Security Directory

S

Společnost bratří Čapků

bratri-capkove.cz

48

Společnost bratří Čapků is a well-established Czech non-profit cultural society dedicated to promoting the legacy and works of the Čapek brothers. Founded in 1947, it serves a niche audience of literary enthusiasts, researchers, and the general public interested in Czech literature and culture. The website provides information about the society's history, membership, events, and contact details, reflecting a focused cultural mission. Technically, the site is built on Joomla CMS with common JavaScript libraries, offering a moderate performance and good mobile responsiveness. However, it lacks advanced SEO and accessibility features. Security-wise, the site uses HTTPS but does not implement security headers or privacy policies, indicating room for improvement in compliance and protection. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security measures.

O

Obec Malé Svatoňovice

malesvatonovice.cz

45

Obec Malé Svatoňovice operates an official municipal website serving local citizens and tourists with information about the village, cultural events, local services, and historical sites such as the Museum of the Čapek brothers. The website is well-structured, primarily in Czech, and provides clear navigation and contact details, positioning itself as a trusted local government information portal. The domain is long-established since 2004, reinforcing its credibility and stable presence in the region. Technically, the website uses a modest technology stack including jQuery 1.11.1 and alertify.js, with CSS stylesheets and Google Fonts for styling. The site appears to be built on a CMS platform, likely CMS Made Simple, based on URL and form patterns. The site is mobile responsive and SEO optimized with proper meta tags, but lacks modern security headers and uses an outdated jQuery version, which could pose security risks. From a security perspective, the site enforces HTTPS and uses POST methods for forms, but does not implement visible security headers such as Content-Security-Policy or X-Frame-Options. There is no cookie consent mechanism despite having a GDPR policy page, indicating partial privacy compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is a reliable and professional municipal portal with good content quality and business credibility. However, improvements in security headers, updating JavaScript libraries, and implementing cookie consent would enhance its security posture and privacy compliance.

D

Divadlo D21

divadlod21.cz

50

Divadlo D21 is a well-established theatre organization based in Prague, Czech Republic, founded in 2012. It offers theatrical performances, educational projects, and cultural events targeting the general public and schools. The website reflects a professional cultural institution with a clear focus on community engagement and artistic offerings. Technically, the site uses a mix of JavaScript libraries including jQuery, Vue.js, and Google Analytics for tracking, with a responsive design and moderate performance. Security-wise, the site implements GDPR compliance and cookie consent mechanisms but lacks visible HTTP security headers in the provided data, indicating room for improvement in security hardening. Overall, the domain registration and WHOIS data align well with the business profile, supporting legitimacy and trustworthiness.

R

Reportér Magazín

reportermagazin.cz

55

Reportér Magazín is a well-established Czech media outlet founded in 2013, offering high-quality journalistic content including articles, interviews, audio podcasts, and photo galleries. The website targets a general adult audience interested in investigative journalism and cultural topics, operating primarily on a subscription-based business model with additional e-shop services. The domain and WHOIS data confirm legitimacy and consistent registration details. Technically, the site uses modern web technologies such as Next.js, Google Tag Manager, and DoubleClick for advertising, ensuring good performance and mobile optimization. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a high level of professionalism, trustworthiness, and user experience.

M

MAMA AI

themama.ai

61

MAMA AI is a technology company specializing in AI-driven solutions for industries such as insurance claims processing, IT helpdesk ticket resolution, and virtual recruitment. The company positions itself as a trusted partner with a focus on simplifying AI adoption for businesses, supported by a presence in media and a portfolio of satisfied clients. The website is built on a WordPress platform using the Avada theme, integrating marketing and analytics tools such as HubSpot and Google Analytics, indicating a moderate level of digital maturity. Security measures include HTTPS and reCAPTCHA, but lack advanced security headers and published policies, suggesting room for improvement in security posture and privacy compliance. Overall, the website presents a professional image with moderate trustworthiness but would benefit from enhanced transparency and security practices.

K

Kubio

kubiobuilder.com

56

KubioBuilder is a technology company specializing in a block-based WordPress website builder plugin. The website presents a professional and modern design optimized for WordPress users seeking an intuitive site-building experience. The company appears to be a small-sized entity founded in 2021, targeting WordPress developers and site creators. The technical infrastructure leverages WordPress CMS, Yoast SEO plugin for search optimization, and Cloudflare DNS services, indicating a moderate level of digital maturity. However, the domain registration is currently expired, posing a risk to business continuity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the site is functional and trustworthy but requires immediate domain renewal and enhanced compliance documentation.

