Security Directory

A

Alaio Inc.

bitrix24.site

71

Bitrix24, operated by Alaio Inc., is a comprehensive SaaS platform offering a free and paid online workspace designed to manage teams, sales, and business processes efficiently. The platform integrates CRM, task and project management, collaboration tools, website and store creation, HR automation, and AI-powered assistance under the CoPilot brand. Positioned as a large technology company based in the US, Bitrix24 targets businesses seeking integrated digital tools to streamline operations and enhance productivity. The website reflects a mature digital presence with professional design, clear navigation, and extensive product information.

K

KIRKBI A/S

kirkbi.com

65

KIRKBI A/S is a large, family-owned holding company based in Denmark, primarily managing the LEGO Group and other investments focused on building a better future for children globally. The company emphasizes sustainability, education, and responsible financial investments, reflecting a long-standing family legacy dating back to 1932. The website is professionally designed, mobile-optimized, and provides comprehensive information about the business, including financial highlights and leadership insights. Technically, the site uses modern technologies such as Umbraco CMS, Cloudflare for hosting and security, and Google Tag Manager for analytics. The security posture is strong with HTTPS enforced and a detailed cookie consent mechanism, although some security headers are not visibly implemented. Privacy compliance is well addressed with clear policies and GDPR-aligned consent. However, the absence of WHOIS registration data for the domain reduces trust slightly and should be investigated. Overall, the site presents a trustworthy and professional digital presence aligned with the company's reputable business operations.

Q

Queue-it

queue-it.net

76

Queue-it is a Denmark-based technology company founded in 2010 specializing in virtual waiting room solutions designed to manage peak online traffic and prevent website crashes and bot abuse. The company offers a SaaS platform that enables businesses to control traffic flow during high-demand events, ensuring fair and reliable user experiences. With subsidiaries in the US, Australia, and South Korea, Queue-it serves a global market including ecommerce, ticketing, public sector, education, and financial services. The website reflects a mature digital presence with comprehensive product information, customer testimonials, and strong branding consistency. Technically, the website employs modern web technologies such as Google Tag Manager, jQuery, Bootstrap, and service workers, hosted on AWS infrastructure. It demonstrates good performance, mobile optimization, and SEO practices. Privacy and cookie policies are clearly presented with consent mechanisms, supporting GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be enhanced. Overall, Queue-it's security posture is robust with good privacy compliance and transparent business information. The domain registration is consistent with the company's claims, showing a trustworthy and established online presence. No WAF or blocking mechanisms interfere with content access, and no adult or questionable content is present. Strategic recommendations include improving security headers, publishing a security.txt file for vulnerability disclosure, and enhancing incident response contact visibility to further strengthen trust and compliance.

Amazon.it is the Italian localized e-commerce platform operated by Amazon.com, Inc., a global leader in online retail. The website offers a broad range of products and services including a marketplace for third-party sellers and affiliate marketing programs. The platform targets a general audience in Italy and operates as part of Amazon's extensive global e-commerce ecosystem. Technically, the site uses proprietary Amazon UI libraries and scripts, hosted on Amazon AWS infrastructure, with moderate performance and basic mobile optimization. The presence of captcha instrumentation indicates active measures against automated access. Security posture is strong with HTTPS enforced and captcha challenges, though visible security headers are not detected in the provided data. Privacy and terms of service pages are present and comprehensive, indicating good compliance with GDPR and related regulations. However, the analyzed page is a security checkpoint, limiting content accessibility and reducing the ability to fully assess content quality and user experience. Overall, the domain registration is consistent with Amazon's global brand and business history, supporting high legitimacy and trustworthiness.

U

Union poisťovňa, a. s.

union.sk

70

Union poisťovňa, a. s. is a prominent Slovak insurance company combining public health and commercial insurance services under one brand. The company targets Slovak residents seeking comprehensive health, vehicle, property, travel, and life insurance products. The website reflects a strong market position with a professional and consistent brand presence, supported by clear business information and multiple customer engagement channels. Technically, the site is built on WordPress using modern tools like Elementor, UberMenu, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. The security posture is solid with HTTPS enforcement, security headers, and cookie consent mechanisms, though it lacks a dedicated security policy or incident response page. WHOIS data confirms the legitimacy and transparency of the domain registration, aligning well with the company's identity and operations. Overall, the website is professional, secure, and compliant, serving as a trustworthy digital front for the company.

S

SmartBase

smartbase.sk

54

SmartBase is a Slovak technology company specializing in custom software development and eCommerce solutions, with over 10 years of experience. They offer a range of services including custom eCommerce platforms, B2B zones, mobile applications, UX design, data analysis, and migration services. Their market position is that of an established and innovative player in digital commerce, targeting businesses seeking scalable and high-performance online sales solutions. Technically, the website is built on WordPress with multilingual support and integrates modern analytics and tracking tools such as Google Tag Manager and Hotjar. Hosting and DNS are managed via Cloudflare, providing good security and performance benefits. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no visible consent mechanism. Overall, the website is professional and trustworthy, with strong client references and a consistent brand presence.

2

24pay s.r.o.

