Security Directory

The website telemedicina-brno.cz serves as the official platform for the III. national conference on healthcare electronization and telemedicine scheduled for March 2025 in Brno, Czech Republic. It is organized by SYMMA, spol. s r.o., a small Czech company specializing in event organization within the healthcare and technology sectors. The site provides detailed conference information, including program themes, registration fees, venue details, and partner organizations, targeting healthcare professionals, government officials, and technology stakeholders. The business model focuses on knowledge sharing and networking through event hosting. Technically, the website employs standard web technologies such as Bootstrap, jQuery, and FontAwesome, with Google Fonts for typography. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. No CMS or hosting provider details are evident. The site does not implement analytics or tracking scripts, indicating a minimal user tracking approach. From a security perspective, the site lacks visible security headers and does not display privacy or cookie policies, which are critical for GDPR compliance. The absence of incident response contacts and vulnerability disclosure mechanisms further limits its security posture. However, the domain registration is consistent and legitimate, with no suspicious WHOIS patterns. The site is accessible without WAF or blocking mechanisms. Overall, the website is professional and informative but requires improvements in privacy compliance, security best practices, and mobile optimization to enhance trust and user experience.

The website www.vyhnankovy-dny.cz serves as the official platform for the Vyhnánkovy traumatologické dny medical congress, organized by SYMMA, spol. s r.o., in collaboration with the 3rd Faculty of Medicine, Charles University and the Faculty Hospital Královské Vinohrady. It targets healthcare professionals specializing in traumatology and surgery, offering a detailed program and registration information for the event scheduled in March 2026. The site reflects a niche, professional event with strong academic and hospital affiliations, positioning it as a credible source within the Czech medical community. Technically, the website employs a standard Bootstrap framework with jQuery and FontAwesome, ensuring a responsive and visually consistent user experience. However, mobile optimization and accessibility are basic, and no advanced CMS or hosting details are evident. The site lacks analytics and tracking scripts, indicating minimal user tracking and a privacy-conscious approach, though it also lacks explicit privacy and cookie policies. From a security perspective, the site is served over HTTPS (assumed from modern standards though not explicitly confirmed), but no security headers or advanced protections are detected. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the professional content and company contact details mitigate some risk. No forms are hosted directly on the site, reducing attack surface, but also limiting direct data collection. Overall, the website is a well-structured, professional event site with good content quality and business credibility but requires improvements in security posture, privacy compliance, and domain registration transparency to enhance trust and compliance with modern standards.

The website www.m-t-m.cz represents a professional conference platform organized by SYMMA, spol. s r.o., focusing on modern technologies in medicine, including AI, virtual reality, and 3D printing. It targets medical professionals, academics, and technology companies, providing event information, registration, and contact details. The site is well-structured with clear navigation and relevant content, supporting the niche market of medical technology conferences in the Czech Republic. Technically, the site uses a standard Bootstrap framework with jQuery and FontAwesome, ensuring a responsive and visually consistent experience, though mobile optimization and accessibility could be improved. No advanced CMS or analytics tools are detected, indicating a straightforward implementation with moderate performance. From a security perspective, the site uses HTTPS but lacks visible security headers and privacy/cookie policies, which are important for GDPR compliance and user trust. The absence of WHOIS data reduces transparency and trustworthiness, though the site content and contact information appear legitimate and professional. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and WHOIS transparency to improve trust and regulatory adherence.

C

Curanet

curanet.dk

64

Curanet is a Danish technology company specializing in reseller hosting, cloud services, email solutions, and security offerings. Established in 2008, it has positioned itself as a reliable partner for businesses seeking to create their own hosting and cloud service businesses by leveraging Curanet's infrastructure and products. The website reflects a mature digital presence with a focus on reseller partners and business customers. Technically, the site is built on HubSpot CMS with modern frameworks like Bootstrap and integrates marketing and analytics tools such as Google Analytics, HubSpot Analytics, and Sleeknote for lead generation. Privacy and cookie compliance are robustly handled via Iubenda, ensuring GDPR adherence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit incident response contacts and security.txt files. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

M

Moravian-Silesian Tourism, s.r.o.

industrialnipohranici.cz

51

Industrial Frontier is a regional tourism and cultural heritage project focused on promoting the industrial borderlands of the Moravian-Silesian region and adjacent Polish areas. The website serves as an informational platform showcasing attractions related to coal and steel heritage, targeting tourists and cultural enthusiasts. The business operates under Moravian-Silesian Tourism, s.r.o., established in 2022, positioning itself as a niche regional tourism promoter with partnerships across neighboring regions. Technically, the website is built on WordPress with modern plugins including Yoast SEO and Google Tag Manager, ensuring good SEO and analytics integration. The site is mobile-optimized with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and headers are lacking. No critical vulnerabilities or suspicious content were detected. The site complies with GDPR through cookie consent and privacy policy presence. However, contact information is minimal, with no direct emails or phone numbers found on the homepage. The domain registration is consistent with the business profile, registered in 2022 under a Czech registrar. Overall, the website is a professional and trustworthy regional tourism platform with room for improvement in security transparency and contact availability.

M

Moravian-Silesian Tourism, s.r.o.

cenycr.cz

52

The website 'Ceny cestovního ruchu' is a professionally maintained platform operated by Moravian-Silesian Tourism, s.r.o., a regional destination management organization in the Czech Republic. It focuses on organizing and promoting tourism awards for Northern Moravia and Silesia, targeting tourism professionals, local government, and the general public interested in regional tourism development. The site benefits from official regional government support and collaboration with multiple regional partners, enhancing its credibility and market position. Technically, the website is built on a modern WordPress CMS with a robust tech stack including Yoast SEO, Bootstrap, and Google reCAPTCHA for security. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks visible security headers and a formal security policy or incident response information. GDPR compliance is well addressed through a comprehensive cookie consent mechanism and privacy policy. Contact information is available via email and contact forms, but no phone numbers or physical addresses are explicitly provided. Overall, the website presents a low risk profile with a good balance of content quality, technical implementation, and privacy compliance. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance its posture.

