Security Directory

O

Oční tkáňová banka Gemini Zlín

tkanovabanka.cz

41

Oční tkáňová banka Gemini Zlín is a specialized healthcare entity focused on corneal tissue transplantation, operating as part of the largest Czech eye clinic network. Established in 2022, it aims to reduce waiting times for corneal transplants in the Czech Republic, serving patients with serious eye damage and collaborating with other transplant centers. The website reflects a professional healthcare service with clear contact information and trust signals such as membership in the European Eye Bank Association. Technically, the site is built on WordPress with common plugins and modern security features like HTTPS and Google reCAPTCHA, though it lacks explicit privacy and cookie policies, which is a compliance gap. The absence of WHOIS data reduces domain trust from a registration perspective but does not detract from the professional presentation and legitimacy of the business. Overall, the site is well-structured, secure, and trustworthy for its intended audience.

G

Gemini oční optika s.r.o.

geminioptika.cz

57

Gemini oční optika s.r.o. operates a professional eye care and eyewear retail business in the Czech Republic, with multiple branches and a strong emphasis on quality and expertise backed by the Gemini eye clinic. Their website offers comprehensive information about their services including eyeglasses, contact lenses, eye examinations, and preventive screenings, targeting a broad audience seeking eye care solutions. Technically, the website is built on WordPress with modern integrations such as Google Tag Manager, reCAPTCHA, and Smartsupp chat, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and form protections, though lacking some advanced security headers and published security policies. Privacy compliance is well addressed with GDPR policies and cookie consent mechanisms. However, the absence of WHOIS data limits domain trust assessment, suggesting a need for improved transparency in domain registration. Overall, the site is professional, trustworthy, and well-positioned in its market segment.

The website hobbypraha.cz is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, presenting a security challenge page instead of actual content. This prevents any meaningful extraction of business, contact, or policy information. The domain WHOIS data is suspicious, showing a creation date in the future (June 18, 2025), which undermines trust and legitimacy. No metadata, forms, or external business links are available for analysis. The technical infrastructure relies on Cloudflare for security and hosting, but no further details can be ascertained due to the block. From a security perspective, the presence of a Cloudflare WAF indicates some level of protection against attacks, but the lack of accessible content and suspicious WHOIS data raise concerns about the domain's authenticity and operational status. No privacy, cookie, or terms of service policies are detectable, and no contact or incident response information is available, limiting compliance and transparency assessments. Overall, the website's risk profile is elevated due to inaccessibility, suspicious registration data, and absence of verifiable business information. Strategic recommendations include verifying domain registration details, ensuring website accessibility for legitimate users, and publishing essential compliance and contact information once accessible. Due to the WAF block, the AI scoring is capped low, and most observations remain unknown or blocked. For a comprehensive analysis, direct access to the live website content is necessary.

P

Potten & Pannen - Staněk

vasekuchyne.cz

9

Potten & Pannen - Staněk operates a professional e-commerce platform specializing in premium kitchenware, cooking utensils, and kitchen accessories, targeting consumers in the Czech Republic. The website presents a well-structured catalog of products with clear navigation and a consistent brand identity. The business positions itself as a trusted retailer with a high customer recommendation rate, focusing on quality and premium brands. Technically, the website leverages Kentico CMS and integrates multiple modern marketing and analytics tools such as Google Analytics 4, Google Tag Manager, Facebook Pixel, and Cookiebot for cookie consent management. The site is served over HTTPS, ensuring secure communications, and includes some accessibility and mobile optimization features. However, explicit security headers are not evident in the provided content, suggesting room for improvement in security hardening. From a security and compliance perspective, the site implements cookie consent and uses reCAPTCHA to protect forms, but lacks visible privacy policy and terms of service pages in the analyzed content. WHOIS data is unavailable, which limits domain registration trust verification. No critical vulnerabilities or adult content were detected, and the site appears safe for general audiences. Overall, the website demonstrates a solid business and technical foundation with moderate security posture. Strategic improvements in transparency, security headers, and WHOIS data availability would enhance trust and compliance.

H

Health Resources and Services Administration

hrsa.gov

11

The Health Resources and Services Administration (HRSA) is a U.S. government agency under the Department of Health and Human Services focused on improving access to health care for underserved and vulnerable populations. The website provides comprehensive information on HRSA's programs including scholarships, loan repayment, health centers, maternal and child health, HIV/AIDS care, and telehealth services. It targets healthcare professionals, grant applicants, and the general public seeking health services. The site is well-branded, professionally designed, and highly accessible, reflecting its role as a federal agency.

