Security Directory

L

Louda Auto

autolouda.cz

68

Louda Auto is a large, well-established automotive dealership and service provider in the Czech Republic, founded in 2004. It operates as the largest certified dealer for 12 automotive brands with 18 branches nationwide, offering new and used vehicle sales, leasing, carsharing, and servicing. The website reflects a mature digital presence with modern technologies such as Blazor Server, Bootstrap, and multiple analytics and tracking tools. Privacy and cookie policies are implemented with clear consent mechanisms, supporting GDPR compliance. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the website is professional, trustworthy, and well-optimized for users and search engines.

Simple Avia Solutions is a newly established ACMI provider operating on four continents, specializing in aircraft leasing with crew, maintenance, and insurance services. The company targets airlines and businesses requiring flexible capacity solutions globally, positioning itself as a reliable and well-distributed operator. The website reflects a basic but professional digital presence with clear contact information and consistent branding. Technically, the site uses standard web technologies such as Bootstrap and jQuery, hosted behind Cloudflare DNS, but lacks advanced security configurations like DNSSEC and security headers. No privacy or cookie policies are published, indicating gaps in compliance. The security posture is moderate with room for improvement, especially in implementing best practices and transparency. Overall, the website is safe, accessible, and credible but would benefit from enhanced security and privacy measures to strengthen trust and compliance.

I

Infrastructure Services for Open Access Danish Branch

doaj.org

65

The Directory of Open Access Journals (DOAJ) is a well-established non-profit organization founded in 2003, dedicated to indexing and providing free access to scholarly open access journals globally. The platform serves researchers, academic institutions, publishers, and the general public by offering a comprehensive and community-driven index of quality open access content. DOAJ operates on a donation-supported model, emphasizing transparency and accessibility. Technically, the website employs modern web technologies including jQuery, Bootstrap, Select2, and Google Fonts, hosted behind Cloudflare DNS and CDN services. The site is optimized for performance, mobile responsiveness, and accessibility, with a clean and professional design that supports excellent user experience and navigation clarity. Privacy is respected with a clear cookie consent mechanism and a comprehensive privacy policy. From a security perspective, the site enforces HTTPS with a strong SSL configuration and domain transfer protections. However, it lacks DNSSEC and explicit security headers, and does not publish a dedicated security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Analytics are handled via privacy-focused Plausible Analytics, ensuring minimal user tracking. Overall, DOAJ presents a high level of trustworthiness, professionalism, and compliance with privacy standards. The domain registration details align well with the organization's mission and history, reinforcing legitimacy. Strategic improvements could include enabling DNSSEC, adding security headers, and publishing a security policy to further enhance security posture.

Kamelot.cz operates as a regional cultural and advertising monthly magazine serving the Czech regions of Kladno, Karlovy Vary, and Liberec. The website provides information on local culture, sports, and services, with a business model centered on free distribution supported by advertising revenue. The site targets local residents and businesses seeking regional event information and advertising opportunities. Technically, the website employs common web technologies including jQuery, Bootstrap, FontAwesome, and Google Analytics, indicating a moderate level of digital maturity. The site is mobile optimized and presents a professional design with clear navigation. Security posture is moderate; HTTPS is used, but security headers and privacy compliance elements such as privacy and cookie policies are missing, representing compliance gaps. The absence of WHOIS data limits domain legitimacy verification, though the website content and contact information suggest a legitimate business presence. Overall, the site is safe for general audiences and functions well as a regional media outlet.

T

THL-Luna, a.s.

thlluna.cz

68

THL-Luna, a.s. is a Czech logistics company specializing in comprehensive supply chain solutions including warehousing, container transport, and logistics outsourcing. The company operates multiple strategically located warehouse centers across the Czech Republic, serving businesses requiring efficient storage and distribution services. The website is professionally designed using WebJET CMS and modern web technologies, providing clear navigation and relevant business content primarily in Czech. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, though some security headers are not explicitly detected. The absence of WHOIS data reduces transparency but the presence of legal company information and contact details supports legitimacy. Overall, the site reflects a medium-sized logistics provider with a stable market position and a parent company affiliation.

G

Geosa spol. s r.o.

geosa.cz

47

Geosa spol. s r.o. is a Czech Republic-based construction company established in 1994, specializing in roofing, steel constructions, ventilation, and sandwich panel cladding. The company targets construction industry clients and businesses requiring specialized roofing and steel structure services. It maintains a solid market position with longstanding partnerships and ISO 9001:2000 certification, reflecting a commitment to quality. The website presents clear business information, contact details, and partner affiliations, supporting its credibility. Technically, the website uses common web technologies such as jQuery, Slick Carousel, Bootstrap, and Google Analytics. It is moderately performant with good mobile optimization and basic accessibility. SEO practices are adequate with proper meta tags and structured navigation. However, no CMS or hosting provider details are evident, and security headers are missing, indicating room for technical security improvements. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The presence of a cookie consent banner and privacy policy indicates basic GDPR compliance. However, the absence of security headers and incident response information suggests potential gaps in security maturity. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is justified for this business type. Overall, the website is professional, trustworthy, and business-focused with no adult or questionable content. Strategic recommendations include implementing security headers, publishing a security policy or incident response contact, and auditing third-party scripts to enhance security and compliance.

