Security Directory

J

Junák – český skaut, z. s.

skaut.cz

39

Junák – český skaut, z. s. is a prominent Czech non-profit organization dedicated to youth development through scouting activities. The organization serves a large community of over 78,000 scouts across 2,360 local groups, offering programs tailored to various age groups from children to adults. Their mission emphasizes friendship, adventure, self-confidence, and fairness, engaging both youth and adult volunteers. The website reflects a well-established entity with strong community ties and active fundraising efforts.

The domain skauting.cz is registered since 2000 and uses Cloudflare DNS servers, indicating a legitimate registration. However, the current website content is a standard 404 error page served by Lebeda Hosting, indicating that no active website is hosted at this address. There is no metadata, structured data, or business information available on the page. The lack of privacy policies, contact information, and security headers suggests the website is inactive or removed. The technical infrastructure is minimal, with no CMS or frameworks detected. Security posture cannot be assessed due to absence of content and headers. Overall, the website is non-functional and provides no business or security information.

M

MK software, s.r.o.

mmnlekarna.cz

44

MMNlekarna.cz operates as a Czech online and physical pharmacy offering a wide range of medicinal products, dietary supplements, cosmetics, and veterinary medicines. The company targets general consumers seeking health and wellness products, positioning itself as a reliable regional pharmacy with both e-commerce and brick-and-mortar presence. The website is professionally designed with clear navigation and product categorization, supporting a positive user experience. Technically, the site employs common web technologies such as jQuery, Google Tag Manager, and Google Analytics, ensuring functional tracking and marketing capabilities. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are missing. The absence of WHOIS data is mitigated by strong trust indicators on the site, including official certifications and clear contact information. Overall, the site presents a trustworthy and compliant online pharmacy platform.

Shtheme is a small technology company specializing in the development and sale of high-quality WordPress themes and HTML templates. Founded in 2016, the company targets web developers and businesses seeking professional website themes with ongoing monthly releases and customer support. Their market position is that of a niche theme provider with a focus on quality and customer satisfaction. Technically, the website is built on WordPress 6.7.1 using popular plugins such as Easy Digital Downloads, Revolution Slider, and WPBakery Page Builder, supported by Bootstrap for responsive design. The hosting and domain registration are managed through Tucows Domains Inc. with privacy protection enabled. Performance is moderate with good mobile optimization but basic SEO and accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers. No explicit privacy or cookie policies are present, indicating compliance gaps. Contact information is available via email and physical address, but no phone numbers or incident response contacts are found. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security hardening.

Onlinehosting s.r.o operates the website onlinehosting.cz, providing professional and extremely fast web hosting services primarily targeting demanding projects, businesses, and open source PHP projects. The company offers a range of services including PHP webhosting, large capacity email hosting, corporate cloud storage, and managed server rentals. With over 24 years in the market, the company positions itself as a reliable and technologically current hosting provider in the Czech Republic. The website is well-designed, mobile-optimized, and uses modern frontend technologies such as Bootstrap and Font Awesome, alongside Google Analytics for traffic monitoring. Security posture is adequate with HTTPS enforced and secure login forms, though there is room for improvement in security headers and updated libraries. Privacy and cookie policies are not found, indicating a gap in compliance and transparency. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Ú

Úřad pro ochranu osobních údajů

uoou.cz

61

Úřad pro ochranu osobních údajů is the official Czech Republic government authority responsible for personal data protection and enforcement of related laws such as GDPR. The website serves as an authoritative source for public information, regulatory guidance, and news updates related to data privacy. It targets both the general public and professionals involved in data protection. The site is professionally designed, accessible, and provides multilingual support including English. Technically, it is built on the simploCMS platform, uses modern web standards, and enforces HTTPS with secure forms including CAPTCHA to prevent abuse. Security headers are not explicitly detected, and no vulnerability disclosure or incident response information is published, which could be improved. The domain is a .gov.cz domain, indicating official government status, though WHOIS data is not publicly available due to CZ.NIC policies. Overall, the website demonstrates a strong security posture, excellent privacy compliance, and high business credibility as a government entity.

S

Széchenyi Programiroda Nonprofit Kft.

szpi.hu

10

Széchenyi Programiroda Nonprofit Kft. is a Hungarian non-profit organization established in 2011, specializing in consultancy and advisory services related to EU and national project funding. The organization targets Hungarian businesses and institutions seeking support in international and national projects, offering services such as grant advisory, project consultancy, and office location assistance. The website reflects a professional and consistent brand image with clear navigation and relevant content primarily in Hungarian, with an English language option available. Technically, the website employs modern JavaScript frameworks, including StimulusJS, and integrates Google services such as Tag Manager and reCAPTCHA Enterprise for analytics and security. The site is mobile-optimized with moderate performance and basic accessibility features. However, some improvements could be made in SEO and security header implementation. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, indicating a good security posture. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a comprehensive privacy policy and GDPR-compliant newsletter subscription forms, but lacks a visible cookie consent mechanism and explicit security policies. Overall, the website is trustworthy and professionally maintained, with a strong alignment between domain registration data and business claims. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing incident response contacts, and improving accessibility and SEO to strengthen compliance and user experience.