M

Mary's Meals Ireland

marysmeals.ie

10

Mary's Meals Ireland is a reputable non-profit organization dedicated to providing nutritious school meals to children in some of the world's poorest communities. Their website reflects a strong commitment to transparency, community engagement, and fundraising, positioning them as a trusted charity within Ireland and internationally. The site offers comprehensive information about their mission, impact, and ways to get involved, targeting donors, volunteers, and supporters effectively. Technically, the website is built on Drupal 10, leveraging modern web technologies including Google Tag Manager and PayPal's donation SDK, ensuring a robust digital presence. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Security posture is good with HTTPS enforced and consent management implemented, though there is room for improvement in security headers and incident response visibility. The absence of WHOIS data limits domain trust verification, but the overall business credibility and content quality strongly support legitimacy. Strategic recommendations include enhancing security headers, improving incident response contact availability, and maintaining rigorous third-party script audits to sustain security and compliance.

M

Mary's Meals

marysmeals.org.uk

69

Mary's Meals is a well-established UK-based non-profit charity dedicated to providing daily nutritious school meals to children living in poverty worldwide. The organization operates in 16 countries and currently feeds over 3 million children every school day. Their business model relies heavily on donations, fundraising, and volunteer support, with a strong international presence through multiple affiliate sites. The website content is professionally presented, with clear calls to action for donations and volunteering, reflecting a high level of trust and credibility. Technically, the website is built on Drupal 10, leveraging modern web technologies including Google Tag Manager for analytics and CookieFirst for consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. While the SSL configuration is excellent, the site lacks some security headers and a published security policy, which could be improved to enhance security posture. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but does not expose any sensitive data or vulnerable libraries. No WAF or blocking mechanisms were detected, and the site is fully accessible. The WHOIS data for the exact subdomain is unavailable due to domain naming rules, but this is a technicality rather than a legitimacy concern, as the main domain is properly registered and the charity is officially recognized. Overall, the website demonstrates a strong security posture, excellent content quality, and good privacy compliance. Strategic recommendations include implementing additional security headers, publishing a security policy and incident response contacts, and adding a security.txt file for vulnerability disclosures to further enhance trust and security culture.

M

Mary's Meals

marysmeals.org

11

Mary's Meals is a well-established international non-profit organization dedicated to providing nutritious school meals to children in some of the world's poorest communities. The website reflects a strong global presence, feeding over 3 million children daily across 16 countries. Their business model relies heavily on donations, volunteer engagement, and partnerships, positioning them as a significant player in the charitable sector focused on education and hunger relief. Technically, the website is built on Drupal 10, leveraging modern web technologies including Google Tag Manager and Typekit fonts. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, contributing to a fast and user-friendly experience. Privacy and cookie policies are clearly presented with active consent mechanisms, indicating good compliance with GDPR and related regulations. From a security perspective, the site enforces HTTPS with strong SSL configurations and includes key security headers. While no explicit security or incident response policies are published, the absence of vulnerabilities and the use of consent management tools reflect a mature security posture. The WHOIS data is unavailable due to privacy protection, which is common and justified for non-profit entities. Overall, Mary's Meals website is professional, trustworthy, and well-maintained, with minor recommendations to enhance transparency around security policies and incident response. The risk profile is low, and the site effectively supports the organization's mission and stakeholder engagement.

J

Jiří Fof

jirifof.cz

38

Jiří Fof is a freelance web designer and online marketer based in the Czech Republic, offering comprehensive web services including website and e-shop creation, SEO, advertising campaign management, and graphic design. The website is professionally designed using WordPress and Elementor, providing a good user experience with clear navigation and mobile optimization. The technical infrastructure is modern and hosted with Wedos, a Czech hosting provider. Security posture is adequate with HTTPS enabled and secure form handling, but lacks security headers and formal privacy and cookie policies, which are important for compliance and trust. Overall, the site is accessible and functional with clear contact information, but could improve privacy compliance and security best practices.

I

Institut One Health

institut-one-health.fr

50

Institut One Health is a French public health and research institute established in 2023, focused on emerging infectious diseases and integrated within national and European health strategies. It offers training, expertise, and decision support services primarily targeting public health professionals, researchers, and policymakers. The website reflects a professional and consistent brand image aligned with its institutional mission. Technically, the site is built on WordPress with a modern theme and includes standard analytics tools. Security posture is adequate with HTTPS and domain protections, but lacks some advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is legitimate and trustworthy but would benefit from enhanced privacy and security disclosures.

S

Spolek PŘÍZNAKY TRANSFORMACE

priznakytransformace.cz

57

The website priznakytransformace.cz is a Czech non-profit portal dedicated to personal development, spirituality, esoterics, health, and astrology. It offers a rich collection of articles, videos, and horoscopes targeting a general audience interested in these topics. The organization behind the site is a registered non-profit entity founded in 2014, with clear contact details and donation options, indicating a transparent and community-supported business model. Technically, the site is built on Joomla CMS with Gantry5 framework and uses common web technologies such as jQuery and Bootstrap. It is hosted likely by Wedos, a known Czech hosting provider. The site is mobile-optimized and has good SEO practices, although accessibility is basic.

