Security Directory

S

StaMat CZ, s.r.o.

stamatcz.cz

45

StaMat CZ, s.r.o. is a small Czech Republic based company specializing in earthworks, demolition, construction waste recycling, and heavy transport services primarily serving the Pardubice region and surrounding areas. The company operates a waste collection and recycling center and offers a range of construction-related services. The website is professionally designed with clear navigation and relevant content, supporting the company's local market positioning. Technically, the site uses standard web technologies including jQuery and Facebook SDK, with a cookie consent mechanism in place, indicating awareness of privacy compliance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. WHOIS data is unavailable, which slightly reduces domain trust but the website content and contact details support legitimacy. Overall, the site presents a trustworthy and functional online presence for a regional construction services provider.

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content is not accessible or blocked. The page contains no business-related content, contact information, or compliance policies. Instead, it hosts the Chrome Dinosaur offline game code and assets, which is a default error placeholder in Chrome browsers when a page cannot be loaded. Due to the lack of accessible content, no meaningful business or security posture can be assessed. The technical infrastructure is limited to standard HTML, CSS, and JavaScript for the offline game, with no external dependencies or analytics detected. Security posture cannot be fully evaluated due to missing headers and SSL information. Overall, the website is non-functional at this URL, and no privacy or compliance information is present.

V

Vodárny a čerpadla

vodarnycerpadla.cz

51

Vodárny a čerpadla is a Czech-language website providing practical tips for everyday life, focusing on household care, gardening, kitchen ideas, and DIY repairs. The site targets a general audience interested in improving home and garden maintenance with easy-to-follow advice. The business operates as a content publisher with a niche focus, maintaining a consistent brand and good content quality. Technically, the website uses standard modern web technologies including HTML5, CSS3, and JavaScript, with Cloudflare DNS services. The site is mobile optimized and has good SEO practices but lacks advanced frameworks or CMS identification. Security posture is moderate with HTTPS implied but no visible security headers or explicit security policies. Privacy compliance is limited, with no cookie consent mechanism and only basic privacy and terms pages. WHOIS data is inconsistent, showing a future domain creation date, which raises some trust concerns but does not detract from the site's professional presentation and content accessibility. Overall, the site is functional and trustworthy for its content niche but would benefit from enhanced security and privacy measures.

S

Statutární město Teplice

teplice.cz

51

The website represents the official portal of the statutory city of Teplice, Czech Republic. It serves as a comprehensive resource for residents, visitors, and local businesses by providing municipal services, news updates, event calendars, and contact information. The site is well-structured, professionally designed, and targets a broad audience including families, seniors, and tourists. The business model is government/public service with a focus on transparency and accessibility. Technically, the website employs a modern tech stack including HTML5, CSS3, JavaScript, Google Analytics, Google Tag Manager, Google reCAPTCHA, and a Voiceflow chatbot for enhanced user interaction. It uses the Vismo CMS platform and integrates Google Translate for multilingual support. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site enforces HTTPS, uses reCAPTCHA on forms to prevent abuse, and implements cookie consent mechanisms compliant with GDPR. However, it lacks a dedicated security policy page and incident response contact details. Security headers are not explicitly detected, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively serves its public service role with moderate to good technical and security maturity. Strategic enhancements in security transparency and header implementation would further strengthen its posture.

S

Strombuch s.r.o.

strombuch.cz

41

Strombuch s.r.o. is a Czech Republic based company specializing in comprehensive forestry services including forest renewal, wood harvesting, sales, and maintenance activities. Established in 2004, the company serves private owners, municipal properties, and state organizations primarily in the Podkrkonoší region. The website reflects a professional business with clear service offerings and contact information, positioning itself as a trusted local forestry service provider. Technically, the website employs standard web technologies such as HTML5, CSS, and JavaScript, with integration of Google Analytics and Tag Manager for visitor tracking. The site is mobile optimized and has a moderate performance profile. However, it lacks advanced security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security posture. Security-wise, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. The absence of WHOIS data limits domain legitimacy verification, but the website content and contact details suggest a legitimate business. No forms or data collection beyond analytics scripts are present, reducing attack surface but also limiting user interaction. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security headers, and transparency regarding data protection. The domain's WHOIS opacity slightly reduces trust but does not outweigh the positive business indicators.

A

AGRO CS a.s.

agrocs.cz

60

AGRO CS a.s. is a Czech Republic-based company operating in the manufacturing sector, primarily focused on agricultural machinery and services. The company targets agricultural professionals and businesses, positioning itself as a regional player in the agricultural manufacturing market. The website is professionally designed using the Wix platform, featuring structured data that enhances search engine understanding and user experience. Technical infrastructure is modern with HTTPS enforced, but lacks advanced security headers and privacy compliance features. The absence of WHOIS data due to privacy protection limits full trust assessment, though the website content and presentation suggest a legitimate business. Security posture is moderate with room for improvement in headers and policy disclosures. Overall, the site is safe, business-focused, and suitable for its target audience.