24-pay.sk

58

24pay s.r.o. is a Slovakian payment solutions provider specializing in payment gateway services and POS terminal offerings. Established in 2011, the company targets businesses and developers seeking integrated payment methods including Google Pay and Apple Pay. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its market segment. Technically, the site is built on WordPress with modern plugins and tracking tools, hosted likely by Active24, and employs HTTPS with DNSSEC for secure communications. Security posture is solid with standard best practices observed, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site demonstrates a mature digital presence with good business credibility and technical implementation.

5

50skills

50hire.com

56

50skills operates a modern SaaS platform focused on streamlining recruitment and hiring processes for HR managers. Their product, 50hire, offers applicant tracking, sourcing, customizable pipelines, and integrations with popular collaboration tools like Slack and Workplace. The website is professionally designed, mobile-optimized, and provides comprehensive resources including help centers, video tutorials, and security documentation. However, the absence of WHOIS data for the domain www.50hire.com raises concerns about domain registration legitimacy, although the website content and branding are consistent and trustworthy. Security posture is strong with HTTPS, GDPR compliance, and security features like SSO and 2FA, but the lack of a cookie consent mechanism is a minor compliance gap.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which serves as a placeholder or offline dinosaur game page when a real website is not accessible. There is no actual business website content, metadata, or contact information available. The page is primarily composed of embedded JavaScript and styles related to the Chrome offline game, with no external links or business-related data. Due to the nature of this content, no privacy, cookie, or terms of service policies are present, and no security or compliance frameworks are indicated. The lack of accessible content and business information severely limits the ability to perform a meaningful security or compliance analysis.

I

Infolinks Inc.

infolinks.com

58

Infolinks Inc. operates a large-scale digital advertising platform focused on connecting publishers and advertisers through innovative ad solutions emphasizing intent targeting, high viewability, and exclusive placements. The company claims a significant market presence with over 350,000 websites and 240 million monthly unique users, positioning itself as the third largest publisher marketplace globally. Their business model centers on monetizing content for publishers and providing effective advertising solutions for advertisers, leveraging a proprietary ad platform. The website is professionally designed, SEO optimized, and mobile responsive, reflecting a mature digital infrastructure built on WordPress with integrations of major analytics and marketing tools such as Google Tag Manager, Facebook SDK, and Twitter Ads.

The website pippio.com is currently inaccessible, returning a 503 Service Unavailable error indicating no server is available to handle requests. Due to the lack of accessible content, no metadata, structured data, contact information, or business descriptions could be extracted. The domain is registered with Cloudflare, Inc. since 2011, indicating a mature domain age consistent with an established business, but no further business details are available. The technical infrastructure appears to rely on Amazon AWS DNS services and Cloudflare as registrar, but no hosting or CMS details are discernible. Security posture cannot be fully assessed due to lack of content and headers; however, DNSSEC is not enabled, and no security policies or incident response contacts are published. Overall, the website is non-functional at this time, preventing a comprehensive analysis.

V

Verve

lkqd.net

79

Verve operates a digital advertising marketplace platform focused on enabling sellers to maximize revenue through performance and brand advertising solutions. The company offers a suite of services including Performance+ Marketplace, Brand+ Marketplace, mobile user acquisition, and demand side platform capabilities. The website reflects a mature and professional business with a consistent brand presence and a clear focus on digital advertising technology. Technically, the site is built on WordPress with modern plugins and frameworks such as Elementor and Yoast SEO, hosted likely on AWS infrastructure. The site implements cookie consent via OneTrust and uses analytics and tracking tools like Crazy Egg, Google Tag Manager, and HubSpot. Security posture is good with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are not evident. No privacy policy or terms of service were found on the analyzed page, which is a compliance gap. Overall, the domain is longstanding and consistent with a legitimate business. The site is safe for general audiences and does not contain adult or questionable content.

C

Cision

c212.net

67

Cision operates as a global provider of cloud-based communications and PR software services, targeting professionals in marketing, media relations, and content marketing. The company offers a suite of services including media monitoring, media list building, distribution, and analysis, positioning itself as an established player in the media industry. The website content is professional but limited in depth on the privacy policy page, with no direct contact information or detailed security policies presented. Technically, the website employs modern tracking and marketing technologies such as Google Tag Manager, OneTrust for cookie consent, and third-party attribution tools. The site is accessible without any WAF or blocking mechanisms, but lacks explicit security headers and detailed accessibility features. Mobile optimization and SEO are basic but functional. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but the absence of WHOIS data and registrant information raises concerns about domain registration transparency. No incident response or security contact details are provided, limiting the ability to assess compliance fully. Overall, the security posture is moderate but could be improved with better header implementation and transparency. The overall risk is moderate with recommendations to enhance security headers, provide clear contact information for security incidents, improve accessibility, and clarify domain registration details to increase trustworthiness.