I

Interreg Slovakia-Hungary

interreghusk.eu

67

The Interreg Hungary-Slovakia Programme website serves as an official platform for a European Union funded cross-border regional development initiative between Hungary and Slovakia. The site targets government entities, regional development stakeholders, and EU program participants, providing information about the program and its activities. The business model is government-driven, focusing on regional cooperation and development projects. The website is professionally designed with consistent branding and good content quality, supporting multiple languages to cater to its diverse audience. Technically, the website is built on WordPress CMS, utilizing common libraries such as jQuery, FontAwesome, and Select2, with integration of Google Maps API for geographic information. The site demonstrates moderate performance and good mobile optimization. SEO practices are well implemented, including meta tags and structured data, although accessibility features are basic. From a security perspective, the website employs HTTPS with excellent SSL configuration but lacks explicit security headers and documented security policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service policies. Contact information is not explicitly provided, which may limit user trust and compliance. Overall, the website presents a low-risk profile with a solid foundation but would benefit from enhanced privacy documentation, security policies, and clearer contact channels to improve compliance and user trust.

Media Solution is a Czech Republic based marketing agency with offices in Prague and Liberec, specializing in strategy, content creation, design, web development, and AI integration into business processes. The company targets a broad range of clients from small to large brands across multiple industries, emphasizing measurable marketing results and creative data-driven solutions. The website demonstrates a high level of digital maturity with modern technologies and a professional design, including multimedia elements and client testimonials. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are absent. The lack of WHOIS data reduces domain trustworthiness, but the overall business credibility remains solid based on website professionalism and client references.

M

Město Špindlerův Mlýn

spindleruvmlyn.org

9

Město Špindlerův Mlýn operates as the official municipal government website for the city of Špindlerův Mlýn in the Czech Republic. It provides comprehensive public information, including municipal office contacts, urban planning documents, cultural and sports activities, and tourism-related content. The site targets residents and visitors, serving as a central hub for city services and announcements. The business model is typical for a government entity, focusing on transparency and public service rather than commercial revenue. Technically, the website employs a mix of established JavaScript libraries such as jQuery, Bootstrap, and Swiper.js, indicating a moderately modern infrastructure. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured navigation. However, the CMS appears custom or proprietary, which may affect ease of updates and security patching. From a security perspective, HTTPS is used, but there is a lack of visible security headers and no published privacy policy or terms of service, which are important for compliance and trust. The absence of WHOIS data reduces domain trustworthiness, although the website content and official branding strongly suggest legitimacy. No critical vulnerabilities or malicious content were detected. Overall, the website is functional and professional but would benefit from enhanced security practices, clearer privacy compliance documentation, and improved transparency in domain registration data to strengthen trust and compliance.

Hyundai Promise is a certified used car program operated by Hyundai Motor Czech s.r.o., targeting consumers in the Czech Republic seeking reliable, certified pre-owned vehicles. The website offers a comprehensive vehicle search with filters, detailed program benefits, and links to financing, insurance, and extended warranty services. The brand is strongly represented with official Hyundai logos and social media channels, enhancing trust and market presence. Technically, the site uses modern web technologies including jQuery, Bootstrap, Google reCAPTCHA v3, and Google Tag Manager, ensuring a responsive and interactive user experience. Security measures such as HTTPS, cookie consent, and form protection are implemented, though some advanced headers like Content-Security-Policy could be improved. The absence of WHOIS data limits domain trust verification, but the overall site professionalism and branding support legitimacy. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is a solid digital platform for Hyundai's certified used car offerings in the Czech market.

M

Matějovský

matejovsky-povleceni.cz

56

Matějovský is a Czech-based manufacturer and e-commerce retailer specializing in high-quality bedding and home textile products, including licensed and classic designs in various fabrics such as cotton, satin, and flannel. The website targets consumers looking for premium bedding solutions and related home accessories. The digital infrastructure employs modern web technologies including Bootstrap, Font Awesome, and Google Analytics, supporting a multi-language user experience. Security posture is moderate with HTTPS usage and cookie consent implemented, but lacks visible security headers and explicit privacy policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and partner domains suggest a legitimate business. Strategic improvements in security policies, privacy disclosures, and contact transparency are recommended to enhance trust and compliance.

L

LUIGI LAVAZZA SPA

lavazza.cz

61

LUIGI LAVAZZA SPA operates the www.lavazza.cz website, providing premium Italian espresso coffee products and business coffee solutions in the Czech Republic. The website is professionally designed, leveraging Adobe Experience Manager CMS and modern web technologies, offering a good user experience with clear navigation and mobile optimization. The company emphasizes its long heritage since 1895 and targets both consumers and business clients with a broad product range including coffee blends, capsules, and equipment. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. The absence of WHOIS data limits domain trust analysis but the website's professional presentation and official contact details support its legitimacy.

