Security Directory

D

Debant s.r.o.

ubytovanivchorvatsku.cz

44

The website www.ubytovanivchorvatsku.cz operates as the largest Czech catalog for private accommodation in Croatia, offering direct contact to property owners without commission fees. It targets Czech-speaking tourists seeking affordable holiday apartments and houses across multiple Croatian regions. The business is operated by Debant s.r.o., established since 2002, indicating a mature presence in the hospitality sector. Technically, the site uses common web technologies including jQuery, Google Analytics, and Google Tag Manager, with a responsive design and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear professional and consistent. Overall, the site provides a valuable service in the travel accommodation market with room for improvement in privacy and security practices.

The website www.cmscore.cz represents a small Czech technology company, intercore solutions s.r.o., offering a modular and secure content management system named cms core. The business focuses on providing a performant and extensible CMS platform targeted at web developers, advertising agencies, and businesses requiring reliable web content management solutions. The company emphasizes security and modularity, with references to international audits and cooperation with local agencies. Technically, the website uses legacy JavaScript libraries such as jQuery 1.7.1 and includes Google Analytics for user tracking. The site is moderately optimized for performance and mobile use but lacks modern security headers and explicit HTTPS confirmation. Privacy compliance is minimal, with no cookie consent mechanisms detected, and contact information is limited to a contact form without direct emails or phone numbers. The absence of WHOIS data for the domain reduces trust and raises questions about domain registration legitimacy. Overall, the site is functional and professional but would benefit from improved security and privacy practices.

Cafe Mozart is a hospitality business based in Prague, Czech Republic, operating a restaurant and an online e-shop for vouchers and cakes. The website presents a professional and consistent brand image with clear contact information and multilingual support. The business targets general consumers interested in dining and gift vouchers. Technically, the site uses a combination of jQuery, Bootstrap, and third-party marketing and analytics tools, delivering a moderate performance with good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks some security headers and published security policies. WHOIS data is unavailable, which slightly reduces trustworthiness but does not detract from the overall professional presentation. Strategic improvements in security and transparency are recommended.

Café Mozart is a hospitality business located in Prague's Old Town, offering café and patisserie services with a unique view of the Astronomical Clock. The website presents a professional and content-rich experience targeting tourists and visitors seeking cultural and gastronomic experiences. The technical infrastructure uses common web technologies such as jQuery, Bootstrap, Google Analytics, and Google Maps API, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security headers and public incident response policies. WHOIS data is unavailable, which slightly reduces trust but the website's contact information and social media presence support legitimacy. Overall, the site is well-designed and trustworthy for its business domain.

VIRTUAL ZOOM s.r.o. operates a professional website offering digital solutions primarily for the hospitality industry, including an automated online gift voucher sales platform (ZOOM VOUCHER), email marketing tools (ZOOM LETTER), and loyalty program management (ZOOM LOYALTY). The company targets hotels, restaurants, and similar businesses seeking to enhance their digital sales and marketing capabilities. The website is well-designed, mobile-optimized, and rich in content, including client testimonials and detailed service descriptions. Technically, the site uses modern JavaScript libraries and integrates Google Analytics and reCAPTCHA for security and tracking. Privacy and cookie consent mechanisms are implemented in compliance with GDPR standards. However, the WHOIS data for the domain www.virtualzoom.com is missing or unavailable, which raises concerns about domain registration legitimacy and trustworthiness. No terms of service or explicit security policy pages were found, and security headers appear absent, suggesting room for improvement in security posture. Overall, the website presents a credible and professional business front but should address domain registration transparency and enhance security practices.

The Österreichischer Berufsverband für Ayurveda operates as a professional association dedicated to promoting and safeguarding the quality of Ayurveda practice and education in Austria. The website serves as a hub for Ayurveda professionals and interested individuals, offering resources such as a blog, event calendar, membership information, and a professional directory. The organization positions itself as a key player in the Austrian Ayurveda community, emphasizing quality assurance and professional networking. Technically, the website is built on a custom PHP platform with classic web technologies including jQuery 1.12.2 and CSS. While functional and moderately optimized for mobile, the site uses outdated JavaScript libraries and lacks modern security headers, which could expose it to vulnerabilities. The site does not implement a cookie consent mechanism, which is a compliance gap under GDPR. From a security perspective, the site uses HTTPS (assumed but not explicitly confirmed), employs POST for login forms, and does not expose sensitive data. However, the absence of security headers and use of outdated libraries reduce its security posture. No incident response or vulnerability disclosure policies are visible, and no contact emails or phone numbers are provided, limiting direct communication channels. Overall, the site is trustworthy and professional but would benefit from technical modernization, enhanced security practices, and improved privacy compliance to better protect users and align with regulatory requirements.