A

ALZHEIMER HOME z.ú.

alzheimerhome.cz

63

Alzheimer Home is a specialized healthcare provider focused on delivering professional care for Alzheimer patients within a family-like environment. The organization emphasizes a unique integration of health and social services with 24/7 medical availability and advanced equipment. Their market position is niche within the healthcare sector in the Czech Republic, targeting patients and families seeking specialized Alzheimer care. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Cookiebot for consent management, indicating a moderate level of digital maturity. The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers and explicit privacy policies. Security posture is generally good with no visible vulnerabilities, but the absence of WHOIS data and registrant information reduces trustworthiness. Overall, the website is professional and trustworthy in content and design but would benefit from enhanced transparency and security documentation.

A

ATWINS

atwins.lt

37

ATWINS is a Lithuanian small business specializing in professional hair care, styling, and creative image collections. The company also offers professional training and participates in events showcasing their collections. The website reflects a niche retail and service business model targeting general consumers and professionals in the hair styling industry. Technically, the website is built on WordPress with Bootstrap and uses common marketing and analytics tools such as Google Analytics, Facebook Pixel, and Mailerlite for newsletter management. The site is mobile-optimized and has good SEO practices but lacks some accessibility features and cookie consent mechanisms. Security posture is moderate with HTTPS enabled but missing security headers and no visible incident response or security policies. WHOIS data for the domain is unavailable, which limits trust verification, but the website content and structure appear professional and consistent with a legitimate small business. Overall, the site is functional and trustworthy but could improve privacy compliance and security transparency.

Ambit Media a.s. operates a specialized media portal focused on the publication and subscription management of healthcare-related magazines and educational materials primarily targeting healthcare professionals and readers interested in medical topics. The company, founded in 2016 and based in the Czech Republic, offers subscription services, book sales, and educational events, positioning itself as a niche media publisher within the healthcare sector. The website reflects this focus with content primarily in Czech and includes partner links to related healthcare and medical publication sites. From a technical perspective, the website employs a modern tech stack including jQuery, Bootstrap, Google Fonts, and various UI and carousel libraries. It integrates Google Analytics and Google Tag Manager for user tracking and marketing insights. The site is moderately optimized for performance and mobile responsiveness, with good SEO practices and basic accessibility features. Hosting is managed through REG-ZONER, consistent with the domain registration data. Security posture is moderate; while HTTPS is implied and cookie consent mechanisms are in place, explicit security headers and detailed security policies are absent. No critical vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is basic but present, with a privacy policy, cookie banner, and terms of service clearly linked. Contact information is comprehensive, enhancing business credibility. Overall, the website presents a professional and trustworthy front for Ambit Media a.s., with a solid business model and consistent domain registration data. Strategic improvements in security headers, incident response transparency, and enhanced privacy compliance would further strengthen the site’s security and trustworthiness.

M

Moravian-Silesian Tourism, s.r.o.

severnimorava.travel

57

Severní Morava is an official regional tourism portal operated by Moravian-Silesian Tourism, s.r.o., providing comprehensive information about tourist attractions, events, and travel tips for the Northern Moravia and Silesia region in the Czech Republic. The website targets tourists and visitors interested in exploring this region, offering multilingual content in Czech, English, and Polish. It serves as a key digital platform for promoting regional tourism and collaborating with local partners.

Č

Česká asociace farmaceutických firem

caff.eu

50

Česká asociace farmaceutických firem (ČAFF) is a professional industry association representing pharmaceutical companies in the Czech Republic, focusing on generics, biosimilars, and value-added medicines. The organization serves as a key advocate and information hub for its members and stakeholders, maintaining strong ties with European pharmaceutical bodies such as Medicines for Europe. The website reflects a medium-sized organization with a clear focus on healthcare industry stakeholders, providing member services, certification, and public information. The content is primarily in Czech with some English support, targeting industry professionals, media, and members.

U

UAB "Autoverus"

autoverus.lt

39

AutoVerus is a Lithuanian company specializing in microbus rental services, offering a fleet of vehicles aged between 1 and 10 years. The company operates primarily in Kaunas and Vilnius, targeting individuals and businesses needing cargo, passenger, or light vehicle rentals. The website is professionally designed using WordPress and includes modern features such as responsive design, Google reCAPTCHA, and integration with marketing tools like Mailchimp. Despite the lack of accessible WHOIS data, the site presents clear contact information and partner affiliations, indicating a legitimate business presence. Technically, the website leverages a common WordPress tech stack with plugins for enhanced user experience and marketing. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is decent with HTTPS enforced and reCAPTCHA on forms, but lacks some security headers and a formal security policy. Privacy compliance is good with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is trustworthy and functional, though the absence of WHOIS data and security headers suggests areas for improvement. The business appears credible and focused on transportation services within Lithuania, with a clear market niche in microbus rentals.

C

Care Comm s.r.o.

terapie.digital

61

Terapie.digital is a Czech healthcare-focused professional news portal operated by Care Comm s.r.o. It provides specialized content including healthcare news, clinical medicine articles, congress coverage, and job listings targeted at healthcare professionals in the Czech Republic. The website demonstrates a solid market position within its niche, offering valuable services such as newsletters and expert content. Technically, the site employs a modern tech stack including Bootstrap, jQuery, and integrates analytics tools like Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. The site is mobile-optimized and presents good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS but lacks advanced security headers, and no critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and GDPR compliant, though explicit security and incident response policies are not publicly disclosed. Overall, the domain appears legitimate with privacy-protected WHOIS data typical for media entities. The site is safe for general audiences with no adult content. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party scripts to maintain security posture.

