Security Directory

1pujcky.cz is a Czech-language affiliate marketing website specializing in non-bank loans, loans without credit registry checks, and related financial products such as insurance, savings, and mortgages. The site targets individuals who may have difficulty obtaining loans from traditional banks, offering them alternative financial solutions through affiliate links. The domain is well-established since 2009, indicating a mature presence in the Czech financial affiliate market. Technically, the site uses standard web technologies including Google Fonts, Adsense, and a GDPR-compliant consent management platform. However, it lacks explicit privacy policies, terms of service, and direct contact information, which are critical for trust and compliance. Security practices are basic, with no visible security headers or incident response information. Overall, the site functions as an informational and lead generation platform with moderate technical and security maturity.

E

Endorphin Republic

endorphinrepublic.sk

57

Endorphin Republic is a Slovakia-based specialized e-commerce retailer offering premium sports equipment and apparel focused on cycling, skiing, running, outdoor, and lifestyle categories. The website demonstrates a solid market position with partnerships with well-known brands such as SCOTT, Dolomite, and Oakley. The platform provides a professional user experience with clear navigation, mobile optimization, and integrated live chat support. Technically, the site uses modern JavaScript frameworks and integrates multiple marketing and analytics tools including Google Analytics, Bing Ads, and Facebook Pixel. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers could be enhanced. No privacy policy or terms of service pages were detected, indicating room for compliance improvements. Overall, the website is trustworthy, safe, and professionally maintained, suitable for general audiences interested in sports retail.

M

Michal Rusina

michalrusina.sk

54

Michal Rusina's website is a personal portfolio and blog primarily focused on web development technologies such as WordPress, PHP, HTML, CSS, and JavaScript. The site targets developers and tech enthusiasts, providing content and showcasing skills. The domain is well-established since 2009 and hosted on a Slovak hosting provider with DNSSEC enabled, indicating a stable and legitimate presence. The website uses modern web technologies including service workers and Google Analytics for tracking visitor interactions. However, it lacks formal privacy, cookie, and terms of service policies, which are important for compliance and user trust. Security posture is decent with HTTPS and DNSSEC but could be improved by adding security headers and vulnerability disclosure information. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.

T

Taneční klub Tlučná

tktlucna.cz

41

Taneční klub Tlučná is a well-established dance club based in the Czech Republic, offering dance education and activities for children from 3 years old through adults. The club specializes in various dance styles including standard, Latin-American, Caribbean, and fitness dance, and actively participates in national and international competitions. The website provides comprehensive information about training schedules, events, and achievements, supported by multimedia content such as videos and photo galleries. Technically, the website is built with standard HTML and CSS, embedding YouTube videos for engagement, and is mobile-friendly with good SEO practices. However, the absence of WHOIS data and lack of explicit privacy and cookie policies indicate areas for improvement in transparency and compliance. Security posture is moderate with assumed HTTPS but missing security headers and vulnerability disclosures. Overall, the site reflects a credible and community-focused organization with room to enhance privacy and security measures.

G

Gauselmann Group

neverstopexploring.cz

55

MerkurXtip is an online gambling platform operating in the Czech Republic, offering a combination of online casino slot games and sports betting services. It is part of the established German Gauselmann Group and holds a valid Czech gambling license issued in 2022. The platform targets Czech-speaking adult users interested in regulated online gambling with a focus on slots and sports betting, including live betting and e-sports. The website provides detailed information on games, bonuses, payment methods, and customer support, reflecting a mature business model with a medium market presence. Technically, the website is built with standard web technologies (HTML5, CSS, JavaScript) and uses Cloudflare DNS services. It is mobile-optimized with responsive design but lacks explicit CMS or advanced frameworks. Performance is moderate with good SEO and accessibility features. Security practices include Bank ID verification for user identity and secure payment verification, but the site lacks visible security headers and published security policies. Security posture is adequate but could be improved by adding privacy and cookie policies, security headers, and incident response disclosures. The domain WHOIS data shows a suspicious future creation date inconsistent with the business founding date, which slightly reduces trust but does not negate legitimacy given the detailed content and licensing. Overall, the site is professional and trustworthy for its intended audience but needs improvements in privacy compliance and security transparency. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, enhancing security headers, publishing incident response and vulnerability disclosure information, and clarifying data protection officer contacts to improve compliance and user trust.

T

TRANSALPINUS s.r.o.

katadyn.cz

56

TRANSALPINUS s.r.o. operates the website bezpecnavoda.cz as a distributor of KATADYN water filtration and purification products. The company targets travelers, outdoor enthusiasts, humanitarian organizations, and military units by providing high-quality portable water filters, chemical disinfectants, UV purifiers, and desalination devices. The website reflects a professional retail business model with a focus on safe water solutions for travel and outdoor activities. The company is based in the Czech Republic and provides clear contact and company registration information, enhancing business credibility. Technically, the website is built on the Webnode CMS platform and hosted via AWS Cloudfront CDN, ensuring good performance and mobile optimization. It uses modern web technologies including JavaScript and CSS, and integrates Google Tag Manager for analytics. However, the site lacks visible privacy and cookie policies, security headers, and incident response information, which are areas for improvement in compliance and security posture. Security-wise, the site enforces HTTPS and does not expose sensitive data, but the absence of security headers and vulnerability disclosure mechanisms limits its security maturity. The WHOIS data is unavailable, which reduces trust in domain registration transparency, though the website content and company information support legitimacy. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy compliance and security best practices. Strategically, the company should prioritize publishing comprehensive privacy and cookie policies, implement security headers, and provide clear incident response contacts. These steps will improve compliance with GDPR and enhance user trust. Additionally, publishing a security.txt file and improving accessibility features would further strengthen the website's security and usability profile.

