Security Directory

Ú

Ústav zdravotnických informací a statistiky ČR

novorozeneckyscreening.cz

61

The website novorozeneckyscreening.cz serves as the official national portal for newborn screening programs in the Czech Republic, operated by the Ústav zdravotnických informací a statistiky ČR (Institute of Health Information and Statistics of the Czech Republic). It provides comprehensive information about various newborn screening programs including laboratory screening, hearing screening, congenital cataract screening, and hip dysplasia screening. The site targets healthcare professionals, parents, and public health stakeholders, positioning itself as a key resource in the national healthcare infrastructure for early disease detection in newborns. Technically, the website employs modern web technologies including JavaScript and the Foundation CSS framework, hosted on websupport.cz. It features responsive design and accessibility considerations, with a cookie consent mechanism linking to the parent institution's privacy and cookie policies. While no explicit security headers were detected in the HTML, HTTPS is implied by canonical URLs, and no blocking or WAF mechanisms interfere with content access. From a security perspective, the site demonstrates good baseline practices such as cookie consent and HTTPS usage, but lacks visible advanced security headers and explicit incident response or security policies on the site. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data confirms domain registration consistency and legitimacy, with a domain age appropriate for the institutional nature of the site. Overall, the website is a trustworthy, professionally maintained public health resource with good content quality and technical implementation. Strategic improvements could include enhancing security headers, publishing explicit security and incident response policies, and expanding privacy disclosures directly on the site to further strengthen compliance and trust.

Ú

Ústav zdravotnických informací a statistiky ČR

mamo.cz

53

The website mamo.cz represents the National Breast Cancer Screening Program in the Czech Republic, operated by the Ústav zdravotnických informací a statistiky ČR (Institute of Health Information and Statistics of the Czech Republic). It serves as an authoritative public health resource providing information on breast cancer screening, prevention, and related epidemiological data. The site targets Czech women, healthcare professionals, and institutions, offering services such as online counseling, appointment scheduling, and educational content. It holds a strong market position as a government-supported program with EU funding and partnerships with multiple official health organizations. Technically, the website employs modern web technologies including HTTPS, JavaScript, and the Foundation CSS framework. It integrates Google Tag Manager for analytics and implements a cookie consent mechanism, indicating a moderate level of digital maturity. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and secure form handling but lacks explicit security headers and published privacy or incident response policies. No WHOIS data was retrievable, which slightly reduces trustworthiness, though the website's content and official partnerships strongly indicate legitimacy. No vulnerabilities or suspicious content were detected. Overall, the website is a credible, well-maintained public health portal with room for improvement in transparency around privacy policies and security disclosures. Strategic recommendations include publishing detailed privacy and security policies, adding incident response information, and enhancing security headers to strengthen trust and compliance.

Č

Česká odborná společnost klinické farmacie, z.s.

coskf.cz

58

Česká odborná společnost klinické farmacie, z.s. (ČOSKF) is a professional non-profit organization dedicated to setting standards and methodologies for clinical pharmacists in the Czech Republic. Founded in 2011, it serves a specialized audience of clinical pharmacy professionals and healthcare providers, offering education, working groups, and published guidelines to advance clinical pharmaceutical care. The organization maintains a professional web presence with active content updates and social media engagement, positioning itself as a key player in the Czech healthcare sector focused on clinical pharmacy. Technically, the website is built on the Webnode platform and hosted via AWS Cloudfront, leveraging modern web technologies including HTML5, CSS3, and JavaScript with Google APIs integration. The site demonstrates good performance, mobile optimization, and basic accessibility features. However, it lacks some advanced security headers and explicit privacy policy documentation, which are areas for improvement. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism with advanced user controls, indicating awareness of privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data reduces transparency and trustworthiness somewhat, but the professional content and organizational details support legitimacy. Overall, the website is a well-maintained, professional resource for clinical pharmacy professionals in the Czech Republic, with a solid technical foundation and moderate security posture. Strategic improvements in security headers, privacy policy publication, and domain registration transparency would enhance trust and compliance.

O

Omny Studio

omnystudio.com

73

Omny Studio is an enterprise-focused podcasting platform providing comprehensive audio management solutions tailored for podcast creators and radio stations. The website presents a professional and consistent brand image, targeting media industry professionals seeking scalable podcast hosting and management services. The technical infrastructure leverages modern web technologies including Cloudflare DNS, Google Fonts, and OneTrust for cookie consent, indicating a moderate level of digital maturity and compliance awareness. Security posture is adequate with HTTPS implied and cookie consent implemented, but lacks advanced security headers and DNSSEC, suggesting room for improvement in hardening the platform. Overall, the site is trustworthy and functional, though it would benefit from explicit privacy policies, contact information, and vulnerability disclosure mechanisms to enhance transparency and compliance. Strategic recommendations include enabling DNSSEC, publishing security policies, and improving privacy documentation to strengthen user trust and regulatory adherence.

H

HOTEL HORAL

hotel-horal.cz

49

Hotel Horal is a well-established hospitality business located in Rožnov pod Radhoštěm, Czech Republic, offering a comprehensive range of services including accommodation, wellness and spa facilities, dining, and event hosting. The hotel is positioned as a 4-star certified establishment with multiple awards, targeting tourists and wellness seekers in the Beskydy region. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and popular libraries like jQuery and Tiny Slider. It is mobile-optimized and includes interactive booking forms integrated with a secure external booking platform. However, the CMS appears custom or proprietary, and there is room for improvement in security headers and explicit incident response documentation. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and detailed security policies. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is good with GDPR-related pages and cookie mechanisms present. The absence of WHOIS data reduces domain trust signals but is mitigated by strong on-site trust indicators. Overall, the website and business present a low-risk profile with solid market positioning and digital maturity. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance trust and compliance further.

