Security Directory

S

Schweizer Alpen-Club SAC

sac-cas.ch

55

The Schweizer Alpen-Club SAC is Switzerland's leading alpine sports association with approximately 180,000 members. The organization focuses on promoting mountain sports, providing safety and training, and managing memberships and events. Their market position as the foremost alpine club in Switzerland is well established, supported by a comprehensive digital presence. The website is built on TYPO3 CMS, integrating modern technologies such as Cookiebot for consent management, Stripe for payment processing, and analytics tools like Google Analytics and Facebook Pixel. The technical infrastructure reflects a mature digital setup with good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not publicly detailed. Privacy compliance is robust, with clear cookie and privacy policies and GDPR-aligned consent mechanisms. Overall, the website demonstrates a high level of professionalism and trustworthiness, suitable for a large non-profit organization. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure information, and enhancing accessibility features to further improve compliance and user trust.

C

Cascade Rescue Company

cascade-rescue.com

60

Cascade Rescue Company is a specialized manufacturer and retailer of high-quality rescue equipment designed for professionals such as fire departments, air operations teams, helicopter rescue units, ski patrols, and military personnel. Established in 2008, the company operates a professional e-commerce platform offering a wide range of products and training services. Their market position is that of a trusted niche provider with strong industry certifications and partnerships. Technically, the website is built on the BigCommerce platform using modern web technologies and integrates multiple marketing and analytics tools, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforcement and domain transfer protections, though improvements such as DNSSEC and security headers could enhance it further. Privacy compliance is partial, with a privacy policy present but lacking explicit cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, with room for security and privacy enhancements.

B

Barion

barion.com

74

Barion is a payment service provider offering comprehensive payment solutions, programmatic advertising, and advanced analytics to help businesses grow. The company targets businesses and developers seeking efficient payment integration with competitive fees and insightful data. The website demonstrates a modern technical infrastructure using Next.js and Builder.io CMS, with integration of popular analytics and marketing tools such as Google Analytics and Facebook Pixel. The site is well-designed, mobile-optimized, and provides a professional user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are missing. WHOIS data is not available, which raises some concerns about domain registration transparency. Overall, the website is credible and trustworthy but would benefit from enhanced privacy and security disclosures.

H

Hotel Královka

hotelkralovka.cz

67

Hotel Královka is a hospitality business located in the Jizera Mountains, offering accommodation, gastronomy, wellness, and event services. The website targets vacationers including families, couples, and corporate clients seeking mountain retreats. The business operates a modern website with multilingual support and an integrated e-shop for gift vouchers. Technically, the site uses a Solidpixels CMS platform with modern analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. The website is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is generally strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers are missing and no explicit security policy or incident response information is published. WHOIS data is unavailable, which reduces trustworthiness assessment and suggests privacy protection or registration issues. Overall, the site is professional and trustworthy but could improve transparency and security documentation.

P

PIVOVAR SVIJANY, a.s.

pivovarsvijany.cz

49

Pivovar Svijany, a.s. is a historic Czech brewery established before 1564, specializing in traditional Czech beer production. The company operates a professional website showcasing its product range, events, and retail options including an e-shop. The site targets adult consumers with age verification and complies with relevant privacy and cookie regulations. Technically, the website employs modern tracking and analytics tools such as Google Analytics and Facebook Pixel, integrated via Google Tag Manager. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and branding consistency. Security posture is solid with HTTPS enforced and privacy mechanisms in place, though explicit security headers and incident response information are absent. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the company's established market presence and social media footprint.

S

Swix

swix.cz

70

Swix.cz is a specialized e-commerce retailer focused on sports equipment, particularly for winter sports such as skiing and cross-country skiing, offering products from the Swix brand. The website targets Czech-speaking customers primarily in the Czech Republic and provides a professional online shopping experience with clear navigation, product categories, and a blog for customer engagement. The business model centers on direct online sales supported by a physical sales network. Technically, the site employs modern JavaScript frameworks, integrates multiple analytics and marketing tools including Google Tag Manager, Facebook Pixel, Microsoft Clarity, and Snowplow Analytics, and uses CDN services for performance optimization. The site is mobile-optimized and includes accessibility features, although these could be enhanced further. Security-wise, the site enforces HTTPS, uses Sentry for error monitoring, and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, the absence of WHOIS data for the domain reduces the overall trust score, though the website content and contact details suggest a legitimate business. Overall, the site presents a secure, compliant, and user-friendly platform for sports equipment retail.

A

Active Radio ČR

evropa2.cz

43

Evropa 2 is a prominent Czech radio station offering a comprehensive digital platform that includes live streaming, music charts, articles, quizzes, videos, and contests. The website targets a broad audience interested in entertainment, lifestyle, and music, positioning itself as a leading media outlet in the Czech Republic. The business operates under the parent company Active Radio ČR, with a strong brand presence and consistent content quality. Technically, the site leverages modern web technologies including React (Next.js), integrates multiple advertising and analytics services, and employs consent management tools to comply with privacy regulations. Security posture is solid with HTTPS enforcement and security headers, though there is room for improvement in content security policies and incident response transparency. The absence of WHOIS data limits domain trust assessment but the website's professional presentation and legal disclosures support its legitimacy. Overall, Evropa 2 demonstrates a mature digital presence with good security and privacy practices, serving a large audience in the media sector.

