Security Directory

N

Northstar Travel Media LLC

phocuswrighteurope.com

63

Phocuswright Europe is a prominent travel and technology conference organized by Northstar Travel Media LLC, targeting top executives, innovators, and influencers in the travel industry. The website promotes the 2026 event in Barcelona, Spain, offering professional development, networking, and insights into travel technology trends. The business holds a strong market position as a leading European travel tech event with a medium-sized organizational footprint. Technically, the site employs modern web technologies including Bootstrap, jQuery, and advanced analytics tools such as Google Analytics, Google Tag Manager, RudderStack, and Intercom, indicating a mature digital infrastructure. The website is well-optimized for mobile and accessibility, with good SEO practices and professional design. Security posture is solid with HTTPS, security headers, and secure forms, though explicit security policies and incident response contacts are not published. Privacy compliance is good, with clear privacy and cookie policies and consent mechanisms in place. However, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional site presence. Overall, the site is trustworthy and professional but would benefit from clarifying domain registration and publishing security policies.

C

CENDIS, s.p.

cendis.cz

62

CENDIS, s.p. is a Czech government-related entity specializing in transportation information systems under the Ministry of Transport of the Czech Republic. The organization provides key ICT solutions and services such as electronic highway vignettes, unified railway tickets, electronic toll supervision, and various training and certification programs. Their target audience includes drivers, transport operators, public transport passengers, and government officials. The website reflects a professional and consistent brand image with a focus on transparency and public service. Technically, the site is built on WordPress using Elementor and Smart Slider 3, with Google Analytics integrated for visitor tracking. The site is mobile-optimized and offers good navigation and content relevance. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some advanced security headers and explicit incident response contacts. WHOIS data is missing, which reduces domain trustworthiness, but the official nature of the site and linked government registries support legitimacy. Overall, the site is a reliable source of transportation ICT information and services in the Czech Republic.

PINK LEMON is a small, established marketing and design agency based in Vaduz, Liechtenstein, offering services including marketing, corporate design, graphic design, and web design. The company targets businesses and organizations in Vaduz and surrounding regions, positioning itself as a trusted partner with over 11 years of experience. The website is professionally designed, content-rich, and consistent with the company's branding and market positioning. Technically, the website is built on the Contao Open Source CMS using the Foundation framework and standard JavaScript libraries. It demonstrates good mobile optimization and SEO practices, with moderate performance. The site uses HTTPS with an excellent SSL configuration but lacks advanced security headers. Privacy compliance is addressed through a privacy policy and a cookie consent banner, with minimal user tracking limited to newsletter subscriptions. From a security perspective, the website shows a solid baseline with HTTPS and cookie consent but could improve by implementing security headers and publishing incident response or vulnerability disclosure policies. No vulnerabilities or suspicious activities were detected. Overall, the site is trustworthy and professionally maintained. The risk assessment is low, with no critical issues found. Strategic recommendations include enhancing security headers, adding incident response information, and expanding privacy and security disclosures to further strengthen trust and compliance.

A

Ars Technica

arstechnica.com

11

Ars Technica is a well-established online media company specializing in technology news, reviews, and analysis since 1998. It targets technologists, IT professionals, and tech enthusiasts with comprehensive coverage of IT, AI, science, cybersecurity, and related fields. The website operates under the Condé Nast parent company, reflecting a large-scale media presence with a professional and consistent brand identity. Technically, the site leverages WordPress CMS, modern JavaScript libraries, and advanced analytics tools such as Google Tag Manager and Snowplow, hosted on AWS infrastructure. The site demonstrates excellent performance, mobile optimization, and SEO practices. Security-wise, Ars Technica enforces HTTPS, employs security headers, and restricts domain transfers, though it lacks DNSSEC and explicit security policies in the visible content. Privacy compliance is partially implemented with a consent management system but lacks visible privacy and cookie policies in the provided data. Overall, the site is trustworthy, professional, and safe for general audiences.

B

ByteDance

cloudwego.io

59

CloudWeGo is an open-source middleware platform primarily focused on enabling enterprise cloud-native architectures and microservices. Backed by ByteDance, it offers a suite of high-performance frameworks and tools such as Kitex, Hertz, and Volo, targeting developers and organizations building scalable microservices. The website reflects a mature, professional presence with clear branding and a focus on technology innovation. Technically, the site is built using modern static site generation (Hugo), with a tech stack including Go, Rust, JavaScript, and Bootstrap, delivering fast performance and good mobile optimization. Security posture is solid with HTTPS enforced and dedicated vulnerability reporting pages, though it lacks some security headers and formal privacy/cookie policies. Overall, the domain and website appear legitimate and trustworthy, with strong enterprise user endorsements and active community engagement via GitHub and Discord.

O

OeAD - Austria's Agency for Education and Internationalisation

grants.at

53

The website grants.at serves as Austria's largest database for scholarships and research grants, operated by the OeAD, a government agency under the Austrian Federal Ministry of Women, Science and Research. It targets students, graduates, and researchers by providing over 1,200 entries to support educational and research funding opportunities. The platform is well-positioned as a trusted resource within the Austrian education sector, leveraging official government backing and comprehensive content offerings. Technically, the site is built on TYPO3 CMS, utilizing modern web technologies including jQuery, Matomo analytics for privacy-conscious tracking, and Usercentrics for cookie consent management. The website demonstrates good performance, mobile optimization, and accessibility standards, reflecting a mature digital infrastructure suitable for its audience. From a security perspective, the site enforces HTTPS, employs multiple security headers, and integrates a consent mechanism for privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. However, incident response contact details and vulnerability disclosure mechanisms could be enhanced to improve security posture further. Overall, the website presents a low-risk profile with strong business credibility and compliance adherence. Strategic recommendations include publishing explicit incident response contacts, adding a vulnerability disclosure policy, and potentially listing certifications to bolster trust and transparency.