T

Trustia Czech Republic, s.r.o.

festivalevolution.cz

45

Festival Evolution is a Czech Republic-based event organizer focused on promoting healthy lifestyle and personal development through festivals, conferences, and workshops. The website serves as a platform to inform visitors and exhibitors about the festival, its partners, and related events. The business operates in the event organization sector with a regional market position and targets a general audience interested in wellness and personal growth. The company behind the website is Trustia Czech Republic, s.r.o., which is credited as the author in the metadata. The website content is well-structured, informative, and consistent with the festival's theme.

Nákupní kartářka.cz is a Czech Republic based online platform specializing in prepaid credit packages for tarot card readings and psychic consultations via telephone. The website targets adults interested in esoteric and psychic services, offering a variety of credit packages to access live card readers. The business operates a niche e-commerce model focused on telephonic psychic services, positioning itself as a specialized service provider within the Czech market. Technically, the site is built on the Yii framework with Bootstrap and jQuery, integrating Google Analytics for user tracking. The site is mobile responsive and provides a good user experience with clear navigation and professional design. Security posture is moderate with HTTPS enforced and CSRF protections in place, but lacks advanced security headers and a cookie consent mechanism, which are recommended for GDPR compliance. WHOIS data is transparent and consistent with the business profile, indicating legitimacy and domain age appropriate for the business history. Overall, the website is functional and professional but could improve privacy compliance and security practices to enhance trust and regulatory adherence.

33Across Inc. operates a digital advertising and traffic monetization platform, recently migrating its services to a new platform at platform.33across.com. The website analyzed is a transitional landing page informing users of the move and providing a login link to the new platform. The business targets digital marketers, advertisers, and publishers with services focused on traffic monetization and advertising analytics. The company appears to be a medium-sized technology firm based in the United States with a consistent brand presence. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and Typekit fonts. The page is minimalistic, serving primarily as a redirect notice, with basic mobile optimization and moderate performance. No advanced frameworks or CMS were detected. Security features are minimal with no visible security headers or HTTPS verification in the provided content, indicating room for improvement in security posture. Security evaluation shows a lack of privacy and cookie policies, no incident response contacts, and no security certifications displayed. The absence of security headers and explicit privacy compliance reduces the overall security score. However, no critical vulnerabilities or malicious content were detected. The domain registration aligns well with the company identity, supporting legitimacy. Overall, the website serves a limited purpose as a redirect notice with basic content and security features. Strategic improvements in privacy compliance, security headers, and richer content would enhance trust and user experience.

C

Clement Charleux – Ecrivain – Photographe

clementcharleux.com

42

The website clementcharleux.com serves as a personal portfolio and blog for Clement Charleux, a French writer and photographer. It features a variety of artistic content including blog posts, photo galleries, interviews, and travel stories. The site targets a general audience interested in art, literature, and photography, positioning itself as a niche personal brand rather than a commercial enterprise. The business model revolves around content publishing and personal branding without evident monetization mechanisms. Technically, the site is built on WordPress and employs common web technologies such as jQuery, Modernizr, and various plugins for enhanced user experience like infinite scrolling and social sharing. The site is moderately optimized for performance and mobile devices, with a good design quality and clear navigation. However, accessibility features are basic and SEO optimization is minimal. From a security perspective, the site uses HTTPS but lacks important security headers and formal security policies. No vulnerabilities or exposed sensitive data were detected, but the absence of privacy and cookie policies indicates compliance gaps, especially regarding GDPR. Contact information is available via a contact page and social media links, but no dedicated incident response or security contact channels are provided. Overall, the website is safe and trustworthy for general audiences, with no adult or explicit content. The domain uses privacy protection for WHOIS data, which is typical for personal sites. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and enhancing compliance and incident response readiness to improve trust and security posture.

L

Louise DIDIER

quincaillere.org

72

Louise Quincaillère is a small, specialized service provider focused on cooperative and collaborative facilitation, offering training and digital tools to community groups and collectives. The website presents a clear business model centered on education, training, and support for cooperative projects, with a niche market position in the cooperative ecosystem in France. Technically, the site is built on the YesWiki CMS platform, leveraging Bootstrap and FontAwesome for UI, hosted by OVH sas. The site is moderately performant, mobile-optimized, and accessible at a basic level. Security posture is adequate with HTTPS enforced and domain protections in place, but lacks DNSSEC and security headers, which are recommended improvements. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security practices.

