Security Directory

F

Fromi GmbH

fromi.com

58

Fromi GmbH is an established German company specializing in the wholesale and distribution of cheese specialities and fine foods, with over 50 years of experience and an international reputation. The company targets cheese retailers, food service professionals, and gourmet consumers, offering a wide range of products and services including cheese selections, fine food offerings, and customer support. The website reflects a professional and consistent brand image with multilingual support and comprehensive product information. Technically, the site is built on WordPress with modern plugins and libraries, optimized for mobile and SEO, and includes cookie consent mechanisms. Security posture is strong with HTTPS, obfuscated emails, and no visible vulnerabilities, though security headers could be improved. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust. Strategic recommendations include enhancing security headers, publishing incident response policies, and clarifying domain registration details to improve trust and compliance.

M

Montibello – Skin

montibello.com

65

Montibello is a Spanish-based company specializing in hair care, facial, and body treatment products, targeting professionals in the beauty and aesthetics industry. The website provides product information, professional courses, and inspiration for hairdressers and aesthetic professionals, positioning itself as a reputable brand in the retail beauty sector. The digital presence is built on WordPress with WooCommerce, indicating a mature e-commerce platform with integrated marketing and analytics tools such as Google Tag Manager and Cookiebot for consent management. Security is enhanced by the Wordfence plugin, and HTTPS is enforced, reflecting a good security posture. However, the absence of publicly available WHOIS data raises concerns about domain registration transparency. Additionally, the lack of explicit privacy policy, terms of service, and contact information limits the website's compliance and trustworthiness from a privacy and regulatory perspective. Overall, the website is professionally designed and functional but would benefit from enhanced transparency and compliance documentation.

C

CrossCafe Pražírna

crosscafeprazirna.cz

56

CrossCafe Pražírna is a specialized coffee roasting company based in the Czech Republic, offering high-quality coffee products through both retail and wholesale channels. The company emphasizes craftsmanship and quality, operating its own roasting facility and maintaining a strong online presence with an e-commerce platform. Their product portfolio includes various coffee blends, capsules, teas, and merchandise, targeting coffee enthusiasts, cafes, offices, and restaurants. The website reflects a professional and consistent brand image with clear business information and active social media engagement. Technically, the website is built on the Shoptet e-commerce platform, utilizing modern web technologies such as jQuery, Google Tag Manager, Facebook Pixel, and Microsoft Clarity for analytics and marketing. The site is mobile-optimized with good SEO and accessibility basics. Security practices include HTTPS enforcement and CSRF protection on forms, alongside a cookie consent mechanism compliant with GDPR. However, some security headers like Content-Security-Policy are not explicitly present, and no incident response or vulnerability disclosure information is published. The absence of WHOIS data is a notable gap, limiting the ability to verify domain registration details and ownership, which slightly impacts trustworthiness. Despite this, the website content and business information appear legitimate and professionally maintained. Overall, the site demonstrates a solid digital maturity level with room for security enhancements and transparency improvements.

W

WebActive s.r.o.

webactive.cz

70

WebActive s.r.o. is a Czech Republic based technology company specializing in web development, CMS solutions (notably WebJET CMS), and custom online applications including enterprise intranets and web portals. The company targets businesses and organizations seeking professional web presence and digital solutions. Their market position is that of an established regional service provider with a focus on CMS and tailored web applications. The website demonstrates a professional design with clear navigation and updated content, reflecting a mature digital presence. Technically, the website uses modern web technologies including jQuery, Bootstrap 5, and Font Awesome, running on their proprietary WebJET CMS platform. The site is mobile optimized and includes interactive elements such as a news rotator and live chat integration (Smartsupp). Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, no explicit privacy policy or terms of service pages were found, and security headers are not detected, which are areas for improvement. No vulnerabilities or exposed sensitive data were identified in the HTML content. The lack of WHOIS data reduces domain trustworthiness but the website content and business information appear consistent and professional. Overall, the website presents a low to moderate risk profile with good business credibility and technical implementation. Strategic recommendations include adding explicit privacy and security policies, implementing security headers, and improving WHOIS transparency to enhance trust and compliance.

Z

Zalohujme.cz

zalohujme.cz

48

Zalohujme.cz is a Czech environmental initiative focused on promoting the implementation of a deposit return system for PET bottles and beverage cans in the Czech Republic. The website provides comprehensive information about the benefits of such a system, its operation, and examples from other European countries. It targets the general public, environmental advocates, municipalities, and beverage producers. The platform serves as an educational and advocacy tool to support legislative changes and increase recycling rates. Technically, the website is built on WordPress and employs common web technologies including jQuery, Google Analytics, Google Tag Manager, Facebook Pixel, and Smartlook for user behavior tracking. The site is mobile-optimized with good SEO practices including structured data and meta tags. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks some security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is limited as no explicit privacy or cookie policies or consent mechanisms were found. Contact information is limited to an email address in the header, with no phone numbers or physical addresses provided. Overall, the website is legitimate and professional in its presentation and content, though the absence of WHOIS data and privacy policies slightly reduces trustworthiness. Strategic improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance the site's security posture and user trust.