H

Headspin UI

headspinui.com

61

Headspin UI is a newly launched technology company specializing in a UI framework and wireframe collections tailored for Breakdance users. The website presents a professional and well-structured digital presence built on WordPress, leveraging modern plugins and frameworks such as Easy Digital Downloads and Breakdance builder. The company targets web designers and developers seeking efficient tools to accelerate website creation. Technically, the site is well-implemented with responsive design, accessible color schemes, and fluid typography, though some security headers could be improved. The security posture is solid with HTTPS and domain transfer protections, but lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is strong, with clear cookie consent and GDPR-aligned privacy policies. Overall, the domain registration and WHOIS data align with the business claims, indicating legitimacy despite the domain's recent creation. Strategic recommendations include enhancing security headers, publishing incident response policies, and adding vulnerability disclosure information to strengthen trust and security maturity.

G

Global Energy and Water cycle Exchanges (GEWEX)

gewexevents.org

46

The Global Energy and Water cycle Exchanges (GEWEX) website serves as an informational and event platform for a core project under the World Climate Research Programme (WCRP). It focuses on scientific research related to Earth's water and energy cycles, providing resources, reports, and organizing meetings and webinars for the scientific community. The site targets researchers and professionals in climate science and related fields, positioning itself as a reputable non-profit scientific network. Technically, the website is built on WordPress 6.7.4, utilizing jQuery and Google Tag Manager for analytics. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security is enforced through HTTPS, but lacks advanced security headers and cookie consent mechanisms, which could be improved for better compliance and protection. From a security perspective, the site shows no signs of vulnerabilities or malicious content. However, the absence of WHOIS data due to privacy or registry restrictions limits full domain trust verification. Contact information is clearly provided, and the site maintains a professional appearance with consistent branding and affiliation to recognized organizations. Overall, the website is trustworthy and serves its purpose well, but could benefit from enhanced privacy compliance and security best practices to strengthen its posture and user trust.

Bethesda Web Design Inc. is a small regional web design and branding firm serving clients in Maryland, DC, and Virginia. They specialize in web development using Drupal and WordPress, branding, and SEO services, with a particular sensitivity to nonprofit organizations. The website presents a professional portfolio and clear contact information, positioning the company as a thoughtful and client-focused service provider in the technology sector. Technically, the site is built on WordPress 6.8.3 with modern plugins such as Gravity Forms and Google reCAPTCHA v3, indicating a moderate level of digital maturity. The site uses HTTPS and integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. Security posture is generally good with encrypted connections and spam protection on forms, but lacks security headers and visible privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS data for the domain is a notable anomaly that reduces trustworthiness, though the website content and contact details appear legitimate. Overall, the site is functional, professional, and secure but would benefit from improved privacy compliance and transparency.

Auto Sport Klub Hořovice operates as a local motorsport club primarily focused on organizing rally events such as Rallye Hořovice. The website serves as an information hub for participants, media, and fans, providing event schedules, official documents, and partner links. The business is small-sized, rooted in the Czech Republic, and has been established since 2003, as supported by domain registration data. The target audience includes motorsport enthusiasts and regional participants. Technically, the website is built on WordPress with common JavaScript libraries like jQuery and MooTools, offering basic mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled and GDPR cookie consent implemented, but lacks advanced security headers and explicit privacy policies. No contact emails or phone numbers are directly provided, which limits direct communication channels. Overall, the website is functional and trustworthy for its niche but could benefit from enhanced privacy and security disclosures.

Ge-Baek Hosin Sool is a well-established traditional Taekwon-Do ITF school based in the Czech Republic, focusing on martial arts training with an emphasis on moral and traditional values rather than competitive sports. The website serves as an information hub for recruitment, member resources, event schedules, and media galleries, targeting individuals and families interested in Taekwon-Do. The school maintains partnerships with other martial arts organizations and receives sponsorship from various municipalities, indicating a strong community presence. Technically, the website uses modern web technologies including Bootstrap and Google Analytics, with responsive design and multilingual support. HTTPS is enforced, and Google Analytics consent is configured to deny ad and analytics storage by default, reflecting a basic level of privacy awareness. However, the site lacks explicit privacy and security policies, terms of service, and direct contact information, which are areas for improvement. From a security perspective, the site shows good SSL configuration but lacks security headers and formal incident response or vulnerability disclosure mechanisms. No WHOIS data is available due to privacy protection, but the website's professional appearance and affiliations suggest legitimacy. Overall, the site scores well on content quality and business credibility but could enhance privacy compliance and security posture. Strategic recommendations include implementing comprehensive privacy and security policies, adding terms of service, improving contact transparency, and deploying security headers to strengthen trust and compliance.