W

web design software

mobiri.se

43

Mobirise is a well-established technology company founded in 2017 that offers a free, AI-powered no-code web design software targeting individuals and businesses seeking easy website creation solutions. The platform supports multiple operating systems including Windows, MacOS, Linux, and Android, and emphasizes features such as drag-and-drop editing, customizable templates, offline mode, and e-commerce integration. The company holds a strong market position with over 2.5 million users and positive expert and user reviews, reflecting a mature and trusted product offering. Technically, the website is built on modern web standards including Bootstrap 5 and uses Cloudflare for DNS management. The site is mobile-optimized, fast-loading, and SEO-friendly, with a clean and professional design. However, some compliance gaps exist due to the absence of visible privacy and cookie policies, and no explicit security headers are detected, which could be improved to enhance security posture and regulatory adherence. From a security perspective, the site uses HTTPS with good SSL configuration and does not expose sensitive data or vulnerable libraries. The domain registration is consistent and long-term, supporting the legitimacy of the business. No WAF or blocking mechanisms interfere with content access, allowing full analysis. Overall, the security posture is good but could benefit from additional security headers and formalized privacy and incident response policies. The overall risk is low with strong business credibility and technical maturity. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and publishing vulnerability disclosure and incident response information to further enhance trust and compliance.

U

UnionOcel s.r.o.

unionocel.cz

51

UnionOcel s.r.o. is a Czech-based medium-sized manufacturing and wholesale company specializing in steel sheets, cuttings, and CNC machining services. Established in 2001, it has developed a strong market position as a leader in its sector, offering a broad portfolio of metalworking services supported by modern facilities and technologies. The website reflects a professional and consistent brand image, targeting industrial clients and manufacturers. Technically, the site employs modern web technologies including Bootstrap, jQuery, and integrates advanced analytics and marketing tools such as Google Tag Manager and Microsoft Clarity. Security measures include HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, although some security headers are missing and no explicit security policy is published. Overall, the site is well-structured, GDPR compliant, and trustworthy, with no signs of malicious activity or content safety concerns.

Vortexvision.cz is a professional freelance graphic design studio operated by Josef Šíf, established in 2007. The business specializes in web and e-shop design, photomontages, visualizations, and other graphic services tailored to enhance brand awareness and marketing impact. The website serves as a portfolio and contact point for potential clients, primarily targeting Czech-speaking businesses and individuals seeking creative graphic solutions. The site demonstrates a consistent and professional brand image with a clear presentation of services and references.

I

International Judo Federation

ijf.org

11

The International Judo Federation (IJF) operates a comprehensive and professionally designed website serving as the official hub for the global judo community. The site offers extensive content including news, event calendars, world rankings, video libraries, and educational resources, positioning IJF as a leading authority in the sport of judo worldwide. The federation's presence in over 200 countries and its Olympic status since 1964 underscore its global influence and reach. Technically, the website employs modern web technologies such as JavaScript, CSS3, and HTML5, with integrations like Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is hosted behind Cloudflare CDN, ensuring performance and security benefits. Mobile optimization and accessibility are well addressed, providing a good user experience across devices. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting a mature approach to user privacy and data protection. However, explicit security headers and a public security policy or vulnerability disclosure page are absent, representing areas for improvement. The WHOIS data is unavailable or privacy-protected, which is common for organizations of this nature and does not detract from the site's legitimacy. Overall, IJF.org demonstrates a high level of professionalism, trustworthiness, and compliance with privacy standards. The site is safe for general audiences, free from adult or questionable content, and well-positioned to serve its community effectively.

B

BFMTV

bfmtv.com

10

BFMTV is a leading French news media company providing continuous live news coverage, video content, and radio streaming services. The website serves a broad general audience interested in political, social, economic, sports, and international news. It operates a professional and well-branded digital platform with extensive multimedia content and strong social media presence. Technically, the site uses modern JavaScript libraries, consent management tools, and analytics services to deliver a responsive and engaging user experience. Security posture is generally good with HTTPS enforced and cookie consent implemented, though explicit security headers and privacy policies are not clearly published. The absence of WHOIS data is unusual but does not detract significantly from the site's legitimacy given its market position and content quality. Overall, BFMTV demonstrates a mature digital presence with room for improvement in transparency and security best practices.

F

France Kyudo

kyudo.fr

50

France Kyudo is a national federation dedicated to the traditional Japanese martial art of Kyudo, or Japanese archery, operating primarily in France. The website serves as an informational and community hub for practitioners and enthusiasts, promoting the art and philosophy of Kyudo. The site is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as JavaScript, CSS, and HTML5. While the site is visually consistent and provides relevant content, it lacks critical privacy and contact information, which impacts its overall trustworthiness. Security posture is basic with HTTPS enabled but missing advanced security headers and policies. The absence of WHOIS data raises concerns about domain registration legitimacy, although the site content appears genuine and focused on its niche audience.

F

Fondation France Judo

fondationfrancejudo.fr

55

Fondation France Judo is a French non-profit organization dedicated to supporting social and inclusive projects through sports sponsorship, specifically judo. The website is built on the Wix platform and presents a professional and consistent brand image aligned with its parent organization, Fondation du Sport Français. The site targets donors and supporters interested in contributing to sports-related social initiatives. Technically, the website uses Wix's Thunderbolt framework and standard web technologies, offering moderate performance and good mobile optimization. However, it lacks advanced SEO and accessibility features. Security posture is basic with HTTPS implied but no visible security headers or policies. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is unavailable, which raises concerns about domain registration transparency. Overall, the website is functional and trustworthy in content but requires improvements in security and privacy disclosures.