AIMS (Association of International Marathons and Distance Races) operates a comprehensive website dedicated to global running events, including marathons and ultradistance races. The organization provides race calendars, results, news, and publishes the Distance Running magazine, positioning itself as a key resource for the international running community. The website targets runners, race organizers, and athletics enthusiasts worldwide, offering a membership model and partnerships with sports, photo, registration, and medals partners. Technically, the site uses a mix of JavaScript libraries such as jQuery, Cycle2, Leaflet.js for maps, and Google Analytics for tracking, with a custom or unknown CMS. The site is mobile optimized and has a moderate performance profile.

T

Turundajate Liit ehk TULI

turundajateliit.ee

42

Turundajate Liit ehk TULI is a professional association in Estonia that unites marketing agencies and brands to develop and improve the marketing sector. The organization acts as a connector, promoter, and evaluator within the marketing industry, offering news, events, job postings, training, and competitions such as the Kuldmuna awards. The website reflects a well-established entity with a clear focus on the Estonian marketing community, providing relevant and regularly updated content. Technically, the site is built on WordPress with modern plugins and analytics tools, ensuring good performance and mobile optimization. Security measures include HTTPS, reCAPTCHA on forms, and standard security headers, though explicit security policies and vulnerability disclosures are absent. Overall, the site demonstrates a strong security posture and compliance with privacy regulations, including GDPR. Contact information and social media presence are clearly provided, enhancing business credibility.

S

Supernova

supernova.io

73

Supernova is a technology company providing a SaaS design system platform that integrates design and engineering data to accelerate product development. The platform targets design and engineering teams in medium to large enterprises, offering services such as design system management, code automation, and design tokens. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site uses modern web technologies including Webflow CMS, Google Tag Manager, and Hotjar for analytics and user behavior tracking. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the inability to extract WHOIS data limits domain trust verification, slightly reducing overall business credibility. Overall, the website demonstrates a high level of professionalism and technical maturity with room for improvement in transparency of security and contact information.

A

ADHOG Advertising, s.r.o.

adhog.eu

52

ADHOG Advertising, s.r.o. is a small Czech marketing communication agency with over 20 years of experience, offering comprehensive creative services from concept to campaign evaluation. The company targets local and international brands seeking innovative and reliable marketing solutions. The website is built on WordPress using the Betheme theme and integrates standard technologies such as jQuery and Google reCAPTCHA for form security. The site is well-structured, mobile-optimized, and presents clear contact information including multiple company email addresses and a physical address in Prague. Security posture is good with HTTPS enforced and CAPTCHA protection, though advanced security headers and cookie consent mechanisms are missing. The domain registration is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website reflects a professional and credible marketing agency with room for improvement in privacy compliance and security best practices.

P

Prague City Tourism

praguecitytourism.com

61

Prague City Tourism is the official Destination Management Organisation for the City of Prague, focusing on sustainable tourism, cultural heritage preservation, and marketing Prague as a premier travel destination. The organization provides a range of services including guide services, concierge experiences, and business cooperation opportunities targeting tourism industry partners and visitors. The website reflects a well-established entity with a consistent brand and professional content tailored to its audience. Technically, the website is built on WordPress, utilizing modern tools such as Google Tag Manager, Cookiebot for consent management, and Yoast SEO for search engine optimization. Hosting is provided by Active24, and the site demonstrates good mobile optimization and moderate performance. The technical implementation is solid with no critical vulnerabilities detected. From a security perspective, the site uses HTTPS and employs cookie consent mechanisms, indicating compliance with GDPR. However, DNSSEC is not enabled, and no advanced security headers were detected, suggesting room for improvement. No incident response or security policy information is publicly available, which could be enhanced to improve trust and transparency. Overall, the website is professional, trustworthy, and well-aligned with its business objectives. The risk profile is low, with recommendations focusing on enhancing DNS security, publishing security policies, and adding terms of service to strengthen legal and security posture.

W

WebActive s.r.o.

tourdefeminin.com

65

Tour de Feminin is an established international women's stage cycling race organized and promoted primarily in the Czech Republic. The event is supported by WebActive s.r.o., which provides the digital platform and content management. The website offers comprehensive race information, historical data, results, and media galleries targeting cycling enthusiasts and participants. The technical infrastructure is built on modern web technologies including jQuery, Bootstrap, and a proprietary CMS (WebJET), delivering a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though lacking advanced security headers and explicit security policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust. Strategic improvements in transparency and security documentation are recommended to enhance credibility and compliance.

T

Think Pink Europe

thinkpinkeurope.org

59

Think Pink Europe is a non-profit organization dedicated to raising awareness and funds to combat breast cancer across Europe. The organization runs major campaigns such as Race for the Cure and Pink@Work, engaging the public and corporate sectors to support breast cancer research and patient care. Their website reflects a well-structured, content-rich platform with clear calls to action for donations and participation in events. Technically, the site is built on a mature ASP.NET framework with modern front-end libraries and integrates Google Analytics and Tag Manager for tracking. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no incident response information is published. Overall, the site demonstrates a professional and trustworthy presence suitable for its non-profit mission.

E

Europa Donna

europadonna.org

51

Europa Donna is a well-established European non-profit coalition dedicated to breast cancer awareness, advocacy, and education across 47 member countries. The organization actively engages with European Union institutions, including the European Parliament and Commission, to influence breast cancer policies and guidelines. Their website reflects a professional and consistent brand presence, offering comprehensive resources and information targeted at European women and healthcare advocates. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site includes privacy and cookie consent mechanisms compliant with GDPR, and uses Google Tag Manager and embedded YouTube videos for analytics and engagement tracking. Performance and mobile optimization are good, though accessibility could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent management, but lacks explicit security headers and documented security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The domain WHOIS data is privacy protected or unavailable, which is typical for non-profit organizations, and does not raise immediate trust concerns. Overall, Europa Donna's website demonstrates a solid digital presence with good privacy compliance and a professional approach to content and advocacy. Strategic improvements in security headers, accessibility, and transparency around security policies would further enhance trust and resilience.

