Security Directory

K

Koliba Kordulka

kolibakordulka.cz

64

Koliba Kordulka is a small hospitality business operating a restaurant in Rožnov pod Radhoštěm, Czech Republic, specializing in modern Czech cuisine with seasonal ingredients and event hosting services. The website presents a professional digital presence with integrated reservation and food ordering systems, supported by social media channels and clear contact information. The business targets local customers and tourists seeking authentic dining experiences and event venues. Technically, the website leverages modern web technologies and third-party analytics tools, hosted likely on the Dish.co platform, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policies or incident response contacts. Overall, the site is trustworthy, compliant with privacy regulations, and provides a positive user experience.

P

PSoIT Pavel Schauer

psoit.cz

50

PSoIT Pavel Schauer is a small technology service provider based in the Czech Republic, specializing in professional web development, e-commerce solutions using OpenCart, web design, and CMS development. The company has a long history dating back to academic roots in 1975 and commercial operations since 2003, positioning itself as a low-cost yet high-quality provider in its market segment. The website reflects a mature digital presence with clear service offerings, client references, and comprehensive cookie and privacy policies. Technically, the site uses modern web technologies including HTML5, CSS3, jQuery, Bootstrap, and integrates Google Analytics for performance insights. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms with opt-in analytics tracking, but lacks explicit security headers and a security.txt file for vulnerability disclosures. WHOIS data is unavailable, which limits domain trust verification, but the website content and contact information appear legitimate and consistent with the business claims. Overall, the site demonstrates a solid technical and business foundation with room for security enhancements.

P

PSoIT Pavel Schauer

psoit.sk

48

PSoIT Pavel Schauer is a small Slovak technology company specializing in professional web page creation, web design, content management systems, and e-commerce solutions using OpenCart. Established in 2003 with roots dating back to 1975, the company positions itself as a low-cost yet high-quality service provider targeting businesses and individuals seeking modern, responsive websites and online shops. The website demonstrates a solid technical infrastructure with modern technologies such as HTML5, CSS3, jQuery, Bootstrap, and integration of Google Analytics with GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced, email obfuscation, and no visible vulnerabilities, although no explicit security policy or incident response contacts are published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting the company's credibility in its market niche.

M

Mladí praktici z.s.

mladipraktici.cz

49

Mladí praktici z.s. is a Czech non-profit association dedicated to supporting young general practitioners preparing for certification and those within five years post-certification. The organization provides educational resources, community building, international internship opportunities, and financial support for conferences and training. Their market position is well-established within the Czech healthcare sector, with active international affiliations such as EYFDM and cooperation with official bodies like IPVZ and the Ministry of Health of the Czech Republic. The website serves as a portal and informational hub for their target audience of young doctors and medical trainees. Technically, the website is built using modern web standards with HTML5, CSS3, JavaScript, and is generated by Websy 4 CMS. It uses Google Fonts and Font Awesome for styling and icons, and Google Analytics for visitor tracking. The site is hosted by Wedos, a reputable Czech hosting provider. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS with good SSL configuration and secure form handling. However, it lacks explicit security headers and documented security policies or incident response contacts. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, though GDPR compliance indicators could be more explicit. No critical vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professionally maintained, and serves its community well. Strategic improvements in security headers and incident response documentation could enhance its security posture and compliance maturity.

P

ProProfs Chat

proprofschat.com

65

ProProfs Chat is a technology company specializing in AI-powered live chat software designed to enhance customer support and sales for businesses. The website presents a professional and consistent brand image aligned with its parent company, ProProfs. It offers a SaaS business model with free and paid subscription plans, targeting businesses seeking real-time customer engagement solutions. The site integrates modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Hotjar, indicating a mature digital infrastructure. Mobile optimization and accessibility are well implemented, providing a positive user experience across devices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present and indicate GDPR compliance. However, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy. Despite this, the website content and external references strongly associate it with the reputable ProProfs brand. Overall, the site is trustworthy and professionally maintained but would benefit from clearer domain registration transparency and enhanced security policy disclosures.

P

ProProfs Help Desk Software

proprofsdesk.com

63

ProProfs Help Desk Software is a technology company offering a comprehensive AI-powered help desk and ticketing system designed to streamline customer support and enhance customer satisfaction. The company operates a SaaS business model with multiple pricing plans including free, monthly, and annual subscriptions. It is positioned as a reliable and well-reviewed player in the customer service software market, supported by a parent company, ProProfs, with a broad product ecosystem. The website demonstrates strong branding, professional design, and clear navigation, targeting businesses seeking efficient customer support solutions. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and responsive design with web fonts. It is optimized for mobile devices and shows good SEO and accessibility practices. The site uses HTTPS with a good SSL configuration, though explicit security headers are not fully evident. Privacy and cookie policies are present and indicate GDPR compliance, but no explicit security policy or incident response information is published. From a security perspective, the site follows best practices such as HTTPS enforcement and secure form handling, with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain is unusual and may indicate recent registration or privacy protection, which slightly lowers the trust score. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website is professional, secure, and trustworthy with minor areas for improvement in security policy transparency and WHOIS data availability. The risk level is low, but monitoring domain registration details is recommended to ensure ongoing legitimacy.