Česká a slovenská psychiatrie is a specialized online platform serving as the official website for a Czech and Slovak psychiatry journal. It provides access to current and archived journal issues, announcements, and multimedia content tailored for healthcare professionals in the psychiatry field. The platform leverages the Open Journal Systems CMS, indicating a focus on academic publishing and professional dissemination of medical research. The website targets psychiatrists, researchers, and healthcare professionals primarily in the Czech Republic and Slovakia, offering a niche but important service in the regional healthcare publishing sector. Technically, the website employs a modern but standard technology stack including jQuery, Bootstrap, and FontAwesome, hosted on a Czech hosting provider (cesky-hosting.eu). The site is mobile optimized and accessible, with a moderate performance profile. However, some improvements are needed in security headers and cookie consent mechanisms to enhance compliance and security posture. The domain is very recently registered, which is somewhat inconsistent with the professional and mature content, suggesting a new launch or relaunch. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent banners, which are important for GDPR compliance and security best practices. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of contact emails or phone numbers on the main page reduces direct contact transparency but a contact form is available. No WAF or blocking mechanisms were detected, and the content is safe with no adult or explicit material. Overall, the website presents a professional and trustworthy platform for its niche audience but would benefit from enhanced privacy compliance features and security hardening. The domain's recent registration date should be monitored but does not currently detract significantly from trustworthiness.

S

Střední vinařská škola Valtice, příspěvková organizace

svisv.cz

47

Střední vinařská škola Valtice is a well-established secondary educational institution in the Czech Republic specializing in viticulture, horticulture, and related vocational training. Founded in 2003, it offers both maturita and apprenticeship programs, lifelong learning courses, and public services including wine tastings and an e-commerce wine shop. The school maintains strong partnerships with regional and industry organizations, enhancing its educational offerings and community presence. The website is professionally designed with good content quality and clear navigation, targeting students, parents, and the general public interested in viticulture education and services. Technically, the site uses Joomla CMS with modern libraries such as jQuery, Bootstrap, and UIkit, and integrates Google Analytics and Tag Manager for tracking. Security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks advanced security headers and explicit security policies. Privacy compliance is basic but present, with a GDPR policy and cookie banner. Contact information is clearly provided, supporting business credibility. Overall, the site is trustworthy and functional with room for security and compliance improvements.

SEB bankas is a leading Lithuanian financial institution offering a wide range of banking and financial services to private individuals, businesses, and large enterprises. The website demonstrates a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. The technical infrastructure is modern, leveraging Drupal 10 CMS and standard web technologies, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response information are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy. Overall, the website reflects a professional and trustworthy financial services provider with room for improvement in transparency around security and domain registration details.

C

Citadele bankas

citadele.lt

57

Citadele bankas is a well-established financial institution serving private clients primarily in Lithuania and the Baltic region. The website offers a comprehensive range of banking services including consumer loans, mortgages, payment cards, savings, investments, and insurance products. The bank positions itself as a modern, customer-centric institution with a strong digital presence and regional market focus. The site content is professionally designed, well-structured, and targets retail banking customers seeking convenient financial solutions. Technically, the website employs modern web technologies such as jQuery, Bootstrap, and Google Tag Manager, ensuring a responsive and user-friendly experience across devices. The presence of structured data and SEO best practices further enhances its digital maturity. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security headers and published incident response or vulnerability disclosure policies, which are recommended for enhanced trust and compliance. Overall, the website reflects a high level of professionalism and business credibility, though the absence of WHOIS data limits domain registration trust verification. Strategic improvements in security transparency and policy publication would further strengthen its posture.

P

Paysera LT, UAB

paysera.lt

65

Paysera LT, UAB operates a comprehensive financial services platform primarily targeting private individuals and businesses in Lithuania and surrounding regions. The company offers a wide range of services including IBAN accounts, currency exchange at competitive rates, payment collection solutions for e-commerce, contactless Visa cards with mobile wallet integration, and additional services such as event ticketing and gold trading. The website reflects a mature business with a strong regional presence and multiple localized versions for different countries and languages. Technically, the site employs modern web technologies including AngularJS, Bootstrap, and lazy loading techniques to optimize user experience and performance. Security is a clear priority, with HTTPS enforced and a dedicated security information page, although some security headers and incident response disclosures could be improved. The absence of WHOIS data limits domain registration verification, but the overall business credibility is supported by licensing references and customer testimonials. Privacy compliance is mostly addressed with a comprehensive privacy policy, though cookie consent mechanisms are not explicitly visible. Overall, the site presents a professional, trustworthy, and functional digital presence for a large financial services provider.

P

Packung s.r.o.

box48.cz

10

BOX48.cz is an e-commerce platform operated by Packung s.r.o., specializing in the custom manufacturing of cardboard shipping boxes and packaging materials. The company offers a unique system allowing customers to order boxes tailored to their exact dimensions, with production turnaround within 48 working hours. Their market position is that of a specialized packaging provider catering primarily to e-shops and businesses requiring flexible, small-batch packaging solutions. The website is professionally designed, mobile-optimized, and provides comprehensive product information and ordering capabilities. Technically, the site employs modern JavaScript libraries and frameworks such as jQuery, Bootstrap, and Slick Carousel, with integration of analytics and marketing tools including Google Analytics, Hotjar, and Ecomail. Security posture is solid with HTTPS enforced and secure login forms, though some security headers could be improved. Privacy compliance is well addressed with clear GDPR policies and cookie consent mechanisms. However, the absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective and warrants further investigation. Overall, the site presents a professional and trustworthy front for a medium-sized manufacturing and retail business in the Czech Republic.

