Security Directory

S

SLAPAKY.CZ | Štípaný přírodní kámen již od 279 Kč

slapaky.cz

45

The website www.slapaky.cz is a professional e-commerce platform specializing in the sale of natural split stone products such as sandstone, quartzite, slate, porphyry, schist, limestone, and granite. It targets both retail customers and businesses in the Czech Republic, offering a wide range of stone products for construction, landscaping, and decorative purposes. The site provides additional services including free sample shipping, delivery across the Czech Republic, and storage options. The business appears to be a small-sized entity focused on the real estate and retail sectors. Technically, the website employs modern JavaScript libraries, Google Tag Manager, Matomo analytics, and other marketing tools, ensuring a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and secure forms, although some security headers could be improved. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms. However, the WHOIS data is missing, which reduces transparency and trustworthiness from a domain registration perspective. Overall, the website is well-structured, secure, and professionally presented, suitable for its market niche.

G

Golemos s.r.o.

golemos.com

52

Golemos s.r.o. is a Czech company specializing in developing e-commerce solutions, primarily through its platforms Eshop-rychle.cz and Eshop-rychlo.sk, targeting the Czech and Slovak markets. The company positions itself as a leader in providing affordable, ready-made e-shop solutions since 2007, catering to both beginners and experienced online retailers. Their business model revolves around SaaS-based rental of e-shop platforms, enabling clients to launch and operate online stores efficiently without large upfront investments. Technically, the website employs standard modern web technologies including Google Tag Manager for analytics and Google Fonts for typography. The site is well-structured with good mobile optimization and SEO practices, though it lacks advanced security headers and explicit CMS identification. Performance is moderate with a clean, professional design and clear navigation. From a security perspective, the site uses HTTPS (assumed from URL), but lacks visible security headers and published privacy or cookie policies, which are critical for GDPR compliance. No contact emails or phone numbers are provided, limiting direct communication channels. The WHOIS data is notably missing or inaccessible, which raises concerns about domain legitimacy despite the professional appearance and detailed business information on the site. Overall, while the business appears credible and the website is functional and user-friendly, the absence of WHOIS registration data and privacy compliance documentation reduces trustworthiness. Strategic improvements in security posture, transparency, and compliance are recommended to enhance user trust and regulatory adherence.

P

Petr Válek

valekpetr.com

55

The website valekpetr.com represents a personal portfolio for Petr Válek, a UX/Product Designer based in Czechia. The site highlights his specialization in Human Centered Design with over 6 years of experience and more than 30 projects completed. The business model appears to be freelance or consultancy services targeting businesses and product teams seeking UX design expertise. The website is built on the Webflow CMS platform and uses modern web technologies such as jQuery and Typed.js to enhance user experience. Hosting and domain registration are managed by Gransy, s.r.o., a Czech registrar, consistent with the claimed location. From a technical perspective, the website is well-structured with good mobile optimization, accessibility, and SEO practices. However, there is no evidence of advanced security headers or privacy compliance mechanisms such as cookie banners or privacy policies. The domain is relatively mature, created in 2018, which aligns with the professional experience claimed. No forms are present except a mailto link for contact, minimizing data collection risks. Security posture is moderate; the domain status clientTransferProhibited is a positive indicator, but DNSSEC is not enabled and no security headers are detected. Privacy compliance is low due to the absence of privacy and cookie policies. No analytics or tracking services are detected, indicating minimal user tracking. Overall, the website is professional and safe but would benefit from enhanced security and privacy measures. Strategic recommendations include enabling DNSSEC, adding privacy and cookie policies, implementing security headers, and considering a vulnerability disclosure policy to improve trust and compliance.

Z

Z-WARE s.r.o.

nasejidelna.cz

44

The website nasejidelna.cz represents the iCanteen system, a specialized internet-based food ordering platform primarily serving canteens in the Czech Republic. Developed and maintained by Z-WARE s.r.o., the platform offers comprehensive features such as online meal ordering, account management, notifications, and integration with existing canteen systems. The business targets institutional clients like canteens and their customers, positioning itself as a niche technology provider with a long-standing presence since 2003. Technically, the website employs a Java-based backend with modern front-end technologies including HTML5, CSS3, and JavaScript. The site is moderately optimized for mobile devices and provides a good user experience with clear navigation and relevant content. However, some technical improvements are recommended, such as adding security headers and enhancing SEO and accessibility features. From a security perspective, the site uses HTTPS and employs secure password hashing (BCrypt), but lacks visible security headers and formal security policies. No privacy or cookie policies are published, which is a compliance gap under GDPR. No incident response or vulnerability disclosure information is available, limiting transparency. Overall, the website is legitimate, professionally presented, and serves a clear business purpose. To improve trust and compliance, it should publish privacy and cookie policies, implement security headers, and provide vulnerability disclosure information. These steps will enhance security posture and regulatory compliance, supporting continued business growth and customer trust.

O

ORAX, s.r.o.

orax.cz

45

ORAX, s.r.o. is a Czech technology company specializing in custom web applications, unique websites, Windows custom software, and proprietary economic software solutions. With over 30 years of market presence and more than 50 completed projects, the company targets businesses seeking tailored software solutions to meet their specific needs. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in Czech. Technical infrastructure includes modern JavaScript libraries such as Swiper.js and Google Analytics for visitor tracking. Security posture is moderate with cookie consent implemented but lacks visible HTTP security headers and incident response information. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but does not contradict the professional business presentation. Overall, the website demonstrates a solid business credibility and digital maturity appropriate for a small technology firm.

