Security Directory

Z

Zucchetti Hospitality s.r.l.

ovosodo.net

37

Ovosodo is a digital agency specializing in UI/UX, web design, and development services, operating as a business unit of Zucchetti Hospitality s.r.l., part of the larger Zucchetti Group. The company targets businesses seeking comprehensive digital solutions, emphasizing equal attention to code and design. Their market position is that of a specialized subsidiary within a reputable technology and hospitality group, founded in 2003. The website reflects a professional and consistent brand image with clear service offerings and recent project showcases. Technically, the website employs modern web technologies including jQuery, Vimeo Player integration, and Iubenda for cookie consent management, alongside Google Analytics and Tag Manager for tracking. The site is mobile optimized with good SEO and basic accessibility features. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, ensuring GDPR compliance. However, it lacks explicit security policies and incident response contacts, and no advanced security headers were detected. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, although the website content and business information are credible and professionally presented. Overall, the website presents a low risk with good privacy compliance and business credibility, but the missing WHOIS data and lack of explicit security policies suggest areas for improvement to enhance trust and security posture.

The website at peak-rescue.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any substantive content. This prevents a full assessment of the business, its services, and compliance posture. The domain is registered with GoDaddy.com, LLC since 2018 and is active with standard registrar locks but lacks DNSSEC, which is a minor security shortfall. No privacy, cookie, or terms of service policies are present, nor is there any contact information or forms available on the site. The technical infrastructure appears minimal, with only Google Fonts loaded externally. The security posture is limited due to lack of visible security headers and the access restriction itself. Overall, the site scores low on content quality, privacy compliance, and business credibility due to the lack of accessible information and policies.

S

Seattle Manufacturing Corporation

smcgear.com

61

Seattle Manufacturing Corporation (SMC Gear) operates an e-commerce platform specializing in high-quality climbing, rescue, and industrial gear. Their product range includes carabiners, pulleys, descenders, and specialized rescue equipment, targeting professionals in rescue, alpine, and climbing sectors. The company has a stable market position as a niche manufacturer and retailer with a medium-sized business footprint, founded in 2010. Technically, the website is built on Magento 2, leveraging modern JavaScript libraries such as RequireJS, jQuery, and KnockoutJS, with Bootstrap and Font Awesome for styling and UI components. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Hosting is managed via Go Montenegro Domains, LLC as registrar, with no DNSSEC enabled. From a security perspective, the site uses HTTPS and has domain status protections to prevent unauthorized changes. However, it lacks DNSSEC and explicit security headers, which are recommended for enhanced security. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Contact information is available via a customer service email and contact page, but no dedicated security or incident response contacts are provided. Overall, the website is professional, trustworthy, and safe for general audiences, but improvements in privacy policy visibility, security headers, and DNS security would strengthen its security posture and compliance standing.

C

Cascade Rescue Company

cascade-rescue.com

60

Cascade Rescue Company is a specialized manufacturer and retailer of high-quality rescue equipment designed for professionals such as fire departments, air operations teams, helicopter rescue units, ski patrols, and military personnel. Established in 2008, the company operates a professional e-commerce platform offering a wide range of products and training services. Their market position is that of a trusted niche provider with strong industry certifications and partnerships. Technically, the website is built on the BigCommerce platform using modern web technologies and integrates multiple marketing and analytics tools, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforcement and domain transfer protections, though improvements such as DNSSEC and security headers could enhance it further. Privacy compliance is partial, with a privacy policy present but lacking explicit cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, with room for security and privacy enhancements.

E

Elevated Safety, LLC

elevatedsafety.com

55

Elevated Safety, LLC is a specialized provider of professional rope access, confined space, tower rescue, and rope rescue training courses, services, and rescue gear. Established in 2010, the company operates globally with training facilities across multiple U.S. states and Europe, targeting professionals and organizations in industrial safety and rescue sectors. Their business model combines training services with e-commerce sales of specialized safety gear, positioning them as a reputable niche player with strong industry partnerships. The website infrastructure is built on WordPress with integrated BigCommerce for e-commerce, supported by modern JavaScript libraries and analytics tools such as Google Analytics and Segment. Hosting is supported by Microsoft Azure DNS services. The site demonstrates good design quality, mobile optimization, and SEO practices, though accessibility features are basic. Security posture is moderate; HTTPS is enforced with domain registration protections in place, but DNSSEC is not enabled and no explicit security headers or incident response policies are published. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism despite use of tracking scripts. No vulnerabilities or malware indicators were detected. Overall, the website is professional and trustworthy with room for improvement in security hardening and privacy compliance. Strategic enhancements in DNS security, security headers, and privacy mechanisms would strengthen their digital maturity and trustworthiness.