S

Solen Software, s.r.o.

solensoftware.cz

49

Solen Software, s.r.o. is a Czech Republic based small technology company specializing in the development of custom internet applications with a strong focus on editorial systems for scientific publishing. Their flagship product, Actavia, supports comprehensive workflows for scientific journals including DOI management and integration with CrossRef and other citation databases. The company has an established web presence since 2012 and operates multiple related domains supporting their core business. Technically, the website uses legacy JavaScript libraries such as jQuery 1.7.2 and includes Google Analytics and Tag Manager for tracking, but lacks modern security headers and visible privacy or cookie policies, indicating room for compliance and security improvements. No contact emails or phone numbers are explicitly provided on the main site, which may impact user trust and support accessibility. The WHOIS data is consistent with the business claims, showing a legitimate and stable domain registration. Overall, the website is professional and content-rich but requires enhancements in privacy compliance, security posture, and contact transparency.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which is not a publicly accessible website. It serves as a placeholder or error display within the Chrome browser when a website cannot be loaded. The page includes embedded scripts and styles for the Chrome offline dinosaur game, indicating it is a browser-native error page rather than a business website. Consequently, no business information, privacy policies, or contact details are present. The technical infrastructure is limited to Chromium internal scripts and canvas-based game rendering. Security posture is minimal due to the nature of the page, lacking HTTPS or security headers as it is not served from a public domain. Overall, this is not a legitimate website but a browser error page, and the analysis is limited by the lack of accessible content.

Č

Česká odborná společnost klinické farmacie, z.s.

coskf.cz

58

Česká odborná společnost klinické farmacie, z.s. (ČOSKF) is a professional non-profit organization dedicated to setting standards and methodologies for clinical pharmacists in the Czech Republic. Founded in 2011, it serves a specialized audience of clinical pharmacy professionals and healthcare providers, offering education, working groups, and published guidelines to advance clinical pharmaceutical care. The organization maintains a professional web presence with active content updates and social media engagement, positioning itself as a key player in the Czech healthcare sector focused on clinical pharmacy. Technically, the website is built on the Webnode platform and hosted via AWS Cloudfront, leveraging modern web technologies including HTML5, CSS3, and JavaScript with Google APIs integration. The site demonstrates good performance, mobile optimization, and basic accessibility features. However, it lacks some advanced security headers and explicit privacy policy documentation, which are areas for improvement. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism with advanced user controls, indicating awareness of privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data reduces transparency and trustworthiness somewhat, but the professional content and organizational details support legitimacy. Overall, the website is a well-maintained, professional resource for clinical pharmacy professionals in the Czech Republic, with a solid technical foundation and moderate security posture. Strategic improvements in security headers, privacy policy publication, and domain registration transparency would enhance trust and compliance.

O

Omny Studio

omnystudio.com

73

Omny Studio is an enterprise-focused podcasting platform providing comprehensive audio management solutions tailored for podcast creators and radio stations. The website presents a professional and consistent brand image, targeting media industry professionals seeking scalable podcast hosting and management services. The technical infrastructure leverages modern web technologies including Cloudflare DNS, Google Fonts, and OneTrust for cookie consent, indicating a moderate level of digital maturity and compliance awareness. Security posture is adequate with HTTPS implied and cookie consent implemented, but lacks advanced security headers and DNSSEC, suggesting room for improvement in hardening the platform. Overall, the site is trustworthy and functional, though it would benefit from explicit privacy policies, contact information, and vulnerability disclosure mechanisms to enhance transparency and compliance. Strategic recommendations include enabling DNSSEC, publishing security policies, and improving privacy documentation to strengthen user trust and regulatory adherence.

H

HOTEL HORAL

hotel-horal.cz

49

Hotel Horal is a well-established hospitality business located in Rožnov pod Radhoštěm, Czech Republic, offering a comprehensive range of services including accommodation, wellness and spa facilities, dining, and event hosting. The hotel is positioned as a 4-star certified establishment with multiple awards, targeting tourists and wellness seekers in the Beskydy region. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and popular libraries like jQuery and Tiny Slider. It is mobile-optimized and includes interactive booking forms integrated with a secure external booking platform. However, the CMS appears custom or proprietary, and there is room for improvement in security headers and explicit incident response documentation. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and detailed security policies. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is good with GDPR-related pages and cookie mechanisms present. The absence of WHOIS data reduces domain trust signals but is mitigated by strong on-site trust indicators. Overall, the website and business present a low-risk profile with solid market positioning and digital maturity. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance trust and compliance further.

P

PER4MANCE s.r.o.

per4mance.cz

46

PER4MANCE s.r.o. is a Czech Republic based small technology company specializing in the distribution and support of enterprise software products such as Altova, Quest, Broadcom, Cisco, Oracle, and VMware solutions. The company offers software development, mobile app development, and server software services targeting IT professionals and enterprise clients. The website is professionally designed with clear navigation and relevant content focused on their product offerings and services. Technically, the site uses basic HTML and CSS with no advanced frameworks or analytics detected, hosted on Czech-based servers. Security posture is moderate but lacks visible security headers, privacy policies, and incident response contacts, which are areas for improvement. Overall, the domain is longstanding and consistent with the business profile, indicating a trustworthy and legitimate operation.

A

AV MEDIA SYSTEMS, a.s.

avmedia.cz

44

AV MEDIA SYSTEMS, a.s. is a well-established Czech company specializing in audiovisual solutions and event technical services, with over 30 years of experience. The company serves a diverse clientele including businesses, educational institutions, government bodies, and cultural organizations. Their offerings include design, implementation, rental, and servicing of audiovisual technologies, as well as event production and creative audiovisual projects. The website reflects a mature digital presence with comprehensive content, clear navigation, and active engagement through social media and partnerships.