M

MAKRO Cash & Carry ČR s.r.o.

makro.cz

60

MAKRO Cash & Carry ČR s.r.o. operates a professional wholesale food and goods business targeting horeca, retail, and business customers in the Czech Republic. The website serves as a comprehensive platform for product assortment, promotions, customer registration, and support, reflecting a mature market position as a leading wholesale supplier. The technical infrastructure leverages modern web technologies, CDN delivery, and OAuth2 authentication, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response information are absent. Overall, the site demonstrates strong business credibility and compliance with GDPR regulations.

V

Vysoká škola uměleckoprůmyslová v Praze

umprum.cz

65

Vysoká škola uměleckoprůmyslová v Praze (UMPRUM) is a reputable educational institution specializing in art and design education. The website serves students, prospective students, alumni, and the general public interested in cultural events and exhibitions. It offers detailed information about departments, study programs, events, and an online learning platform. The institution holds a strong market position in the Czech Republic's education sector, focusing on creative disciplines. Technically, the website is built with modern web standards including HTML5, CSS3, JavaScript, and Bootstrap framework. It uses Matomo for analytics and provides a responsive design optimized for mobile devices. The site is served over HTTPS, ensuring secure communication. However, some security headers are missing, and cookie consent mechanisms are not explicitly implemented, indicating room for improvement in privacy compliance. From a security perspective, the site demonstrates good practices such as secure forms and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data due to privacy protection is typical for such institutions and does not raise immediate concerns. The website lacks explicit incident response or security policy disclosures, which could be enhanced to improve trust and compliance. Overall, UMPRUM's website is professional, content-rich, and trustworthy, with minor gaps in privacy and security policy transparency. Strategic recommendations include implementing comprehensive security headers, explicit cookie consent, and publishing terms of service and security policies to strengthen compliance and user trust.

Č

ČTPT - Česká technologická platforma pro textil, z.s.

ctpt.cz

43

ČTPT - Česká technologická platforma pro textil, z.s. is a Czech non-profit technology platform focused on advancing the textile industry through research, innovation, and collaboration. Established in 2009, it serves as a hub for textile professionals, researchers, and stakeholders primarily within the Czech Republic. The website provides event announcements, industry news, and resources relevant to the textile sector. Technically, the site uses a traditional web stack including HTML5, CSS, JavaScript with jQuery and Bootstrap frameworks, hosted on Forpsi servers. It integrates Cookiebot for GDPR-compliant cookie consent and Google Tag Manager for analytics, indicating a moderate level of digital maturity. Security posture is basic with HTTPS usage and consent management but lacks explicit security headers and detailed policies. Overall, the site is professional and trustworthy but could improve in privacy transparency and security hardening.

Z

Zámek Loučeň

zamekloucen.cz

51

Zámek Loučeň is a well-established cultural and hospitality business operating a historic baroque castle in the Czech Republic. It offers a variety of services including guided tours, accommodation in castle apartments and a hotel, gastronomy, event hosting such as weddings and corporate events, and an e-commerce platform for gift vouchers. The website positions itself as the 4th most visited castle in the country, targeting families, children, and adults with a strong focus on tourism and cultural heritage. Technically, the website uses modern web technologies including Google Tag Manager, Facebook Pixel, and a CMS likely based on the Nette framework. It is mobile-optimized, accessible, and SEO-friendly with structured data enhancing search visibility. Security posture is good with HTTPS enforced and no visible critical vulnerabilities, though some security headers could be improved. Privacy compliance is basic with a privacy policy and cookie consent mechanism present, but no explicit security or incident response policies. Overall, the website is professional, trustworthy, and provides a positive user experience with clear contact information and social media integration.

A

ALUKOV a.s.

alukov.cz

70

ALUKOV a.s. is a well-established Czech manufacturer specializing in custom aluminum enclosures for pools, whirlpools, terraces, and solar roofing solutions. With over 30 years of experience and a presence in more than 40 countries, the company emphasizes modern design, safety, and quality. Their business model focuses on bespoke manufacturing, direct customer engagement, and comprehensive after-sales service including warranty and maintenance. The website demonstrates a mature digital infrastructure with modern technologies such as Google Tag Manager, Google Analytics, and reCAPTCHA for form security. Privacy and cookie policies are robust and GDPR compliant, reflecting a strong commitment to user data protection. Security posture is good with HTTPS enforced and consent mechanisms in place, though explicit security headers and incident response information are absent. Overall, the site is professional, user-friendly, and trustworthy, supporting ALUKOV's market position as a leading manufacturer in their sector.

M

Město Špindlerův Mlýn

mestospindleruvmlyn.cz

52

Město Špindlerův Mlýn operates an official municipal tourism website focused on promoting the mountain town in the Krkonoše region. The site provides comprehensive information about local events, activities such as skiing, hiking, and cycling, as well as accommodation and gastronomy options. It targets tourists and visitors seeking outdoor and family-friendly experiences. The business model centers on tourism promotion and community engagement, positioning itself as a regional hub for visitors. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates analytics and marketing tools such as Google Analytics 4, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized with good SEO practices and a user-friendly design. However, the CMS is custom or unknown, and performance is moderate. From a security perspective, the site enforces HTTPS, uses consent management for cookies, and includes CSRF protection on forms. While no critical vulnerabilities were detected, the absence of security headers and incident response information suggests room for improvement. Privacy compliance is strong with GDPR policies and cookie consent mechanisms in place. Overall, the website is professional, trustworthy, and well-suited for its purpose. The lack of WHOIS data is a concern for domain legitimacy verification but does not detract from the site's operational quality. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information.