G

Generali Investments CEE, investiční společnost, a.s.

generali-investments.cz

43

Generali Investments CEE is a prominent investment company operating primarily in the Czech Republic and Central Europe, offering a wide range of investment funds and programs in multiple currencies including CZK and EUR. The company is part of the larger Generali Group, a well-known global insurance and financial services provider. Their website demonstrates a mature digital presence with comprehensive product information, client services, and multilingual support. Technically, the site uses modern web technologies such as Bootstrap and JavaScript libraries, and implements HTTPS with good security practices, although some security headers could be improved. Privacy compliance is well addressed with clear cookie consent mechanisms and detailed privacy policies, reflecting adherence to GDPR standards. The absence of WHOIS data is a limitation but does not detract significantly from the overall legitimacy given the strong brand presence and professional content. Overall, the site is secure, user-friendly, and trustworthy, serving a large client base in the financial sector.

4

4WORKS

posunemevasvys.cz

47

4WORKS is a Czech-based digital agency specializing in creating professional websites, e-commerce platforms, applications, and comprehensive online marketing services. With a decade of experience, they position themselves as a trusted partner for businesses seeking to enhance their online presence. The website showcases a modern, well-structured design with clear navigation and extensive service offerings, targeting primarily business clients in the Czech Republic. Technically, the site is built on WordPress using the Avada theme, integrating multiple analytics and marketing tools such as Google Analytics, Matomo, Hotjar, and Facebook Pixel, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and several security headers present, although explicit security policies and vulnerability disclosure mechanisms are absent. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the professional presentation and active content mitigate this risk. Overall, the site demonstrates a solid digital maturity with room for improvement in privacy compliance and security transparency.

B

Bazén Chodov - Aqua Sport Club s.r.o.

aquasportclub.cz

56

Bazén Chodov - Aqua Sport Club s.r.o. operates a local swimming pool and wellness center located in the Czech Republic, targeting residents of the Jižní Město area. The website serves as the official online presence, offering information about swimming facilities, wellness services, and swimming courses. The business appears to be a small-scale service provider focused on community health and recreation. Technically, the website is built on WordPress with common plugins such as Yoast SEO and LayerSlider, and it integrates Facebook Pixel for marketing analytics. The site is accessible, mobile-optimized, and contains structured data for SEO benefits. Security posture is moderate with HTTPS enabled but lacks visible security headers and detailed privacy or cookie policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and branding suggest a legitimate local business. Overall, the site is functional and professional but would benefit from enhanced security practices and compliance documentation.

C

Candid

guidestar.org

60

Candid operates GuideStar, a leading nonprofit data platform providing comprehensive information on over 1.8 million IRS-recognized tax-exempt organizations. The platform serves donors, grantmakers, nonprofits, and businesses by offering nonprofit profiles, Seal of Transparency, research tools, and API access. The website is professionally designed, mobile-optimized, and integrates advanced analytics and marketing technologies such as Google Tag Manager, Facebook Pixel, Segment Analytics, and Visual Website Optimizer. Security posture is strong with HTTPS enforced and secure forms, though explicit security headers and policies are not publicly disclosed. WHOIS data is unavailable due to privacy or query failure, but the domain and website content align with a legitimate, established nonprofit entity. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity.

M

Mutiara Pearl, s.r.o.

buka.cz

51

Buka Jewelry, operated by Mutiara Pearl, s.r.o., is a specialized retailer of authentic pearl jewelry based in the Czech Republic. The company emphasizes handcrafted pearl jewelry sourced directly from trusted suppliers in Japan, China, Indonesia, and French Polynesia, ensuring quality and authenticity. Their business model combines an e-commerce platform with a physical store in Prague, targeting consumers seeking elegant and certified pearl products. The website is professionally designed, multilingual, and offers a seamless shopping experience with clear product categorization and customer service support. Technically, the website leverages modern e-commerce technologies including the Upgates platform, Google Analytics 4, Google Tag Manager, Facebook Pixel, and Smartsupp Live Chat, indicating a mature digital infrastructure. The site is optimized for performance and mobile responsiveness, with good SEO and accessibility practices. Security is well-handled with HTTPS and consent management for cookies, although explicit security headers and incident response disclosures are lacking. From a security perspective, the site shows a good posture with no evident vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain reduces trustworthiness and raises questions about domain registration transparency. No dedicated security policy or vulnerability disclosure mechanisms are publicly available, which could be improved to enhance trust. Overall, Buka Jewelry presents a trustworthy and professional online presence for a niche luxury retail business. Strategic improvements in domain registration transparency and security disclosures would further strengthen their security posture and business credibility.

A

ARVA

arva-equipment.com

53

ARVA is a European company specializing in avalanche safety equipment, including avalanche airbags, transceivers, and backpacks, with over 40 years of expertise. The company targets mountain sports enthusiasts and professionals, offering both products and services such as maintenance, rental, and cartridge refills. Their website reflects a mature digital presence built on Prestashop and React technologies, integrating multiple marketing and analytics tools to engage users and track performance. Security posture is solid with HTTPS and secure AJAX calls, though improvements in security headers and privacy compliance are recommended. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, but the website content and branding strongly indicate a reputable business. Overall, the site is professional, content-rich, and user-friendly, but could enhance trust by publishing privacy and terms policies and improving transparency around data protection.