P

PER4MANCE s.r.o.

per4mance.cz

46

PER4MANCE s.r.o. is a Czech Republic based small technology company specializing in the distribution and support of enterprise software products such as Altova, Quest, Broadcom, Cisco, Oracle, and VMware solutions. The company offers software development, mobile app development, and server software services targeting IT professionals and enterprise clients. The website is professionally designed with clear navigation and relevant content focused on their product offerings and services. Technically, the site uses basic HTML and CSS with no advanced frameworks or analytics detected, hosted on Czech-based servers. Security posture is moderate but lacks visible security headers, privacy policies, and incident response contacts, which are areas for improvement. Overall, the domain is longstanding and consistent with the business profile, indicating a trustworthy and legitimate operation.

A

AV MEDIA SYSTEMS, a.s.

avmedia.cz

44

AV MEDIA SYSTEMS, a.s. is a well-established Czech company specializing in audiovisual solutions and event technical services, with over 30 years of experience. The company serves a diverse clientele including businesses, educational institutions, government bodies, and cultural organizations. Their offerings include design, implementation, rental, and servicing of audiovisual technologies, as well as event production and creative audiovisual projects. The website reflects a mature digital presence with comprehensive content, clear navigation, and active engagement through social media and partnerships.

H

Handicap trade s.r.o.

handicaptrade.cz

40

Handicap trade s.r.o. is a Czech company specializing in the development, manufacture, and distribution of locomotion aids and medical supplies, including orthopedic braces, crutches, and rehabilitation products. The company holds a significant market position domestically, covering approximately one-third of the Czech market and exporting a portion of its production. The website reflects a professional business focused on healthcare products with a clear product catalog and user-friendly navigation. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, with Google Analytics integrated for visitor tracking. The site is mobile responsive and well-structured, though it lacks visible privacy and cookie policies, which impacts compliance and user trust. Security headers are not detected in the provided data, indicating room for improvement in security hardening. From a security perspective, the site uses HTTPS, but the absence of WHOIS data and security headers reduces the overall trustworthiness. No contact emails or phone numbers are explicitly provided, which may hinder user communication and trust. There is no evidence of a formal privacy policy or cookie consent mechanism, which is a compliance gap, especially under GDPR regulations. Overall, the website is functional and content-rich but requires enhancements in privacy compliance, security best practices, and transparency of contact information to improve its risk profile and user trust.

V

Videris s.r.o.

videris.cz

60

Videris s.r.o. operates a website focused on ophthalmology products and services, targeting healthcare professionals and customers primarily in the Czech Republic. The company appears to be a small local supplier in the healthcare sector, with a business model likely involving both B2B and B2C sales. The website is built on the Wix platform, leveraging Wix's hosting and content management capabilities, which provides moderate performance and good mobile optimization. However, the site lacks comprehensive privacy and cookie policies, and no contact information or social media presence is explicitly provided, which limits user trust and compliance with privacy regulations. Security posture is basic with HTTPS enabled but missing important security headers and incident response information. The absence of WHOIS data reduces domain transparency and trustworthiness, although the website content and branding suggest a legitimate business presence. Overall, the site is functional but requires improvements in privacy compliance, security best practices, and business transparency to enhance credibility and user trust.

P

PharmAround

pharmaround.cz

48

PharmAround is an interactive educational platform focused on collaboration, education, and experience sharing in the field of drug development. The platform targets medical students as well as professional and lay audiences interested in pharmaceutical development. The website is built on the Wix platform, indicating a small to medium-sized business with moderate digital maturity. The technical infrastructure relies on Wix's hosting and standard web technologies such as JavaScript, HTML5, and CSS3. Security posture is basic with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. No WHOIS data is available, suggesting privacy protection on domain registration, which is reasonable for this type of educational platform. Overall, the website is functional and professionally presented but would benefit from enhanced privacy compliance and security practices.

L

LAMOMEDIC, s.r.o.

peptys.cz

61

LAMOMEDIC, s.r.o. operates the PEPTYS website, offering an innovative medical device focused on treating joint pain and degenerative changes by stimulating natural collagen production. The company targets patients with osteoarthritis and sports injuries, positioning itself as a niche healthcare innovator with clinical support and a clear product offering. The website is well-structured, professionally designed, and provides comprehensive business and contact information, enhancing trust and credibility. Technically, the site uses modern React-based technologies hosted on Websupport infrastructure, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. No blocking or WAF challenges were detected, allowing full content access and analysis.

A

Arjo

arjo.com

73

Arjo is a global supplier specializing in medical devices and solutions aimed at improving the lives of people affected by reduced mobility and age-related health challenges. The company targets healthcare providers and caregivers, offering products such as patient handling and hygiene solutions. The website reflects a professional and consistent brand presence with multi-language support and embedded multimedia content to enhance user engagement. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Azure Application Insights for telemetry, Cookiebot for cookie consent management, and Wistia for video hosting. The site is hosted on Azure infrastructure, indicating a robust and scalable platform. Performance and mobile optimization are good, though accessibility features could be improved. From a security perspective, the site enforces HTTPS, uses security headers, and implements anti-CSRF cookies, demonstrating adherence to best practices. However, the absence of a publicly available security policy, incident response contacts, and vulnerability disclosure mechanisms suggests areas for enhancement. Privacy compliance is strong, with comprehensive cookie consent and GDPR-aligned policies. Overall, the website is trustworthy and professional, though the lack of WHOIS registration data and visible contact information slightly detracts from business credibility. Strategic improvements in transparency and accessibility would further strengthen the security posture and user trust.

