Security Directory

F

FTV Prima

cnnprima.cz

58

FTV Prima operates the CNN Prima NEWS website, a leading Czech news media outlet providing trustworthy, fast, and clear news coverage for a broad audience. The site offers live TV streaming, news articles, video content, and a mobile app, targeting general audiences in the Czech Republic. The business is positioned as a major player in the Czech media industry with consistent branding and a comprehensive content offering. Technically, the website uses modern web technologies including JavaScript frameworks, Google Tag Manager, and a consent management platform (Didomi) to ensure GDPR compliance. The site is mobile-optimized, accessible, and integrates multiple trusted third-party services for analytics and advertising. Performance is moderate with good SEO and accessibility practices. Security posture is strong with HTTPS enforced, consent management, and no visible vulnerabilities or exposed sensitive data. However, explicit security headers should be verified and a security.txt file or incident response contact could enhance transparency. Privacy compliance is well addressed with clear cookie and privacy policies. Overall, the website presents a low risk profile with high professionalism and trustworthiness. The lack of WHOIS data is likely due to privacy protection and does not detract from the legitimacy of the site. Strategic recommendations include enhancing security header implementation, publishing vulnerability disclosure information, and maintaining regular audits of third-party scripts.

B

Balkan Pensiony

balkanpensiony.cz

58

Balkan Pensiony is a small hospitality business offering accommodation services in Bulgaria, specifically in the Bansko and Primorsko regions. The website presents two main pensions, Atika and Nadia, targeting tourists seeking winter and summer vacation stays. The business model focuses on direct accommodation bookings with a clear regional niche. The website is built on Joomla CMS with a moderate technical infrastructure including Bootstrap, jQuery, and social media integration via Facebook SDK. Google Analytics is used for visitor tracking. Security posture is basic with HTTPS enabled but lacking security headers and privacy policies, which are critical for GDPR compliance. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact phone number appear legitimate. Overall, the site is functional and professionally designed but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

C

Církev adventistů s.d.

hopetv.cz

42

HopeTV is a Czech Christian internet television channel affiliated with the international Hope Channel network and operated by the Církev adventistů s.d. It provides religious video content including sermons, live church services, and thematic programs targeting the Christian community and general public interested in faith-based media. The website features a professional design with good navigation and mobile optimization, supporting a positive user experience. Technically, it employs a mix of legacy and modern web technologies including jQuery, Nette AJAX, Video.js, and Google Analytics, but some components like jQuery are outdated and may pose security risks. Security posture is moderate with HTTPS enforced but lacking security headers and updated libraries. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. The WHOIS data is unavailable, limiting domain registration trust assessment, but the website's affiliation with known organizations supports legitimacy. Overall, the site is functional and trustworthy but requires improvements in security and privacy compliance.

I

International Judo Federation

judobase.org

60

The International Judo Federation (IJF) operates Judobase.org, a comprehensive and authoritative platform dedicated to judo sports enthusiasts worldwide. The website serves as the official source for competition results, athlete rankings, event calendars, and multimedia content related to IJF-sanctioned events. It targets a global audience including athletes, coaches, officials, and fans, positioning itself as a key resource in the judo sports ecosystem. The business model is primarily federation-driven, supported by sponsorships and partnerships, with a medium-sized operational scale and a history dating back to at least 2007. Technically, the website employs modern web technologies including JavaScript frameworks, Bootstrap for responsive design, and integrates third-party services such as Google Analytics and Facebook SDK for analytics and marketing. The site is well-optimized for performance and mobile devices, with a clean and professional design that facilitates excellent user experience and navigation. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a dedicated security policy page, which are areas for improvement. Privacy and cookie policies are present and appear comprehensive, indicating a reasonable level of GDPR compliance. Contact information is clearly provided with official domain emails, enhancing trustworthiness. Overall, Judobase.org demonstrates a strong security posture and high business credibility, with no signs of suspicious activity or content safety concerns. The lack of WHOIS data due to privacy protection is typical for such organizations and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, implementing explicit cookie consent mechanisms, and publishing a formal security incident response policy to further strengthen compliance and user trust.

D

Dôvera zdravotná poisťovňa, a.s.

dovera.sk

63

Dôvera zdravotná poisťovňa, a.s. is a leading public health insurance provider in Slovakia, offering comprehensive health insurance services to insured persons, payers, and healthcare providers. The company has a strong market position with a large customer base and provides various benefits, claims processing, and customer support services. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its target audience. Technically, the site uses a custom open-source framework (Cyclone3) and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook SDK, Exponea, and OneTrust for consent management. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance, although explicit security policy and incident response pages are not publicly available. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

Z

zariadim.sk

zariadim.sk

46

zariadim.sk is a Slovak online platform that connects customers with verified service providers across various sectors including home, garden, family, automotive, health, and business services. The platform features extensive user-generated content such as references and job postings, indicating a mature and active user base. The website integrates multiple subdomains targeting specific service categories, enhancing user experience and market segmentation. Technically, the site leverages modern web technologies including jQuery, Bootstrap, and the Nette PHP framework, supported by analytics and marketing tools like Google Analytics, Facebook Pixel, Hotjar, and Zopim chat. Security posture is adequate with HTTPS enforced, but could benefit from enhanced security headers and a formal vulnerability disclosure policy. Privacy compliance is partial, with a privacy policy and terms of service present but lacking cookie consent mechanisms. Overall, the site demonstrates a solid business presence with moderate risk and room for security and privacy improvements.