H

Handicap trade s.r.o.

handicaptrade.cz

40

Handicap trade s.r.o. is a Czech company specializing in the development, manufacture, and distribution of locomotion aids and medical supplies, including orthopedic braces, crutches, and rehabilitation products. The company holds a significant market position domestically, covering approximately one-third of the Czech market and exporting a portion of its production. The website reflects a professional business focused on healthcare products with a clear product catalog and user-friendly navigation. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, with Google Analytics integrated for visitor tracking. The site is mobile responsive and well-structured, though it lacks visible privacy and cookie policies, which impacts compliance and user trust. Security headers are not detected in the provided data, indicating room for improvement in security hardening. From a security perspective, the site uses HTTPS, but the absence of WHOIS data and security headers reduces the overall trustworthiness. No contact emails or phone numbers are explicitly provided, which may hinder user communication and trust. There is no evidence of a formal privacy policy or cookie consent mechanism, which is a compliance gap, especially under GDPR regulations. Overall, the website is functional and content-rich but requires enhancements in privacy compliance, security best practices, and transparency of contact information to improve its risk profile and user trust.

P

PharmAround

pharmaround.cz

48

PharmAround is an interactive educational platform focused on collaboration, education, and experience sharing in the field of drug development. The platform targets medical students as well as professional and lay audiences interested in pharmaceutical development. The website is built on the Wix platform, indicating a small to medium-sized business with moderate digital maturity. The technical infrastructure relies on Wix's hosting and standard web technologies such as JavaScript, HTML5, and CSS3. Security posture is basic with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. No WHOIS data is available, suggesting privacy protection on domain registration, which is reasonable for this type of educational platform. Overall, the website is functional and professionally presented but would benefit from enhanced privacy compliance and security practices.

A

Arjo

arjo.com

73

Arjo is a global supplier specializing in medical devices and solutions aimed at improving the lives of people affected by reduced mobility and age-related health challenges. The company targets healthcare providers and caregivers, offering products such as patient handling and hygiene solutions. The website reflects a professional and consistent brand presence with multi-language support and embedded multimedia content to enhance user engagement. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Azure Application Insights for telemetry, Cookiebot for cookie consent management, and Wistia for video hosting. The site is hosted on Azure infrastructure, indicating a robust and scalable platform. Performance and mobile optimization are good, though accessibility features could be improved. From a security perspective, the site enforces HTTPS, uses security headers, and implements anti-CSRF cookies, demonstrating adherence to best practices. However, the absence of a publicly available security policy, incident response contacts, and vulnerability disclosure mechanisms suggests areas for enhancement. Privacy compliance is strong, with comprehensive cookie consent and GDPR-aligned policies. Overall, the website is trustworthy and professional, though the lack of WHOIS registration data and visible contact information slightly detracts from business credibility. Strategic improvements in transparency and accessibility would further strengthen the security posture and user trust.

S

společnost Madisson, s.r.o

madisson.cz

42

Společnost Madisson, s.r.o is a well-established Czech company specializing in the supply and servicing of medical, rehabilitation, and wellness equipment. With over 30 years of experience, it serves a broad audience including physiotherapists, doctors, wellness centers, and healthcare institutions across the Czech Republic. The company offers a comprehensive product range, expert consulting, training, and reliable technical support, positioning itself as a trusted partner in healthcare and rehabilitation sectors. Technically, the website is built on OctoberCMS and employs modern front-end technologies such as jQuery, AOS animations, Select2, and Google Fonts, delivering a responsive and user-friendly experience. The site is well-structured with good SEO practices, though some accessibility features could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses secure form practices but lacks visible security headers and formal privacy or cookie policies, which are important for GDPR compliance. No vulnerabilities or exposed sensitive data were found, but the absence of WHOIS data for the domain raises concerns about domain registration transparency. Overall, the website is professional and trustworthy in content and presentation but would benefit from enhanced privacy compliance and improved domain registration transparency to strengthen its security posture and user trust.

R

RENOCAR a.s.

renocar.cz

52

RENOCAR a.s. is an established authorized dealer and service provider for BMW, MINI, and BMW Motorrad vehicles operating primarily in the Czech Republic with multiple physical branches. The company offers a comprehensive range of services including new and used vehicle sales, authorized servicing, financial services, insurance, and test drives. Their market position is strong within the automotive retail sector, supported by consistent branding and a professional online presence. The website is well-designed, mobile-optimized, and integrates modern tracking and marketing tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit incident response contacts are missing. The absence of WHOIS registration data is a notable gap, reducing domain registration trustworthiness but not detracting from the overall legitimacy indicated by the website content and structured data. Strategic recommendations include enhancing security headers, publishing a security policy, and improving incident response transparency to further strengthen trust and compliance.

A

AGROTEC a.s.

eagrotec.cz

61

AGROTEC a.s. is the largest supplier of ground machinery in the Czech Republic, specializing in agricultural machinery, construction equipment, and personal and commercial vehicles. The company targets farmers, agricultural businesses, and construction companies with a comprehensive product catalog and after-sales services. The website reflects a mature digital presence with a structured product offering and partner branding such as New Holland. Technically, the site is built on ASP.NET WebForms with Kentico CMS, integrating modern marketing tools like Google Tag Manager and reCAPTCHA for security and analytics. Security posture is moderate with HTTPS and form protections but lacks visible security headers and explicit privacy policies. The absence of WHOIS data due to privacy protection slightly reduces trust but is common for commercial entities. Overall, the site is professional, content-rich, and safe for general audiences.