S

Schindlerova pletárna s.r.o.

schindlerovapletarna.cz

10

Schindlerova pletárna s.r.o. is a Czech manufacturer specializing in knitted clothing with a rich tradition dating back to 1854. The company produces a variety of knitted garments including sweaters, cardigans, hats, scarves, and socks, serving both retail and custom order markets. Their website reflects a medium-sized manufacturing business with a strong emphasis on heritage and quality craftsmanship. The company maintains an active online presence with e-commerce capabilities and social media engagement. Technically, the website is built on the Upgates e-commerce platform using modern web technologies such as Bootstrap and jQuery, with integrations for Facebook Pixel and Smartlook for analytics and marketing purposes. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though it lacks advanced security headers and published security policies. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear professional and legitimate. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations, targeting general audiences interested in quality knitted apparel.

V

VITAPUR spol. s r.o.

teplodomova.cz

49

VITAPUR spol. s r.o. operates the website teplodomova.cz, a Czech family-owned business specializing in manufacturing and retailing wool products since 1990. The company positions itself as a trusted specialist with a WOOLMARK license, targeting general consumers interested in high-quality woolen goods. Their business model combines direct manufacturing with e-commerce sales, supported by a professional website featuring product catalogs, customer service, and clear contact channels. Technically, the site uses modern web technologies including Upgates e-commerce platform, Google Analytics 4, Facebook Pixel, and Smartlook for analytics and marketing, ensuring a responsive and user-friendly experience.

V

VITAPUR spol. s r.o.

vitapur.sk

50

VITAPUR spol. s r.o. is a family-owned Czech company established in 1990, specializing in manufacturing and supplying healthcare products such as anti-decubitus mattresses and bed equipment. The company serves both professional healthcare institutions and end consumers through wholesale and retail e-commerce channels. Their market position is solid within the Czech and Slovak healthcare sectors, supported by ISO 9001 certification and active participation in healthcare associations. Technically, the website is built on the Upgates e-commerce platform, utilizing modern JavaScript libraries, Google Analytics 4, and Facebook Pixel for marketing and analytics. The site is well-optimized for mobile and SEO, with good user experience and clear navigation. Security posture is strong with HTTPS, cookie consent, and form validation, though additional security headers could enhance protection. Privacy compliance is robust, with clear policies and consent mechanisms. Overall, the website reflects a professional and trustworthy business with a good digital maturity level.

M

MERKUR GASTRO

merkur-gastro.de

10

MERKUR GASTRO operates as a specialized partner in the placement and management of gaming machines within the hospitality sector across Germany. The company leverages decades of experience to integrate gaming solutions seamlessly into gastronomy, hotels, and rest stops, enhancing customer engagement and business value. Their business model emphasizes partnership without requiring investments from clients, focusing on providing tailored gaming experiences and activation solutions. The website reflects a professional and consistent brand presence with clear navigation and relevant content for their target audience. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, and Usercentrics for cookie consent, alongside self-hosted Matomo analytics for privacy-conscious tracking. The site is mobile-optimized with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms, though lacking explicit security headers and published security policies. From a security and compliance perspective, the site demonstrates good GDPR compliance with a privacy policy and cookie consent but lacks visible incident response or vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected. The WHOIS data is minimal but does not raise immediate concerns, supporting a moderate legitimacy score. Overall, MERKUR GASTRO presents a trustworthy and professional online presence aligned with its business focus. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance their digital maturity and trustworthiness.

M

MERKUR CASINO GmbH

meingewinn.de

64

MERKUR CASINO GmbH operates a professional career portal targeting job seekers interested in casino and gaming employment opportunities in Germany. The website effectively promotes various job roles and career development options within the MERKUR GROUP, a recognized entity in the hospitality and gaming sector. The site demonstrates consistent branding and provides comprehensive information about employment opportunities, supported by links to related MERKUR group websites and social proof such as Kununu employer reviews. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Maps API, and Usercentrics for consent management, ensuring a responsive and user-friendly experience. Analytics are implemented via Google Analytics and Matomo with proper consent mechanisms, reflecting a mature approach to data privacy. The site is well-optimized for SEO and mobile devices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and integrates cookie consent management effectively. However, it lacks explicit security headers and does not publish a security policy or incident response contacts, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be enhanced with additional best practices. The website is safe for general audiences, with no adult or explicit content detected. The domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness. Strategic recommendations include adding a terms of service page, publishing security policies, and implementing security headers to further strengthen the security and compliance posture.

T

TWIPLA

session-replays.io

72

TWIPLA is a technology company specializing in website analytics solutions, focusing on session recordings and visitor behavior analysis to help businesses optimize user experience and conversion rates. Positioned as a privacy-conscious alternative to mainstream analytics platforms, TWIPLA offers a comprehensive suite of tools including event tracking, heatmaps, and visitor communication features. The company targets businesses and website owners seeking detailed insights into user interactions with their websites. The website is built on the TYPO3 CMS platform, utilizing modern web technologies such as Bootstrap, jQuery, and various carousel libraries to deliver a responsive and user-friendly experience. The site demonstrates good SEO practices, accessibility, and mobile optimization, reflecting a mature digital infrastructure. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Security posture is solid with HTTPS enforced and privacy best practices observed; however, the absence of published security policies and vulnerability disclosure mechanisms suggests room for improvement. The missing WHOIS domain registration data raises concerns about domain legitimacy, although the professional presentation and structured data indicate a credible business presence. Overall, TWIPLA presents a trustworthy and professional analytics service with strong privacy focus. Strategic recommendations include enhancing transparency around security policies and verifying domain registration details to strengthen trust and compliance.