C

Coop.tools

coop.tools

50

Coop.tools is a small technology-focused cooperative platform offering a suite of open-source digital collaboration tools including private cloud storage, blogging, federated video hosting, real-time document editing, and team chat. The platform also provides webmaster utilities such as hosting management and database administration. The website is built on the YesWiki CMS with modern frontend technologies like Bootstrap and FontAwesome, delivering a good user experience with clear navigation and mobile responsiveness. However, the site lacks explicit privacy and cookie policies, and no contact or business registration details are provided, which impacts trust and compliance perception. Security posture is moderate with HTTPS enabled and anti-CSRF tokens in forms, but missing security headers and incomplete WHOIS data reduce confidence. Overall, Coop.tools serves a niche cooperative audience with a focus on privacy-respecting, federated services but should improve transparency and security practices to enhance credibility.

The website www.cnbc.com is currently inaccessible due to an access denied error page, likely caused by a Web Application Firewall or other security mechanism blocking access. This prevents any meaningful extraction of business, technical, or security information from the site content. The WHOIS lookup also failed to return any registrar or registration details, which is unusual for a major media domain and further limits trust and legitimacy assessments. Without access to the actual website content, metadata, or technical headers, no detailed analysis of the site's infrastructure, security posture, or compliance can be performed. The overall risk is elevated due to lack of transparency and accessibility, and the site should be re-evaluated once access is restored.

Y

Yuba Gals Independent Media

peakmoment.tv

45

Peak Moment Television is a niche media organization focused on providing educational content related to sustainable living, community resilience, and personal growth. The website offers a variety of media including online videos, newsletters, and DVDs, targeting individuals interested in environmental and social sustainability. The business operates as a small media and educational entity based in the US, with a domain registration dating back to 2006, indicating a well-established presence. Technically, the website is built on WordPress using the Genesis Framework and hosted by DreamHost. The site employs modern web technologies such as jQuery and CSS3, with moderate performance and basic mobile optimization. SEO practices are adequate, but accessibility features are basic. The site uses HTTPS with a valid SSL certificate, but lacks DNSSEC and important security headers, which could be improved to enhance security posture. From a security perspective, the site shows good basic practices such as HTTPS and domain transfer protection but lacks advanced security measures like DNSSEC and security headers. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR and other privacy regulations. No incident response or vulnerability disclosure policies are present, which could be a risk in case of security incidents. Overall, the website is functional, content-rich, and trustworthy for its niche audience but would benefit from improved privacy compliance and enhanced security measures. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and establishing incident response contacts to strengthen trust and compliance.

T

The Daily Yonder

dailyyonder.com

64

The Daily Yonder is a niche national news organization focused on rural America, providing news, analysis, and storytelling through articles, podcasts, and newsletters. The website is built on WordPress using the Newspack theme and plugins, hosted by Automattic Inc., reflecting a mature and stable technical infrastructure. The site integrates modern technologies including Google Analytics, Facebook Pixel, and advertising networks, supporting a moderate level of user tracking and marketing. Security posture is strong with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and privacy compliance documentation is missing. Overall, the site presents professional content with good design and navigation, targeting a general audience interested in rural topics.

M

Martina Hoffmann

martinahoffmann.com

58

Martina Hoffmann's website serves as an online gallery and boutique for her fine art, focusing on visionary and psychedelic art styles. The site targets art enthusiasts and collectors, providing information about exhibitions, events, and an online store for purchasing artwork. The business operates as a small-scale artist gallery with a niche market presence. Technically, the website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies including Google Analytics and Facebook Pixel for visitor tracking. The site is mobile-optimized and uses HTTPS, ensuring a secure browsing experience. However, the absence of explicit privacy and cookie policies, as well as missing WHOIS registration data, presents compliance and legitimacy concerns. Security posture is generally good with HTTPS and standard security headers, but improvements are needed in privacy compliance and transparency. Overall, the website is professional and functional but would benefit from enhanced compliance documentation and clearer domain registration information.

The website sacredlight.to is a recently registered domain currently used as a domain parking page managed via Sedo and registered through Namecheap. It provides no original business content or services, instead displaying generic advertising and search widgets. The site targets a general audience with Finnish language content but lacks any identifiable business entity or contact information. Technically, the site uses standard HTML5 and JavaScript with Google Ads and Sedo domain parking scripts, but lacks advanced frameworks or CMS. Security posture is minimal with no visible security headers or policies, and privacy compliance is basic with a generic privacy policy and cookie consent mechanism. Overall, the site has low business credibility and limited technical sophistication.

D

Dog-Eared Passport

johnhendersontravel.com

50

John Henderson's website 'Dog-Eared Passport' is a personal travel blog focused on travel adventures primarily in Rome, Italy, and other international destinations. The site offers travel stories, guides, and personal experiences targeting travel enthusiasts interested in Italy and global travel. The business model appears to be content publishing with monetization through advertising and affiliate marketing. The website is built on WordPress using the Themify Ultra theme and integrates several third-party tools including Google Analytics, Google Adsense, Mailchimp, and Grow.me. The technical infrastructure is modern but could benefit from enhanced security measures such as DNSSEC and security headers. The security posture is moderate with HTTPS enabled but lacks some best practices. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is accessible, well-structured, and provides good user experience with consistent branding and active social media presence.

