Security Directory

KZEI is the Department of Sanitary and Environmental Engineering at the Slovak University of Technology in Bratislava, Faculty of Civil Engineering. The department provides academic education, research projects, and certification services related to water supply and sewage systems. It targets students, researchers, and professionals in the environmental engineering sector. The website reflects a small academic entity with consistent branding and professional content. Technically, the website is built on WordPress with modern plugins and frameworks such as Bootstrap and Elementor. It uses HTTPS with Google reCAPTCHA for form security and Jetpack for analytics. The site is moderately performant and mobile-optimized, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses reCAPTCHA but lacks security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is trustworthy and professional but should improve privacy compliance and security headers to enhance its security posture and regulatory adherence.

A

Asociácia vodárenských spoločností

avssr.sk

42

Asociácia vodárenských spoločností (AVS) is a Slovak association representing business entities active in water management services. Founded in 2004, it serves as a collaborative platform for water supply companies, providing industry representation, legislative cooperation, and event organization. The website is professionally designed, primarily in Slovak with an English language option, and targets industry professionals and stakeholders in Slovakia's water sector. The business model focuses on association services rather than direct commercial offerings, positioning AVS as a key industry body in the Slovak energy/water sector. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, Ultimate Member, and Slider Revolution. It employs modern web technologies including jQuery and Google Fonts, with a responsive design optimized for mobile devices. Performance is moderate with good SEO and basic accessibility features. The site uses HTTPS with DNSSEC enabled, indicating a secure hosting environment. Cookie consent mechanisms are implemented to comply with GDPR. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and DNSSEC, but lacks explicit security headers and published security policies or incident response plans. No vulnerabilities or suspicious elements were detected in the content or scripts. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age matching the business history. Overall, AVS's website is a trustworthy, professional platform serving its niche audience effectively. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility to further strengthen compliance and user trust.

The Source Magazine is a professional online publication affiliated with the International Water Association, targeting water professionals globally. It provides practical intelligence through news, features, opinion pieces, and event coverage focused on water and related environmental sectors. The website demonstrates a mature digital presence with a modern WordPress-based infrastructure, leveraging popular plugins for SEO, page building, advertising, and newsletter management. Social media integration and structured data enhance its reach and discoverability. Security posture is solid with HTTPS and domain transfer protections, though improvements such as DNSSEC and formal security policies are recommended. Privacy compliance is partial, with cookie consent implemented but no explicit privacy or terms policies found in the analyzed content. Overall, the site is credible, professionally maintained, and serves a niche industry audience effectively.

O

Online Casina

minimuzeum.com

59

Online Casina operates a Czech-language informational website focused on online gambling, providing casino reviews, bonus offers, and guides tailored for Czech players. The site positions itself as a trusted resource for legal and licensed online casinos in the Czech Republic, emphasizing compliance with local regulations and offering detailed content about payment methods, game types, and legal frameworks. Technically, the site is built on WordPress with modern SEO plugins and standard web technologies, delivering a good user experience with mobile optimization and structured data for enhanced search visibility. Security posture is solid with HTTPS and security headers, though the absence of a dedicated security policy and incident response information suggests room for improvement. The lack of WHOIS data for the domain is a notable transparency gap, slightly impacting trust. Overall, the site serves its niche well but should enhance privacy and security disclosures to strengthen credibility.

S

Starscream Limited

vegadreams-de.com

67

VegaDream Casino, operated by Starscream Limited, is a licensed online gambling platform targeting the German market. Founded in 2021, it offers a broad portfolio of over 3,000 casino games including slots, live dealer games, poker, and sports betting. The platform emphasizes generous bonuses, a VIP program, and a mobile-optimized user experience. The website is professionally designed, content-rich, and compliant with key regulatory requirements such as MGA licensing and GDPR data protection. Technically, the site runs on WordPress with Cloudflare DNS and employs modern web technologies including Google Tag Manager and FontAwesome. Security practices include HTTPS with 128-bit SSL encryption and KYC verification, although some security headers and explicit cookie consent mechanisms are missing. Overall, the site presents a trustworthy and professional gambling service with room for improvement in privacy compliance and security transparency.

R

Romix Limited

yoyo-casino-se.com

57

YoYo Casino is an online gambling platform targeting Swedish players, offering a wide range of casino games including slots, live casino, and table games. The business operates under Romix Limited, a Malta-registered company licensed by the Swedish Gambling Authority (Spelinspektionen). The website is professionally designed, mobile-optimized, and provides clear information about bonuses, payment methods, and responsible gaming. Technically, the site is built on WordPress with modern web technologies and uses Cloudflare DNS services. Security posture is good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. The domain is newly registered with privacy protection, which is typical for the industry but introduces minor trust considerations. Overall, the site is credible, compliant, and well-positioned in the Swedish online casino market.