The American Institute of Physics (AIP) operates as a federation of physical science societies, providing a broad range of services including scientific publications, advocacy, research resources, and educational support. The organization targets physical scientists, researchers, students, and STEM professionals, positioning itself as a leading non-profit entity in the physical sciences domain. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content relevant to its audience. Technically, the site leverages modern web technologies such as WebComponents, MathJax for scientific rendering, and integrates third-party services like Google Tag Manager and Facebook SDK for analytics and marketing. The content management system identified is Brightspot CMS, supporting a structured and scalable content delivery. Performance and mobile optimization are good, with accessibility features implemented to a reasonable standard. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism compliant with GDPR. However, explicit security headers and a published security policy or incident response information are not evident, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy standards, supporting the legitimacy of the organization. The absence of WHOIS data due to privacy protection is typical for organizations of this nature and does not detract from the trust assessment. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and providing clear security contact channels.

Acaballado® z.s. is a small Czech non-profit organization dedicated to organizing cultural and historical events, primarily focusing on historical reenactments and promoting historical awareness. The website serves as a platform to inform visitors about upcoming events, archives, and organizational information. The organization targets a general audience interested in cultural heritage and history, particularly within the Czech Republic. The business model is centered on event organization and community engagement without commercial sales evident on the site. Technically, the website is built on WordPress 6.5.7, utilizing popular plugins such as Yoast SEO and libraries including jQuery, Bootstrap, and Slick Carousel. It integrates Google Tag Manager, Google Analytics, and Facebook SDK for analytics and marketing purposes. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site uses HTTPS with an excellent SSL configuration but lacks visible security headers and formal security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the website is legitimate and professionally maintained for a small non-profit. The lack of WHOIS data is consistent with privacy protection common in such organizations. Strategic improvements in privacy compliance and security headers would enhance trust and regulatory adherence.

S

Slovenský olympijský a športový výbor

olympic.sk

60

The Slovenský olympijský a športový výbor (Slovak Olympic and Sports Committee) operates a comprehensive and professionally designed website serving as the official portal for Slovak Olympic sports news, events, athlete information, and partner relations. The site targets Slovak sports enthusiasts, athletes, and partners, providing timely updates and resources related to Olympic activities. Technically, the website is built on Drupal 10, leveraging modern web technologies and integrating analytics and advertising tools responsibly. Security posture is strong with HTTPS, security headers, and secure form handling, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website demonstrates a high level of professionalism, trustworthiness, and digital maturity appropriate for a national sports governing body.

F

FC Zlín

fctrinityzlin.cz

44

FC Zlín is a Czech football club with an official website providing comprehensive information about the club, including news, match schedules, team rosters, ticket sales, fan merchandise, and partner details. The website targets football fans and the local community, offering engagement through social media and online services. The business model revolves around sports club promotion, fan engagement, and merchandising. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, OwlCarousel, Font Awesome, and Google Fonts. It integrates Google Analytics and Facebook SDK for tracking and marketing purposes. Hosting appears to be regional with Czech-based registrar and name servers. The site is mobile-optimized with good navigation and content structure, though SEO and accessibility could be improved. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies or vulnerability disclosures. No cookie consent mechanism was detected, indicating partial GDPR compliance. No contact phone numbers or detailed business registration data were found, limiting direct contact options. The WHOIS data is consistent and transparent, supporting legitimacy. Overall, the website is functional and professional with moderate security and privacy compliance. Strategic improvements in security headers, privacy notices, and contact transparency would enhance trust and compliance.

K

Kytary.cz

kytary.cz

74

Kytary.cz is a well-established Czech e-commerce retailer specializing in musical instruments and related accessories. Founded in 2000, it holds a strong market position in the Czech Republic with the largest stock availability and competitive pricing. The website offers a broad range of products including guitars, keyboards, drums, sound equipment, and lighting, targeting musicians and music enthusiasts primarily in the Czech market. Their business model focuses on online sales with value-added services such as extended warranties, free delivery over a threshold, and installment payment options. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Analytics, and Facebook SDK, hosted on Czech hosting providers. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS, security headers, and use of reCAPTCHA, though explicit security policies and incident response information are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements in security transparency and accessibility could be made.

V

Václav Nocar, AZnet

aznet.cz

45

Václav Nocar, operating under AZnet, is a small Czech Republic-based technology service provider specializing in web design, web hosting, SEO, IT consulting, and advertising services. The company targets local businesses and individuals primarily in Teplice and surrounding regions, offering a broad portfolio of digital and IT solutions including domain registration, programming, and promotional materials. The website reflects a modest but functional online presence with basic content and navigation, supported by integration with Facebook and Google Analytics for marketing and tracking purposes. Technically, the site uses legacy JavaScript libraries and standard web technologies but lacks modern security headers and explicit HTTPS enforcement details, indicating room for improvement in security posture. Privacy compliance is partially addressed through a cookie consent banner and a linked privacy PDF, though no comprehensive privacy or security policies are present. Contact information is clearly provided, enhancing business credibility. Overall, the site is accessible and safe, with no adult or questionable content detected.