Č

Česká komora lehkých obvodových plášťů

cklop.cz

46

Česká komora lehkých obvodových plášťů (ČKLOP) is a Czech industry association founded in 2007 that unites manufacturers and suppliers of windows, doors, and lightweight facade systems. It serves as a professional body supporting quality standards, market development, and information dissemination for its approximately 46 member companies. The website reflects a mature digital presence with good content quality, clear navigation, and active engagement through newsletters and social media. Technically, the site uses common JavaScript libraries and tracking tools, with HTTPS enabled and cookie consent implemented, though it lacks some security headers and a published privacy policy. The absence of WHOIS data reduces domain trust but does not detract from the professional appearance and legitimacy of the business. Overall, the site is well-positioned to serve its industry audience effectively.

T

TPTQ Arabic

tptq-arabic.com

68

TPTQ Arabic is a specialized type foundry focused on professional Arabic fonts for print and web, targeting designers and typographers seeking modern and original Arabic typefaces. The company operates a well-structured website offering font sales, licensing options, custom font services, and educational content such as articles and essays. The business appears to be a small, niche player in the media industry with a consistent brand presence and a sister company relationship with Typotheque.com. Technically, the website uses a custom CMS, modern JavaScript libraries, and cloud hosting infrastructure with AWS DNS. It incorporates Google Analytics for tracking, Google reCAPTCHA for form security, and Sentry for error monitoring, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and some security best practices in place, but lacks DNSSEC and security headers, and does not provide explicit security or incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR indicators. Overall, the website is professional, trustworthy, and safe for general audiences.

T

Tlačová agentúra Slovenskej republiky

vtedy.sk

9

Vtedy.sk is a Slovak historical media platform operated by the Tlačová agentúra Slovenskej republiky (TASR), the national press agency. The website serves as a public memory gallery offering historical articles, photo galleries, and video content focused on Slovak history and culture. It targets a general audience interested in educational and cultural content. The platform maintains consistent branding and is integrated with partner sites such as teraz.sk and tablet.tv. The business model centers on content publishing and archival media services within the media industry in Slovakia.

A

Amundi

amundi.com

70

Amundi is a leading European asset management company serving over 100 million clients worldwide. The company offers a broad range of responsible and innovative investment solutions tailored to individuals, professionals, and institutions. The website reflects a mature digital presence with comprehensive corporate information, investor relations data, and downloadable official documents. Technically, the site is built on Drupal 10 with modern JavaScript libraries and includes cookie consent mechanisms and analytics tracking. Security posture is good with HTTPS enforced and a vulnerability disclosure policy, though explicit security headers and a security.txt file are absent. Overall, the site is professional, trustworthy, and well-structured, supporting Amundi's market position as a top global asset manager.

M

Měšťanský pivovar Havlíčkův Brod a.s.

hbrebel.cz

47

Měšťanský pivovar Havlíčkův Brod a.s. operates the website www.hbrebel.cz, presenting itself as a historic brewery established in 1834 in the Czech Republic. The company offers a diverse portfolio of beers, including traditional and specialty brews, and engages customers through brewery tours, original Rebel restaurants, and an e-commerce platform. The website targets adult consumers, requiring age verification due to alcohol-related content. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Google Analytics, Hotjar, and Facebook Pixel, with a custom CMS by CzechProject spol. s r.o. The site is mobile optimized and SEO friendly, though accessibility could be improved. Security posture is good with HTTPS and reCAPTCHA on forms, but lacks some security headers and a published security policy. Privacy compliance is strong with GDPR-aligned privacy and cookie policies. However, the absence of WHOIS data for the domain reduces trust from a domain registration perspective. Overall, the website is professional, functional, and trustworthy from a business and user perspective, but domain legitimacy verification is limited.

