a secure and anonymous whistleblower platform named REVEAL, focused on supporting investigations into anti-doping rule violations and criminal behavior in sports. It is branded and operated under EQS Group GmbH, a recognized compliance service provider. The platform targets individuals who wish to report sensitive information confidentially to help maintain integrity in sports. Technically, the site is built using Angular framework with Material Design components, delivering a modern and responsive user experience. However, SEO and accessibility features are basic, and no advanced analytics or tracking scripts are detected. Security posture is moderate with HTTPS implied but no explicit security headers visible in the HTML content. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service found. Contact information and incident response details are not provided on the main page, which could be improved for transparency and trust. Overall, the domain is a subdomain with no direct WHOIS registration data, which is typical and not suspicious given the parent domain and branding alignment. The website is safe, professional, and serves a niche compliance function with moderate trustworthiness.

The website dataskimo.org serves as an informational portal for the International Ski Mountaineering Federation (ISMF), providing competition results, rankings, event calendars, and championship details primarily targeting athletes, coaches, officials, and fans within the ski mountaineering community. The site is relatively new, with the domain registered in October 2023, aligning with the fresh content and niche sports focus. The business model centers on disseminating sports competition data rather than commercial transactions. From a technical perspective, the website employs basic HTML and CSS without advanced frameworks or CMS platforms. Hosting is provided by OVH sas, a reputable provider, but the site lacks modern optimizations such as mobile responsiveness and accessibility features. No analytics or tracking technologies are detected, indicating minimal user data collection. Security posture is limited; no HTTPS enforcement or security headers are evident, and no privacy or cookie policies are present, which may expose the site to trust and compliance issues. The absence of contact information and incident response channels further reduces the site's security maturity. However, no signs of malicious activity or vulnerabilities are detected. Overall, the site is functional for its informational purpose but requires significant improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user experience.