C

Kempy Chorvatsko

chorvatskokaravany.cz

40

Kempy Chorvatsko is a small informational website focused on providing tourists, primarily from Czech Republic and Slovakia, with detailed information about camping sites and accommodation options in Croatia. The site offers a comprehensive list of campsites, travel tips, and weather information to assist visitors in planning their holidays. The business model is informational, targeting a niche market of camping enthusiasts and travelers interested in Croatian destinations. Technically, the website uses basic web technologies including XHTML 1.0 Transitional, CSS, JavaScript, and jQuery, with a simple design and moderate performance. Mobile optimization and accessibility are basic, and SEO practices are minimal but present. Security posture is weak due to lack of HTTPS information, absence of security headers, and missing privacy and cookie policies. No contact or incident response information is provided, and WHOIS data is unavailable, which raises concerns about domain legitimacy and transparency. Overall, the site is functional and content-rich but requires significant improvements in security, privacy compliance, and trust signals to enhance credibility and user confidence.

K

Kempy Chorvatsko

kempychorvatsko.cz

40

Kempy Chorvatsko is a Czech informational website focused on providing detailed listings and information about camping sites in Croatia. The site targets Czech and Slovak tourists interested in camping vacations, offering a comprehensive table of campsites by location and name. The business model appears to be informational with potential monetization through affiliate links and advertising partnerships with related Croatian accommodation sites. Technically, the site uses basic XHTML 1.0 Transitional markup, jQuery, and CSS, hosted on HostMonster with domain registration via REG-WEDOS. The site lacks modern security features such as HTTPS and security headers, and does not provide privacy or cookie policies, indicating compliance gaps. No contact information or incident response channels are provided, limiting user trust and support options. Overall, the site is functional with good content relevance but requires significant improvements in security and privacy compliance to meet modern standards.

The website www.korutany.org is a small-scale WordPress-based travel information portal focused on the Austrian region of Carinthia (Korutany). It provides content about vacation opportunities, accommodation, and local attractions, targeting tourists interested in winter and summer holidays in this region. The site leverages affiliate marketing for accommodation bookings and offers multilingual support via GTranslate. Technically, the site uses WordPress 6.8.2 with standard web technologies but lacks advanced performance and accessibility optimizations. Security posture is basic with HTTPS enabled but no advanced security headers or policies detected. The absence of privacy, cookie, and terms of service policies, along with missing contact information, reduces compliance and trustworthiness. WHOIS data is unavailable or malformed, limiting domain legitimacy verification. Overall, the site is functional for its niche but requires improvements in security, privacy compliance, and business transparency.

The website predpoved-pocasi.com is a Czech language weather forecast portal providing current and long-term weather predictions primarily for the Czech Republic. It offers weather information for cities such as Prague and Brno, integrates third-party weather widgets, and displays weather-related news. The business model relies on advertising revenue, mainly through Google Adsense. The site has been operational since 2009, indicating a stable presence in its niche market. Technically, the website uses standard web technologies including HTML, CSS, and JavaScript, with integration of Google Adsense and weatherwidget.io scripts. Hosting is provided via HostMonster as indicated by the nameservers. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. There is no CMS or modern web framework detected. From a security perspective, the site lacks DNSSEC, security headers, and serves some ad scripts over HTTP, which introduces mixed content risks. No privacy, cookie, or terms of service policies are present, indicating poor privacy compliance. No contact information or incident response channels are provided, limiting transparency and user trust. The domain is well aged and registered with a reputable registrar, supporting legitimacy. Overall, the website is functional and provides relevant weather content but requires improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user experience.

The website dovolenachorvatsko.org is a Czech language travel portal focused on providing information and listings for affordable private accommodation in Croatia. It targets tourists interested in Croatian regions and promotes cultural, historical, and natural attractions. The business operates as a small niche informational platform with a focus on vacation rentals from private owners. Technically, the site uses basic HTML, CSS, and JavaScript with jQuery 1.6.1 and the Nivo Slider plugin. It is hosted on HostMonster servers. The site lacks modern security practices such as HTTPS enforcement and security headers, and it does not provide privacy or cookie policies, which impacts compliance and user trust. Google Analytics is used for tracking without visible consent mechanisms. The domain is privacy protected but long-standing since 2011, consistent with the business type. Overall, the site is functional but basic in design and security, with room for improvement in privacy compliance and technical modernization.

S

SITA Slovenská tlačová agentúra

behame.sk

54

BEHAME.sk is a Slovak media portal specializing in running sports, providing news, event information, photo galleries, and video content. It is operated by SITA Slovenská tlačová agentúra, a reputable Slovak press agency, ensuring credible and consistent content for the Slovak running community. The website targets runners and sports enthusiasts primarily in Slovakia, offering a mix of news, health advice, and event calendars. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, and jQuery, with some legacy charset usage. The site is moderately optimized for performance and mobile devices, with good SEO practices and clear navigation. Security posture is adequate with HTTPS usage and cookie consent mechanisms, but lacks advanced security headers and explicit security policies. Privacy compliance is good with accessible privacy and cookie policies. No direct contact emails or phone numbers are found, which may limit direct user support. Overall, the site is trustworthy, professional, and safe for general audiences.