RODA Caravan s.r.o. is a small Czech company specializing in the rental and sale of modern caravans and motorhomes, primarily serving customers in Prague and the surrounding region. The company operates a professional website built on WordPress, featuring a clear business model focused on providing innovative and reliable recreational vehicles. Their market position is strengthened by partnerships with Fibich CampingCars and Vansafe.cz, enhancing their sales and insurance offerings. The website content is well-structured, informative, and targeted at Czech-speaking customers interested in caravan travel and purchase.

P

PP Soft s.r.o.

pp-soft.cz

47

PP Soft s.r.o. is a Czech-based technology company specializing in the development of professional custom e-shops, bespoke information systems, and energy information systems (EIS) tailored for energy suppliers. Their market position is focused on delivering integrated solutions that connect e-commerce platforms with ERP systems and energy sector workflows, targeting businesses requiring scalable and customizable digital commerce and management tools. The company showcases a portfolio of clients across various industries, emphasizing B2B and B2C capabilities with multi-currency and multi-language support. Technically, the website employs modern web technologies including HTML5, CSS3, Bootstrap, PHP, and JavaScript frameworks, ensuring responsive design and mobile optimization. The site integrates multiple third-party analytics and marketing tools such as Google Analytics, Smartlook, and Smartsupp, indicating a mature digital marketing infrastructure. However, some security best practices like security headers are not explicitly observed, and no direct contact emails or phone numbers are publicly listed, relying instead on contact forms. From a security perspective, the site uses HTTPS and cookie consent mechanisms aligned with GDPR compliance, but lacks visible incident response contacts or explicit security policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the professional web presence and client references mitigate some risk. Overall, the security posture is moderate with room for improvement in headers and incident response readiness. The overall risk assessment suggests a generally trustworthy and professional business website with moderate technical and security maturity. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, and improving transparency around domain registration and contact information to strengthen trust and compliance.

CaravanOnTheRun.cz is a Czech Republic based small business specializing in the rental and sale of caravans and motorhomes, targeting customers primarily in the Pardubice and Hradec Králové regions. The website presents a professional and well-structured platform offering modern 2025/2026 model vehicles, with clear contact information and a focus on customer convenience including online reservations. The business model revolves around vehicle rental complemented by sales of caravans and accessories, positioning itself as a regional leader in this niche market. Technically, the website employs a custom or niche CMS (Fibich), integrates modern analytics and tracking tools such as Google Analytics and Facebook SDK, and uses Google reCAPTCHA for form security. The site is mobile responsive and SEO optimized, though some accessibility features could be improved. Performance is moderate, with no blocking or WAF challenges detected, indicating good availability. From a security perspective, the site uses HTTPS with good SSL configuration and employs reCAPTCHA to protect forms. However, it lacks visible security headers and does not provide a privacy or cookie policy, which are important for GDPR compliance. No incident response or security policy information is available, and WHOIS data is not publicly accessible, likely due to privacy protection. These factors reduce transparency but do not indicate malicious intent. Overall, the website is safe, professional, and trustworthy for its business purpose, but improvements in privacy compliance, security headers, and transparency would enhance its security posture and user trust.

Karavan centrum FIBICH CampingCars is a Czech Republic based small business specializing in the retail and servicing of caravan and motorhome accessories and parts. The company offers a range of services including caravan repairs, installation of accessories, and sales of original spare parts for multiple caravan brands. Their website reflects a professional retail e-commerce platform with product listings, pricing, and contact information. Technically, the site uses modern web technologies including HTTPS, Google reCAPTCHA, and responsive design, but lacks some security headers and privacy compliance documentation. The absence of WHOIS data limits domain legitimacy verification, though the business appears credible based on content and contact details. Overall, the site is functional and trustworthy but would benefit from enhanced privacy policies and security practices.

B

Bloomerang

bloomerang.co

67

Bloomerang is a well-established company founded in 2002, specializing in nonprofit fundraising software and CRM solutions. Their platform offers a comprehensive suite of tools including online giving, peer-to-peer campaigns, auctions, and volunteer management, targeting nonprofit organizations and fundraisers. The company positions itself as a total Giving Platform, aiming to empower fundraisers to increase donations and deepen donor relationships. The website reflects a mature digital presence with professional design, clear navigation, and extensive marketing and analytics integrations. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses a variety of third-party marketing and analytics tools, indicating a sophisticated digital marketing strategy. Security posture is generally strong with HTTPS enforced and domain registration secured, though some improvements such as enabling DNSSEC and publishing security policies could enhance trust. Privacy compliance is an area for improvement as no explicit privacy or cookie policies were found in the provided content. Overall, the website is professional, trustworthy, and well-optimized, serving its target audience effectively.