Z

Základní škola Komenského, Trutnov

zskomtu.cz

49

Základní škola Komenského, Trutnov operates as a local primary educational institution serving students and the community in the Czech Republic. The website provides comprehensive information about the school's educational offerings, extracurricular activities, and community engagement, targeting parents, students, and local residents. The site integrates with external platforms such as EduPage for school management and sports reservation systems, reflecting a moderate level of digital maturity. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and the Nette Framework, with responsive design and accessibility considerations. The presence of cookie consent mechanisms and GDPR-compliant privacy policies indicates a strong commitment to privacy and regulatory compliance. However, the absence of WHOIS data and some security headers suggests areas for improvement in transparency and security hardening. Security posture is generally good with HTTPS enforced and secure form validation, but the lack of explicit security headers and incident response contact details limits the overall security maturity. No vulnerabilities or malicious content were detected. The website is safe for general audiences and does not contain adult or questionable content. Overall, the website is professional, trustworthy, and well-maintained, though the missing WHOIS data and some security best practices should be addressed to enhance credibility and security assurance.

L

Leoš Kohoutek

sur-ron-moto.cz

52

The website www.sur-ron-moto.cz represents a small Czech business specializing in the retail and servicing of SUR-RON electric motorcycles, including models such as Light Bee, Ultra Bee, and Storm Bee. It provides product information, parts and service options, downloadable documents, dealer locations, rental services, and an integrated e-commerce shop hosted on a related subdomain. The business appears to be an authorized importer or dealer for SUR-RON motorcycles in the Czech market, targeting consumers interested in electric off-road motorcycles. The website content is professionally presented with consistent branding and good navigation, supporting a positive user experience.

The website at cdn-zeptoapps.com is currently inaccessible, serving a 403 Forbidden error page indicating restricted access likely enforced by Cloudflare security mechanisms. The domain is relatively new, registered in October 2022 via GoDaddy, and uses Cloudflare DNS servers without DNSSEC enabled. There is no visible business content, contact information, or privacy and cookie policies, which limits the ability to assess the business or compliance posture. The technical infrastructure appears minimal, with basic HTML and CSS and no detected analytics or tracking scripts. Security posture is weak due to missing security headers and lack of DNSSEC, although HTTPS is presumably enabled given Cloudflare usage. Overall, the site appears to be a CDN or resource domain rather than a customer-facing business website.

M

Mathesio

mathesio.cz

51

Mathesio is a Czech technology company specializing in creative IT solutions including web applications, technological solutions, business process optimization, and design. With a team of 15 developers, they serve government ministries, corporate clients, and startups. Their website reflects a professional and consistent brand image, with content primarily in Czech and an English alternate domain available. The company has been operating since 2013, which aligns with the domain registration date, indicating a stable business presence. Technically, the website is built on WordPress and leverages a broad technology stack including JavaScript frameworks (React, AngularJS), PHP frameworks (Nette, CodeIgniter), Java technologies (Spring, Hibernate), and others. The site is mobile optimized and uses modern web standards, though performance is moderate. Analytics and tracking are implemented via Google Analytics and Facebook Pixel, but no cookie consent mechanism is present. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and published security policies. No forms or sensitive data collection points were detected on the homepage. Privacy and cookie policies are missing, which is a compliance gap especially for GDPR. Contact information is minimal, limited to a Facebook page link, reducing direct communication channels. Overall, Mathesio presents as a credible small technology firm with a solid technical foundation but with room for improvement in privacy compliance, security best practices, and transparency of contact and policy information.

L

LogiNet

loginet.hu

60

LogiNet is a Hungarian technology company specializing in e-commerce systems, webshop development, mobile application creation, and custom software development. Positioned as a professional service provider, LogiNet targets businesses requiring tailored e-commerce and digital solutions. The website reflects a mature digital presence with good SEO practices, mobile optimization, and integration of modern marketing and analytics tools such as Google Tag Manager, Hotjar, and Cookiebot for consent management. Security-wise, the site enforces HTTPS and employs reCAPTCHA to mitigate bot traffic, though explicit security headers and policies are not prominently published. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the site demonstrates a solid technical and business foundation with room for enhanced security transparency and contact information clarity.

Jihočeská centrála cestovního ruchu is a government-affiliated regional tourism organization responsible for coordinating and promoting tourism in the South Bohemian region of the Czech Republic. Established in 2003, it serves as the destination management organization, supporting both domestic and inbound tourism through project management, statistical analysis, and marketing activities. The website reflects a professional and consistent brand presence targeting tourists and regional stakeholders. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and jQuery, with integration of Facebook Pixel for marketing analytics. The site is hosted by Active24, a reputable provider, and demonstrates good mobile optimization and SEO practices. However, no CMS or advanced frameworks are explicitly detected. From a security perspective, the site uses HTTPS with excellent SSL configuration and no visible vulnerabilities or exposed sensitive data. Security headers are not explicitly detected, and there is no published security policy or incident response information. Privacy compliance is partially addressed with a GDPR policy page but lacks a cookie consent mechanism. User tracking is moderate due to Facebook Pixel usage. Overall, the website is trustworthy, well-maintained, and aligned with its government role. Strategic improvements include implementing cookie consent, enhancing security headers, publishing security policies, and improving accessibility to strengthen compliance and user trust.