P

PhysioDOG

physiodog.cz

57

PhysioDOG is a specialized animal physiotherapy and rehabilitation center based in the Czech Republic, operating since 2008. The company is recognized as a pioneer in the field, led by an experienced founder with a strong professional team. Their services focus on neurological and orthopedic rehabilitation for small animals, including preventive care for sporting and elderly pets. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website is built on the Webnode CMS platform, leveraging AWS Cloudfront CDN for content delivery. It uses modern web technologies such as JavaScript and CSS, and is optimized for mobile devices with moderate performance. However, some technical improvements could be made in accessibility and SEO optimization. From a security perspective, the site enforces HTTPS but lacks several important security headers and formal security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a cookie consent mechanism present but no dedicated privacy or terms of service pages. WHOIS data is missing, which raises concerns about domain registration transparency. Overall, the website presents a trustworthy and professional business with room for improvement in security and compliance documentation. The lack of WHOIS data is a notable risk factor that should be addressed to enhance trustworthiness.

B

BIKE FUN International s.r.o.

bikefunint.com

51

BIKE FUN International s.r.o. is a Czech Republic-based bicycle manufacturer specializing in a wide range of bicycles including mountain, trekking, road, children's, and electric bikes. The company operates multiple well-known bicycle brands and holds certifications such as AEO, indicating a reputable position in the manufacturing and transportation sectors. The website reflects a professional business with clear branding and relevant content targeted at cycling enthusiasts and retail partners. Technically, the website uses standard web technologies including HTML, CSS, JavaScript, and jQuery, with Cloudflare DNS and HTTPS ensuring basic security and performance. Google Analytics is used for visitor tracking, although no explicit cookie or privacy policies are present, which is a compliance gap. Security posture is generally good with HTTPS and no visible vulnerabilities, but the absence of DNSSEC and security headers suggests room for improvement. Overall, the website is trustworthy, well-structured, and serves its business purpose effectively.

Les Deux Messieurs operates as a French bakery and café with physical locations in Munich and Wiesbaden, Germany. The business focuses on offering authentic French baked goods and café dining experiences, targeting customers who appreciate French culinary culture. The website is professionally designed, mobile-optimized, and includes strong accessibility features, enhancing user experience for diverse audiences. Technically, the site uses modern web technologies and HTTPS, ensuring secure communication. However, the absence of explicit privacy, cookie, and terms of service policies indicates gaps in compliance and transparency. Security posture is generally good, but could be improved by adding security headers and incident response contacts. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

N

NORDBEANS.CZ

nordbeans.cz

64

Nordbeans.cz is a Czech Republic-based specialty coffee roaster and retailer focused on providing high-quality coffee products sourced from organic farms and developed through long-term partnerships. The company targets both retail consumers and B2B partners such as cafes and restaurants. The website is professionally designed, mobile-optimized, and features rich content including product catalogs, educational materials, and a blog. Technically, the site uses modern web technologies including JavaScript frameworks, Google Tag Manager, and Sentry for error monitoring. Security posture is good with HTTPS enforced and security headers present, though explicit security and privacy policies are not prominently available. The WHOIS data is unavailable or privacy protected, which is common for commercial sites but limits domain trust verification. Overall, the site presents a trustworthy and professional digital presence with moderate tracking and cookie consent mechanisms in place.

UpDown Media, s.r.o. is a small Czech media company operating since 2009, specializing in outdoor and regional news internet portals such as Horydoly.cz, Desítka.cz, Koupání.cz, and NašeBrdy.cz. The company provides editorial content, advertising services, and custom content production for print and broadcast media. Their target audience includes outdoor enthusiasts and regional readers, with a business model focused on content publishing and advertising revenue. Technically, the website uses basic HTML, CSS, and JavaScript with an embedded RSS feed widget but lacks modern CMS or advanced frameworks. The site is not mobile optimized and shows basic SEO and accessibility features. Security posture is weak due to lack of HTTPS enforcement, missing security headers, and absence of privacy or cookie policies, which also impacts GDPR compliance. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional but requires significant improvements in security and privacy compliance to meet modern standards.

K

Krizovatkachuti.cz

krizovatkachuti.cz

58

Křižovatka chutí is a Czech language website dedicated to gourmet food and beverages, including wine, beer, distillates, coffee, restaurants, cooking, and reviews. It targets gourmet enthusiasts and food lovers, providing articles, recipes, and reviews. The business model appears to be content publishing supported by advertising and newsletter subscriptions. Technically, the site runs on WordPress with modern plugins such as Rank Math SEO and Jetpack, and integrates Google Analytics and AdSense for analytics and monetization. The site is mobile optimized and has good SEO practices. Security posture is decent with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and a privacy policy page. WHOIS data is unavailable, which reduces domain trustworthiness. Overall, the site is professional and functional but could improve privacy compliance and security transparency.

L

Leo Express Global a. s.

leoexpress.com

78

Leo Express is a transportation company specializing in train and bus ticket sales across Central Europe, offering travel to over 120 destinations. The website is professionally designed with a clear focus on user experience, mobile optimization, and accessibility. It leverages modern web technologies such as React and Next.js, ensuring a responsive and performant platform. Privacy compliance is well addressed with comprehensive privacy and cookie policies and an active consent mechanism. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not published. Overall, the website presents a trustworthy and professional front for its business operations.