N

Národní vinařské centrum, o.p.s.

narodnidenvina.cz

55

The website narodnidenvina.cz represents a Czech national project focused on promoting wine culture, health benefits of moderate wine consumption, and charitable activities supporting pediatric cardiology. It is organized by the Národní vinařské centrum, o.p.s., a recognized organization in the Czech wine sector. The site targets wine enthusiasts, health-conscious individuals, and the general public interested in cultural and charitable wine-related events. The business model is non-profit and awareness-driven, with a focus on education and charity fundraising. Technically, the website is built on the Webnode CMS platform, leveraging modern web technologies including HTML5, CSS3, JavaScript, and Amazon Cloudfront CDN for content delivery. Google Tag Manager is used for analytics and tracking. The site is mobile-optimized and performs moderately well, though SEO and accessibility features are basic. No advanced frameworks or platforms are detected. From a security perspective, the site enforces HTTPS and does not expose sensitive data. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options. There are no visible vulnerabilities or exposed credentials. Privacy and cookie policies are missing, and no contact information for security incidents is provided, indicating gaps in compliance and incident response readiness. Overall, the website is legitimate and professionally presented but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information. The lack of WHOIS data limits domain ownership transparency but does not detract significantly from trust given the site's content and organizational backing.

R

Regionální muzeum v Mikulově, p. o.

pronajmisizamek.cz

41

The website pronajmisizamek.cz is operated by the Regionální muzeum v Mikulově, a regional museum organization in the Czech Republic. It offers rental services for various historic halls and spaces within the Mikulov castle, targeting individuals and organizations seeking venues for social events, corporate celebrations, weddings, and cultural activities. The site is well-structured with detailed descriptions of each rental space and includes reservation forms for direct booking requests. Multilingual support is provided via partner domains in English and German. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics and Tag Manager for visitor tracking. The design is professional and mobile-optimized, providing a good user experience. However, the site lacks explicit privacy and cookie policies, and no cookie consent mechanism is present, which are compliance gaps under GDPR. Security headers are not detected, though HTTPS is used, indicating room for improvement in security posture. WHOIS data is unavailable, likely due to privacy protection, but the website content and external references support legitimacy. Overall, the site is a credible small-scale venue rental platform with moderate technical maturity and some compliance and security improvements recommended.

B

Baji Live

federacion-matronas.org

55

Baji Live is a recently established online gambling platform launched in 2024, focusing on sports betting and casino games primarily for users in Bangladesh and Southeast Asia. The platform offers a wide range of betting options including cricket, football, and live casino games, supported by a dedicated Android app. The business positions itself as a trusted and innovative player in the regional online betting market, emphasizing user satisfaction and secure gaming experiences. Technically, the website uses standard web technologies such as HTML5, CSS3, and JavaScript, with moderate performance and good mobile optimization. The domain is registered with NETIM SAS and uses DNS parking services. However, there is no evidence of advanced security headers or DNSSEC implementation, which are recommended for enhanced security. The website lacks visible cookie consent mechanisms and comprehensive privacy compliance features. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers, which lowers its security posture. No direct contact emails or phone numbers are provided, limiting transparency. The WHOIS data aligns well with the business claims, indicating legitimacy, but the domain's recent creation suggests the business is new and still maturing. Overall, the website is functional and professionally designed but requires improvements in security best practices and privacy compliance to enhance trust and regulatory adherence. Strategic recommendations include implementing DNSSEC, adding security headers, establishing cookie consent, and improving privacy disclosures.

A

Association Luxembourgeoise des Sages-femmes a.s.b.l.

sages-femmes.lu

60

The Association Luxembourgeoise des Sages-femmes is a small non-profit professional organization based in Luxembourg dedicated to supporting midwives, informing parents, and representing midwives at the national level. The website serves as an information hub for both parents and healthcare professionals, providing resources such as a directory of midwives and news updates. It also highlights the cultural recognition of midwifery as a national and UNESCO intangible cultural heritage. The association maintains partnerships with major Luxembourg hospitals and international midwife organizations, reinforcing its authoritative position in the healthcare sector. Technically, the website is built on the Webnode CMS platform and leverages Amazon Cloudfront CDN for content delivery. The site is well-structured with responsive design, good SEO practices, and a cookie consent mechanism compliant with GDPR. While the site uses HTTPS and Google Tag Manager for analytics, it lacks advanced security headers and explicit security policies, which could be improved to enhance its security posture. From a security perspective, the site shows a solid baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data due to a malformed domain query limits the ability to fully verify domain registration legitimacy. The website content and business information appear trustworthy and professional, mitigating some concerns. Overall, the site scores well on content quality, technical implementation, and privacy compliance but could benefit from enhanced security policies and transparency. Strategically, the association should focus on improving its security headers, publishing a formal security policy, and establishing an incident response contact to strengthen trust and compliance. These steps will support its role as a professional body and safeguard its digital presence against emerging threats.

The website semma.gr is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge, which blocks direct access to the site's content. As a result, no business information, contact details, or policies are available for analysis. The site appears to be protected by Cloudflare's security services, indicating an intent to mitigate automated access or attacks. However, this also limits the ability to assess the site's content quality, technical infrastructure, and security posture comprehensively. The lack of accessible content and metadata suggests the site is either under maintenance, protected against bots, or experiencing access restrictions.