Ú

Únětický pivovar a.s.

unetickypivovar.cz

56

Únětický pivovar a.s. is a historic Czech brewery with origins dating back to 1710 and a modern revival in 2010. The company produces traditional Czech beers and operates a brewery pub and bistro, offering brewery tours, events, and beer sales both on-site and via an e-shop. The website reflects a well-established regional brewery with a strong local presence and a focus on craft beer enthusiasts and visitors. Technically, the website is built on Drupal 10 with modern web technologies and includes standard tracking and marketing tools such as Google Analytics and Facebook Pixel, with a cookie consent mechanism in place. Security posture is good with HTTPS enforced and no critical vulnerabilities detected, although explicit privacy and security policies are missing. Overall, the site is professional, well-branded, and trustworthy, targeting a mature audience interested in beer and hospitality services.

La Bodeguita del Medio Praha is a Cuban restaurant and bar located in Prague, offering authentic Cuban cuisine, cocktails, live music, and a cigar club experience. Established since 2002, it is part of the Gastro Holding Group a.s., serving both tourists and locals seeking a cultural and culinary Cuban experience. The website is professionally designed with good content quality, clear navigation, and mobile optimization. It integrates multiple tracking and advertising technologies with user consent mechanisms, reflecting a mature digital marketing approach. However, the absence of WHOIS data and explicit security policies slightly reduces trustworthiness. The site uses HTTPS and cookie consent banners, but lacks visible security headers and incident response information. Overall, the business appears legitimate and well-positioned in the hospitality sector in Prague.

Café Mozart is a hospitality business located in Prague's Old Town, offering a unique cafe experience with home-made cakes, coffee, piano concerts, and event hosting. The business leverages its prime location opposite the Prague Astronomical Clock to attract tourists and locals seeking cultural and culinary experiences. The website reflects a professional and consistent brand image with clear contact information and multilingual support. Technically, the site uses a modern tech stack including jQuery, Bootstrap, Google Maps API, and integrates analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is generally good with HTTPS and cookie consent mechanisms, though some improvements are recommended in security headers and error handling. The absence of WHOIS data slightly reduces trust but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing security headers, fixing minor code errors, and maintaining GDPR compliance.

Grand Hotel Praha is a historic 4-star hotel located in the heart of Prague's Old Town Square, offering a blend of history and modern comfort. The website presents a comprehensive overview of their accommodation options, including rooms, residences, dining at Café Mozart, special offers, concierge services, and event hosting. The business targets tourists and business travelers seeking premium lodging in Prague's city center. The site is professionally designed with consistent branding and clear navigation, supporting multiple languages and featuring integrated Google Maps and social media links. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Analytics, and Google Maps API. It features cookie consent mechanisms compliant with GDPR and uses various marketing and retargeting tools. Performance is moderate with good mobile optimization. However, minor PHP notice errors and lack of explicit security headers indicate areas for improvement in security hardening. Security posture is adequate with HTTPS implied and no exposed sensitive data, but the absence of WHOIS data for the domain raises concerns about domain registration transparency. Cookie and privacy policies are present and comprehensive, supporting GDPR compliance. Overall, the site is trustworthy and professional but would benefit from enhanced security headers and domain registration clarity. Recommendations include fixing PHP errors, implementing security headers, verifying domain registration details, and continuous monitoring of third-party scripts to maintain security and compliance.

VIRTUAL ZOOM s.r.o. operates a professional website focused on providing automated email marketing and CRM solutions tailored for the hospitality industry, including hotels and restaurants. Their flagship product, ZOOM LETTER, offers automated and one-time email campaigns, client database management, and integrations with PMS and payment systems. The company positions itself as a reliable partner with a strong regional presence and a portfolio of satisfied clients, supported by detailed testimonials and a comprehensive service offering. Technically, the website employs modern JavaScript libraries such as jQuery, AOS, and Google Tag Manager, alongside Google reCAPTCHA v3 for form security and a proprietary cookie management system. The site is well-optimized for mobile devices and demonstrates good SEO practices. Security posture is solid with HTTPS enforced and consent-based tracking, though some security headers and explicit policies are missing. The WHOIS data for the domain www.virtualzoom.com is unavailable, indicating either a recent registration, privacy protection, or a potential issue with domain legitimacy. Despite this, the website content and business information appear professional and trustworthy. No signs of malicious or adult content were detected, and the site complies with GDPR requirements through clear privacy and cookie policies. Overall, VIRTUAL ZOOM presents a credible digital marketing service for the hospitality sector with a mature technical infrastructure and good privacy practices. However, the absence of WHOIS data and some security policy disclosures suggest areas for improvement in transparency and security documentation.