K

Klub Pathfinder

pathfinder.sk

48

Klub Pathfinder is a Slovak non-profit organization dedicated to youth development through outdoor activities, Christian education, and community events. The website serves as a hub for event announcements, training programs, and resources for youth and their leaders. It maintains an active presence with regular content updates and social media engagement, primarily on Facebook. Technically, the site is built on WordPress with common plugins for galleries, forms, and cookie management, providing a moderate performance and good mobile experience. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and formal security policies. Privacy compliance is partial due to the absence of a privacy policy and terms of service pages. Overall, the site is trustworthy and professional, serving its target audience effectively.

Mikroregion Rožnovsko, s.o. is a small non-profit regional association based in the Czech Republic, focused on promoting local culture, tourism, and community development within the Rožnovsko microregion. The website serves as an information hub for residents and visitors, providing updates on cultural events, local governance, and regional projects. The organization leverages modern web technologies including Bootstrap, jQuery, and integrates Google Analytics and Facebook SDK for tracking and marketing purposes. The site is well-designed, mobile-optimized, and provides clear navigation and relevant content in Czech language. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and vulnerability disclosure mechanisms. Privacy compliance is basic, with no explicit privacy policy or terms of service found on the main page. Overall, the website is trustworthy and professionally maintained, reflecting the organization's legitimacy and community focus.

S

StaMat CZ, s.r.o.

stamatcz.cz

45

StaMat CZ, s.r.o. is a small Czech Republic based company specializing in earthworks, demolition, construction waste recycling, and heavy transport services primarily serving the Pardubice region and surrounding areas. The company operates a waste collection and recycling center and offers a range of construction-related services. The website is professionally designed with clear navigation and relevant content, supporting the company's local market positioning. Technically, the site uses standard web technologies including jQuery and Facebook SDK, with a cookie consent mechanism in place, indicating awareness of privacy compliance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. WHOIS data is unavailable, which slightly reduces domain trust but the website content and contact details support legitimacy. Overall, the site presents a trustworthy and functional online presence for a regional construction services provider.

T

Tesařské práce a pokrývačské práce Rác

tesarske-prace-prelouc.cz

44

Tesařské práce a pokrývačské práce Rác is a small Czech Republic-based company specializing in carpentry and roofing services, operating since 1994. The website presents a professional image with detailed service offerings including roof repairs, wooden constructions, pergolas, and chemical protection of roof structures. The business targets local and regional customers primarily in Pardubice and surrounding areas. The company emphasizes reliability, experience, and customer satisfaction. Technically, the website uses standard web technologies such as jQuery and Facebook SDK for social integration, along with Lightbox for image galleries. The site is accessible and moderately optimized for mobile devices, with good SEO practices evident in meta tags and structured data. However, there is room for improvement in accessibility and performance optimization. From a security perspective, the site uses HTTPS but lacks explicit security headers and does not provide visible incident response or vulnerability disclosure information. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration status, which impacts overall trustworthiness. Privacy compliance is partially addressed through a GDPR cookie policy page with consent mechanisms. Overall, the website is functional and professional but would benefit from enhanced security measures, clearer domain registration transparency, and expanded privacy and incident response disclosures to improve trust and compliance.

V

V+M Nádražní restaurant s.r.o.

hotelvmprelouc.cz

46

Hotel VM Přelouč is a small hospitality business offering accommodation and traditional Czech cuisine in Přelouč, Czech Republic. The website provides detailed information about room types, restaurant menus, and booking options, targeting tourists and local visitors. The business is positioned as a local hotel with a long history dating back to 1991, emphasizing comfort, affordability, and authentic dining experiences. Technically, the website uses modern web technologies including jQuery, Google Fonts, and CookieHub for cookie consent management, with HTTPS enabled ensuring secure communication. However, the absence of WHOIS data limits domain trust verification. Security posture is moderate with HTTPS and cookie consent implemented but lacking advanced security headers and explicit security policies. Privacy compliance is good with GDPR-aligned cookie consent and privacy information available. Overall, the website is professional, user-friendly, and trustworthy, but could improve in security and transparency aspects.

V

Vyklízecí a bourací práce Hradec Králové

vyklizeni-hradec-kralove.cz

10

Vyklízecí a bourací práce Hradec Králové is a small local service provider specializing in property clearance, waste removal, and demolition services within the Královéhradecký kraj region of the Czech Republic. The company offers a wide range of clearance services including residential, commercial, and industrial spaces, with a focus on professional and timely execution. Their market position is that of a trusted local business with clear contact information, customer reviews, and transparent pricing. Technically, the website uses common web technologies such as jQuery, Facebook SDK, and Google Fonts, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and cookie consent mechanisms, though lacks explicit security headers and advanced security policies. Privacy compliance is well addressed with GDPR consent and a dedicated cookie policy page. Overall, the website presents a professional and trustworthy image suitable for its target audience.