The website donordrivecontent.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, specifically an error 1005 indicating that the autonomous system number (ASN) of the visitor's IP is banned. This prevents access to any meaningful content or business information on the site. The domain is registered with Squarespace Domains II LLC since 2021 and uses Cloudflare DNS services without DNSSEC enabled. The lack of accessible content and policies limits the ability to assess the company's business model, services, or compliance posture. Technically, the site leverages Cloudflare for security and performance, but the current configuration results in blocking legitimate access, which negatively impacts user experience and trust. No security headers or SSL details are visible from the provided data. No privacy, cookie, or terms of service policies are found, and no contact information or forms are present. From a security perspective, the site relies on Cloudflare's WAF but currently enforces a restrictive ASN ban that may affect legitimate users. The absence of visible security policies or incident response contacts indicates a low maturity level in security transparency. The domain registration data appears consistent and legitimate, but the lack of public business information and the blocking mechanism reduce trustworthiness. Overall, the site is rated low in content quality, technical implementation, security posture, privacy compliance, and business credibility due to the blocking and lack of accessible information. Strategic recommendations include reviewing Cloudflare WAF rules to avoid overblocking, publishing clear privacy and security policies, enabling DNSSEC, and improving transparency and user experience.

M

MJH Life Sciences

modernmedicine.com

59

MJH Life Sciences is a healthcare-focused organization dedicated to providing trusted information, resources, and education to healthcare professionals to optimize patient outcomes. The company positions itself as an established provider in the healthcare information sector, targeting healthcare professionals primarily in the United States. The website uses a professional WordPress-based infrastructure with modern JavaScript libraries and SEO optimizations, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and good SSL configuration, but lacks some security headers and formal privacy and cookie policies, which are important for compliance and trust. The absence of WHOIS data reduces domain trustworthiness, suggesting the domain may be recently registered or privacy protected. Overall, the website is professional and safe, but improvements in privacy compliance and security best practices are recommended.

T

The Educated Patient

theeducatedpatient.com

67

The Educated Patient is a healthcare education platform providing expert-driven resources on treatment options, medications, and therapies to empower individuals in making informed health decisions. The website targets patients and individuals seeking reliable health information and offers a structured navigation of health conditions and related topics. Technically, the site is built on modern frameworks such as Next.js and React, integrating multiple analytics and marketing tools including Google Analytics, HubSpot, and Algolia Insights. Cookie consent and privacy mechanisms are implemented, reflecting a basic level of privacy compliance. Security posture is moderate with HTTPS implied but lacking visible security headers or published security policies. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or recent registration, which impacts domain trustworthiness. Overall, the site presents professional content and a good user experience but would benefit from enhanced transparency in privacy and security policies.

Urology Times is a well-established healthcare media publication specializing in urology news, clinical insights, and educational content for urologists and allied health professionals. The website is operated by MJH Life Sciences, a recognized entity in medical publishing. The platform offers a broad range of services including news articles, conference coverage, podcasts, and continuing medical education resources, positioning itself as a leading resource in its niche. The target audience is primarily healthcare professionals specializing in urology, and the content is professionally curated to meet their informational needs. Technically, the website employs a modern technology stack including Astro framework, Sanity CMS, and various analytics and advertising tools such as Segment Analytics and Google Tag Manager. The site is optimized for performance and mobile responsiveness, with good SEO and accessibility practices in place. Security measures include HTTPS enforcement and standard security headers, contributing to a strong security posture. While the WHOIS data is not publicly available, indicating privacy protection, the website's content and business information are consistent and professional, supporting its legitimacy. Privacy and cookie policies are comprehensive and GDPR compliant, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a mature digital presence with a strong focus on content quality and user experience. Strategic recommendations include publishing a dedicated security policy, establishing a vulnerability disclosure program, and enhancing incident response transparency to further strengthen trust and compliance. Continued monitoring of third-party scripts and regular security audits are advised to maintain the robust security posture.

Contemporary OB/GYN is a specialized healthcare media platform focused on delivering clinical updates, expert commentary, and educational resources in obstetrics and gynecology. The website serves healthcare professionals with a comprehensive range of content including news, podcasts, conference coverage, and continuing medical education. The platform demonstrates a mature market position within the healthcare media niche, supported by professional design and consistent branding. Technically, the website employs modern web technologies such as Astro framework, Sanity CMS, and integrates advanced analytics and consent management tools like Segment Analytics and OneTrust. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS, implements key security headers, and uses cookie consent mechanisms aligned with GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public security policy or incident response contact suggests room for improvement in transparency and readiness. Overall, Contemporary OB/GYN presents a low-risk profile with strong business credibility and technical maturity. Strategic enhancements in security policy publication and incident response communication would further strengthen trust and compliance.

C

Contemporary Pediatrics

contemporarypediatrics.com

66

Contemporary Pediatrics is a specialized healthcare publication focused on providing pediatricians with peer-reviewed clinical news, guideline updates, and practical practice strategies. Founded in 2001 and operated by MJH Life Sciences, the website serves as a professional resource for pediatric healthcare providers, offering accredited CME and NCPD content. The site demonstrates a consistent brand presence and targets a professional medical audience. Technically, the website leverages modern web frameworks such as Next.js and React, integrates multiple analytics and marketing tools, and employs a robust consent management system via OneTrust, reflecting a mature digital infrastructure. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and published security policies suggests room for improvement. The WHOIS data is notably missing or inaccessible, raising questions about domain registration legitimacy, which warrants further investigation. Overall, the site is professional and trustworthy in content but would benefit from enhanced transparency in domain registration and security disclosures.