B

Beaver Builder

wpbeaverbuilder.com

65

Beaver Builder is a well-established WordPress page builder plugin provider, offering drag-and-drop website building tools, themes, templates, and integrations. The company targets a broad audience including freelancers, agencies, entrepreneurs, and WordPress professionals. Their market position is strong with over 1 million sites using their products since 2014. The website demonstrates a mature digital presence with professional design, clear navigation, and extensive content including testimonials and community support. Technically, the site runs on WordPress with WooCommerce and uses modern libraries and frameworks such as Bootstrap, jQuery, and Font Awesome. It integrates multiple marketing and analytics tools with consent mechanisms, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and use of hCaptcha on forms, though explicit security policies and headers could be improved. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy based on website content. Privacy compliance is basic with cookie consent but lacks a clearly accessible privacy policy page. Overall, the site is professional, trustworthy, and well-optimized for SEO and mobile devices.

T

Turistická oblast Opavské Slezsko, z.s.

opavske-slezsko.cz

54

Turistická oblast Opavské Slezsko, z.s. operates a regional tourism website focused on promoting travel tips, events, gastronomy, and accommodation in the Opavské Slezsko region of the Czech Republic. The website serves as an information hub for tourists and visitors, providing multilingual content in Czech, English, German, and Polish. The organization appears to be a small non-profit entity dedicated to regional tourism promotion, supported by partnerships with local and national tourism bodies. Technically, the website is built on WordPress 5.8.1 with a modern tech stack including Bootstrap, jQuery, Google Analytics, and Google reCAPTCHA. The site is hosted by a Czech registrar (REG-WEDOS) and uses HTTPS with good SSL configuration. SEO is well implemented via Yoast SEO, and the site is mobile optimized with good navigation and content structure. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks security headers and explicit security or incident response policies. Privacy compliance is basic, with a cookie policy PDF available but no active consent mechanism or detailed privacy policy page. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is a trustworthy and professional regional tourism portal with good content quality and technical implementation. Improvements are recommended in privacy compliance, security headers, and transparency regarding terms and incident response to enhance trust and security posture.

Č

Černá louka s.r.o.

cerna-louka.cz

55

Černá louka s.r.o. operates a prominent exhibition and event venue located in Ostrava, Czech Republic. The company offers rental spaces for exhibitions, conferences, seminars, and corporate events, positioning itself as a key player in the regional hospitality and event hosting market. The website reflects a professional business with clear branding, a calendar of upcoming events, and partnerships with local organizations and media outlets. The company was founded in 2006 and maintains a medium-sized business profile. Technically, the website employs modern frontend technologies including Bootstrap and jQuery, integrates Google Analytics and Google Tag Manager for visitor tracking, and implements a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, no CMS or hosting provider information is explicitly detected. From a security perspective, the site uses HTTPS and has a cookie consent banner with opt-in for analytics cookies, indicating awareness of privacy regulations. There is no evidence of advanced security headers or a published security policy. The absence of WHOIS data for the domain reduces trustworthiness, although the website displays legitimate company registration details. No critical vulnerabilities or adult content were detected, and the site appears safe for general audiences. Overall, the website demonstrates a solid business presence with good technical implementation and privacy compliance. To enhance security posture and trust, it is recommended to publish security policies, implement security headers, and ensure WHOIS data availability. The business should also consider adding explicit contact emails and phone numbers to improve credibility and user trust.

The website tomashubik.cz represents a professional portfolio for Tomas Hubik, a Czech-based full stack developer specializing in front-end technologies such as Angular and React, with additional skills in UI/UX and graphical design. The site showcases a broad portfolio of freelance projects and indicates current employment as a lead software developer. The business model is primarily freelance and professional services targeting clients seeking development and design expertise. The website is well-structured with clear navigation and professional branding, targeting a general audience of potential clients and collaborators. Technically, the site uses a modern technology stack including JavaScript frameworks, PHP, Java, and related libraries. Hosting is provided by WEDOS, a Czech hosting provider, consistent with the domain registration data. The site includes Google Fonts and Google Analytics for tracking. The design is responsive and optimized for mobile devices, though accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site lacks published privacy and cookie policies, which is a compliance gap especially under GDPR. No security headers were detected, and the contact form lacks visible anti-spam protections. HTTPS usage is implied but not explicitly confirmed in the HTML content. There is no published incident response or vulnerability disclosure information. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, enforcing HTTPS, adding anti-spam measures on forms, and providing incident response contacts. These improvements would enhance compliance, user trust, and security maturity.

S

Slezská univerzita v Opavě

slu.cz

62

Slezská univerzita v Opavě is a regional public university in the Czech Republic offering higher education, research, and community services. The website serves as the official portal providing information about faculties, study programs, research activities, events, and student support. It targets prospective and current students, academic staff, and the general public interested in university affairs. The site demonstrates a consistent brand identity with official logos and certifications such as HR Excelence in Research, supported by EU and government partnerships. Technically, the website uses a modern technology stack including jQuery, Bootstrap, FontAwesome, and analytics tools like Matomo and Google Analytics. The site is mobile-optimized, accessible, and features good SEO practices. Some minor HTML issues were detected, such as malformed preconnect and dns-prefetch tags, which should be corrected to improve performance and security. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks visible security headers in the provided data. No sensitive data exposure or vulnerable libraries were detected. The absence of WHOIS data limits domain registration trust analysis, but the official nature of the site and consistent branding strongly indicate legitimacy. Overall, the website is professional, secure, and compliant with privacy regulations, providing a safe and informative experience for its users. Strategic improvements include fixing minor HTML errors, adding security headers, and publishing explicit security and incident response policies.