V

Vyklízení nemovitostí Pardubice, bourací práce

vyklizeni-pardubice-hutla.cz

54

Vyklízení nemovitostí Pardubice, bourací práce is a small local business specializing in property clearance, waste removal, and demolition services primarily serving the Pardubice region in the Czech Republic. The company offers a wide range of clearance services including residential, commercial, and specialized spaces such as schools and warehouses. Their market position is that of a trusted local service provider with a focus on professional and ecological waste disposal. The website is well-structured, with clear contact information and a customer review, supporting trust and credibility. Technically, the website uses standard web technologies including jQuery, Facebook SDK, and Google Fonts. It implements GDPR-compliant cookie consent mechanisms and structured data markup for SEO. The site is mobile-optimized and provides a good user experience, though some security headers appear to be missing. The WHOIS data is unavailable, which limits domain legitimacy verification, but the website content and contact details suggest a legitimate small business. From a security perspective, the site uses HTTPS and has basic form validation and cookie consent. However, there is no explicit security or incident response policy published, and no advanced security headers detected. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the security posture is moderate but could be improved with additional headers and policies. The overall risk assessment is low to moderate. The main concern is the lack of WHOIS data which reduces domain trustworthiness. Strategic recommendations include enhancing security headers, publishing a security/privacy policy, and maintaining regular audits of third-party scripts. The business appears credible and the website professional, making it a reliable service provider in its niche.

V

Vyklízení Hutla

vyklizeni-bytu-kolin.cz

24

Vyklízení Hutla is a small local service provider specializing in property clearing, demolition, and waste removal services in Kolín and surrounding areas in the Czech Republic. The company offers a range of services including clearing apartments, houses, commercial spaces, and ecological waste disposal. Their market position is that of a trusted local business with a focus on professionalism and environmental responsibility. The website provides clear contact information, pricing, and a customer review, supporting their credibility. Technically, the website uses common web technologies such as jQuery, Facebook SDK, and Lightbox scripts. It includes a cookie consent mechanism compliant with GDPR, indicating a moderate level of digital maturity. The site is mobile-optimized and has good SEO practices, although no CMS or hosting provider details are evident. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and has implemented cookie consent and form validation. However, no explicit security policies or incident response information is provided. The absence of WHOIS data reduces trust signals, but the website content and contact details appear consistent and legitimate. No vulnerabilities or suspicious patterns were detected in the visible content. Overall, the website is professional and trustworthy for its business scope, with recommendations to enhance security headers, publish security policies, and improve technical robustness to further strengthen its security posture and compliance.

J

JAKO

jakojedenteam.cz

58

JAKOjedenteam.cz is the official Czech Republic importer and retailer of the JAKO sportswear brand, offering a comprehensive range of sports clothing and equipment tailored for various sports disciplines. The website serves sports clubs, teams, and individual athletes, providing both retail and team outfitting services with customization options. The site demonstrates a professional e-commerce platform with clear navigation, product categorization by sport and team lines, and integration of marketing and analytics tools such as Google Analytics and Facebook SDK. The technical infrastructure is modern, leveraging popular JavaScript libraries and ensuring mobile responsiveness. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though improvements in security headers and explicit security policies are recommended. The absence of WHOIS data for the domain is a notable concern, impacting trust and transparency. Overall, the website presents a legitimate and professional business presence with moderate risk, primarily due to domain registration opacity.

F

FC Zlín

fcfastavzlin.cz

47

FC Zlín is a Czech football club with an official website providing comprehensive information about the club, including news, match schedules, team rosters, ticket sales, fan merchandise, and partner details. The site targets football fans and the local community, offering engagement through social media and online services. The business model revolves around sports club promotion, fan engagement, and merchandising. Technically, the website uses modern frontend technologies such as Bootstrap, jQuery, OwlCarousel, and integrates Google Analytics and Facebook SDK for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit privacy or security policies. WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and professional but could improve privacy compliance and security practices.

S

Společenské centrum Bethany

spolecenskecentrum.cz

44

Společenské centrum Bethany is a small, well-established non-profit Christian community center based in Prague, Czech Republic. It operates as part of the Seventh-day Adventist Church and offers a variety of spiritual, cultural, and educational programs including regular worship services, seminars, courses, and space rental. The website reflects an active community hub with frequent updates on events and sermons, targeting both believers and the general public seeking spiritual enrichment. Technically, the site is built on WordPress with a modern plugin ecosystem, including event calendars and contact forms, supported by Google Analytics and Facebook tracking for marketing purposes. Security posture is adequate with HTTPS enforced but lacks some advanced security headers and formal privacy and cookie policies, indicating room for compliance improvements. Overall, the domain registration data is consistent with the business profile, showing a legitimate and trustworthy entity with a domain age appropriate for its history. Strategic recommendations include implementing GDPR-compliant privacy and cookie policies, enhancing security headers, and improving accessibility features to strengthen trust and compliance.

Laughing Dog Brewing is a small craft brewery based in Northern Idaho, known for its award-winning beers and community-focused taproom experience. The company emphasizes quality and variety in its beer offerings, targeting craft beer enthusiasts and local patrons. The website is hosted on WordPress using the Divi theme and integrates common marketing and analytics tools such as Google Analytics and Facebook SDK. While the site is well-designed and provides relevant content, it lacks critical privacy and cookie policies, as well as explicit contact information, which impacts its privacy compliance and user trust. Security posture is moderate with HTTPS enabled and Cloudflare DNS usage, but missing DNSSEC and security headers reduce overall security maturity. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website is functional and professional but would benefit from enhanced privacy, security, and contact transparency.