VIRTUAL ZOOM s.r.o. is a Czech Republic-based company specializing in digital solutions for the hospitality sector, including automated mailing systems, loyalty programs, e-commerce platforms, and custom website development. Established since 2003, the company positions itself as a leader in smart digital solutions for hotels, restaurants, and related businesses across Europe. Their website reflects a mature digital presence with comprehensive service offerings and strong client testimonials, indicating a well-established market position. Technically, the website employs a modern tech stack including jQuery, AOS animations, Google reCAPTCHA, and Google Tag Manager, ensuring a responsive and interactive user experience. The site is mobile-optimized and integrates cookie consent mechanisms aligned with GDPR requirements. However, some security best practices such as HTTP security headers are not visibly implemented, representing an area for improvement. From a security perspective, the site uses HTTPS and includes anti-bot measures via reCAPTCHA. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS domain registration data raises some concerns about domain legitimacy and transparency, though the business content and client references support authenticity. Overall, the website demonstrates a strong business and technical foundation with good privacy compliance and user experience. Strategic recommendations include enhancing security headers, publishing a security policy, and clarifying domain registration details to improve trust and compliance.

T

TopDomains

meter.app

50

Meter.app is a premium domain name offered for sale by TopDomains, a domain marketplace specializing in high-value domain names. The website provides clear purchase options including a 'Buy Now' price and a lease-to-own monthly payment plan. Transactions are securely handled via GoDaddy, a reputable domain registrar and escrow service. The site targets startups, app developers, and businesses seeking premium .app domains, leveraging the Google-backed .app TLD known for its HTTPS requirement and security reputation. The business model focuses on domain brokerage and resale, positioning itself as a trusted reseller in the technology domain space. Technically, the website uses a simple tech stack primarily based on jQuery and custom scripts, with basic mobile optimization and moderate performance. The site lacks advanced frameworks or CMS indications and does not show evidence of analytics or tracking technologies, which may reflect a focus on privacy or minimal data collection. However, security headers are not detected, and no explicit cookie or privacy consent mechanisms are present on the domain itself, though privacy policies are linked from the parent domain. From a security perspective, the site benefits from the .app TLD's HTTPS enforcement and the secure transaction process via GoDaddy. There are no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and explicit privacy compliance features suggests room for improvement. The WHOIS data aligns with the business purpose, showing consistent registration information and no privacy protection, supporting legitimacy. Overall, the site is trustworthy but could enhance its security posture and privacy compliance. The overall risk assessment is low, with recommendations to implement security headers, add cookie consent, and publish clear security and incident response policies to improve trust and compliance. The site is suitable for its target audience and business model but should address privacy and security best practices to align with modern standards.

M

MACHIN.CZ s.r.o.

machin.cz

57

MACHIN.CZ s.r.o. is a Czech Republic-based technology service provider specializing in web development, e-commerce solutions, graphic design, and digital marketing. With over 20 years of market presence and more than 650 clients served, the company offers a comprehensive suite of services including website creation, e-shop development, hosting, and marketing consultancy. The website reflects a professional and consistent brand image targeting businesses seeking digital transformation and online presence enhancement. Technically, the site employs modern frameworks such as Bootstrap, jQuery, and the Nette PHP framework, ensuring a responsive and user-friendly experience. The hosting and domain registration are consistent with the company's Czech origin and long-standing operation. Security-wise, the website enforces HTTPS, implements cookie consent mechanisms compliant with GDPR, and uses reputable analytics and advertising tools like Google Analytics and Facebook Pixel. No critical vulnerabilities or exposed sensitive data were detected, though security headers could be improved. Overall, the site demonstrates a mature digital infrastructure and a strong commitment to privacy and user experience.