I

Institut vzdělávání APSS ČR

institutvzdelavani.cz

47

Institut vzdělávání APSS ČR is a well-established educational institution in the Czech Republic specializing in accredited courses and training for social service workers. The organization operates since 2010 and is affiliated with the Asociace poskytovatelů sociálních služeb ČR (APSS ČR), positioning itself as a key player in the professional development of social workers across the country. Their offerings include open courses, tailored training for organizations, and innovative virtual reality training modules. The website reflects a professional and consistent brand image with clear contact information and a focus on practical, interactive education.

F

FOREGROUND s.r.o.

4g.cz

49

FOREGROUND s.r.o. operates as a Czech advertising and graphic design agency offering comprehensive services including web development, branding, and printed graphics. The company targets businesses seeking professional marketing and advertising solutions. The website is professionally designed, mobile-optimized, and uses modern web technologies such as jQuery, Bootstrap, and Swiper, with analytics integration via Google Analytics and Tag Manager. However, the absence of WHOIS data and privacy policies indicates gaps in transparency and compliance. Security posture is moderate with HTTPS enabled and CSRF tokens present, but lacks explicit security headers and incident response information. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security best practices.

C

Czech Health Technology Institute, z. s.

czechhealth.cz

45

Czech Health Technology Institute (CHTI) is a Czech non-profit organization founded in 2023, focused on identifying and supporting innovative healthcare technology solutions to improve healthcare delivery and quality. The organization collaborates with government ministries, academic institutions, and private sector partners to implement humanitarian programs, complex healthcare solutions, centers of excellence, and educational initiatives, particularly supporting healthcare development in Ukraine. The website reflects a professional and consistent brand presence with clear communication of its mission, team, partners, and contact information. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various UI libraries, ensuring good mobile optimization and user experience. The site includes a comprehensive cookie consent mechanism aligned with GDPR requirements, though it lacks a dedicated privacy policy and terms of service pages, which are important for full compliance. Analytics and marketing tools such as Google Analytics, Google Tag Manager, Incomaker, and Facebook Pixel are used with user consent. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and published security policies or incident response information. No vulnerabilities or suspicious content were detected. WHOIS data is consistent with the organization's claims, indicating legitimacy. Overall, the site scores well on professionalism and business credibility but should improve privacy and security documentation. Strategic recommendations include publishing a privacy policy and terms of service, enhancing security headers, and providing incident response and vulnerability disclosure information to strengthen trust and compliance.

M

Ministerstvo obrany České republiky

army.cz

65

The website www.mo.gov.cz is the official online presence of the Ministry of Defense of the Czech Republic, serving as a government portal for defense-related information, military news, and public services. It targets a broad audience including citizens, military personnel, veterans, and stakeholders interested in national defense. The site provides comprehensive content about military operations, recruitment, veteran affairs, and official announcements, positioning itself as a key authoritative source in the government sector. Technically, the website employs a mature technology stack including jQuery, Bootstrap, Owl Carousel, and JWPlayer, built on the WebToDate CMS platform by Macron Software. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a modern responsive design and clear navigation. Cookie consent is implemented with an opt-in mechanism, reflecting compliance with GDPR and privacy best practices. From a security perspective, while HTTPS usage is implied, explicit security headers are not detected in the provided data, and no dedicated security policy or incident response contacts are published. The site does not expose sensitive data or vulnerable libraries visibly, but could improve by publishing security policies and adopting security.txt standards. The WHOIS data is unavailable due to registry restrictions, but the official .gov.cz domain and consistent branding strongly support legitimacy. Overall, the website is professionally maintained, trustworthy, and compliant with privacy regulations. Strategic improvements in security transparency and header implementation would enhance its security posture and trustworthiness further.

B

Balticum TV, UAB

manobalticum.lt

51

Mano Balticum is a Lithuanian telecommunications self-service portal operated by Balticum TV, UAB. The website provides customers with personalized offers, service management, bill payment, and address management functionalities. It targets existing Balticum TV subscribers in Lithuania, offering a convenient digital interface to manage their telecommunications services. The business appears to be a medium-sized regional telecom provider with a clear focus on customer self-service and digital engagement. Technically, the website uses a modern tech stack including Bootstrap for responsive design, jQuery, Google Analytics, Google Tag Manager, Google Identity Services for authentication, and Facebook SDK for social login. The site is mobile optimized and includes standard privacy and cookie consent mechanisms. However, there is no evidence of advanced security headers or explicit security policies, and WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency. From a security perspective, the site implements CSRF protection on login forms and uses HTTPS (implied by external scripts), but lacks visible HTTP security headers. The privacy policy is comprehensive and GDPR compliant, with a named data protection officer contact. No vulnerabilities or malicious content were detected in the analysis. Overall, the security posture is moderate but could be improved with enhanced HTTP headers and verified domain registration. The overall risk assessment is moderate with a legitimacy score of 50 due to missing WHOIS data. Strategic recommendations include verifying domain registration status, implementing security headers, publishing explicit security policies, and continuing to maintain GDPR compliance. The website is professionally designed and trustworthy for its intended audience but would benefit from improved transparency and security hardening.