P

Pigeon Mountain Industries, Inc.

pmirope.com

72

PMI Rope, operated by Pigeon Mountain Industries, Inc., is a well-established manufacturer and retailer specializing in life safety ropes, gear, and equipment for vertical applications such as rescue, climbing, and rope access. With over 40 years of industry experience, the company serves a specialized audience including rescuers, climbers, and technicians. Their business model combines product manufacturing with e-commerce sales and training services, positioning them as a niche leader in safety and rescue equipment. The website reflects a professional and consistent brand image with comprehensive product offerings and educational resources. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern JavaScript libraries and marketing tools. It is hosted behind Cloudflare DNS and CDN services, ensuring good performance and availability. Security posture is solid with HTTPS and domain transfer protections, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is basic, lacking explicit privacy and cookie policies or consent mechanisms, which should be addressed to meet GDPR and other regulations. Overall, the site is trustworthy, professional, and well-positioned in its market niche.

R

Recco

recco.com

62

Recco AB is a well-established technology company specializing in search and rescue technology, providing solutions that make individuals searchable by rescue professionals worldwide. The company operates a partner network integrating their technology into outdoor products, targeting outdoor enthusiasts and safety-conscious consumers. The website reflects a mature digital presence with a professional design, clear business messaging, and a focus on safety technology. Technically, the site is built on WordPress with WooCommerce and employs modern tracking and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. Security posture is strong with HTTPS enforced, security headers present, and no exposed sensitive data detected. Privacy compliance is well addressed with comprehensive privacy and cookie policies and active consent mechanisms. Overall, the website and domain data indicate a legitimate, credible business with a solid market position in the technology sector.

The website www.parkovanivbrne.cz serves as the official information portal for the new parking system in Brno, Czech Republic. It provides comprehensive details about parking zones, regulations, payment options, and mobility funds targeted at residents, subscribers, and visitors. The site is positioned as a municipal service platform, aiming to simplify parking management and user experience in the city. Technically, the site employs modern web technologies including HTML5, CSS3, and JavaScript, with integrations of Google Tag Manager, Google Analytics, Facebook Pixel, Hotjar, Smartlook, and Cookiebot for analytics and marketing purposes. The site is mobile optimized and features a cookie consent mechanism compliant with GDPR, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses cookie consent to manage user privacy. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, suggesting room for improvement. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data reduces trust slightly but does not negate the official nature of the site. Overall, the website presents a professional, trustworthy, and user-friendly platform for parking information in Brno. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and providing clearer contact information to improve business credibility and user trust.

W

WELL OKNA s.r.o.

wellokna.cz

58

WELL OKNA s.r.o. is a Czech Republic-based manufacturer and supplier specializing in plastic and aluminum windows and doors, operating since 1991. The company targets residential and commercial customers primarily in the Plzeňský kraj region, offering products made from SCHÜCO profiles along with related accessories such as shading and ventilation technology. The website reflects a well-established regional business with a clear focus on manufacturing and direct sales. Technically, the website is built on WordPress with a modern tech stack including popular plugins for SEO, analytics, and cookie compliance, indicating a moderate level of digital maturity. Security posture is solid with HTTPS, security headers, and reCAPTCHA protections, though the absence of a public security policy and incident response contacts suggests room for improvement. Overall, the site is professional, trustworthy, and compliant with GDPR, with no signs of malicious activity or content blocking.

B

ByznysWeb s.r.o.

byznysweb.cz

62

ByznysWeb s.r.o. operates a mature and professional e-commerce platform focused on enabling entrepreneurs and small to medium businesses to create and manage performant e-shops and websites without programming expertise. The platform offers multilingual support, migration services, and comprehensive hosting and support, positioning itself as a trusted player in the Czech and Slovak markets since 2003. Technically, the website employs modern web technologies including Google Tag Manager, Facebook Pixel, and responsive design, ensuring good performance and user experience across devices. Privacy and cookie consent mechanisms are robust and GDPR compliant, reflecting a strong commitment to user data protection. Security posture is solid with HTTPS enforced and consent-based script loading, though explicit security headers could be improved. The absence of WHOIS data is a notable gap, slightly impacting trust but mitigated by the professional and transparent web presence. Overall, the site demonstrates high quality, trustworthiness, and business credibility.

W

WEBHOUSE s.r.o.

vismo.cz

44

WEBHOUSE s.r.o. is a well-established Czech company specializing in providing web solutions and editorial systems primarily for public administration entities such as cities and municipalities. With a history dating back to 1997 and managing over 2,000 websites including more than 30% of Czech towns, the company holds a strong market position as a leading supplier in its sector. Their flagship product, the vismo 6 editorial system, emphasizes ease of use, modern technology, and compliance with current legislation. The website reflects a professional and consistent brand image targeting government clients. Technically, the website employs a modern JavaScript stack including Vue.js and Mustache.js, integrates advanced analytics and tracking tools such as Google Analytics, Facebook Pixel, and Smartlook, and enforces HTTPS with Google reCAPTCHA v3 for security. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers could be improved. Cookie consent mechanisms are implemented in compliance with GDPR. From a security perspective, the site demonstrates good practices with encrypted connections and user consent for tracking, but lacks explicit published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. WHOIS data confirms the domain's legitimacy and long-term presence, consistent with the company's claims. Overall, the website presents a trustworthy, professional, and secure digital presence suitable for its government-focused audience, with room for enhancement in security policy transparency and header configurations.