OncLive is a specialized media platform focused on clinical oncology news and expert insights, operated by MJH Life Sciences. The website targets oncology professionals and healthcare providers, offering multimedia content including interviews and news updates. The platform holds a solid market position within the oncology information niche, founded in 2009 and based in the United States. Technically, the website employs modern JavaScript libraries, analytics tools like Segment and Google Analytics, and consent management via OneTrust, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, implements key security headers, and manages user consent effectively, though it lacks a dedicated security policy or incident response page. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though the absence of WHOIS data slightly impacts domain trustworthiness. Strategic recommendations include publishing security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and security posture.

HCPLive is a specialized clinical news and information portal serving physicians and healthcare professionals with disease-specific resources, conference coverage, and interviews. Operated by MJH Life Sciences, the website positions itself as a trusted source of medical news and education. The business model centers on content publishing targeted at healthcare providers, with a medium-sized organizational footprint and a founding date of 2008. The site demonstrates consistent branding and professional content quality, appealing to a niche medical audience. Technically, the website employs modern analytics and consent management tools such as Google Tag Manager, Segment Analytics, and OneTrust, indicating a mature digital infrastructure. The site is well-optimized for mobile devices and SEO, with good performance and accessibility at a basic level. Security best practices are observed with HTTPS enforcement and security headers, though explicit security policies and incident response details are absent. From a security perspective, the site shows a solid posture with no evident vulnerabilities or exposed sensitive data. However, the absence of a vulnerability disclosure program and security.txt file suggests room for improvement in transparency and incident readiness. Privacy compliance is well-handled with clear policies and consent mechanisms, aligning with GDPR requirements. Overall, HCPLive presents a professional and trustworthy online presence for healthcare professionals. The main risk factor is the lack of WHOIS data, which slightly reduces domain trustworthiness. Strategic recommendations include publishing explicit security and incident response policies, implementing vulnerability disclosure mechanisms, and enhancing accessibility features to further strengthen the site's security and compliance posture.

CGTLive® is a specialized healthcare media platform focused on delivering news, expert insights, and real-time coverage in the cell and gene therapy sector. The website targets healthcare professionals, researchers, and industry stakeholders interested in cutting-edge advancements in this niche field. The business model centers on providing high-quality content and information services to a specialized audience, positioning itself as a trusted source in the cell and gene therapy community. Technically, the website employs modern web technologies including Astro for static site generation, Google Tag Manager, Segment Analytics, and OneTrust for consent management. The site is well-optimized for mobile devices and demonstrates good SEO practices. Performance is moderate with room for improvement in accessibility features. The presence of cookie consent mechanisms and GDPR compliance indicators reflects a mature approach to privacy. From a security perspective, the site uses HTTPS and employs cookie consent management to control tracking. However, no explicit security headers were detected in the provided data, and no privacy or terms of service pages were found, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about domain legitimacy and transparency, although the professional content and technical setup suggest a legitimate operation. Overall, CGTLive® presents a professional and trustworthy platform within its healthcare niche but would benefit from enhanced transparency in domain registration and explicit publication of privacy and terms policies to strengthen user trust and compliance posture.

Contagion Live is a specialized digital news platform focused on infectious disease, providing expert insights, news, videos, podcasts, and conference coverage targeted at infectious disease specialists and healthcare practitioners. The platform is operated by MJH Life Sciences, a recognized entity in healthcare media. The website demonstrates a professional and consistent brand presence with a clear business model centered on delivering timely and relevant infectious disease information. Technically, the site leverages modern web technologies including the Astro framework, Sanity CMS, and integrates advanced analytics and consent management tools, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and consent mechanisms but lacks some explicit security headers and published security policies, indicating room for improvement in security posture. Overall, the site is trustworthy and well-positioned in its niche, though the absence of WHOIS domain registration data introduces some uncertainty regarding domain legitimacy.

Medical World News is a specialized healthcare media platform delivering news, interviews, and educational content targeted at healthcare professionals and medical industry stakeholders. The site features multiple content series covering clinical insights, economic aspects, and wellbeing topics relevant to the medical community. Technically, the website employs modern web technologies including the Astro framework, Sanity CMS, and integrates analytics tools such as Segment and Google Analytics 4. The site is well-structured, mobile-optimized, and uses HTTPS with good security headers, reflecting a solid security posture. However, the absence of explicit privacy and cookie policies, as well as missing WHOIS registration data, presents compliance and legitimacy concerns that should be addressed to enhance trust and regulatory adherence. Overall, the platform offers professional content with good user experience but requires improvements in privacy transparency and domain registration clarity.

I

IS Produkce

isprodukce.cz

45

IS Produkce is a Czech media production company established in 2008, offering a broad range of services including commercials, films, videos, photography, and visual effects. The company emphasizes integrated production workflows covering preproduction, production, and postproduction under one roof, enabling efficient and seamless project delivery. Their website showcases a professional portfolio with references to notable clients and projects, targeting businesses and professionals seeking high-quality media content. Technically, the website is built on WordPress 6.8.3 with a modern tech stack including jQuery, Swiper.js, and Lightbox.js. It uses Cloudflare for DNS and CDN services, ensuring good performance and security. The site is mobile-optimized and includes analytics and marketing tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. However, it lacks visible privacy and cookie policies, and no cookie consent mechanism is implemented, which is a compliance gap. From a security perspective, the site enforces HTTPS with excellent SSL configuration and uses Google reCAPTCHA v3 to protect forms. Despite this, it lacks security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration is consistent with the business claims, showing a legitimate and stable presence since 2008. Overall, IS Produkce presents a professional and trustworthy online presence with good technical implementation and business credibility. The main areas for improvement include enhancing privacy compliance by publishing policies and implementing cookie consent, adding security headers, and providing clear security and incident response information.