S

SPHosting s.r.o.

sphosting.cz

46

SPHosting s.r.o. is a Czech Republic-based hosting service provider established in 2014, specializing in virtual private servers, dedicated servers, managed servers, and cloud/network services. The company targets small to medium businesses requiring tailored hosting solutions with professional management and 24/7 support. Their market position is supported by positive client testimonials and a perfect aggregate rating, indicating strong customer satisfaction and trust. Technically, the website employs a modern technology stack including Bootstrap, jQuery, FontAwesome, and slick carousel for UI, alongside Google Tag Manager, Facebook Pixel, and Yandex Metrika for analytics and marketing. The site is hosted behind Cloudflare DNS and uses HTTPS with excellent SSL configuration. The cookie consent mechanism is comprehensive and GDPR compliant, reflecting good digital maturity. From a security perspective, the site enforces HTTPS, uses reCAPTCHA v2 for form protection, and provides granular cookie consent options. However, it lacks explicit security policies, incident response information, and a security.txt file, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected, and security headers could be enhanced. Overall, the website presents a professional, trustworthy, and well-maintained digital presence with moderate to good security posture. Strategic improvements in security transparency and header implementation would further strengthen their risk profile and compliance stance.

S

SPWeb s.r.o.

firmsys.cz

50

Firmsys.cz is a Czech Republic based technology company specializing in providing compliance and business systems focused on whistleblowing and cookie law adherence. The company, operated by SPWeb s.r.o., offers SaaS solutions tailored for firms, schools, public authorities, and other entities required to comply with EU directives such as EU Directive 2019/1937 and ePrivacy regulations. With over 800 clients and more than a decade of IT service experience, Firmsys positions itself as a reliable partner for legal and compliance system needs. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content in Czech language. Contact and legal information are transparently presented, enhancing trustworthiness. Technically, the site employs modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and Seznam Retargeting. Security measures include HTTPS enforcement and Google reCAPTCHA for form protection, although some HTTP security headers are not explicitly detected. Privacy compliance is well addressed with a detailed cookie consent mechanism and GDPR policy. Overall, the site demonstrates a mature digital presence with good security posture and compliance awareness.

R

Rodinné zápolení | Další web používající WordPress

rodinnezapoleni.cz

50

Rodinnezapoleni.cz is a Czech language website created in 2011, built on WordPress using the Divi theme. The site appears to be a small-scale or personal project with limited content and minimal business information. The technical infrastructure is standard for WordPress sites, utilizing common libraries such as jQuery and Google Fonts. Hosting is provided by REG-ZONER, a Czech domain registrar and hosting provider, consistent with the website's regional focus. Security posture is basic with HTTPS enabled but lacking important security headers and policies. No privacy or cookie policies are present, indicating potential compliance gaps. Contact information and social media presence are not evident, limiting business credibility and user trust. Overall, the site is functional but lacks comprehensive security, privacy, and business transparency features.

A

ADOL Monitor s.r.o.

adol.cz

53

ADOL Monitor s.r.o. is a Czech Republic-based company specializing in providing monitoring services for real estate investment opportunities, particularly focusing on distressed properties such as auctions, executions, and insolvencies. The company has been operating for over 10 years and offers a suite of services including data monitoring, cadastral data access, and educational seminars. Their market position is that of a niche, trusted provider with a strong local presence and a loyal customer base. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and various plugins, supporting good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are not explicitly detected and could be improved. The absence of WHOIS data limits domain trust assessment but the website content and business information suggest legitimacy. Overall, the site is professional, content-rich, and compliant with GDPR requirements.

A

AddTex

addtex.eu

55

AddTex is an EU-funded Erasmus Plus project focused on advancing digital and green innovations in the advanced textile industry through innovative learning and training. The project collaborates with a network of 12 partners across 10 European countries to develop educational resources such as MOOCs and training platforms aimed at students, educators, and industry professionals, particularly SMEs. The website is built on WordPress with Elementor and integrates modern web technologies and analytics tools. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and incident response policies are absent. WHOIS data is privacy-protected by EURid, consistent with EU project norms. Overall, the site is professional, content-rich, and trustworthy, supporting its educational mission.

The website wickedthemusicaltickets.top is a newly registered domain with minimal content, primarily a default WordPress blog post. There is no clear business description, contact information, or trust indicators present. The site uses a standard WordPress CMS with Bootstrap and jQuery libraries, indicating a basic technical infrastructure. Security posture is weak due to lack of security headers, no DNSSEC, and absence of privacy or cookie policies. The domain registration is privacy protected, which combined with the minimal content, reduces trustworthiness. Overall, the site appears to be in an early stage or possibly a placeholder without a clear business purpose or compliance measures.