M

Městské sportovní centrum Hořovice příspěvková organizace města Hořovice

bazenhorovice.cz

43

Bazén Hořovice is a municipal swimming pool and aquapark facility operated by the Městské sportovní centrum Hořovice, a city sports organization in the Czech Republic. The website provides comprehensive information about the indoor swimming pool, summer aquapark, services such as refreshments, gym access, and specialized massages. It targets local residents and visitors seeking recreational aquatic activities. The business operates as a public service entity with a local government affiliation, emphasizing community engagement and leisure services. Technically, the website is built on WordPress CMS, utilizing plugins like Smart Slider 3 and integrating YouTube videos for enhanced user experience. The site is hosted by hosting-profi.cz and demonstrates moderate performance with good mobile optimization. SEO and accessibility are basic but functional. The cookie consent mechanism complies with GDPR requirements, although privacy and terms of service policies are missing. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks advanced security headers and published security policies or incident response contacts. No vulnerabilities or suspicious activities were detected. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website is a trustworthy, well-maintained municipal service portal with room for improvement in privacy compliance and security hardening. Strategic recommendations include publishing privacy and terms policies, enhancing security headers, and improving accessibility features.

STŘELA Žebrák, z.s. is a Czech non-profit association founded in 2019, dedicated to educational and leisure activities for children and youth, focusing on athletics, tourism, and summer camps. The organization maintains a strong local community presence with multiple social media channels and partnerships with regional entities. The website serves as an information hub for their activities, events, and registration forms, reflecting a clear mission to engage youth in meaningful activities. Technically, the website employs modern front-end technologies including Tailwind CSS and jQuery, hosted likely by WEDOS, a Czech hosting provider. The site is mobile-optimized with good navigation and content structure, though some accessibility features could be improved. SEO practices are adequately implemented with proper meta tags and descriptive content. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies. No forms on the main page reduce attack surface, but cookie consent mechanisms are missing, which is a GDPR compliance gap. WHOIS data is transparent and consistent with the organization's profile, supporting legitimacy. Overall, the website is trustworthy and professionally maintained, with room for improvement in security hardening and privacy compliance. The risk level is low given the non-commercial nature and limited data collection, but enhancing security policies and cookie management would strengthen compliance and user trust.

up4.cz is a Czech Republic-based small technology company specializing in the development of sophisticated custom software applications. Their offerings include web applications, Android and iOS apps, automation tools, GIS mapping systems, and data conversion bridges. The company emphasizes user-friendly, efficient software solutions tailored for demanding clients, with a business history dating back to 2001. The website presents a professional image with detailed service descriptions, client testimonials, and multiple contact channels, including a contact form with captcha and phone support. Social media presence on Twitter, Instagram, and Facebook supports their outreach. Technically, the website uses modern frontend technologies such as Bootstrap 5.2, jQuery, FontAwesome, and the Nette PHP framework. It is mobile optimized and includes cookie consent mechanisms compliant with GDPR principles. Google Analytics and Google Tag Manager are used for analytics with user consent management. However, no explicit privacy policy or terms of service pages were found, and WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency. Security posture is generally good with HTTPS enforced and secure form handling, but the absence of visible security headers and lack of published security or incident response policies suggest room for improvement. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is safe, professional, and trustworthy, but the missing WHOIS data and privacy documentation slightly reduce the trust score. Recommendations include adding explicit privacy and terms of service pages, publishing security policies and incident response contacts, implementing security headers, and verifying domain registration details to enhance trust and compliance.

B

Bezplatná právní poradna online zdarma pro všechny

bezplatnapravniporadna.cz

47

Bezplatná právní poradna online zdarma pro všechny is a Czech Republic-based free legal advice website offering extensive legal content authored by legal professionals. The site targets the general public seeking legal guidance without charge, positioning itself as a comprehensive resource for various legal topics including family law, civil law, labor law, and more. The business model revolves around providing free legal information and advice, supported by advertising revenue from Google Adsense and Czech Sklik networks. The website demonstrates consistent branding and good content quality with a professional and user-friendly design.

K

Kynologický klub Lety

kklety.cz

49

Kynologický klub Lety is a small, local dog training club based in the Czech Republic, offering a variety of dog training courses including socialization for puppies, basic obedience, rally obedience, and protection training. The website serves as an information hub for members and interested dog owners, providing event updates, photo galleries, and contact information. The club appears to be community-focused with active engagement through social media and email subscriptions. Technically, the website uses a custom CMS with JavaScript libraries such as jQuery and MooTools. It includes cookie consent mechanisms and privacy policy pages, indicating compliance with GDPR. However, there is no evidence of advanced security headers or incident response policies. The site is moderately optimized for performance and accessibility but could benefit from improvements in mobile responsiveness and security hardening. From a security perspective, the site uses HTTPS (assumed from standard practice though not explicitly confirmed), has cookie consent, and no visible vulnerabilities in the HTML content. The lack of WHOIS data is a concern for domain legitimacy and trust but does not directly impact the website's operational security. Overall, the site is safe for general audiences and does not contain any adult or questionable content. Strategically, the club should verify domain registration details and enhance security posture by implementing security headers and publishing incident response information. Improving mobile optimization and SEO could also enhance user experience and reach.

E

Ekoregion Úhlava

ekoregion-uhlava.cz

51

Ekoregion Úhlava is a small non-profit organization focused on regional development and community support in the Úhlava region of the Czech Republic. The website serves as a platform to disseminate information about grant programs, local initiatives, and educational events. It targets local residents, non-profit organizations, and small businesses. The organization appears to be well-established with a domain registered since 2004 and supported by EU funds. Technically, the website is built on Drupal 8 with standard web technologies and uses Google Analytics for visitor tracking. However, it lacks visible privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS usage but no detected security headers or vulnerability disclosures. Overall, the site is functional, content-rich, and safe for general audiences but could improve in privacy compliance and security best practices.