B

BrandBits

brandbits.com

46

BrandBits is a small technology company founded in 2009 that offers cloud-hosted SaaS tools designed to enhance customer engagement and brand presentation. Their key services include interactive flipbooks, slidebooks, store locators, visitor recordings, and feedback widgets, targeting businesses seeking to improve their digital customer experience. The website is professionally designed with consistent branding and clear navigation, supporting a good user experience and moderate SEO optimization. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Font Awesome, and analytics tools such as Matomo and Google Tag Manager. Hosting and DNS are managed via Cloudflare, with SSL properly configured. The site is mobile optimized and performs moderately well, though accessibility features are basic. Cookie consent is managed through Cookiebot, indicating some privacy compliance efforts. From a security perspective, the website enforces HTTPS and uses clientTransferProhibited domain status, but lacks DNSSEC and explicit security headers. There is no published security policy or incident response contact, and no vulnerability disclosure mechanism is present. The login form uses secure POST methods but no advanced security features are evident. Overall security posture is moderate but could be improved with additional controls and transparency. The overall risk is moderate with no critical issues detected. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security and incident response policies, and improving privacy compliance disclosures to enhance trust and security culture.

K

Krajské sdružení NS MAS ČR Jihočeského kraje

jihoceskemas.cz

43

Krajské sdružení NS MAS ČR Jihočeského kraje is a regional non-profit association focused on coordinating local action groups and community development projects in the South Bohemian region of the Czech Republic. The website serves as an official portal providing information about their projects, events, and partnerships with government and EU bodies. The organization targets local communities, municipalities, and seniors, emphasizing energy projects and social cooperation. Technically, the website uses a modern but custom-built infrastructure with popular JavaScript libraries such as jQuery and Bootstrap, ensuring good mobile optimization and accessibility. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks visible advanced security headers and explicit incident response policies. The absence of WHOIS data reduces domain trustworthiness, but the website content and partner affiliations support legitimacy. Overall, the site is professional, content-rich, and trustworthy for its intended audience.

N

Národní síť místních akčních skupin České republiky, z.s.

nsmascr.cz

42

Národní síť místních akčních skupin České republiky, z.s. is a Czech non-profit association uniting local action groups working on community-led local development using the LEADER method. The organization represents 178 member groups covering 91% of the Czech Republic, providing advocacy, training, and coordination services. The website is professionally designed, mobile-optimized, and regularly updated with news and events relevant to its audience. Technically, it uses modern JavaScript libraries and enforces HTTPS with appropriate security headers, indicating a good security posture. However, the absence of WHOIS data and lack of published security or incident response policies slightly reduce trustworthiness. Overall, the site is a credible resource for stakeholders in rural development in the Czech Republic.

S

Spolek pro obnovu venkova ČR

spovcr.cz

39

Spolek pro obnovu venkova ČR is a Czech non-profit organization focused on the renewal and development of rural areas in the Czech Republic. The website serves as an official platform providing information about their projects, regional organizations, events, and community initiatives. It targets municipalities, local action groups (MAS), associations, and individuals interested in rural development. The organization appears established and trusted within its niche, offering resources and networking opportunities for rural revitalization. Technically, the website uses a custom CMS with modern JavaScript libraries such as jQuery, Bootstrap, and Swiper for UI components, ensuring a responsive and accessible user experience. However, the site lacks a published privacy policy and terms of service, which are important for compliance and user trust. Security-wise, HTTPS is used and a cookie consent mechanism is implemented, but security headers and vulnerability disclosures are absent, indicating room for improvement in security posture. The absence of WHOIS data limits domain trust assessment, but the website content and contact details suggest legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy and security transparency.

The website megau.eu is currently inaccessible due to an SSL handshake failure error (Cloudflare error 525), indicating a misconfiguration between Cloudflare and the origin server. The landing page is a Cloudflare-generated error page with no business content, contact information, or policies visible. The domain is registered via Gransy s.r.o., a legitimate registrar, but no further business details are available on the site. Technically, the site relies on Cloudflare for protection but suffers from poor SSL configuration, resulting in blocked access and minimal content delivery. Security posture is weak due to lack of security headers and proper HTTPS setup. Privacy and compliance information is absent, and no forms or tracking scripts are present. Overall, the site is currently non-functional for end users and lacks trust and credibility indicators.

C

Chatgo / Zdeněk Dušátko

chatgo.cz

60

Chatgo is a small Czech technology company providing a Messenger live chat widget service tailored for websites and e-commerce shops, enabling brands to communicate with customers via Facebook Messenger. Their solution includes chatbot automation, offline messaging modes, and integration with popular Czech e-commerce platforms such as Shoptet and Upgates. The website is professionally designed using WordPress and the Divi theme, with clear navigation and GDPR compliance features. Technically, the site uses modern web technologies and plugins but could improve security headers and update legacy libraries like jQuery. The security posture is adequate with HTTPS and cookie consent but lacks explicit security policies or incident response contacts. WHOIS data is unavailable, limiting domain trust analysis, but the business presence and partner ecosystem suggest legitimacy. Overall, the site is well-positioned in its niche with room for technical and security enhancements.

B

Barion

barion.com

74

Barion is a payment service provider offering comprehensive payment solutions, programmatic advertising, and advanced analytics to help businesses grow. The company targets businesses and developers seeking efficient payment integration with competitive fees and insightful data. The website demonstrates a modern technical infrastructure using Next.js and Builder.io CMS, with integration of popular analytics and marketing tools such as Google Analytics and Facebook Pixel. The site is well-designed, mobile-optimized, and provides a professional user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are missing. WHOIS data is not available, which raises some concerns about domain registration transparency. Overall, the website is credible and trustworthy but would benefit from enhanced privacy and security disclosures.