Johnson Brothers Mountain State Beverage is a leading distributor and broker of wine, craft beer, and spirits in West Virginia, serving all 55 counties with a large portfolio of products. The company has a strong market position and a medium-sized team, supported by a professionally designed website built on WordPress with modern technologies such as Divi theme and Revolution Slider. The website demonstrates good SEO and mobile optimization but lacks critical privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Contact information is available primarily via a contact form and social media links, with no direct emails or phone numbers published. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

U

U2P

u2p-france.fr

46

U2P is a French non-profit organization representing small and medium-sized enterprises in artisanat, commerce, and liberal professions. It serves as a key advocacy body for proximity businesses in France, providing information, events, and publications to support its members. The website reflects a mature digital presence with modern technologies such as Remix framework, Google Tag Manager, and Plausible Analytics, combined with a cookie consent mechanism ensuring GDPR compliance. Security posture is good with HTTPS and standard best practices, though explicit security policies and incident response contacts are not publicly available. Overall, the website is professional, trustworthy, and well-positioned to serve its target audience effectively.

U

Union sport & cycle

unionsportcycle.com

50

Union sport & cycle is a French membership organization serving the sports and leisure industry, providing advocacy, studies, events, and member services. The website demonstrates a professional and consistent brand presence targeting industry professionals and stakeholders in France. Technically, the site uses modern JavaScript libraries and tracking tools, with good mobile optimization and moderate performance. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though no explicit security policy or incident response information is published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The absence of WHOIS data is a concern but does not critically undermine trust given the professional site content and social media presence.

O

OL4you - Olomoucký lifestylový magazín

ol4you.cz

49

OL4you.cz is a regional lifestyle magazine serving the Olomouc region in the Czech Republic, operating since 2012. It offers lifestyle, culture, beauty, and local event content through its website and printed editions. The site targets local residents and visitors interested in regional lifestyle and cultural happenings. Technically, the website uses modern web technologies including Google Tag Manager, Google Analytics, Facebook SDK, and the Nette Framework, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and secure script loading, though it lacks some security headers and explicit privacy and cookie policies. The absence of public WHOIS data suggests privacy protection, which is typical for media websites. Overall, the site is professional and trustworthy but could improve privacy compliance and security headers.

A

Alfred Kärcher GmbH & Co. KG

karcher.cz

10

Kärcher Česká republika operates as the official Czech branch of Alfred Kärcher GmbH & Co. KG, a leading global manufacturer and retailer of cleaning technology for both household and professional markets. The website offers a comprehensive catalog of cleaning products including window vacuums, steam cleaners, floor washers, vacuum cleaners, and pressure washers, supported by services such as repair, warranty extensions, and rental of professional equipment. The company holds a strong market position in the Czech Republic as a trusted brand with extensive product and service offerings tailored to both consumers and professionals. Technically, the website employs a modern technology stack including Bootstrap for responsive design, Adobe Dynamic Tag Management for analytics and marketing tag control, and OneTrust for GDPR-compliant cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. Performance is moderate with asynchronous loading of scripts and preloading of key assets. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. Security headers are partially observed, and third-party scripts are managed via Adobe DTM. However, explicit security headers like Content-Security-Policy and incident response contacts are not clearly published, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website presents a professional, trustworthy, and compliant digital presence for Kärcher in the Czech market. The absence of WHOIS data limits domain trust assessment, but the brand consistency and compliance signals support legitimacy. Strategic recommendations include enhancing security header implementation, publishing incident response and vulnerability disclosure information, and improving transparency of contact details to strengthen trust and security posture.

B

Banana Splash

banana-splash.com

61

Banana Splash is a technology company specializing in mobile web conversion optimization through a SaaS platform that enables businesses to customize messaging, perform A/B testing, and segment audiences for improved mobile revenues and leads. The company targets businesses seeking to enhance mobile user engagement and conversion rates. The website is professionally designed, mobile-optimized, and includes customer testimonials and clear contact information, indicating a credible market presence. Technically, the site is built on WordPress with a modern tech stack including Google Analytics, Tag Manager, and Facebook SDK, supporting marketing and analytics needs. Security posture is adequate with HTTPS and GDPR-compliant cookie consent, but lacks advanced security headers and explicit security policies. The absence of WHOIS registration data is a notable risk factor, reducing domain trustworthiness despite the professional site appearance. Overall, the site is functional and business-focused but would benefit from improved transparency and security documentation.