O

Obec Strašov

obecstrasov.cz

50

Obec Strašov is the official municipal website for the village of Strašov in the Czech Republic. It serves as a local government portal providing residents and visitors with information about municipal services, news, events, public notices, and contact details. The website targets local citizens and community members, offering a centralized platform for civic engagement and communication. The business model is that of a government entity focused on public service and community information dissemination. The domain was registered in 2022, consistent with a relatively new or modernized municipal web presence.

O

Obec Liptál

liptal.cz

51

The website liptal.cz serves as the official online presence of the municipality of Liptál in the Czech Republic. It provides comprehensive information about local government services, community events, cultural institutions, and public notices. The site targets residents and visitors seeking municipal information and community engagement opportunities. The business model is that of a governmental public service portal, with a focus on transparency and community support. The domain is well-established since 1999, reinforcing its credibility as an official municipal resource. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Swiper, and Nette Framework components, hosted by WEDOS. It integrates Google Analytics and reCAPTCHA for analytics and security. The site is mobile-optimized with good accessibility and SEO practices, though some security headers could be improved. Privacy compliance is strong, with a dedicated GDPR page and cookie consent mechanism. From a security perspective, the site uses HTTPS with good SSL configuration and implements bot protection via reCAPTCHA. No critical vulnerabilities or exposed sensitive data were detected. However, enhancements such as additional security headers and a formal incident response page would strengthen the security posture. Overall, liptal.cz is a trustworthy, well-maintained municipal website with good content quality and user experience. It effectively serves its community with relevant information and services, while maintaining compliance with privacy regulations. Strategic improvements in security headers and incident response documentation are recommended to further enhance trust and resilience.

O

Obec Hošťálková

hostalkova.cz

52

The website hostalkova.cz serves as the official digital presence of the municipality of Hošťálková in the Czech Republic. It provides comprehensive information about local government services, community events, public notices, and cultural activities. The site targets residents, local institutions, and visitors seeking municipal information. It operates as a governmental public service portal with a focus on transparency and community engagement. The domain's age and WHOIS data confirm its legitimacy and long-standing presence since 2000. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Swiper, and Nette Framework components, ensuring a responsive and accessible user experience. Multimedia content such as videos, virtual tours, and photo galleries enrich the site. Hosting and domain registration are consistent with the Czech Republic location, supporting trustworthiness. From a security perspective, the site uses HTTPS and Google reCAPTCHA to protect forms, but lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced compliance and protection. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a GDPR page, but could be improved with clearer cookie policies and incident response information. Overall, hostalkova.cz is a well-maintained, trustworthy municipal website with good content quality and technical implementation. Strategic improvements in privacy and security policies would further strengthen its posture and user trust.

O

Obec Ratiboř

ratibor.cz

52

Obec Ratiboř operates an official municipal website serving the local community of Ratiboř in the Czech Republic. The site provides comprehensive information about local government services, community events, public notices, and contact details. It targets residents, visitors, and stakeholders interested in municipal affairs, positioning itself as a trusted source of local government information. The business model is public service oriented, focusing on transparency and community engagement. The website is well-branded, consistent, and professionally maintained with a domain age dating back to 2004, indicating a stable online presence. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Swiper, and Nette Framework, supported by Google Analytics and Tag Manager for analytics. It uses HTTPS with good SSL configuration and integrates Google reCAPTCHA for form security. The site is mobile optimized, accessible, and SEO friendly, though performance is moderate. Hosting and domain registration are managed by WEDOS, a reputable Czech provider. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and bot protection. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. There is no visible security policy or incident response contact information, which could be improved to strengthen trust and readiness. No vulnerabilities or suspicious content were detected. Overall, Obec Ratiboř's website is a secure, professional, and trustworthy municipal portal with excellent content quality and user experience. Strategic improvements in privacy compliance and security policy transparency would further enhance its security posture and user trust.

The website aiprodukce.cz is a newly registered domain (created March 21, 2024) serving as a landing page for Gransy, a domain registrar and DNS service provider. The site primarily promotes Gransy's services including domain reseller programs, Anycast DNS protection, and a white label registrar platform. The content is minimal and focused on encouraging visitors to learn more about Gransy’s offerings. The technical infrastructure is basic, using standard HTML5 and CSS3 with Google Fonts, hosted likely by Gransy itself. There is no evidence of advanced CMS or third-party analytics tools, indicating a simple and lightweight setup. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are important for compliance and trust. No contact information or incident response details are provided, limiting transparency. The domain registration data aligns well with the website content and registrar branding, suggesting legitimacy despite the domain's recent creation. No suspicious or malicious indicators were found. Overall, the website is functional as a placeholder and informational page but lacks comprehensive business, security, and privacy details that would enhance trust and compliance. The risk level is moderate due to the absence of critical security features and policies, but no immediate vulnerabilities or malicious content were detected. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to strengthen the site's credibility and security posture.