Π

Παγκύπριος Σύνδεσμος Νοσηλευτών και Μαιών (ΠΑ.ΣΥ.Ν.Μ.)

cyna.org

45

The Παγκύπριος Σύνδεσμος Νοσηλευτών και Μαιών (ΠΑ.ΣΥ.Ν.Μ.) is a well-established professional association representing nurses and midwives in Cyprus. The organization provides educational programs, organizes conferences, and represents its members both nationally and internationally. The website reflects a medium-sized non-profit entity with a clear focus on healthcare professionals in Cyprus. The domain age and WHOIS data confirm the legitimacy and long-standing presence of the organization. Technically, the website is built on WordPress with a standard theme and uses common web technologies such as jQuery and CSS3. The site is moderately optimized for mobile and SEO, with a good user experience and clear navigation. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and advanced security headers. Privacy compliance is basic with a privacy policy and cookie consent mechanism present but not fully comprehensive or explicitly GDPR compliant. Contact information and social media presence are clearly provided, enhancing business credibility.

M

Ministerstvo financí ČR

fondyehp.cz

76

The website www.eeagrants.cz is an official online presence of the Czech Ministry of Finance dedicated to managing and communicating about the EEA and Norway Grants. It serves as a government portal providing information on grant programs, updates, and resources for stakeholders in the Czech Republic. The site targets public sector entities, grant applicants, and interested citizens. The business model is government-funded and focused on grant administration and transparency. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and integrates analytics tools such as Google Analytics and Matomo. Cookiebot is used for comprehensive cookie consent management, reflecting a moderate level of digital maturity. Hosting is inferred to be on Microsoft Azure, supporting scalability and reliability. The site is mobile-optimized and accessible with clear navigation. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, it lacks explicit security headers and does not provide visible security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is basic, with no explicit privacy policy page found in the provided content. Overall, the website is legitimate, professional, and trustworthy, consistent with a government entity. Recommendations include publishing a detailed privacy policy, adding security headers, providing contact information for data protection and incident response, and implementing a vulnerability disclosure policy to enhance security posture and compliance.

N

Nadační fond rodiny Malých

nfrmalych.cz

47

Nadační fond rodiny Malých is a Czech non-profit foundation established in 2021, continuing over 20 years of philanthropic history by its founders. The foundation supports public benefit organizations focused on nature protection, cultural heritage, disadvantaged groups, and cultural and artistic projects. The website is professionally designed, mobile-optimized, and uses modern JavaScript libraries such as Swiper.js and Google Tag Manager for analytics. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit privacy or terms of service documentation. No direct contact information or incident response contacts are visible, which could be improved for transparency and compliance. The domain registration data is consistent with the foundation's claims and location, indicating legitimacy.

K

Kancelária prezidenta Slovenskej republiky

prezident.sk

54

The website www.prezident.sk is the official online presence of the President of the Slovak Republic, currently Peter Pellegrini. It serves as a comprehensive portal providing official information about the president, his biography, official program, press releases, speeches, and contact options primarily through forms. The site targets Slovak citizens, media, and international visitors seeking authoritative information about the presidency. The business model is that of a government institution providing public services and information. The site is well-branded, consistent, and professionally maintained. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Google Analytics, Hotjar, and Facebook SDK for social media integration. It uses Google Fonts and FontAwesome for styling and icons. The site appears to be built on TYPO3 CMS, common for Slovak government sites. Performance is moderate with good mobile optimization and accessibility features. SEO is well implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes important security headers such as HSTS, X-Frame-Options, and Content-Security-Policy. The cookie consent mechanism is robust, allowing granular user control and compliance with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available. Overall, the website is a trustworthy, professional government portal with strong privacy and security postures. It is safe for general audiences and free from adult or questionable content. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure information, and maintaining regular audits of third-party scripts to ensure ongoing security.

R

RIMADO s.r.o.

rimado.cz

47

RIMADO s.r.o. is a Czech Republic based small technology company founded in 2011, specializing in providing online digital services including website creation, e-commerce solutions, online applications, and ICT support. The company positions itself as a partner in the digital world, leveraging a proprietary publishing system called adSYSTEM. The website is professionally designed, mobile-optimized, and provides clear contact information, supporting its credibility. However, the absence of WHOIS data and privacy policies slightly detracts from transparency and compliance. Technically, the site uses standard web technologies with no detected advanced frameworks or analytics, indicating a straightforward infrastructure. Security posture is moderate but could be improved by implementing security headers and formal privacy and cookie policies. Overall, the site is safe, business-focused, and trustworthy but would benefit from enhanced security and compliance measures.

The Slovenská hepatologická spoločnosť (Slovak Hepatological Society) is a well-established professional organization dedicated to uniting the hepatology community in Slovakia since 1968. The society focuses on providing modern, quality, and accessible treatment and preventive care for liver disease patients and the general population. Their website serves as a platform for members and the public to access educational resources, event information, and membership benefits. The organization maintains partnerships with pharmaceutical companies and participates in European research consortia such as Liver Aim.