P

Pivovar Svijany

zameksvijany.cz

47

Zámek Svijany is a heritage tourism and hospitality website representing a historic castle near Český ráj, Czech Republic, owned and restored by the Pivovar Svijany brewery. The site offers cultural exhibitions, castle tours, event hosting, and promotes the brewery's traditional beer products. The website is professionally designed with good navigation, mobile optimization, and content relevance, targeting tourists, event attendees, and beer enthusiasts. Technically, the website uses a modern JavaScript stack including jQuery, Google Tag Manager, Google Analytics, and lightbox galleries. It employs HTTPS with good SSL configuration and includes cookie consent mechanisms compliant with GDPR. The site uses CAPTCHA on contact forms to prevent spam and has basic accessibility features. However, no explicit security headers beyond HTTPS were detected, and no security or incident response policies are published. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, cookie consent, and form validation. The absence of WHOIS registrant data due to privacy protection slightly reduces trust but is common for small businesses. No critical vulnerabilities or exposed sensitive data were found. The site lacks a security.txt or vulnerability disclosure page, which could improve transparency. Overall, the website is a trustworthy and professional digital presence for a small hospitality and cultural business. Strategic improvements include adding security headers, publishing security policies, and enhancing accessibility. The domain WHOIS data absence is noted but does not critically impact legitimacy given the business context.

P

PIVOVAR SVIJANY, a.s.

pivobranisvijany.cz

45

Pivovar Svijany is a traditional Czech brewery with a rich history dating back to 1564. The website pivobranisvijany.cz primarily promotes the 14th annual Svijanské Pivobraní event scheduled for August 23, 2025, featuring music and the brewery's beer offerings. The company targets beer enthusiasts and local community members, leveraging its heritage and quality products to maintain a strong regional presence. The business model focuses on event promotion and brand marketing to support brewery sales. Technically, the website uses a common and stable technology stack including jQuery, Bootstrap, and various UI libraries. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and professional design. However, SEO and accessibility features are basic, and no CMS or advanced platform is detected. Hosting appears to be provided by Active24, consistent with the domain registrar information. From a security perspective, the site lacks visible security headers and formal privacy or cookie policies, indicating gaps in compliance with GDPR and best practices. No forms or sensitive data collection mechanisms are present, reducing immediate risk. The domain is relatively new (created in 2023) but aligns with the event-specific purpose rather than the brewery's main website. Social media links connect to official brewery accounts, enhancing trust. Overall, the website is functional and professional but would benefit from improved privacy compliance, security hardening, and enhanced SEO and accessibility. The risk level is moderate due to missing policies and security headers but no critical vulnerabilities or blocking mechanisms are detected.

J

JOHNNY SERVIS GmbH

johnnyservis.at

60

JOHNNY SERVIS GmbH is a medium-sized Austrian company specializing in the rental and sale of mobile toilets, sanitary and storage containers, mobile offices, and event infrastructure such as construction fences. With over 25 years of experience, the company serves businesses and institutions requiring tailored solutions for construction sites, cultural and sporting events, and private occasions. The website is professionally designed, multilingual, and features clear navigation and contact information, supporting a strong market presence in Austria and neighboring countries. Technically, the site runs on Joomla CMS with VirtueMart e-commerce, integrates Google Tag Manager and Analytics with GDPR-compliant cookie consent, and is mobile optimized with good performance. Security posture is solid with HTTPS and consent management, though it lacks advanced security headers and a public incident response policy. WHOIS data is unavailable due to NIC.AT restrictions, which slightly reduces trust but is mitigated by visible certifications and professional presentation.

J

JOHNNY SERVIS s.r.o.

johnnyservis.sk

54

JOHNNY SERVIS s.r.o. is a well-established Slovak company specializing in the rental and sale of mobile toilets, sanitary containers, mobile fencing, offices, and event equipment. With over 25 years of experience, it serves both business clients and the general public, positioning itself as a regional leader in its niche. The website reflects a professional and consistent brand image, supported by ISO certifications and clear contact information. Technically, the site is built on Joomla CMS with VirtueMart e-commerce, leveraging modern web technologies such as jQuery and Google Tag Manager. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are absent. Overall, the site is trustworthy and compliant with GDPR, with no signs of malicious activity or content blocking.

The website at mluvii.com is currently inaccessible, serving a 403 Forbidden error page via Cloudflare, indicating restricted access or blocking. Due to this, no meaningful business content, contact information, or policies are available for analysis. The domain is registered since 2017 with Cloudflare as registrar and hosting provider, which is consistent but lacks additional registrant details. The absence of accessible content and security best practices limits the ability to assess the company's market position or technical maturity. Security posture is weak due to lack of visible security headers and policies. Overall, the site appears to be either under maintenance, restricted, or misconfigured, resulting in a poor user experience and low trustworthiness.