Tomáš Kalina's website is a personal portfolio and blog primarily targeting a general audience interested in his work or content. The site is built on WordPress using a premium theme and hosted on a Czech hosting provider. The technical infrastructure is modern and includes HTTPS with a valid SSL certificate, but lacks advanced security headers and DNSSEC. Privacy compliance is minimal, with no privacy policy or terms of service found, though a cookie consent mechanism is present. Contact information is limited to a contact form without explicit email or phone details. Overall, the site is professionally designed with good user experience but could improve in privacy and security transparency.

N

NetPro systems, s.r.o.

lezec.cz

56

Lezec.cz is a well-established Czech climbing and mountaineering portal operated by NetPro systems, s.r.o., founded in 2000. It serves a niche community of climbers and outdoor enthusiasts with news, guides, rankings, and community forums. The site integrates e-commerce through a partner shop and monetizes via advertising networks. Technically, the site uses traditional web technologies with Google Analytics and ad services, but employs a legacy charset and lacks some modern security headers. Security posture is moderate with HTTPS enforced but could be improved with additional headers and updated scripts. Privacy compliance is basic with cookie consent implemented and a privacy policy available, but lacks explicit terms of service or security policies. Overall, the site is legitimate, content-rich, and trusted within its community but would benefit from modernization and enhanced security practices.

The domain nervoussummer.com currently serves a 404 Not Found error page and is used by Admiral (getadmiral.com) to provide copyright access control and privacy consent services for digital publishers. The website itself contains no substantive content, no privacy or cookie policies, and no contact information, limiting its utility as a standalone business site. The technical infrastructure is hosted on Google Cloud Platform with basic HTML, CSS, and JavaScript content, and no advanced frameworks or CMS detected. Security practices are described in the page content, including HTTPS enforcement and certificate rotation, but no explicit security headers or vulnerability disclosures are present. The domain registration is stable and consistent with a reputable registrar, but DNSSEC is not enabled. Overall, the site is minimal and primarily functions as a service endpoint rather than a customer-facing website.

O

Olomoucký kraj

olkraj.cz

49

Olomoucký kraj operates as the official regional government portal for the Olomouc region in the Czech Republic, providing comprehensive information and services related to public administration, tourism, business, media, and social services. The website targets residents, businesses, tourists, and public officials, offering multi-language support and accessibility features to ensure inclusivity. The portal serves as a central hub for regional governance and community engagement, reflecting a strong market position as a trusted government resource. From a technical perspective, the website employs modern web technologies including Bootstrap for responsive design, SVG icons for scalable graphics, and Google Tag Manager for analytics and tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. However, the absence of explicit CMS identification and hosting details suggests potential areas for infrastructure transparency improvement. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, indicating attention to privacy compliance. Nonetheless, the lack of visible security headers, security policy documentation, and vulnerability disclosure mechanisms highlights opportunities for enhancing the security posture. The missing WHOIS data raises concerns about domain registration transparency, though the website's official branding and external references strongly support its legitimacy. Overall, Olomoucký kraj presents a professional and trustworthy government portal with solid content and technical foundations. Strategic enhancements in security documentation, domain registration transparency, and security header implementation would further strengthen its risk profile and user trust.

The domain truculentrate.com currently serves as a service domain hosted by Admiral, a company providing copyright access control and privacy consent management services for digital publishers. The website content is a 404 Not Found error page, indicating no active business-facing website content is available at this URL. The domain is hosted on Google Cloud Platform and uses AWS DNS servers, reflecting a modern cloud infrastructure. Security practices include HTTPS enforcement, frequent certificate rotation, and continuous content scanning, with no executable files hosted. However, the lack of visible security headers and absence of a cookie consent mechanism limit the security and privacy posture. The domain registration is transparent and consistent with the service use case, registered via NameCheap without privacy protection.

The domain harborcaption.com currently serves a 404 Not Found error page with no active website content. The domain is registered with NameCheap, Inc. since January 2023 and is hosted on Google Cloud Platform. The page content indicates that the domain is used by Admiral (getadmiral.com) to provide copyright access control and privacy consent services for digital publishers. However, no active business website or detailed company information is present. The technical infrastructure is basic, relying on standard web technologies and cloud hosting. Security practices described in the page content are industry standard, including HTTPS enforcement and no hosting of executable files, but these cannot be externally verified. The absence of privacy, cookie, or terms of service policies, as well as lack of contact information, reduces the site's trustworthiness and compliance posture. Overall, the site is currently non-functional as a business website and provides minimal information.

The domain salmonfin.com currently serves a 404 Not Found error page with minimal content describing the role of Admiral (getadmiral.com) as a service provider for copyright access control and privacy consent management for digital publishers. The website lacks substantive business content, contact information, or interactive elements, indicating it is either inactive or a placeholder domain. The technical infrastructure is hosted on Google Cloud Platform with DNS managed by AWS DNS servers, but DNSSEC is not enabled. Security practices described are industry standard for the service provider, including encryption and certificate rotation, but no explicit security headers or advanced configurations are visible. Overall, the site has a low content and business credibility score due to lack of information and accessibility. The domain registration is consistent and legitimate, registered since 2019 with NameCheap, Inc. No signs of malicious activity or adult content are present.

I

IAS | Login

integralplatform.com

58

The website reporting.integralplatform.com is a single-page application serving as a login portal for a unified reporting platform branded as IAS. The platform appears to target business users requiring access to actionable data analytics to drive superior results. The site content is minimal, focused on authentication, with no public-facing informational pages such as privacy policy, cookie policy, or contact details. The technical infrastructure is modern, leveraging React for the SPA, with CSS and JavaScript assets loaded asynchronously. However, no explicit hosting or CMS information is available. Security measures include a CSRF token in the login form, but no security headers or HTTPS enforcement details were provided. The WHOIS lookup for the subdomain failed, indicating either a lack of public registration data or that the subdomain is part of a larger domain not analyzed here. Overall, the site demonstrates basic professionalism but lacks transparency in privacy and contact information.