I

Institut biostatistiky a analýz LF MU

onconet.cz

53

NOP Online is a Czech national oncology portal providing comprehensive information and resources related to cancer care, screening programs, and epidemiological data. It is supported by academic and governmental institutions, notably the Institut biostatistiky a analýz LF MU and the Ministry of Health of the Czech Republic. The portal targets patients, healthcare professionals, and researchers within the Czech Republic, offering interactive maps, data visualizations, and up-to-date news on oncology programs. Technically, the website employs modern web technologies including Leaflet.js for mapping and Google Analytics for user tracking, with a responsive and accessible design. Security posture is moderate with HTTPS usage and cookie consent implemented, but lacks visible security headers and formal privacy or terms of service documentation. WHOIS data confirms the domain's legitimacy and long-term registration consistent with the academic institution managing the site. Overall, the website is professional, trustworthy, and serves an important healthcare informational role in the Czech Republic.

U

UAB "Detalita"

detalita.lt

41

Detalita is a Lithuanian-based B2B company specializing in automotive parts supply and vehicle servicing. Established in 1998, it holds a strong market position in Lithuania's transportation and retail sectors, offering a wide range of automotive components and related services. The website targets business clients and automotive professionals, providing product search by vehicle and brand, along with utilization services for batteries, oils, and tires. Technically, the site uses modern web technologies including OXID eShop CMS, jQuery, HTMX, and Hyperscript, delivering a responsive and user-friendly experience. Security-wise, the site enforces HTTPS and uses secure forms but lacks some advanced security headers and explicit privacy compliance mechanisms. Overall, the site is professional, trustworthy, and well-maintained, though improvements in privacy compliance and security policies are recommended.

A

Asociace inovativního farmaceutického průmyslu (AIFP)

lekarskekongresy.cz

50

The website lekarskekongresy.cz serves as a transparency platform managed by the Asociace inovativního farmaceutického průmyslu (AIFP), a Czech pharmaceutical industry association. It focuses on providing a database related to Continuing Medical Education (CME) disclosures, promoting transparency in financial support between pharmaceutical companies and healthcare professionals. The site targets medical professionals, pharmaceutical companies, and event organizers, positioning itself as a trusted resource within the Czech healthcare sector. The business model is non-commercial, emphasizing transparency and ethical collaboration in the pharmaceutical industry. The website content is professionally presented, consistent with the association's branding and mission. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Swiper.js for UI components. It integrates Google Analytics for visitor tracking and CookieHub for cookie consent management, reflecting a moderate level of digital maturity. The site is mobile-optimized with responsive design elements and provides a clear navigation structure. Hosting and domain registration are consistent with Czech providers, supporting the site's legitimacy. From a security perspective, the website uses HTTPS and implements a cookie consent mechanism, but lacks visible advanced security headers and explicit security or incident response policies. No critical vulnerabilities or suspicious patterns were detected. Privacy compliance is partial, with no dedicated privacy policy or terms of service pages found, which is a notable gap. Overall, the security posture is adequate but could be improved with formalized policies and enhanced header configurations. The overall risk assessment is low, with the site appearing trustworthy and professionally maintained. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and improving transparency around incident response and vulnerability disclosures to strengthen compliance and user trust.

P

PepiApp - Mobilní aplikace, vývoj mobilní aplikace pro Android a iOS

pepiapp.cz

60

PepiApp is a small technology service provider specializing in mobile application development for Android and iOS platforms, based in the Czech Republic. The website presents a professional image with a clear focus on their core services and target audience. The technical infrastructure leverages modern web technologies including Webflow CMS, Google Tag Manager for analytics, and Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and CSRF protection cookies in place, although some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partially addressed through a detailed cookie consent mechanism, but the absence of a visible privacy policy and contact information limits full compliance assurance. Overall, the website is functional, well-designed, and trustworthy, but could benefit from enhanced transparency and security documentation.

V

visitostrava.eu

visitostrava.eu

60

VisitOstrava.eu is the official tourism guide website for the city of Ostrava, Czech Republic. It provides comprehensive information about local events, attractions, accommodation, and cultural activities, targeting tourists and visitors. The site also features an e-shop for souvenirs and promotes regional tourism partners, positioning itself as a key resource for exploring Ostrava. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates tracking tools such as Google Analytics and Facebook Pixel. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS and asynchronous loading of tracking scripts but lacks some security headers and a published privacy policy, which are areas for improvement. The domain WHOIS data is privacy protected by EURid, which is typical for .eu domains, and does not reveal registrant details, but the website content and external partnerships indicate legitimacy. Overall, the website is professional, trustworthy, and serves its business purpose effectively, though it would benefit from enhanced privacy and security disclosures.

W

WWK Versicherungen

wwk.de

62

WWK Versicherungen is a well-established German insurance company founded in 1884, offering a broad range of insurance products including life, health, property, liability, and retirement solutions. The company positions itself as a strong community-focused insurer with a comprehensive portfolio targeting a wide audience. Their website reflects a mature digital presence with clear navigation, multiple customer and partner portals, and a strong emphasis on compliance and service quality. Technically, the site uses modern web technologies such as Vue.js and integrates privacy and consent management tools like OneTrust, alongside analytics via eTracker. Security posture is robust with HTTPS enforcement, security headers, and ISO 27001 certification, although explicit vulnerability disclosure and incident response contacts are not publicly detailed. Overall, the website is professional, secure, and compliant, supporting WWK's market position as a trusted insurer in Germany.