D

Dojo de Paris | Evénements, location, spectacles, salons

dojodeparis.com

46

The website www.dojodeparis.com appears to represent a small-scale martial arts dojo or school, likely based in France given the language and domain name. The site is built on the Wix platform, utilizing standard Wix scripts and assets, indicating a basic level of digital maturity. However, the website content is minimal, with no clear business descriptions, contact information, or privacy policies, which limits its professional presentation and user trust. Technically, the site uses HTTPS but lacks advanced security headers and privacy compliance features. The absence of WHOIS registration data raises concerns about the domain's legitimacy and trustworthiness. Overall, the site is accessible without WAF or security challenges but scores low on business credibility and privacy compliance. Strategic improvements are needed to enhance security posture, legal compliance, and business transparency.

The website whale.camera presents a minimalistic single-page canvas animation with no textual content, metadata, or business information. The absence of privacy policies, contact details, or any structured data indicates it is likely a placeholder or experimental site rather than an operational business platform. The WHOIS data is unavailable or unsupported for this domain's TLD, providing no registrar, registrant, or domain age information, which further limits trust and legitimacy assessment. Technically, the site uses basic HTML5 and JavaScript with the Canvas API to render a dynamic animation. There is no evidence of modern frameworks, CMS, or third-party integrations. Performance is likely moderate due to the animation, but accessibility and SEO are poor given the lack of content and metadata. From a security perspective, no HTTPS or security headers information is available, and no privacy or cookie policies are present. The site does not collect user data or have forms, reducing immediate risk but also indicating a lack of compliance with common privacy standards. The domain's registration opacity and minimal content reduce overall trustworthiness. Overall, the site scores low on content quality, business credibility, and privacy compliance, with moderate technical implementation. Strategic recommendations include implementing HTTPS, adding business and contact information, publishing privacy and cookie policies, and improving accessibility and SEO to enhance trust and compliance.

D

DS Automobiles

dsautomobiles.cz

62

DS Automobiles Czech Republic operates a professionally designed website showcasing their luxury French automobile offerings, including new models, financing, leasing, and after-sales services. The site targets B2C customers in the Czech market with a focus on premium vehicles and connected services. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries and responsive design, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and a GDPR-compliant cookie consent mechanism, though explicit privacy policies and security headers are lacking. The absence of WHOIS data reduces domain trustworthiness but the overall branding and content quality indicate a legitimate business under the Stellantis group.

P

PASSERINVEST GROUP, a.s.

pobavmeseotom.cz

48

The website 'Pobavme se o tom' is a professionally designed platform operated by PASSERINVEST GROUP, a.s., focusing on real estate development and community engagement in the Brumlovka area of Prague 4. It provides detailed information about investments, urban planning, environmental initiatives, and local community activities, targeting residents, workers, and visitors of the area. The site demonstrates a strong market position as a significant real estate developer with a clear business model centered on urban development and community relations. Technically, the website is built on the ProcessWire CMS platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, jQuery, and libraries like Fancybox and ScrollTrigger. The site is mobile-optimized with good SEO practices and moderate performance. Hosting is provided by Active24, consistent with the domain registrar data. No major technical issues or vulnerabilities were detected, though security headers are absent and could be improved. From a security perspective, the site enforces HTTPS and does not expose sensitive data or use vulnerable libraries. However, it lacks visible privacy and cookie policies, security policies, and incident response information, which are important for compliance and user trust. No tracking or analytics scripts were detected, indicating minimal user tracking. The WHOIS data confirms the domain's legitimacy and consistency with the business. Overall, the website is trustworthy, professional, and safe for general audiences. Strategic improvements include adding privacy and cookie policies, implementing security headers, and publishing security and incident response information to enhance compliance and user confidence.

K

Křesťanská střední škola, základní škola a mateřská škola Elijáš

elijas.cz

48

The website www.elijas.cz represents a Christian educational institution located in Prague, offering kindergarten, primary, and secondary education along with associated services such as a school canteen and after-school programs. The institution is operated by the České sdružení CASD, a recognized Christian association. The website is well-structured, professionally designed, and targets parents and students seeking faith-based education in the Czech Republic. Technically, the site uses modern web standards with HTML5, CSS3, and JavaScript, and integrates Matomo analytics for user tracking with a cookie consent mechanism, reflecting a moderate level of digital maturity. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers could enhance protection. The absence of WHOIS data limits domain trust assessment, but the website content and contact information support legitimacy. Overall, the site is a credible digital presence for the educational institution with room for security and compliance improvements.

B

Balance Club Brumlovka

balanceclub.cz

50

Balance Club Brumlovka is a premium fitness and wellness club based in the Czech Republic, offering a wide range of services including fitness, physiotherapy, spa, and psychological support. The club positions itself as a top-tier facility comparable to international standards, targeting health-conscious adults seeking comprehensive wellness solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content for its audience. Technically, the site uses modern web technologies such as Google Tag Manager and Leaflet.js for maps, and it is well-optimized for mobile devices with good SEO practices. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements, though it lacks advanced security headers and explicit incident response policies. The absence of WHOIS data reduces domain trust but does not detract significantly from the website's professional presentation and business legitimacy. Overall, the site demonstrates a solid digital presence with room for improvement in security transparency and domain registration clarity.