D

Delirest services s.r.o.

ceskyobed.cz

66

Český oběd is a Czech-language website focused on industrial and school catering, providing recipes, sustainability guidance, and insights into the catering industry. It is operated under the brand umbrella of Compass Group, a global leader in food services, with visible partnerships to related Compass Group entities such as Eurest and Scolarest. The website targets professionals and stakeholders in the Czech catering sector, emphasizing practical and sustainable kitchen practices. Technically, the site is built on WordPress with modern SEO and analytics tools, including Yoast SEO and Google Analytics, and implements a cookie consent mechanism compliant with GDPR standards. Security posture is good with HTTPS enforced, but lacks explicit security headers and published security policies. WHOIS data is unavailable, likely due to privacy protection, which is common but reduces transparency. Overall, the site is professional, content-rich, and trustworthy within its niche.

C

CEE Catering HoldCo

ceecatering.com

61

CEE Catering HoldCo operates as the managing company of Central Europe's largest workplace hospitality and contract catering group, encompassing subsidiaries such as Delirest, Delirest Services, and Primirest. The company targets corporate clients and institutions across multiple Central European countries, offering services ranging from modern catering solutions to office management and school meals. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its business audience. Technically, the site is built on the Webflow platform, leveraging modern web technologies including jQuery and CDN hosting via Amazon CloudFront, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage implied, but lacks explicit security headers and formal security policies, which could be improved to enhance trust and compliance. The absence of WHOIS registration data raises some concerns about domain legitimacy, though the presence of multiple subsidiary domains and professional content mitigates this risk. Overall, the website is functional, professional, and suitable for its business purpose but would benefit from enhanced security and privacy compliance measures.

The website mojdelirest.sk serves as a dining portal login platform primarily targeting users who require access to dining services, likely employees or corporate clients. The business appears to be relatively new, founded in 2022, and operates within the hospitality sector in Slovakia. The portal provides a straightforward login interface with multi-language support but lacks visible comprehensive business or contact information on the login page. Technically, the site uses standard web technologies including jQuery, Bootstrap, and Chart.js, hosted on servers with name servers indicating Hungarian hosting providers. The site is mobile optimized and has basic accessibility features but lacks advanced SEO and security headers. Security posture is moderate with no visible vulnerabilities but missing key security headers and explicit HTTPS confirmation in the provided data. Privacy compliance is limited; while a cookie consent mechanism is present with a link to a GDPR document, no privacy policy or terms of service are found on the login page. Overall, the site is functional but could benefit from enhanced security, privacy disclosures, and richer business information to improve trust and compliance.

The website mujdelirest.cz serves as a multilingual dining portal login page, primarily targeting users who require access to dining services, likely employees or customers within the hospitality sector in the Czech Republic. The business appears to be relatively new, with domain registration dating back to early 2022. The portal provides a straightforward login interface with support for multiple languages, indicating an intent to serve a diverse user base. However, the site lacks visible business contact information, privacy policies, and terms of service on the login page, which limits transparency and user trust. Technically, the website employs common and reliable web technologies including jQuery, Bootstrap, Chart.js, and TinyMCE, suggesting a moderate level of digital maturity. The site is mobile-optimized and includes a cookie consent banner compliant with basic GDPR requirements, though no detailed privacy or security policies are presented. Performance appears moderate with no evident blocking or WAF interference. From a security perspective, the site uses secure form submission methods and password input types but lacks explicit security headers such as Content-Security-Policy or HSTS, which are recommended for enhanced protection. The absence of privacy and security policies, as well as contact information for incident response, indicates gaps in compliance and user assurance. The WHOIS data is transparent and consistent with the website's regional focus, supporting legitimacy. Overall, the website is functional and moderately secure but would benefit from improved transparency, enhanced security headers, and published privacy and security policies to strengthen user trust and compliance posture.

T

TRIMA NEWS, s.r.o.

drbna.cz

49

Drbna.cz is a Czech regional news portal operated by TRIMA NEWS, s.r.o., delivering authentic local news and stories across multiple regional sub-portals. The website targets Czech-speaking audiences interested in regional news, offering a mix of news articles, blogs, weather updates, and premium ad-free subscriptions. The platform holds a strong market position in regional media within the Czech Republic. Technically, the site employs modern JavaScript libraries, Google Tag Manager, Microsoft Clarity, and multiple advertising networks, ensuring a moderate to good performance and mobile optimization. Security-wise, the site enforces HTTPS and uses consent management for cookies, but lacks explicit security.txt and incident response contacts. Privacy policies and terms of service are present and indicate GDPR compliance. Overall, the site is professional, content-rich, and trustworthy, though WHOIS data is unavailable, which slightly impacts domain trust assessment.

R

RTM plus Liberecko s.r.o.

rtmplus.cz

53

RTM plus Liberecko s.r.o. operates the largest regional television station in the Liberec region of the Czech Republic, providing daily news, local event coverage, and video production services. The company targets residents of the Liberec region and surrounding border areas, offering a premier hour of fresh content daily with a program loop thereafter. The website demonstrates a moderate level of digital maturity with use of modern video streaming technologies and social media integration. However, the absence of WHOIS data and privacy/cookie policies indicates gaps in transparency and compliance. Security posture is adequate with HTTPS enabled and secure forms, but lacks advanced security headers and incident response information. Overall, the website is professional and content-rich but would benefit from improved privacy compliance and enhanced security practices.