S

Sailun Group Europe

sailun-tyres.eu

59

Sailun Group Europe operates as a tyre manufacturer and distributor specializing in passenger car, light truck, truck, and bus tyres. The company offers a broad product portfolio including summer, winter, and all-season tyres, with a focus on performance, safety, and eco-friendly technologies tailored also for electric and hybrid vehicles. Positioned competitively in the European market, Sailun emphasizes quality and sustainability, evidenced by certifications such as the EcoVadis Silver Medal and endorsements like AutoBild approval. Their business model includes a dealer locator service and direct customer engagement through comprehensive product catalogs and press releases. Technically, the website employs modern web technologies including Bootstrap, jQuery, Font Awesome, Google Maps API, and Cookiebot for consent management. The site is mobile-optimized with good navigation and moderate performance. Analytics are implemented via Google Tag Manager, indicating moderate user tracking with privacy compliance measures in place. However, some security best practices such as security headers and explicit incident response policies are not publicly visible. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism, contributing to a solid security posture. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is due to EURid's privacy policy for .eu domains, which is common and justified for this business type. Overall, the domain and website present strong legitimacy and trustworthiness. The overall risk assessment is low, with recommendations to enhance security headers, publish security policies, and consider a vulnerability disclosure program to further strengthen trust and compliance. The website quality and business credibility are high, supporting Sailun's position as a reputable tyre brand in Europe.

M

MEDIA CLUB, s.r.o.

kiss.cz

41

Radio Kiss is a well-established Czech radio station operated by MEDIA CLUB, s.r.o., part of the FTV Prima media group. The station targets a broad audience with a focus on music from the 90s and contemporary hits, complemented by events such as Kissparty and an online merchandise shop. The website demonstrates a solid digital presence with modern technologies, including responsive design, multimedia streaming, and integrated social media. Privacy compliance is robust, featuring a comprehensive GDPR-aligned consent management platform. Security posture is good with HTTPS and content security policies, though additional headers could enhance protection. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional content and clear company information. Strategic recommendations include enhancing security headers, maintaining up-to-date libraries, and conducting regular security audits to mitigate risks.

E

ELTON hodinářská, a.s.

elton.cz

41

ELTON hodinářská, a.s. is a Czech-based manufacturer and retailer specializing in watches and clocks, including the well-known PRIM brand. The company operates a professional e-commerce platform targeting general consumers interested in quality timepieces and related accessories. Their market position is that of an established medium-sized manufacturer with a strong local presence and a parent company affiliation with Czechoslovak Group. The website offers a comprehensive product catalog, including watches, clocks, accessories, and custom production services. Technically, the site is built on a custom ASP.NET WebForms platform, utilizing modern JavaScript libraries such as jQuery and Bootstrap, with integrated analytics and marketing tools like Google Tag Manager and Mailkit for newsletters. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No critical vulnerabilities or suspicious content were detected, and WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website is trustworthy, compliant with GDPR, and professionally maintained.

S

Skanska a.s.

skanska.cz

70

Skanska a.s. is a leading construction and development company operating in the Czech Republic, specializing in residential and commercial real estate development, infrastructure projects, and related services such as facility management and equipment rental. The company is part of the global Skanska Group and maintains a strong market position with a focus on sustainability and innovation. The website reflects a mature digital presence with comprehensive content, clear navigation, and active social media engagement. Technically, the site uses modern frameworks and analytics tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and form protections in place, although explicit security policies and incident response details are not publicly disclosed. Overall, the domain registration and WHOIS data align well with the company's identity, supporting legitimacy and trustworthiness.

H

HRADECKÁ KULTURNÍ A VZDĚLÁVACÍ SPOLEČNOST s.r.o.

trhyhk.cz

53

HRADECKÁ KULTURNÍ A VZDĚLÁVACÍ SPOLEČNOST s.r.o. is a small Czech company founded in 2020, focused on organizing cultural events and markets in the Hradec Králové region. The website serves as an information portal for various cultural fairs, markets, and community events, targeting the general public interested in local cultural activities. The business model revolves around event organization and providing related services such as rental of tribunes, supported by partnerships with local government and cultural institutions. The company maintains a consistent brand presence and demonstrates trust signals through official registrations and partnerships. Technically, the website is built on the Mijahoo CMS platform and uses common web technologies including jQuery, Bootstrap, Font Awesome, Google Analytics, and Google Tag Manager. It is hosted under a Czech registrar and uses HTTPS with a good SSL configuration. The site is moderately performant, mobile-optimized, and includes basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR using CookieScript. However, it lacks explicit security headers and a dedicated security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration data is consistent with the website's business claims, enhancing legitimacy. Overall, the website presents a low-risk profile with good privacy compliance and a professional online presence. Strategic improvements could include adding explicit security policies, implementing security headers, and publishing a vulnerability disclosure policy to enhance trust and security posture.

O

OMEGA WEB Czech

omegaczech.cz

42

OMEGA WEB Czech is a Czech Republic-based small technology company specializing in custom web design, development, SEO, e-commerce solutions, and IT outsourcing services. Established since 1998, it serves a broad client base across the Czech Republic with a focus on professional and comprehensive web solutions. The website demonstrates a mature digital presence with Joomla CMS, modern frontend technologies, and integration of Google Analytics and reCAPTCHA for security and analytics. Security posture is solid with HTTPS and consent mechanisms, though lacking advanced security headers and formal incident response disclosures. The absence of WHOIS data reduces domain trust but the website content and contact information are consistent and professional. Overall, the company presents a trustworthy and competent profile in the local web services market.