Svazek obcí mikroregionu Kněževes is a small regional municipal association in the Czech Republic focused on promoting local culture, tourism, and community information. The website provides detailed content about local history, events, and official notices, targeting residents and visitors interested in the Kněževes microregion. The business model is non-profit and government-oriented, with a clear focus on community engagement and cultural heritage. Technically, the website uses a custom CMS with JavaScript libraries such as jQuery and Highslide for interactive content. The site is moderately optimized for performance and accessibility, with basic mobile responsiveness and SEO practices. Cookie consent is implemented, indicating some privacy awareness, but there is room for improvement in security headers and explicit privacy policies. Security posture is moderate; HTTPS is used but no security headers were detected in the provided data. No vulnerabilities or exposed sensitive data were found, but the absence of WHOIS data reduces transparency and trust. The site lacks explicit contact information and security incident response details, which could be improved to enhance user trust and compliance. Overall, the website is functional and professional for its purpose but would benefit from enhanced security practices, clearer privacy and contact information, and improved transparency regarding domain registration details.

The website www.mnisecko.cz serves as the official portal for the Svazek Obcí Mníšecký region, a regional municipal association in the Czech Republic. It provides information about member municipalities, local events, cultural activities, tourism, and public notices. The site targets residents and visitors of the Mníšecký region, positioning itself as a local government information hub. The business model is focused on community service and regional cooperation rather than commercial activities. Technically, the website employs traditional web technologies including jQuery and Highslide JS, with custom scripts and CSS for styling. The site is moderately optimized for performance and accessibility but lacks advanced modern frameworks or CMS identification. Mobile optimization and SEO are basic, and no analytics or tracking services are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers and explicit privacy or terms of service documentation. The absence of WHOIS data limits domain trust verification, although the content and domain usage suggest legitimacy. No vulnerabilities or security incidents are apparent from the content analysis. Overall, the website is functional and serves its community purpose well but would benefit from enhanced security practices, clearer privacy policies, and improved technical modernization to increase trust and compliance.

The website panoramaticke-fotografie.cz is operated by Galileo Corporation and focuses on panoramic photography services and galleries showcasing locations primarily in the Czech Republic. It positions itself as an early adopter in the Czech market with over 7 years of experience in panoramic photography. The site targets general audiences interested in scenic photography and potential clients seeking commercial or private photographic services. Technically, the site uses a traditional JavaScript stack including jQuery and Highslide for image display, with Google Analytics and Tag Manager for user tracking. A cookie consent mechanism is implemented, reflecting some privacy awareness. However, the site lacks explicit privacy and terms of service pages, and no direct contact information is provided on the main page, which may impact user trust and compliance. Security headers and SSL configuration details are not evident from the data, though external scripts are loaded over HTTPS. WHOIS data is unavailable, which raises concerns about domain legitimacy and transparency. Overall, the site is functional and content-rich but could improve in privacy compliance, security posture, and business transparency.

T

TREKY.CZ - Vít Sykáček

treky.cz

40

TREKY.CZ is a niche outdoor travel website focused on hiking, trekking, and cycling routes primarily in the Czech Republic but also covering international destinations. The site offers route guides, travel tips, and user-submitted content, targeting outdoor enthusiasts and tourists interested in hiking and cycling. The business model centers on content publishing and community engagement. Technically, the site runs on Drupal CMS with common web technologies including jQuery, Google Analytics, and Facebook SDK. The site is moderately optimized for performance and SEO but has basic mobile and accessibility features. Security posture is average with HTTPS usage implied but lacking important security headers and policies. No WHOIS data is available, which raises concerns about domain legitimacy and transparency. Contact is limited to web forms and social media presence. Overall, the site provides valuable content but needs improvements in security, privacy compliance, and domain transparency.

M

MZ.cz

pruvodkarlaiv.cz

53

MZ.cz is a Czech-language content portal offering a wide range of informational articles, guides, and reviews across sectors such as finance, career, parenting, psychology, relationships, health, travel, shopping, and lifestyle. The website targets the general Czech-speaking public seeking practical advice and knowledge. Technically, the site is built on WordPress CMS, leveraging popular plugins like Yoast SEO and integrating Google services for analytics and advertising. The site demonstrates good digital maturity with responsive design, structured data, and SEO optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages found. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve transparency and security practices.

The website www.karlstejnsko.info serves as the official tourism portal for the Karlštejnsko region in the Czech Republic, providing comprehensive information on accommodation, dining, attractions, events, and services for visitors. It targets tourists, families, and seniors seeking cultural and natural experiences in the region. The site is well-structured with clear navigation and multilingual support, although it lacks some modern features such as mobile optimization and advanced SEO techniques. Technically, the site uses legacy JavaScript libraries like jQuery and Highslide, with custom scripts for UI elements and cookie consent. Security posture is moderate, with HTTPS assumed but no visible security headers or explicit privacy policies, which reduces trust and compliance confidence. The WHOIS data is unavailable or malformed, limiting domain legitimacy verification. Overall, the site is functional and informative but would benefit from enhanced security and privacy practices.

N

National Heritage Institute

zamek-mnisek.cz

44

The website represents the official web presence of Mníšek pod Brdy Castle, managed by the National Heritage Institute of the Czech Republic. It provides detailed visitor information, including tours, events, opening hours, and contact details, targeting tourists and heritage enthusiasts. The site is well-positioned as a government-operated cultural heritage site with a medium-sized operational scope and a history dating back to 2007. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and integrates map services from Mapy.cz, delivering a moderate performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. Privacy compliance is basic but present, with clear privacy and cookie policies linked from the site. Overall, the site is trustworthy, professional, and safe for general audiences, with no adult or questionable content detected.