C

CARLETTA NV

pinupcasinos-az.com

52

Pin Up Casino Azerbaycan is an established online gambling platform targeting Azerbaijani players aged 18 and above. The business operates under the legal entity CARLETTA NV and holds a Curacao license (OGL/2024/580/0570), offering a wide range of casino games including slots, live casino, and sports betting. The website is built on WordPress and integrates modern tracking tools such as Google Tag Manager. It provides multiple payment options including local and cryptocurrency methods. The content is rich and professionally presented in Azerbaijani, with clear navigation and promotional offers. However, privacy compliance mechanisms such as cookie consent are lacking, and no explicit security policies or incident response contacts are publicly available.

S

Slovenský národný komitét IWA

iwa.sk

39

Slovenský národný komitét IWA is a professional national committee representing Slovak water management interests internationally within the International Water Association framework. The organization focuses on promoting Slovak water sector expertise, organizing conferences, and collaborating with partner organizations. The website is well designed using WordPress with Elementor and includes essential contact information and event news. Technically, the site uses modern web technologies and enforces HTTPS with DNSSEC, enhancing security. However, it lacks published privacy and cookie policies, which are important for GDPR compliance. Security posture is good with reCAPTCHA integration, but could be improved with additional security headers and incident response disclosures. Overall, the site is trustworthy and professional, serving a niche audience of water sector professionals in Slovakia.

T

TukuToi Co Ltd

tukutoi.com

64

TukuToi Co Ltd is a specialized technology service provider focusing on custom WordPress development and PHP programming, emphasizing Swiss quality standards. The company offers tailored solutions including custom themes, plugins, strategic consulting, and comprehensive maintenance services. Their market position is that of a niche provider targeting businesses and professionals seeking high-quality web development services. The website demonstrates a professional and consistent brand presence with clear service offerings and recent project showcases. Technically, the website is built on WordPress 6.7.2 with modern technologies such as Bootstrap, jQuery, and advanced plugins like Toolset and ACF. The site is mobile-optimized, fast-loading, and SEO-friendly, reflecting a mature digital infrastructure. However, some technical improvements are recommended, including the addition of security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS and secure forms but lacks explicit security headers and an incident response policy. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern, reducing trustworthiness and suggesting the need for verification of domain registration status. Overall, the website is professional, trustworthy, and well-constructed, but improvements in privacy compliance and security transparency are advised to strengthen the security posture and regulatory adherence.

B

BrinkmanIT Webhosting & Design

brinkhost.nl

62

BrinkmanIT Webhosting & Design is a well-established Dutch company specializing in affordable and environmentally friendly web hosting and web design services, primarily targeting small and medium-sized businesses, independent professionals, and local organizations in Groningen and the Netherlands. With over 25 years of experience, the company offers a comprehensive range of services including domain registration, VPS and dedicated servers, and support for popular CMS platforms such as WordPress, Joomla, and Drupal. Their commitment to green hosting is validated by certification from the Green Web Foundation, positioning them as a responsible and sustainable provider in the market. Technically, the website is built on a modern WordPress platform with a solid technology stack including PHP, MySQL/MariaDB, and DirectAdmin for hosting management. The site demonstrates good SEO practices, mobile optimization, and accessibility features. Integration with Cloudflare enhances performance and security, while the use of Wordfence indicates active security management. Cookie consent mechanisms and a privacy policy reflect compliance with GDPR requirements. From a security perspective, the site benefits from HTTPS encryption and basic security best practices, though it lacks explicit security policies and incident response information. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data aligns well with the business claims, showing a consistent and legitimate presence with no privacy protection masking ownership. Overall, BrinkmanIT presents a trustworthy and professional online presence with a strong focus on customer service, sustainability, and technical competence. Strategic improvements could include publishing detailed security policies and enhancing security headers to further strengthen their security posture.

I

International Association for Human Resources Information Management

ihrim.org

58

The International Association for Human Resources Information Management (IHRIM) is a well-established professional association focused on developing HR technology leaders through vendor-neutral education and certification programs. The website reflects a mature organization with a global reach, targeting HR practitioners, educators, technology developers, analysts, and executives. The digital infrastructure is built on WordPress with modern optimization and analytics tools, providing a fast and responsive user experience. Security posture is strong with HTTPS and security headers implemented, though privacy and cookie policies are not explicitly presented, indicating room for compliance improvement. WHOIS data is unavailable, likely due to privacy protection, which is common but slightly impacts trust. Overall, the site is professional, content-rich, and trustworthy, serving its niche audience effectively.

F

Fiapf | International Federation of Film Producers Associations

fiapf.org

73

FIAPF is an established international federation representing film producers globally, advocating for diverse audiovisual production and supporting film festivals. The organization operates a professional website built on WordPress, leveraging modern plugins and technologies such as Yoast SEO, Matomo analytics, and GDPR-compliant cookie management. The site is hosted on Infomaniak servers and uses HTTPS with a clientTransferProhibited domain status, indicating a secure and stable online presence. Security posture is solid with room for improvement in DNSSEC and security headers. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website reflects a credible, professional organization with a clear focus on media industry advocacy.