U

Univerzita Hradec Králové

mojeuhk.cz

44

Univerzita Hradec Králové operates a well-structured and professionally designed website targeting prospective and current students interested in higher education in the Czech Republic. The site presents multiple faculties and study programs, enriched with student testimonials and social media integration, reflecting a strong engagement with its audience. The business model is that of a public university providing educational services with a medium-sized presence in the regional education sector. Technically, the website leverages modern web technologies including Bootstrap, jQuery, and Laravel framework, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, CSRF protection, and reCAPTCHA integration, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site is trustworthy, safe, and professionally maintained.

U

U Rudolfa | Restaurant Hradec Králové

urudolfa.restaurant

44

The website www.urudolfa.restaurant represents a small hospitality business operating a restaurant named 'U Rudolfa' located in Hradec Králové, Czech Republic. The business offers restaurant dining services and catering for events, including romantic dinners. The website content is accessible and well-structured, with a professional design using modern front-end technologies such as Bootstrap and JavaScript libraries. However, the site lacks critical compliance documents such as privacy and cookie policies, and no explicit contact information is found on the site. The WHOIS data is unavailable or protected, which limits the ability to fully verify domain legitimacy and ownership details. HTTPS is enabled, but security headers are missing, which could be improved to enhance security posture.

H

Hradecká kulturní a vzdělávací společnost s.r.o.

hradecko.info

46

The website hradecko.info represents a regional non-profit destination management organization focused on promoting tourism and cultural heritage in the Hradec Králové region of the Czech Republic. The organization operates key tourist attractions such as the White Tower, Bílá věž, and Kostel sv. Mikuláše, and collaborates closely with local government and tourism partners. The business model is centered on sustainable tourism development, funded by membership fees and local tourism taxes. Technically, the website is built on a Joomla CMS platform with a modern front-end stack including Bootstrap, jQuery, and various UI libraries. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features are basic. Hosting is provided by Webglobe, and the domain is relatively new but consistent with the organization's founding date. From a security perspective, the site shows no immediate vulnerabilities or exposed sensitive data, but lacks advanced security headers and DNSSEC is not enabled. HTTPS status is unknown from provided data and should be verified. Privacy compliance is partially addressed with a GDPR document available, and cookie consent mechanisms appear implemented. Contact information is clearly provided, but no incident response or security policy pages are present. Overall, the website is trustworthy and professionally maintained with a clear business purpose. Strategic improvements in security headers, HTTPS enforcement, and explicit security policies would enhance the security posture and compliance. The site is safe for general audiences with no adult or questionable content detected.

The World Lottery Association (WLA) operates a professional website serving as a global industry association for state-authorized lotteries and gaming organizations. The site offers resources including industry standards, knowledge sharing, events, and publications targeted at lottery operators and regulators worldwide. The organization is well-established with a domain registered since 1999 and headquartered in Switzerland. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Cookiebot for cookie consent management, hosted behind Cloudflare DNS services. The site is mobile-optimized with a moderate performance profile and uses Google Analytics and Tag Manager for tracking and marketing purposes. Privacy compliance is well addressed with clear cookie and privacy policies and a consent mechanism. From a security perspective, the website uses HTTPS and enforces domain transfer restrictions. However, DNSSEC is not enabled, and security headers are not explicitly detected in the provided data. No critical vulnerabilities or exposed sensitive data were found. The site demonstrates good security hygiene but could improve by enabling DNSSEC and implementing additional security headers. Overall, the website is trustworthy, professional, and compliant with GDPR requirements. It lacks explicit contact information and terms of service pages in the scanned content, which could be areas for improvement. The content is safe for general audiences with no adult or questionable material detected.

R

Riga Investment and Tourism Agency

liveriga.com

57

The LiveRiga website serves as the official digital platform for the Riga Investment and Tourism Agency, promoting Riga as a vibrant capital city of Latvia with opportunities for tourism, investment, events, and work relocation. The site is well-structured, visually appealing, and targets a broad audience including tourists, investors, event organizers, and professionals considering relocation. The technical infrastructure leverages modern web technologies such as jQuery, Bootstrap, and Google reCAPTCHA, ensuring a responsive and interactive user experience. Security measures include HTTPS enforcement and cookie consent mechanisms, though some security headers and policies are not explicitly published. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trustworthiness. Overall, the website demonstrates a strong digital presence with good privacy compliance and user engagement through social media and newsletter subscriptions.

B

Biskupství brněnské

biskupstvi.cz

53

The website www.biskupstvi.cz serves as the official online presence of the Brno Diocese, a religious non-profit organization in the Czech Republic. It provides comprehensive information about diocesan activities, events, news, pastoral services, charity, and education. The site targets the Catholic community, clergy, and parishioners in the Brno region, offering resources and contact channels to support their spiritual and community needs. The business model is centered on community service and information dissemination rather than commercial activities. Technically, the website employs modern web technologies including Bootstrap for responsive design, jQuery, Owl Carousel for interactive elements, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. Media assets are hosted on Microsoft Azure Blob Storage, indicating a reliable hosting infrastructure. The site is mobile-optimized with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS, includes multiple security headers, and uses secure forms with validation. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a visible cookie consent mechanism and does not publish security or incident response policies, which are recommended for compliance and transparency. Overall, the website is trustworthy, professionally maintained, and serves its community well. The absence of public WHOIS data is typical for Czech domains managed by CZ NIC and does not detract from the site's legitimacy. Strategic improvements include implementing cookie consent, publishing security policies, and enhancing accessibility to further strengthen compliance and user trust.