F

FC Zlín

fczlin.com

47

FC Zlín operates an official football club website serving the Czech Republic's regional sports community. The site provides comprehensive information about the club, including team rosters, match schedules, news updates, ticket sales, and fan merchandise. The business model centers on engaging fans and partners through digital channels, supporting ticketing and merchandising revenue streams. The website demonstrates consistent branding and a professional design tailored to sports enthusiasts and local supporters. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, OwlCarousel, and Font Awesome, ensuring a responsive and user-friendly experience. Hosting and domain registration are managed transparently with Tucows Domains Inc. as registrar and DNS servers located in the Czech Republic. Performance is moderate with good mobile optimization, though SEO and accessibility features are basic. From a security perspective, the site uses HTTPS with domain transfer protections enabled but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. Privacy compliance is partial; while a terms of service and basic privacy policy exist, no cookie consent mechanism or GDPR-specific disclosures are evident. Incident response and security policy information are absent, representing a compliance gap. Overall, the website is functional and trustworthy for its audience but would benefit from improved security hardening and privacy compliance measures. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

V

Vyklízení a bourací práce Kutná Hora, Čáslav

vyklizeni-kutna-hora.cz

55

Vyklízení a bourací práce Kutná Hora, Čáslav is a small local service provider specializing in property clearance and demolition services in the Kutná Hora and Čáslav regions of the Czech Republic. The company offers a comprehensive range of services including clearing residential and commercial properties, ecological waste disposal, and demolition of small to medium-sized structures. Their market position is focused on local customers, including households, businesses, and public institutions, with a strong emphasis on professional and environmentally responsible service delivery. Technically, the website employs standard web technologies such as jQuery, Facebook SDK, and custom JavaScript for form validation. The site is mobile-optimized with good SEO practices and clear navigation, although no CMS or hosting provider details are evident. The website includes GDPR-compliant cookie consent mechanisms and a privacy policy, reflecting a moderate level of digital maturity. From a security perspective, the site uses HTTPS and implements client-side form validation and cookie consent. However, there is no evidence of advanced security headers or published security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected, but improvements in security headers and server-side validation are recommended. Overall, the website presents a trustworthy and professional image consistent with a legitimate small business. The lack of WHOIS data due to privacy protection is common and does not detract from the site's credibility. Strategic recommendations include enhancing security posture with headers and policies, publishing incident response information, and maintaining up-to-date technical components.

V

Vyklízení Chrudim, bourací práce

vyklizeni-chrudim.cz

54

Vyklízení Chrudim is a small, local business specializing in property clearance and demolition services in Chrudim and surrounding areas. The company offers a range of services including clearing apartments, houses, commercial spaces, and ecological waste disposal. Their market position is focused on local customers seeking reliable and professional clearance and demolition work. The website presents clear business information, including contact details and a customer review, supporting trustworthiness. Technically, the website uses common JavaScript libraries such as jQuery and Facebook SDK for social integration. It implements GDPR-compliant cookie consent mechanisms and basic form validation. The site is mobile-optimized and has good SEO practices, though no CMS or hosting provider details are evident. Performance is moderate with room for improvement in security headers and explicit privacy/security policies. Security posture is adequate with HTTPS usage and GDPR compliance, but lacks advanced security headers and vulnerability disclosure mechanisms. No critical vulnerabilities were detected, but recommendations include adding security headers and a security.txt file. The absence of WHOIS data reduces domain trustworthiness, though website content and contact info appear legitimate. Overall, the website is professional and functional with good privacy compliance but would benefit from enhanced security practices and domain registration verification to improve trust and security posture.

V

Vyklízení nemovitostí Hutla

vyklizeni-hutla.cz

44

Vyklízení nemovitostí Hutla is a small Czech Republic-based company specializing in comprehensive property clearance services including residential, commercial, and industrial spaces. They emphasize affordability, speed, and ecological waste disposal, serving multiple regions such as Pardubice, Prague, and Hradec Králové. The website presents a professional image with clear service offerings and customer testimonials, positioning the company as a reliable local service provider. Technically, the website uses standard web technologies like jQuery and Facebook SDK, with responsive design and good SEO practices. However, there is room for improvement in security headers and privacy compliance. The absence of WHOIS data and privacy policy pages are notable gaps that affect trust and regulatory compliance. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. The site collects user data via a contact form but lacks clear privacy and cookie consent mechanisms. Overall, the risk is moderate with recommendations to enhance security, privacy, and transparency. Strategic recommendations include implementing comprehensive privacy and security policies, adding security headers, improving WHOIS transparency, and enhancing user trust through certifications or compliance disclosures.

R

Regionální rozvojová agentura jižní Moravy

morava-napoleonska.cz

43

Morava Napoleonská is a regional tourism website focused on promoting historical and cultural sites related to Napoleonic battles in Moravia, Czech Republic. The site offers visitors information on locations, events, videos, and personalized itineraries to explore the region's rich European history. The platform targets history enthusiasts and tourists interested in cultural heritage, positioning itself as a niche informational resource supported by regional partners. Technically, the website uses legacy JavaScript libraries such as jQuery 1.7.1 and integrates Google Analytics and Facebook social plugins. While the site includes a cookie consent mechanism, it lacks explicit privacy policy and terms of service pages, and no direct contact information is provided. Security posture is moderate with room for improvement, especially regarding modernizing libraries and implementing security headers. WHOIS data is unavailable, which reduces domain trust verification, but partner logos and content quality suggest legitimacy. Overall, the website is functional and informative but would benefit from enhanced security, privacy compliance, and transparency.

P

POWERPLAY MANAGER, s.r.o.

powerplaymanager.com

60

POWERPLAY MANAGER, s.r.o. operates the PowerPlay Manager online sports management game platform, offering free-to-play management games for hockey, soccer, handball, and basketball. The platform targets sports enthusiasts globally, providing multilingual support and live game broadcasts. The business model relies on free access with advertising and partnerships. Technically, the site uses a traditional web stack with jQuery and related libraries, integrates Facebook login, and employs cookie consent mechanisms to comply with privacy regulations. Security posture is solid with HTTPS and cookie management, though some security headers are missing and incident response information is absent. Overall, the site is professional, trustworthy, and well-positioned in its niche.