S

společnost Madisson, s.r.o

madisson.cz

42

Společnost Madisson, s.r.o is a well-established Czech company specializing in the supply and servicing of medical, rehabilitation, and wellness equipment. With over 30 years of experience, it serves a broad audience including physiotherapists, doctors, wellness centers, and healthcare institutions across the Czech Republic. The company offers a comprehensive product range, expert consulting, training, and reliable technical support, positioning itself as a trusted partner in healthcare and rehabilitation sectors. Technically, the website is built on OctoberCMS and employs modern front-end technologies such as jQuery, AOS animations, Select2, and Google Fonts, delivering a responsive and user-friendly experience. The site is well-structured with good SEO practices, though some accessibility features could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses secure form practices but lacks visible security headers and formal privacy or cookie policies, which are important for GDPR compliance. No vulnerabilities or exposed sensitive data were found, but the absence of WHOIS data for the domain raises concerns about domain registration transparency. Overall, the website is professional and trustworthy in content and presentation but would benefit from enhanced privacy compliance and improved domain registration transparency to strengthen its security posture and user trust.

R

RENOCAR a.s.

renocar.cz

52

RENOCAR a.s. is an established authorized dealer and service provider for BMW, MINI, and BMW Motorrad vehicles operating primarily in the Czech Republic with multiple physical branches. The company offers a comprehensive range of services including new and used vehicle sales, authorized servicing, financial services, insurance, and test drives. Their market position is strong within the automotive retail sector, supported by consistent branding and a professional online presence. The website is well-designed, mobile-optimized, and integrates modern tracking and marketing tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit incident response contacts are missing. The absence of WHOIS registration data is a notable gap, reducing domain registration trustworthiness but not detracting from the overall legitimacy indicated by the website content and structured data. Strategic recommendations include enhancing security headers, publishing a security policy, and improving incident response transparency to further strengthen trust and compliance.

K

Korken Schiesser Ges.m.b.H.

korken.at

57

Korken Schiesser Ges.m.b.H. is a small manufacturing company based in Vienna, Austria, specializing in natural cork products including technical cork and wine corks. The company maintains a professional online presence through a Wix-built website that clearly communicates its business focus and contact information. The website is well-structured, mobile-optimized, and provides a good user experience, although it lacks some privacy and cookie policy disclosures. Technically, the site uses Wix's Thunderbolt framework and is hosted on Wix infrastructure, ensuring reliable performance and HTTPS security. However, the absence of security headers and privacy compliance documentation indicates areas for improvement in security posture and regulatory adherence. Overall, the website reflects a legitimate and established business with a solid market position in the cork manufacturing sector.

N

Národní vinařské centrum, o.p.s.

narodnidenvina.cz

55

The website narodnidenvina.cz represents a Czech national project focused on promoting wine culture, health benefits of moderate wine consumption, and charitable activities supporting pediatric cardiology. It is organized by the Národní vinařské centrum, o.p.s., a recognized organization in the Czech wine sector. The site targets wine enthusiasts, health-conscious individuals, and the general public interested in cultural and charitable wine-related events. The business model is non-profit and awareness-driven, with a focus on education and charity fundraising. Technically, the website is built on the Webnode CMS platform, leveraging modern web technologies including HTML5, CSS3, JavaScript, and Amazon Cloudfront CDN for content delivery. Google Tag Manager is used for analytics and tracking. The site is mobile-optimized and performs moderately well, though SEO and accessibility features are basic. No advanced frameworks or platforms are detected. From a security perspective, the site enforces HTTPS and does not expose sensitive data. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options. There are no visible vulnerabilities or exposed credentials. Privacy and cookie policies are missing, and no contact information for security incidents is provided, indicating gaps in compliance and incident response readiness. Overall, the website is legitimate and professionally presented but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information. The lack of WHOIS data limits domain ownership transparency but does not detract significantly from trust given the site's content and organizational backing.

A

adSYSTEM

bezpecne.online

68

Bezpecne.online is an educational project operated by adSYSTEM focused on raising awareness and providing education in cybersecurity and online safety, primarily targeting a Czech-speaking general audience. The website offers knowledge resources, event calendars, and guidance on ICT security risks and privacy. The business operates as a small entity with a niche focus in the education and technology sectors, established around 2017. Technically, the site uses a custom or unknown CMS with jQuery and standard web technologies, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS and cache control headers but lacks advanced security headers and formal privacy or cookie policies. Contact is limited to a web form with no direct emails or phone numbers visible. WHOIS data is consistent with the business identity, supporting legitimacy. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

R

Regionální muzeum v Mikulově, p. o.

pronajmisizamek.cz

41

The website pronajmisizamek.cz is operated by the Regionální muzeum v Mikulově, a regional museum organization in the Czech Republic. It offers rental services for various historic halls and spaces within the Mikulov castle, targeting individuals and organizations seeking venues for social events, corporate celebrations, weddings, and cultural activities. The site is well-structured with detailed descriptions of each rental space and includes reservation forms for direct booking requests. Multilingual support is provided via partner domains in English and German. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics and Tag Manager for visitor tracking. The design is professional and mobile-optimized, providing a good user experience. However, the site lacks explicit privacy and cookie policies, and no cookie consent mechanism is present, which are compliance gaps under GDPR. Security headers are not detected, though HTTPS is used, indicating room for improvement in security posture. WHOIS data is unavailable, likely due to privacy protection, but the website content and external references support legitimacy. Overall, the site is a credible small-scale venue rental platform with moderate technical maturity and some compliance and security improvements recommended.