S

Statutární město Hradec Králové

hk800.cz

49

The website hk800.cz is the official digital platform for the 800th anniversary celebrations of the city of Hradec Králové in the Czech Republic. It serves as a comprehensive resource for cultural events, exhibitions, and community engagement activities related to the milestone. The site is operated by the city government, providing authoritative and trustworthy information to residents and visitors. The business model is centered on governmental and cultural event promotion, supported by partnerships with local businesses and media. The website demonstrates a consistent brand identity aligned with the city’s heritage and celebration theme. Technically, the site is built on Joomla CMS with a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience such as carousels and lazy loading. It integrates Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing purposes, all managed with a cookie consent mechanism ensuring GDPR compliance. Hosting and domain registration are consistent with Czech providers, and the site shows good mobile optimization and SEO practices. From a security perspective, the website enforces HTTPS and uses cookie consent banners to comply with privacy regulations. While explicit security headers are not fully visible in the provided data, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website’s purpose and geographic location, indicating legitimacy. However, the site lacks explicit security policies or incident response contacts, which could be improved. Overall, the website is a well-structured, professional, and trustworthy platform for the city’s anniversary celebrations. It balances user experience, privacy compliance, and technical soundness effectively, though there is room for enhancement in security policy transparency and advanced security headers implementation.

K

Královehradecký kraj

kr-kralovehradecky.cz

63

Královehradecký kraj operates an official regional government website providing comprehensive information about the regional administration, public services, news, and community resources. The site targets residents and stakeholders within the Královéhradecký region of the Czech Republic, offering key services such as contact directories, grant information, and cultural portals. The website is built on a modern Drupal 10 CMS platform, utilizing contemporary web technologies including Bootstrap and Google Tag Manager, ensuring a responsive and accessible user experience. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms compliant with GDPR, reflecting a mature privacy posture. However, the absence of security headers and a security.txt file indicates room for improvement in security best practices. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The lack of WHOIS data is unusual but likely due to registry or query limitations rather than malicious intent, given the official nature of the site. Overall, the website demonstrates a solid technical infrastructure and professional presentation consistent with government standards. It maintains good privacy compliance and user trust indicators, including clear contact information and social media engagement. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding a vulnerability disclosure policy to further strengthen security posture.

The website 'TestSite' hosted on dvoraksystems.com is a small-scale educational platform built on WordPress using the Sydney Pro theme and Tutor LMS plugin. It appears to target students and instructors interested in online courses, offering basic e-commerce functionality for course purchases. However, the site content is minimal, primarily consisting of default WordPress placeholder content, indicating it may be under development or not actively maintained. The business model likely revolves around online course delivery and instructor/student management, but lacks detailed information or branding to establish a strong market position. Technically, the site uses a modern WordPress CMS with common plugins and frameworks such as jQuery, Bootstrap, and Elementor. The hosting and domain registration are stable, with the domain created in 2017 and registered through Tucows Domains Inc. The site is HTTPS enabled, ensuring encrypted communication, but lacks advanced security headers and DNSSEC, which are recommended for enhanced security. Performance and mobile optimization are moderate to good, but accessibility and SEO optimizations are basic. From a security perspective, the site shows basic security posture with HTTPS but no visible security policies, incident response contacts, or vulnerability disclosures. No privacy or cookie policies are present, which is a compliance gap especially under GDPR. No contact information or business trust indicators are provided, reducing business credibility and user trust. No WAF or blocking mechanisms are detected, and no suspicious WHOIS patterns are found, indicating a legitimate but minimal online presence. Overall, the site is safe for general audiences but lacks comprehensive content, security, and compliance features. Strategic recommendations include adding privacy and cookie policies, implementing security headers, providing clear contact and incident response information, and enriching site content to improve professionalism and trustworthiness.

W

WBSC Europe

wbsceurope.org

68

WBSC Europe is the official continental governing body for baseball, softball, and Baseball5 in Europe. It operates under the World Baseball Softball Confederation umbrella and provides governance, event organization, rankings, development, and anti-doping services to its member federations and stakeholders. The website is professionally designed with good content quality and clear navigation, targeting sports organizations, athletes, officials, and fans interested in baseball and softball in Europe. Technically, the site uses modern frameworks such as Bootstrap and integrates multiple advertising and tracking services, including Google Tag Manager and Amazon Ads. Security posture is strong with HTTPS and security headers properly configured, though the absence of a privacy policy and terms of service pages indicates room for improvement in privacy compliance. WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and affiliation with a known international sports federation support its legitimacy. Overall, the site is a credible and functional platform for its intended audience.

U

Uprankd

uprankd.com

56

Uprankd is a Latvia-based SEO growth agency specializing in data-driven SEO, paid advertising, and conversion rate optimization services. The company targets businesses seeking to improve their digital presence, particularly in e-commerce, finance, and local services sectors. Their service offerings include SEO audits, keyword research, link building, content marketing, and technical SEO fixes. The website reflects a professional and consistent brand image with clear contact information and client logos, indicating a credible market position as a specialized SEO agency. Technically, the website is built on WordPress using Elementor and Bootstrap frameworks, with integrations of multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, Bing Ads, and LinkedIn Insight Tag. The site is mobile optimized and has good SEO metadata and structured data implementation. Hosting appears to be via NameCheap, consistent with the domain registrar information. From a security perspective, the site uses HTTPS with a clientTransferProhibited domain status, enhancing domain security. However, it lacks DNSSEC and explicit security headers, and there are no visible security or incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable compliance gap. Overall, Uprankd presents a trustworthy and professional digital presence with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and publishing incident response information to enhance trust and compliance.