K

Klub legend

klublegend.cz

45

Klub legend is a Czech sports club website dedicated to honoring players and coaches who have participated extensively in the Chance Liga, the Czech Republic's second-tier football league. The site serves as a prestige platform recognizing individuals with at least 300 matches played or coached since the 1993/94 season. It features member profiles, inauguration highlights, brand manuals, and multimedia content targeting football fans and stakeholders within the Czech football community. The business model revolves around community recognition and brand promotion within the sports sector. Technically, the website is built on WordPress using the Elementor page builder, hosted by a Czech registrar REG-ZONER, and employs modern web technologies including jQuery and Swiper.js. The site is mobile-optimized and includes SEO best practices such as structured data and Open Graph tags. Security-wise, the site enforces HTTPS and includes a GDPR-compliant cookie consent mechanism via the Complianz plugin. However, it lacks explicit security policies, incident response contacts, and advanced security headers. Overall, the site is professional, trustworthy, and compliant with privacy regulations, but could improve in security transparency and contact availability.

C

Chance Liga

chanceliga.cz

47

Chance Liga is the official online portal for the Czech First Football League, providing comprehensive information including match schedules, standings, player and team statistics, news, and multimedia content. The website targets football fans and sports enthusiasts primarily in the Czech Republic, serving as a central hub for league-related information and fan engagement. The business model is media-focused, leveraging official league branding and partnerships to deliver timely sports content. Technically, the website employs modern web technologies such as Bootstrap for responsive design, Google Analytics for traffic analysis, Google reCAPTCHA for form security, and Typekit fonts for typography. The site is mobile-optimized and features good navigation and content structure, although accessibility features are basic. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS and includes reCAPTCHA to protect forms, but lacks advanced security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is limited due to the absence of explicit privacy and terms of service pages, though a cookie consent mechanism is present. Overall, the website is professional and trustworthy in content and design but would benefit from enhanced privacy disclosures and security hardening. The lack of WHOIS data reduces domain trust assessment, but the official nature of the content and partnerships supports legitimacy.

L

Ligová fotbalová asociace

lfafotbal.cz

46

Ligová fotbalová asociace (LFA) is a professional football association representing Czech Republic's top football clubs. It aims to enhance the prestige of the highest football competitions and advocates for the interests of professional clubs. The website provides information about projects, committees, documents, media, and organizational structure, targeting football clubs, fans, and industry stakeholders. Technically, the website uses modern web technologies including Google Analytics and Facebook SDK, with a cookie consent mechanism implemented for GDPR compliance. Security posture is moderate with HTTPS enabled but lacks some security headers and explicit privacy policies. The absence of WHOIS data and registrant information reduces domain trustworthiness, and suspicious hidden links in the footer suggest potential SEO spam risks. Overall, the website is professional and functional but would benefit from improved transparency and security documentation.

S

SIGMA GROUP a.s.

sigma.cz

42

SIGMA GROUP a.s. is a well-established Czech manufacturing company specializing in the development, production, sales, and servicing of pumps for domestic, garden, and industrial use. Founded in 1868, it holds a leading market position as the largest Czech manufacturer of industrial pumps. The company operates multiple subsidiaries including SIGMA PUMPY HRANICE, s.r.o. and SIGMAshop.cz, targeting both industrial clients and general consumers. The website reflects a professional and consistent brand image with clear business information and multiple contact points. Technically, the site uses standard web technologies including Google Maps API and jQuery, though the jQuery version is outdated. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Privacy compliance is basic with a cookie consent banner but no visible privacy or terms of service pages. Overall, the site is functional, trustworthy, and suitable for its business purpose but could improve in security and compliance transparency.

1

11teamsports

11teamsports.cz

54

11teamsports.cz is a leading Czech Republic-based e-commerce retailer specializing in football boots, clothing, equipment, and fan merchandise. Established in 2011, the company offers a comprehensive product range with customization services and loyalty programs, targeting football players and fans primarily in the Czech market. The website demonstrates a mature digital infrastructure with integration of modern marketing and analytics tools such as Google Analytics, TikTok Pixel, and Exponea, supporting extensive user tracking and marketing efforts. Security posture is strong with enforced HTTPS, cookie consent mechanisms, and secure form handling, although some security headers could be improved. The site is professionally designed with good navigation and mobile optimization, reflecting a trustworthy and credible business presence.

U

UCED

uced.cz

70

UCED is a regional energy company operating primarily in the Czech Republic and Slovakia, providing electricity and gas sales, as well as heat and electricity production. The company maintains a broad network of offices and production sites, indicating a medium-sized enterprise with a solid market presence in the energy sector. The website is professionally designed, mobile-optimized, and provides comprehensive information about its services and branch locations. Technically, the site uses modern JavaScript technologies and Google Tag Manager for analytics and marketing, with good security practices such as HTTPS and security headers in place. However, the absence of WHOIS registration data raises concerns about domain legitimacy, though the business presence and content suggest a legitimate operation. Privacy and cookie policies are present and appear GDPR compliant, but no explicit security policy or incident response contact is published. Overall, the site scores well on content quality and security posture but should improve transparency on domain registration and security governance.