I

International SOS

internationalsos.com

76

International SOS is a globally recognized leader in international health and security risk management, providing comprehensive services to protect business travellers and international assignees from health and security threats worldwide. The company offers tailored solutions including travel risk management aligned with ISO 31030, executive protection, and a proprietary assistance app. Their market position as a pioneer and their 40 years of operational history underscore their expertise and reliability in this niche. Technically, the website is built on modern web technologies such as React and JavaScript, with a responsive design optimized for mobile devices. The site integrates multiple analytics and marketing tools, including Google Tag Manager, Microsoft Clarity, and LinkedIn Insight, reflecting a mature digital marketing strategy. Performance is moderate with good SEO and accessibility features. From a security perspective, the site enforces HTTPS, implements key security headers, and uses secure forms with consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public vulnerability disclosure or security.txt file and incident response contact details suggests room for improvement in transparency and security communication. Overall, the website presents a professional, trustworthy, and well-maintained digital presence. The lack of WHOIS data reduces some trustworthiness but is likely due to privacy protection or domain management practices. Strategic recommendations include publishing vulnerability disclosure information, enhancing incident response transparency, and maintaining rigorous security practices to uphold their market leadership.

E

Emco spol s.r.o.

myslinazdravi.cz

46

Emco spol s.r.o. operates a website focused on promoting its food products that are free from palm oil, including musli, mysli, oat porridges, cookies, bars, and other cereal products. The company emphasizes health benefits and sustainability by replacing palm oil with domestic rapeseed oil since 2014. The website targets health-conscious consumers in the Czech Republic and positions Emco as a reputable brand in the retail food sector. The domain is well-established since 2008, consistent with the company's history. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, with Google Tag Manager for analytics. The site is moderately optimized for mobile devices and SEO but lacks advanced accessibility features. Hosting appears to be with REG-ZONER, a Czech registrar and hosting provider. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS (assumed from URL), but no explicit security headers were detected in the provided data. There are no visible vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, as well as contact information, reduces the site's compliance with GDPR and general transparency. No incident response or vulnerability disclosure information is provided. Overall, the website is professional and trustworthy in terms of content and business legitimacy but lacks important privacy and security disclosures. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and compliance posture.

B

Baji Live

federacion-matronas.org

55

Baji Live is a recently established online gambling platform launched in 2024, focusing on sports betting and casino games primarily for users in Bangladesh and Southeast Asia. The platform offers a wide range of betting options including cricket, football, and live casino games, supported by a dedicated Android app. The business positions itself as a trusted and innovative player in the regional online betting market, emphasizing user satisfaction and secure gaming experiences. Technically, the website uses standard web technologies such as HTML5, CSS3, and JavaScript, with moderate performance and good mobile optimization. The domain is registered with NETIM SAS and uses DNS parking services. However, there is no evidence of advanced security headers or DNSSEC implementation, which are recommended for enhanced security. The website lacks visible cookie consent mechanisms and comprehensive privacy compliance features. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers, which lowers its security posture. No direct contact emails or phone numbers are provided, limiting transparency. The WHOIS data aligns well with the business claims, indicating legitimacy, but the domain's recent creation suggests the business is new and still maturing. Overall, the website is functional and professionally designed but requires improvements in security best practices and privacy compliance to enhance trust and regulatory adherence. Strategic recommendations include implementing DNSSEC, adding security headers, establishing cookie consent, and improving privacy disclosures.

A

Association Luxembourgeoise des Sages-femmes a.s.b.l.

sages-femmes.lu

60

The Association Luxembourgeoise des Sages-femmes is a small non-profit professional organization based in Luxembourg dedicated to supporting midwives, informing parents, and representing midwives at the national level. The website serves as an information hub for both parents and healthcare professionals, providing resources such as a directory of midwives and news updates. It also highlights the cultural recognition of midwifery as a national and UNESCO intangible cultural heritage. The association maintains partnerships with major Luxembourg hospitals and international midwife organizations, reinforcing its authoritative position in the healthcare sector. Technically, the website is built on the Webnode CMS platform and leverages Amazon Cloudfront CDN for content delivery. The site is well-structured with responsive design, good SEO practices, and a cookie consent mechanism compliant with GDPR. While the site uses HTTPS and Google Tag Manager for analytics, it lacks advanced security headers and explicit security policies, which could be improved to enhance its security posture. From a security perspective, the site shows a solid baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data due to a malformed domain query limits the ability to fully verify domain registration legitimacy. The website content and business information appear trustworthy and professional, mitigating some concerns. Overall, the site scores well on content quality, technical implementation, and privacy compliance but could benefit from enhanced security policies and transparency. Strategically, the association should focus on improving its security headers, publishing a formal security policy, and establishing an incident response contact to strengthen trust and compliance. These steps will support its role as a professional body and safeguard its digital presence against emerging threats.

The website semma.gr is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge, which blocks direct access to the site's content. As a result, no business information, contact details, or policies are available for analysis. The site appears to be protected by Cloudflare's security services, indicating an intent to mitigate automated access or attacks. However, this also limits the ability to assess the site's content quality, technical infrastructure, and security posture comprehensively. The lack of accessible content and metadata suggests the site is either under maintenance, protected against bots, or experiencing access restrictions.

Π

Παγκύπριος Σύνδεσμος Νοσηλευτών και Μαιών (ΠΑ.ΣΥ.Ν.Μ.)

cyna.org

45

The Παγκύπριος Σύνδεσμος Νοσηλευτών και Μαιών (ΠΑ.ΣΥ.Ν.Μ.) is a well-established professional association representing nurses and midwives in Cyprus. The organization provides educational programs, organizes conferences, and represents its members both nationally and internationally. The website reflects a medium-sized non-profit entity with a clear focus on healthcare professionals in Cyprus. The domain age and WHOIS data confirm the legitimacy and long-standing presence of the organization. Technically, the website is built on WordPress with a standard theme and uses common web technologies such as jQuery and CSS3. The site is moderately optimized for mobile and SEO, with a good user experience and clear navigation. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and advanced security headers. Privacy compliance is basic with a privacy policy and cookie consent mechanism present but not fully comprehensive or explicitly GDPR compliant. Contact information and social media presence are clearly provided, enhancing business credibility.