S

Společenské a kulturní centrum Kuřim, příspěvková organizace

kamvkurimi.cz

48

The website 'Kam v Kuřimi' serves as a cultural and social event portal for the town of Kuřim, Czech Republic. It is managed by the Společenské a kulturní centrum Kuřim, a public cultural organization. The site provides comprehensive event listings including concerts, theater, cinema, sports, and workshops, targeting local residents and visitors interested in community activities. The business model focuses on event promotion and community engagement, supported by local government partnerships.

L

LK Brno-střed

kinobude.cz

42

The website kinobude.cz represents a local cultural event organizer operating an open-air summer cinema in Brno-střed, Czech Republic. The business focuses on providing outdoor film screenings during the summer season, targeting general audiences in the local community. The site is built on WordPress with a modern tech stack including Bootstrap and jQuery, and it supports multilingual content in Czech and English. The website is well-structured with good design quality and clear navigation, although it lacks some compliance documentation such as privacy and cookie policies. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but it lacks advanced security headers and incident response information. Overall, the domain registration is consistent with the business profile, indicating legitimacy and trustworthiness.

Hamrsport operates sports and leisure facilities in Prague, offering a variety of services including sports area rentals, tournaments, camps, and an online reservation system. The website targets families and sports enthusiasts, positioning itself as a local provider of recreational activities. The business appears small but well-established since 2014, with partnerships including local government entities. Technically, the website uses common frameworks like Bootstrap and jQuery, integrates Google Analytics and Facebook SDK for tracking, and provides a responsive design with moderate performance. Security posture is basic, with HTTPS implied but lacking explicit security headers and advanced protections. Privacy compliance is minimal, with a cookie consent banner but no visible privacy policy or terms of service. Contact information is comprehensive, including phone numbers, addresses, and a contact form with basic spam protection. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

K

Sportovní oblečení | Kappa

kappa-sport.cz

52

The website www.kappa-sport.cz is an e-commerce platform specializing in sports clothing and accessories, targeting general consumers interested in sportswear. The site presents a professional design with good content relevance and clear navigation, optimized for mobile devices. The technical infrastructure leverages modern frontend technologies including Bootstrap, jQuery, and several third-party marketing and analytics tools such as Cookiebot, Microsoft Clarity, and Google Tag Manager. Security posture is solid with HTTPS enforced and CSRF protection cookies in place, although some security headers are not explicitly detected. Privacy compliance is supported by a comprehensive cookie consent mechanism, but explicit privacy policy and terms of service pages were not found in the provided content. The absence of WHOIS data suggests privacy protection for the domain registration, which is common for retail e-commerce sites and does not raise immediate concerns. Overall, the website demonstrates a moderate to good security and privacy posture with room for improvement in transparency and security best practices.

The website mojelecbaobezity.cz is a Czech-language informational portal dedicated to obesity treatment, specifically focusing on bariatric surgery. It serves as a resource for patients and interested individuals by providing detailed information about obesity risks, treatment options, patient stories, and expert guidance. The site is operated or supported by PR agency Focus Agency, which is also indicated in the footer. The business model centers on education and patient support within the healthcare sector, targeting individuals seeking surgical obesity treatment information. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Google Analytics, and Facebook Pixel, hosted likely by Active24. The site is mobile-optimized with good SEO and accessibility basics. Security-wise, the site employs cookie consent mechanisms and standard tracking controls but lacks explicit security headers and published security policies. No critical vulnerabilities or suspicious content were detected. Overall, the site is professional, trustworthy, and compliant with GDPR, though it could improve transparency around security policies and incident response.

E

Elkova

elkova.cz

57

Elkova is a Czech-based small business specializing in electrical installation services including both high and low voltage systems, security systems, video intercoms, fire protection, and photovoltaic solutions. Established in 2002, the company serves residential, commercial, and developer clients primarily in Prague and Central Bohemia. The website presents a professional image with clear service offerings, customer testimonials, and comprehensive contact information. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for SEO, spam protection, and cookie consent. The site is mobile optimized and uses HTTPS with a valid SSL certificate, ensuring secure communications. Security posture is good but could be improved by adding explicit security headers and incident response information. Privacy compliance is evident with a GDPR-compliant privacy and cookie policy. Overall, the website is trustworthy and well-maintained, reflecting a legitimate and established business.

ATI DELICATES s.r.o. is a Czech-based small-sized company specializing in the import and distribution of Mediterranean and other quality food products primarily from Greece, Italy, Spain, France, and other countries. Established in 2009, the company has a solid market presence in the Czech Republic and Slovakia, representing well-known international brands and offering a diverse portfolio of food categories. The website reflects a professional business model focused on retail distribution and brand representation within the food sector. Technically, the website uses modern web technologies including Bootstrap, jQuery, and Google Analytics, providing a responsive and user-friendly experience with moderate performance. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and published security policies. Privacy compliance is basic, with no visible privacy policy or terms of service, which should be addressed to improve trust and regulatory adherence. Overall, the website is trustworthy and professionally maintained, with clear contact information and consistent branding.