E

Ecn Studio s.r.o

ecnstudio.cz

46

Ecn Studio s.r.o is a Czech technology company specializing in web design, web hosting, and online tools primarily serving nonprofit organizations and other clients requiring complex web solutions. The company has a legacy dating back to the early 1990s under the Econnect brand and continues to operate with a focus on quality and custom development. Their services include web hosting, web design, account services, network support, and a suite of online tools such as webmail, cloud storage, and a proprietary CMS called ActionApps Toolkit. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site uses modern JavaScript libraries like Swiper and LightGallery, and privacy-conscious analytics via Matomo with cookies disabled. The domain is registered with REG-WEDOS since 2017, consistent with the business history and location in the Czech Republic.

L

Lesy České republiky, s.p.

vracimevodulesu.cz

68

The website 'Vracíme vodu lesu' represents a large-scale governmental forestry and environmental conservation program managed by Lesy České republiky, s.p. It focuses on water retention and revitalization of small watercourses across the Czech Republic, positioning itself as the largest program in the history of Czech forestry. The site targets the general public and stakeholders interested in environmental sustainability and forestry management. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integrations such as Cookiebot for cookie consent, Google Analytics, and Facebook Pixel for analytics and marketing. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with visible cookie consent and a comprehensive privacy policy. Overall, the website demonstrates a mature digital presence with a strong focus on compliance and user trust.

L

Lesy České republiky, s.p.

sazimelesynovegenerace.cz

59

The website 'Sázíme lesy nové generace' represents Lesy České republiky, a government-affiliated forestry management entity in the Czech Republic. It focuses on sustainable forest management, watercourse restoration, and public engagement through educational events such as 'Den lesů nové generace'. The site targets the general public interested in environmental conservation and sustainable wood use. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, and Cookiebot for consent management, ensuring GDPR compliance. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, but the website's branding and social media presence support its legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

The website kubanek.eu represents a small Czech business specializing in the development of B2B and B2C e-commerce platforms, web applications, and corporate intranets with integration to popular Czech ERP systems such as Pohoda, Vario, and Qi. The business offers tailored solutions including online dashboards, reports, and exports to XLS and PDF formats, addressing gaps in standard enterprise information systems. The site content is professional and targeted at businesses requiring custom software integration and e-commerce solutions within the Czech market. Technically, the website is built with basic HTML5 and CSS3, using the Roboto font. There is no evidence of advanced frameworks, CMS, or analytics tools. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No forms or data collection mechanisms are present, indicating minimal user interaction beyond informational content. From a security perspective, the site lacks visible HTTPS confirmation and security headers, which lowers its security posture. No privacy, cookie, or terms of service policies are present, indicating compliance gaps with GDPR and related regulations. The WHOIS data is fully privacy protected by EURid, which is common for .eu domains, and no suspicious patterns were detected. Contact information is limited to a professional email address and company identifiers, supporting legitimacy but limiting direct contact options. Overall, the website is a legitimate small business site with good content quality and business credibility but requires improvements in security, privacy compliance, and technical modernization to enhance trust and protect user data.

H

HUMLNET CREATIVE s.r.o.

hucr.cz

43

HUMLNET CREATIVE s.r.o. is a Czech Republic-based small web development agency specializing in creating custom, modern, and professional websites tailored to client needs. Their market position is that of a regional service provider with a portfolio of local clients including schools, companies, and organizations. The company emphasizes a collaborative and tailored approach to web design and development, offering multilingual and responsive websites. Technically, the website is built on a modern stack including Bootstrap, jQuery, and OctoberCMS, with integration of Facebook SDK and Google Analytics for marketing and analytics purposes. The site is mobile-optimized and features a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and secure form handling, though additional security headers could improve defenses. The absence of WHOIS data reduces transparency but the website content and business information appear legitimate and professional. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, with moderate security maturity.

BYD Trutnov, operated by Autostyl a.s., is an authorized dealership and service center specializing in electric vehicles and plug-in hybrids from the BYD brand. Positioned as the first BYD representative in the Trutnov region of the Czech Republic, the company focuses on delivering modern, eco-friendly mobility solutions to local consumers. The website reflects a professional business presence with clear branding, comprehensive product offerings, and accessible customer contact points. Technically, the website is built on a modern stack including October CMS, Bootstrap, and JavaScript libraries such as Swiper.js and jQuery. It is mobile-optimized and includes SEO best practices like meta tags and Open Graph data. Google Tag Manager is used for analytics and tracking, with a cookie consent mechanism that aligns with GDPR requirements. From a security perspective, the site enforces HTTPS and implements cookie consent controls, but lacks visible security headers which could enhance protection against common web threats. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data raises concerns about domain legitimacy and should be investigated further. Overall, the website presents a trustworthy and professional front for the business, but improvements in security headers and domain registration transparency are recommended to strengthen trust and compliance.

P

Práce na horách. najděte si brigádu a zažijte zimu snů - Práce na horách

pracenahorach.cz

43

The website pracenahorach.cz is a niche job listing platform focused on seasonal winter employment opportunities in Czech mountain resorts, primarily targeting students and seasonal workers interested in ski instruction and related hospitality roles. The site offers curated job offers, course information, and location details, supported by partner ski schools and mountain activity providers. Technically, the site uses modern web technologies including HTML5, CSS, JavaScript, Google Analytics, Google Tag Manager, reCAPTCHA, and Smartsupp live chat, delivering a responsive and user-friendly experience. Security posture is generally good with HTTPS enforced and anti-bot measures on contact forms, though it lacks some security headers and formal privacy/cookie policies, which are compliance gaps. The absence of WHOIS data limits domain transparency but does not detract from the site's apparent legitimacy. Overall, the site is professionally designed, content-rich, and safe for general audiences.