Krčák žije is an online magazine dedicated to the Krčský les area in Prague, providing local news, event calendars, interactive maps, and community information. It is initiated and supported by Passerinvest Group, a real estate developer active in the region. The website serves local residents and visitors interested in nature, sports, and cultural activities. Technically, the site uses modern web technologies including Bootstrap, jQuery, Font Awesome, and integrates Google Analytics and Facebook Pixel for tracking, with a cookie consent mechanism in place. The site is hosted on Czech infrastructure with consistent WHOIS data indicating legitimacy. Security posture is good with HTTPS and form validation, but lacks some advanced security headers and published security policies. Privacy compliance is basic, with no explicit privacy policy or terms of service found. Overall, the website is professional, trustworthy, and safe for general audiences.

R

Rittal Czech, s.r.o.

rittal.cz

66

Rittal Czech, s.r.o. operates a professional corporate website focused on modular system solutions for industrial and IT applications, including enclosures, power distribution, climate control, IT infrastructure, software, and automation. The company is positioned as a global leader with a strong modular system offering and is part of the Friedhelm Loh Group. The website is well-structured, content-rich, and targets industrial and IT professionals seeking advanced system solutions. Technically, the site uses modern web technologies such as Vue.js and JavaScript, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit incident response or security policy pages were found. WHOIS data is unavailable, which is unusual but likely due to privacy protection, and does not detract from the site's legitimacy given the strong corporate branding and parent company association. Overall, the site presents a trustworthy and professional digital presence.

J

JSNŠ

jsns.cz

59

The website www.jsns.cz represents an educational initiative named Jeden svět na školách (JSNS), focused on providing free and legal documentary film screenings for schools in the Czech Republic. The platform supports educators by offering activities and projects to enrich teaching. The site targets schools and educators, positioning itself as a niche non-profit educational content provider. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for consent management, Leaflet.js for mapping, and standard web libraries such as Font Awesome and Select2. The site is mobile optimized and demonstrates good SEO and accessibility basics. Security-wise, HTTPS is enforced with appropriate security headers, and no vulnerabilities or exposed sensitive data were detected. Cookie consent mechanisms are implemented, indicating GDPR awareness, although no explicit privacy policy or terms of service pages were found in the provided content. WHOIS data is unavailable, which reduces transparency and trustworthiness from a domain registration perspective. Overall, the website is professionally designed, secure, and serves a clear educational purpose, but would benefit from enhanced privacy disclosures and contact information to improve compliance and trust.

C

Comité National Olympique et Sportif Français (CNOSF)

franceolympique.com

66

The website represents the Comité National Olympique et Sportif Français (CNOSF), the French National Olympic and Sports Committee. It serves as an official platform to promote Olympic sports and support athletes in France. The site targets sports professionals, athletes, and the general public interested in Olympic activities. The business model is non-profit and government-related, focusing on sports promotion and Olympic movement support. The website is professionally designed using modern frameworks such as Bootstrap and custom fonts, providing a good user experience with clear navigation and mobile optimization. However, the technical implementation lacks advanced security headers and privacy compliance indicators, which are critical for enhancing user trust and regulatory adherence. The WHOIS data for the subdomain is unavailable, but the domain's branding and content strongly indicate legitimacy as part of the French Olympic Committee's digital presence.

REJ.cz is a regional Czech website providing local information including accommodation options, snow reports, trip tips, news, classifieds, and event programs primarily for Šumperk, Olomouc, and surrounding areas. The site targets residents and visitors interested in local services and tourism. The business model appears to be a local information and advertising portal with a focus on regional content. Technically, the website uses basic HTML and CSS with Google Fonts for typography, but lacks modern frameworks or CMS indications. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is weak due to absence of HTTPS, security headers, and privacy policies. WHOIS data is missing, reducing domain transparency and trust. Overall, the site is functional but basic, with significant room for improvement in security, privacy compliance, and technical sophistication.

W

World Leagues Association

worldleagues.com

52

The World Leagues Association website serves as a global representative platform for professional football leagues, fostering cooperation with political and sports bodies. The organization is well-established, with a domain registered since 2002, and presents itself professionally with a clear mission and multiple league logos. The website is built on a modern CMS (Kirby) and demonstrates good technical implementation with responsive design and SEO optimization. Security posture is adequate with HTTPS and domain transfer protection, though improvements such as enabling DNSSEC and publishing security policies are recommended. Privacy compliance is partial, with a cookie policy and consent mechanism present but no explicit privacy policy or terms of service detected. Overall, the site is trustworthy and safe, with no adult or questionable content.

B

Barum

barum-reifen.de

66

Barum is a well-established tire brand operating under the Continental umbrella, offering affordable and durable tires for passenger cars, SUVs, vans, trucks, and industrial vehicles. The website is professionally designed using Adobe Experience Manager, featuring comprehensive product information, dealer search, and customer support options. The digital infrastructure includes modern tracking and consent management tools, ensuring compliance with GDPR and cookie regulations. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. The absence of WHOIS data reduces domain trustworthiness, but the brand association and website professionalism support legitimacy. Overall, the site serves its target audience effectively with good user experience and content quality.