R

R. D. Mr. Mgr. Tomas van Zavrel

vanzavrel.cz

40

The website www.vanzavrel.cz is a personal site for Tomas van Zavrel, focusing on Christian community projects, spiritual teachings, and cultural heritage in the Czech Republic. It offers blog posts, videos, and information about local religious projects, targeting Czech-speaking audiences interested in spirituality and local history. The site is built on WordPress with common plugins such as Slider Revolution and YouTube Embed Plus, indicating a moderate level of technical maturity. The design is professional and mobile-optimized, providing a good user experience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS data limits domain legitimacy assessment, but the presence of clear contact information and consistent branding supports moderate business credibility. Overall, the site is safe, non-commercial, and serves a niche community purpose.

F

Fobi AI Germany GmbH

passcreator.com

72

Passcreator, operated by Fobi AI Germany GmbH, is a mature SaaS platform specializing in the creation and management of digital Wallet passes compatible with Apple Wallet and Google Wallet. Established since 2012, it serves a broad business audience with solutions including loyalty cards, coupons, event tickets, and membership cards. The platform emphasizes seamless integration, real-time updates, and personalized customer engagement without requiring dedicated apps. Its market position is reinforced by partnerships with notable global brands and certifications such as ISO 27001, underscoring its commitment to security and quality. Technically, the website is built on the Neos CMS and Flow PHP framework, leveraging modern web technologies including JavaScript and integrations with payment gateways like Stripe and PayPal. The site demonstrates good mobile optimization, accessibility, and SEO practices. Analytics and marketing tools such as Google Analytics, Hubspot, and Zapier are employed with privacy considerations like IP anonymization and explicit cookie consent mechanisms. From a security perspective, Passcreator shows a strong posture with HTTPS enforcement and ISO 27001 certification. However, the absence of WHOIS data and lack of explicit security headers or public incident response policies represent areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, Passcreator presents a professional, trustworthy, and technically sound digital service platform with minor gaps in transparency around domain registration and incident response. Strategic enhancements in these areas would further strengthen its security and compliance profile.

C

Cornelsen Verlag GmbH

cornelsen.de

74

Cornelsen Verlag GmbH is a well-established German educational publisher specializing in school books, workbooks, and teaching materials for learners and educators. The website reflects a mature digital presence with a comprehensive navigation structure covering various educational sectors including primary, secondary, vocational, and adult education. The company leverages modern web technologies such as Neos CMS and Flow PHP framework, hosted on AWS infrastructure, and integrates multiple analytics and marketing tools including Google Tag Manager, Econda, Microsoft Clarity, and social media platforms. Security measures are robust with HTTPS enforcement and a strict Content-Security-Policy, although explicit privacy and cookie policies are not clearly found in the analyzed content. The site is free from WAF blocks or security challenges, indicating full accessibility.

H

H-Hotels.com

h-hotels.com

62

H-Hotels.com operates as a European hospitality business offering multiple hotel brands including Hyperion, H4, H2, and H+ Hotels. The website provides direct booking services with exclusive benefits and best price guarantees, targeting leisure and business travelers across Germany, Austria, Switzerland, Hungary, and France. The company positions itself as a large hotel chain with a strong presence in key European cities. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, incorporating modern JavaScript libraries and third-party services such as Google Tag Manager, Jentis, Usercentrics, and Sentry for analytics, tracking, and error monitoring. The site is well-optimized for mobile devices and SEO, with a professional design and clear navigation. Security posture is strong with HTTPS enforced and security headers present, though explicit security policies and incident response contacts are not published. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a clearly accessible privacy policy and terms of service. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance of the site. Overall, the website is functional, secure, and user-friendly but would benefit from improved transparency in privacy and legal policies and verification of domain registration.

S

sitegeist

sitegeist.de

48

sitegeist is a well-established digital agency based in Hamburg, Germany, with over 25 years of experience in digital transformation, web development, and online marketing. The company positions itself as a full-service digital agency offering strategic consulting, innovative AI solutions, and comprehensive web and marketing services. The website demonstrates a high level of digital maturity with modern technologies such as Neos CMS, PHP frameworks, and integration of AI-powered chatbots. Security posture is strong with HTTPS enforcement and good script management, though explicit security headers and policies could be improved. Privacy compliance is currently weak due to the absence of visible privacy and cookie policies. Overall, the website is professional, trustworthy, and well-optimized for performance and user experience.

R

RKeeper

rkeeper.cz

44

RKeeper.cz is a Czech-based company specializing in point of sale (POS) systems and related software and hardware solutions for the hospitality industry. Established in 2004, the company offers a range of products including Rkeeper7 Manager software, RK7 Pokladna POS systems, mobile waiter applications, and hardware such as monoblocks and tablets. The website targets hospitality businesses primarily in the Czech Republic and Slovakia, positioning itself as an established provider in this niche market. The business model is B2B, focusing on sales, support, and integration services for hospitality clients. Technically, the website is built on WordPress 4.9.26 with common plugins like WPBakery Page Builder and Revolution Slider. The tech stack includes jQuery and Google Fonts, with a moderate performance profile and good mobile optimization. However, the use of outdated WordPress and plugin versions poses potential security risks. The site lacks advanced SEO and accessibility features but maintains a professional design and clear navigation. From a security perspective, the site enforces HTTPS and uses cookies but lacks important security headers and up-to-date software components. No explicit privacy, cookie, or terms of service policies are found, and there is no visible incident response or vulnerability disclosure information. These gaps indicate moderate security maturity with room for improvement in compliance and risk management. Overall, the website is functional and professional but requires updates to its software stack and the addition of privacy and security policies to enhance trust and compliance. Strategic recommendations include updating WordPress and plugins, implementing security headers, adding GDPR-compliant cookie consent, and publishing security and incident response policies.