W

WEBHOUSE s.r.o.

webhouse.cz

52

WEBHOUSE s.r.o. is a well-established Czech company specializing in the development and maintenance of websites and related digital services primarily for public administration, including municipalities and cities. Founded in 1997, the company holds a strong market position serving over 2,000 websites and more than 30% of Czech towns. Their offerings include responsive and accessible web design, custom graphic solutions, and mobile applications, supported by their proprietary Vismo CMS platform. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript frameworks including Vue.js and Mustache.js, and integrates advanced analytics and tracking tools like Google Analytics, Facebook Pixel, and Smartlook. The site is mobile-optimized and demonstrates good accessibility compliance. Security measures include HTTPS enforcement, reCAPTCHA integration, and cookie consent mechanisms, although explicit security headers and a formal security policy are not evident. From a security perspective, the site maintains a solid posture with no visible vulnerabilities or exposed sensitive data. However, improvements could be made by publishing a dedicated security policy, incident response contacts, and implementing additional security headers. Privacy compliance is well addressed through comprehensive privacy and cookie policies with GDPR-aligned consent mechanisms. Contact information is complete and transparent, enhancing business credibility. Overall, WEBHOUSE s.r.o. presents a trustworthy and professional digital presence aligned with its business focus. The website is secure, compliant, and user-friendly, supporting the company’s leadership in the Czech public sector web services market.

W

WEBHOUSE s.r.o.

obce.cz

53

WEBHOUSE s.r.o. is a well-established Czech company specializing in providing web solutions and related services primarily for municipalities and public administration. With a market presence since 1997 and managing over 2,000 websites including services for more than 30% of Czech towns, the company holds a strong position in its niche. Their offering includes a mobile application 'Města a obce' that delivers municipal information directly to citizens' smartphones, emphasizing ease of use, GDPR compliance, and no user data collection. The website reflects a professional and consistent brand image with clear contact channels and social media engagement.

B

Blue Partners s.r.o.

realitniportalpraha.cz

62

The Real estate portal of Prague is an official municipal platform providing listings for flats, houses, nonresidential spaces, lands, and projects managed by the city of Prague. It targets citizens and potential tenants interested in municipal assets, offering transparent access to property information and bidding opportunities. The portal is operated by Blue Partners s.r.o., a company specializing in such services, and is well integrated with Prague's official digital ecosystem. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Google Analytics, Facebook Pixel, and Google reCAPTCHA to ensure usability, tracking, and security. The site is hosted via Active24, a reputable provider, and uses HTTPS with basic security measures. However, it lacks advanced security headers and a published security policy. Privacy compliance is partially addressed with a cookie consent banner and opt-out mechanism, but no explicit privacy policy or terms of service are found on the main page. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve in security and privacy transparency.

K

Kulturní centrum Zahrada

kczahrada.cz

42

Kulturní centrum Zahrada is a small, community-focused cultural and social center based in Prague 11, Czech Republic. It offers a broad range of cultural events including concerts, theater, film screenings, educational programs, workshops, and leisure activities targeting a diverse audience from children to seniors. The website reflects a well-maintained digital presence with clear navigation, multilingual support, and integration of event management and ticketing systems. Technically, the site is built on WordPress using the Avada theme and several popular plugins, with modern JavaScript libraries and tracking tools implemented. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place, although no explicit security policy or incident response contacts are published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, serving as a reliable information hub for its community.

H

Hvězdárna a planetárium Brno, p. o.

hvezdarna.cz

45

Hvězdárna a planetárium Brno is a public observatory and planetarium institution located in Brno, Czech Republic, providing astronomy education, public programs, and cultural events. It operates under the statutory city of Brno and targets the general public, schools, and astronomy enthusiasts. The website reflects a well-maintained digital presence with clear navigation, multilingual support, and rich content about events and educational offerings. Technically, the site is built on WordPress with modern plugins for GDPR compliance and tracking, including Facebook Pixel for marketing purposes. The site is mobile optimized and performs moderately well. From a security perspective, the website uses HTTPS with good SSL configuration and cookie consent mechanisms. However, it lacks advanced security headers and does not publish explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with clear cookie and privacy policies in Czech language. Business credibility is supported by official city affiliation and multiple partner organizations displayed on the site. Overall, the site is safe, professional, and trustworthy with no adult or questionable content. The lack of WHOIS data is due to privacy protection, which is justified for this type of public institution. Recommendations include enhancing security headers, publishing vulnerability disclosure and incident response information, and maintaining ongoing compliance with privacy regulations.

A

ArtFocus

artlogo.biz

57

ArtLogo, operated by ArtFocus, is a Slovak-based small business specializing in professional and creative logo design services. The website offers multiple tiered packages for logo creation, including express options and additional branding materials such as business cards and letterheads. The company targets businesses seeking custom and original branding solutions, emphasizing artistic and tailored designs. The site is well-structured with good mobile responsiveness and clear navigation, supporting a positive user experience. Technically, the website uses a proprietary CMS (ArtFocus Admin System) and integrates common analytics and marketing tools such as Google Analytics, Facebook Pixel, and Crazy Egg. However, it lacks visible security headers and explicit privacy or cookie policies, which are important for compliance and user trust. No direct contact emails or phone numbers are present in the HTML, which may hinder user communication. Overall, the site demonstrates moderate digital maturity with room for improvement in security and privacy compliance.