D

Dětský domov Liptál

ddliptal.cz

51

Dětský domov Liptál is a longstanding educational and child care institution operating under the auspices of the Zlínský kraj regional government in the Czech Republic. The organization provides residential care and educational support to children who cannot live with their parents, emphasizing a safe and nurturing environment. The website reflects this mission with clear content and a professional presentation, targeting families, children, and regional stakeholders. Technically, the site is built on the Webnode CMS platform, leveraging modern web technologies and Amazon Cloudfront CDN for hosting static assets. Google Tag Manager is used for analytics, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced, but the absence of security headers and privacy policies suggests room for improvement. The lack of WHOIS data limits domain trust verification, though the website content and regional affiliation support legitimacy. Overall, the site is functional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

G

GARVIS Solutions s.r.o.

rezervace.online

69

REENIO, operated by GARVIS Solutions s.r.o., is a Czech-based online reservation system offering a cloud-hosted SaaS platform tailored for businesses providing direct customer services such as wellness centers, sports facilities, and cultural events. The platform features flexible booking options, automated notifications, integrated online payments, and a user-friendly interface optimized for desktop and mobile devices. It holds a strong market position in the Czech Republic with a growing customer base and recognized certifications including GDPR readiness and payment provider certifications. Technically, the website employs modern web technologies including Bootstrap, Font Awesome, and cloud hosting on Microsoft Azure, ensuring fast performance and mobile responsiveness. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and secure payment integrations, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable service provider in its domain.

P

Povodňový plán České republiky

dppcr.cz

50

The website dppcr.cz serves as the official digital flood plan portal for the Czech Republic, providing comprehensive flood-related information, meteorological data, flood commission activities, and thematic maps. It targets government agencies, emergency responders, and public stakeholders involved in flood management. The site is well-structured with clear navigation and integrates links to national and European meteorological services, positioning itself as a key resource in national flood preparedness and response. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript with jQuery, and Google Fonts. It employs HTTPS and Google Analytics for tracking, though lacks advanced security headers and cookie consent mechanisms. Mobile optimization is basic but functional, and accessibility features are minimal. The hosting and domain registration are consistent with a Czech government entity, enhancing trustworthiness. From a security perspective, the site benefits from HTTPS and absence of visible vulnerabilities or sensitive data exposure. However, it lacks explicit privacy and cookie policies, security headers, and incident response contact information, which are important for compliance and user trust. The use of Google Analytics without consent mechanisms may pose privacy compliance risks under GDPR. Overall, the website is a credible and authoritative government resource with good content quality and business credibility. To improve, it should implement privacy and cookie policies with consent, enhance security headers, and provide clear contact information for security and data protection matters. These steps will strengthen compliance, user trust, and security posture.

T

TKR Jašek s.r.o.

valachnet.cz

53

TKR Jašek s.r.o. operates the VALACHNET.cz portal, providing regional telecommunications services including internet, television, telephone, mobile, and hosting primarily in the Valašsko region of the Czech Republic. The company has a long-standing presence since 1990 and targets residential and business customers within its service area. The website reflects a regional ISP with a focus on customer engagement and service announcements. Technically, the website uses a traditional tech stack with jQuery and jQuery UI libraries, serving content over HTTPS. While the site is functional and content-rich, it lacks advanced security headers and modern privacy compliance features such as a cookie consent mechanism. The site is moderately optimized for performance and accessibility but could benefit from modernization. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but the absence of security headers and vulnerability disclosures indicates room for improvement. The lack of WHOIS data reduces domain trustworthiness, though the website content and business information appear consistent and legitimate. Overall, the site presents a trustworthy regional ISP with good business credibility but requires enhancements in security best practices and privacy compliance to align with modern standards.

1

1C-Битрикс

b24.to

69

Bitrix24 is a comprehensive business management platform offering a wide range of tools including CRM, project management, communication, and AI-powered assistants. It targets businesses seeking integrated solutions to streamline operations and improve collaboration. The platform holds a strong market position in Russia and CIS countries, supported by a robust partner network and extensive service offerings. Technically, the website is built on the Bitrix CMS framework, leveraging modern web technologies and integrating analytics and tracking tools with GDPR compliance. Security posture is solid with HTTPS enforcement and security headers, though lacks explicit public security policies and incident response contacts. Overall, the site is professional, well-structured, and trustworthy, with minor gaps in transparency and WHOIS data availability.

Glia Media is a specialized medical marketing and communications agency with a focus on neuroscience and healthcare sectors. Established in 2012 and operating as a division of Mayfield Brain & Spine, the company offers a range of services including medical marketing, illustration, writing, academic publication support, event planning, and patient education. Their website reflects a professional and consistent brand presence targeting healthcare professionals and organizations seeking expert communications support. Technically, the website employs a modern but straightforward technology stack including Bootstrap, jQuery, and Google Analytics. It is hosted by Bluehost Inc., a reputable hosting provider. The site is mobile optimized and SEO friendly, though accessibility features are basic. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. The WHOIS data shows a consistent and legitimate domain registration with no privacy protection, supporting trustworthiness. Overall, the website is professional and functional with moderate security and privacy posture. Strategic improvements in privacy compliance and security headers would enhance trust and regulatory adherence.