M

Město Jičín

mujicin.cz

50

The website www.mujicin.cz serves as the official online portal for the city of Jičín, Czech Republic. It provides comprehensive municipal information, including city news, public services, grant opportunities, and citizen engagement tools. The site targets residents and visitors, offering resources such as event calendars, contact details, and official announcements. The business model is that of a government municipal service platform, positioning itself as the authoritative source for local governance and community information. Technically, the site is built on the Vismo CMS platform and integrates modern web technologies including Google Analytics for visitor tracking, Google Tag Manager, Google Translate for multilingual support, and a Quriobot chatbot for user assistance. The site is mobile-optimized, accessible, and structured with clear navigation and search functionality. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks visible security headers such as Content-Security-Policy and X-Frame-Options, which are recommended to enhance security posture. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits the ability to fully verify domain registration legitimacy, though the official branding and content strongly indicate a legitimate municipal website. Overall, the site is a well-maintained government portal with good content quality and user experience. Strategic recommendations include enhancing security headers, publishing explicit security and privacy policies, and establishing a vulnerability disclosure process to further strengthen trust and compliance.

Stephen Band's website is a personal portfolio showcasing photography and music content, along with custom web components developed by the owner. The site targets a general audience interested in artistic and creative works. The business model is primarily a personal brand and creative showcase without commercial transactions or extensive business infrastructure. Technically, the site uses modern HTML5, CSS3, and JavaScript ES modules, with a focus on visual content and custom elements. Performance and mobile optimization are good, though accessibility and SEO are basic. Security posture is moderate due to lack of visible security headers and policies, but no critical vulnerabilities or exposed sensitive data were found. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site is safe, professional, and trustworthy for its intended purpose.

N

Nakladatelství Kazda

knihykazda.cz

55

Nakladatelství Kazda is a Czech-based publishing and retail company specializing in popular science and educational books for children and adults, with a focus on nature and family-friendly content. The company operates an e-commerce platform powered by the Shoptet CMS, offering printed books, audiobooks, e-books, and related products. The website demonstrates a professional and consistent brand presence with clear navigation and a good user experience. The business targets a general audience interested in educational and nature-themed literature. Technically, the site uses a modern tech stack including jQuery, Google Analytics, Facebook SDK, Hotjar, and AI-powered search widgets, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. The lack of WHOIS data reduces transparency and trustworthiness somewhat, but the website content and business operations appear legitimate and professional. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy and functional e-commerce platform.

R

Radioservis a.s.

radioteka.cz

63

Radioteka.cz is a Czech e-commerce platform specializing in the sale of audiobooks, music, books, CDs, DVDs, and sheet music. The website targets Czech-speaking customers interested in digital and physical media content, offering products primarily in MP3 and FLAC formats. The business operates under the name Radioservis a.s., a recognized entity in the Czech media sector. The platform provides audio previews and a well-structured catalog, enhancing user experience and engagement. Technically, the website employs modern JavaScript libraries such as jQuery and jPlayer, integrates Google Tag Manager for analytics, and uses HTTPS to secure communications. The site is mobile-optimized and features a clear navigation structure, although some accessibility features and security headers could be improved. Privacy compliance is basic, with a consent mechanism denying tracking by default but lacking explicit privacy and cookie policy pages. From a security perspective, the site enforces HTTPS and restricts tracking by default, which is positive. However, the absence of security headers and lack of published security policies or incident response contacts indicate room for improvement. The missing WHOIS data for the domain is a concern, as it limits the ability to verify domain legitimacy and ownership, impacting overall trust. Overall, Radioteka.cz presents as a professional and trustworthy media e-commerce platform with good content quality and user experience. Strategic improvements in transparency, security headers, and domain registration verification would enhance its security posture and business credibility.

The website automobilovedily24.cz is currently inaccessible due to a Cloudflare security challenge page requiring human verification via Turnstile captcha. This prevents access to any actual business content, policies, or contact information. The domain is registered since 2014 and uses Cloudflare for DNS and security, indicating a stable and legitimate domain. However, the lack of accessible content limits the ability to assess the business model, services, or security posture in detail. No metadata, forms, or external business links are present on the challenge page. The security posture cannot be fully evaluated due to the blocking mechanism. Overall, the site appears to be protected by standard Cloudflare security measures but lacks publicly accessible information for comprehensive analysis.

7

79 Promotion

79promotion.cz

44

79 Promotion is a Czech-based event production and promotion agency with a long-established domain since 2002. The company organizes and promotes various entertainment events such as freestyle shows, festivals, and dance performances primarily in the Czech Republic. Their website showcases upcoming events with detailed descriptions, dates, and venues, targeting a general audience interested in live entertainment. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, with SEO optimization via Yoast. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and performance. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security practices.