D

Delirest services s.r.o.

delirest.cz

62

Delirest services s.r.o. is a leading provider of professional corporate catering services in the Czech Republic and Slovakia, offering a comprehensive range of food services including breakfasts, lunches, dinners, canteen and buffet operations, and event catering. The company emphasizes quality, sustainability, and customer satisfaction, positioning itself as a market leader supported by a strong parent company, CEE Catering HoldCo Kft. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization, supporting a positive user experience for corporate clients and employees. Technically, the site is built on Drupal 8, leveraging modern web technologies and security features such as HTTPS and Google reCAPTCHA to protect user interactions and data.

N

Nilfisk

nilfisk.com

74

Nilfisk is a globally recognized leader in the manufacturing and provision of premium cleaning machines, products, solutions, and services catering to both professional and consumer markets. The company maintains a strong market position with a comprehensive product portfolio and a global footprint, supported by a professional and well-structured website that reflects its brand and business model effectively. The website targets professional cleaning service providers and consumers seeking high-quality cleaning solutions. Technically, the site leverages modern web technologies such as React and Next.js, ensuring good performance, mobile optimization, and accessibility. Security measures are robust, with HTTPS enforcement and appropriate security headers, although there is room for improvement in public vulnerability disclosure and incident response transparency. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Nilfisk's digital presence is professional, secure, and trustworthy, supporting its business credibility and customer engagement.

H

Hotel Královka

hotelkralovka.cz

67

Hotel Královka is a hospitality business located in the Jizera Mountains, offering accommodation, gastronomy, wellness, and event services. The website targets vacationers including families, couples, and corporate clients seeking mountain retreats. The business operates a modern website with multilingual support and an integrated e-shop for gift vouchers. Technically, the site uses a Solidpixels CMS platform with modern analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. The website is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is generally strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers are missing and no explicit security policy or incident response information is published. WHOIS data is unavailable, which reduces trustworthiness assessment and suggests privacy protection or registration issues. Overall, the site is professional and trustworthy but could improve transparency and security documentation.

Progres Liberec s.r.o. is a Czech Republic-based company specializing in the construction, repair, and reconstruction of gas pipelines and connections, including gas leak removal. The company offers comprehensive services from technical and engineering tasks through ground and assembly work to finalization including surveying, pressure testing, inspections, and documentation. The website presents a professional image with clear contact information and partner affiliations, targeting business clients in the energy infrastructure sector. Technically, the website uses a modern but somewhat dated tech stack including jQuery and a proprietary CMS (IPO), with good mobile optimization and moderate performance. Security posture is solid with HTTPS and reCAPTCHA implemented, but lacks some security headers and explicit privacy and terms policies. WHOIS data is unavailable, which reduces domain trust but the website content and contact details support legitimacy. Overall, the site is well-structured and trustworthy for its business purpose.

P

Pacovis Česká republika s.r.o.

pacovis.cz

56

Pacovis Česká republika s.r.o. is a medium-sized B2B company specializing in food packaging, hygiene, and logistics services for the food industry and gastronomy sector in the Czech Republic. The company is part of the Pacovis group, a Swiss family business with a history dating back to 1935 and operations across several European countries. Their website reflects a professional and consistent brand image, offering detailed product catalogs and contact information for sales and management personnel. Technically, the website is built on TYPO3 CMS with modern frameworks like Bootstrap and jQuery, and it incorporates Google Tag Manager with user consent mechanisms, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS and cookie consent but lacks explicit security headers and incident response contacts, which could be improved. The absence of WHOIS data reduces domain trustworthiness slightly, but the overall business credibility and website quality remain high.

Č

Český hydrometeorologický ústav

chmi.cz

61

The Český hydrometeorologický ústav (ČHMÚ) is the Czech Republic's national meteorological and environmental authority, providing comprehensive weather forecasts, hydrological data, and air quality monitoring. The website serves a broad audience including the general public, government bodies, media, and business partners, offering detailed environmental data, news, and specialized services such as mobile applications. The organization holds ISO 9001 certification, reinforcing its credibility and commitment to quality. Technically, the website employs traditional web technologies including jQuery and JavaScript, with a moderate performance profile and basic mobile optimization. The site implements a robust cookie consent mechanism aligned with GDPR requirements, denying marketing and analytics cookies by default. While HTTPS is used, explicit security headers are not detected in the provided data, suggesting room for improvement in security hardening. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of detailed incident response contacts and security headers indicates potential gaps. Privacy compliance is strong, supported by comprehensive privacy and cookie policies. The domain WHOIS data is unavailable due to CZ.NIC policies, but the domain usage and content strongly indicate legitimacy as a government entity. Overall, the website is professional, trustworthy, and content-rich, with recommendations to enhance security headers, mobile responsiveness, and incident response transparency to further strengthen its security and user trust.