M

Mayfield Education & Research Foundation

mayfieldfoundation.org

52

The Mayfield Education & Research Foundation is a specialized non-profit organization focused on advancing care for patients with brain and spine disorders through education and research. Established in 2011 and based in Cincinnati, Ohio, the foundation offers educational programs, supports research initiatives, and engages donors to further its mission. The website reflects a professional and consistent brand presence targeting patients, medical professionals, researchers, and donors. Technically, the website employs a modern tech stack including Bootstrap 4.3.1, jQuery, and Google Tag Manager for analytics. The site is mobile-optimized with good SEO practices and clear navigation, though accessibility features are basic. Hosting details are not explicit but DNS is managed via Register.com. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS and Google Tag Manager but lacks DNSSEC and visible security headers such as CSP or HSTS. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. No forms or data collection fields are detected on the main page, reducing immediate risk exposure. WHOIS data aligns well with the website's claims, supporting legitimacy. Overall, the site is trustworthy and professional but would benefit from enhanced security headers, DNSSEC implementation, and explicit privacy and cookie policies to improve compliance and user trust.

M

Ministerstvo obrany ČR a Charity Česká republika

digimak.cz

59

DiGiMÁK.cz is a government and charity-backed campaign website launched in 2024 to honor war veterans in the Czech Republic through a virtual poppy initiative. The site serves as an informational platform for the campaign organized by the Ministry of Defence of the Czech Republic and Charity Czech Republic. It targets Czech citizens and supporters of veterans, providing campaign details and links to the Military Solidarity Fund for donation results. The website is professionally designed with consistent branding and clear messaging but lacks privacy and cookie policies as well as contact information. Technically, the site uses standard HTML5 and CSS3 with Google Fonts, hosted under a recently registered domain consistent with the campaign launch. Security posture is basic with no detected security headers or explicit policies, and no analytics or tracking scripts are present, indicating minimal user tracking. Overall, the site is trustworthy and safe, but improvements in privacy compliance and security best practices are recommended.

B

BriberyMatters

briberymatters.com

57

BriberyMatters is a website focused on the topic of bribery, likely aiming to provide information or advocacy related to anti-bribery issues. The site is built on the Wix platform, indicating a small to medium scale digital presence with basic technical infrastructure. The website content is accessible and safe, with no adult or explicit material detected. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and ownership transparency. The site lacks critical compliance elements such as privacy and cookie policies, contact information, and security policies, which impacts its trustworthiness and business credibility. Technically, the site uses standard Wix technologies and scripts, with moderate performance and basic SEO and accessibility features. Security posture is basic with HTTPS enabled but missing advanced security headers and policies.

B

Úvodní stránka | BEST

bestvisio.cz

65

BESTVISIO.cz is a Czech Republic based small business specializing in providing innovative digital tools for customers to select and visualize paving and fencing products. Their offerings include online configurators for paving and fences and a virtual reality application that allows users to preview fencing options in real environments using mobile devices. The website is professionally designed with good content quality and consistent branding, targeting homeowners and customers interested in outdoor home improvement products. Technically, the site uses modern web technologies including lazy loading images, responsive CSS, and integrates Google Analytics and CookieHub for tracking and cookie consent management. Security posture is moderate with cookie consent and Google reCaptcha usage but lacks visible security headers and published privacy policies. WHOIS data is unavailable, indicating privacy protection, which slightly reduces transparency but is not uncommon for small businesses. Overall, the site is safe, user-friendly, and provides useful tools for its niche market.

Mobirise Ltd operates the Mobirise AI Website Generator, a technology platform that enables users to create professional websites easily using AI and drag-and-drop tools. The company targets a broad audience including small businesses, freelancers, bloggers, and e-commerce startups, positioning itself as a flexible and user-friendly alternative to other AI website builders. Technically, the website is built on modern frameworks like Bootstrap 5 and integrates analytics and advertising tools such as Google Tag Manager and Facebook Pixel. The security posture is solid with HTTPS and domain protections, though some headers and explicit security policies could be improved. Privacy compliance is adequate with clear privacy and terms pages, but lacks cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for SEO and mobile use.

S

Spin On

spin-on.fr

61

Spin On is a small, professional web agency based in Besançon, France, specializing in the creation of websites, e-commerce platforms, mobile applications, and custom software development. The company has been operating since 2013 and serves primarily local and regional businesses. Their website demonstrates a solid digital presence with a focus on GDPR compliance and user privacy, evidenced by the integration of Cookiebot for cookie consent management. The agency leverages modern web technologies and frameworks such as WordPress, Drupal, Prestashop, and Laravel to deliver tailored solutions to clients. Technically, the website employs a modern tech stack including JavaScript libraries like jQuery, TweenMax, and Rellax for enhanced user experience and performance optimizations such as lazy loading. Hosting is provided via DigitalOcean, a reputable cloud provider, ensuring reliable infrastructure. The site is mobile-optimized and SEO-friendly, although accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS and implements a comprehensive cookie consent mechanism, but lacks explicit security headers and documented security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The use of Facebook Pixel and Google Analytics indicates moderate user tracking, balanced with GDPR compliance. Overall, Spin On presents a trustworthy and professional digital footprint with room for improvement in security hardening and accessibility. The domain registration data aligns well with the business profile, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility compliance to strengthen trust and compliance posture.