A

Abalon s.r.o.

novorocenky-elektronicky.cz

34

The website www.novorocenky-elektronicky.cz represents a small Czech company, Abalon s.r.o., specializing in electronic New Year greeting cards primarily targeting business customers. The site offers original and customizable electronic PF cards created by multiple artists. The business model is B2B e-commerce with a niche focus on seasonal greeting cards. The website content is minimal and currently displays a placeholder message about the next offer release in August 2025. Technically, the site is built on WordPress with common JavaScript libraries and Google Analytics for tracking. HTTPS is enforced, but no advanced security headers or explicit privacy/cookie policies are present on the main domain. Contact information is limited to a phone number, with no emails or social media links visible. WHOIS data is missing, which raises concerns about domain registration transparency and trustworthiness.

A

Abalon s.r.o.

pf.cz

37

The website www.pf.cz represents Abalon s.r.o., a small Czech company specializing in the design and sale of original, artistically crafted New Year and Christmas greeting cards. The business targets corporate clients and organizations looking for unique and charitable greeting card options. The site offers customization services, free proofreading, and sample cards, positioning itself as a niche provider in the Czech market. Technically, the website is built on WordPress and employs modern JavaScript libraries such as jQuery, Slick Carousel, and Video.js, with SEO optimization via Yoast and analytics through Google Analytics. HTTPS is enforced, ensuring secure connections, but the absence of security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. The lack of WHOIS data reduces domain trustworthiness, though the website content and business information appear professional and consistent. Overall, the site demonstrates good digital maturity with moderate performance and mobile optimization.

F

fsk industries GmbH & Co. KG

fsk-industries.de

51

fsk industries GmbH & Co. KG is a German-based company specializing in innovative automation solutions, including Cobot Welding, SmartArc technology, mechanical engineering, and fixture construction. The company targets industrial clients seeking advanced automation and welding solutions, positioning itself as a niche provider in the manufacturing sector. The website reflects a professional and consistent brand image with good content quality and user experience, primarily in the German language. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies such as Bootstrap and jQuery, hosted by Alfahosting. Performance and mobile optimization are adequate, with room for improvement in accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented via Cookiebot, though additional security headers and a vulnerability disclosure mechanism are recommended. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the site demonstrates a good balance of business credibility, technical implementation, and privacy compliance, scoring 78 out of 100 in the AI assessment.

L

LMB - Gruppe

lmb-gruppe.de

45

LMB-Gruppe is a German manufacturing company specializing in welding, cutting, marking, and machine building services. Their website presents a professional image with clear navigation and relevant content targeting industrial clients. The company offers a range of services including manual welding, laser cutting, and special machinery construction, positioning themselves as a regional service provider in the manufacturing sector. The website is built on TYPO3 CMS and uses modern web technologies such as jQuery and Bootstrap, indicating a moderate level of digital maturity. While the site is mobile-optimized and accessible, there is room for improvement in accessibility and SEO. Security posture is moderate with no visible security headers or explicit security policies, and the site lacks a cookie consent mechanism despite GDPR compliance indications. Overall, the website is functional and credible but would benefit from enhanced security and privacy features.

N

Národní technické muzeum

muzeum-plasy.cz

48

Muzeum Plasy operates as a specialized cultural and educational institution under the National Technical Museum of the Czech Republic, focusing on the preservation and exhibition of building heritage and historical construction techniques. The website provides detailed information about exhibitions, events, educational programs, and visitor information, targeting cultural tourists, students, and researchers interested in architectural history. The business model is non-profit and government-affiliated, emphasizing education and cultural preservation. Technically, the website is built on WordPress 6.2.6 with modern web technologies including jQuery, Google Analytics, and lazy loading for images. The site is mobile-optimized and features good navigation and content structure. However, there is room for improvement in security headers and privacy compliance. The site uses HTTPS with a good SSL configuration but lacks explicit privacy and cookie policies, which are important for GDPR compliance. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. The absence of security headers and vulnerability disclosure policies are notable gaps. The WHOIS data is unavailable, which limits domain trust verification, but the association with the National Technical Museum and professional content suggests legitimacy. Overall, the website is well-designed and professional, serving its educational and cultural mission effectively. Strategic improvements in privacy compliance, security headers, and transparency would enhance trust and security posture, supporting long-term sustainability and compliance with evolving regulations.

Kavárna MUZEUM is a small café business located within the National Technical Museum in Prague, focusing on coffee culture, bakery, and gastronomy. The website presents a clear business description targeting museum visitors and coffee enthusiasts, offering lunch menus, bakery products, and catering services. The site uses concrete5 CMS with jQuery and Google Analytics for tracking visitor data. While the website content is well structured and visually appealing, it lacks critical privacy and cookie policies, explicit contact information, and security headers. The absence of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. Overall, the business appears legitimate and niche-focused, but the digital maturity and security posture require improvement to enhance trust and compliance.

J

JMP s.r.o.

valty.cz

42

VALTY.cz is a Czech Republic based retailer specializing in custom mattress systems combining flexible slatted frames and thinner mattresses tailored to individual needs. The company has a strong market presence with over 30 years of experience and multiple physical store locations. Their business model focuses on quality materials, expert advice, and made-to-measure products, targeting consumers seeking ergonomic and hygienic sleep solutions. Technically, the website is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile use. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers could be improved. Privacy compliance is basic with a cookie consent banner but no explicit privacy or terms pages. Overall, the site is professional and trustworthy with clear contact information and partner ecosystem.