Customize.cz, s.r.o. is a Czech-based company specializing in personalization solutions for e-commerce websites. Their core offering is personalized recommendation boxes that help online shops increase sales and customer satisfaction by analyzing user behavior in real-time and dynamically presenting relevant products. The company operates on a commission-based business model tied to conversion orders, positioning itself as a niche player in the Czech and Slovak e-commerce personalization market. The website is professionally designed, mobile-optimized, and provides clear contact channels and customer testimonials, supporting a trustworthy business image. Technically, the website uses a modern front-end stack including Bootstrap, jQuery, and popular UI libraries like Swiper and Owl Carousel. Google Analytics and a third-party chat service (Suppoo) are integrated for marketing and customer engagement. While the site uses HTTPS and implements a cookie consent banner with detailed user controls, it lacks visible advanced security headers and formal security or incident response policies. The site is accessible without WAF or blocking mechanisms, indicating good availability. From a security perspective, the site demonstrates basic compliance with GDPR through cookie consent and privacy policy pages but lacks explicit terms of service, security policy, or vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, showing a domain age consistent with the company's founding date and no privacy protection, enhancing trustworthiness. Overall, Customize.cz presents a solid, professional online presence with moderate technical maturity and basic security posture. Strategic improvements in security headers, formal policies, and enhanced privacy compliance could elevate their security and trust profile further.

A

Asociace výrobců a dodavatelů zdravotnických prostředků

avdzp.cz

45

Asociace výrobců a dodavatelů zdravotnických prostředků (AVDZP) is a well-established Czech healthcare industry association founded in 1992. It represents over 100 Czech manufacturers and suppliers of medical devices and related services, focusing on promoting Czech healthcare solutions domestically and internationally. The association supports its members through advocacy, export assistance, participation in international trade fairs, and collaboration with government bodies and research institutions. Technically, the website uses modern web technologies including Bootstrap, jQuery, and various vendor libraries, with a responsive design and a cookie consent mechanism supporting GDPR compliance. Security posture is moderate with HTTPS usage and cookie consent but lacks explicit security policies and vulnerability disclosures. Overall, the site is professional, trustworthy, and serves its target audience effectively, though improvements in privacy policy publication and security headers are recommended.

Stolařství Šputa s.r.o. is a well-established Czech woodworking and construction company specializing in custom furniture, interior and exterior woodwork, and wooden buildings. Founded in 1999 and operating primarily in Ostrava, the company offers a broad range of wood-related manufacturing services including stairs, doors, furniture, pergolas, and dřevostavby (wooden houses). The website reflects a mature business with a clear market position serving both individual and commercial clients. Technically, the site uses modern web technologies such as Bootstrap, jQuery, Google Analytics, and Google Maps API, hosted likely by Active24, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, GDPR compliance, cookie consent, and secure forms, though some security headers and incident response contacts could be improved. Overall, the site is professional, trustworthy, and compliant with relevant privacy regulations.

Stavby Complet s.r.o. is a Czech-based small enterprise specializing in chimney construction, maintenance, and related services, including manufacturing their own chimney system. The company has been established since 2011 and positions itself as a quality-focused specialist with a broad service portfolio targeting both industrial and residential customers. The website reflects a professional and consistent brand image with comprehensive service descriptions and customer references. Technically, the site uses modern web technologies such as Bootstrap and jQuery, integrates Google Analytics and Ads for marketing, and implements GDPR-compliant privacy and cookie policies. Security posture is adequate with secure forms and consent mechanisms, though some security headers and incident response details are missing. Overall, the website is well-structured, mobile-optimized, and trustworthy, supporting the company's market position as a reliable local specialist.

E

EPUAP 2026

epuap2026.org

46

EPUAP 2026 is a specialized healthcare event website promoting the 25th Annual Meeting of the European Pressure Ulcer Advisory Panel scheduled in Helsinki, Finland. The site targets healthcare professionals and researchers interested in pressure ulcers, providing event details and registration information. The business model centers on conference organization and information dissemination within the healthcare sector. The website is built on WordPress using Elementor and common plugins, reflecting a moderate level of digital maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and explicit security policies. Privacy compliance is limited, with no privacy or terms of service pages detected, though a cookie policy with consent is present. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security measures.

Š

Štátny pedagogický ústav

statpedu.sk

46

Štátny pedagogický ústav is a Slovak governmental educational institute focused on pedagogical research, support for children with special educational needs, and educational projects. The website serves educators, students, and the public with news, publications, and project information. It is positioned as a national authority in education under the Ministry of Education of Slovakia. Technically, the site uses standard web technologies including jQuery and Bootstrap, with a CMS identified as WebJET. The site is mobile responsive and has moderate performance. Security posture is adequate with HTTPS and cookie consent implemented, but lacks explicit privacy policies, terms of service, and security headers. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the site is professional and trustworthy but could improve privacy and security disclosures.

Ž

Žilinská univerzita v Žiline

uniza.sk

60

Žilinská univerzita v Žiline is a well-established public university in Slovakia, providing comprehensive higher education and research services. The website serves as the official digital presence, offering detailed information for students, staff, applicants, researchers, and the general public. It is positioned as a leading national university, evidenced by its top ranking in the THE World University Rankings 2025. The site supports multiple languages and integrates social media channels to engage its audience effectively. Technically, the website is built on Joomla CMS with modern frameworks and libraries, ensuring a good user experience and mobile responsiveness. Security measures such as HTTPS and security headers are implemented, and privacy compliance is addressed through a comprehensive privacy and cookie policy with consent mechanisms. However, there is no explicit terms of service or vulnerability disclosure policy published. Overall, the site demonstrates a mature digital infrastructure aligned with the university's stature and operational needs.