WEB4U s.r.o. is a Czech-based technology company specializing in web hosting, domain registration, server hosting, and VPN services. The company targets individuals and businesses seeking reliable online presence solutions, offering a range of hosting tariffs, dedicated and virtual servers, and VPN plans. The website demonstrates a mature digital infrastructure with integrated marketing and analytics tools, including Google Tag Manager, Google Ads, Intercom, and Salesmanago. The site is well-structured, professionally designed, and optimized for user experience and SEO, primarily serving the Czech market. Security posture is solid with HTTPS enforcement and reCAPTCHA integration, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data is a notable gap, raising questions about domain registration transparency. Overall, the website is trustworthy and professional, with room for improvement in security transparency and registrant information clarity.

P

Polstrin

hotelmezisvy.cz

48

Polstrin boutique hotel Mezi švy is a small boutique hotel located in Hradec Králové, Czech Republic, offering uniquely designed rooms with custom-made furniture by the parent company Polstrin, a traditional Czech upholstery manufacturer. The hotel emphasizes a modern, artistic interior design and provides a contactless check-in experience. The website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and various UI libraries, reflecting a moderate level of digital maturity. While the site is well-designed and user-friendly, it lacks explicit privacy and terms of service pages, which are important for compliance. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and incident response information. Overall, the website presents a trustworthy and professional image with clear contact details and social media presence.

C

Congress Hotel Centrum Košice

hotel-centrum.sk

64

Congress Hotel Centrum Košice is a hospitality business located in Košice, Slovakia, offering accommodation, restaurant services, and event hosting including weddings, conferences, and exhibitions. It positions itself as the largest congress center in Košice, targeting a general audience including business and leisure travelers. The website content is professionally presented with clear navigation and relevant service descriptions. Technically, the site uses common web technologies such as jQuery, Cookiebot for cookie consent, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The site is mobile optimized and SEO friendly but lacks some advanced accessibility features. From a security perspective, the website implements cookie consent mechanisms and uses HTTPS, although explicit security headers are not detected. There is no published privacy policy or terms of service, which are important for compliance and user trust. No incident response or vulnerability disclosure information is provided. The domain registration is privacy protected, which is typical for this business type and does not raise immediate concerns. Overall, the security posture is moderate with room for improvement in transparency and technical security controls. The overall risk assessment is low to moderate. Strategic recommendations include publishing comprehensive privacy and terms of service pages, enhancing security headers, and providing incident response contacts. These steps will improve compliance, user trust, and security maturity. The website is suitable for its hospitality business purpose but should address compliance gaps to align with GDPR and best practices.

E

Entre s.r.o.

entre.cz

58

Entre s.r.o. is a Czech manufacturing company specializing in self-adhesive labels, printed materials, plastic products, and packaging solutions, including eco-friendly options with FSC® certification. Established since 1992, the company positions itself as a flexible, reliable, and fast service provider targeting businesses requiring printing and packaging services. The website is professionally designed, primarily in Czech, with multi-language support, and provides clear contact information and product offerings. Technically, the site runs on WordPress with common plugins such as WPBakery Page Builder and Cookie Law Info, and integrates Google Analytics and Tag Manager for tracking. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though security headers and explicit privacy or security policies are absent. Overall, the site is trustworthy and mature, with a domain age consistent with the company's history.

N

Nursen

nursen.com

56

Nursen is a Czech Republic-based manufacturer specializing in high-quality seating furniture for healthcare, nursing care, and institutional care sectors. The company is part of JECH CZ s.r.o., a family-owned business established in 1991, with a domain registered since 2007, indicating a mature and stable market presence. Their website presents a professional image with clear product information, company background, and contact details, targeting healthcare providers and institutional clients. Technically, the website uses a variety of JavaScript libraries and marketing tools including Google Tag Manager, Google Analytics, Facebook Pixel, and Smartlook, reflecting a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

A

Austin Powder Company

austin.cz

71

Austin Powder Company is a well-established manufacturer and service provider specializing in explosives and initiation systems for industrial blasting applications. The company emphasizes safety and responsible use of explosives, targeting industrial sectors such as mining and construction. Their market position is supported by a long domain history and a significant technological and R&D foundation. The website reflects a professional and consistent brand image with multilingual support and active social media engagement. Technically, the site is built on WordPress with modern JavaScript libraries and frameworks, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS enforcement and domain transfer protection, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms. Overall, the site presents a credible and trustworthy digital presence for a large industrial company.