N

Nové Heřminovy

prehradanoveherminovy.cz

53

The website prehradanoveherminovy.cz serves as an informational platform for the Nové Heřminovy dam project, a regional infrastructure initiative aimed at flood protection and water management in the Moravian-Silesian region of the Czech Republic. The site provides historical context, project updates, and contact information, targeting local residents, government stakeholders, and interested parties. The business model is primarily informational and advocacy-focused, with governmental support evident in the content. Technically, the site is built on WordPress using common plugins such as WPBakery Page Builder and Slider Revolution, with Google reCAPTCHA implemented for form security. While the site is mobile-optimized and presents good content quality and navigation, it lacks privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS enabled but missing key security headers. Overall, the site is legitimate and trustworthy but would benefit from enhanced privacy compliance and security hardening.

Eurachem-ČR z.s. is a Czech non-profit organization dedicated to the scientific, pedagogical, and professional development in the field of analytical chemistry. The organization serves as a national representative of Eurachem, providing publications such as newsletters (Kvalimetrie), methodological sheets, and metrological terminology resources. Their target audience primarily consists of scientific and educational professionals in analytical chemistry. The website is professionally designed using WordPress and the GeneratePress theme, offering good content quality and clear navigation. Technical infrastructure is modern and supports mobile optimization, though some improvements in accessibility and SEO could be made. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and incident response policies. Overall, the website is trustworthy and legitimate, though WHOIS data is unavailable, likely due to privacy protection.

H

Hakuv parni pivovar s.r.o.

hpp.beer

54

Hákův parní pivovar is a small Czech craft brewery established in 2018, specializing in authentic Czech craft beer with a strong local presence. The company operates multiple pubs and hostinec locations, offers gift packages, and actively participates in charitable projects, enhancing its community engagement and trustworthiness. The website reflects a professional and consistent brand image targeting craft beer enthusiasts and local customers. Technically, the site is built on WordPress with modern plugins and frameworks, providing a good user experience and mobile optimization. However, there are gaps in privacy compliance and security best practices, such as missing privacy and cookie policies and lack of security headers. The domain registration data is consistent and supports the legitimacy of the business. Overall, the website is functional and trustworthy but would benefit from enhanced security and compliance measures.

C

ClassicPress

classicpress.net

65

ClassicPress is a community-driven open source content management system forked from WordPress 4.9, targeting users who prefer the classic WordPress editor experience. It positions itself as a lightweight, stable, and familiar CMS alternative, supported by a small but active volunteer community and nonprofit governance. The website offers resources including plugins, themes, documentation, and community support channels such as forums and chat. The project is sponsored by several infrastructure partners and funded via donations. Technically, the site runs on a ClassicPress CMS compatible with WordPress 6.2.6, leveraging LiteSpeed caching technology and modern HTML5 standards, resulting in fast performance and good mobile and accessibility support. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response policies are absent. Privacy compliance is good with a comprehensive privacy policy but lacks a cookie consent mechanism. WHOIS data is missing or unavailable, which reduces domain trustworthiness despite the legitimate and professional web presence. Overall, ClassicPress represents a credible niche open source CMS project with room for improvement in security transparency and domain registration clarity.

A

AJdG Solutions

ajdg.net

60

AJdG Solutions is a small technology company specializing in the development and sale of WordPress and ClassicPress plugins, with a strong focus on advertising management and WooCommerce enhancements. Their flagship product, AdRotate Banner Manager, is trusted by over 50,000 users, positioning the company as a niche leader in the WordPress plugin market. The business model centers on software license sales and support services, targeting website owners and developers seeking to optimize advertising revenue and e-commerce functionality. Technically, the website is built on WordPress using the Storefront theme and WooCommerce platform, hosted by InMotion Hosting. The site employs modern web technologies including jQuery and JavaScript, and demonstrates good mobile optimization and SEO practices. Analytics are handled via Matomo, reflecting a privacy-conscious approach. Performance is moderate, with opportunities for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks DNSSEC and security headers such as CSP or HSTS. No explicit security policy or incident response information is provided, and there is no cookie consent mechanism despite cookie usage. The domain registration is privacy protected but consistent with the business location and history, supporting legitimacy. Overall, the security posture is solid but could be enhanced with additional best practices. The overall risk assessment is low, with no critical vulnerabilities detected. Strategic recommendations include enabling DNSSEC, implementing security headers, adding a cookie consent banner, and publishing a security policy with incident response contacts. These improvements would strengthen compliance, user trust, and resilience against potential threats.