N

Nsoft

nsoft.lt

54

Nsoft is a Lithuanian technology company specializing in business hardware and software solutions, particularly point of sale systems and business process management tools. The company has an established market presence since 2005 and targets business clients primarily in Lithuania. Their website reflects a professional digital presence built on WordPress with modern SEO and tracking tools. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks published security policies and vulnerability disclosure mechanisms. Privacy compliance is partial due to missing privacy and terms of service pages, though a cookie consent banner is present. Overall, the website and domain registration data indicate a legitimate and trustworthy business with room for improvement in compliance documentation and security transparency.

A

adSYSTEM

adsystem.eu

51

adSYSTEM is a Czech-based technology company specializing in the design and implementation of internet e-shops, websites, CMS, and CRM systems with rental options. The company targets businesses and organizations seeking integrated administration and publication systems for internet and intranet applications. Their market position is niche-focused within the Czech Republic, offering a proprietary CMS platform and related modules such as e-shop management, CRM, cash register integration, and SEO optimization. The website content is professional, well-structured, and optimized for mobile devices, reflecting a good level of digital maturity. Technically, the website employs standard web technologies including HTML5, CSS3, and jQuery 3.2.1, hosted by a reputable Czech registrar and hosting provider (INTERNET CZ, a.s.). The site enforces HTTPS with strong SSL configuration and basic security headers, though there is room for improvement by adding advanced security headers and publishing a security policy. The cookie consent mechanism and privacy policy indicate awareness of GDPR compliance, enhancing the site's privacy posture. From a security perspective, the site demonstrates good practices such as secure login forms and no visible vulnerabilities or exposed sensitive data. However, the absence of a formal security policy, incident response contacts, and vulnerability disclosure mechanisms suggests areas for maturity growth. Overall, the risk level is low with no critical issues detected. Strategically, adSYSTEM should focus on enhancing security transparency, expanding accessibility features, and maintaining up-to-date technical components to sustain trust and compliance. The website's professional presentation and clear contact information support strong business credibility within its market segment.

P

Pedro's Foodtruck

pedrosfoodtruck.cz

42

Pedro's Foodtruck is a small hospitality business operating a street food truck and bistro in the South Moravia region of the Czech Republic. They specialize in American-style comfort food such as pulled meat burgers, hot dogs, tacos, and quesadillas, emphasizing local ingredients and homemade sauces. The business has a strong local presence with positive customer reviews and media recognition, positioning itself as a leader in the regional street food market. Technically, the website is built on Joomla CMS using the UIkit framework, offering a visually appealing and mobile-optimized experience. However, the site lacks critical privacy and cookie policies, which impacts compliance and trust. Security posture is moderate with HTTPS usage but missing security headers and incident response information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

Oborová zdravotní pojišťovna zaměstnanců bank, pojišťoven a stavebnictví (OZP) is the third largest employee health insurance company in the Czech Republic. The company offers a broad range of benefits including free preventive check-ups, financial contributions to preventive programs, and discount programs. OZP emphasizes convenience by enabling clients to handle basic administrative tasks online, supported by their VITAKARTA online service and mobile applications. The website reflects a mature digital presence with comprehensive content, clear navigation, and multiple client engagement channels including a chatbot and online appointment booking. Technically, the site employs modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Smartlook, all integrated with a robust cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be explicitly confirmed. The absence of WHOIS data limits domain trust analysis, but the website's professional presentation, clear business information, and social media presence strongly support legitimacy. Overall, OZP demonstrates a well-established healthcare insurance business with a solid digital infrastructure and compliance focus.

WWW.KOTVA.CZ, a.s. operates a real estate rental business specializing in office, residential, storage, and parking spaces located in a historic building in the center of Prague. The company targets businesses and individuals seeking premium rental spaces in Prague 1, leveraging the unique architectural and historical value of their property. The website presents a professional image with clear descriptions of services and contact information, positioning the company as a niche local real estate provider with a small but stable tenant community. Technically, the website uses modern web technologies including Google Analytics for tracking and Google Maps API for location services. The site is mobile responsive and well-structured, though it lacks some advanced accessibility features and explicit security headers. The absence of a CMS or hosting provider information limits deeper infrastructure insights. Performance is moderate with good SEO practices evident through meta tags and structured content. From a security perspective, the website uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency and readiness. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is not uncommon for small businesses. Overall, the website is safe, professional, and functional with moderate risk due to missing privacy and security policy disclosures. Strategic improvements in compliance and security posture would enhance trust and reduce potential regulatory risks.

E

EUC

euc.cz

69

EUC.cz is the largest outpatient healthcare provider in the Czech Republic, operating clinics, mamocenters, pharmacies, and laboratories serving approximately one million patients annually. The website presents a professional and consistent brand image targeting Czech healthcare consumers. Technically, the site employs modern JavaScript libraries, Google Tag Manager, Facebook Pixel, and Cookiebot for GDPR-compliant cookie consent management. The site is mobile optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and cookie consent denying tracking by default, though security headers and explicit incident response policies are absent. No contact emails or phone numbers are directly visible, and no terms of service page was found. Overall, the site is trustworthy and well-positioned in its market segment.

The website www.vci-protection.cz is a minimal WordPress site with default placeholder content and no substantive business information or services described. The lack of WHOIS data suggests the domain is either privacy protected or unregistered, which combined with minimal content, indicates the site may be under development or inactive. Technically, the site uses WordPress with the Twenty Twenty-One theme and basic modern web technologies. HTTPS is enabled, but no advanced security headers or policies are present. There is no evidence of privacy, cookie, or terms of service policies, nor any contact or incident response information, which limits compliance and trust. Overall, the site has a low security posture and minimal business credibility.