J

JMP s.r.o.

rozkladacipostele.cz

53

JMP s.r.o. operates the website rozkladaci-postele.cz, specializing in the retail and e-commerce sale of folding beds and mattresses primarily targeting customers in the Czech Republic. The company maintains a medium-sized business with multiple physical stores and an online presence, offering a wide range of products with a focus on quality Czech manufacturing. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Bootstrap, and various plugins for SEO, analytics, and live chat support. Security posture is solid with HTTPS enforced and no visible critical vulnerabilities, though security headers and formal policies are lacking. Privacy compliance is basic with a cookie consent banner but no published privacy or terms of service pages. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the site is functional, trustworthy, and well-positioned in its niche.

M

MUDr. Marie Součková

ortopediesouckova.com

61

Lékařské podiatrické centrum, led by MUDr. Marie Součková, is a specialized private healthcare provider in Prague focusing on orthopedics and podiatry services for children and adults. The center offers a comprehensive range of treatments including podiatry, orthopedic care, pedicure services, diabetic footwear (SHAPER), and educational courses. The business holds a reputable market position as a pioneer in private comprehensive care for the musculoskeletal system in the Czech Republic. Technically, the website is built on Joomla CMS with modern frontend frameworks like Bootstrap and UIkit, supported by jQuery and Google Analytics for tracking. Hosting is provided by WEDOS Internet, a reputable Czech provider. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Privacy compliance is well addressed with a clear cookie consent mechanism and GDPR-aligned privacy policy. From a security perspective, the site uses HTTPS with good SSL configuration but lacks advanced security headers and explicit incident response or security policies. No vulnerabilities or blocking mechanisms were detected, indicating a stable security posture. Domain WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website presents a professional, trustworthy, and user-friendly digital presence for a specialized healthcare provider, with room for improvement in security hardening and formal policy disclosures.

A

Autosalon Klokočka

klokocka.cz

53

Autosalon Klokočka is a medium-sized authorized automotive dealership and service provider based in the Czech Republic, specializing in brands such as Volkswagen, Audi, ŠKODA, Kia, and SEAT. The company offers a comprehensive range of services including new and used vehicle sales, authorized servicing, financing, leasing, and vehicle buyback. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeted at automotive customers in the region. Technically, the site employs modern analytics and marketing tools such as Google Analytics, Hotjar, and Ecomail, alongside live chat and reCAPTCHA for user interaction and security. The site is mobile-optimized and demonstrates good SEO practices. Security posture is solid with HTTPS enforced and CAPTCHA on forms, though it lacks some advanced security headers and published incident response information. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness, but the overall business credibility remains high due to the professional presentation and authorized brand partnerships. Strategic improvements in security headers, incident response transparency, and domain registration verification are recommended to enhance trust and compliance.

R

ROSSMANN

rossmann.cz

69

ROSSMANN.cz is the online presence of ROSSMANN, a large retail chain specializing in drugstore products in the Czech Republic. The website offers a broad assortment of quality goods at competitive prices, including current promotions, flyers, and customer contests. The site targets retail consumers in the Czech market and positions itself as a well-established player in the retail sector. Technically, the website employs modern JavaScript frameworks and libraries, including React components, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile-optimized and uses preloading techniques for fonts and images to enhance performance. Security-wise, HTTPS is enforced, and cookie consent is implemented, but no explicit security headers or privacy policy pages were detected in the provided content. The WHOIS data is missing, which reduces domain trustworthiness, but the website content and branding suggest a legitimate business. Overall, the site demonstrates good digital maturity with room for improvement in security and privacy transparency.

P

Pasáž českého designu

pasazdesignu.cz

43

Pasáž českého designu is a cultural project offering unique exhibition spaces in the center of Prague, showcasing works of successful Czech designers as well as students and emerging talents. The website targets both professional and general audiences interested in modern art and design. The business model revolves around providing continuous exhibition opportunities and promoting Czech design culture. Technically, the website is built on WordPress with popular plugins for sliders and galleries, and uses WP Rocket for performance optimization. The site is mobile-optimized and has good SEO practices. Security posture is solid with HTTPS enabled and no visible sensitive data exposure, but lacks some security headers and cookie consent mechanisms. The absence of WHOIS data is a concern for domain legitimacy, though the website content and social media presence support its authenticity. Overall, the site is professional and trustworthy but could improve in security and privacy compliance.

O

OnlyU - Web s články o vztazích, společnosti a zdraví.

onlyu.cz

55

OnlyU is a Czech-language media website focused on publishing articles related to relationships, society, and health. The site targets Czech-speaking users interested in these topics and monetizes primarily through advertising networks such as Google Adsense and Taboola. The website is built on WordPress CMS and integrates multiple third-party analytics and marketing tools, including Google Analytics, Gemius, and ShareThis, indicating a mature digital marketing infrastructure. However, the absence of publicly available WHOIS data limits the ability to fully verify domain ownership and legitimacy. The site implements a cookie consent banner, showing some compliance with GDPR requirements, but lacks an explicit privacy policy or terms of service in the analyzed content. Technically, the site shows moderate performance and good mobile optimization but has minor backend issues such as visible PHP warnings. Security posture is moderate with HTTPS enabled but missing security headers and some code hygiene issues. Overall, the website is functional and professionally presented but would benefit from improved transparency, security hardening, and compliance documentation.