L

Les écolohumanistes

lesecolohumanistes.fr

45

Les écolohumanistes is a small French content site dedicated to ecology and humanist values, operated by individuals named Romain and Jeff. The website focuses on educating and simplifying ecological and humanist concepts for a French-speaking audience. The business model centers on content creation and knowledge transmission within a niche market. Technically, the site is built on WordPress 6.8.3, utilizing plugins such as Yoast SEO and WP Dark Mode, hosted by IONOS SE. The site is moderately optimized for performance and mobile devices, with good SEO practices but lacks full accessibility features. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies and no GDPR indicators. Overall, the site is trustworthy but would benefit from enhanced privacy and security measures.

C

Centre de Ressources des Hauts Pays Alpins

centre-de-ressources.fr

51

Centre de Ressources des Hauts Pays Alpins is a French non-profit association serving as a resource hub for local associations and communities in the Hauts Pays Alpins region. The organization provides equipment sharing, digital mediation, training, and studio services to support regional development and cooperation. The website reflects a well-established entity founded in 2009, with a clear focus on community engagement and support. Technically, the website is built on WordPress with a modern theme and plugins including Yoast SEO, Matomo Analytics, and Complianz GDPR for privacy compliance. Hosting is provided by OVH, a reputable provider. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Privacy and cookie policies are comprehensive and GDPR compliant, with a consent mechanism in place. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though some security headers are not explicitly detected and no formal security policy or incident response contacts are published. No vulnerabilities or suspicious activities were found in the analysis. The domain registration data is consistent with the business history and website content, supporting legitimacy. Overall, the website is professional, trustworthy, and well aligned with its non-profit mission. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen the security and compliance posture.

Héliocat is a small French business led by Pierre-Yves Cavellat, specializing in training, facilitation, and consulting on collaborative practices within organizations and networks, particularly in the social economy sector. The company offers in-person and remote services, including deployment of collaborative digital tools, and is certified by QUALIOPI, indicating recognized quality standards. The website is built on WordPress, hosted by OVH, and integrates Stripe for payments and Matomo for privacy-conscious analytics. The site is professionally designed with good content quality and clear navigation, targeting organizations primarily in Brittany and the broader western France region. From a technical perspective, the website uses modern web technologies and plugins, including jQuery and SKT Blocks, and is mobile-optimized. Security posture is solid with HTTPS enabled and no visible sensitive data exposure, though the absence of security headers and published privacy or cookie policies represents compliance gaps. The WHOIS data is privacy-protected, which is common for small businesses, and no suspicious patterns were detected. Contact information is available via email and phone, with social media presence on LinkedIn. Overall, the website demonstrates a good level of professionalism and security for a small service-oriented business, but improvements in privacy compliance and security headers are recommended to enhance trust and regulatory adherence.

G

Google LLC

google.co.za

73

Google LLC is a global leader in internet-related services and products, including its flagship search engine, advertising platforms, cloud computing, software, and hardware. As a subsidiary of Alphabet Inc., Google holds a dominant market position with a broad target audience ranging from individual users to enterprises worldwide. The company’s business model primarily revolves around advertising revenue and technology services. The website reflects Google's brand consistency and professionalism, offering excellent content quality and user experience.

T

TwentyThree

videomarketingplatform.co

70

TwentyThree is a European leader in video software, offering a comprehensive SaaS platform that enables businesses to leverage video marketing, webinars, and personal video tools. The company positions itself as the first platform to provide all necessary video tools for every customer touchpoint, targeting medium-sized businesses and enterprises. Their website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the site uses modern frameworks such as Tailwind CSS and Alpine.js, integrates Google Tag Manager for analytics, and is hosted on a reliable CDN infrastructure, likely AWS Cloudfront. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security policies and incident response information, which could be improved. The absence of WHOIS data for the domain raises some concerns about registration legitimacy, although the website content and branding appear consistent and trustworthy. Overall, the site demonstrates a solid business and technical foundation with room for enhanced transparency and security disclosures.

E

E-commerce + Print on Demand

tpop.com

67

TPOP is a French-based e-commerce platform specializing in print-on-demand services with a strong emphasis on eco-responsibility and local European production. The platform enables entrepreneurs and small to medium-sized businesses to quickly create online stores without upfront inventory costs, integrating seamlessly with popular platforms like Shopify, Etsy, and WooCommerce. The website demonstrates a high level of digital maturity with modern technologies, multilingual support, and a user-friendly design optimized for mobile devices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The domain WHOIS data is unavailable, which slightly impacts trust but is mitigated by strong external trust signals such as customer testimonials and social media presence. Overall, TPOP presents a professional, trustworthy, and well-structured online presence suitable for its target market.