F

Flownative GmbH

flownative.com

66

Flownative GmbH is a specialized technology company focused on providing expert support, coaching, training, and cloud hosting services around the Neos CMS and Flow PHP framework. The company positions itself as a niche expert in the Neos ecosystem, catering primarily to developers and businesses using Neos and Flow. Their offerings include professional support, upgrade assistance, and a cloud hosting platform called Flownative Beach, emphasizing scalability and GDPR compliance. The website content is professional and well-structured, reflecting a small but focused business entity based in Germany. Technically, the website is built on the Neos CMS platform and leverages the Flow PHP framework. It uses modern web technologies including PHP and JavaScript, with Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. The SSL configuration is excellent, ensuring secure HTTPS connections. From a security perspective, the site follows good practices such as HTTPS enforcement and privacy-respecting analytics. However, it lacks some security headers and does not provide explicit security policies or incident response contacts. The absence of a cookie consent mechanism is a minor compliance gap. The WHOIS data is notably missing or unavailable, which raises some concerns about domain registration transparency, although the website content and business information appear legitimate. Overall, Flownative GmbH presents a trustworthy and professional online presence with a strong focus on Neos CMS services. The main risk lies in the incomplete WHOIS data, which should be investigated further. Strategic improvements in security headers, cookie consent, and published security policies would enhance their security posture and compliance standing.

S

Spolek Most – České Budějovice

spolekmost.cz

43

Spolek Most – České Budějovice is a Czech non-profit organization dedicated to the spiritual, moral, and cultural development of individuals across various demographics. Established originally in 1993, it operates educational programs, spiritual seminars, social services, and community activities supported by local government entities. The organization maintains a clear structure with named officials and publishes annual reports for transparency. Their digital presence is built on WordPress using the Salient theme and WPBakery Page Builder, with a focus on accessibility and mobile responsiveness. However, the website lacks formal privacy and cookie policies, which are important for compliance with data protection regulations. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and a vulnerability disclosure policy.

The website 'An IndieWeb Webring' is a small community-driven project aimed at connecting personal websites that implement IndieWeb building blocks. It provides a directory, random site navigation, and membership sign-in via IndieAuth or RelMeAuth, targeting IndieWeb enthusiasts. The project is open source with active maintenance and blog updates, positioning itself as a niche community resource within the IndieWeb ecosystem. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and PHP, with no detected CMS. The site is moderately performant and mobile-optimized, though accessibility and SEO are basic. Security practices include CSRF protection on forms but lack advanced HTTP security headers. The domain is privacy protected but consistent with the project's age and scope. Security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in HTTPS enforcement, security headers, and explicit privacy and cookie policies. No advertising or tracking is present, supporting user privacy. Overall, the site is trustworthy and safe for general audiences. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing a privacy policy with GDPR compliance, and improving contact transparency to strengthen trust and compliance.

J

Javna ustanova NATURA VIVA

naturaviva.hr

44

Javna ustanova NATURA VIVA is a Croatian public institution dedicated to managing protected natural areas within Karlovačka županija. The organization focuses on environmental conservation, educational workshops, monitoring of wildlife, and public engagement. Their website reflects a regional governmental entity with a clear mission to preserve natural heritage and promote ecological awareness. The content is well-structured, informative, and targeted primarily at local citizens, schools, volunteers, and environmental stakeholders. The business model is non-commercial, operating under public funding and regional governance.

P

Pivovar Mazák

pivovarmazak.cz

46

Pivovar Mazák is a small craft brewery based in Dolní Bojanovice, Czech Republic, established in 2011. The company specializes in brewing fresh, balanced craft beers that respect tradition and modern trends. The website reflects a local business with a clear focus on quality and craftsmanship, targeting adult consumers interested in craft beer. The site includes an age verification popup to restrict access to users 18 years or older, aligning with legal requirements for alcohol-related content. Technically, the website is built on WordPress using WPBakery Page Builder, hosted by cesky-hosting.eu, and integrates common analytics and marketing tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. The site is mobile optimized and SEO friendly with good content quality and consistent branding. Security posture is moderate with HTTPS enabled and basic best practices observed, but lacks explicit security headers and published security policies. Privacy compliance is strong with GDPR-compliant cookie consent and a comprehensive privacy policy. WHOIS data is consistent with the business claims, showing domain registration since 2011 without privacy protection, supporting legitimacy. Overall, the website is professional and trustworthy but could improve security headers and incident response transparency.

M

Vodní Mlýn Hoslovice – Muzeum Strakonice – Vodní Mlýn Hoslovice

mlyn-hoslovice.cz

58

Vodní Mlýn Hoslovice is a cultural heritage museum website representing a historic water mill in the Czech Republic. The site targets tourists and local visitors interested in history and cultural experiences. The business operates as a small-scale museum attraction with a focus on educational and cultural services. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, with modern web technologies such as Google Tag Manager and Cookiebot for consent management. The site is mobile optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with no visible privacy policy or terms of service, which should be addressed to improve trust and compliance. Overall, the website is professional and trustworthy for its niche, but could benefit from enhanced security and compliance documentation.