P

PERI, spol. s r.o.

peri.cz

33

PERI, spol. s r.o. is a leading Czech supplier of construction equipment specializing in formwork, scaffolding, and engineering services. With over 50 years of experience, the company offers innovative and efficient solutions tailored to meet diverse project requirements. The website reflects a mature digital presence with comprehensive product portfolios, customer portals, and active communication channels. Technically, the site employs modern web technologies, including JavaScript frameworks, SVG icons, and consent management tools, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be further confirmed. The absence of WHOIS data is likely due to privacy protection, common for enterprises of this scale. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

J

JOHNNY SERVIS s.r.o.

johnnyservis.cz

54

JOHNNY SERVIS s.r.o. is a well-established Czech company specializing in the rental and sale of mobile toilets, sanitary and storage containers, mobile fencing, and event equipment. With over 25 years of experience, it serves both business clients and the public for construction sites, cultural, sports, and social events primarily in the Czech Republic and neighboring countries. The company positions itself as a market leader with a comprehensive product portfolio and additional services such as express delivery through its GO1 platform. Technically, the website is built on Joomla CMS with VirtueMart e-commerce components, leveraging modern JavaScript libraries like jQuery and integrating marketing and analytics tools such as Google Tag Manager and Seznam.cz tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Privacy and cookie policies are implemented with consent mechanisms, reflecting GDPR compliance. From a security perspective, the site uses HTTPS and has basic security best practices in place, though explicit security policies and incident response details are not publicly available. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain reduces trustworthiness and should be investigated further to confirm domain legitimacy. Overall, JOHNNY SERVIS demonstrates a mature digital presence with strong business credibility and compliance posture. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to improve trust and security assurance.

P

PIVOVAR SVIJANY, a.s.

pivovarsvijany.cz

49

Pivovar Svijany, a.s. is a historic Czech brewery established before 1564, specializing in traditional Czech beer production. The company operates a professional website showcasing its product range, events, and retail options including an e-shop. The site targets adult consumers with age verification and complies with relevant privacy and cookie regulations. Technically, the website employs modern tracking and analytics tools such as Google Analytics and Facebook Pixel, integrated via Google Tag Manager. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and branding consistency. Security posture is solid with HTTPS enforced and privacy mechanisms in place, though explicit security headers and incident response information are absent. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the company's established market presence and social media footprint.

S

Swix

swix.cz

70

Swix.cz is a specialized e-commerce retailer focused on sports equipment, particularly for winter sports such as skiing and cross-country skiing, offering products from the Swix brand. The website targets Czech-speaking customers primarily in the Czech Republic and provides a professional online shopping experience with clear navigation, product categories, and a blog for customer engagement. The business model centers on direct online sales supported by a physical sales network. Technically, the site employs modern JavaScript frameworks, integrates multiple analytics and marketing tools including Google Tag Manager, Facebook Pixel, Microsoft Clarity, and Snowplow Analytics, and uses CDN services for performance optimization. The site is mobile-optimized and includes accessibility features, although these could be enhanced further. Security-wise, the site enforces HTTPS, uses Sentry for error monitoring, and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, the absence of WHOIS data for the domain reduces the overall trust score, though the website content and contact details suggest a legitimate business. Overall, the site presents a secure, compliant, and user-friendly platform for sports equipment retail.

Č

Česká mincovna

ceskamincovna.cz

52

Česká mincovna, a.s. is a well-established Czech company specializing in the manufacture and sale of commemorative and investment coins, medals, and related collectibles. With a history dating back to 1993 and a domain registered since 2002, the company holds a strong market position supported by partnerships with the Czech National Bank and numismatic societies. Their product offerings target collectors, investors, and gift buyers through a professional e-commerce platform. The website demonstrates a mature technical infrastructure utilizing modern JavaScript libraries and frameworks, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforcement, secure login forms, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with comprehensive policies and GDPR-aligned consent. Overall, the site projects high professionalism and trustworthiness with clear business information and certifications.

S

Svaz lyžařů České republiky

czech-ski.com

17

Svaz lyžařů České republiky operates as the official national skiing association for the Czech Republic, providing comprehensive information on skiing disciplines, membership services, event updates, and partner promotions. The website targets the Czech skiing community including athletes, members, and fans, positioning itself as a trusted source for skiing-related activities and organizational information. The business model is non-profit and focused on community engagement and sport promotion. Technically, the website employs modern JavaScript libraries such as Swiper.js for UI components, integrates social media SDKs, and uses Google Analytics for visitor tracking. The site is mobile-optimized with good SEO practices, though accessibility features are basic. The hosting provider and CMS are not explicitly identified. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published privacy or terms of service pages. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which reduces trustworthiness but the site content and business information appear legitimate. Overall, the website presents a professional and trustworthy front for the Czech skiing association, though improvements in privacy disclosures, security headers, and WHOIS transparency are recommended to enhance compliance and trust.

N

Národní sportovní agentura

agenturasport.cz

59

Národní sportovní agentura is a Czech government agency dedicated to the development and support of sports within the Czech Republic. The agency operates as a key national authority, providing funding programs, regulatory oversight, and strategic initiatives to enhance sports infrastructure and athlete development. The website reflects a professional government presence with clear branding, structured data, and active social media engagement. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and maintaining good performance and accessibility standards. Security posture is strong with HTTPS and security headers implemented, though some improvements in cookie consent and vulnerability disclosure are recommended. Overall, the site is trustworthy and well-maintained, serving its target audience effectively.