Mountain State Beverage operates as a regional distributor specializing in wine and craft beer, with a focus on brands like Laughing Dog Brewing. The website serves primarily as a promotional platform for their craft beer offerings and brand partnerships. The technical infrastructure is based on WordPress with the Divi theme, leveraging common plugins for SEO, social sharing, and analytics. The site is hosted behind Cloudflare DNS and uses HTTPS, indicating a baseline of security and performance. However, the absence of privacy and cookie policies, lack of security headers, and missing contact information reduce the overall trust and compliance posture. The site content is professionally presented with good design and navigation, targeting mature audiences interested in craft beer. Overall, the website is functional and credible but requires improvements in privacy compliance and security best practices.

C

Combell nv

flexmail.be

76

Flexmail is a Belgian-based e-mail marketing platform established in 2003, offering software solutions for effective and personalized e-mail campaigns, analytics, and marketing automation. The website is professionally designed using modern technologies such as React and Gatsby, integrating multiple marketing and analytics tools to support business growth. Security measures include a strong Content-Security-Policy and HTTPS usage, reflecting a good security posture. However, the absence of visible privacy and cookie policies and explicit contact information slightly reduces privacy compliance and user trust. Overall, the domain registration data aligns well with the website's business claims, indicating a legitimate and trustworthy entity.

M

M + MP spol. s r.o.

bydlenihned.cz

46

BydleniHned.cz is a Czech online magazine focused on housing, real estate, finance, and home improvement topics. Operated by M + MP spol. s r.o., it provides news, tips, and advice to a general audience interested in these sectors. The website features a variety of articles organized into categories such as Bydlení (Housing), Stavba (Construction), Hobby a zahrada (Hobby and Garden), Reality (Real Estate), Finance, and Services. It monetizes primarily through advertising and PR article publications. Technically, the site uses modern web technologies including jQuery, Google Fonts, Google Adsense, and Facebook SDK, and is served over HTTPS with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and form validation but lacks advanced security headers and explicit incident response information. Privacy and cookie policies are present and GDPR compliant. WHOIS data is unavailable, which reduces transparency and trustworthiness, but the site content and business information appear professional and legitimate.

S

Screenshotlayer API | Free, Powerful Screenshot API

screenshotlayer.com

62

Screenshotlayer.com is a technology-focused website providing a free and powerful screenshot API service that enables users to capture snapshots of any website with customizable device and setting options. The service targets developers and businesses requiring automated screenshot capabilities, positioning itself as a niche API provider with a free tier for personal use. The domain was registered in 2015, indicating a mature presence in its market segment. Technically, the website employs common web technologies including jQuery, Google Tag Manager, and Facebook SDK, with DNS hosted via Cloudflare for performance and security benefits. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. Security posture is adequate with HTTPS enabled and domain status locks in place, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms. Contact information and incident response details are not explicitly provided, limiting direct communication channels. Overall, the website is functional and professional but would benefit from enhanced privacy disclosures and security practices.

N

Numverify

numverify.com

63

Numverify is a specialized technology company providing a JSON API service focused on international and national phone number validation, carrier, location, and line type lookup. The company targets developers and businesses requiring reliable phone number verification services. Their market position is that of a niche API provider with a subscription-based business model, founded in 2015. The website content is professional, well-structured, and designed to facilitate developer engagement and service adoption. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, Facebook SDK, and Cloudflare DNS services. The site is hosted on infrastructure registered via GoDaddy and uses Cloudflare for DNS, although DNSSEC is not enabled. Performance and mobile optimization are good, with basic accessibility features and solid SEO practices. From a security perspective, the site enforces HTTPS and uses domain status locks to prevent unauthorized domain changes. However, it lacks DNSSEC and a published security.txt file, and does not explicitly disclose incident response policies or security frameworks. Tracking and marketing tools are used responsibly with privacy policies and cookie consent mechanisms in place. Overall, Numverify presents a trustworthy and professional online presence with a good security posture and compliance awareness. Strategic improvements in DNS security and incident response transparency would further enhance their security maturity and trustworthiness.

E

eSports s.r.o.

marken.cz

43

Marken.cz is a Czech Republic based e-commerce platform specializing in sports-related books, DVDs, magazines, and memorabilia. Established in 2005 and operated by eSports s.r.o., the website targets sports enthusiasts looking for both new and antiquarian sports publications. The business model focuses on niche retail with options for personal pickup in Prague, positioning itself as a specialized online bookstore within the sports domain. The website demonstrates consistent branding and good content quality with clear navigation and product categorization.

M

MUSIL spol. s r.o.

musil.cz

57

MUSIL spol. s r.o. is a Czech family-owned company with over 30 years of experience specializing in drywall installation and spray foam insulation services. The company positions itself as a trusted regional player offering a unique combination of drywall and insulation solutions, targeting residential and commercial property owners. Their website reflects a professional and consistent brand image with clear service offerings and customer engagement channels. Technically, the site is built on the Webflow platform using modern JavaScript libraries and integrates Google Analytics, Google Tag Manager, and Google Ads for marketing and tracking purposes. Security measures include HTTPS, Google reCAPTCHA, and Cloudflare Turnstile anti-bot protection, though some security headers and policies could be improved. The absence of WHOIS data reduces domain trust slightly, but the overall business credibility remains high based on website content and trust indicators. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanisms.