M

Ministerstvo financí ČR

fondyehp.cz

76

The website www.eeagrants.cz is an official online presence of the Czech Ministry of Finance dedicated to managing and communicating about the EEA and Norway Grants. It serves as a government portal providing information on grant programs, updates, and resources for stakeholders in the Czech Republic. The site targets public sector entities, grant applicants, and interested citizens. The business model is government-funded and focused on grant administration and transparency. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and integrates analytics tools such as Google Analytics and Matomo. Cookiebot is used for comprehensive cookie consent management, reflecting a moderate level of digital maturity. Hosting is inferred to be on Microsoft Azure, supporting scalability and reliability. The site is mobile-optimized and accessible with clear navigation. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, it lacks explicit security headers and does not provide visible security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is basic, with no explicit privacy policy page found in the provided content. Overall, the website is legitimate, professional, and trustworthy, consistent with a government entity. Recommendations include publishing a detailed privacy policy, adding security headers, providing contact information for data protection and incident response, and implementing a vulnerability disclosure policy to enhance security posture and compliance.

N

Nadační fond rodiny Malých

nfrmalych.cz

47

Nadační fond rodiny Malých is a Czech non-profit foundation established in 2021, continuing over 20 years of philanthropic history by its founders. The foundation supports public benefit organizations focused on nature protection, cultural heritage, disadvantaged groups, and cultural and artistic projects. The website is professionally designed, mobile-optimized, and uses modern JavaScript libraries such as Swiper.js and Google Tag Manager for analytics. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit privacy or terms of service documentation. No direct contact information or incident response contacts are visible, which could be improved for transparency and compliance. The domain registration data is consistent with the foundation's claims and location, indicating legitimacy.

K

Kancelária prezidenta Slovenskej republiky

prezident.sk

54

The website www.prezident.sk is the official online presence of the President of the Slovak Republic, currently Peter Pellegrini. It serves as a comprehensive portal providing official information about the president, his biography, official program, press releases, speeches, and contact options primarily through forms. The site targets Slovak citizens, media, and international visitors seeking authoritative information about the presidency. The business model is that of a government institution providing public services and information. The site is well-branded, consistent, and professionally maintained. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Google Analytics, Hotjar, and Facebook SDK for social media integration. It uses Google Fonts and FontAwesome for styling and icons. The site appears to be built on TYPO3 CMS, common for Slovak government sites. Performance is moderate with good mobile optimization and accessibility features. SEO is well implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes important security headers such as HSTS, X-Frame-Options, and Content-Security-Policy. The cookie consent mechanism is robust, allowing granular user control and compliance with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available. Overall, the website is a trustworthy, professional government portal with strong privacy and security postures. It is safe for general audiences and free from adult or questionable content. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure information, and maintaining regular audits of third-party scripts to ensure ongoing security.

Globesystem s.r.o. is a Czech-based IT company founded in 2018, specializing in the supply of IT hardware and software, authorized computer repair services, and comprehensive IT service management including server and network infrastructure, IT security, and monitoring. The company targets both private sector businesses and public institutions, positioning itself as a regional IT service provider with certified specialists and a focus on quality and customer support. The website reflects a professional and consistent brand image with clear contact information and business registration details, supporting its credibility. Technically, the website is built using the WebEditor CMS platform hosted by Webglobe, employing modern web technologies such as JavaScript and WebFontLoader. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. Analytics tracking is implemented via yolacdn.net, indicating moderate user tracking practices. However, security headers and explicit security policies are absent, representing an area for improvement. From a security perspective, the site uses HTTPS (implied by domain and hosting provider), and a cookie consent banner is present, indicating some privacy compliance efforts. There is no dedicated security policy or incident response information, and no vulnerability disclosure or security.txt file was found. The WHOIS data is consistent with the business information, showing a domain age appropriate for the company’s history and no privacy protection, enhancing trustworthiness. Overall, the website is functional, professional, and trustworthy with room for enhancement in security posture and privacy transparency. Strategic recommendations include implementing security headers, publishing detailed privacy and security policies, and improving accessibility and SEO to strengthen digital maturity and compliance.

R

RIMADO s.r.o.

rimado.cz

47

RIMADO s.r.o. is a Czech Republic based small technology company founded in 2011, specializing in providing online digital services including website creation, e-commerce solutions, online applications, and ICT support. The company positions itself as a partner in the digital world, leveraging a proprietary publishing system called adSYSTEM. The website is professionally designed, mobile-optimized, and provides clear contact information, supporting its credibility. However, the absence of WHOIS data and privacy policies slightly detracts from transparency and compliance. Technically, the site uses standard web technologies with no detected advanced frameworks or analytics, indicating a straightforward infrastructure. Security posture is moderate but could be improved by implementing security headers and formal privacy and cookie policies. Overall, the site is safe, business-focused, and trustworthy but would benefit from enhanced security and compliance measures.

The Slovenská hepatologická spoločnosť (Slovak Hepatological Society) is a well-established professional organization dedicated to uniting the hepatology community in Slovakia since 1968. The society focuses on providing modern, quality, and accessible treatment and preventive care for liver disease patients and the general population. Their website serves as a platform for members and the public to access educational resources, event information, and membership benefits. The organization maintains partnerships with pharmaceutical companies and participates in European research consortia such as Liver Aim.