T

Tourist Board Špindlerův Mlýn, z.s.

touristboard.cz

49

Tourist Board Špindlerův Mlýn, z.s. is a non-profit destination management organization dedicated to promoting tourism in the Špindlerův Mlýn area and the broader Krkonoše region. Supported by the city and key tourism operators, it focuses on marketing, tourism projects, and event organization to enhance the visitor experience and regional development. The website is professionally designed, mobile-optimized, and provides clear information about the organization's mission and activities, targeting tourists and local stakeholders.

4

42 São Paulo

42bh.org.br

62

42 São Paulo is an innovative educational institution focused on providing free software engineering education to a diverse audience. The website presents a professional and modern design, emphasizing accessibility and inclusivity in its educational offerings. The business model centers on offering high-quality, tuition-free programming courses aimed at forming the next generation of software engineers. The institution positions itself as a leader in innovative software engineering education within Brazil.

A

Ajurvédská Univerzita Praha

ayurveda-online.net

47

Ayurveda-online.net is a small, niche educational website sponsored by the Ajurvédská Univerzita Praha, providing free access to classical Ayurvedic and spiritual literature. The site targets students, researchers, and practitioners interested in Ayurveda and related disciplines. It operates as a non-commercial resource with a focus on educational content rather than commercial services. Technically, the website is simple, built with static HTML and CSS, and hosted on a registrar-associated infrastructure with DNS servers in the Czech Republic. The site is mobile responsive but lacks advanced technical features or CMS integration. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. No privacy or cookie policies are present, and no contact information or forms are provided, limiting user engagement and compliance maturity. Overall, the site is trustworthy for its educational purpose but could improve in security and privacy compliance.

R

Roklen Corporate Finance

roklencf.cz

52

Roklen Corporate Finance is a specialized corporate finance advisory firm based in the Czech Republic, focusing on M&A advisory, company valuation, and capital market operations. The company positions itself as a leading specialist in the Czech market with a strong team of experienced professionals and a solid track record of completed projects. Their services include transaction advisory, financing support, and special capital market operations such as takeover bids and auctions. The website reflects a professional and well-structured digital presence with detailed team profiles and client references, supporting their market credibility. Technically, the website uses modern web technologies including HTML5, CSS3, and jQuery, with good mobile optimization and accessibility features. The site is served over HTTPS with secure forms and a cookie consent mechanism, indicating compliance with GDPR requirements. However, there is room for improvement in security headers and publishing explicit security policies or incident response information. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. The lack of WHOIS data due to privacy protection is common for such businesses and does not detract from legitimacy. Overall, the site is trustworthy, professional, and compliant with relevant privacy regulations. Strategically, Roklen Corporate Finance should enhance its security posture by implementing recommended HTTP security headers and publishing a vulnerability disclosure or security.txt file to further build trust. Maintaining GDPR compliance and transparent privacy policies will support ongoing regulatory adherence and client confidence.

N

Nadace ČEZ

nadacecez.cz

62

Nadace ČEZ is a well-established non-profit foundation affiliated with the ČEZ Group, focusing on supporting social, environmental, and community projects across the Czech Republic. The foundation operates various grant programs, including regional support, sports infrastructure, environmental initiatives like tree planting, and employee-driven grants. The website reflects a professional and consistent brand image with comprehensive content and clear navigation, targeting non-profit organizations, regional communities, and the general public interested in social good. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager for analytics, and Cookiebot for consent management. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are missing. The WHOIS data is unavailable, which slightly reduces trustworthiness; however, the website's structured data, social media presence, and content quality support its legitimacy. No critical vulnerabilities or adult content were detected. Overall, the site demonstrates a mature digital presence suitable for its non-profit mission. Recommendations include enhancing security headers, publishing explicit security and incident response policies, and verifying domain registration details to improve trust and compliance.

E

ECN Studio

ecn.cz

48

ECN Studio operates a professional web presence focused on web design, web hosting, and technical support services primarily targeting Czech businesses and users. The company has a long-standing domain registration dating back to 1995, indicating established market presence. The website offers multiple online tools such as webmail, cloud storage, and toolkits, enhancing its service portfolio. The site is well structured with clear navigation and consistent branding, though it lacks formal privacy and cookie policies. Technically, the website uses modern HTML5, CSS3, and JavaScript with responsive design elements, providing a good user experience across devices. However, there is no evidence of advanced frameworks or CMS usage, and performance is moderate. Security posture is adequate with HTTPS implied but lacks explicit security headers and incident response information. No forms or user data collection mechanisms are present on the main page, reducing immediate data protection concerns. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data but would benefit from implementing security headers, publishing privacy and cookie policies, and providing vulnerability disclosure channels. The WHOIS data confirms domain legitimacy and consistency with the business claims, enhancing trustworthiness. Overall, the website is safe, professional, and suitable for general audiences with no adult or questionable content. Strategic recommendations include enhancing privacy compliance, improving security headers, and adding incident response information to strengthen trust and regulatory adherence. The site’s technical and business foundations are solid but could be modernized further for improved performance and security.