R

REDSTONE

rsre.cz

59

REDSTONE is a Czech Republic-based real estate development and investment company focusing on sustainable and innovative projects primarily in Prague, Olomouc, and Pardubice. The company has been active since 2015 and offers services across retail, office, residential, industrial, and mixed-use sectors. The website reflects a professional and modern digital presence with rich content and clear navigation, targeting investors and business clients in the Czech real estate market. Technically, the site leverages Webflow CMS, GSAP animations, and integrates analytics tools such as Google Analytics and Microsoft Clarity, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though the absence of security headers and privacy policy pages suggests room for improvement. WHOIS data is unavailable, limiting domain trust verification, but the overall website professionalism and contact transparency support legitimacy. Strategic recommendations include publishing privacy and security policies, adding security headers, and providing incident response information to enhance trust and compliance.

E

eSports.cz

esportsmedia.cz

38

eSports.cz is a well-established Czech company specializing in digital and web services for the sports sector, with over 23 years of experience. Their offerings include club websites, sports portals, custom systems, statistical systems, e-shops, photo banks, mobile applications, and audiovisual content. The company serves a broad range of sports organizations in the Czech Republic and internationally, positioning itself as a trusted partner with a strong client base and reputable references. Technically, the website is built on modern frameworks such as Next.js, employs Google Tag Manager for analytics, and is optimized for mobile devices with excellent design and user experience. Security posture is good with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and formal privacy and terms policies. Overall, the site is professional, trustworthy, and compliant with basic privacy requirements, supporting the company's credibility and market position.

O

Onlajny.com | online přenosy sportovních utkání, závodů a událostí

onlajny.com

46

Onlajny.com is a Czech-language online platform specializing in live broadcasts and real-time coverage of sports matches, races, and events. It serves primarily sports fans and bettors by providing live scores, statistics, and betting odds integration. The website operates an advertising-supported business model, leveraging multiple ad networks and analytics services to monetize its traffic. The platform is technically mature, employing modern JavaScript libraries, real-time data streaming via Lightstreamer, and comprehensive cookie consent mechanisms to comply with GDPR. Security posture is adequate with HTTPS and basic security headers, though improvements are recommended in advanced header implementation and incident response transparency. The domain WHOIS data is unavailable, which reduces transparency but the active and professional nature of the site supports its legitimacy. Overall, the site presents a moderate risk profile with good user experience and compliance awareness.

E

eSports.cz

esports.cz

38

eSports.cz is a well-established Czech company specializing in digital and web services for the sports sector, with over 23 years of experience supporting sports clubs, associations, and organizations domestically and internationally. Their market position is strong within the Central European sports digital services niche, offering a broad range of services including club websites, sports portals, custom systems, statistical systems, e-shops, photo banks, and mobile applications. The company targets sports organizations seeking modern, responsive, and integrated digital solutions. Technically, the website is built on modern frameworks such as Next.js and React, with good mobile optimization and performance. Security posture is solid with HTTPS and cookie consent mechanisms, though lacks published security policies and some security headers. Overall, the site is professional, trustworthy, and content-rich, with strong client references and social media presence.

F

Fotbalový klub Luhačovice

fkluhacovice.cz

41

Fotbalový klub Luhačovice is a local football club based in the Czech Republic, providing sports-related activities and community engagement. The website serves as an informational portal for the club, targeting local football enthusiasts and community members. The site is built on WordPress using the Divi theme, incorporating common plugins such as Contact Form 7 and Monarch for social sharing, and includes Google Fonts and reCAPTCHA for form security. The technical infrastructure is standard for small sports clubs, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled and reCAPTCHA implemented, but lacks advanced security headers and formal security policies. Privacy and cookie policies are absent, indicating a gap in compliance with GDPR and related regulations. Overall, the site is functional and professional but would benefit from enhanced security and privacy measures to improve trust and compliance.

I

InsertCart

insertcart.com

63

InsertCart is a small technology-focused e-commerce business specializing in premium WordPress themes, plugins, and mobile app development services. The website positions itself as a provider of digital presence enhancement tools for businesses and developers, offering membership access to premium products. Technically, the site is built on WordPress with WooCommerce and uses modern plugins such as LiteSpeed Cache and Contact Form 7, indicating a moderate level of digital maturity. The site is HTTPS secured and includes basic SEO and accessibility features, though some areas like security headers and privacy compliance could be improved. Security posture is adequate but lacks explicit policies and incident response information. The absence of WHOIS registration data raises concerns about domain legitimacy, impacting overall trust. Strategic recommendations include improving transparency with privacy and cookie policies, adding security headers, and providing clear contact and incident response details to enhance trust and compliance.

S

Střední uměleckoprůmyslová škola Uherské Hradiště

supsuh.cz

57

The website supsuh.cz represents the Střední uměleckoprůmyslová škola Uherské Hradiště, a Czech secondary art industrial school established in 1999. It serves students, parents, and the public with educational content, student portals, and related services. The site is professionally designed with clear navigation and offers multilingual support (Czech and English). Technically, the site uses standard web technologies including jQuery, Google Fonts, and a cookie consent framework, hosted under a Czech registrar with HTTPS enabled. Security posture is adequate with encrypted connections and cookie consent mechanisms, but lacks advanced security headers and uses an outdated jQuery version, which could pose risks. Privacy compliance is partial due to the absence of a dedicated privacy policy and terms of service pages, though cookie consent is well implemented. Overall, the site is trustworthy and suitable for its educational purpose, but could improve in security and compliance documentation.