The website fyzioterapeuticke-dny.cz serves as the official platform for the "Mikulovské dny rehabilitace a lázeňství" conference, a specialized event organized by the Institute of Clinical Rehabilitation at Palacký University Olomouc. It targets healthcare professionals, researchers, and students in rehabilitation and balneotherapy, providing a venue for knowledge exchange, professional development, and networking. The site features detailed event information, partner logos, and contact details, reflecting a focused academic and professional audience. Technically, the site employs standard web technologies such as Bootstrap and jQuery, with a moderate level of mobile optimization and basic SEO practices. However, the absence of privacy and cookie policies, lack of visible security headers, and unclear HTTPS status indicate gaps in security and privacy compliance. Contact information is clearly presented, but no social media presence or advanced analytics are detected. Overall, the site is functional and professional but requires improvements in security and compliance to enhance trust and user safety.

The website brnenske-dny.cz represents SYMMA, spol. s r.o., an established small company organizing the 24th Brno Days of Emergency Medicine conference in the Czech Republic. The site targets healthcare professionals and students interested in emergency medicine, providing detailed event information, registration, accommodation, and partner details. The business model focuses on event management and professional networking within the healthcare sector. Technically, the site uses a standard Bootstrap framework with jQuery and Google Fonts, delivering a moderate performance and basic mobile optimization. Security posture is adequate with HTTPS assumed but lacks advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security measures.

The website neurochirurgie-brno.cz serves as the official platform for the 16th Brno Neurosurgery Days conference organized by the Neurosurgery Clinic of the Faculty of Medicine at Masaryk University and the Faculty Hospital Brno. It targets medical professionals, especially neurosurgeons and healthcare workers from the Czech Republic and Slovakia, providing detailed event information, registration links, and contact details. The business model focuses on event organization and professional medical education. The site demonstrates moderate digital maturity with a clean design, use of Bootstrap and jQuery, and hosting on a Czech provider, but lacks advanced CMS or analytics integrations. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and published privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is provided. The site does not employ tracking or advertising technologies, indicating a privacy-conscious approach but also missing opportunities for user engagement analytics. Overall, the website is professional and functional with good content relevance and navigation clarity. However, it would benefit from enhanced privacy compliance, security best practices, and mobile optimization improvements to strengthen trust and regulatory adherence. The domain registration data aligns well with the website's purpose and location, supporting legitimacy.

I

Institut biostatistiky a analýz LF MU

onconet.cz

53

NOP Online is a Czech national oncology portal providing comprehensive information and resources related to cancer care, screening programs, and epidemiological data. It is supported by academic and governmental institutions, notably the Institut biostatistiky a analýz LF MU and the Ministry of Health of the Czech Republic. The portal targets patients, healthcare professionals, and researchers within the Czech Republic, offering interactive maps, data visualizations, and up-to-date news on oncology programs. Technically, the website employs modern web technologies including Leaflet.js for mapping and Google Analytics for user tracking, with a responsive and accessible design. Security posture is moderate with HTTPS usage and cookie consent implemented, but lacks visible security headers and formal privacy or terms of service documentation. WHOIS data confirms the domain's legitimacy and long-term registration consistent with the academic institution managing the site. Overall, the website is professional, trustworthy, and serves an important healthcare informational role in the Czech Republic.

U

UAB "Detalita"

detalita.lt

41

Detalita is a Lithuanian-based B2B company specializing in automotive parts supply and vehicle servicing. Established in 1998, it holds a strong market position in Lithuania's transportation and retail sectors, offering a wide range of automotive components and related services. The website targets business clients and automotive professionals, providing product search by vehicle and brand, along with utilization services for batteries, oils, and tires. Technically, the site uses modern web technologies including OXID eShop CMS, jQuery, HTMX, and Hyperscript, delivering a responsive and user-friendly experience. Security-wise, the site enforces HTTPS and uses secure forms but lacks some advanced security headers and explicit privacy compliance mechanisms. Overall, the site is professional, trustworthy, and well-maintained, though improvements in privacy compliance and security policies are recommended.

A

Asociace inovativního farmaceutického průmyslu (AIFP)

lekarskekongresy.cz

50

The website lekarskekongresy.cz serves as a transparency platform managed by the Asociace inovativního farmaceutického průmyslu (AIFP), a Czech pharmaceutical industry association. It focuses on providing a database related to Continuing Medical Education (CME) disclosures, promoting transparency in financial support between pharmaceutical companies and healthcare professionals. The site targets medical professionals, pharmaceutical companies, and event organizers, positioning itself as a trusted resource within the Czech healthcare sector. The business model is non-commercial, emphasizing transparency and ethical collaboration in the pharmaceutical industry. The website content is professionally presented, consistent with the association's branding and mission. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Swiper.js for UI components. It integrates Google Analytics for visitor tracking and CookieHub for cookie consent management, reflecting a moderate level of digital maturity. The site is mobile-optimized with responsive design elements and provides a clear navigation structure. Hosting and domain registration are consistent with Czech providers, supporting the site's legitimacy. From a security perspective, the website uses HTTPS and implements a cookie consent mechanism, but lacks visible advanced security headers and explicit security or incident response policies. No critical vulnerabilities or suspicious patterns were detected. Privacy compliance is partial, with no dedicated privacy policy or terms of service pages found, which is a notable gap. Overall, the security posture is adequate but could be improved with formalized policies and enhanced header configurations. The overall risk assessment is low, with the site appearing trustworthy and professionally maintained. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and improving transparency around incident response and vulnerability disclosures to strengthen compliance and user trust.

P

PepiApp - Mobilní aplikace, vývoj mobilní aplikace pro Android a iOS

pepiapp.cz

60

PepiApp is a small technology service provider specializing in mobile application development for Android and iOS platforms, based in the Czech Republic. The website presents a professional image with a clear focus on their core services and target audience. The technical infrastructure leverages modern web technologies including Webflow CMS, Google Tag Manager for analytics, and Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and CSRF protection cookies in place, although some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partially addressed through a detailed cookie consent mechanism, but the absence of a visible privacy policy and contact information limits full compliance assurance. Overall, the website is functional, well-designed, and trustworthy, but could benefit from enhanced transparency and security documentation.