V

Vím, co jím a piju, o.p.s.

vimcojim.cz

49

Vím, co jím a piju, o.p.s. operates a Czech-language media platform focused on promoting a healthy lifestyle through nutrition education, recipes, podcasts, and videos. The website serves a general audience interested in health and wellness, providing comprehensive content and tools such as food databases and health calculators. The organization appears to be a medium-sized non-profit entity with a consistent brand presence and active social media engagement. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and cookie consent mechanisms, ensuring a responsive and user-friendly experience. Security-wise, the site enforces HTTPS, integrates privacy-compliant cookie consent, and uses trusted analytics and advertising services, though it could improve by adding more security headers and enhancing accessibility. Overall, the domain is legitimate and trustworthy despite the absence of WHOIS data, likely due to privacy protection. The site maintains good privacy compliance and advertising transparency, making it a reliable source for its target audience.

I

ILA, s.r.o.

ila.cz

47

ILA, s.r.o. is a Czech consulting company specializing in grant advisory, digitalization, innovation support, and implementation of new technologies. They assist clients in formulating and implementing financing strategies from public sources, preparing project applications for national and EU funding programs, and managing project administration and reporting. The company targets organizations seeking expert guidance in public funding and innovation projects. Their market position is that of a specialized niche consultancy with a strong local presence and reputable partners. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Fonts, with a responsive design and cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is adequate but could be improved by implementing additional HTTP security headers and formal security policies. The absence of WHOIS data limits domain trust assessment, but the website content and contact information appear legitimate and professional. Overall, the site is well-structured, user-friendly, and compliant with GDPR requirements.

N

nedomysleno s.r.o.

ceskehrady.cz

48

Hrady CZ is a Czech cultural festival focusing on summer events held at historical castles and monuments across multiple regions. The website is professionally designed with good content quality, providing detailed event information, ticket sales, and partner listings. The technical infrastructure leverages modern web technologies including Bootstrap, jQuery, and CDN hosting via Cloudfront, with integrated analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is solid with HTTPS enforced and cookie consent implemented, though some HTTP security headers are missing and no explicit security or incident response policies are published. The absence of WHOIS data limits domain trust assessment, but the presence of detailed contact information and active social media channels supports legitimacy. Overall, the site is suitable for its target audience and business purpose.

V

VOTTA LAB

votta.co

55

VOTTA LAB is a Latvia-based digital marketing agency specializing in branding, high-performing websites, and results-driven marketing services. The company targets businesses seeking to grow through impactful digital presence and marketing strategies. The website is professionally designed using WordPress and Elementor, with modern technologies such as Bootstrap and Google Analytics integrated. The technical infrastructure is solid with good mobile optimization and SEO practices, although performance is moderate. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the business appears legitimate and credible, but could improve transparency and security practices.

Č

Česká asociace science center z.s.

sciencecentra.cz

59

The website www.sciencecentra.cz represents the Česká asociace science center z.s., a non-profit association promoting science centers and planetariums across the Czech Republic. The site provides educational content, visitor information, and promotes 9 institutions in 8 cities, targeting families, students, and educators interested in science. The business model is focused on non-commercial promotion and education, positioning itself as a leading national association in this sector. Technically, the website is built on WordPress 5.7.12 with Elementor and several plugins including Contact Form 7 and Complianz GDPR for cookie consent. The site uses modern web technologies such as Bootstrap and FontAwesome, and integrates Google Analytics for visitor tracking with consent mechanisms. The site is mobile optimized and has good SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses a cookie consent banner, but lacks visible security headers like Content-Security-Policy. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data for the domain is unavailable, which slightly reduces trustworthiness, but the presence of clear contact information and social media links supports legitimacy. Overall, the website is well-structured, professional, and safe for general audiences. Recommendations include publishing a clear privacy policy and terms of service, adding security headers, and maintaining regular updates to plugins and WordPress core to enhance security and compliance.

The website iedu.sk serves as the official support and information portal for the Slovak Ministry of Education, Research, Development and Youth. It provides valuable resources and call center support for schools, students, teachers, and other stakeholders involved in educational projects. The platform hosts links to various educational tools and projects, including COVID-19 school forms, digital learning platforms, and antivirus solutions for schools. The site is positioned as a governmental service portal with a medium-sized operational scope and a clear focus on education within Slovakia. Technically, the website employs a modern front-end technology stack including Bootstrap, jQuery, Font Awesome, and other libraries to deliver a responsive and user-friendly experience. The site is mobile-optimized and structured with clear navigation, although it lacks advanced SEO and accessibility features. No CMS or hosting provider details are evident from the source. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks explicit security headers and formal security policies, incident response contacts, or vulnerability disclosure mechanisms. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance, security hardening, and transparency regarding incident response and vulnerability management.