A

Assistant Pro

assistant.pro

46

Assistant Pro is a specialized SaaS platform targeting WordPress developers, freelancers, and agencies by providing cloud storage and a community-driven marketplace for page builder templates. The platform aims to streamline website creation by enabling users to save, share, and import design assets across multiple WordPress sites. The business is positioned as a niche productivity tool with a clear value proposition and a consistent brand presence. Technically, the website is built on WordPress, hosted on DigitalOcean, and leverages modern web technologies including JavaScript, jQuery, and SEO plugins like Yoast. The site demonstrates good mobile optimization and SEO practices, though accessibility is basic. Security posture is adequate with HTTPS and domain-level protections, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism detected despite use of tracking scripts. Overall, the site is professional, trustworthy, and safe for general audiences.

S

Street Art Utopia

streetartutopia.com

62

Street Art Utopia is a niche media and blog platform dedicated to street art culture, providing news, artist profiles, thematic coverage, and reviews. Established in 2010, it serves a general audience interested in urban art and graffiti. The website is built on WordPress and hosted on the WordPress.com platform, leveraging popular plugins and themes such as Yoast SEO and Newspaper. It integrates Google Analytics and AdSense for analytics and monetization. While the site demonstrates good content quality, branding consistency, and technical implementation, it lacks explicit privacy and cookie policies, as well as security headers, which are important for compliance and security posture. No contact emails or phone numbers are publicly available, limiting direct communication channels.

Envo Demos is a newly established WordPress-based blog focused on philosophy content, branded as 'Mindblown'. The website currently hosts minimal content, including a welcome post, and targets a general audience interested in philosophical topics. The business model is primarily content-driven with no evident commercial services or products. Technically, the site uses WordPress with standard block editor features and jQuery libraries, hosted by WEDOS Internet, a reputable registrar and hosting provider. The site demonstrates basic mobile optimization and accessibility but lacks advanced SEO and performance tuning. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, which are recommended for improved protection. Privacy compliance is minimal, with no visible privacy or cookie policies, and no contact or incident response information is provided. Overall, the site is functional but immature in terms of security and compliance maturity.

C

Community Wealth Partners

communitywealth.com

48

Community Wealth Partners is a nonprofit consulting firm specializing in capacity building, strategy development, and grantmaker services. They focus on partnering with nonprofits to shift power and resources to communities closest to the issues, aiming for sustainable and meaningful impact. The organization has an established market presence with a domain dating back to 1998, indicating longevity and trust in the nonprofit sector. Their website targets nonprofits and grantmakers, offering services that extend organizational capabilities and foster equity. Technically, the website is built on WordPress with a modern tech stack including jQuery, Gravity Forms, and Yoast SEO. The site is mobile optimized and uses several plugins for enhanced user experience, such as sliders and popups. Performance is moderate with good SEO practices but lacks some advanced security headers and DNSSEC. Security posture is adequate with HTTPS enabled and domain transfer protection, but DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable gap given GDPR and other regulations. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and enhanced security measures. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, and publishing security and incident response information to strengthen trust and compliance.

The website 'Danteho verejný zápisník' is a Slovak personal/public blog focused on literary content, including book reviews, quotes, and personal reflections. It operates primarily as a content publishing platform with affiliate marketing partnerships, notably with Martinus.sk, a Slovak book retailer. The site targets a general audience interested in literature and related topics. Technically, the site is built on WordPress 6.7.2, utilizing common plugins such as Yoast SEO and MonsterInsights for analytics. Cookie consent is managed via Cookiebot, indicating some level of privacy compliance. The site is served over HTTPS with good SSL configuration but lacks explicit security headers and formal privacy or terms of service pages. No contact information or security incident response details are provided, which limits business credibility and compliance transparency. Overall, the site is well-structured, mobile-optimized, and provides good user experience, but could improve in security and compliance documentation.

O

OXIT s.r.o.

oxit.cz

57

OXIT s.r.o. is a Czech Republic-based small IT services company specializing in comprehensive IT network management, web development, intranet systems, and hardware/software sales. The company holds multiple partner certifications including Microsoft, Eset, Lenovo, and Dell, indicating a strong market position within the local IT service sector. Their website demonstrates a professional and content-rich presence with detailed client references and clear contact information. Technically, the site uses modern frameworks such as PHP with Nette, Bootstrap for responsive design, and integrates Google Analytics and Tag Manager for tracking, complemented by a cookie consent mechanism. Security posture is generally good with HTTPS and reCAPTCHA on forms, though the absence of security headers and a privacy policy page are notable gaps. WHOIS data is unavailable, which slightly reduces trust but does not outweigh the positive business indicators. Overall, the website is well-structured, secure, and trustworthy for its business domain.