SUPPOO is a Czech Republic based B2B SaaS platform developed by Customize.cz, s.r.o., specializing in centralized management of customer reviews and ratings across multiple platforms such as Google, Seznam, Heureka, and Zboží.cz. The platform leverages AI to generate response suggestions, offers detailed analytics, team management features, and notification services to help businesses improve their online reputation efficiently. The website is professionally designed, mobile-optimized, and provides clear contact channels including a contact form with reCAPTCHA and company email and address details. Structured data and testimonials enhance trust and SEO. Technically, the site uses modern web technologies including Google Fonts, jQuery, and Google Tag Manager for analytics. It is hosted likely on Czech hosting providers with DNS servers ns.web4u.cz and ns2.web4u.cz. Performance is moderate with good mobile responsiveness and SEO optimization. Security posture is adequate with HTTPS enforced and cookie consent mechanisms, but lacks advanced security headers and DNSSEC is not enabled. Security-wise, no critical vulnerabilities or malware indicators were found. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in security maturity. The domain WHOIS data is consistent and legitimate, supporting the business credibility. Overall, SUPPOO presents a trustworthy, professional SaaS offering with solid technical implementation and business credibility, though it would benefit from enhanced security policies and DNS security improvements.

F

Finvalda

finvalda.lt

51

Finvalda is a Lithuanian company specializing in financial management software solutions for businesses of various sizes, offering modular products, integrations, and data protection features. Established in 2004, it holds a stable market position with a focus on serving small to large enterprises. The website is built on WordPress and incorporates modern technologies such as Google Tag Manager, reCAPTCHA, and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, the site reflects a professional and trustworthy business presence with good technical and privacy compliance maturity.

Edisoft Group OU operates as the largest EDI (Electronic Data Interchange) operator in the Baltic states, providing electronic document exchange services to over 2500 clients. Their website, primarily in Lithuanian, showcases a comprehensive portfolio of EDI-related services including integration solutions, B2B order systems, and international EDI connections. The company emphasizes automation and efficiency in commercial document exchange, targeting businesses in Lithuania, Latvia, Estonia, and beyond. The market position is strong within the Baltic region, supported by certifications such as PEPPOL and a significant volume of processed documents annually.

P

Just a moment...

pigu.lt

54

The website pigu.lt is an established Lithuanian e-commerce platform, operating since 2008, offering a broad range of consumer products across multiple categories. The domain registration data is consistent with the business's regional focus and indicates a legitimate and mature online retail presence. However, the current accessible content is blocked by Cloudflare's Turnstile captcha, preventing full content analysis. The technical infrastructure leverages Cloudflare for DNS and security, indicating a focus on protection against automated threats. Despite this, no privacy, cookie, or terms of service policies are visible in the accessible content, and no contact information or certifications are found, limiting assessment of compliance and trust indicators.

S

Schindlerova pletárna s.r.o.

schindlerovapletarna.cz

10

Schindlerova pletárna s.r.o. is a Czech manufacturer specializing in knitted clothing with a rich tradition dating back to 1854. The company produces a variety of knitted garments including sweaters, cardigans, hats, scarves, and socks, serving both retail and custom order markets. Their website reflects a medium-sized manufacturing business with a strong emphasis on heritage and quality craftsmanship. The company maintains an active online presence with e-commerce capabilities and social media engagement. Technically, the website is built on the Upgates e-commerce platform using modern web technologies such as Bootstrap and jQuery, with integrations for Facebook Pixel and Smartlook for analytics and marketing purposes. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though it lacks advanced security headers and published security policies. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear professional and legitimate. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations, targeting general audiences interested in quality knitted apparel.

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) rather than an externally hosted website. This page is displayed when the browser cannot load a requested webpage, showing a default offline or error interface including the Chrome dinosaur game. Consequently, there is no actual business or organizational content, no contact or policy information, and no external links or social media references. The technical infrastructure is limited to embedded Chromium UI scripts and styles, with no hosting or CMS details applicable. Security posture is minimal due to the nature of the page being a local browser resource rather than a public website. Overall, this content does not represent a legitimate business website and cannot be evaluated for compliance, security, or business credibility.

The website tomashubik.cz represents a professional portfolio for Tomas Hubik, a Czech-based full stack developer specializing in front-end technologies such as Angular and React, with additional skills in UI/UX and graphical design. The site showcases a broad portfolio of freelance projects and indicates current employment as a lead software developer. The business model is primarily freelance and professional services targeting clients seeking development and design expertise. The website is well-structured with clear navigation and professional branding, targeting a general audience of potential clients and collaborators. Technically, the site uses a modern technology stack including JavaScript frameworks, PHP, Java, and related libraries. Hosting is provided by WEDOS, a Czech hosting provider, consistent with the domain registration data. The site includes Google Fonts and Google Analytics for tracking. The design is responsive and optimized for mobile devices, though accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site lacks published privacy and cookie policies, which is a compliance gap especially under GDPR. No security headers were detected, and the contact form lacks visible anti-spam protections. HTTPS usage is implied but not explicitly confirmed in the HTML content. There is no published incident response or vulnerability disclosure information. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, enforcing HTTPS, adding anti-spam measures on forms, and providing incident response contacts. These improvements would enhance compliance, user trust, and security maturity.