F

Fortuna Libri

fortunalibri.cz

44

Fortuna Libri is a Czech publishing house specializing in book sales through an e-commerce platform. The website is professionally designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content focused on books and authors. The technical infrastructure is based on WordPress with WooCommerce and includes modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Hotjar. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data reduces domain trustworthiness, but the website content and policies indicate a legitimate business. Privacy and cookie policies are comprehensive and GDPR compliant. No critical vulnerabilities or adult content were detected.

O

OneHotBook

onehotbook.cz

66

OneHotBook is a Czech audiobook publishing company specializing in producing audiobooks from contemporary Czech and international authors. The company offers comprehensive professional production services including dramaturgy, direction, music, postproduction, and design. The website is built on the Shopify platform, leveraging modern web technologies and third-party marketing and analytics tools. The technical infrastructure is solid with HTTPS and CDN hosting, though some security best practices such as explicit security headers and published privacy policies could be improved. The security posture is moderate, with no critical vulnerabilities detected but lacking some transparency in incident response and data protection. Overall, the website presents a professional and trustworthy front for a niche media business with room for enhancement in privacy compliance and security disclosures.

A

Alpress - knižní distribuce s.r.o.

alpress.cz

56

Alpress - knižní distribuce s.r.o. operates as a Czech book publishing and online retail company specializing in a wide range of literary genres including novels, thrillers, children's books, and popular science literature. The company holds a leading market position in the Czech book publishing sector, offering direct sales through its online platform. The website presents a professional and content-rich interface targeting a broad audience of book readers and enthusiasts. Technically, the site employs modern web technologies such as jQuery, Google reCAPTCHA, and integrates analytics and customer review widgets, indicating a moderate level of digital maturity. Security measures include HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and privacy policy transparency. Overall, the website is trustworthy and functional, but the absence of WHOIS data and a dedicated privacy policy page slightly reduce its credibility from a compliance perspective.

R

Rubání s.r.o.

rubani.cz

56

Rubání s.r.o. operates a coworking center and creative collective located in Karviná, Czech Republic. The company provides flexible office space solutions including day passes, fixed desks, and meeting room rentals, targeting freelancers, creatives, and entrepreneurs in the local region. The website is professionally designed, mobile optimized, and offers clear business and contact information, including official company registration details and downloadable legal documents. Technically, the site uses modern web technologies such as Google Tag Manager and Microsoft Clarity for analytics and tracking, but lacks explicit cookie consent mechanisms and security headers. The absence of WHOIS data reduces domain trustworthiness, though the website content and business presentation appear legitimate and professional.

VALBEK-EU, a.s. is a well-established Czech engineering and construction project design company operating since 1990 with a diversified portfolio of services including civil, industrial, road, tunnel, bridge, geotechnical, railway, and water management construction projects. The company maintains a strong regional presence with multiple subsidiaries and branch offices across the Czech Republic, Slovakia, Sweden, and Ukraine. Their website serves primarily as a career portal and corporate information hub targeting professionals and job seekers in the construction and engineering sectors. Technically, the website uses a custom CMS with common JavaScript libraries such as jQuery and bxSlider, hosted on Webglobe.cz infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional content. Security posture is adequate with HTTPS enforced and cookie consent implemented, but could be improved by enabling DNSSEC and adding security headers. No critical vulnerabilities or exposed sensitive data were detected. Overall, the domain registration is consistent with the business claims, though the domain is relatively new compared to the company's founding year, indicating a dedicated career site or rebranding effort.

Skupina Valbek-EU is a Czech-based engineering and consulting group specializing in infrastructure, construction, and technological innovation projects. The website serves as a content hub featuring articles, podcasts, and interviews targeted at professionals and stakeholders in the construction and infrastructure sectors. The company appears well-established with multiple subsidiaries and a strong focus on project design, technical supervision, and sustainable development. Technically, the website uses a custom CMS with common JavaScript libraries such as jQuery and bxSlider, hosted on Webglobe infrastructure. While the site is well-designed, mobile-optimized, and content-rich, it lacks explicit privacy and cookie policies, which impacts compliance. Security-wise, HTTPS is enabled, but the use of an outdated jQuery version and absence of security headers present moderate risks. The domain registration is consistent with the business age and shows no suspicious patterns. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

Valbek is a well-established Ukrainian project company specializing in engineering and construction design services since 1990. The company offers a comprehensive portfolio of 20 interconnected service types, enabling complex project design for small and large infrastructure objects. With a team of over 450 specialists including engineers, constructors, and construction experts, Valbek operates regionally with presence in Ukraine, Czech Republic, Slovakia, and Sweden. The website reflects a professional business model focused on transportation and civil engineering sectors, targeting government and private infrastructure clients. Technically, the site uses a legacy jQuery version alongside modern UI libraries, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and updated libraries. Privacy compliance is strong with GDPR and cookie policies clearly presented. Contact information and management profiles enhance business credibility. Overall, the website is trustworthy and professionally maintained, though improvements in security headers and modernization of scripts are recommended.