O

Obec Hlásná Třebaň

hlasnatreban.cz

54

The website www.hlasnatreban.cz serves as the official online presence for the municipality of Hlásná Třebaň in the Czech Republic. It provides residents and visitors with information about local government services, community news, cultural events, waste management, and public participation opportunities. The site targets local citizens and stakeholders interested in municipal affairs and community development. The business model is that of a local government entity focused on public service and communication. Technically, the website is built on the Solidpixels CMS platform and employs modern web technologies including JavaScript, jQuery, Google Tag Manager, and Microsoft Clarity for analytics. The site is mobile-optimized, accessible, and includes SEO best practices such as meta tags and Open Graph data. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, demonstrating compliance with GDPR. However, no advanced security headers were detected, and no explicit security or incident response policies are published. The absence of WHOIS data limits domain legitimacy verification, but the official nature of the site and consistent branding support trustworthiness. Overall, the website is a well-maintained municipal portal with good content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing explicit security policies and incident response contacts, and improving transparency around domain registration. These steps will strengthen the site's security posture and trustworthiness.

O

Obec Zadní Třebaň

zadnitreban.cz

45

Obec Zadní Třebaň is a small municipal government website serving the local community of Zadní Třebaň in the Czech Republic. The site provides comprehensive information about the municipality, including local news, events, administrative contacts, and public services. It targets residents and tourists, offering cultural event details and local infrastructure information. The website is professionally designed with consistent branding and good content quality, reflecting its role as an official government portal. Technically, the website uses a modern technology stack including jQuery, Bootstrap, Swiper.js, and Leaflet.js for maps. It is mobile optimized and accessible, with a cookie consent mechanism and privacy policy in place, indicating a reasonable level of digital maturity. However, some security best practices such as explicit HTTP security headers are not evident, and WHOIS data is missing, which slightly impacts trust. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. The presence of cookie consent and privacy policy supports GDPR compliance. The lack of incident response or security policy information is a gap. Overall, the security posture is moderate but could be improved with additional headers and transparency. The overall risk is low given the nature of the site as a local government portal with no sensitive transactions or personal data collection beyond basic contact forms. Strategic recommendations include enhancing security headers, verifying SSL configuration, and improving WHOIS transparency to boost trust and compliance.

M

Město Dobřichovice

dobrichovice.cz

51

Město Dobřichovice is the official municipal website for the town of Dobřichovice in the Czech Republic. It serves as a comprehensive information portal for residents and visitors, providing updates on municipal news, official notices, cultural events, and practical information related to local governance and community services. The website targets local citizens and stakeholders interested in town affairs and community engagement. Technically, the website employs a modern but standard web technology stack including jQuery, Bootstrap 4, Swiper.js for sliders, and Highslide for image viewing. The CMS appears to be a custom or less common system (Lego CMS inferred). The site is mobile-optimized and accessible, with good SEO practices and clear navigation structures. From a security perspective, the site uses HTTPS and implements a cookie consent banner, indicating awareness of privacy regulations. However, it lacks visible security headers and does not publish a privacy policy or terms of service, which are important for GDPR compliance and user trust. No WHOIS data is publicly available, which slightly reduces trust but is not uncommon for municipal domains. Overall, the website is functional, professional, and trustworthy as a government resource, but it would benefit from enhanced privacy disclosures, security header implementation, and WHOIS transparency to improve its security posture and compliance standing.

P

PopUp Domination

pdmntn.com

52

PopUp Domination is a technology company specializing in popup marketing software designed to help businesses capture leads and increase conversions. The website analyzed is a login page for their SaaS platform, indicating an established business model focused on subscription services for digital marketers and website owners. The company appears to have been founded around 2017, consistent with the domain registration date. The website uses modern web technologies including AngularJS, Bootstrap, and integrates monitoring and customer support tools such as New Relic and Intercom, reflecting a moderate level of digital maturity.

C

Centrum LOCIKA, z. ú.

detstvibeznasili.cz

57

Centrum LOCIKA operates the website detstvibeznasili.cz, a Czech non-profit platform dedicated to providing direct support to children and families affected by domestic violence. The site offers chat support, educational resources, and awareness campaigns targeting children, teenagers, parents, and school professionals. It holds a strong market position within the Czech Republic's child protection sector, leveraging professional content and consistent branding to build trust. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies such as jQuery, Google Fonts, and slick carousel for UI components. It integrates Google Analytics and TikTok Pixel for analytics and marketing purposes, with a cookie consent mechanism ensuring user privacy compliance. The site is mobile-optimized, fast-loading, and accessible, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs cookie consent banners, but lacks advanced security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic but present, with GDPR-aligned policies accessible. The absence of WHOIS data due to privacy protection is justified given the sensitive nature of the organization's work. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security headers, privacy practices, and vulnerability disclosure would further enhance its security posture and user trust.

J

Jednota školských informatiků

jsi.cz

57

Jednota školských informatiků (JSI) is a Czech non-profit association dedicated to supporting the effective use of digital technologies in education, primarily targeting schools and educators. Established in 2002, JSI fosters communities of teachers and ICT enthusiasts to promote digital competencies and informatics thinking among children and students. The website serves as an informational and community platform, providing news, events, and resources related to digital education in the Czech Republic. Technically, the site is built on WordPress using the Divi theme, with standard JavaScript libraries such as jQuery and Swiper.js for interactive elements. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features and comprehensive SEO optimizations. Security-wise, the website uses HTTPS but lacks several important security headers and explicit incident response contacts, which could be improved to enhance trust and compliance. Privacy and cookie policies are not present, indicating a gap in GDPR compliance. Overall, the site is trustworthy and professional in its domain but would benefit from enhanced privacy, security, and compliance measures.