P

PlastisolTransfer24.com

plastisoltransfer24.com

63

PlastisolTransfer24.com is a German-based company specializing in the production and distribution of high-quality textile transfers, serving primarily B2B customers such as textile printing companies and promotional firms across Germany, Austria, Switzerland, and the UK. The company emphasizes rapid delivery, offering express shipping within 24 hours, and holds OEKO-TEX certification, underscoring its commitment to environmental and social responsibility. Their product portfolio includes a wide range of transfer types including plastisol, blockout, water, neon, digital, DTF, and specialty transfers like glitter and holographic options. Technically, the website is built on the Magento 2 e-commerce platform, leveraging RequireJS, jQuery, and various Magento UI components. It integrates modern payment solutions such as Stripe and employs Google Tag Manager, Google Analytics, and Microsoft Clarity for analytics and marketing purposes. The site is mobile-optimized with good SEO practices and a comprehensive cookie consent mechanism supporting GDPR compliance. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status to prevent unauthorized transfers, and implements CAPTCHA on login forms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no public security or incident response policies are found. The domain registration is consistent with the business claims, having been registered in 2012, aligning with the company's stated experience. Overall, the website presents a professional and trustworthy front with good content quality, technical implementation, and privacy compliance. Strategic improvements could include enhancing security headers, publishing a formal security policy, and enabling DNSSEC to further strengthen trust and security posture.

E

ELEKTROTRANS a.s.

elektrotrans.cz

66

ELEKTROTRANS a.s. is a well-established Czech company specializing in electricity transmission and distribution services, including design, construction, diagnostics, and maintenance of high voltage lines. As a member of the VINCI Energies Group under the Omexom brand, it leverages international expertise and resources, positioning itself as a market leader in the Czech Republic's energy sector. The website reflects a professional digital presence with good content quality, clear navigation, and GDPR-compliant privacy and cookie policies. Technically, the site uses WordPress with modern plugins like Yoast SEO and Matomo analytics, indicating a moderate to good digital maturity. Security posture is strong with HTTPS enforced and privacy-friendly analytics, though additional security headers and explicit incident response information could enhance trust. The absence of WHOIS data limits domain trust assessment, but overall, the site appears legitimate and professionally managed.

J

JMP s.r.o.

loznice.cz

50

JMP s.r.o. operates the website loznice.cz, specializing in the manufacture and retail of high-quality mattresses, beds, and bedroom furniture with a strong emphasis on Czech production and certification. The company targets consumers seeking quality sleep solutions and offers custom-made products supported by over 30 years of experience. The website features rich multimedia content, product categories, and multiple physical store locations with clear contact information. Technically, the website employs modern web technologies including Bootstrap, jQuery, and integrates marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Heureka widgets. The site is mobile-optimized and provides a good user experience with clear navigation and structured data for SEO. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain reduces trust from a domain registration standpoint. The site lacks explicit security policies and incident response information, which could be improved to enhance compliance and user trust. Overall, the website presents a professional and trustworthy front for a medium-sized retail business in the Czech Republic, with recommendations to improve domain registration transparency, security headers, and published security policies to strengthen its security posture and compliance.

S

Sakura's - Chinese and Japanese cuisine, Running sushi

sakuras.cz

41

Sakura's is a Czech Republic-based restaurant chain specializing in Asian cuisine with a focus on Japanese running sushi. The business operates multiple physical locations across major Czech cities including Prague, Brno, Liberec, Pardubice, and Hradec Králové. The website presents a professional and consistent brand image with clear navigation and good content quality targeting customers interested in Asian dining experiences. Technically, the site is built on WordPress using modern plugins such as Revolution Slider and WPBakery Page Builder, with good SEO practices and mobile optimization. Security posture is adequate with HTTPS enforced but lacks visible security headers and formal privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS data reduces domain trustworthiness, though the active social media presence and professional site design support legitimacy. Overall, the site is functional and credible but would benefit from enhanced privacy compliance and security best practices.

S

Statutární město Chomutov

chomutov.cz

41

The website www.chomutov.cz serves as the official online portal for the statutory city of Chomutov in the Czech Republic. It provides comprehensive information and services for citizens, tourists, and local stakeholders, including eGovernment services, tourism guides, public transport, social assistance, and urban development projects. The site is well-structured with clear navigation and consistent branding, targeting local residents and visitors. Technically, it is built on WordPress with modern themes and plugins, ensuring a responsive and user-friendly experience. Security-wise, the site enforces HTTPS with a good SSL configuration but lacks some security headers and explicit privacy and cookie policies, which are important for compliance and user trust. The absence of WHOIS data reduces transparency and trust slightly, though the site appears legitimate and professionally maintained. Overall, the website demonstrates a solid digital presence for a municipal government but should improve privacy compliance and security headers to enhance trust and regulatory adherence.

P

Praha 3

praha3.cz

68

The website www.praha3.cz serves as the official portal for the municipal district Praha 3 in the Czech Republic. It provides comprehensive information about local government services, news, events, and contact details for residents and visitors. The portal supports multiple languages via Google Translate links and offers online services such as appointment booking and downloadable forms. The site is well-branded and maintains consistent messaging aligned with its government entity status. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, jQuery, and Bootstrap components. It is mobile-optimized, accessible, and includes SEO best practices such as meta tags and structured data (JSON-LD). The site uses HTTPS and implements cookie consent mechanisms compliant with GDPR, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses consent-based tracking scripts. However, it lacks explicit security headers and a published security.txt or incident response contact, which are recommended for transparency and vulnerability management. No WAF or blocking mechanisms were detected, and no obvious vulnerabilities were found in the content or scripts. Overall, the site presents a trustworthy and professional government portal with good content quality and technical implementation. The absence of WHOIS registration data slightly reduces trust but is mitigated by the official nature and consistent branding. Strategic improvements in security headers and incident response disclosures would enhance the security posture and trustworthiness further.