H

HTML5 UP

html5up.net

55

HTML5 UP is a niche technology provider specializing in free, fully responsive HTML5 and CSS3 website templates designed by @ajlkn. The website offers a large catalog of templates with live demos and download options, targeting web developers and designers seeking high-quality free templates. The business model includes free Creative Commons licensed templates and a paid subscription service (Pixelarity) for attribution-free templates and support. Technically, the site uses modern web standards, integrates social media widgets, and employs Google Analytics and Tag Manager for tracking. Hosting and domain registration are stable and professional, with Cloudflare as registrar and HTTPS enabled. Security posture is good but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Overall, the site is professional, trustworthy, and well-maintained, with moderate user tracking and no adult or questionable content.

T

Tarifomat, s.r.o.

srovnanitarifu.cz

53

The website www.srovnanitarifu.cz operates as a Czech-language platform specializing in the comparison of mobile tariffs from major Czech telecom operators including T-Mobile, O2, and Vodafone. It offers a tariff calculator tool, informational content, and affiliate marketing for telecom and financial products such as Air Bank and mortgage comparison services. The site targets Czech mobile users seeking cost-effective tariff plans and related financial offers. Technically, the site employs a traditional jQuery-based stack with several plugins for UI enhancements and form validation. While the site is functional and content-rich, it lacks modern security headers and comprehensive privacy policies, which are critical for compliance and user trust. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the site content and contact information suggest a legitimate business entity. Overall, the site demonstrates moderate digital maturity with room for improvement in security and privacy compliance.

G

Green Soft LLC

webbuilder.mn

57

Green Soft LLC operates the webbuilder.mn platform, a Mongolian-engineered SaaS website builder system designed to empower professionals and small businesses to create and manage their own websites without requiring expert assistance. The platform targets a diverse audience including doctors, teachers, lawyers, and marketing managers, offering integrations with popular CRM and marketing tools such as Hubspot, Mailchimp, and Zoho CRM. The website demonstrates a consistent brand presence and provides multiple contact channels including phone, email, and physical address, enhancing trust and accessibility. Technically, the website employs modern web technologies including jQuery, Google Analytics, Facebook SDK, and Chatwoot for live chat support. It is hosted behind Cloudflare DNS services and uses HTTPS to secure communications. The site is mobile optimized and SEO friendly, though it lacks some advanced security headers and DNSSEC is not enabled, representing areas for improvement. Analytics and marketing tools are actively used, but privacy and cookie policies are absent, indicating compliance gaps. From a security perspective, the site maintains a good baseline with HTTPS and domain transfer protection but would benefit from enhanced DNS security, explicit security policies, and incident response information. The domain registration data aligns well with the website content and business entity, supporting legitimacy. Overall, the platform is a credible and professional service with moderate technical maturity and some privacy compliance shortcomings.

I

Infolinks Inc.

infolinks.com

58

Infolinks Inc. operates a large-scale digital advertising platform focused on connecting publishers and advertisers through innovative ad solutions emphasizing intent targeting, high viewability, and exclusive placements. The company claims a significant market presence with over 350,000 websites and 240 million monthly unique users, positioning itself as the third largest publisher marketplace globally. Their business model centers on monetizing content for publishers and providing effective advertising solutions for advertisers, leveraging a proprietary ad platform. The website is professionally designed, SEO optimized, and mobile responsive, reflecting a mature digital infrastructure built on WordPress with integrations of major analytics and marketing tools such as Google Tag Manager, Facebook SDK, and Twitter Ads.

L

Ligová fotbalová asociace

lfafotbal.cz

46

Ligová fotbalová asociace (LFA) is a professional football association representing Czech Republic's top football clubs. It aims to enhance the prestige of the highest football competitions and advocates for the interests of professional clubs. The website provides information about projects, committees, documents, media, and organizational structure, targeting football clubs, fans, and industry stakeholders. Technically, the website uses modern web technologies including Google Analytics and Facebook SDK, with a cookie consent mechanism implemented for GDPR compliance. Security posture is moderate with HTTPS enabled but lacks some security headers and explicit privacy policies. The absence of WHOIS data and registrant information reduces domain trustworthiness, and suspicious hidden links in the footer suggest potential SEO spam risks. Overall, the website is professional and functional but would benefit from improved transparency and security documentation.

E

Exalto

ex-alto.com

55

Exalto operates the E-licence platform, a specialized extranet and intranet portal designed exclusively for French sports federations. With over 20 years of experience and 40 federation clients, the company provides comprehensive license and competition management solutions tailored to the sports sector. The website reflects a mature business with a clear focus on B2B services for sports organizations in France. Technically, the site is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various plugins for enhanced user experience and functionality. While HTTPS is properly implemented, the absence of security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. The site actively engages users via social media and newsletter subscriptions but lacks explicit incident response and vulnerability disclosure information. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and stability of the operation.