K

KBOO

kboo.fm

51

KBOO is a well-established community radio station based in Portland, Oregon, providing alternative media content and community engagement since at least 2002, with roots dating back to 1968. The station operates as a non-profit entity, funded primarily through donations, memberships, underwriting, and volunteer support. Its website serves as a hub for live streaming, program schedules, community involvement, and donation facilitation, targeting local community members and alternative media audiences. Technically, the site runs on Drupal 7 with Bootstrap and jQuery, integrating analytics tools like Google Analytics and Matomo, and includes social media and donation platform integrations. While the site is functional and well-structured with good content quality and navigation, it uses an outdated CMS version, lacks a cookie consent mechanism, and does not enable DNSSEC, which are areas for improvement. Security posture is moderate with HTTPS enforced and some security best practices observed, but could be enhanced by upgrading the CMS, enabling DNSSEC, and implementing stronger security headers. Overall, the website is trustworthy and professional, with clear business legitimacy and community focus.

P

Pumpjack Press

pumpjackpress.com

56

Pumpjack Press is a small media-focused author website promoting fiction with a social justice edge by authors Clark Hays and Kathleen McFall. The site offers book sales, reviews, blogs, newsletters, and news content, targeting readers interested in socially conscious literature. Technically, the site is built on the Squarespace platform, leveraging standard web technologies and fonts, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and design appear professional and trustworthy. Privacy policies are present but basic, and no incident response or vulnerability disclosure information is available. Overall, the site is functional and credible but would benefit from enhanced security and compliance measures.

W

WPlook Themes

wplook.com

44

WPlook Themes is a Canadian-based small technology company specializing in premium WordPress themes and hosting solutions. Established in 2010, it serves a broad audience including nonprofits, creatives, agencies, and businesses seeking high-quality, speed-optimized WordPress themes. The company operates an e-commerce model offering yearly and lifetime access to theme bundles, hosting plans, and customization services. The website demonstrates strong branding, professional design, and clear navigation, supported by a robust technical infrastructure built on WordPress, WooCommerce, and modern web technologies. Analytics and marketing tools such as Google Tag Manager and Facebook Pixel are integrated for user tracking and advertising purposes. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements are recommended in DNSSEC adoption and security headers. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, WPlook presents a trustworthy and professional online presence with a mature digital footprint.

U

UptimeRobot

uptimerobot.com

76

UptimeRobot is a well-established SaaS company founded in 2010, providing uptime monitoring services to over 2.5 million users globally. Their platform offers a wide range of monitoring features including website, SSL, DNS, and response time monitoring, complemented by incident management and status pages. The company targets developers, DevOps teams, marketers, support staff, and business owners, positioning itself as a leading uptime monitoring service with a freemium business model and multiple paid subscription tiers. Technically, the website is built on a modern stack utilizing Cloudflare for DNS and CDN, Uikit for UI components, and integrates various third-party analytics and marketing tools such as Google Analytics, Microsoft Clarity, Intercom, and User.com. The site is mobile-optimized with dedicated Android and iOS apps, and demonstrates excellent performance and SEO practices. From a security perspective, the site enforces HTTPS with strong domain registration protections but lacks DNSSEC and a publicly available security policy or vulnerability disclosure program. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, UptimeRobot presents a professional, trustworthy, and technically mature online presence with strong business credibility. Minor improvements could be made in DNS security and transparency around security policies to further enhance trust and compliance.

C

Cream Code Technology Pvt Ltd

creamcode.org

60

Cream Code Technology Pvt Ltd is a Nepal-based small IT services company founded in 2020, delivering innovative IT services and technology solutions globally. Their website showcases their offerings including WordPress themes, WooCommerce addons, and license key management, targeting businesses seeking digital transformation and online presence. The company leverages modern WordPress infrastructure with Elementor and Astra theme, integrating Google Analytics and Tag Manager for marketing insights. The website is professionally designed with good mobile optimization and clear navigation, reflecting a consistent brand image. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and privacy policies are missing. Overall, the site is legitimate and functional but could improve compliance and security transparency.

A

Ayush Valley Foundation

ayushvalley.org

50

Ayush Valley Foundation is a small non-profit organization founded in 2020 in India, dedicated to promoting Ayurveda and wellness through education, research, publications, and events. The website serves as a platform for professionals and scholars to collaborate and share knowledge, with a focus on bilateral exchange of Ayurveda practices globally. Technically, the website uses a modern tech stack including Bootstrap 4, jQuery, and various plugins, hosted likely via GoDaddy. The site is mobile optimized and has good SEO practices but lacks a CMS and advanced accessibility features. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Privacy and cookie policies exist but lack explicit consent mechanisms. No direct company contact emails or phone numbers are published, only a contact form. Overall, the website is professional and trustworthy but could improve security and privacy compliance.