T

Týden pro wellbeing ve škole

tydenprowellbeing.cz

37

The website 'Týden pro wellbeing ve škole' is an educational initiative focused on promoting wellbeing in Czech schools, aiming to improve children's learning and reduce inequalities. The site is professionally designed using WordPress with the Divi theme, incorporating SEO best practices and Google Analytics for traffic monitoring. Despite the lack of WHOIS data and explicit privacy or cookie policies, the site maintains a secure HTTPS connection and shows no signs of malicious activity or content blocking. The absence of direct contact information and security policies suggests areas for improvement in transparency and compliance. Overall, the website presents a credible and focused educational campaign with moderate technical maturity and security posture.

W

wellbeingveskole.cz

wellbeingveskole.cz

35

The website wellbeingveskole.cz is focused on promoting wellbeing in schools within the Czech Republic. It aims to create environments where all participants feel good, build supportive relationships, and fully develop their potential. The site appears to serve educators, students, and school communities with educational and advocacy content. Technically, the site is built on WordPress using the Divi theme and several plugins including Rank Math SEO and Supreme Modules Pro. The site is moderately optimized for performance and mobile devices, with good SEO metadata and structured data implementation. Security-wise, HTTPS is enabled, but there is a lack of advanced security headers and no visible privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS data limits domain trust analysis, but the website content and design appear professional and safe. Overall, the site is functional and informative but would benefit from improved privacy compliance and security practices.

Ö

Översättare.nu

oversattare.nu

54

Översättare.nu is a Swedish-based online platform offering authorized translation services for both companies and private individuals. The website provides a professional and user-friendly interface to upload documents, receive free quotes, and connect with qualified translators. The business targets a niche market in Sweden, focusing on legal and official document translations with GDPR-compliant privacy practices. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and third-party services like Google Analytics and Cookiebot for analytics and cookie consent management. Security posture is strong with HTTPS and security headers implemented, though the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. Overall, the site is well-structured, compliant, and trustworthy but would benefit from clearer contact information and verified domain registration details.

S

Sälja fakturor

xn--sljafakturor-gcb.se

41

The website 'Sälja fakturor' offers financial services focused on invoice selling, factoring, and invoice financing to Swedish businesses. It positions itself as a niche provider helping companies improve cash flow by enabling faster payment through invoice sales. The site is well-structured, professionally designed, and uses modern web technologies including WordPress, Elementor, and CleanTalk anti-spam solutions. Analytics and marketing tools such as Google Analytics and Tag Manager are integrated for user behavior tracking. Security posture is solid with HTTPS and anti-spam measures, though lacks explicit security headers and published privacy or cookie policies, which are compliance gaps. The domain is registered with a reputable Swedish registrar since 2013, consistent with the business claims, indicating legitimacy. Overall, the site is trustworthy and functional but should improve privacy compliance and security header implementation.

B

Blaník - svazek obcí

mikroregionblanik.cz

43

Blaník - svazek obcí is a regional association of municipalities in the Czech Republic providing official information, news, and event calendars for the Blaník region. The website serves residents, visitors, and local officials with relevant regional content and contact information. Technically, the site uses a modern CMS platform with common JavaScript libraries such as jQuery, Bootstrap, and Swiper for UI components, and Leaflet for map integration. The site is mobile optimized and accessible, with a cookie consent mechanism implemented. Security posture is moderate with HTTPS implied but lacking visible security headers and no published privacy or terms policies. WHOIS data is unavailable, which reduces trust assessment confidence. Overall, the site is functional and professional but would benefit from enhanced security and compliance documentation.

S

Svazek obcí - Region Dolní Berounka

dolniberounka.cz

45

Svazek obcí - Region Dolní Berounka is a regional non-profit governmental association serving multiple municipalities in the Czech Republic. The website provides news, event calendars, official documents, and contact information relevant to the local communities it serves. It targets residents, local officials, and visitors interested in the Dolní Berounka region. The business model is focused on regional cooperation and information dissemination without commercial intent. Technically, the website uses a custom CMS likely provided by Galileo Corporation, leveraging modern frontend technologies such as jQuery, Bootstrap, Swiper.js, and Mmenu.js. The site is mobile optimized and accessible, with a cookie consent mechanism implemented, but lacks visible privacy or terms of service pages. Performance is moderate with good SEO and accessibility features. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact details appear legitimate and consistent with a government entity. Overall, the site is functional, professional, and trustworthy for its intended audience, but improvements in privacy compliance, security headers, and domain registration transparency are recommended to enhance trust and compliance.

M

Město Hořovice

mesto-horovice.eu

48

Město Hořovice operates an official municipal website serving residents and visitors with comprehensive information about city governance, services, cultural events, urban planning, and community resources. The website is well-structured, multilingual, and provides clear navigation to various municipal departments and services. The technical infrastructure leverages common web technologies including jQuery, Bootstrap, and Swiper.js, indicating a moderate level of digital maturity suitable for a government portal. Security posture is adequate with HTTPS implied but lacks visible advanced security headers and incident response information. Privacy compliance is strong with a clear cookie consent mechanism and a dedicated privacy policy page. Overall, the site presents a trustworthy and professional digital presence for the city government.