S

SK Slavia Praha

slavia.cz

46

SK Slavia Praha is a prominent Czech football club with a well-established online presence through its official website. The site serves as a comprehensive platform for fans and stakeholders, offering news, match schedules, ticket sales, team information, and fan engagement content. The business model revolves around sports media, merchandising, and ticketing services, targeting football enthusiasts primarily in the Czech Republic. The website reflects a professional brand image consistent with the club's reputation and partnerships.

F

FK Teplice, eSports.cz, s.r.o.

fkteplice.cz

37

FK Teplice is a well-established Czech football club with a strong digital presence through its official website. The site offers comprehensive information about the club's activities, including news, match schedules, team rosters, fan engagement, and community initiatives such as CSR and esports. The domain has been registered since 1998, reflecting the club's longstanding history. Technically, the website employs modern web technologies including Google Analytics, Adsense, and Google Translate, hosted on Websupport infrastructure. The design is professional, mobile-optimized, and provides a good user experience with clear navigation and rich content. Security posture is moderate with cookie consent implemented but lacks visible advanced security headers and explicit privacy or terms of service pages. No direct contact information or incident response details are provided, which could be improved to enhance trust and compliance. Overall, the website is a credible and functional digital asset for FK Teplice, serving its target audience effectively.

F

Fotbalový Klub Jablonec a.s.

fkjablonec.cz

47

FK Jablonec is a well-established Czech football club with a strong digital presence through its official website. The site serves as a comprehensive platform for fans and stakeholders, offering news, match information, player statistics, ticketing details, and a merchandise e-shop. The club maintains active engagement with its audience via multiple social media channels and partners with various sponsors and organizations, reflecting a solid market position within Czech football. The website's design is professional and consistent with the club's branding, targeting football enthusiasts and the local community. Technically, the site employs modern web technologies including JavaScript, Google Tag Manager, and custom CSS, hosted on a Czech hosting provider, ensuring moderate performance and good mobile optimization. Security-wise, the site uses HTTPS and implements a detailed cookie consent mechanism aligned with GDPR requirements, though it lacks explicit security headers and incident response contact information. Overall, FK Jablonec's website demonstrates a mature digital infrastructure with room for enhanced security practices and transparency. Strategic recommendations include adding security headers, publishing a security.txt file, and providing clearer contact information for privacy and incident response. These improvements would strengthen the club's trustworthiness and compliance posture while maintaining its strong fan engagement and business credibility.

E

eSports.cz, s.r.o.

fkmb.cz

46

FK Mladá Boleslav operates an official website serving as the primary digital platform for the Czech football club. The site provides comprehensive information about the club's teams, match schedules, youth academy, partners, and multimedia content, targeting fans and the local community. The business model focuses on fan engagement, merchandising through an integrated fanshop, and promoting club partners. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

F

FC Hradec Králové, a.s.

fchk.cz

53

FC Hradec Králové, a.s. operates an official website serving as the primary digital platform for the Czech football club FC Hradec Králové. The site provides comprehensive information including match schedules, team rosters, news updates, ticketing services, and a fanshop for merchandise. The club has a strong market presence in Czech football, with a history dating back over 120 years, positioning itself as a well-established sports entity. The website targets football fans, local community members, and sports enthusiasts, offering a user-friendly and content-rich experience. Technically, the website employs modern JavaScript libraries such as GSAP and Swiper.js for animations and interactive elements, alongside Google Analytics and Facebook Pixel for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, hosted under a Czech registrar with consistent domain registration data. Cookie consent mechanisms and GDPR compliance are well implemented, reflecting a mature approach to privacy and user data protection. From a security perspective, the website enforces HTTPS and uses cookie consent categories to manage tracking scripts responsibly. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The absence of a public security policy or incident response contact suggests room for improvement in transparency and readiness. Overall, the website demonstrates a high level of professionalism, content quality, and trustworthiness, with a strong alignment between domain registration and business identity. Strategic recommendations include enhancing security header implementation, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen the security posture.

Autoservis Kobolka is a small, local automotive repair and maintenance service provider based in Kutná Hora, Czech Republic. The company specializes in servicing vehicles from major European brands such as VW, Peugeot, Citroen, Fiat, Ford, Opel, and Alfa Romeo. Established in 1999, the business offers a comprehensive range of services including diagnostics, mechanical repairs, brake and axle work, engine and transmission overhauls, and additional services like tire service and vehicle towing. The website reflects a modest but functional online presence with clear contact information and basic service descriptions.