M

MESTSKÉ LESY KOŠICE a.s.

meleskosice.sk

48

MESTSKÉ LESY KOŠICE a.s. is a municipal forestry company based in Košice, Slovakia, dedicated to sustainable forest management and environmental stewardship. The company operates with a focus on balancing economic benefits with public and ecological functions of forests. Their services include wood trade, public auctions, firewood sales, seedling trade, and forest-related services including hunting and leasing of recreational facilities. The website reflects a well-established regional entity with transparent operations, including published annual reports and FSC certification, underscoring their commitment to responsible forestry. Technically, the website employs a traditional web stack with jQuery, Bootstrap, and various JavaScript plugins to provide a responsive and user-friendly experience. While the site is mobile-optimized and well-structured, there is room for improvement in modernizing the tech stack and enhancing accessibility and SEO. The presence of Google Analytics indicates moderate user tracking, balanced by a clear cookie consent mechanism. From a security perspective, the site shows basic good practices such as cookie consent and no visible sensitive data exposure. However, it lacks explicit security headers and documented incident response or vulnerability disclosure policies. The SSL configuration and hosting details are not explicitly provided, suggesting an area for further assessment. Overall, the security posture is adequate but could be strengthened with additional measures. The overall risk assessment is low given the nature of the business and the absence of critical vulnerabilities or suspicious indicators. Strategic recommendations include implementing comprehensive security headers, publishing detailed security and privacy policies, and adopting a security.txt file for vulnerability reporting. These steps would enhance trust and compliance, supporting the company’s transparent and responsible image.

Petr Kvapil operates a professional web development service specializing in creating modern websites, e-shops, SEO optimization, and custom web projects primarily targeting businesses and individuals in the Czech Republic. The website showcases a portfolio of client references and testimonials, indicating a well-established presence with over 20 years of experience and more than 100 websites developed. The business model is service-oriented, focusing on tailored digital solutions with a strong emphasis on client satisfaction and technical quality. Technically, the website employs a modern technology stack including jQuery, Bootstrap, AOS, Flickity, and other JavaScript libraries to deliver a responsive and visually appealing user experience. The use of a proprietary CMS allows for rapid updates and customization. While performance is moderate and mobile optimization is good, accessibility features are basic. SEO practices are implemented effectively, supported by proper meta tags and structured content. From a security perspective, the site lacks visible security headers and explicit privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency. Google Analytics and Tag Manager are used for tracking without visible consent mechanisms, indicating potential privacy compliance gaps. Overall, the website is professional and trustworthy in content and design but would benefit from enhanced security practices, privacy compliance improvements, and verification of domain registration details to strengthen its risk posture and user confidence.

B

BAUMIT, spol. s r.o.

baumit.cz

55

Baumit, spol. s r.o. is a well-established Czech company specializing in manufacturing and distributing building materials, including facade plasters, paints, insulation systems, and renovation products. The company targets construction professionals and end consumers seeking quality building solutions. The website reflects a mature digital presence with modern technologies such as Vue.js, Google Tag Manager, and advanced tracking tools, supporting a good user experience and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. The domain's WHOIS data confirms legitimacy and long-term operation since 1998. Overall, Baumit presents a trustworthy and professional online presence aligned with its business objectives.

H

Horolezecké centrum Brno s.r.o.

klajda.cz

54

Horolezecké centrum Brno s.r.o. operates a network of climbing walls and offers climbing courses and safety training primarily in Brno, Czech Republic. The company also runs an equipment shop and provides specialized training and equipment inspections. The website reflects a small but professional local business focused on climbing enthusiasts and safety education. The presence of multiple locations and partner affiliations indicates a well-established local market position. Technically, the website uses modern frontend technologies including Bootstrap, Font Awesome, jQuery, and Google Tag Manager for analytics. The site is mobile-optimized with good navigation and content relevance. However, there is no detected CMS or advanced backend framework visible. Hosting appears to be provided by SPWeb, a Czech hosting provider. From a security perspective, the site uses HTTPS and includes no visible sensitive data exposure. However, it lacks security headers and explicit privacy or cookie policies, which are compliance gaps. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information support legitimacy. No WAF or blocking mechanisms were detected, and no adult or explicit content is present. Overall, the site is a good representation of a small local business with moderate technical maturity and some security and compliance improvements needed. The domain registration opacity is a concern and should be addressed to improve trust.

P

PRAGOKONCERT BOHEMIA, a.s.

rockcastle.cz

61

Rock Castle is a Czech Republic-based music festival specializing in rock and metal genres, organized by PRAGOKONCERT BOHEMIA, a.s. The website serves as an information portal and e-commerce platform for ticket and merchandise sales, targeting music fans and festival attendees. The site demonstrates a consistent brand presence and partnership ecosystem with other regional festivals and cultural entities. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and multiple analytics tools such as Matomo, Google Analytics, and Smartlook, with a strong emphasis on user privacy via a detailed cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data is likely due to privacy protection, which is justified for this business type. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

N

nedomysleno s.r.o.

hradycz.cz

45

Hrady CZ is a well-established cultural festival in the Czech Republic, focusing on summer events at historical Czech and Moravian castles. The website reflects a professional event organization business with clear information on festival dates, locations, ticket sales, and partners. The company behind the site is nedomysleno s.r.o., founded in 2009, which aligns with the domain age and business maturity. The target audience includes general public and cultural event attendees. Technically, the website uses modern frameworks like Bootstrap and jQuery, integrates analytics tools such as Google Analytics, Facebook Pixel, and Hotjar, and is hosted with Amazon Cloudfront CDN for performance. The site is mobile-optimized and SEO-friendly with clear navigation and good content quality. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie management. Overall, the website is trustworthy and professionally maintained, supporting the business model of cultural event promotion and ticket sales.