I

International Society for Traditional, Complementary & Integrative Medicine Research (ISCMR)

iscmr.org

66

The International Society for Traditional, Complementary & Integrative Medicine Research (ISCMR) is a well-established international scientific organization focused on advancing research in whole person healing and integrative healthcare. The website serves as a platform for knowledge exchange, membership services, and event promotion, targeting researchers and practitioners globally. The organization has a strong market position with multiple regional chapters and partnerships with reputable journals and research bodies. Technically, the website is built on the ClubExpress platform using ASP.NET WebForms and Telerik UI components, with integrations including Google Tag Manager and Zendesk for analytics and user engagement. The site demonstrates moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, which are recommended for improvement. Privacy compliance is basic with presence of privacy and terms policies but no cookie consent mechanism. Overall, the website is professional and trustworthy but could benefit from enhanced security and privacy features.

S

Society for Integrative Oncology

integrativeonc.org

45

The Society for Integrative Oncology (SIO) is a well-established non-profit organization founded in 2004, dedicated to advancing evidence-based integrative oncology care. The website serves as a comprehensive platform offering educational resources, clinical guidelines, conferences, and membership benefits targeting healthcare professionals, patients, and researchers globally. The organization maintains a strong market position as a premier multi-disciplinary integrative oncology society with international reach. Technically, the website is built on WordPress using the Yootheme theme and UIkit framework, supplemented by plugins such as CiviCRM and DJ Accessibility to enhance functionality and accessibility. Hosting and domain registration are managed through reputable providers, with HTTPS enabled and basic security practices in place. The site demonstrates good mobile optimization, accessibility, and SEO practices, though there is room for improvement in security headers and DNSSEC implementation. From a security perspective, the site uses HTTPS and domain status protections but lacks DNSSEC and explicit security headers. No privacy or cookie policies were found, which is a compliance gap. Contact information is available via email and physical address, but no phone numbers or incident response contacts are published. Analytics usage is minimal and privacy-conscious, using Plausible Analytics and Google Tag Manager. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic recommendations include publishing privacy and cookie policies, enhancing security headers, enabling DNSSEC, and providing incident response information to improve compliance and security posture.

B

British Society for Integrative Oncology

bsio.org.uk

54

The British Society for Integrative Oncology (BSIO) is a UK-based professional organization dedicated to promoting integrative oncology, combining conventional and complementary medicine to improve cancer patient outcomes. The website serves healthcare professionals and patients by providing educational resources, event information, and membership opportunities. Technically, the site is built on Squarespace, leveraging its CMS and hosting platform, with good mobile optimization and moderate performance. Security posture is strong with HTTPS and basic security headers, though improvements in security headers and privacy policies are recommended. The absence of WHOIS data limits domain trust verification, but the professional content and social media presence support legitimacy. Overall, the site is a credible resource in the healthcare non-profit sector with room for enhanced privacy compliance and security hardening.

T

Tapovan

tapovanfrance.com

55

Tapovan is a small healthcare and education entity based in France, specializing in Ayurveda and yoga. The website presents a professional and consistent brand image, offering Ayurvedic retreats, massages, yoga classes, and educational seminars. The business is positioned as an authentic and established center in Europe for these wellness services. Technically, the site is built on the Wix platform, leveraging Wix Thunderbolt technology, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled and some security hardening scripts, but lacks visible security headers and formal policies. WHOIS data is missing, raising concerns about domain registration legitimacy. Overall, the site is functional and trustworthy for its niche but requires improvements in privacy compliance, contact transparency, and security best practices.

O

KIM – KONGRES INTEGROVANÉ MEDICÍNY – Oficiální webové stránky Kongresu integrované medicíny.

openmedicine.cz

58

The website openmedicine.cz serves as the official platform for the 10th annual Congress of Integrated Medicine (KIM) held in Prague, Czech Republic. It targets medical professionals interested in integrated and alternative medicine disciplines such as acupuncture and homeopathy. The site provides event information, registration links, and partner details, positioning itself as a niche event organizer within the healthcare sector. The domain age and WHOIS data support the legitimacy and consistency of the business. Technically, the site is built on WordPress using Elementor and standard web technologies like jQuery and Bootstrap. It is hosted likely in the Czech Republic with HTTPS enabled, ensuring basic security. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. However, it lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and trust. From a security perspective, the site uses HTTPS but does not publish security policies, incident response contacts, or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of privacy and cookie policies and security headers lowers the overall security posture. Overall, the website is functional, professional, and trustworthy for its purpose but would benefit from enhanced privacy compliance, security best practices, and transparency in contact and policy disclosures to improve user trust and regulatory adherence.

E

European Congress Integrative Medicine Madrid

ecim24madrid.com

57

The website ecim24madrid.com serves as the official platform for the XVI European Congress of Integrative Medicine scheduled in Madrid in 2024. It targets healthcare professionals and researchers interested in integrative medicine, providing detailed event information, speaker profiles, and program schedules. The site is professionally designed and well-branded, reflecting a reputable event organization with international reach. Technically, it is built on WordPress with common plugins for event management and galleries, hosted by Acens Technologies, a known hosting provider. The site uses HTTPS and includes Google Analytics for visitor tracking, but lacks some privacy compliance features such as a cookie consent mechanism. Security posture is moderate with room for improvement in DNS security and security headers. Overall, the site is trustworthy and functional, supporting the event's business goals effectively.