C

Czech News Center

blesk.cz

61

Blesk.cz is a leading Czech news portal operated by Czech News Center, offering a wide range of content including news, celebrity gossip, sports, entertainment, and weather forecasts. The site targets a broad general audience in the Czech Republic and operates on an advertising-supported business model with premium subscription options. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, and multiple third-party analytics and advertising services, ensuring a robust digital presence with good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS, uses a consent management platform for GDPR compliance, and integrates reputable ad and analytics networks, although additional security headers could enhance protection. Overall, the website demonstrates a mature digital infrastructure with strong business credibility and compliance posture.

A

Active Radio ČR

evropa2.cz

43

Evropa 2 is a prominent Czech radio station offering a comprehensive digital platform that includes live streaming, music charts, articles, quizzes, videos, and contests. The website targets a broad audience interested in entertainment, lifestyle, and music, positioning itself as a leading media outlet in the Czech Republic. The business operates under the parent company Active Radio ČR, with a strong brand presence and consistent content quality. Technically, the site leverages modern web technologies including React (Next.js), integrates multiple advertising and analytics services, and employs consent management tools to comply with privacy regulations. Security posture is solid with HTTPS enforcement and security headers, though there is room for improvement in content security policies and incident response transparency. The absence of WHOIS data limits domain trust assessment but the website's professional presentation and legal disclosures support its legitimacy. Overall, Evropa 2 demonstrates a mature digital presence with good security and privacy practices, serving a large audience in the media sector.

G

Generali Investments CEE, investiční společnost, a.s.

generali-investments.cz

43

Generali Investments CEE is a prominent investment company operating primarily in the Czech Republic and Central Europe, offering a wide range of investment funds and programs in multiple currencies including CZK and EUR. The company is part of the larger Generali Group, a well-known global insurance and financial services provider. Their website demonstrates a mature digital presence with comprehensive product information, client services, and multilingual support. Technically, the site uses modern web technologies such as Bootstrap and JavaScript libraries, and implements HTTPS with good security practices, although some security headers could be improved. Privacy compliance is well addressed with clear cookie consent mechanisms and detailed privacy policies, reflecting adherence to GDPR standards. The absence of WHOIS data is a limitation but does not detract significantly from the overall legitimacy given the strong brand presence and professional content. Overall, the site is secure, user-friendly, and trustworthy, serving a large client base in the financial sector.

V

Volkswagen Užitkové vozy

vw-uzitkove.cz

59

Volkswagen Užitkové vozy is the official Czech Republic website for Volkswagen commercial vehicles, offering a comprehensive portfolio of new vehicle models, configurators, financing options, and after-sales services including servicing and accessories. The site targets both business customers and individual buyers interested in commercial vehicles, positioning itself as a key player in the Czech automotive transportation sector. The website demonstrates strong brand consistency with official Volkswagen branding and links to related Volkswagen services and partners. Technically, the site is built on modern frameworks such as Next.js and React, providing a responsive and accessible user experience with good SEO practices. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though some security headers are not detected and no explicit security or incident response policies are published. Privacy compliance is well addressed with visible cookie consent and privacy policy pages. The absence of WHOIS data reduces domain trustworthiness, but the overall professional presentation and official branding mitigate concerns. Strategic recommendations include improving security header implementation, publishing a security policy, and enhancing transparency around incident response.

D

Dr. Max

drmax.cz

68

Dr. Max is a prominent pharmacy chain operating in the Czech Republic, offering a wide range of pharmaceutical products, dietary supplements, medical supplies, and cosmetics through both physical locations and an e-commerce platform. The website demonstrates a mature digital presence with modern technologies such as Magento for e-commerce, Nuxt.js for frontend, and integration with various marketing and analytics tools. The company maintains active social media channels and provides clear contact information, enhancing customer trust and engagement. However, the absence of publicly accessible WHOIS data and explicit privacy and terms of service pages slightly detracts from the overall transparency and compliance posture. Security measures are robust, including HTTPS enforcement, security headers, and CAPTCHA mechanisms, indicating a strong commitment to protecting user data and preventing abuse. Overall, the site is professional, user-friendly, and well-optimized for performance and accessibility.

T

T-Mobile

t-mobile.cz

77

T-Mobile Czech Republic operates as a major telecommunications provider offering a comprehensive range of mobile and fixed services including mobile tariffs, data plans, home internet, and digital TV. The website is professionally designed, targeting the general public in the Czech Republic with clear branding and consistent messaging. The technical infrastructure leverages modern web technologies such as React and Liferay CMS, supported by analytics and marketing tools like Google Tag Manager and Exponea. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not publicly available. Overall, the site demonstrates a mature digital presence with good compliance to privacy regulations and a trustworthy user experience.