E

E-commerce + Print on Demand

tpop.fr

69

TPOP is a French-based e-commerce platform specializing in print-on-demand services with a strong emphasis on eco-responsibility and no upfront stock costs. The platform enables users to create online stores quickly and easily, offering physical, digital, and print-on-demand products with local European production. The company positions itself as a sustainable and user-friendly alternative in the e-commerce market, integrating with popular platforms like Shopify, Etsy, and WooCommerce. The website demonstrates a high level of digital maturity, employing modern web technologies such as Bootstrap, jQuery, and Weglot for multilingual support, alongside analytics and user feedback tools. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The lack of WHOIS data introduces some uncertainty about domain registration legitimacy, but the professional presentation and trust indicators like Trustpilot reviews and social media presence support credibility. Overall, TPOP presents a trustworthy and technically sound e-commerce solution with room for improvement in transparency and security disclosures.

L

LeBureau.coop

lebureau.coop

54

LeBureau.coop is a French cooperative focused on domain name registration and management services. The cooperative model emphasizes participation from suppliers, clients, and supporters, with transparent pricing and governance. The website targets customers interested in cooperative domain registration services and those wishing to become sociétaires to influence cooperative decisions. Technically, the website is built with standard HTML and CSS, with basic mobile optimization and moderate performance. There is no evidence of advanced frameworks or CMS usage. Security posture is moderate but lacks visible security headers and explicit HTTPS enforcement details. Privacy and cookie policies are absent, which impacts compliance. The site has minimal tracking and no advertising, reflecting a privacy-conscious approach. Overall, the website is professional and trustworthy but could improve in compliance and security transparency.

L

Les-Tilleuls.coop

vulcain.rocks

58

Vulcain.rocks is a technology-focused website promoting the Vulcain protocol, which leverages HTTP/2 features such as preload hints, Early Hints, and Server Push to create fast, client-driven REST APIs. The site is supported by Les-Tilleuls.coop, which offers professional services including web development, training, and consulting around this technology. The website targets developers and API providers seeking to optimize API performance and usability. Technically, the site is built with modern frameworks including Next.js and Material-UI, and integrates Google Analytics and Tag Manager for user tracking. The design is professional, mobile-optimized, and accessible, providing a good user experience. Security-wise, the site uses HTTPS and does not expose sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the domain appears legitimate though WHOIS data is privacy protected and incomplete.

O

OpenStreetMap

osm.org

11

OpenStreetMap is a globally recognized open source mapping platform that provides free, editable maps created by a community of contributors. It holds a strong market position as a leading provider of open geospatial data and mapping services. The website offers a comprehensive suite of tools including map editing, search, directions, GPS trace uploads, and community engagement features, targeting a broad audience from casual users to professional mappers. Technically, the site employs modern JavaScript frameworks such as Leaflet.js and Turbo (Hotwire), with hosting provided by Fastly, ensuring fast performance and excellent mobile optimization. Security measures include HTTPS enforcement, CSRF protection, and use of Content Security Policy nonces, although some standard security headers are missing. Privacy compliance is basic, with a privacy policy and terms of use present but lacking explicit cookie consent mechanisms or GDPR-specific statements. No contact emails or phone numbers are provided on the main page, and no vulnerability disclosure or security.txt files are found. Overall, the site is professional, trustworthy, and safe for general audiences, with a high AI score reflecting strong content quality, technical implementation, and business credibility.

G

Genial

wearegenial.com

9

Genial is a French AI-focused company providing comprehensive AI solutions, including training, project development, customizable AI products, and platform management. The company targets businesses seeking to integrate AI into their operations and improve productivity and customer satisfaction. The website demonstrates a professional digital presence with modern technologies such as Google Tag Manager, reCAPTCHA, and Cloudflare Turnstile, hosted on Webflow. Security measures include HTTPS and bot protection, but lack explicit security headers and published privacy or cookie policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and branding are consistent and professional. Overall, the site is well-designed and functional but would benefit from enhanced privacy compliance and domain legitimacy transparency.

V

Service is not available in your region.

vudu.com

52

The analyzed URL is a region restriction error page under the athome.fandango.com subdomain. The page content is minimal, displaying only a message that the service is not available in the visitor's region, with no additional business or contact information. WHOIS data for the subdomain is not found, indicating it is not separately registered and likely a subdomain or placeholder under the parent domain fandango.com. The technical infrastructure is basic HTML and CSS with no detected scripts or analytics. Security posture cannot be fully assessed due to lack of HTTPS and security headers information. Overall, the site is blocked or restricted for the visitor's region, limiting meaningful analysis.