Valbek Sweden AB is a consulting company specializing in civil engineering and infrastructure sectors, with over 30 years of experience and a broad portfolio of services spanning more than 20 technical areas. The company targets businesses and organizations involved in construction, urban development, and infrastructure projects primarily in Sweden and neighboring countries. Their business model focuses on providing expert consulting, project management, and sustainable solutions. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site uses legacy JavaScript libraries like jQuery 1.11.3 and includes modern UI components such as bxSlider and PhotoSwipe. The site is mobile-optimized and includes cookie consent mechanisms compliant with GDPR. Security posture is moderate with HTTPS enabled but lacks modern security headers and uses outdated libraries, which pose potential risks. No explicit security or incident response policies are publicly available. Overall, the website is trustworthy and professional but would benefit from technical and security updates.

Valbek SK, spol. s r. o. is a well-established Slovak project design and consulting company specializing in infrastructure and construction projects such as railways, roads, bridges, tunnels, and geotechnical works. With a history dating back to 1990 and a medium-sized workforce, the company operates regionally with branches and sister companies in the Czech Republic, Sweden, and Ukraine. Their service portfolio includes engineering design, project management, laboratory testing, and software development for construction. The website reflects a professional and consistent brand image with clear contact information and ISO certifications, indicating a mature business presence. Technically, the website employs a traditional tech stack with jQuery and several UI libraries, delivering moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though some modernization opportunities exist, such as updating jQuery and enhancing accessibility features. The site uses HTTPS and implements a comprehensive cookie consent mechanism, demonstrating good privacy compliance. Security posture is solid with no visible vulnerabilities or exposed sensitive data; however, the absence of explicit security headers and incident response contacts suggests room for improvement. The company maintains GDPR compliance with clear privacy and cookie policies. Overall, the website is trustworthy and professional, supporting the company's credibility in the transportation and construction sectors. Strategically, Valbek SK should focus on updating technical components, enhancing security headers, and publishing incident response information to strengthen their security posture and trust further.

P

Petr Sýkora

sykora.design

50

The website sykora.design represents a freelance graphic designer named Petr Sýkora, specializing in brand identity, UX, web and application design, and data visualization. The business operates as a small independent freelance service provider targeting startups and established companies. The site is hosted on Websupport.cz and built using Adobe Portfolio with custom theming and Typekit fonts. The technical infrastructure is modern and mobile-optimized but lacks advanced CMS or analytics integrations. Security posture is basic with HTTPS enabled but missing DNSSEC and security headers. Privacy and cookie policies are absent, and no direct contact information is provided on the site, which limits compliance and user trust. Social media presence is established via LinkedIn, Instagram, and Pinterest. Overall, the site is professional and functional but could improve in compliance and security transparency.

P

Pražští zvoníci svatovítští, z. s.

campanarii.cz

52

The website www.campanarii.cz represents the non-profit association 'Pražští zvoníci svatovítští, z. s.', dedicated to the cultural and historical preservation of bell ringing traditions, particularly related to the St. Vitus Cathedral in Prague. It offers rich content including articles, event calendars, archives, and community engagement features. The site targets individuals interested in religious and cultural heritage, providing educational and event-related information. Technically, the site is built on WordPress with common plugins and libraries such as jQuery and MetaSlider, offering a moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy/cookie policies, which are compliance gaps. The absence of WHOIS data reduces domain legitimacy confidence, though the site content and structure indicate a legitimate cultural association. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

The website kpmk.eu serves as an informational portal for the Library of the Prague Metropolitan Chapter, focusing on cataloging its historical book collection and related ecclesiastical topics. It targets qualified researchers and scholars interested in the history of the Prague Cathedral and its liturgical institute. The site is built on Joomla CMS with standard web technologies such as jQuery and Bootstrap, providing a moderate level of performance and mobile optimization. However, the site lacks modern security practices such as HTTPS enforcement and security headers, and does not provide privacy or cookie policies, which limits its compliance with GDPR and other privacy regulations. No contact or incident response information is available, which reduces trust and business credibility.

Č

Člověk a Víra

clovekavira.cz

48

Člověk a Víra is a Czech non-profit organization dedicated to documenting and sharing religious and cultural content related to faith communities primarily in the Czech Republic. The website serves as a multimedia platform offering photographic galleries, exhibitions, and media publications that cater to religious audiences and the general public interested in faith and church life. It maintains a multilingual presence to reach broader audiences in neighboring countries and internationally. Technically, the website is built on Drupal 10, leveraging modern web technologies and Google Tag Manager for analytics. The site is mobile-optimized and provides a clear navigation structure, enhancing user experience. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism compliant with GDPR, though it lacks explicit security policies and incident response contacts. Overall, the website demonstrates a good security posture with room for improvement in security headers and transparency. The domain registration is consistent and legitimate, supporting the organization's credibility. Strategic recommendations include enhancing security headers, publishing security policies, and improving contact transparency to strengthen trust and compliance.