A

ArtFocus

artlogo.sk

55

ArtLogo is a Slovak-based small business specializing in professional and creative logo design services. The company offers multiple tiered packages for logo creation, including express options and additional graphic design services such as business card and logo manual design. The website demonstrates a consistent brand presence with good content quality and user experience, targeting businesses seeking custom logo solutions. Technically, the site uses a proprietary CMS (ArtFocus Admin System) and integrates common analytics and marketing tools such as Google Analytics, Facebook Pixel, and CrazyEgg. Mobile optimization and navigation are well implemented, though accessibility features are basic. Security posture is moderate with no visible HTTPS enforcement or security headers in the HTML content, and no privacy or cookie policies are present, indicating gaps in compliance and security transparency. Overall, the site is functional and professional but would benefit from enhanced security practices and privacy compliance to improve trust and regulatory adherence.

H

Health of the Ukranian people ICF

houp.org

49

Health of the Ukranian people ICF is an international charitable foundation established in 2009, focused on supporting healthcare access and innovation in Ukraine. The foundation aims to improve population health by providing quality medical care, educating doctors, and fostering systematic charity efforts. The website reflects a non-profit healthcare mission with a consistent brand and good content quality. Technically, the site is built on WordPress using the Divi theme, integrating multiple analytics and tracking services such as Google Analytics, Microsoft Clarity, TikTok, and Facebook pixels. While the site uses HTTPS and has a stable domain registration, it lacks key privacy and cookie policies, and security headers are not detected, indicating room for security and compliance improvements. No WAF or blocking mechanisms were detected, and the content is safe for general audiences.

B

Blue / Yellow

blue-yellow.lt

59

Blue / Yellow is a Lithuanian non-governmental organization established in 2014 that provides critical supplies and support to Ukrainian soldiers and volunteers in their fight against Russian aggression. The organization operates multiple fundraising campaigns focused on drones, medical aid, vehicles, and training, positioning itself as a key humanitarian aid facilitator with a strong presence in Lithuania and active media coverage. The website is built on WordPress with modern web technologies and integrates analytics and tracking tools such as Google Tag Manager and Facebook Pixel. Security posture is adequate with HTTPS and Cloudflare DNS, but lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is partial, with cookie consent implemented but no visible privacy or terms of service pages. Overall, the site is professional, trustworthy, and well-branded, serving a general audience interested in supporting Ukraine.

R

Revived Soldiers Ukraine

rsukraine.org

57

Revived Soldiers Ukraine is a small non-profit organization dedicated to providing aid to wounded Ukrainian soldiers. The organization operates primarily through donations and awareness campaigns, positioning itself as a trusted charity with a clear mission. The website reflects a professional and consistent brand image, with clear calls to action for donations and informative content about their work. The target audience is the general public interested in supporting humanitarian efforts related to the Ukraine crisis. Technically, the website is built using modern web technologies including Vue.js and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, Microsoft Clarity, and HubSpot. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. However, there is room for improvement in accessibility and privacy compliance, particularly regarding cookie consent mechanisms. From a security perspective, the site enforces HTTPS and does not expose sensitive data in its HTML content. While no explicit security policies or incident response contacts are provided, the overall security posture is solid with no visible vulnerabilities. The lack of WHOIS data limits domain registration trust verification, but the presence of trust indicators such as Guidestar certification and IRS 501(c)(3) status supports legitimacy. Overall, the website presents a low-risk profile with strong business credibility and a good technical foundation. Strategic recommendations include implementing a cookie consent banner, adding terms of service and security policy pages, and enhancing accessibility features to improve compliance and user trust.

U

United Help Ukraine

unitedhelpukraine.org

50

United Help Ukraine is a registered 501(c)(3) non-profit organization founded in 2014, dedicated to supporting the Ukrainian people through humanitarian aid, tactical medicine, and medical assistance. The organization has a strong market position as a trusted charity with multiple programs targeting defenders, medical aid, and humanitarian welfare. Their website is professionally designed, content-rich, and optimized for user engagement and donations. Technically, the site is built on WordPress with modern plugins and tracking tools, hosted by InMotion Hosting, and employs HTTPS with good security practices, although some security headers and DNSSEC are missing. Privacy compliance is well addressed with a cookie consent mechanism, but explicit privacy and security policies are not clearly found. The domain registration data aligns well with the organization's history, enhancing trustworthiness. Overall, the website demonstrates a mature digital presence suitable for its non-profit mission.

R

Razom

razomforukraine.org

69

Razom is a well-established non-profit organization dedicated to supporting Ukraine through humanitarian aid, advocacy, cultural promotion, and community engagement. The website reflects a mature digital presence with comprehensive program descriptions and active social media integration, positioning Razom as a credible and impactful entity in its sector. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good performance and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and privacy compliance are recommended. The absence of WHOIS data limits domain trust analysis but is likely justified given the organization's geopolitical context. Overall, Razom's website is professional, trustworthy, and effective in communicating its mission and services.

Т

Таблеточки

tabletochki.org

66

Tabletochki is a well-established Ukrainian non-profit charitable foundation dedicated to supporting children with cancer and their families. Founded in 2012, it operates as a leading pediatric oncology charity in Ukraine, providing direct aid, hospital support, medical education, and advocacy. The website reflects a mature digital presence with comprehensive content, clear navigation, and active engagement channels including social media and donation platforms. Technically, the site is built on WordPress, uses modern web technologies, and is hosted behind Cloudflare for performance and security. Privacy and cookie consent mechanisms are robust and GDPR compliant, reflecting a strong commitment to user data protection. Security posture is good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and additional HTTP security headers could be implemented. Overall, the site is professional, trustworthy, and well-positioned to serve its mission and audience.