I

INSTITUTE FOR TCIM/CAM

itcim.org

54

The INSTITUTE FOR TCIM/CAM is a small non-profit organization focused on Traditional, Complementary and Integrative Medicine, providing educational resources, research dissemination, and international cooperation including NATO and cancer-related initiatives. The website serves as an information hub targeting healthcare professionals, researchers, and the public interested in alternative medicine. Technically, the site uses a combination of legacy and modern JavaScript libraries including jQuery, bxSlider, and social media SDKs, with moderate performance and basic mobile optimization. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. WHOIS data is incomplete, limiting domain trust verification. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security practices.

P

PLATFORMA 2020 PRAHA - NOVÁ WIKI TCIM

platforma2020praha.cz

46

The website platforma2020praha.cz serves as an informational resource dedicated to traditional, complementary, and integrative medicine (TCIM) aligned with resolutions from WHO, WHA, the European Parliament, and the Council of Europe. It targets a general audience interested in TCIM, providing public access, member registration, and login portals. The business operates as a small-scale informational platform founded in 2020, primarily serving the Czech Republic. Technically, the site uses standard HTML5 and CSS3 with Google Fonts, hosted by WEDOS, and features a responsive design with a background video. However, it lacks advanced frameworks or CMS indications and has moderate performance and accessibility levels. Security posture is minimal with no visible security headers or published policies, and no HTTPS status was provided in the data. Privacy compliance is weak due to the absence of privacy and cookie policies. No contact or incident response information is available, limiting trust and transparency. Overall, the site is functional and professionally designed but requires improvements in security, privacy, and contact transparency to enhance credibility and compliance.

S

Shift4Shop

3dcart.com

72

Shift4Shop is a comprehensive SaaS eCommerce platform offering a turnkey solution for businesses to build and grow online stores. The platform provides a rich set of features including a website builder, product and order management, marketing tools, integrated payment processing with PCI compliance, and fraud protection. It targets a broad audience of eCommerce businesses seeking a premium yet affordable solution. Technically, the website employs modern analytics and marketing technologies such as Google Analytics, Facebook Pixel, and OneTrust for privacy management, and is optimized for mobile and SEO. Security posture is strong with PCI certification and fraud protection, though explicit security headers and public security policies are not evident. The WHOIS data is missing or unavailable, which slightly reduces domain trustworthiness. Overall, the website is professional, secure, and well-positioned in the eCommerce market.

W

Woopra

woopra.com

73

Woopra is a technology company specializing in customer journey and product analytics software. Their platform enables businesses to track user behavior across multiple touchpoints including marketing, sales, product usage, and support, providing actionable insights to improve customer acquisition and retention. The website demonstrates a mature digital presence with professional design, clear navigation, and comprehensive content targeted at product, marketing, sales, and support teams. Technically, the site employs modern JavaScript libraries, Google Tag Manager, and OneTrust for cookie consent, ensuring compliance with privacy regulations such as GDPR. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain is a notable gap, limiting full trust assessment of domain registration legitimacy. Overall, Woopra presents as a credible SaaS analytics provider with a well-implemented website and good privacy compliance, but would benefit from enhanced transparency in security and domain registration details.

S

Shift4Shop

shift4shop.com

72

Shift4Shop is a well-established SaaS eCommerce platform offering a comprehensive suite of tools for building and managing online stores. The platform targets businesses of various sizes seeking an affordable yet feature-rich solution, positioning itself competitively against other eCommerce providers. Technically, the website employs modern tracking and marketing technologies, integrates with major platforms like PayPal, and demonstrates good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS, holds PCI certification, and includes fraud protection, though it lacks explicit security headers and a public security policy. The WHOIS data is missing or privacy protected, which slightly reduces transparency but does not detract significantly from the site's legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a strong contender in the eCommerce software market.

C

Caster.fm - Free Radio Stream Hosting - Start Your Own Internet Radio

caster.fm

60

Caster.fm is a small technology company providing free internet radio stream hosting services, targeting individuals and small groups interested in starting their own online radio stations. The website is built on WordPress using Elementor and Yoast SEO, indicating a moderate level of digital maturity with good SEO and mobile optimization. Security posture is basic with HTTPS enabled but lacking security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

The website www.dub.cz represents the Duchovní universita Bytí, an organization focused on spiritual philosophy and the teachings of Josef Zezulka, particularly in the field of Biotronika and alternative medicine. It serves a niche audience interested in spiritual education, events, and community engagement primarily in the Czech Republic but with multilingual support for international visitors. The site offers lectures, concerts, video content, and publications, positioning itself as a small but dedicated non-profit educational entity. Technically, the website employs a moderate technology stack including jQuery, bxSlider, Google Tag Manager, and reCAPTCHA, ensuring basic interactivity and security. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks some security headers and explicit privacy policies, which are areas for improvement. The absence of WHOIS data reduces transparency and trust slightly, but the active and professional nature of the site, along with partner references, supports its legitimacy. Overall, the site is functional, moderately secure, and serves its community well, though it would benefit from enhanced privacy and security disclosures.