S

Střední odborná škola a Střední odborné učiliště, Kaplice

geukaplice.cz

48

The website represents Střední odborná škola a Střední odborné učiliště, Kaplice, a Czech secondary vocational school providing a variety of educational programs including maturitní obory and učební obory. It targets prospective and current students, offering detailed information about courses, events, and school services. The site is well-structured with clear navigation and a professional design, supporting its educational mission effectively. Technically, the site uses modern JavaScript libraries such as jQuery, Flatpickr, and Tippy.js, and is built on the Nette PHP framework. It employs HTTPS and Google reCAPTCHA for security, though some security headers are not visibly set in the HTML source. Privacy and cookie policies are present but lack an explicit consent mechanism. The absence of WHOIS data reduces domain trustworthiness, but the website content and social media presence support its legitimacy as an educational institution.

H

Hotel Za Vodou

hotelzavodou.cz

58

Hotel Za Vodou is a small family-run hospitality business located in Dvůr Králové nad Labem, Czech Republic. The website presents a comprehensive overview of their services including accommodation, restaurant offerings, conference facilities, and family-friendly amenities such as outdoor pools and playgrounds. The business targets families, corporate clients, and tourists seeking a quiet and comfortable stay near the local Safari park. The website is professionally designed with good navigation and mobile optimization, supporting multiple languages and integrating social media for customer engagement. From a technical perspective, the site uses common web technologies including Google Analytics and Facebook SDK for tracking and marketing purposes. The presence of a cookie consent banner indicates awareness of GDPR compliance, although explicit privacy and security policies are limited. No forms collecting personal data are visible on the homepage, reducing immediate privacy risks. The website performance is moderate with good mobile responsiveness and basic accessibility features. Security posture is moderate but could be improved. The site lacks visible security headers and explicit security policies. The WHOIS data for the domain is unavailable, which reduces trust signals and raises questions about domain registration transparency. However, the website content and contact information appear legitimate and consistent with a small local hospitality business. Overall, the website is functional and professional but would benefit from enhanced security measures, clearer privacy documentation, and improved domain registration transparency to increase trustworthiness and compliance.

K

Království makronek

kralovstvimakronek.cz

44

Království makronek is a small Czech artisanal bakery specializing in the production and sale of gluten-free macarons and macaron cakes made from 100% almond flour. The website targets consumers interested in high-quality, gluten-free confectionery products. The business operates primarily in the retail sector with a niche focus on gluten-free offerings. The website is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with a professional design and good mobile optimization. Security posture is adequate with HTTPS enabled and a cookie consent mechanism in place, but lacks advanced security headers and incident response information. The absence of WHOIS data reduces transparency and trustworthiness from a domain registration perspective. Overall, the website presents a professional and trustworthy front for a small retail business but could improve in security and contact transparency.

O

Obec Nová Ves pod Pleší

novavespodplesi.cz

46

Obec Nová Ves pod Pleší operates an official municipal website serving the local community in the Czech Republic. The site provides residents and visitors with essential information such as official announcements, contact details, local clubs, and municipal services. The website is well-structured, with clear navigation and up-to-date content, reflecting a professional municipal communication channel. Technically, the site employs a variety of modern JavaScript libraries including jQuery, Bootstrap, Swiper.js, and Leaflet for mapping, indicating a moderate level of digital maturity and mobile optimization. Security-wise, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible advanced security headers and explicit incident response or security policies. The absence of WHOIS data limits domain trust assessment, but the presence of official contact information and consistent branding supports legitimacy. Overall, the website is a reliable and safe resource for its intended audience, with room for improvement in security posture and transparency.

C

CPI Hotels, a.s.

qualityhotelbrnoexhibitioncentre.com

60

Quality Hotel Brno Exhibition Centre is a medium-sized hospitality business located in the Czech Republic, offering hotel accommodation, conference facilities, restaurant services, and wellness amenities. It is part of the CPI Hotels group, which adds to its market credibility and brand strength. The website is professionally designed with excellent content quality and clear navigation, targeting business travelers, event organizers, and tourists. The business model focuses on providing quality services for corporate and leisure guests with a strong emphasis on comfort and regional cuisine. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with integrations for Google Tag Manager, cookie consent management, and marketing/analytics tools like Sojern and Zoomletter. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. However, no CMS or hosting provider details were detected. From a security perspective, the site uses HTTPS and cookie consent mechanisms effectively, but lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data for the domain is a notable concern, reducing trust slightly, but the overall security posture is solid. Overall, the website presents a low-risk profile with strong business credibility and compliance with privacy regulations. Strategic improvements include publishing a dedicated security policy, enhancing incident response transparency, and adding security headers to further harden the site.