Č

Český Gastronomický Institut servisní s. r. o.

ceskygastronomickyinstitut.cz

62

The website www.ceskygastronomickyinstitut.cz represents the Czech Gastronomic Institute's organization and promotion of the prestigious Bocuse d’Or Czech culinary competition. It serves as a platform to showcase top Czech chefs competing for a place in European and world finals, providing event information, ticket sales, media coverage, and partner details. The site targets culinary professionals, gastronomy enthusiasts, and event attendees, positioning itself as a key national player in the hospitality and gastronomy sector. Technically, the website is built using modern web technologies including React and Next.js, ensuring fast performance and excellent mobile optimization. The site employs HTTPS and includes cookie consent mechanisms, although it lacks some security headers and a comprehensive privacy policy. Tracking technologies such as Google Analytics and Facebook Pixel are present but consent is initially denied, reflecting a basic privacy compliance stance. From a security perspective, the site benefits from HTTPS and cookie consent but would improve by adding security headers and publishing clear privacy and incident response policies. The absence of WHOIS data reduces domain trustworthiness, though the professional content and reputable partnerships support legitimacy. Overall, the site is well-designed and functional, with moderate risk due to incomplete transparency and security best practices. Strategic recommendations include enhancing privacy disclosures, implementing security headers, publishing incident response contacts, and improving WHOIS transparency to bolster trust and compliance.

C

CrimeRadar

uscrimeradar.com

61

CrimeRadar is an AI-powered platform providing real-time public safety and crime alerts across the United States. The service targets general users interested in timely crime information, offering mobile applications on both Apple Store and Google Play. The website presents a professional design with clear navigation and regularly updated content, positioning itself as a comprehensive crime alert solution covering all 50 states and over 10,000 cities. However, the domain's very recent registration date in 2025 raises questions about the maturity and longevity of the business. Technically, the site uses modern frameworks such as React and Next.js, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, which could be improved. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific features detected. Contact information is limited to an email address with no phone or physical address provided. Overall, the platform appears functional and trustworthy but would benefit from enhanced security and privacy practices to increase user confidence.

R

Redakce časopisu TREKING

treking.cz

63

Treking.cz is a Czech-language online portal dedicated to hiking, trekking, and outdoor activities, offering a wide range of articles, guides, event calendars, and accommodation listings. It serves a niche audience of outdoor enthusiasts primarily in the Czech Republic and Slovakia. The website is content-rich, regularly updated, and maintains partnerships with other reputable outdoor and travel websites. Technically, it uses common web technologies including Google Fonts, Adsense, and Tag Manager, with basic mobile optimization and SEO practices in place. Security posture is moderate with HTTPS usage and a consent management platform, but lacks visible security headers and detailed security policies. The absence of WHOIS data limits domain trust verification, but the website content and structure indicate a legitimate and professional operation. Overall, the site scores well in content quality and privacy compliance but could improve in security best practices and domain transparency.

P

Projektová kancelář Kraje Vysočina, příspěvková organizace

platbyvysocina.cz

63

The website www.platbyvysocina.cz serves as the official online payment portal for the Kraj Vysočina region in the Czech Republic. It enables residents to conveniently pay various local fees such as municipal charges, school fees, and sports club memberships online, replacing traditional cash and slip payments. The portal is positioned as a regional government service, supported by the Projektová kancelář Kraje Vysočina, with clear contact information and trusted payment methods including Visa and Mastercard. Technically, the site employs modern web technologies with responsive design and structured navigation, though it lacks some advanced security headers and cookie consent mechanisms. The absence of WHOIS data limits domain registration transparency, but the overall legitimacy is supported by consistent branding and government affiliation. Security posture is good with HTTPS enforced and secure form handling, but improvements in security policy publication and vulnerability disclosure are recommended.

S

Eshop se šperky z polodrahokamů a minerálů | Šperkyakameny.cz

sperkyakameny.cz

54

The website sperkyakameny.cz operates as an e-commerce platform specializing in the sale of jewelry made from semi-precious stones, minerals, and pearls. It targets consumers interested in unique and quality jewelry pieces, offering a wide range of products categorized by stone types and jewelry styles. The site is well-structured and provides comprehensive product information, care instructions, and customer support channels, positioning itself as a niche retailer in the Czech market. Technically, the website utilizes a proprietary e-commerce platform (eshop-rychle.cz) and integrates modern analytics and marketing tools such as Google Tag Manager, Matomo, and Sklik retargeting. The site is served over HTTPS, ensuring encrypted communications, and is optimized for mobile devices with good navigation clarity. However, it lacks some security best practices such as security headers and a visible cookie consent mechanism. From a security perspective, the site demonstrates a moderate posture with HTTPS enabled and consent settings restricting analytics and ad storage by default. The absence of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. No critical vulnerabilities or exposed sensitive data were detected in the provided content. Privacy policies and terms of service are present and appear comprehensive, supporting GDPR compliance. Overall, the website presents a professional and trustworthy front for its business, but the lack of domain registration data and some missing security headers suggest areas for improvement. Strategic recommendations include enhancing security headers, implementing a cookie consent banner, and verifying domain registration details to bolster trust and compliance.