J

Jeseníky Sdružení cestovního ruchu

jeseniky-rodina.cz

44

Jeseníky.cz is a well-established regional tourism portal dedicated to the Jeseníky mountain region in the Czech Republic. Founded in 1998, it serves as an authoritative source of information for tourists, providing comprehensive details on tourist destinations, accommodation, dining, events, and recreational activities. The site is operated by Jeseníky Sdružení cestovního ruchu, a recognized tourism association, and features partnerships with multiple regional and national tourism organizations. The platform targets visitors interested in outdoor activities, cultural events, and wellness experiences in the Jeseníky area. Technically, the website employs a custom CMS called Noteo Engine, utilizes modern web technologies including HTML5, CSS, JavaScript, jQuery, and integrates third-party services such as Google Analytics and YouTube embeds. The site is hosted under a reputable registrar (REG-ZONER) with a domain age dating back to 1998, indicating a mature online presence. Mobile optimization and SEO practices are implemented at a good level, though accessibility features are basic. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, but lacks visible advanced security headers and a dedicated security or privacy policy page. No critical vulnerabilities or WAF blocking were detected. Contact information is clearly provided, enhancing trustworthiness. The site does not contain any adult or questionable content, making it safe for general audiences. Overall, Jeseniky.cz demonstrates a solid business and technical foundation with room for improvement in security best practices and privacy compliance. Strategic enhancements in these areas would further strengthen its position as a trusted regional tourism resource.

V

visitostrava.eu

visitostrava.eu

60

VisitOstrava.eu is the official tourism guide website for the city of Ostrava, Czech Republic. It provides comprehensive information about local events, attractions, accommodation, and cultural activities, targeting tourists and visitors. The site also features an e-shop for souvenirs and promotes regional tourism partners, positioning itself as a key resource for exploring Ostrava. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates tracking tools such as Google Analytics and Facebook Pixel. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS and asynchronous loading of tracking scripts but lacks some security headers and a published privacy policy, which are areas for improvement. The domain WHOIS data is privacy protected by EURid, which is typical for .eu domains, and does not reveal registrant details, but the website content and external partnerships indicate legitimacy. Overall, the website is professional, trustworthy, and serves its business purpose effectively, though it would benefit from enhanced privacy and security disclosures.

W

WWK Versicherungen

wwk.de

62

WWK Versicherungen is a well-established German insurance company founded in 1884, offering a broad range of insurance products including life, health, property, liability, and retirement solutions. The company positions itself as a strong community-focused insurer with a comprehensive portfolio targeting a wide audience. Their website reflects a mature digital presence with clear navigation, multiple customer and partner portals, and a strong emphasis on compliance and service quality. Technically, the site uses modern web technologies such as Vue.js and integrates privacy and consent management tools like OneTrust, alongside analytics via eTracker. Security posture is robust with HTTPS enforcement, security headers, and ISO 27001 certification, although explicit vulnerability disclosure and incident response contacts are not publicly detailed. Overall, the website is professional, secure, and compliant, supporting WWK's market position as a trusted insurer in Germany.

N

Nsoft

nsoft.lt

54

Nsoft is a Lithuanian technology company specializing in business hardware and software solutions, particularly point of sale systems and business process management tools. The company has an established market presence since 2005 and targets business clients primarily in Lithuania. Their website reflects a professional digital presence built on WordPress with modern SEO and tracking tools. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks published security policies and vulnerability disclosure mechanisms. Privacy compliance is partial due to missing privacy and terms of service pages, though a cookie consent banner is present. Overall, the website and domain registration data indicate a legitimate and trustworthy business with room for improvement in compliance documentation and security transparency.

K

Klinická onkologie

e-onkologie.cz

43

The website e-onkologie.cz serves as an educational portal dedicated to oncology professionals, providing access to the official journal 'Klinická onkologie' and related oncology educational resources. It is affiliated with recognized Czech medical societies (ČLS JEP and SLS) and features partnerships with major pharmaceutical companies, indicating a specialized niche focus in healthcare education. The business model centers on delivering oncology knowledge and journal content to medical professionals in the Czech Republic, positioning itself as a trusted resource within this sector. Technically, the site is built with basic HTML and CSS, incorporating Google Analytics for user tracking. The editorial system is hosted externally via Carecomm. The site lacks modern web frameworks and advanced technical features but maintains moderate performance and basic mobile optimization. SEO and accessibility are present at a basic level, with room for improvement. From a security perspective, the site does not display advanced security headers or policies, and no privacy or cookie policies are published, which impacts compliance with GDPR and best practices. No forms or sensitive data collection are present on the homepage, reducing immediate risk. The domain registration is consistent and legitimate, with no privacy protection, supporting trustworthiness. However, the absence of contact information and security disclosures limits transparency. Overall, the website is a functional, niche educational platform with moderate technical maturity and basic security posture. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and regulatory adherence.

C

Care Comm

carecomm.cz

59

Care Comm is a small Czech healthcare service provider specializing in publishing professional medical journals, website development, and organizing medical congresses. The company targets healthcare professionals and organizations within the Czech Republic. The website is built on the Wix platform, leveraging Wix Thunderbolt framework and standard web technologies such as JavaScript, CSS, and HTML5. The site demonstrates good design quality and mobile optimization but lacks advanced accessibility and SEO features. Security posture is weak due to absence of security headers and no visible privacy or cookie policies. WHOIS data is unavailable, limiting trust assessment. Overall, the website is functional and professional but requires improvements in security and compliance to enhance trustworthiness.