S

Sdružení obcí Sedlčanska

sedlcansko.cz

50

Sdružení obcí Sedlčanska is a regional association of municipalities in the Sedlčansko area of the Czech Republic, providing coordination, information, and services to local governments and citizens. The website serves as an official portal offering news, contact information, community projects, and tourism promotion. The organization positions itself as a trusted regional government entity with a focus on community engagement and public service. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, and Swiper.js, ensuring a responsive and user-friendly experience. The site includes a cookie consent mechanism aligned with privacy best practices, although it lacks a dedicated privacy policy and terms of service pages. Security posture is moderate with HTTPS usage implied, but no explicit security headers or incident response information are published. The absence of WHOIS data limits domain trust assessment, but the website content and contact details suggest legitimacy. Overall, the site is professionally designed, accessible, and safe for general audiences.

M

Mikroregion Čáslavsko, s. o.

caslavsko.com

46

Mikroregion Čáslavsko, s. o. is a small non-profit community association serving the Čáslavsko region in the Czech Republic. The organization focuses on regional development, social services, education, tourism, and cultural event coordination. The website provides comprehensive information about the association's activities, member municipalities, events calendar, and public documents, targeting local residents, municipalities, and tourists. The business model is centered on community support and regional cooperation, positioning it as a trusted local government-related entity. Technically, the website employs a modern frontend stack including jQuery, Bootstrap 5.3, FontAwesome, and several gallery and slider libraries. It appears to be built on a custom or Nette-based CMS platform and is hosted with a reputable Czech registrar and uses Cloudflare DNS services. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. From a security perspective, the site uses HTTPS and Cloudflare DNS but lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. There is no visible cookie consent mechanism or privacy policy compliance indicators, which are notable gaps in GDPR compliance. No incident response or vulnerability disclosure information is published. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk assessment is low given the nature of the business and the absence of sensitive data processing or e-commerce. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing privacy and security policies, and adding cookie consent mechanisms to enhance compliance and trust.

S

Společenství obcí ORP Příbram

dsopribram.cz

47

Společenství obcí ORP Příbram is a voluntary association of municipalities in the Příbram region of the Czech Republic, established in 2015. It serves as a non-profit governmental entity providing joint services, educational programs, public procurement, and information resources to its member municipalities. The website is professionally designed, well-structured, and targets local government officials and residents within the region. The business model focuses on collaboration and shared municipal services, positioning it as a key regional governmental organization. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, Swiper, and other libraries, hosted on a custom CMS platform likely provided by Galileo Corporation. The site is mobile-optimized and accessible, with good SEO practices and a cookie consent mechanism in place. However, no privacy policy or terms of service pages were found, which is a compliance gap. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is missing, which reduces trust slightly but the official contact information and domain usage support legitimacy. Overall, the website is a credible and professional government association site with moderate technical maturity and some room for improvement in privacy and security documentation. Strategic recommendations include publishing privacy and security policies, implementing security headers, and improving WHOIS transparency.

P

Project Childsafe

projectchildsafe.org

11

Project Childsafe is a well-established non-profit program under the National Shooting Sports Foundation focused on promoting firearm safety and education. The organization targets gun owners, law enforcement, safety instructors, and the general public with educational resources, free gun locks, and community outreach initiatives. The website reflects a strong market position as the nation’s most comprehensive firearm safety program, supported by consistent branding and trust indicators such as testimonials and social media presence. Technically, the site is built on WordPress with modern frameworks and tools, including Yoast SEO, Google Analytics, and accessibility enhancements via Monsido. The site is mobile-optimized and performs moderately well, with good SEO and accessibility scores. Security posture is solid with HTTPS enforced and anti-enumeration plugins, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic, with a privacy policy present but lacking explicit cookie consent mechanisms. Overall, the domain registration is consistent with the organization's history and legitimacy, supporting a high trust score.

The website www.baumesse-wietmarschen.de serves as a regional event promotion platform for the Baumesse trade fair focused on building, living, and gardening in Wietmarschen-Lohne, Germany. It is managed by Wirtschaft Innovation Nordwest and features detailed event information, exhibitor listings, and partner organizations. The site is built on the Jimdo Creator CMS platform, leveraging third-party services such as Google Analytics and POWr.io widgets for enhanced functionality. The website is well-structured, mobile-optimized, and provides clear navigation and contact information, although no contact forms or email addresses are directly provided. From a technical standpoint, the site uses HTTPS with a good SSL configuration and includes a comprehensive cookie consent mechanism compliant with GDPR. However, it lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or suspicious content were detected, and the domain registration data aligns with the hosting platform, indicating legitimacy. The site does not display terms of service or certifications, which could be areas for improvement. Overall, the security posture is moderate with room for enhancement in security headers and incident response transparency. Privacy compliance is good due to the presence of a privacy policy and cookie consent. The business credibility is supported by clear contact details and partner affiliations. The website is safe for general audiences and does not contain any adult or questionable content. Strategic recommendations include implementing additional security headers, publishing incident response contacts, and adding terms of service to improve trust and compliance. Regular audits of third-party scripts and continued adherence to privacy regulations will further strengthen the site's security and user trust.