N

Nadace Naše dítě

nasedite.cz

44

Nadace Naše dítě is a well-established Czech non-profit foundation dedicated to supporting handicapped, abused, and socially disadvantaged children. With over 31 years of operation, it provides financial aid, legal assistance, and runs awareness campaigns to improve children's lives. The website reflects a professional and consistent brand image, targeting donors and beneficiaries alike. Technically, the site uses modern JavaScript libraries and Google services, ensuring good mobile responsiveness and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data limits domain trust analysis but does not detract from the site's apparent legitimacy. Overall, the foundation demonstrates a strong commitment to transparency and user privacy.

M

Město Jirkov

jirkov.cz

47

The website www.jirkov.cz serves as the official online presence of the city of Jirkov, Czech Republic. It provides comprehensive information about the city, including municipal administration, cultural events, tourism, and public services. The site targets residents, visitors, and local businesses, positioning itself as a key information hub for the community. The business model is that of a municipal government entity, focusing on transparency and public engagement. Technically, the website employs a mix of common web technologies including jQuery, Bootstrap, and Swiper.js, indicating a moderately modern and responsive design. The site is mobile-optimized and features a clear navigation structure, although accessibility features are basic. Performance is moderate, with no major issues detected. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements. However, the absence of visible security headers and incident response contacts suggests room for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the site presents a trustworthy and professional image consistent with a municipal government website. The lack of WHOIS data reduces some trustworthiness, but the official branding and content quality mitigate this concern. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving contact information transparency.

A

Abakus

abakus.cz

55

Abakus is a Czech non-profit foundation established by the founders of Avast, dedicated to fostering positive social change in Czech society. The foundation focuses on supporting palliative care, family support, modern education initiatives, and storytelling projects to raise awareness on important social issues. The website is professionally designed using WordPress and Elementor, providing clear navigation and content relevant to its mission. The technical infrastructure is modern and hosted with Google Domains, ensuring reliable performance and security with HTTPS enabled. However, the site lacks explicit privacy and terms of service policies, which are important for compliance and user trust. Security posture is generally good with no visible vulnerabilities, but could be improved by adding security headers and a published security policy. Overall, the website presents a trustworthy and professional image aligned with its non-profit mission.

R

Rostlinně

rostlinne.cz

53

Rostlinne.cz is a Czech project dedicated to promoting plant-based cuisine, supporting restaurants and producers in integrating new plant-based products and dishes within the Czech Republic. The website serves as an educational and promotional platform offering courses, events, e-books, and active social media engagement. Technically, the site is built on WordPress with modern plugins for SEO, privacy compliance, and social media integration, hosted via WEDOS with Cloudflare DNS. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Contact information is transparent and professional, enhancing business credibility. Overall, the site is well-designed, mobile-optimized, and trustworthy, serving a niche but important market segment in plant-based culinary education and promotion.

O

OBRAZ – Obránci zvířat, z. s.

albertovakrutost.cz

54

The website albertovakrutost.cz is a campaign platform run by the non-profit organization OBRAZ – Obránci zvířat, z. s., focused on raising awareness and advocating against animal cruelty in supermarket Albert's chicken supply chain in the Czech Republic. The site provides detailed information about the campaign, including calls to action such as signing petitions. The organization positions itself as an animal welfare advocate with a clear mission and target audience of concerned consumers and animal rights supporters. Technically, the site uses modern frontend technologies including Vue.js, Alpine.js, and SwiperJS, supported by analytics and tracking tools like Google Analytics, Microsoft Clarity, and Ecomail. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. Privacy compliance is strong, with comprehensive GDPR-aligned privacy and cookie policies presented in Czech language. Contact information is transparent, including emails, phone number, and physical address. No terms of service or vulnerability disclosure policies were found. The domain is newly registered but consistent with the campaign's recent launch. Overall, the website is professional, trustworthy, and well-structured for its advocacy purpose.

F

Futurn nv

futurn.com

54

Futurn nv is a Belgian real estate company specializing in the sustainable redevelopment and transformation of commercial properties in Flanders. The company focuses on converting outdated or underutilized sites into modern, versatile, and environmentally responsible workplaces. Their market position is that of a specialist in sustainable business property development, offering tailored solutions such as KMO units, office buildings, and reconversion projects. The website reflects a professional and consistent brand image targeting business owners and property stakeholders in the region. Technically, the website is built on the Concrete5 CMS platform, utilizing modern frontend technologies including Bootstrap, jQuery, and FontAwesome. It features responsive design, SEO-friendly metadata, and integrates marketing and analytics tools such as Google Tag Manager and social media pixels. The site includes a cookie consent mechanism aligned with GDPR requirements and provides multiple contact channels including phone, email, and a chat widget. From a security perspective, the site enforces HTTPS with a valid SSL certificate and employs secure form practices. However, it lacks explicit security headers and does not provide a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, though the website content and contact information appear authentic and consistent with a legitimate business. Overall, the website demonstrates a good level of digital maturity and security hygiene, with room for improvement in security policy transparency and domain registration verification. The risk profile is moderate, with recommendations to enhance security headers, publish incident response contacts, and verify domain registration details to strengthen trust and compliance.