W

Whow Games GmbH

merkur24.com

69

Merkur24 is a social casino gaming platform operated by Whow Games GmbH, offering free-to-play casino games such as slots, blackjack, and roulette. The platform targets adult users across multiple European languages and markets, emphasizing entertainment without real money gambling. The website demonstrates a solid technical infrastructure with modern web technologies, fast performance, and mobile optimization. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanisms aligned with GDPR standards. Security posture is good with HTTPS enforcement and secure login forms, though explicit security policies and incident response details are absent. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, but overall business credibility is supported by consistent branding and privacy practices.

A

adSYSTEM

adsystem.eu

51

adSYSTEM is a Czech-based technology company specializing in the design and implementation of internet e-shops, websites, CMS, and CRM systems with rental options. The company targets businesses and organizations seeking integrated administration and publication systems for internet and intranet applications. Their market position is niche-focused within the Czech Republic, offering a proprietary CMS platform and related modules such as e-shop management, CRM, cash register integration, and SEO optimization. The website content is professional, well-structured, and optimized for mobile devices, reflecting a good level of digital maturity. Technically, the website employs standard web technologies including HTML5, CSS3, and jQuery 3.2.1, hosted by a reputable Czech registrar and hosting provider (INTERNET CZ, a.s.). The site enforces HTTPS with strong SSL configuration and basic security headers, though there is room for improvement by adding advanced security headers and publishing a security policy. The cookie consent mechanism and privacy policy indicate awareness of GDPR compliance, enhancing the site's privacy posture. From a security perspective, the site demonstrates good practices such as secure login forms and no visible vulnerabilities or exposed sensitive data. However, the absence of a formal security policy, incident response contacts, and vulnerability disclosure mechanisms suggests areas for maturity growth. Overall, the risk level is low with no critical issues detected. Strategically, adSYSTEM should focus on enhancing security transparency, expanding accessibility features, and maintaining up-to-date technical components to sustain trust and compliance. The website's professional presentation and clear contact information support strong business credibility within its market segment.

W

WWK Lebensversicherung a. G.

wwkarena.com

65

WWK Lebensversicherung a. G. operates the WWK ARENA official website, providing comprehensive information about the stadium in Augsburg, Germany. The site serves fans and visitors with details on ticketing, hospitality, sustainability, and visitor services, positioning itself as a key digital touchpoint for the stadium experience. The business model focuses on information dissemination and enhancing visitor engagement, supported by strong branding aligned with the parent insurance company WWK. Technically, the website employs modern web technologies including JavaScript, CSS, and integrates third-party services like YouTube and eTracker analytics, with a cookie consent mechanism ensuring GDPR compliance. Accessibility is enhanced by tools such as Eye-Able, reflecting a commitment to inclusive design. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though improvements like enabling DNSSEC and adding security headers are recommended. Overall, the website is professional, trustworthy, and well-structured, supporting the business's digital presence effectively.

P

Pedro's Foodtruck

pedrosfoodtruck.cz

42

Pedro's Foodtruck is a small hospitality business operating a street food truck and bistro in the South Moravia region of the Czech Republic. They specialize in American-style comfort food such as pulled meat burgers, hot dogs, tacos, and quesadillas, emphasizing local ingredients and homemade sauces. The business has a strong local presence with positive customer reviews and media recognition, positioning itself as a leader in the regional street food market. Technically, the website is built on Joomla CMS using the UIkit framework, offering a visually appealing and mobile-optimized experience. However, the site lacks critical privacy and cookie policies, which impacts compliance and trust. Security posture is moderate with HTTPS usage but missing security headers and incident response information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

A

Agentura Osma a.s.

nutrivino.cz

51

Nutrivino.cz is a specialized digital platform launched in 2023 by Agentura Osma a.s. to assist wine producers in the Czech Republic with compliance to new EU legislation requiring detailed nutritional and ingredient labeling on wine products. The platform offers QR code management, label design integration, and online presentation of mandatory information, targeting wine producers and distributors. The website is professionally designed using modern web technologies like Bootstrap and provides clear contact information for sales and technical support. However, it lacks privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS implied but no visible security headers or incident response contacts. Overall, the domain registration aligns well with the business claims, indicating legitimacy.

Oborová zdravotní pojišťovna zaměstnanců bank, pojišťoven a stavebnictví (OZP) is the third largest employee health insurance company in the Czech Republic. The company offers a broad range of benefits including free preventive check-ups, financial contributions to preventive programs, and discount programs. OZP emphasizes convenience by enabling clients to handle basic administrative tasks online, supported by their VITAKARTA online service and mobile applications. The website reflects a mature digital presence with comprehensive content, clear navigation, and multiple client engagement channels including a chatbot and online appointment booking. Technically, the site employs modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Smartlook, all integrated with a robust cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be explicitly confirmed. The absence of WHOIS data limits domain trust analysis, but the website's professional presentation, clear business information, and social media presence strongly support legitimacy. Overall, OZP demonstrates a well-established healthcare insurance business with a solid digital infrastructure and compliance focus.

WWW.KOTVA.CZ, a.s. operates a real estate rental business specializing in office, residential, storage, and parking spaces located in a historic building in the center of Prague. The company targets businesses and individuals seeking premium rental spaces in Prague 1, leveraging the unique architectural and historical value of their property. The website presents a professional image with clear descriptions of services and contact information, positioning the company as a niche local real estate provider with a small but stable tenant community. Technically, the website uses modern web technologies including Google Analytics for tracking and Google Maps API for location services. The site is mobile responsive and well-structured, though it lacks some advanced accessibility features and explicit security headers. The absence of a CMS or hosting provider information limits deeper infrastructure insights. Performance is moderate with good SEO practices evident through meta tags and structured content. From a security perspective, the website uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency and readiness. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is not uncommon for small businesses. Overall, the website is safe, professional, and functional with moderate risk due to missing privacy and security policy disclosures. Strategic improvements in compliance and security posture would enhance trust and reduce potential regulatory risks.