The domain bidpapers.com currently serves as a 404 Not Found error page and is utilized by Admiral, a service provider specializing in copyright access control and privacy consent management for digital publishers. The domain is registered with NameCheap and hosted on Google Cloud Platform, indicating a modern infrastructure. However, the website itself lacks substantive content, contact information, or business details, limiting its utility as a public-facing site. Security practices described in the embedded text indicate adherence to industry standards such as HTTPS enforcement and frequent certificate rotation, but no advanced security frameworks or certifications are publicly documented. Overall, the site is legitimate but functions primarily as a service endpoint rather than a traditional website.

A

AOL

aol.com

74

The analyzed website is a consent management page for AOL, which is part of the Yahoo family of brands. It provides users with options to accept, reject, or manage privacy settings related to cookies and personal data usage. The page is well-branded, consistent with AOL and Yahoo corporate identity, and links to comprehensive privacy and cookie policies hosted on legal.yahoo.com. The business operates within the technology and media sectors, focusing on digital content and advertising services. The website targets general internet users and employs standard consent frameworks aligned with GDPR requirements. From a technical perspective, the site uses modern web technologies including JavaScript and CSS, with a moderate performance profile and good mobile optimization. However, explicit security headers are not detected, and no detailed security or incident response policies are linked, indicating room for improvement in security posture transparency. The site uses CSRF tokens in forms, indicating some security best practices. Analytics and tracking are implemented via Yahoo Rapid and IAB Transparency & Consent Framework partners, with extensive user tracking but with clear consent mechanisms. Security-wise, the site is served over HTTPS (implied by domain and scripts), but explicit security headers are not visible in the provided data. No vulnerabilities or exposed sensitive data were detected. The WHOIS data for the subdomain consent.yahoo.com is not separately registered, which is expected for a subdomain of a major brand. The domain is legitimate and consistent with the business identity. Overall, the website is professional, compliant with privacy regulations, and trustworthy. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and improving accessibility and SEO features to strengthen the site's security posture and user trust.

S

STAVOS Engineering, s.r.o.

stavosengineering.cz

50

STAVOS Engineering, s.r.o. is a Brno-based engineering company specializing in construction and development projects, operating as part of the STAVOS Brno, a.s. holding. The company offers a range of services including design, client collaboration, construction supervision, and infrastructure development, targeting clients in the real estate and construction sectors within the Czech Republic. The website presents a professional image with clear branding and relevant content tailored to its audience. Technically, the site is built on the Webnode CMS platform, leveraging Amazon Cloudfront CDN for hosting and Google Tag Manager for analytics. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is solid with HTTPS enforced, though additional security headers could enhance protection. WHOIS data is not publicly available, indicating privacy protection, which is typical for businesses of this size and type. Overall, the website reflects a legitimate and credible business with moderate digital maturity and compliance.

M

Městský úřad Jemnice

mesto-jemnice.cz

51

The website mesto-jemnice.cz serves as the official online presence for the town of Jemnice in the Czech Republic. It provides comprehensive municipal information including news, public documents, event calendars, and contact details for local government offices. The site targets residents, visitors, and stakeholders interested in local governance and community services. The business model is that of a government entity providing public services and information. The website is well-branded and consistent with its municipal identity, offering good content quality and trust indicators such as official contact information and document archives. Technically, the site uses the vismo CMS platform with standard web technologies including HTML5, CSS, JavaScript, and integrates Google services such as reCAPTCHA and Translate. The site is mobile optimized and offers basic accessibility features. Performance is moderate with room for improvement in SEO and security headers. The hosting provider is not explicitly identified. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect its contact form from spam. However, it lacks explicit security headers which could enhance protection against common web vulnerabilities. Privacy policies and cookie usage statements are present but lack an active consent mechanism, which may be a compliance gap under GDPR. No incident response or vulnerability disclosure information is provided. Overall, the website is a trustworthy and professional municipal portal with a solid foundation but could benefit from enhanced security practices and privacy compliance measures. The domain registration data supports the legitimacy and long-standing presence of the site. Strategic recommendations include implementing security headers, improving cookie consent mechanisms, and publishing security policies to strengthen user trust and regulatory compliance.

Č

Česká pošta

postsignum.cz

60

PostSignum is an electronic certification authority service operated by Česká pošta, providing qualified and commercial digital certificates, qualified time stamps, and secure key solutions primarily for Czech public administration, businesses, entrepreneurs, and individuals. The website is professionally designed with clear navigation and offers multiple services including online certificate issuance and customer portals. The technical infrastructure relies on standard web technologies such as jQuery and Google Translate widgets, with a CMS from Macron Software. Security posture is moderate with HTTPS usage but lacks explicit security headers and cookie consent mechanisms. WHOIS data is unavailable, which slightly impacts trust but the strong branding and government affiliation mitigate concerns. Overall, the website is a credible and professional government service platform.