A

Alechko Studio Ltd

asdesigning.com

9

AS Templates operates as a specialized marketplace offering premium Joomla!, WordPress, and HTML templates to web designers and businesses seeking professional website themes. The platform boasts a large active community and a significant volume of downloads and purchases, positioning itself as a reputable player in the web design template market. Their business model focuses on providing both free and premium templates with quick-start installation packages, catering to a broad audience from individual designers to enterprises. Technically, the website employs a classic web stack including Bootstrap for responsive design, jQuery for scripting, and integrates Google Analytics and Google Tag Manager for user behavior tracking. The site is mobile-optimized with good navigation and SEO practices, though the use of an outdated jQuery version presents a potential security risk. The absence of a cookie consent mechanism indicates partial privacy compliance. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies. No sensitive data exposure was detected, but the outdated JavaScript library and missing WHOIS data reduce trustworthiness. The WHOIS information is incomplete, which raises concerns about domain registration legitimacy despite the professional presentation of the site. Overall, the website is functional, professional, and serves its business purpose well but would benefit from technical and security improvements, including updating libraries, enhancing privacy compliance, and clarifying domain registration details to strengthen trust and security posture.

A

Alechko Studio Ltd

astemplates.com

47

AS Templates operates as an online marketplace specializing in Joomla!, WordPress, and HTML templates and themes. The company, Alechko Studio Ltd, claims a history dating back to 2010 and serves a large community of web designers and developers seeking professional and free templates. The platform offers a wide range of products, including premium and free items, with support and documentation to facilitate user adoption. The business model centers on digital product sales and subscription-based template clubs, positioning itself as a significant player in the template marketplace industry. Technically, the website employs a Bootstrap-based responsive design with jQuery and integrates Google Analytics and Google Tag Manager for user tracking and analytics. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. The absence of visible CMS identification suggests a custom or static site approach. While HTTPS is implied, security headers are not evident, and cookie consent mechanisms are lacking, indicating room for improvement in privacy compliance. From a security perspective, the site shows no immediate vulnerabilities or exposed sensitive data. However, the failure to retrieve WHOIS data for the domain raises concerns about domain registration legitimacy or privacy protection. The lack of explicit contact information and incident response channels further limits the security posture. Overall, the site maintains a moderate security level but would benefit from enhanced transparency and compliance measures. The overall risk assessment is moderate, with the primary concern being the domain registration inconsistency. Strategic recommendations include implementing comprehensive security headers, establishing cookie consent for GDPR compliance, providing clear contact and incident response information, and regularly updating technical components. These steps will enhance trust, security, and regulatory adherence, supporting the platform's continued growth and reputation.

R

Prodej použitých knih - Restorio.cz

restorio.cz

57

Restorio.cz is an established Czech e-commerce platform specializing in the sale and buyback of used books. The website offers a wide range of book categories, interactive guides, and customer loyalty features, positioning itself as a key player in the Czech used book retail market. The platform leverages Magento 2 technology with integrations for search, analytics, and marketing, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and secure cookie settings, though some security headers could be improved. Privacy compliance is moderate with a cookie consent mechanism but lacking a clearly accessible privacy policy page. Overall, the website presents a professional and trustworthy front with room for improvement in transparency and security hardening.

P

Pivovar Horác

pivovarhorac.cz

45

Pivovar Horác is a small craft brewery based in the Vysočina region of the Czech Republic, founded in 2015 by a group of friends with brewing experience. The company produces traditional Czech-style beers using bottom fermentation and local ingredients, selling products through an online shop and operating a brewery pub. The website reflects a professional and well-maintained digital presence built on WordPress with WooCommerce and Elementor, supporting e-commerce and content marketing via a blog. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks advanced security headers and formal policies. Privacy compliance is limited, with no cookie consent or detailed privacy policy evident. Overall, the business appears legitimate and focused on regional craft beer consumers, but domain registration details are unavailable, slightly reducing trust. Strategic improvements in security and privacy compliance would enhance the company's digital trustworthiness.

G

Grand Café

grand-cafe.cz

51

Grand Café operates as a specialized e-commerce retailer focused on coffee products, coffee machines, and related accessories primarily serving the Czech Republic market. The website presents a professional and comprehensive catalog of products including various coffee brands, coffee machines, capsules, syrups, and barista tools. The business targets coffee retailers, cafes, offices, and individual consumers seeking quality coffee products and equipment. The platform also offers customer support and servicing options, enhancing its value proposition. Technically, the website is built on the eshop-rychle.cz platform, utilizing modern JavaScript libraries and analytics tools such as Matomo and Google Tag Manager. The site is mobile-optimized with good navigation and SEO practices. Security posture is solid with HTTPS enforced and consent mechanisms for cookies, although some security headers could be improved. No WAF or blocking mechanisms interfere with content accessibility. From a security and compliance perspective, the site shows good privacy compliance with a visible privacy policy and cookie consent. However, no explicit security policy or incident response contacts were found. The WHOIS data is privacy-protected, which is common for e-commerce businesses, and no suspicious patterns were detected. Contact information is available with clear phone numbers but no public email addresses were found in the HTML. Overall, Grand Café presents a trustworthy and professional online presence with a strong focus on coffee retail and service. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving accessibility features to further strengthen trust and compliance.