M

Metropolitní Kapitula u svatého Víta v Praze

zamekspaleneporici.cz

50

Zámek Spálené Poříčí is a hospitality and cultural heritage business offering accommodation, event hosting, and tourism services in a historic castle located in the Czech Republic. The website presents a professional and well-structured digital presence with clear information targeting tourists, school groups, and corporate clients. The technical infrastructure is modern, leveraging HTTPS, Google Fonts, and a specialized CMS platform (solidpixels). Security posture is generally good with HTTPS enforced, but lacks advanced security headers and visible privacy compliance mechanisms. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact details support legitimacy. Overall, the site is safe, user-friendly, and professionally maintained but would benefit from enhanced privacy and security disclosures.

helloCash is a technology company offering a free online cash register solution tailored for the Spanish market. The service emphasizes compliance with local legislation and ease of use, targeting small and medium businesses that require a simple, legal way to create receipts. The website positions itself as a popular and trusted tool with thousands of uses and has received the Constantinus Award, indicating recognition in its field. Technically, the website is built using modern frameworks such as Vue.js and Vuetify, with integrations for marketing and analytics tools like Google Tag Manager, Facebook Pixel, and Intercom. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is generally good with HTTPS enabled and no exposed sensitive data, but lacks some security headers and explicit privacy and cookie policies. Overall, the site is professional and trustworthy but could improve compliance transparency and security hardening.

helloCash is a technology company providing a free online cash register solution primarily targeting small and medium businesses in Austria. The website presents a professional and consistent brand image, highlighting ease of use and flexibility as key selling points. The company has received recognition such as the Constantinus Award, indicating a reputable market presence. Technically, the website leverages modern frontend frameworks like Vue.js and Vuetify, and integrates marketing and analytics tools including Google Tag Manager, Facebook Pixel, and Intercom. Hosting is provided via Amazon AWS, suggesting reliable infrastructure. Security posture is moderate; HTTPS is used, but no explicit security headers or published security policies were detected. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the website is safe, professional, and functional but would benefit from enhanced privacy and security disclosures.

The website www.aspshop.sk is currently inaccessible, returning a 403 Forbidden error page served by nginx 1.26.2. Due to the lack of accessible content, no metadata, business information, or contact details could be extracted. The site appears to be blocked or restricted, preventing a full analysis of its business operations or technical infrastructure. The absence of visible content also means no privacy, cookie, or security policies are available for review. Consequently, the security posture cannot be properly assessed, and no trust indicators or certifications are identifiable. This severely limits the ability to evaluate the website's credibility or compliance status.

The website www.aspshop.cz is currently inaccessible, returning a 403 Forbidden error page served by nginx 1.26.2. This indicates that access to the site is blocked or restricted, preventing any content retrieval or analysis. The lack of WHOIS data further complicates the assessment of domain legitimacy and ownership. Due to the absence of accessible content, no metadata, contact information, privacy policies, or business details could be extracted. The technical infrastructure appears minimal with only the web server identified. Security posture cannot be evaluated as no HTTPS or security headers information is available. Overall, the site presents a high risk due to lack of transparency and accessibility, and no trust indicators are present.

A

ASP Group

aspgroup.pl

59

ASP Group is a well-established distributor specializing in ATVs, UTVs, motorcycle parts, and accessories across Central and Eastern Europe. The company boasts a significant market presence with over 14,000 units sold annually and a network of more than 400 authorized dealers. Their business model focuses on distribution and retail support, complemented by an e-commerce platform. The website is professionally designed, multilingual, and provides comprehensive product and brand information, targeting dealers and end customers in the transportation and retail sectors. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses plugins for GDPR compliance and multilingual support. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses cookie consent management but lacks some advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits transparency about domain registration, but the website's professional presentation and consistent branding support its legitimacy. Contact information is clear and includes phone, email, and physical address. Social media presence further enhances trust. Overall, the site demonstrates a strong business and technical foundation with room for improvement in security policy transparency and vulnerability disclosure. Strategic recommendations include enhancing security headers, publishing security and incident response policies, adding a vulnerability disclosure mechanism, and maintaining regular security audits to strengthen trust and compliance.

A

ASP Group s.r.o.

aspgroup.eu

66

ASP Group s.r.o. is a well-established distributor specializing in ATVs, UTVs, motorcycle accessories, and related products, primarily serving Central and Eastern Europe. With over 24 years of market experience, the company maintains a strong dealer network and a significant market presence, selling over 14,000 units annually. Their website reflects a professional and consistent brand image, targeting dealers and consumers interested in four-wheelers and accessories. Technically, the site is built on WordPress with modern frameworks and includes GDPR-compliant cookie management and analytics integration. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and incident response documentation are recommended. Overall, the site is trustworthy, compliant, and well-positioned in its industry.