M

MN Modelar

mn-modelar.cz

38

MN Modelar operates a professional e-commerce platform specializing in plastic models and modeling supplies, targeting hobbyists primarily in the Czech Republic and Slovakia. The website offers a broad catalog of products from well-known brands, supported by customer reviews and secure payment options, positioning itself as a trusted regional retailer. Technically, the site employs modern web technologies including Bootstrap, jQuery, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Security measures include HTTPS enforcement and reCAPTCHA on forms, though some HTTP security headers like Content-Security-Policy are missing. Privacy compliance is addressed with cookie consent mechanisms and a privacy policy page. However, the absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and business indicators suggest a legitimate operation. Overall, the site is well-structured, user-friendly, and secure, with room for improvement in security header implementation and transparency regarding domain registration.

P

Plastikovy-model.cz

plastikovy-model.cz

48

Plastikovy-model.cz is a Czech Republic based e-commerce retailer specializing in plastic model kits including airplanes, cars, ships, military vehicles, and related modeling accessories such as paints, glues, and tools. The website targets hobbyists and model enthusiasts, offering a broad catalog of products from various well-known manufacturers. The business operates a niche online retail model with a clear focus on the modeling hobby market segment in the Czech Republic. Technically, the website employs a modern but standard technology stack including jQuery, Bootstrap, and Google Analytics for tracking. The site is mobile responsive and well-structured for user navigation. However, it lacks some advanced security headers and detailed WHOIS data, which slightly impacts trustworthiness. The site uses HTTPS properly and implements cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the site shows good practices such as HTTPS enforcement and cookie consent but could improve by adding security headers like Content-Security-Policy and HSTS. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are present and accessible, supporting compliance with data protection regulations. Overall, Plastikovy-model.cz presents a professional and trustworthy online retail presence for plastic model enthusiasts. The absence of WHOIS data is a minor concern but does not significantly detract from the site's legitimacy given the quality of content and contact transparency. Strategic improvements in security headers and ongoing library updates are recommended to enhance security posture.

Eduard – Model Accessories ltd. operates a professional e-commerce website specializing in plastic model kits and related accessories such as decals, photoetched parts, and masks. The company targets hobbyists and collectors worldwide, offering a broad catalog of products with detailed descriptions and stock availability. The website demonstrates a mature digital presence with active social media integration and customer support channels. Technically, the site uses a modern tech stack including jQuery, Google Tag Manager, and a specialized e-commerce platform (oXyShop), delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with comprehensive policies and GDPR indicators. However, the absence of WHOIS registration data raises concerns about domain legitimacy, though the professional site and contact information mitigate this risk. Overall, the site is trustworthy and well-managed but would benefit from enhanced transparency in domain registration and security policies.

M

Mateřská škola Sportík s.r.o.

sportikbaby.cz

44

Sportík Baby operates private kindergartens in the Czech Republic, focusing on preschool education with an emphasis on physical activity, healthy lifestyle, experiential learning, and English language exposure. The business has a local market presence with two main locations and a history of approximately 15 years. The website is professionally designed, mobile-optimized, and provides clear information about services and contact details. Technically, the site uses a mix of legacy and modern web technologies, including jQuery and SwiperJS, but could benefit from updated analytics and enhanced security headers. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks explicit privacy policies and security headers. WHOIS data is unavailable, which impacts trust but the visible business information and contact details support legitimacy. Overall, the site is functional and trustworthy for its target audience.