M

Město Jaroměřice nad Rokytnou

jaromericenr.cz

50

The website jaromericenr.cz serves as the official online presence for the municipal government of Jaroměřice nad Rokytnou, Czech Republic. It provides residents and visitors with essential information including news updates, event calendars, contact details, and public service announcements. The site targets local citizens, tourists, and businesses, offering a centralized platform for municipal communication and services. The business model is typical for a government entity, focusing on transparency and community engagement rather than commercial activities. Technically, the website employs a traditional HTML/CSS/JavaScript stack powered by the vismo CMS platform. It integrates Google services such as Tag Manager, Analytics, reCAPTCHA, and Translate widgets to enhance functionality and user experience. The site is hosted by REG-ZONER, a Czech registrar and hosting provider, and uses HTTPS to secure communications. Mobile optimization and accessibility are basic but functional, with room for improvement in accessibility compliance and performance tuning. From a security perspective, the site demonstrates good baseline practices including HTTPS enforcement, use of reCAPTCHA on forms, and a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is a trustworthy and professional municipal portal with solid business credibility and moderate technical sophistication. Strategic improvements in security policy publication, accessibility, and technical modernization would further strengthen its posture and user trust.

SIA Sertifikācijas centrs is a well-established Latvian certification institution founded in 2012, accredited by the Latvian National Accreditation Bureau and notified in EU institutions. The company specializes in product, personnel, and management system certifications, serving a broad regional market including Latvia and neighboring countries. Their website reflects a professional business presence with clear service descriptions and contact information. Technically, the site uses standard web technologies such as HTML, CSS, and jQuery, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website and WHOIS data indicate a legitimate and credible business with room for improvement in security and privacy practices.

The website vilemwalter.cz is a small, niche informational site focused on historical and cultural content related to the city of Brno and the Moravia region in the Czech Republic. It offers resources such as historical sacral architecture, old maps, photographs, and directories, along with some sales of books and exlibris. The site appears to be a personal or hobby project, founded in 2004, with a modest but relevant content offering for enthusiasts and researchers interested in local history. From a technical perspective, the website is built using basic HTML, CSS, and JavaScript without modern frameworks or CMS platforms. The site lacks mobile optimization and advanced accessibility features, and performance is moderate. There is no evidence of HTTPS usage or security headers, which indicates a weak security posture. No privacy or cookie policies are present, and no analytics or tracking technologies are detected, suggesting minimal user data collection. Security evaluation reveals significant gaps, including the absence of HTTPS, security headers, and formal privacy compliance. The site does not provide incident response contacts or security policies. However, no vulnerabilities or malicious content were detected. The domain registration is consistent with the website's age and content, registered since 2004 with no privacy protection, supporting legitimacy. Overall, the site is safe and suitable for general audiences but requires improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user experience.

The website autoplay.pl currently displays a minimal maintenance page with no substantive content, metadata, or user interaction elements. The domain is registered since 2005 with OVH SAS, indicating a stable and legitimate registration history. However, the website lacks critical elements such as privacy policies, cookie consent mechanisms, contact information, and security headers, which limits its operational maturity and trustworthiness. The technical infrastructure appears basic, with only a single CSS stylesheet linked and no visible scripts or analytics tools. Security posture is weak due to the absence of HTTPS confirmation and security headers, although no explicit vulnerabilities were detected from the provided data. Overall, the site is in a placeholder state, limiting its business and security evaluation.

n2eyes Agencja Interaktywna is a small interactive web agency based in Gniezno, Poland, specializing in creating unique websites. Their market position is that of a local service provider with a social media presence on Facebook, where they engage with a modest audience. The business model focuses on providing web design and interactive website creation services to businesses and individuals. Technically, the company leverages the Facebook platform for its online presence, utilizing modern web technologies such as React and JavaScript, with hosting and infrastructure managed by Facebook. The page is mobile optimized and performs well, though SEO is basic due to platform constraints. Security posture benefits from Facebook's robust HTTPS and platform security, with no direct vulnerabilities observed on the page. However, the absence of privacy, cookie, and terms of service policies on the page indicates a gap in compliance and transparency. Overall, the risk is low given the platform's protections, but the company should consider linking or publishing these policies to enhance trust and compliance.

O

Oblastní muzeum v Lounech

archeoskanzenbrezno.cz

57

Archeoskanzen Březno is an archaeological open-air museum affiliated with the regional museum in Louny, Czech Republic. It offers educational programs, prehistoric-themed events, and summer camps aimed at students and adults interested in archaeology and cultural heritage. The website provides detailed event calendars and program descriptions, targeting a general audience with an interest in education and culture. Technically, the site is built on the Webnode CMS platform, hosted via AWS Cloudfront CDN, and employs Google Tag Manager for analytics. The site is mobile-optimized and presents a clear navigation structure with good content quality. Security-wise, the site uses HTTPS with a good SSL configuration but lacks important security headers and privacy/cookie policies, which impacts compliance and security posture. WHOIS data is unavailable, likely due to privacy protection, which is common for small cultural institutions. Overall, the site is legitimate and trustworthy but would benefit from enhanced security and privacy compliance measures.

The website brno1645.cz is an educational and cultural project presenting virtual 3D models of the city of Brno as it appeared during the 1645 Swedish siege. The project is small-scale and niche, targeting history enthusiasts and the general public interested in historical reconstructions. The site offers downloadable models for use with Google Earth and provides historical context and updates. The business model is non-commercial, focusing on cultural heritage dissemination. Technically, the website is simple, built with basic HTML and CSS without modern frameworks or CMS. It lacks advanced technical features such as responsive design, accessibility enhancements, or SEO optimizations. No analytics or tracking scripts are present, indicating minimal digital maturity. Performance is moderate given the static nature of the content. From a security perspective, the site lacks HTTPS enforcement and security headers, which lowers its security posture. There are no privacy or cookie policies, and no incident response or vulnerability disclosure information is provided. Contact information is limited to a single email address. No forms or user input mechanisms are present, reducing attack surface but also limiting user engagement. Overall, the website is safe and trustworthy for its intended educational purpose but would benefit from improvements in security, privacy compliance, and technical modernization to enhance user trust and protection.