S

Statutární město Kladno

mestokladno.cz

52

The website mestokladno.cz serves as the official online portal for the statutory city of Kladno in the Czech Republic. It provides residents and visitors with comprehensive municipal information including news, events, administrative services, and contact details. The site is positioned as a trusted government resource with a clear focus on public service delivery and community engagement. The target audience primarily consists of local citizens and stakeholders interested in city governance and services. From a technical perspective, the website employs a proprietary CMS platform (Vismo) and integrates modern web technologies such as HTML5, CSS, JavaScript, and Google Analytics for performance monitoring. The site is mobile-optimized and accessible, with a clear navigation structure and compliance with privacy regulations including GDPR. Cookie consent mechanisms are implemented effectively, enhancing user privacy. Security-wise, the site benefits from HTTPS encryption and does not expose sensitive data or vulnerable libraries. However, it lacks explicit published security policies and incident response contacts, which are recommended for enhanced transparency and preparedness. No critical vulnerabilities or suspicious activities were detected. Overall, mestokladno.cz demonstrates a solid security posture and business credibility consistent with an official municipal website. Strategic improvements in security policy publication and incident response readiness would further strengthen its trustworthiness and compliance profile.

S

Seznam.cz, a.s.

post.cz

68

Seznam.cz, a.s. operates a comprehensive Czech internet portal offering a variety of digital services including email, maps, real estate listings, and streaming. The login portal analyzed is a secure gateway to these services, supporting multiple OAuth providers such as Google, Microsoft, Apple, BankID, and MojeID, indicating a mature and user-friendly authentication infrastructure. The website is well-branded and targets general internet users primarily in the Czech Republic and Slovakia. Technically, the site uses modern web technologies with responsive design and password strength indicators, although some accessibility and security header enhancements could be made. Security posture is solid with HTTPS enforced and multi-factor authentication options, but lacks visible security headers and explicit incident response contacts. Privacy compliance is partially addressed with clear privacy and terms of service links, but no cookie consent mechanism is present. Overall, the site is trustworthy and professionally maintained, though improvements in privacy and security transparency are recommended.

V

Vilgain

vilgain.co.uk

73

Vilgain is a UK-based e-commerce business specializing in sports nutrition, functional foods, sportswear, and fitness equipment. The company targets athletes and health-conscious consumers, offering a range of products designed to improve athletic performance and overall health. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience. The business has a moderate market position with a focus on quality and customer satisfaction, as evidenced by trust signals such as a money-back guarantee and positive reviews on Trustpilot. Technically, the website employs modern web technologies including JavaScript, Sentry for error tracking, and Google Tag Manager for analytics and marketing. The site is mobile-optimized and uses HTTPS with a good SSL configuration, though it lacks some advanced security headers. Performance is moderate, and SEO practices are adequately implemented. Privacy compliance is weak due to the absence of explicit privacy and cookie policies and consent mechanisms. From a security perspective, the site benefits from HTTPS and nonce attributes on scripts, reducing risks of injection attacks. However, the lack of security headers and formal incident response or vulnerability disclosure policies indicates room for improvement. No critical vulnerabilities or suspicious patterns were detected. The domain registration is consistent and appropriate for the business age and scope. Overall, Vilgain presents a trustworthy and professional e-commerce platform with good technical and security foundations but requires enhancements in privacy compliance and security best practices to further strengthen its posture.

I

International Organization of Legal Metrology

oiml.org

65

The International Organization of Legal Metrology (OIML) is a well-established international standard-setting body focused on legal metrology. It supports governments and regulatory bodies worldwide by developing standards, certification systems, and training to ensure measurement accuracy and consumer protection. The organization has a strong market position with over 130 members and a history dating back to 1955. The website reflects a professional, government/non-profit entity with clear content and consistent branding. Technically, the website is built on the Plone CMS platform, using modern web technologies such as HTML5, CSS, and JavaScript. It is mobile-optimized and accessible, with good SEO practices. The site uses HTTPS with excellent SSL configuration, though it lacks some security headers and cookie consent mechanisms. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms are areas for improvement. The WHOIS data is unavailable due to malformed responses, which slightly reduces trust but is likely due to registry restrictions rather than malicious intent. Overall, the site is trustworthy, professional, and secure, serving its audience effectively. Strategic improvements in privacy compliance and security transparency would enhance its posture further.

B

Best Friends Pets

bestfriendspets.com.au

60

Best Friends Pets operates as a retail pet care and supplies business in Australia, recently transitioning its brand to PetO. The website serves as an e-commerce platform built on Shopify, offering pet products, grooming services, and links to veterinary care partners. The site targets pet owners seeking local pet care solutions and supplies. Technically, the website is well-implemented using modern web technologies, including Shopify's Dawn theme, JavaScript, and CSS, with good mobile optimization and performance. Security measures include HTTPS and hCaptcha for form protection, though the absence of published privacy and cookie policies indicates gaps in compliance. The domain registration is consistent and legitimate, registered through a reputable registrar with standard domain protection statuses. Overall, the website presents a professional retail presence with moderate trustworthiness but requires improvements in privacy compliance and contact transparency.

Alumina Limited is an energy sector company specializing in alumina production. The website content is minimal and primarily serves to inform visitors that Alumina Limited was acquired by Alcoa Corporation as of August 1, 2024, directing users to Alcoa.com for further information. The digital presence is limited, with no detailed corporate information, contact details, or policies available on the homepage. Technically, the website uses basic HTML and CSS with no detected advanced frameworks or analytics. Security posture is weak due to lack of visible security headers, privacy policies, and WHOIS data. The domain WHOIS information is missing, which raises concerns about domain legitimacy and registration status. Overall, the website is accessible but lacks depth and comprehensive corporate digital infrastructure.