K

Kup merch!

kupmerch.cz

55

Kup merch! is a Czech Republic based e-commerce platform specializing in the sale and production of merchandise across various projects. The website targets a general audience interested in branded merchandise, offering a range of products including clothing and accessories. The business operates primarily online with a niche market focus. Technically, the site uses a modern technology stack including jQuery, Google reCAPTCHA for bot protection, and Google Analytics for traffic analysis. The site is built on the Sirius CMS platform and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though some security headers are not explicitly detected. Privacy compliance is partial, with no clear privacy policy or terms of service pages found, and no explicit contact information for security or business inquiries. WHOIS data is unavailable, which reduces trustworthiness from a domain registration perspective. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.

R

raul, s.r.o.

sportid.online

49

SportID is a Czech-based online registration platform specializing in sports event registrations, targeting sports enthusiasts and participants. The platform offers account creation, event registration, and gift voucher services, positioning itself as a regional player in the sports event management sector. The website is professionally designed with consistent branding and provides a user-friendly experience optimized for mobile devices. The content is relevant and focused on facilitating quick and simple registration for sports events.

S

Ski Classics

skiclassics.com

53

Ski Classics is an established international series of long-distance cross-country ski races in classic style, operating since 2011 with a domain registered since 2003. The website serves as an information hub for the events, targeting skiing enthusiasts and athletes. The business is positioned as a niche sports event organizer with a medium-sized operational scale, primarily focused on transportation and sports sectors. Technically, the website is built on WordPress with WooCommerce, leveraging modern web technologies including Google Analytics, Tag Manager, and reCAPTCHA for bot protection. The site demonstrates good SEO and mobile optimization, though accessibility is basic. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and DNSSEC. No incident response or security policy is published, representing an area for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, with room to enhance security and transparency.

4

4WORKS

posunemevasvys.cz

47

4WORKS is a Czech-based digital agency specializing in creating professional websites, e-commerce platforms, applications, and comprehensive online marketing services. With a decade of experience, they position themselves as a trusted partner for businesses seeking to enhance their online presence. The website showcases a modern, well-structured design with clear navigation and extensive service offerings, targeting primarily business clients in the Czech Republic. Technically, the site is built on WordPress using the Avada theme, integrating multiple analytics and marketing tools such as Google Analytics, Matomo, Hotjar, and Facebook Pixel, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and several security headers present, although explicit security policies and vulnerability disclosure mechanisms are absent. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the professional presentation and active content mitigate this risk. Overall, the site demonstrates a solid digital maturity with room for improvement in privacy compliance and security transparency.

B

Bazén Chodov - Aqua Sport Club s.r.o.

aquasportclub.cz

56

Bazén Chodov - Aqua Sport Club s.r.o. operates a local swimming pool and wellness center located in the Czech Republic, targeting residents of the Jižní Město area. The website serves as the official online presence, offering information about swimming facilities, wellness services, and swimming courses. The business appears to be a small-scale service provider focused on community health and recreation. Technically, the website is built on WordPress with common plugins such as Yoast SEO and LayerSlider, and it integrates Facebook Pixel for marketing analytics. The site is accessible, mobile-optimized, and contains structured data for SEO benefits. Security posture is moderate with HTTPS enabled but lacks visible security headers and detailed privacy or cookie policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and branding suggest a legitimate local business. Overall, the site is functional and professional but would benefit from enhanced security practices and compliance documentation.

R

Rodinné centrum BABOČKA

rcbabocka.cz

58

Rodinné centrum BABOČKA is a small family-oriented center based in Prague, Czech Republic, focused on providing educational and recreational activities for children aged from 6 months to 8 years and their parents. Established since 2009, it offers a variety of services including a preschool program (Školička), diverse courses, parenting academy, coaching, events, family stays, and birthday celebrations. The center targets families seeking a safe, friendly, and developmentally supportive environment for their children. Technically, the website is built on the Webnode CMS platform, hosted via Amazon Cloudfront CDN, and uses modern web technologies such as HTML5, CSS3, and JavaScript. The site is mobile-optimized and includes SEO best practices, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and formal privacy or security policies. The WHOIS data is not publicly available, likely due to privacy protection, which slightly reduces transparency but is consistent with a small non-profit entity. Overall, the website is professional, content-rich, and safe for general audiences.

J

JM-Networks s.r.o.

jmnet.cz

51

JM-Networks s.r.o. operates as a regional internet and television service provider based in Prague, Czech Republic. The company targets residential customers including family houses and apartment buildings, as well as business clients and developers. Their service offerings include high-speed internet, television streaming services such as SledováníTV and Skylink, and telephone services. The website reflects a professional and community-oriented business model with clear contact information and partner affiliations. Technically, the website employs standard web technologies including jQuery and responsive CSS with support for dark mode. The site is mobile-optimized and features a clean, navigable design. However, there is no evidence of a CMS or advanced analytics tools in the provided HTML. Performance appears moderate with good SEO practices but basic accessibility features. From a security perspective, the site uses HTTPS and secure form submission methods but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. The absence of WHOIS data for the domain reduces trust from a domain registration standpoint, though the website content and contact details suggest a legitimate operation. No WAF or blocking mechanisms were detected, and no adult or explicit content is present. Overall, JM-Networks s.r.o. presents a credible and professional online presence with room for improvement in privacy compliance and security hardening. The missing WHOIS data is a notable concern that should be investigated further to ensure domain legitimacy and trustworthiness.