The website publicdomainregistry.com is currently inaccessible beyond a Cloudflare Turnstile security challenge page, which blocks access to its actual content. The domain is registered with PDR Ltd. d/b/a PublicDomainRegistry.com since 2003, indicating a long-standing presence. However, due to the WAF challenge, no business content, policies, or contact information is accessible for analysis. The technical infrastructure includes Cloudflare security services, but DNSSEC is not enabled, representing a minor security gap. The website lacks visible privacy, cookie, or terms of service policies, and no forms or data collection mechanisms are present beyond the captcha challenge. Overall, the site’s security posture is moderate due to HTTPS and domain transfer protection, but content quality and privacy compliance cannot be assessed due to blocking.

E

Europe Ayurveda

europeayurveda.com

56

Europe Ayurveda operates an e-commerce website specializing in Ayurvedic health and wellness products, including herbal ghee, oils, tablets, and powders. The site also offers Ayurveda and Yoga classes, targeting consumers interested in natural and traditional health remedies. The business appears to be a small retail entity founded around 2014, with a niche market presence in Europe. Technically, the website is built on the OpenCart CMS platform with a custom Megnor theme, utilizing common web technologies such as jQuery and Google Analytics. The site is moderately optimized for mobile devices and provides a functional shopping experience with product listings and customer account features. Security-wise, the website uses HTTPS and has domain transfer protection, but lacks DNSSEC and security headers, and shows PHP notices in the HTML output, indicating backend code issues that could pose risks. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism. Overall, the website is functional and credible but would benefit from improved security practices and privacy compliance.

N

Nicer LLC

small.chat

57

Smallchat is a SaaS company providing a Slack-integrated live chat solution that enables website owners and teams to communicate with visitors directly within Slack. The product is positioned as an easy-to-use, customizable chat widget that leverages Slack's platform to streamline customer engagement. The company operates under Nicer LLC and targets businesses that use Slack for internal communication, offering features such as auto messages, contact list management, and conversation analytics. The website is professionally designed, mobile-optimized, and provides clear information about the product and company contact details. Technically, the site is built using React and modern web technologies, with Google Tag Manager for analytics and Mailchimp for marketing communications. Security posture is good with HTTPS enforced and OAuth integration for Slack, though some security headers and policies could be improved. Privacy compliance is basic with a privacy policy and GDPR references but lacks cookie consent mechanisms. Overall, the domain is privacy protected but shows no suspicious patterns, consistent with a legitimate small SaaS business.

T

Tomáš Haluza

haluza.cz

43

Tomáš Haluza is a small Czech Republic-based web design and internet application development service provider. The company offers a range of services including web design, logo creation, content management systems, online shops, and hosting partnerships, targeting businesses seeking professional online presence solutions. The website is well-structured, primarily in Czech, and demonstrates a solid technical foundation with PHP backend, Apache server, and integration of Google Analytics for visitor tracking. The presence of a cookie consent banner indicates awareness of GDPR compliance. Security posture is moderate with secure form submission and no visible vulnerabilities, but lacks advanced security headers and incident response information. WHOIS data is missing, which limits domain trust verification, but the website content and business information appear professional and legitimate. Overall, the site scores well in content quality and technical implementation but could improve in security and compliance transparency.

G

Gabriela Filippi

gabrielafilippi.cz

59

Gabriela Filippi's website serves as a personal brand platform focused on spirituality, healing arts, and cultural events primarily targeting Czech-speaking audiences interested in personal development and spiritual growth. The site offers a variety of content including podcasts, meditations, workshops, and theatrical performances, supported by an e-commerce section and event ticket sales. The business model revolves around content monetization and event participation, positioning Gabriela Filippi as a niche influencer in the Czech spiritual and cultural community. Technically, the website is built on WordPress using the Mioweb3 theme, leveraging common web technologies such as jQuery, Google Tag Manager, and Smartlook for analytics and user behavior tracking. Hosting is provided by Wedos, a Czech hosting provider, consistent with the domain registration data. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security headers and vulnerability disclosure policies suggests room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies in Czech language, aligned with GDPR requirements. Overall, the website presents a professional and trustworthy digital presence with good content quality and user experience, though it lacks direct contact information and advanced security policies.