G

GUN PRODUCTIONS

gutterdammerung.com

54

Gutterdämmerung.com is the official website for a niche entertainment project combining rock music, film, and live immersive experiences. The site promotes the Gutterdämmerung concept created by visual artist Bjorn Tagemose, featuring legendary rock artists. The business operates primarily in the media sector, targeting rock music fans and live event attendees. The website content is rich with artist information, multimedia, and event details, supporting fan engagement through newsletters and contests. Technically, the site uses standard web technologies including jQuery, Google Analytics, YouTube API, and MailChimp for marketing. Hosting is provided by One.com, with a domain registered since 2014, consistent with the business timeline. Security posture is moderate with HTTPS implied but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but could improve in privacy and security practices.

B

Barefoot Luxury

barefootluxury.be

52

Barefoot Luxury is a niche real estate and hospitality company specializing in luxury villas for sale on São Vicente island, Cabo Verde. The company offers 36 private villas blending natural beauty with modern comfort, targeting affluent investors and lifestyle buyers. The website reflects a strong market position within the luxury real estate sector, emphasizing exclusivity, privacy, and a unique lifestyle experience. Technically, the site is built on WordPress with Elementor and Gravity Forms, hosted by Combell nv, and employs modern web technologies with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with the business goals.

E

EnlightED

enlighted.education

67

EnlightED is a globally oriented educational conference platform focused on the intersection of education, technology, and innovation. The website serves as a hub for event information, speaker details, and agenda for their annual conferences. It is supported by reputable partners such as Fundación Telefónica, IE University, South Summit, and Fundación La Caixa, indicating a strong market position in the education sector. The platform targets educators, technology professionals, and innovators in education, offering hybrid event editions and a variety of talks and lectures. Technically, the website is built on WordPress using Elementor and Yoast SEO, with integrations for Google Tag Manager and OneTrust for cookie consent. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Accessibility features are basic but present. The SSL configuration is excellent, ensuring secure HTTPS connections. From a security perspective, the site employs HTTPS and cookie consent mechanisms but lacks visible security headers and published privacy or terms of service policies. No contact information for security incidents or vulnerability disclosures are found. WHOIS data is not publicly available, likely due to privacy protection, but the presence of trusted partners supports legitimacy. Overall, the security posture is good but could be improved with additional transparency and security best practices. The overall risk is moderate with recommendations to publish privacy and terms policies, implement security headers, and provide clear contact channels for security and privacy concerns to enhance trust and compliance.

W

Wanna Marketing

wannamarketing.es

50

Wanna Marketing is a small marketing agency based in Málaga, Spain, specializing in web design, client acquisition campaigns, graphic design, and content creation. The company positions itself as a strategic and innovative partner for businesses seeking tailored marketing solutions. It holds a recognized position in the Spanish independent media agency rankings, indicating a credible market presence. Technically, the website is built on WordPress using Elementor and Yoast SEO, with performance optimizations via WP Rocket and GDPR compliance mechanisms in place. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and explicit privacy policies would enhance trust. Overall, the site is professional, well-structured, and user-friendly, targeting businesses in Málaga and surrounding regions.

P

P&P Legal

pplegal.eu

45

P&P Legal is a Slovak law firm established in 2018, providing comprehensive legal services across multiple domains including commercial law, litigation, family law, and constitutional law. The firm targets both local and foreign clients, emphasizing professionalism, confidentiality, and security, supported by a liability insurance coverage of 1,500,000 €. The website reflects a small but professional legal practice with clear service offerings and contact information. Technically, the website is built on WordPress 4.9.26 with common libraries such as jQuery and Select2, and employs Google reCAPTCHA for form security. HTTPS is enforced, and cookie consent mechanisms are in place, indicating a reasonable level of digital maturity. However, the WordPress version is outdated, and some security headers are missing, suggesting room for improvement in security hardening. Security posture is solid with HTTPS, liability insurance disclosure, and spam protection on forms, but lacks explicit security policies or incident response contacts. Privacy compliance is good with GDPR-aligned cookie consent and privacy policy available. No critical vulnerabilities or suspicious indicators were found. Overall, the website and business present a trustworthy and professional image with moderate technical sophistication. Strategic improvements in security headers, CMS updates, and enhanced mobile and accessibility features would strengthen the digital presence and security posture.

P

P&P Legal

pplegal.sk

46

P&P Legal is a Slovak law firm established in 2018, providing comprehensive legal services across various domains including commercial law, litigation, family law, and constitutional law. The firm targets both individual and corporate clients within Slovakia and offers multilingual services including Slovak, Czech, and English. Their market position is that of a trusted local legal partner with a strong emphasis on professionalism, confidentiality, and security, supported by a substantial liability insurance coverage of 1.5 million euros. Technically, the website is built on WordPress and leverages modern web technologies such as jQuery, Select2, Google reCAPTCHA, and FontAwesome. The site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR, indicating a reasonable level of digital maturity. Performance and mobile optimization are adequate, though accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect its contact form from spam. However, it lacks advanced security headers and does not publicly disclose a security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected, and the domain registration details align well with the business claims, supporting legitimacy. Overall, the website presents a professional and trustworthy front for the law firm, with good privacy compliance and a solid security baseline. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance their posture and client trust.