S

suckgame988.com

ceskyles.net

55

MEGAME1234 is an online direct casino platform primarily targeting Thai-speaking users interested in slot and casino games. The website offers low deposit thresholds, promotional bonuses, and emphasizes ease of deposit and withdrawal. Technically, the site is built on WordPress with Elementor, uses Cloudflare DNS, and has a moderate performance profile. Security posture is adequate with HTTPS and domain transfer protection but lacks DNSSEC and advanced security headers. Privacy and cookie policies are absent, which is a compliance gap. Overall, the site appears legitimate but is newly registered, which may affect trust for some users.

W

World Jurist Association

worldjurist.org

51

The World Jurist Association is a well-established non-profit organization dedicated to promoting the rule of law globally through events, awards, and educational initiatives. The website reflects a mature digital presence built on WordPress with modern plugins and a professional design. It targets legal professionals, academics, and policymakers worldwide. Technically, the site uses a solid tech stack with SEO and accessibility considerations, though some security headers and DNSSEC could be improved. The security posture is good with HTTPS and cookie consent mechanisms in place, but lacks explicit incident response and vulnerability disclosure information. Overall, the domain age and privacy protection align with the organization's profile, supporting legitimacy. The site is accessible without WAF blocking and contains no adult or questionable content, making it safe for general audiences.

H

HCA Czechia

hcaczechia.cz

58

HCA Czechia is a business education provider specializing in seminars, courses, and consulting services focused on sales, management, marketing, and communication. The company targets business owners and managers seeking practical know-how to grow and improve their businesses. The website is professionally designed using WordPress with modern plugins and integrates multiple analytics and marketing tools. Security posture is adequate with HTTPS enabled, but lacks some security headers and privacy compliance mechanisms. WHOIS data is unavailable, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and functional, serving a niche education market in the Czech Republic.

P

Printing for Less

printingforless.com

64

Printing for Less is a well-established online printing and direct mail marketing service provider, operating since 1996 and positioned as a one-stop-shop for businesses of all sizes across various industries. The company offers a wide range of print products and direct mail services, leveraging creative marketing solutions to help clients reach their target audiences effectively. The website reflects a mature digital presence with strong branding and comprehensive service offerings. Technically, the site is built on WordPress using modern plugins and technologies such as Gravity Forms, Google Analytics, and Facebook Pixel, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS, security headers, and secure form handling, although explicit security policies and incident response information are not published. The absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, but the overall business credibility is supported by consistent branding and social media presence. Strategic recommendations include publishing security and incident response policies, clarifying domain registration details, and enhancing privacy compliance disclosures.

M

Mateřská škola Chudenice – příspěvková organizace

mschudenice.cz

47

Mateřská škola Chudenice is a small, local contributory organization providing preschool education services in the Czech Republic. The website serves as an informational portal for parents, offering details about the school, events, and enrollment. The site is built on WordPress using the Astra theme and several plugins focused on accessibility, GDPR compliance, and enhanced content presentation. The technical infrastructure is modern and well-maintained, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site demonstrates a responsible approach to privacy and user experience, suitable for its educational purpose.

Lindris is a technology company offering a SaaS email marketing platform positioned as a powerful yet affordable solution for businesses and marketers. The website presents a professional and consistent brand image with a focus on inviting users to request access to their software. The technical infrastructure is based on WordPress with common plugins for forms, analytics, and marketing, hosted behind Cloudflare DNS with GoDaddy as the registrar. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. Security posture is adequate with HTTPS enforced and domain registration protections, but lacks DNSSEC and security headers. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Business credibility is supported by domain age, clear business description, and presence of terms and privacy pages, though no direct contact emails or phone numbers are provided. Overall, the website is functional and trustworthy but could improve in security and privacy transparency.

R

Rodičov.cz - důležité informace ze světa otců a matek.aaa

rodicov.cz

55

Rodičov.cz is a Czech-language online media portal providing valuable information and advice for parents and prospective parents, focusing on health, education, finance, and psychology. The website targets families preparing for or raising children, offering practical tips and guidance. Technically, the site is built on WordPress with a modern tech stack including popular plugins for SEO, analytics, and advertising. The site is mobile-optimized and uses HTTPS for secure connections. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate gaps in transparency and compliance. Security posture is moderate with SSL enabled but missing security headers and explicit data protection policies. Overall, the site appears legitimate and content-rich but would benefit from enhanced privacy compliance and clearer business contact information.

S

SinArt

sinart.cz

45

SinArt is a Czech Republic-based creative studio specializing in web design, graphic design, SEO, marketing, 3D modeling, and mobile application development. Established since 2010, the company targets businesses and individuals seeking professional digital and print creative services. Their market position is supported by a portfolio of reputable clients and a consistent brand presence. Technically, the website is built on WordPress with modern web technologies, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. The absence of WHOIS data limits domain trust verification but does not detract from the professional presentation and business legitimacy. Overall, SinArt demonstrates a mature digital presence with room for security improvements.