O

OpenAssistantGPT

openassistantgpt.io

62

OpenAssistantGPT is a technology SaaS platform specializing in building AI chatbots and AI agents powered by the OpenAI API. It targets businesses seeking to automate customer support, sales, and internal communications with smart RAG AI agents. The platform offers multiple subscription tiers, including a free plan, and supports advanced features such as SAML/SSO authentication and file attachment analysis. The company embraces open source principles, with code available on GitHub, enhancing transparency and community trust. Technically, the website is built using modern web technologies including Next.js and TypeScript, deployed likely on Vercel. The site is well-optimized for performance, mobile responsiveness, and accessibility, with a professional design and clear navigation. Integration with popular website platforms like WordPress, Shopify, Squarespace, and Wix is emphasized. From a security perspective, the site enforces HTTPS and supports enterprise-grade authentication methods. However, it lacks visible security headers and public incident response or vulnerability disclosure policies. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but no cookie consent mechanism was detected. Overall, the platform presents a credible and professional offering with strong technical foundations and good business transparency. The absence of WHOIS data due to privacy protection is common and justified for this business type. Strategic improvements in security headers, cookie consent, and public security policies would enhance trust and compliance.

VIRTUAL ZOOM s.r.o. is a Czech-based digital agency specializing in professional web design services primarily targeting the hospitality sector and related industries. Their offerings include custom web design, a proprietary CMS platform named ZOOM DRIVER, and various plug-ins to enhance website functionality. The company positions itself as a partner in digital excellence, focusing on modern, responsive, and technically sound web solutions that help clients attract and convert customers. The website content is well-structured, professionally presented, and localized in Czech, with clear contact information and social media presence. Technically, the website employs a modern JavaScript stack including jQuery, AOS for animations, Tippy.js for tooltips, and Google services such as reCAPTCHA and Tag Manager for analytics and security. The site uses HTTPS with good SSL configuration and includes a GDPR-compliant cookie consent mechanism. However, some security headers are missing, and there is no explicit security or incident response policy published. The CMS is custom-built, indicating a tailored approach but also requiring ongoing maintenance to avoid vulnerabilities. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and bot protection via reCAPTCHA. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is evident through cookie management and a privacy policy page. However, the absence of WHOIS registration data for the domain is a significant concern, potentially indicating an unregistered domain or privacy protection that conflicts with the professional business presentation. Overall, the website is professional, functional, and compliant with basic privacy standards, but the missing WHOIS data reduces trustworthiness. Strategic recommendations include improving security headers, publishing terms of service, and verifying domain registration details to enhance credibility and trust.

H

HOSTINGSOLUTIONS s.r.o.

hostingsolutions.cz

74

HOSTINGSOLUTIONS s.r.o. is a Czech-based IT service provider specializing in webhosting, cloud hosting, managed servers, domain registration, and IT security solutions. Established since 2005, the company targets both private individuals and businesses, offering a broad portfolio of services including WordPress hosting, dedicated servers, and email collaboration tools. Their market position is supported by strong customer reviews and a professional online presence. Technically, the website employs modern JavaScript libraries and frameworks such as Bootstrap, Swiper.js, and Google Tag Manager, ensuring a responsive and user-friendly experience. The site is well-optimized for mobile devices and SEO, with clear navigation and comprehensive content. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks some advanced security headers and explicit incident response information. The WHOIS data is unavailable due to privacy protection, which is common for hosting providers but reduces transparency. Overall, the website demonstrates a mature digital infrastructure and a trustworthy business profile.

A

Aziende Italia S.r.l.

aziendeitalia.com

77

Aziende Italia S.r.l. is an established Italian IT service provider specializing in hosting, dedicated servers, VPS, cloud servers, and cybersecurity solutions since 1999. The company targets both private individuals and businesses, offering a broad portfolio of professional IT services including web hosting, cloud infrastructure, email solutions, and advanced security services. Their market position is strengthened by a strong customer base and positive reviews, reflecting high customer satisfaction and trust. Technically, the website employs modern web technologies such as Bootstrap 5, Swiper.js, and integrates marketing and analytics tools like Google Tag Manager and Mautic. The site is well-optimized for mobile devices, features a cookie consent mechanism compliant with GDPR, and demonstrates good SEO practices. However, no explicit CMS or hosting provider details are disclosed. From a security perspective, the site uses HTTPS and offers SSL certificates as a service, but lacks visible security headers in the HTML source. There is no public incident response or vulnerability disclosure information, which could be improved. The absence of WHOIS data raises concerns about domain registration transparency, although the website content and business information suggest legitimacy. Overall, Aziende Italia presents a professional and trustworthy online presence with comprehensive IT service offerings. Strategic improvements in domain registration transparency and enhanced security disclosures would further strengthen their security posture and business credibility.