У

Українська Жіноча Варта

uavarta.org

61

Українська Жіноча Варта is a Ukrainian non-profit organization dedicated to women's resistance movement, providing training in self-defense, medical skills, and survival during combat situations, alongside daily news updates about the war in Ukraine. The organization targets civilians and the general public interested in these services. The website is built on WordPress with a modern plugin ecosystem including WooCommerce, Elementor, and event calendar tools, hosted by Hosting Ukraine LLC and utilizing Cloudflare DNS and CDN services. The site is multilingual and optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS enforced and use of Cloudflare, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is limited as no explicit privacy or cookie policies were found. Contact information includes a verified phone number and multiple social media profiles. Overall, the website is professional, trustworthy, and safe for general audiences.

C

CREATIVE sites

creativeshop.sk

57

CREATIVE sites is a Slovak-based company specializing in providing a professional e-commerce platform named CREATIVE shop. The platform offers a comprehensive suite of services including an intuitive CMS, custom UX and graphic design, continuous feature development, bespoke programming, e-commerce and SEO consulting, and dedicated customer support. Positioned as one of the top e-commerce solutions in Slovakia, CREATIVE sites targets ambitious entrepreneurs and businesses seeking tailored online shop solutions with integrated marketing and automation capabilities. Technically, the website employs modern JavaScript libraries, integrates analytics and tracking tools such as Google Tag Manager and Facebook Pixel, and uses Amazon Cloudfront CDN for content delivery. Security measures include HTTPS enforcement, Google reCAPTCHA v3, CSRF tokens in forms, and Sentry for error monitoring, reflecting a mature security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The WHOIS data aligns with the website's business claims, supporting legitimacy and trustworthiness. Overall, the website demonstrates strong professionalism, technical maturity, and business credibility.

S

SEIGI

seigi.eu

44

SEIGI is a specialized technology company focused on developing and selling modules and integrations for PrestaShop and thirty bees e-commerce platforms. Their website offers a variety of extensions aimed at enhancing online store functionality and marketing capabilities. The company targets e-commerce store owners seeking to improve their platform capabilities through specialized software modules. Technically, the website employs a mature but somewhat dated technology stack including Bootstrap 3 and jQuery 1.7, supplemented by modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Hotjar, and Matomo. While the site is well-structured and mobile-optimized, it lacks some key compliance documents such as a privacy policy and terms of service. Security posture is adequate with HTTPS enforced and cookie consent implemented, but the absence of security headers and use of outdated libraries present potential risks. Overall, SEIGI appears to be a legitimate small technology business with a focused market niche, but should improve privacy compliance and update technical components to enhance security and trust.

Ł

Łódzka Organizacja Turystyczna

ilovelodz.pl

41

The website ilovelodz.pl is an official e-commerce platform operated by the Łódzka Organizacja Turystyczna, offering a variety of souvenirs, gifts, and merchandise themed around the city of Łódź, Poland. It targets tourists and local residents interested in regional products. The site is built on the Prestashop CMS platform and incorporates modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel for marketing and analytics purposes. The design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. Security measures include HTTPS encryption, cookie consent mechanisms compliant with GDPR, and secure session management. However, some security headers could be improved, and DNSSEC is not enabled. The domain registration data is consistent with the business profile, indicating legitimacy. Overall, the site demonstrates a solid digital presence with good privacy and security practices, suitable for its business model and audience.

D

DroitThemes

droitthemes.com

49

DroitThemes is a specialized provider of premium WordPress themes, plugins, and templates, focusing on enhancing the WordPress ecosystem with high-quality Elementor addons and multipurpose themes. Established in 2016, the company targets WordPress users and developers seeking professional tools to build websites efficiently. Their market position is supported by positive customer testimonials, active social media presence, and partnerships with marketplaces like Themeforest. Technically, the website is built on WordPress with modern plugins such as Elementor and Yoast SEO, integrating advanced marketing and analytics tools including Google Analytics, Facebook Pixel, and Twitter Ads. The infrastructure is hosted with NameCheap and uses secure HTTPS connections, though DNSSEC is not enabled. Security measures include reCAPTCHA on forms and domain transfer protection, but the site lacks some HTTP security headers and explicit security policies. Privacy compliance is partially met with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the website demonstrates a good balance of business credibility, technical implementation, and security posture, suitable for its niche audience.

M

MultiSport Benefit, s.r.o.

multisport.cz

58

MultiSport Benefit, s.r.o. operates a well-established employee benefit program in the Czech Republic, providing access to over 1900 sports and relaxation facilities via the MultiSport card. The company targets employers, employees, students, and partners, positioning itself as a leading provider in the corporate wellness sector. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. Technically, the site is built on WordPress, leveraging modern analytics and marketing tools, hosted on Azure DNS infrastructure, and optimized for mobile and SEO. Security posture is strong with HTTPS, cookie consent, and no visible vulnerabilities, though formal security policies and incident response details are absent. Overall, the domain registration data aligns with the business history, supporting legitimacy and trustworthiness.

A

ArtFocus

artlogo.cz

57

ArtLogo.cz is a Czech-based professional graphic design service specializing in logo creation and branding solutions. The company offers a range of tiered logo design packages tailored to different client needs, including express delivery options. The website demonstrates a solid market presence with a portfolio of references and a clear focus on creative, custom logo design services. Technically, the site is built on a custom CMS (ArtFocus Admin System) and integrates multiple third-party analytics and marketing tools such as Google Analytics, CrazyEgg, and Facebook Pixel. The site is mobile responsive and well-structured, providing a good user experience. However, the absence of privacy and cookie policies, lack of visible security headers, and missing WHOIS domain registration data reduce the overall trust and compliance posture. Security practices could be improved by implementing standard HTTP security headers and enhancing privacy compliance. Overall, the site is functional and professional but would benefit from stronger security and compliance measures.