K

Kolektor Tesla Jihlava s.r.o.

teslaji.cz

43

Kolektor Tesla Jihlava s.r.o. is a well-established Czech manufacturer specializing in connectors, plastic parts, and electromechanical components primarily for the automotive and electronics industries. Founded in 1958 and now part of the multinational Kolektor Group, the company leverages decades of experience and modern manufacturing processes to serve Tier 1 automotive customers. The website reflects a professional business presence with detailed descriptions of manufacturing capabilities and company history, targeting B2B clients in the manufacturing sector. Technically, the website employs legacy JavaScript libraries such as jQuery 1.7.1 and various UI plugins, indicating a need for modernization to improve security and performance. The site is mobile responsive and has good SEO fundamentals but lacks advanced accessibility features and modern frameworks. Analytics are implemented via Google Analytics, but no cookie consent or privacy policies are evident, which may pose compliance risks. From a security perspective, the absence of visible security headers and the use of outdated libraries present potential vulnerabilities. No HTTPS enforcement details were provided, and no explicit security or incident response policies are published on the site. The WHOIS data confirms domain legitimacy and consistency with the company’s long operational history. Overall, the website is functional and professional but requires improvements in security posture, privacy compliance, and technical modernization to reduce risks and enhance trustworthiness.

S

Statutární město Jihlava

jihlava.cz

47

The website jihlava.cz serves as the official digital portal for the city of Jihlava, Czech Republic. It provides comprehensive information and services related to municipal administration, social services, education, transport, tourism, and citizen engagement. The site targets residents, tourists, and local businesses, positioning itself as a trusted source of official city information and services. The business model is that of a government entity providing public services and transparent communication to its constituents. Technically, the website employs a custom CMS platform (vismo®), uses modern web standards including HTML5, CSS3, and JavaScript, and integrates Google Translate for multilingual support. The site is mobile-optimized and accessible, with good SEO practices and moderate performance. Hosting and domain registration are consistent with an official municipal entity. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. However, it lacks a publicly visible dedicated security policy or incident response contact information. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid but could be improved by adding security headers and formalizing incident response disclosures. Overall, jihlava.cz is a professionally maintained government website with high trustworthiness and compliance with privacy regulations. Strategic recommendations include publishing a security policy, providing incident response contacts, and enhancing security headers to further strengthen the site's security and transparency.

L

LMS

lms-la.com

57

LMS (Loyalty Marketing Services) is a Mexico-based company specializing in the design and implementation of loyalty programs and related services such as contact centers, omnichannel communication, e-learning, OCR, AI, and gamification. The company serves a broad range of industries including retail, banking, pharmaceuticals, automotive, and food and beverage, with a client portfolio featuring major brands like Coca-Cola and Banamex. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Google Analytics, and reCAPTCHA for security. However, the WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy. The site includes a comprehensive privacy policy but lacks a cookie consent mechanism and explicit security headers. Overall, LMS presents a credible business with strong market positioning but should address WHOIS transparency and enhance privacy compliance.

M

miniOrange

miniorange.com

76

miniOrange is a technology company specializing in identity and access management (IAM) solutions, offering a comprehensive suite of products including Single Sign-On (SSO), Multi-Factor Authentication (MFA), User Lifecycle Management (ULM), Privileged Access Management (PAM), and Cloud Access Security Broker (CASB). The company targets enterprises and IT professionals seeking secure and unified access management across cloud, web, and legacy applications. Their market position is solidified by a broad product portfolio and extensive integrations with popular platforms such as WordPress, Atlassian, Shopify, and more. Technically, the website demonstrates a mature digital infrastructure utilizing modern technologies such as jQuery, Google Tag Manager, Microsoft Clarity, and Cloudflare services. The site is well-optimized for mobile devices, features good SEO practices, and implements a comprehensive cookie consent mechanism compliant with GDPR. The use of structured data (JSON-LD) enhances search engine understanding and visibility. From a security perspective, the website enforces HTTPS, employs Google reCAPTCHA for bot mitigation, and uses Cloudflare Bot Management cookies. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly present and should be implemented to strengthen security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and content-rich, providing a positive user experience. The main concern lies in the absence of publicly available WHOIS domain registration data, which affects domain legitimacy verification. Despite this, the business presence, SSL configuration, and operational indicators suggest a legitimate and established entity.