C

Cech klempířů, pokrývačů a tesařů České republiky, spolek

cech-kpt.cz

46

Cech klempířů, pokrývačů a tesařů České republiky, spolek is a Czech trade association founded in 1995, representing professionals in roofing, tinsmithing, carpentry, and flat roof covering. The organization focuses on elevating the quality and professionalism of these trades, providing certification, member directories, publications, and industry updates. The website is well-structured, professionally designed, and targets both members and the public seeking qualified service providers. Technically, the site is built on WordPress with common plugins for forms, GDPR compliance, and sliders, offering good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers could enhance protection. The absence of WHOIS data reduces domain trustworthiness, but the professional content and compliance measures support legitimacy. Overall, the site presents a trustworthy and professional digital presence for the trade association.

A

Asociace vydavatelů audioknih

audiokniharoku.cz

47

The website represents the Asociace vydavatelů audioknih, a Czech association focused on audiobook publishing and awards. It provides information about the Audiobook of the Year 2024, including winners and nominations, targeting publishers, media, and the general public interested in audiobooks. The site is professionally designed using WordPress with the Neve theme and integrates Google Tag Manager for analytics. The content is relevant, well-structured, and accessible with good mobile optimization. However, the site lacks explicit privacy and cookie policies, which are important for compliance and user trust. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal security policies. The WHOIS data for the domain is unavailable, which reduces domain trust verification but the website content and branding appear legitimate. Overall, the site serves as an informational and promotional platform for the audiobook publishing community in the Czech Republic.

S

Stavební keramika spol. s r.o.

stavebnikeramika.cz

46

Stavební keramika spol. s r.o. is a Czech Republic based small retail business specializing in the expert sale of ceramic tiles, bathroom equipment, and related chemicals. Established in 1990, the company operates two physical studios in Řečany nad Labem and Hradec Králové, offering additional services such as 3D bathroom visualization and professional consultancy. The website reflects a well-established regional player with a clear focus on quality and customer service. Technically, the site is built on WordPress with a modern plugin ecosystem including Yoast SEO, Slider Revolution, and Google Analytics integration, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit incident response or vulnerability disclosure policies are found. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high based on website content and contact information. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving accessibility features to further strengthen the digital maturity and trustworthiness of the online presence.

T

Taste of Home

thetasteofhome.com

59

Taste of Home is a Dubai-based catering and food supply company operating as a division of the Transguard Group. The company specializes in providing healthy, affordable meals for workforce catering, events, special occasions, and school meals. Their culinary team is diverse, offering international cuisines including North Indian, South Indian, Pakistani, African, and Filipino dishes. The website is professionally designed using WordPress with modern plugins and SEO tools, providing a good user experience and clear navigation. Contact information is prominently displayed, enhancing business credibility. However, the absence of privacy and cookie policies and missing WHOIS data present compliance and trust challenges. Security posture is adequate with HTTPS and reCAPTCHA usage but lacks advanced security headers and incident response disclosures. Overall, the website is functional and trustworthy but would benefit from improved privacy compliance and domain registration transparency.

Zámecké apartmány Jindřichovice is a small hospitality business offering accommodation in castle apartments and event venue rental services including weddings and corporate events. The business is regionally positioned in the Pošumaví area of the Czech Republic and has been operating since at least 2008, supported by consistent domain registration data. The website is built on WordPress with a modern tech stack including Beaver Builder and integrates a third-party booking system (Previo). It features good mobile optimization, clear navigation, and professional content presentation. Security posture is solid with HTTPS and cookie consent compliance, though it lacks advanced security headers and a privacy policy page. Overall, the site is trustworthy and well-maintained, with room for security and compliance enhancements.

S

Steinbauer Lechner s.r.o.

steinbauer-lechner.cz

56

Steinbauer Lechner s.r.o. is a Czech manufacturing company specializing in the development and production of standard and custom packaging solutions including crates, boxes, foam inserts, and pallets. Established in 1992, the company operates from South Bohemia and serves a business clientele requiring high-quality transport packaging. The website reflects a mature business with ISO certifications and a clear presentation of services and team members. Technically, the site is built on WordPress with a variety of plugins and modern web technologies, offering a good user experience and mobile responsiveness. Security measures include HTTPS and Google reCAPTCHA on forms, though some security headers are missing. Privacy compliance is partially addressed with cookie consent and a whistleblowing policy, but lacks a formal privacy policy page. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the professional web presence. Overall, the site is functional and trustworthy from a business perspective but would benefit from improved transparency and security hardening.

R

Residence Sova s.r.o.

ostrov-byty.cz

42

Residence Sova s.r.o. operates a real estate project website focused on offering residential properties in the city of Ostrov, Czech Republic. The website presents a professional and consistent brand image, targeting local clients interested in acquiring housing in a prime location. The business model centers on real estate development and sales, with a relatively new domain registered in 2022, aligning with the project's timeline. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a modern and SEO-conscious infrastructure. The site is hosted likely by WEDOS, a known Czech hosting provider, and employs HTTPS with a cookie consent mechanism, reflecting basic compliance with privacy regulations.