R

Retino

retino.com

54

Retino is a SaaS company specializing in automating post-purchase care for e-commerce businesses, offering shipment tracking and returns management solutions. The website presents a professional and modern interface, targeting online stores seeking to improve customer satisfaction and operational efficiency. The technical infrastructure leverages modern web technologies including Google Tag Manager, reCAPTCHA Enterprise, and multiple tracking pixels, indicating a mature digital marketing and analytics setup. Security posture is solid with HTTPS and form protections, though explicit security policies and incident response contacts are absent. The missing WHOIS data is a notable anomaly that slightly impacts trust but does not overshadow the professional business presence. Overall, Retino demonstrates a strong market position in e-commerce automation with room for enhanced transparency in security and compliance documentation.

Ł

Łódzka Organizacja Turystyczna

lodz.travel

62

Lodz.Travel is the official tourism portal for the city of Łódź, Poland, managed by the Łódzka Organizacja Turystyczna. The website serves as a comprehensive information hub for tourists, offering details on attractions, accommodations, dining, events, and cultural activities. It targets families, event organizers, and cultural visitors, positioning itself as a key regional tourism platform with government backing and strong social media presence. Technically, the site is built on TYPO3 CMS and leverages a modern JavaScript ecosystem including jQuery, Slick Carousel, and various UI libraries. It integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Google Tag Manager, indicating a mature digital marketing strategy. The site is mobile optimized and accessible, with good SEO practices. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not publish privacy or incident response policies, which are areas for improvement. The WHOIS data is privacy protected, which is typical for organizational domains, and no suspicious patterns were detected. Overall, Lodz.Travel presents a professional, trustworthy, and content-rich platform for promoting tourism in Łódź. Strategic enhancements in privacy transparency and security hardening would further strengthen its posture.

A

ARR - Agentura regionálního rozvoje, spol. s r.o.

crystalvalley.cz

48

Crystal Valley is a regional tourism and cultural heritage platform operated by ARR - Agentura regionálního rozvoje, spol. s r.o., focusing on promoting the glass and jewelry manufacturing traditions of northern Czech Republic. The website serves tourists and cultural enthusiasts by providing rich historical content, event calendars, and visitor information about glass production, museums, and artisan workshops. It holds a strong market position as a regional cultural tourism leader in the Liberec region. Technically, the site employs modern web technologies including jQuery, Bootstrap, Vue.js, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Hotjar. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or suspicious WHOIS patterns were found, and the domain registration aligns well with the business purpose and history. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

K

Kladské pomezí o.p.s.

festivalzazitku.cz

51

Festival zážitků is a cultural tourism initiative focused on promoting the Czech-Polish border region through themed events and experiences. The project is managed by Kladské pomezí o.p.s., a small non-profit organization dedicated to regional cultural heritage and tourism. The website serves as an information portal for visitors, offering event details, a mobile app, and interactive content to enhance tourist engagement. The site is multilingual, supporting Czech, Polish, German, and English languages, reflecting its cross-border nature. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Hosting is provided by REG-GRANSY, a known registrar and hosting provider, with a domain age consistent with the project's timeline. Security posture is solid with HTTPS enforced and a cookie consent mechanism in place, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with a clear privacy policy and cookie settings available to users. However, no explicit terms of service or security incident contact information is provided. Overall, the website is professional, trustworthy, and well-positioned to serve its target audience of cultural tourists. Strategic improvements could focus on enhancing security headers, publishing a security policy, and providing clearer contact information for security or business inquiries.

K

KarelCapek.cz

karelcapek.cz

49

The website karelcapek.cz is a cultural and historical informational platform dedicated to the lives and works of the Čapek siblings, notable Czech writers and artists. It serves as a niche educational resource targeting general audiences interested in Czech literature, history, and cultural heritage. The site offers multimedia content, interactive maps, and event updates, positioning itself as a trusted source within its domain. Technically, the site employs a moderate technology stack including jQuery, Modernizr, Google Analytics, and Facebook Pixel, hosted under a reputable registrar. The website is mobile-optimized with good SEO and accessibility basics, though some modernization opportunities exist. Security posture is adequate with HTTPS and cookie consent mechanisms implemented, but lacks advanced security headers and explicit incident response policies. Overall, the site is legitimate, well-established since 2009, and maintains a consistent brand presence with active social media engagement.

K

Kladské pomezí, o.p.s.

toulavybatoh.cz

48

Kladské pomezí, o.p.s. operates a regional tourism promotion website focused on family-friendly and school-related activities in the Kladské pomezí area of the Czech Republic. The organization provides downloadable maps, event information, and supports local tourism through partnerships with regional and national tourism bodies. The website is professionally designed with good content quality and clear navigation, targeting families, schools, and tourists interested in cultural and natural attractions. Technically, the site uses a moderate technology stack including jQuery, Google Maps API, Google Analytics, and Facebook Pixel. Hosting is managed via REG-GRANSY with stable domain registration since 2014. The website is mobile optimized and implements cookie consent mechanisms, though some modern security headers and updated libraries could improve the technical posture. From a security perspective, the site enforces HTTPS and uses cookie consent for privacy compliance. No critical vulnerabilities or exposed sensitive data were found. However, the absence of explicit security policies and incident response information suggests room for improvement in security maturity. Privacy compliance is good with a clear privacy policy and cookie management. Overall, the website presents a low-risk profile with strong legitimacy indicators and a clear business purpose. Strategic recommendations include enhancing security headers, updating JavaScript libraries, adding terms of service, and improving accessibility to further strengthen trust and compliance.