M

Mercedes-Benz Financial Services Česká republika s.r.o.

operativni-leasing-mercedes.cz

55

The website www.operativni-leasing-mercedes.cz serves as an official platform for Mercedes-Benz Financial Services Česká republika s.r.o., offering operational leasing services for Mercedes-Benz vehicles in the Czech Republic. The site targets businesses and individuals interested in leasing various Mercedes-Benz models, providing a configurator tool and detailed vehicle information. The business is positioned as a key player in automotive financial services within its regional market, leveraging the strong Mercedes-Benz brand. Technically, the website employs modern JavaScript modules, Google Analytics, and Google Tag Manager for tracking, and is built with a focus on responsive design and user experience. The site loads moderately fast and is mobile-optimized, though some SEO and accessibility features could be enhanced. The absence of a detected CMS suggests a custom or proprietary platform. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The missing WHOIS data is a concern for domain legitimacy but does not directly impact the website's operational security posture. Overall, the website presents a professional and trustworthy front for Mercedes-Benz leasing services, with room for improvement in security transparency and contact information availability. The risk level is moderate, primarily due to the lack of WHOIS data and some security best practices not fully implemented.

S

Svazek obcí Východní Krkonoše

vychodnikrkonose.cz

49

Svazek obcí Východní Krkonoše is a regional association of municipalities in the Eastern Krkonoše area of the Czech Republic, focused on regional development, tourism, and community support. The organization provides services such as meeting room rentals, coworking spaces, and event equipment, and manages multiple projects aimed at enhancing tourism and sustainable regional growth. The website reflects a well-established entity with a domain age since 2004, consistent with its operational history. Technically, the website employs modern web standards including HTML5, CSS3, Bootstrap for responsive design, and Font Awesome for icons. It is hosted by Active24, a known Czech hosting provider, and uses HTTPS with good performance optimizations such as Google PageSpeed. The site is mobile-friendly and has good SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS and implements a cookie consent banner compliant with GDPR. However, no explicit security headers or incident response policies are found, and no vulnerability disclosure or security.txt files are present. No critical vulnerabilities or exposed sensitive data were detected in the content analyzed. Overall, the website is professional, trustworthy, and suitable for its target audience of local municipalities and regional stakeholders. Strategic improvements in security headers and explicit security policies would enhance its security posture and compliance.

M

Město Pardubice

pardubice.eu

57

Pardubice.eu is the official web portal for the city of Pardubice, Czech Republic, serving tourists, citizens, entrepreneurs, and local government stakeholders. It provides comprehensive information on tourism, events, city news, public services, and contact resources. The website is well-positioned as a trusted government portal with consistent branding and a clear focus on serving its community. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager, Facebook Pixel, and Microsoft Clarity for analytics and user experience enhancement. The site is hosted by a reputable Czech provider and demonstrates good mobile optimization and accessibility. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR, though it lacks explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its audience.

G

Giant interactive s.r.o.

giant.cz

54

Giant interactive s.r.o. is a Czech digital agency specializing in e-commerce, web, and mobile application development with over 17 years of experience. The company positions itself as a market leader providing comprehensive digital solutions including strategy, web presence, e-commerce platforms, mobile apps, and online marketing services. Their client portfolio includes notable companies and they have received multiple industry awards, indicating strong market presence and credibility. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, React JS, and integrates Google Tag Manager for analytics. The site is well-optimized for mobile devices and offers a professional user experience with clear navigation and multimedia content. Cookie consent mechanisms are implemented, reflecting awareness of privacy regulations. From a security perspective, the site uses HTTPS with good SSL configuration and secure forms with anti-spam features. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no published privacy policy or incident response information is found, which are areas for improvement. Overall, the website is professional and trustworthy, but the absence of WHOIS data and privacy policy reduces the confidence level. It is recommended to verify domain registration details and publish comprehensive privacy and security policies to enhance trust and compliance.

The website motol-motolice.cz/2024 is a small-scale cultural event listing platform primarily focused on music and cultural events in Prague for the year 2024. It provides event names, dates, venues, and ticketing links but lacks comprehensive business or contact information. The site appears to serve a niche local audience interested in cultural happenings. Technically, the website is built with basic HTML and CSS without advanced frameworks or CMS detected. It uses Forpsi nameservers and is registered with REG-INTERNET-CZ since 2007, indicating a stable and legitimate domain. The site shows moderate performance and basic mobile optimization but lacks modern SEO and accessibility features. From a security perspective, the site lacks HTTPS confirmation in the data provided, security headers, privacy and cookie policies, and contact information for incident response. No forms or data collection mechanisms are present, reducing attack surface but also limiting user engagement. The absence of privacy compliance and security best practices lowers the overall security posture. Overall, the website is functional for its purpose but requires improvements in security, privacy compliance, and business transparency to enhance trust and user confidence.

The website id.mysuitu.com is a login portal for the Suitu Identity service, which appears to be an authentication or identity management platform. The site is minimalistic, providing a basic login form with username and password fields, a 'remember me' checkbox, and a CSRF token for security. The lack of additional content, such as privacy policies or contact information, limits the ability to fully assess the business or its market position. Technically, the site uses standard HTML5 and CSS3 with Google Fonts for styling but lacks advanced frameworks or CMS indications. Security-wise, the presence of a CSRF token is positive; however, no security headers or HTTPS status information is available, and no privacy or cookie policies are present, indicating room for improvement in compliance and security posture. The WHOIS lookup for the subdomain failed, which is expected as subdomains are not separately registered, but no WHOIS data for the main domain was provided, limiting trust assessment. Overall, the site is functional but basic, with moderate trustworthiness and a need for enhanced security and compliance features.