Galerie Cesty ke světlu is a Czech art gallery founded in 1994 by PhDr. Ing. Zdeněk Hajný, focusing on psychological and spiritual art. The website provides detailed information about exhibitions, events, and sales of art-related merchandise such as calendars and diaries. The target audience includes art enthusiasts and those interested in spiritual and psychological themes. The gallery maintains a niche position in the cultural sector within the Czech Republic. Technically, the website uses a combination of older and modern web technologies including Foundation CSS and jQuery 1.8, with multimedia features like jPlayer for audio. While the site is accessible and well-structured, it lacks modern security headers and uses outdated libraries, which could pose risks. No privacy or cookie policies are present, indicating compliance gaps. The domain WHOIS data is missing, raising concerns about domain legitimacy. Contact information is clearly provided, including email, phone, and physical address, along with social media presence on Facebook.

Robert Policar operates a personal website focused on astrology, dream work, meditation techniques, and related personal development services. The business targets a general audience interested in spiritual and mental growth, offering services such as astrology consultations, Reiki, and gift vouchers. The website is positioned as a niche personal guidance service primarily serving the Czech Republic market. Technically, the site is built on WordPress using the MioWeb platform, hosted likely by Wedos, and employs common web technologies such as jQuery and Google Fonts. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional and professional but would benefit from improved privacy and security practices.

S

Střední pedagogická škola da Vinci

pedagogickaskoladavinci.cz

58

Střední pedagogická škola da Vinci is a small educational institution based in the Czech Republic specializing in preschool and extracurricular pedagogy. The website presents the school’s educational offerings, admission process, team information, and inspirational events, targeting students and educators interested in pedagogical studies. The business model is focused on providing secondary education with a niche focus on pedagogical training. The website is built on the Webnode CMS platform and uses Amazon Cloudfront CDN for content delivery, indicating a modern but modest technical infrastructure. The site is mobile-optimized with good design and navigation, though some SEO and accessibility features could be improved. Security posture is adequate with HTTPS enforced and a cookie consent mechanism in place, but lacks advanced security headers and explicit privacy policies. No WHOIS data is available, likely due to privacy protection, but the website content and structure suggest a legitimate educational entity. Overall, the site is safe, professional, and functional with room for enhancements in privacy compliance and security best practices.

Studio Biorezonance is a small healthcare service provider based in the Czech Republic specializing in holistic and alternative medicine therapies, including biorezonance, massage, and anti-aging programs. The website presents a professional and clear overview of their services targeting adults, children, and pets. Technically, the site uses a traditional tech stack with jQuery and Bootstrap, hosted by a Czech hosting provider. While the site is functional and moderately optimized for mobile, it lacks advanced security headers and privacy compliance features such as privacy and cookie policies. The security posture is moderate with room for improvement in headers and script management. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance and security configurations would enhance trust and compliance.

D

Diochi

diochi.cz

48

Diochi.cz is an established Czech company specializing in the development, manufacturing, and sale of natural bioinformational dietary supplements. The website reflects a mature e-commerce platform with a membership club, targeting health-conscious consumers interested in natural products. The company has a long-standing domain since 2003, indicating stability and market presence. Technically, the site is built on Joomla CMS with modern JavaScript libraries and frameworks, supporting responsive design and accessibility at a basic level. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and advanced login options including WebAuthn, though some security headers could be improved. Advertising and analytics are implemented with user consent, reflecting GDPR compliance. Overall, the site is professional, trustworthy, and well-positioned in its niche.

A

Astrologická společnost ČR

astrologickaspolecnost.cz

62

Astrologická společnost ČR is a well-established Czech astrology society founded in 1989, operating as a non-profit membership organization. It provides educational events, publishes a specialized revue, and organizes conferences, serving professionals and enthusiasts in astrology. The website reflects this focus with detailed historical and organizational content. Technically, the site runs on Drupal 7 with legacy jQuery libraries, indicating a need for modernization. Security posture is moderate but weakened by outdated software and lack of modern security headers. Privacy compliance is minimal, with no visible privacy or cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional and informative but requires technical and compliance improvements to enhance security and user trust.

N

Natasha

natasha.cz

57

Natasha.cz is a Czech e-commerce website specializing in eco-friendly household and personal care products, with a strong emphasis on sustainability, zero waste, and local sourcing. The brand is led by founder Nataša Foltánová and has over 15 years of experience in the market. The website offers a wide range of products including cleaning agents, aromatherapy oils, baby care items, and related accessories, targeting environmentally conscious consumers. Technically, the site is built on the Shoptet e-commerce platform, utilizing modern web technologies such as jQuery, Google Analytics, and Facebook SDK, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, security headers, and consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response information. The absence of WHOIS data for the domain is a notable concern, impacting domain trustworthiness, but the website content and business presence appear professional and legitimate overall.

E

Ekokoza s.r.o.

ekokoza.sk

67

Ekokoza s.r.o. operates a professional e-commerce website focused on supplying natural raw materials and kits for home production of cosmetics, candles, and food products. The company targets consumers interested in ecological and DIY lifestyle products primarily in Slovakia and the Czech Republic. The website demonstrates a mature digital infrastructure with modern tracking and marketing tools, good mobile optimization, and clear navigation. Privacy and cookie policies are well implemented with GDPR compliance, enhancing user trust. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. WHOIS data aligns with the business claims, supporting legitimacy.