A

ARR - Agentura regionálního rozvoje, spol s r.o.

arr-nisa.cz

45

ARR - Agentura regionálního rozvoje, spol s r.o. is a regional development agency based in the Liberec region of the Czech Republic. The organization focuses on providing expert support to the region, its residents, entrepreneurs, and institutions through various projects such as regional development, business incubation, tourism centralization, smart acceleration, and digital innovation hubs. The website reflects a well-established entity with a domain registered since 1998, indicating a long-standing presence in the regional development sector. Technically, the website employs a modern but straightforward technology stack including jQuery, Font Awesome, Swup for page transitions, Google Analytics, and Facebook Pixel for tracking. The site is hosted under a reputable registrar and DNS provider, with HTTPS enabled ensuring secure communications. The design is responsive and user-friendly, optimized for mobile devices, and structured for clear navigation and SEO effectiveness. From a security perspective, the site benefits from HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks explicit security headers and does not provide a cookie consent mechanism despite using tracking pixels, which may pose compliance risks under GDPR. No incident response or security policies are published, limiting transparency in security governance. Overall, the website is professional, trustworthy, and serves its governmental and regional development purpose effectively. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance its security posture and regulatory adherence.

Z

Zapojmevšechny.cz

zapojmevsechny.cz

56

The website zapojmevsechny.cz is an educational support platform primarily targeting teachers and school staff in the Czech Republic. It offers newsletters and resources aimed at supporting heterogeneous groups and special educational needs. The domain is registered since 2018 with a Czech registrar and uses Forpsi nameservers, consistent with its regional focus. Technically, the site employs modern JavaScript libraries, including Vue.js components, Facebook Pixel, and Google Tag Manager for analytics and marketing. The site is mobile-optimized and presents a professional design with clear content relevant to its audience. Security posture is adequate with HTTPS enabled and secure form handling, though it lacks explicit security headers and a cookie consent mechanism. Privacy compliance is partially addressed with a GDPR policy linked, but no cookie banner is present. Contact is primarily via a web form, with no direct emails or phone numbers disclosed. Overall, the site is legitimate, functional, and serves a niche educational community effectively.

A

ArtFocus

artfocus.cz

54

ArtFocus is a small Czech graphic and web design studio based in Prague, offering a range of services including professional website creation, SEO optimization, e-shop development, and advertising solutions. The company targets businesses and individuals seeking to enhance their online and offline presence with modern, clean design and effective marketing strategies. The website demonstrates a good level of professionalism and content quality, showcasing a portfolio of references and clear contact information. Technically, the site uses a mix of JavaScript libraries and tracking tools such as Google Analytics, Facebook Pixel, and Crazy Egg, indicating a moderate level of digital maturity. However, the absence of privacy and cookie policies and missing WHOIS domain registration data highlight compliance and trust concerns. Security posture is moderate with HTTPS usage but lacks important security headers and vulnerability disclosures. Overall, the site is functional and professional but would benefit from improved privacy compliance and security hardening.

A

ArtFocus

artweby.cz

59

Artweby.cz is a Czech-based small business specializing in custom web design and e-commerce solutions, operating under the brand ArtFocus. The company offers tailored websites, CMS-based web solutions, e-shops, and original graphic design services primarily targeting businesses and individuals seeking professional online presence in Prague and the Czech Republic. The website demonstrates a professional and consistent brand image with a good portfolio of client references and social media presence. Technically, the website uses a proprietary CMS named ArtFocus Admin System and incorporates modern JavaScript libraries and frameworks such as jQuery, FlexSlider, and tracking tools including Google Analytics and Facebook Pixel. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate with asynchronous loading of scripts. From a security perspective, the site uses HTTPS and includes multiple third-party tracking scripts but lacks visible security headers and explicit privacy or cookie policies. No forms or direct data collection fields are present on the main page. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and branding suggest a legitimate business. No critical vulnerabilities or adult content were detected. Overall, the site is professionally presented with moderate technical maturity and some gaps in privacy compliance and security best practices. Strategic improvements in privacy disclosures, security headers, and WHOIS transparency would enhance trust and compliance.

Dřevostavitel.cz is a leading Czech independent portal specializing in wooden houses and residential construction. Established in 2011, it offers a comprehensive range of services including expert articles, project catalogs, company directories, and practical tools such as calculators. The portal targets Czech-speaking individuals interested in building or living in wooden houses, positioning itself as a trusted resource in the real estate and construction sector. Technically, the website employs modern web technologies including jQuery, Google Analytics, Facebook Pixel, and a consent management platform to ensure GDPR compliance. While the site is well-structured and mobile-optimized, there is room for improvement in security headers and accessibility features. The security posture is solid with HTTPS enforced and no exposed sensitive data, but the absence of WHOIS data for the domain raises some concerns about domain registration transparency. Overall, the website demonstrates a professional and trustworthy presence with extensive content and good privacy practices.