M

Materasso Hotels

materasso-hotels.com

56

Materasso Hotels is a specialized supplier of hotel beds, mattresses, and furniture, targeting the hospitality industry with a focus on quality sleep solutions. The company offers a range of product classes from Economy to Luxury, serving over 200 hotels, primarily in Central Europe. Their website is professionally designed, multilingual, and optimized for user experience and SEO, reflecting a mature digital presence. Technically, the site leverages WordPress with modern JavaScript libraries, Google Analytics, and Tag Manager for marketing and analytics purposes. Security measures include HTTPS enforcement and cookie consent mechanisms, though some advanced security policies and incident response information are not publicly available. The absence of WHOIS registration data for the domain is a notable concern, suggesting a need for verification of domain legitimacy. Overall, the business appears credible and well-positioned in its market segment, with recommendations to improve transparency around security policies and domain registration.

H

HERHSIANG Information Co., LTD.

tgb.com.tw

8

The website tgb.com.tw/webmail serves as a corporate webmail login portal primarily targeting employees or users associated with the tgb.com.tw domain. The business behind the site is HERHSIANG Information Co., LTD., a Taiwanese company providing webmail services. The site is minimalistic, focusing on secure user authentication with features such as XSRF tokens and two-step verification code mechanisms. However, it lacks publicly visible privacy, cookie, or terms of service policies, and no contact information is provided on the page. From a technical perspective, the site uses standard web technologies including HTML, CSS, JavaScript, jQuery, and jQuery UI. The performance and mobile optimization are basic, with no advanced frameworks or CMS detected. Security best practices are partially implemented, but the absence of visible HTTPS enforcement and security headers reduces the overall security posture. No analytics or advertising scripts are present, indicating a focus on internal use rather than marketing. Security-wise, the site shows some good practices such as hidden XSRF tokens and password input protections, but the lack of explicit HTTPS enforcement and security headers is a concern. There is no evidence of vulnerability disclosure or incident response policies. The domain registration data is consistent and legitimate, registered through TWNIC with no suspicious patterns. Overall, the website is functional for its intended purpose but would benefit from enhanced security measures, privacy compliance, and improved user trust signals. Strategic recommendations include implementing HTTPS with HSTS, adding security headers, publishing privacy and cookie policies, and providing clear contact information to improve credibility and compliance.

M

Metropolitní kapitula u sv. Víta

katedrala.tv

47

Katedrála TV is an official streaming media platform operated by Metropolitní kapitula u sv. Víta, providing live and archived religious services primarily related to St. Vitus Cathedral in Prague. The website serves a general audience interested in religious content, offering scheduled programming and video archives. The business operates as a small non-profit entity within the media and government/non-profit sectors, with a clear focus on religious broadcasting. Technically, the website employs modern web technologies including Google Fonts, Google Analytics with consent, Cookiebot for cookie management, and Cloudflare for DNS and CDN services. The site is mobile optimized with good navigation and SEO practices, though it lacks a detected CMS and some advanced accessibility features. Performance is moderate, supported by CDN usage. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, it lacks DNSSEC, security headers, and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business identity, enhancing trustworthiness. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could improve security posture by enabling DNSSEC, adding security headers, and publishing security policies. Contact information is minimal on the site, which could be enhanced for better user support and trust.

S

SYLVA

bioaerosol.eu

51

SYLVA is a European Union and SERI funded scientific project focused on real-time observation of aeroallergens, providing valuable environmental data and research outputs. The website serves as a portal for stakeholders including researchers and public health officials, offering access to data portals and project information. The technical infrastructure is modern and lightweight, utilizing htmx and Pico CSS for responsive and accessible design. Embedded iframes provide interactive data visualization and mapping services. Security posture is adequate with HTTPS usage but lacks explicit security headers and privacy policies, which are recommended for improvement. The domain WHOIS data is privacy protected by EURid, typical for .eu domains, and the website content aligns with the domain's purpose, supporting legitimacy. Overall, the site is professional and trustworthy but could enhance compliance and security transparency.

S

solidpixels.

solidpixels.cz

65

solidpixels. is a Czech-based technology company offering a proprietary SaaS platform for creating professional websites, landing pages, e-shops, and content hubs. The company targets businesses and professionals seeking high-quality, fast, and functional web solutions, positioning itself as a premium provider trusted by thousands of clients. The website demonstrates a strong market presence with client testimonials, social media engagement, and a comprehensive service offering. Technically, the site uses modern web technologies including responsive design, lazy loading, and integrates Google Analytics and Tag Manager for analytics and marketing. The platform is built on a proprietary CMS, solidpixels, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are not evident. The absence of WHOIS registrant data is a concern for domain legitimacy verification, but the professional content and business presence mitigate this risk. Overall, the website is well-designed, user-friendly, and compliant with GDPR, making it a trustworthy platform for its target audience.

S

S úsměvem pro vás

susmevemprovas.cz

56

S úsměvem pro vás is a small Czech Republic based consortium of companies specializing in advertising, graphic design, photography, publishing, and printing services. The website is built on the Wix platform, leveraging Wix Thunderbolt technology, and presents a professional and consistent brand image targeting local/regional clients. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and privacy compliance features. The absence of WHOIS data reduces transparency but does not indicate direct risk. Overall, the business appears legitimate with room for improvement in privacy and security practices.

A

Autoservis Dubina Pardubice

autoservisdubina.cz

41

Autoservis Dubina Pardubice is a small automotive service provider based in the Czech Republic, specializing in comprehensive car servicing, repairs, diagnostics, and spare parts sales. The company targets local vehicle owners and offers a broad range of services including chiptuning, tire service, air conditioning, and technical inspections. The website is built on Joomla CMS and uses common JavaScript libraries, presenting a professional and consistent brand image. However, the site lacks privacy and cookie policies, which impacts compliance with GDPR regulations. Security posture is moderate with no visible HTTPS verification or security headers, indicating room for improvement. Overall, the website is functional and trustworthy but would benefit from enhanced security and privacy measures.