B

BSSHOP s.r.o.

bsshop.cz

60

BSSHOP s.r.o. is a Czech technology company specializing in the development of e-commerce platforms tightly integrated with the economic system POHODA. With over 20 years of experience and more than 650 active e-shops, the company holds a strong market position in the Czech and Slovak e-commerce sector. Their key services include e-shop creation, process automation, supplier integration, and marketing tools tailored for business clients. The website reflects a professional and business-oriented approach, targeting companies seeking robust e-commerce solutions integrated with POHODA. Technically, the website employs modern web technologies such as JavaScript, jQuery, Bootstrap, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. The security evaluation shows no critical vulnerabilities or exposed sensitive data, but the absence of a privacy policy and terms of service pages is a compliance gap. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the website content and business information appear legitimate and consistent. Overall, the site is safe, professional, and trustworthy for its intended business audience. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, adding incident response contacts, and improving accessibility to strengthen compliance and user trust.

D

Divadlo RB s.r.o.

divadlorb.cz

56

Divadlo RB s.r.o. operates the Divadlo Radka Brzobohatého theatre located in the center of Prague, Czech Republic. The company provides live theatrical performances including comedies, musicals, and classic plays, targeting a general audience interested in cultural entertainment. The business model revolves around ticket sales and event hosting, supplemented by a partner cafe service. The website reflects a well-established local cultural venue with a domain age dating back to 2004, indicating a stable presence in the market. Technically, the website is built on WordPress with modern web technologies such as Bootstrap, jQuery, and Font Awesome. It integrates Google Analytics and Tag Manager for visitor tracking and uses Owl Carousel and FancyBox for UI enhancements. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Hosting and domain registration are consistent with the Czech Republic location. From a security perspective, the site enforces HTTPS and uses asynchronous loading for analytics scripts, but lacks important security headers and does not provide visible privacy or cookie policies, which are compliance gaps. No incident response or vulnerability disclosure information is available, and no security.txt file is found. The site does not expose sensitive data or show signs of vulnerabilities in the HTML content. Overall, the website is professional and trustworthy for its intended purpose but would benefit from enhanced privacy compliance and security hardening. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, implementing security headers, and providing clear incident response contacts to improve trust and compliance.

D

Divadlo Hybernia

hybernia.eu

43

Divadlo Hybernia is a Czech theatre offering cultural performances and entertainment services, targeting a general audience interested in theatre arts. The website is built on WordPress and employs modern web technologies including Google Tag Manager, Microsoft Clarity, and FontAwesome for icons. The site is well-structured with good SEO and mobile optimization, providing a professional user experience. However, it lacks explicit privacy and cookie policies, and no direct contact information is found in the analyzed content. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. Overall, the domain appears legitimate though WHOIS data is privacy protected, which is common for small businesses. Strategic improvements in privacy compliance and security practices are recommended.

D

Divadlo Na Fidlovačce

fidlovacka.cz

45

Divadlo Na Fidlovačce is a Czech theater company focused on providing theatrical performances and cultural entertainment. The website showcases their events and productions, targeting a general audience interested in theater arts. The business operates in the hospitality sector, specifically cultural entertainment, with a medium-sized presence in the regional market. The site uses modern web technologies including Vue.js and MonsterCMS, with integrations for Google Tag Manager and Facebook Pixel for marketing and analytics purposes. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership. Security posture is weak due to missing security headers and lack of visible security policies. Privacy compliance is minimal, with no detected privacy or cookie policies, which is a concern for GDPR adherence. Overall, the website is professionally designed and functional but requires improvements in security and privacy transparency to enhance trust and compliance.

H

Hudební divadlo Karlín

hdk.cz

55

Hudební divadlo Karlín is a musical theater company based in Prague, Czech Republic, offering a variety of theatrical performances and cultural events. The website serves as a platform for event information, ticket sales, and e-commerce related to the theater's offerings. It targets a general audience interested in musical theater and cultural activities. The business model revolves around ticket sales, merchandise, and educational programs. The site is well-branded and consistent, reflecting a medium-sized cultural institution with a solid local presence. Technically, the website employs modern web technologies including Bootstrap, jQuery, and various third-party libraries for UI components and tracking. It uses HTTPS and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and TikTok Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and event listings. From a security perspective, the site uses HTTPS but lacks explicit security headers and a published security policy or incident response contacts. The absence of WHOIS data for the domain reduces trust and raises questions about domain registration legitimacy. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the security posture is moderate but could be improved with better transparency and technical controls. The overall risk is moderate; the site appears legitimate and functional but would benefit from enhanced privacy disclosures, security headers, and verified domain registration information to increase trust and compliance.