M

MERKUR Casino

merkur-spielhalle.de

48

MERKUR Casino operates over 350 modern gaming halls primarily in Germany and eight other European countries, positioning itself as a market leader in the gambling and hospitality sector. The website serves as a portal for information about their locations, games, prevention measures, career opportunities, and corporate information. The business model focuses on physical gaming halls with strong regulatory compliance, including age verification and prevention information. The parent company is the Gauselmann Group, a well-established entity in the industry. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Font Awesome, and integrates Usercentrics for GDPR-compliant cookie consent and Matomo for analytics. The site is mobile-optimized with good navigation and SEO practices. Hosting details are not explicit but the domain and name servers indicate stable professional hosting. From a security perspective, the site enforces HTTPS and uses a consent management platform, but lacks explicit published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The site does not use privacy protection on WHOIS, enhancing trustworthiness. The gambling nature requires adult content warnings and age verification, which are implemented. Overall, the website is professional, secure, and compliant with privacy regulations, serving a mature audience in the gambling sector. Recommendations include publishing explicit security policies, adding security headers, and implementing a vulnerability disclosure mechanism to further enhance security posture.

H

Hotel St. Florian

hotelstflorian.cz

10

Hotel St. Florian is a small hospitality business located in the historic center of Loket, Czech Republic, offering comfortable accommodation with a focus on cultural heritage and local experiences. The website presents a professional and consistent brand image, highlighting key services such as lodging, group accommodations, and unique culinary experiences tied to the family business group. Technically, the site is built on WordPress with modern front-end libraries and plugins, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and some security plugins, but lacks visible security headers and formal privacy/cookie policies. Overall, the domain appears legitimate though WHOIS data is privacy protected, which is common for this business type. Strategic improvements in privacy compliance and security headers would enhance trust and compliance.

V

VITAPUR spol. s r.o.

vitapur.cz

52

VITAPUR spol. s r.o. is a Czech-based manufacturer specializing in healthcare products for long-term immobile patients, offering bedding, mattresses, positioning aids, and related equipment. Established in 1990, the company serves both professional healthcare institutions and private consumers, maintaining a strong market presence with over 2700 cooperating healthcare facilities. The website reflects a mature e-commerce platform with multilingual support and comprehensive product offerings. Technically, the site employs modern web technologies including Google Analytics 4, Facebook Pixel, and live chat integrations, ensuring a robust digital presence. Security posture is solid with HTTPS and form validations, though some security headers could be improved. Privacy compliance is well addressed with detailed cookie consent and privacy policies. However, the lack of WHOIS data for the domain introduces some uncertainty regarding domain registration transparency. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

V

Všeobecná zdravotní pojišťovna ČR (VZP ČR)

vzpoura-urazum.cz

43

The website 'VZPoura úrazům' is a project operated by the Všeobecná zdravotní pojišťovna ČR (VZP ČR), focusing on injury prevention among children and youth through educational meetings and awareness campaigns. It holds a reputable position as a long-standing initiative within the Czech healthcare and education sectors, targeting schools and young audiences. The project leverages official branding and maintains active social media channels to engage its audience effectively. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and various UI libraries, ensuring a responsive and user-friendly experience. The site is secured with HTTPS and integrates Google reCAPTCHA and cookie consent mechanisms, reflecting a good level of digital maturity. However, some security headers are missing, and there is no visible CMS or hosting provider information. From a security perspective, the site demonstrates solid practices such as encrypted connections and bot protection, but lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The absence of WHOIS data for the domain reduces trustworthiness, although the website content and official contact details strongly indicate legitimacy. Overall, the website is professional, content-rich, and well-targeted, with moderate technical and security maturity. Strategic improvements in security headers, transparency policies, and domain registration data would enhance trust and compliance.

E

emline

emline.cz

43

Emline.cz is a Czech Republic based small technology company specializing in comprehensive online marketing services including campaign management, SEO, web and e-shop development, and domain management. Established in 2012, the company positions itself as a reliable partner offering professional and economical solutions for businesses seeking to enhance their online presence. The website is built on WordPress with modern plugins and frameworks, demonstrating a moderate to good level of technical maturity and mobile optimization. Security posture is solid with HTTPS enforced and Google reCAPTCHA protecting forms, though there is room for improvement in implementing security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a credible digital presence for the business.

S

South East Asia – liaison, z. s.

sea-l.cz

57

South East Asia – liaison, z. s. (SEA-l) is a small non-profit organization established in 2014, dedicated to fostering cultural understanding and integration between the Czech Republic and Vietnam, as well as Southeast Asia more broadly. The organization offers a wide range of services including information dissemination, integration projects, intercultural work, consulting, lectures, exhibitions, translation, cultural events, and language education. Their target audience primarily consists of the Vietnamese community in the Czech Republic and individuals interested in Southeast Asian culture. The website is professionally designed using Umbraco CMS and common front-end technologies, providing good user experience and clear navigation. Contact information is comprehensive and includes multiple communication channels.

V

Vinařský fond České republiky

vinarskyfond.cz

54

Vinařský fond is a Czech Republic based institution established in 2002 by law to support the wine industry through marketing, tourism development, and public information. It operates as a non-profit fund financed by levies on wine and vineyards and state contributions. The website serves as an informational portal for wine producers, marketers, and the general public interested in viticulture. Technically, the site is built on WordPress 4.9.3 with Bootstrap and jQuery, hosted likely by Active24. While the site is accessible and uses HTTPS, it employs outdated software versions that may expose it to security risks. Privacy compliance is partial, with a GDPR information page but no visible cookie consent mechanism. Contact information is primarily via contact forms, with no direct emails or phone numbers found. No social media or advanced analytics tools are detected. Overall, the site is professional and trustworthy but would benefit from technical and security updates.