P

PREVENT s.r.o.

eskoleni.net

62

The website https://eskoleni.net/user/ represents an online training platform operated by PREVENT s.r.o., a Czech company specializing in online education, consulting, auditing, and certification services. The platform targets users seeking professional online training and certification, positioning itself as a niche educational service provider since 2020. The business model combines B2B and B2C elements, focusing on delivering contractual educational services and related consulting. The website content is primarily in Czech and includes a secure login form for users, with a comprehensive GDPR-compliant privacy policy presented in a modal dialog.

V

Vinaři Velké Němčice

nocsklepu.cz

54

The website www.sklepyvelkenemcice.cz serves as a promotional platform for the annual wine cellar open days event in Velké Němčice, a South Moravian village in the Czech Republic. It targets wine enthusiasts and tourists interested in local wine tasting experiences. The site provides event information, links to local partners, and social media channels but does not operate as an e-commerce platform. The business model focuses on community engagement and event promotion for local winemakers. Technically, the website is built on the Webnode CMS platform, leveraging Amazon Cloudfront CDN for static content delivery. It uses modern web technologies including JavaScript and CSS, and is mobile-optimized with a responsive design. Performance is moderate, and SEO is basic but functional. The site includes a cookie consent banner with advanced settings, indicating some level of privacy awareness. From a security perspective, the site enforces HTTPS and uses Google Tag Manager for analytics. However, it lacks important security headers and does not provide a privacy policy or terms of service, which are critical for GDPR compliance. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. WHOIS data for the domain is unavailable, which raises concerns about domain legitimacy verification. Overall, the website is functional and serves its purpose as an event information portal but requires improvements in privacy compliance, security best practices, and transparency to enhance trustworthiness and regulatory adherence.

V

Vinaři Velké Němčice

sklepyvelkenemcice.cz

53

The website www.sklepyvelkenemcice.cz serves as a promotional platform for the traditional wine tasting event 'Otevřené sklepy' held in Velké Němčice, Czech Republic. It targets wine enthusiasts and tourists interested in Moravian wine culture, providing event details, participating winemakers, accommodation, and transportation information. The business operates on a local scale, focusing on hospitality and cultural tourism with a history of nearly 20 years. Technically, the site is built on the Webnode CMS platform, hosted on AWS Cloudfront, and employs modern web technologies including JavaScript and CSS. The site is mobile-optimized and performs moderately well, with good SEO practices and basic accessibility features. Security-wise, the site uses HTTPS with valid SSL certificates and includes a cookie consent mechanism with advanced user controls, reflecting some privacy awareness. However, the absence of a published privacy policy, terms of service, and contact information reduces overall trust and compliance posture. WHOIS data is unavailable, which raises concerns about domain registration transparency. Overall, the website is functional and professional but would benefit from enhanced privacy disclosures and contact transparency to improve trust and compliance.

The website povis.cz serves as a flood information system primarily targeting governmental and water management entities in the Czech Republic. The domain has been registered since 2007 and is hosted on Czech infrastructure, indicating a stable and legitimate presence. However, the website content is minimal, consisting mainly of a redirect page with basic metadata and no visible interactive content or detailed business information. Technically, the site uses basic HTML and CSS without modern frameworks or CMS, and lacks mobile optimization and accessibility features. Security posture is weak due to absence of HTTPS enforcement and security headers, and no privacy or cookie policies are present, which raises compliance concerns. Overall, the site appears functional but outdated and lacking in user engagement and security best practices.

The website represents a small local school cafeteria service in Velké Němčice, Czech Republic, providing meals primarily to children attending local schools and kindergartens, as well as employees and external diners. The business has a long history dating back to 1957, emphasizing nutritious and varied meals. The website content is basic but informative, focusing on history, current operations, pricing, and contact links. Technical infrastructure is simple, relying on basic HTML, CSS, and JavaScript without modern CMS or advanced frameworks. Security posture is weak due to lack of visible HTTPS enforcement and security headers, and no explicit contact information or incident response details are provided. Privacy compliance is partially addressed with a privacy policy and terms of service pages, but cookie consent mechanisms are absent. Overall, the site is safe and appropriate for general audiences but would benefit from technical and security improvements.

The website 'Orel jednota Velké Němčice' serves as an online presence for a local sports and community organization based in Velké Němčice, Czech Republic. It primarily focuses on promoting sports activities, community events, and cultural engagement for local residents and sports enthusiasts. The site content is basic and primarily informational, with limited interactive features or advanced technical implementations. The business model is non-profit and community-oriented, targeting local audiences. From a technical perspective, the website uses standard HTML, CSS, and JavaScript, including Google Analytics for visitor tracking. There is no evidence of a modern CMS or advanced frameworks. The site lacks visible HTTPS enforcement and security headers, which impacts its security posture negatively. Mobile optimization and accessibility are basic, and SEO practices are minimal. Security-wise, the site shows several weaknesses: absence of HTTPS, no privacy or cookie policies, no contact information for security or incident response, and no visible security best practices. The WHOIS data is missing, which raises concerns about domain legitimacy and registration status. Overall, the security posture is weak, with critical recommendations needed to improve trust and compliance. The overall risk assessment indicates a low to moderate risk primarily due to missing security controls and lack of transparency in domain registration. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, adding contact information, and improving security headers and compliance measures.