S

SIA Kurzemes televizija

kurzemestv.lv

48

Kurzemes Televīzija is a small regional television broadcaster based in Latvia, producing bilingual content in Latvian and Russian. The company targets the local population of the Kurzeme region, offering news, cultural programming, and video archives. The website is built on WordPress with common plugins and frameworks, providing a good user experience with clear navigation and mobile optimization. However, the site lacks formal privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure information. Contact information is clearly presented, enhancing business credibility. Overall, the domain registration aligns with the business identity, though WHOIS data is incomplete.

M

Masarykův onkologický ústav

mou.cz

61

Masarykův onkologický ústav (MOÚ) is a leading oncology institute based in Brno, Czech Republic, specializing in cancer treatment, diagnostics, research, and education. Established in 1935, it holds a prominent position in the Czech healthcare sector, accredited by the Organization of European Cancer Institutes (OECI). The website reflects a comprehensive healthcare service provider targeting patients, medical professionals, and visitors, offering detailed information on preventive programs, clinical studies, and patient care services. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and the Nette Framework, ensuring good mobile responsiveness, accessibility, and SEO optimization. The site uses HTTPS with good SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. Analytics are handled via Google Analytics with appropriate user consent. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, email obfuscation, and cookie consent. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident and could be improved. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is unavailable, which slightly reduces domain trust but the professional presentation and certifications mitigate concerns. Overall, the website is well-designed, content-rich, and professionally maintained, supporting the institution's credibility and trustworthiness. Strategic recommendations include enhancing security headers, maintaining up-to-date third-party libraries, and publishing explicit security and incident response policies to further strengthen trust and compliance.

M

Mobymedia CZ s.r.o.

onkotv.cz

45

OnkoTV.cz is a specialized digital news platform providing oncology congress reporting and professional medical content targeted exclusively at healthcare professionals in the Czech Republic. Operated by Mobymedia CZ s.r.o. in collaboration with Medical Tribune CZ s.r.o., the site offers video series, interviews, and congress coverage with gated access requiring professional qualification confirmation. The platform leverages WordPress CMS and common web technologies such as jQuery, Bootstrap, and Vimeo API to deliver multimedia content. While the site enforces HTTPS and includes GDPR consent language in its login form, it lacks a visible cookie consent mechanism and explicit security headers, which are recommended for enhanced security and compliance. WHOIS data confirms domain legitimacy and consistency with the business entity. Overall, the website demonstrates a good level of professionalism, content quality, and business credibility, with moderate technical and security maturity.

N

Nadační fond Gratia

nadacnifondgratia.cz

50

Nadační fond Gratia is a Czech Christian non-profit organization founded in 2021, dedicated to supporting families in crisis, pregnant students, widows, and widowers with children who face temporary hardship. The website presents a professional and consistent brand image with clear contact information, real beneficiary stories, and active social media channels. The technical infrastructure is based on WordPress with modern plugins and SEO tools, hosted likely by Active24, and employs HTTPS with good security practices. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. However, there is room for improvement in security policy transparency and incident response readiness. Overall, the website is trustworthy, well-maintained, and serves its target audience effectively.

W

Wink

wink.cz

42

Wink.cz is a Czech advertising agency operating since 2001, offering media and advertising services primarily targeted at a general audience in the Czech Republic. The website presents basic business information with a focus on event promotion, particularly music concerts, but lacks detailed contact or policy information. Technically, the site is built on Drupal CMS and uses common web libraries such as jQuery, Bootstrap, and Font Awesome, indicating a moderate level of digital maturity. However, the site shows limited mobile optimization and basic SEO practices. Security posture is minimal with no detected security headers or privacy policies, and no visible analytics or tracking mechanisms, which may reflect a low level of data collection but also a lack of compliance transparency. Overall, the site is functional but would benefit from enhanced security, privacy compliance, and richer business information to improve trust and professionalism.

T

Tukuma novada dome

tukums.lv

57

Tukuma novada dome operates as the official local government authority for the Tukums region in Latvia, providing a broad range of municipal services including administration, social support, cultural activities, education, and public procurement. The website serves as a comprehensive portal for residents and stakeholders, offering structured navigation and detailed information about local governance and community projects. Technically, the site is built on Drupal CMS, employs modern web technologies, and integrates Google Analytics for user behavior insights. The site is mobile-optimized and accessible, with a good performance profile. From a security perspective, the website enforces HTTPS, implements standard security headers, and uses a cookie consent mechanism aligned with GDPR principles, although it lacks a dedicated privacy policy and explicit security incident response information. No vulnerabilities or suspicious activities were detected in the content or scripts. The WHOIS data confirms the domain's legitimacy and consistency with the governmental nature of the site. Overall, the website demonstrates a solid digital presence with good business credibility and technical implementation. However, improvements in privacy compliance documentation and security transparency would enhance trust and regulatory adherence. The risk profile is low, with no critical security issues identified.

M

My-hosting.lv

my-hosting.lv

41

My-hosting.lv is a Latvian-based IT and business services provider specializing in web hosting, e-commerce platforms, cloud services, business email, legal and accounting support, and office IT equipment sales. The company targets small and medium enterprises seeking comprehensive digital and business solutions. Their website is built on Joomla CMS and features a professional design with clear navigation and good mobile optimization. The technical infrastructure includes modern JavaScript libraries and plugins, supporting a moderate performance level. Security posture is adequate with HTTPS enforced and CSRF protections, but lacks explicit security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices. WHOIS data confirms the legitimacy of the domain with consistent registration details matching the business information. Overall, the website is trustworthy and professional, serving as a solid digital presence for the company.