H

HLR-UTBILDNING

hlrutbildning.net

41

HLR-UTBILDNING is a Swedish company specializing in heart and lung resuscitation (HLR) and first aid training services. They offer various training packages including heart starter leasing and maintenance, targeting workplaces and organizations to improve emergency preparedness and safety. The company claims to be nationally active with a foundation year of 2005 and holds certification from Hjärt-Lungfonden, enhancing their credibility in the healthcare training sector. The website is professionally designed using WordPress and Elementor, with good SEO practices but lacks visible privacy and cookie policies. Contact information is clearly provided, supporting business credibility. However, the absence of WHOIS registration data raises concerns about domain legitimacy.

M

Malmö Flyttjänst

flyttjanst.com

37

Malmö Flyttjänst operates as a local moving company based in Malmö, Sweden, providing reliable moving and relocation services primarily targeting residential and commercial customers in the Malmö area. The website is built on WordPress and leverages modern web technologies including Google Tag Manager and Cookiebot for analytics and cookie consent management. The technical infrastructure is hosted by One.com A/S, with a domain registered since 2016, consistent with the business's operational timeline. Security posture is adequate with HTTPS enabled and reCAPTCHA implemented on forms, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service pages. Overall, the website is professional, well-designed, and provides relevant content for its target audience.

S

Spektrum Gesundheit

rauszeit-im-kopf.de

46

Spektrum Gesundheit is a German interdisciplinary health platform that integrates mental, physical, and ecological health topics. It targets health professionals, urban planners, environmental scientists, educators, and decision-makers, providing scientifically grounded and practical health knowledge. The platform evolved from a mental health focus to a broader holistic health approach, emphasizing the interconnectedness of human, animal, environmental, and societal health. Technically, the website is built on the Contao Open Source CMS, uses jQuery, and is hosted on kasserver.com. It features modern web standards, responsive design, and SEO best practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with GDPR, with minimal user tracking via Matomo analytics.

L

Liechtensteiner Alpenverein

rhiblok.li

62

Rhiblok is a community-focused climbing hall project scheduled to open in autumn 2026 in Liechtenstein, operated by the Liechtensteiner Alpenverein. The website presents detailed information about the facility, including climbing and bouldering routes, and serves as a communication platform for the local climbing community. The technical infrastructure is based on the concrete5 CMS with modern JavaScript libraries such as jQuery, Swiper.js, and Anime.js, providing a responsive and visually engaging user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms indicates room for improvement in compliance and security best practices. Overall, the website is professional, trustworthy, and well-aligned with its business purpose.

A

Altes Kino

alteskino.li

46

Altes Kino is a small local cinema based in Vaduz, Liechtenstein, offering film screenings, event hosting, cinema rental, and an online shop. The website provides a program of films with ticket purchasing options and supports German and English languages. The business targets local cinema-goers and cultural audiences, positioning itself as a community-focused entertainment venue. Technically, the site is built on WordPress with WooCommerce and Tickera plugins, indicating a mature e-commerce and ticketing infrastructure. The site is mobile optimized and has good SEO practices but lacks some advanced accessibility features. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and formal security policies are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy with room for improvement in security and privacy transparency.

Slov Elektro, s.r.o. is a Slovak-based small retail company specializing in the online sale of electrical installation materials, LED lighting, switches, frames, and sockets. The company targets both consumers and professionals within Slovakia, offering a broad product range with expert advice and customer support. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience and trustworthiness. Technically, the site employs modern web technologies including jQuery, Bootstrap, Google Fonts, and integrates Google Analytics and Google Tag Manager for marketing and analytics purposes. Security measures include HTTPS enforcement and Google reCAPTCHA for form protection, although some security headers are missing and could be improved. Privacy compliance is addressed with clear privacy and cookie policies and a consent mechanism. WHOIS data confirms the legitimacy and consistency of the domain registration with the business information presented on the site. Overall, the website demonstrates a good balance of business credibility, technical implementation, and privacy compliance, suitable for its market niche.

M

MaM multimedia, s.r.o.

cistysvet.sk

10

ČistýSvet.SK is a Slovak-based e-commerce retailer specializing in cleaning machines, industrial vacuum cleaners, air humidifiers, purifiers, and food dehydrators. The company operates under MaM multimedia, s.r.o., with a business history dating back to 2005. The website targets consumers and businesses seeking quality cleaning and home care equipment, offering a range of products with clear pricing and promotional offers. The platform is positioned as a trusted regional player with a focus on customer service and reliable delivery. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and various JavaScript libraries for enhanced user experience such as PrettyPhoto and MagicZoomPlus. The site is moderately optimized for performance and mobile devices, with basic accessibility features and good SEO practices. The content is well-structured, professionally designed, and easy to navigate. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA for form protection, and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and a publicly available security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, ČistýSvet.SK demonstrates a solid business and technical foundation with good privacy compliance and trustworthy domain registration. Strategic improvements in security headers and incident response transparency would further enhance its security posture and customer trust.

S

Shopline.sk

shopline.sk

40

Shopline.sk is a Slovak e-commerce retailer specializing in branded sports clothing and footwear from brands such as Nike, Adidas, Converse, and others. The website targets general consumers in Slovakia looking for sports apparel and shoes at competitive prices. The business operates primarily online using a WordPress WooCommerce platform with the Flatsome theme, indicating a standard but effective e-commerce infrastructure. The site includes modern performance optimizations and tracking tools such as Google Tag Manager and Facebook Pixel, supporting marketing and analytics efforts. Security posture is adequate with HTTPS and some security headers, but lacks explicit security policies and incident response information. Privacy compliance is partially addressed with a cookie consent mechanism, though no privacy policy or terms of service were detected in the provided content. Overall, the website presents a professional and trustworthy front for a small to medium-sized regional e-commerce business.