M

Město Pardubice

ipardubice.cz

46

Pardubice.eu is the official web portal of the city of Pardubice, Czech Republic, serving as a comprehensive information hub for tourists, citizens, entrepreneurs, media, and city officials. The website offers a wide range of services including event calendars, tourist guides, public announcements, and contact information, positioning itself as the primary digital gateway to the city's offerings and administrative resources. The portal is well-branded with consistent city imagery and messaging, reflecting its government affiliation and public service mission. Technically, the website employs modern web technologies including JavaScript frameworks, CSS, and multiple analytics and tracking tools such as Google Tag Manager, Microsoft Clarity, Hotjar, and Facebook Pixel. It features responsive design optimized for mobile devices and includes accessibility considerations. The site uses a cookie consent management system compliant with GDPR, allowing users to control their privacy preferences. From a security perspective, the site enforces HTTPS and integrates cookie consent mechanisms, but could improve by adding explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain is registered through a reputable Czech registrar, consistent with the website's official nature. Overall, Pardubice.eu demonstrates a strong digital presence with excellent content quality, good technical implementation, and solid privacy compliance. It is a trustworthy and professional government portal with no signs of malicious activity or content safety concerns.

A

Auto Trutnov s.r.o.

autotrutnov.cz

44

Auto Trutnov s.r.o. is a small automotive dealership based in the Czech Republic, specializing in authorized sales and servicing of Ford, Nissan, and Piaggio vehicles, along with vehicle conversion services. The company has a long-standing presence since 2004, supported by domain registration data. The website serves as a basic informational portal linking to brand-specific subdomains and highlighting key services. Technically, the site uses standard web technologies including Google Analytics for visitor tracking but lacks advanced frameworks or CMS platforms. Security posture is moderate with HTTPS implied but no visible security headers or privacy policies, indicating room for improvement in compliance and security transparency. No contact information or privacy-related policies are present on the homepage, which impacts user trust and regulatory compliance. Overall, the website is accessible, safe, and functional but would benefit from enhanced privacy, security, and contact transparency to improve user confidence and compliance.

E

Erlebnis Akademie AG

treetop-walks.com

46

The website treetop-walks.com represents Erlebnis Akademie AG, a medium-sized German company specializing in treetop walks and nature experience paths. The business targets general audiences interested in outdoor leisure activities and operates primarily in the hospitality sector. The website is built on WordPress with Yoast SEO optimization and hosted by Hetzner Online GmbH, a reputable German hosting provider. The technical infrastructure is modern and moderately performant with good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is minimal with no explicit privacy or cookie policies detected. The website uses common analytics and tracking services including Microsoft Clarity, Google Tag Manager, and Facebook Pixel. Overall, the site is professional and trustworthy but could improve in privacy transparency and security hardening.

Р

Регіональна Газова Компанія

rgc.ua

57

Регіональна Газова Компанія (РГК) є провідним українським підприємством у сфері газорозподілу, виробництва газового обладнання та інжинірингових послуг. Компанія обслуговує значну частину газової інфраструктури України, пропонуючи інноваційні рішення, включаючи проекти з чистої енергії, такі як водень та біометан. РГК має сильну позицію на ринку, підтримує кілька дочірніх сервісних доменів і активно комунікує через соціальні мережі. Технічно сайт використовує сучасні веб-технології, включаючи Google Analytics та Tag Manager, має адаптивний дизайн і базові SEO та доступності. З точки зору безпеки, сайт використовує HTTPS, але не має розширених захисних заголовків або публічних політик безпеки. Відсутні контактні дані для інцидентів безпеки. Загалом, сайт є професійним, безпечним і орієнтованим на бізнес аудиторію.

The website www.psgaz.pl is currently inaccessible to direct content analysis due to a Cloudflare Turnstile CAPTCHA challenge page that blocks automated and direct access. No meaningful business content, contact information, or policies are publicly visible. The WHOIS data for the domain is unavailable, indicating privacy protection or lack of public registration data. This limits the ability to verify the legitimacy or business details of the domain. Technically, the site uses Cloudflare services for security and performance but lacks visible security headers or metadata. Overall, the site appears to be either under protection, newly registered, or inactive with minimal public presence.

The website www.nationalgas.com is currently inaccessible due to a Cloudflare Turnstile security challenge page, which blocks access to any meaningful content or business information. The domain WHOIS data is unavailable or the domain appears unregistered, raising significant legitimacy concerns. Without access to the actual website content, no business description, contact information, or security policies can be analyzed. The technical infrastructure relies on Cloudflare for security and bot mitigation, but no further technology stack or CMS details are discernible. The security posture cannot be properly assessed due to the lack of accessible content and headers. Overall, the site is effectively blocked from analysis, resulting in a low trust and security score.

The website tsoua.com is currently inaccessible due to a Cloudflare Turnstile human verification challenge page that blocks direct access to any business content. The domain was registered in 2019 via PublicDomainRegistry.com without privacy protection, indicating some transparency in ownership, but no registrant details are publicly available. Due to the WAF challenge, no privacy policies, contact information, or business descriptions are accessible, preventing a full assessment of the company's operations or market position. The technical infrastructure relies on Cloudflare for security and performance, but no further technology stack details are available. Security posture cannot be fully evaluated given the lack of accessible content and headers. Overall, the site appears to be in a protective mode, possibly to mitigate automated threats or abuse, but this limits external analysis and trust evaluation.