The website www.zacit.cz currently serves as a placeholder error page indicating that the original project hosted by NetStranky.cz has been terminated due to administrative and legal burdens. There is no active business content, contact information, or legal disclosures present. The domain WHOIS data is unavailable, suggesting the domain may be inactive or deregistered. Technically, the site uses outdated JavaScript libraries and lacks modern security headers or privacy compliance mechanisms. The overall security posture is minimal, with no evident vulnerabilities but also no proactive security measures. Given the lack of content and WHOIS data, the site poses low risk but also offers no business value or trust signals.

A

AeroHosting.cz

aerohosting.cz

48

AeroHosting.cz is a Czech webhosting and domain registration provider with a professional online presence targeting small to medium businesses and individuals in the Czech Republic. The company offers a range of hosting services including PHP, MariaDB, ASP.NET, MSSQL support, free SSL certificates via Let's Encrypt, and domain registration primarily focused on .CZ domains. The website reflects a mature business with claims of 20 years of experience, supported by daily backups and DNSSEC security features. Technically, the site uses a mix of Linux and Windows hosting platforms, with older but functional technologies such as jQuery 1.10.1 and AnythingSlider for UI elements. While the site is accessible and well-structured, it lacks modern privacy and cookie policies, and the WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency. Security practices are decent with HTTPS and DNSSEC support, but there is room for improvement in security headers and incident response disclosures. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and updated technical components.

The website hqv.cz is currently inaccessible or blocked, presenting only an empty HTML body with no metadata, content, or contact information. The domain is registered since 2009 with REG-WEDOS and uses Cloudflare nameservers, indicating the use of CDN and potential security protections. Due to the lack of accessible content, no meaningful business, security, or compliance information can be extracted. The absence of privacy policies, cookie banners, or terms of service further limits the assessment. The security posture cannot be evaluated beyond the presence of Cloudflare as a hosting and security provider. Overall, the site appears to be either under maintenance, restricted by a WAF, or improperly configured, resulting in a very low AI score and limited trustworthiness.

T

Teplárna Otrokovice a.s.

tot.cz

52

Teplárna Otrokovice a.s. is a medium-sized Czech energy company specializing in the production and supply of heat and electricity, primarily through cogeneration using brown coal, natural gas, and biomass. The company emphasizes reliability, environmental responsibility, and customer service, targeting residential and commercial consumers in the Czech Republic. Their website reflects a professional and consistent brand image with comprehensive service information and customer portals. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Contact Form 7, and Complianz GDPR compliance tools. It uses HTTPS with Google reCAPTCHA for form security and integrates Google Analytics for user tracking. The site is mobile-optimized and performs moderately well, though accessibility features could be enhanced. From a security perspective, the site follows good practices including HTTPS, cookie consent management, and form protection. However, some security headers are not explicitly detected, and no formal security policy or incident response information is published. The absence of WHOIS registration data is a notable gap, limiting full trust verification of the domain. Overall, the website is trustworthy and professional, with strong privacy compliance and user engagement features. The main risk lies in the missing WHOIS data, which should be investigated further to confirm domain legitimacy and ownership consistency.

V

VINAŘSTVÍ JAKUBÍK a.s.

vinarstvijakubik.cz

60

Vinařství Jakubík is a family-owned winery based in Zlechov, Czech Republic, specializing in premium white and red wines sourced from local grape varieties native to the Slovácko region. The company operates a professional e-commerce platform built on WordPress and WooCommerce, offering direct sales of their wines, including limited editions and corporate offerings. Their market position is that of a niche regional premium wine producer with a focus on tradition and quality. The website is well-branded, consistent, and targets mature wine consumers with a clear business model centered on retail and wine tasting experiences. Technically, the site uses modern web technologies including the Avada theme, jQuery, and Google Analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and age verification implemented for compliance with alcohol sales regulations, though some security headers are missing. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. However, the absence of WHOIS data reduces domain transparency and trustworthiness. Overall, the site is professional and trustworthy but would benefit from enhanced security headers and clearer domain registration information.

S

Síť21

sit21.cz

52

Síť21 is a regional Internet Service Provider based in the Czech Republic, specializing in fiber optic internet services, IPTV, voice, and mobile offerings primarily targeting residential and business customers in the Zlínský kraj region. The company positions itself as a reliable and fast internet provider with a focus on modern connectivity solutions. The website reflects a professional digital presence built on WordPress with strong SEO and marketing integrations, including Google Analytics and Facebook Pixel, ensuring effective customer engagement and tracking. Privacy compliance is well addressed with a comprehensive cookie consent mechanism adhering to GDPR standards. Security posture is solid with HTTPS enforced and use of Google reCAPTCHA, though formal security policies and incident response contacts are not published. Overall, the site is accessible, well-structured, and trustworthy, supporting the company's market credibility.