H

Hotel International Brno

hotelinternational.cz

53

Hotel International Brno is a well-established hospitality business located in the historic center of Brno, Czech Republic. The hotel offers a range of accommodation options including rooms and suites, complemented by multiple restaurants and bars, event and meeting facilities, and wellness services. The website reflects a professional and customer-focused approach with multilingual support and integrated booking capabilities. The company maintains active social media channels and displays recognized certifications, enhancing its market credibility. Technically, the website employs a modern technology stack including jQuery, Google Maps API, Google Analytics, Facebook Pixel, and a third-party booking widget. It features a cookie consent mechanism compliant with GDPR, uses HTTPS, and integrates reCAPTCHA for security. However, some security headers are not visibly implemented, and WHOIS data is unavailable, which slightly impacts trustworthiness. The security posture is solid with encrypted communications and consent-based tracking, but could be improved by adding explicit security policies and security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear policies and user controls. Overall, the website and business present a low risk profile with strong professionalism and digital maturity. The main concern is the lack of WHOIS transparency, which should be investigated to ensure domain legitimacy and ownership clarity.

VIRTUAL ZOOM s.r.o. is a Czech Republic based company specializing in professional web design services primarily targeting the hospitality sector including hotels and restaurants. Their business model revolves around delivering custom web solutions powered by their proprietary CMS system, ZOOM DRIVER, which supports modular plug-ins and easy content management. The company positions itself as a digital excellence partner with a focus on modern, responsive, and technically sound web presentations that help clients grow their businesses. The website is well-structured, professionally designed, and provides clear contact channels and client references, indicating a credible and established presence in their niche. Technically, the website employs a modern JavaScript stack including jQuery, AOS for animations, Popper.js, Tippy.js for tooltips, and Slick Carousel for UI components. It integrates Google Tag Manager and reCAPTCHA v3 for analytics and bot protection respectively. The site uses HTTPS with an excellent SSL configuration and implements a GDPR-compliant cookie consent mechanism with granular user controls. However, some security best practices such as HTTP security headers and explicit incident response policies are not evident. From a security standpoint, the site shows good maturity with encrypted communications and user consent management but lacks visible security policies and WHOIS transparency. The absence of WHOIS registrant data reduces trust slightly but the professional website content and consistent branding mitigate major concerns. No vulnerabilities or suspicious content were detected. Overall, the site is safe, compliant, and trustworthy for its business purpose. Strategically, the company should enhance its security posture by adding HTTP security headers, publishing a security policy, and improving WHOIS transparency to boost trustworthiness. Regular audits of third-party scripts and continued compliance with privacy regulations will further strengthen their position.

N

N/A

onlinecasino-nl.com

78

Onlinecasino-nl.com is a Dutch-language affiliate and informational website specializing in online casinos and gambling in the Netherlands. Founded in 2021, it provides casino reviews, bonus offers, and guides targeting Dutch online gamblers. The site uses WordPress CMS with common JavaScript libraries such as jQuery and Knockout.js, and integrates Google Tag Manager and CookieYes for consent management. Hosting and domain registration are consistent and reputable, with no privacy protection on WHOIS data. Security posture is moderate with HTTPS enabled and clientTransferProhibited domain status, but lacks advanced headers like CSP and DNSSEC. Cookie consent is comprehensive and GDPR compliant. No direct contact information or explicit security policies are published. Overall, the site is professionally designed, mobile optimized, and provides relevant content for its niche adult audience.

P

Perfect System, s.r.o.

cbsystem.cz

52

CBSystem.cz is an established online ticketing platform primarily serving the Czech Republic market, specializing in the pre-sale and reservation of tickets for cultural and entertainment events such as theater, music, festivals, and sports. The company behind the site is Perfect System, s.r.o., founded in 2004, indicating a mature presence in the regional event ticketing industry. The website offers a multilingual interface and integrates with a dedicated ticket sales subdomain, providing a comprehensive event browsing and purchasing experience for general audiences interested in cultural activities. Technically, the website is built on Joomla CMS and leverages a variety of frontend technologies including jQuery, Bootstrap, and several JavaScript libraries for UI components and date handling. It employs Google Analytics, Google Tag Manager, Facebook SDK, and Adform for tracking and marketing purposes. The site is served over HTTPS, ensuring encrypted communication, but lacks some advanced security headers and explicit privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site demonstrates a moderate security posture with HTTPS enabled and no visible sensitive data exposure. However, the absence of security headers, vulnerability disclosure mechanisms, and privacy/cookie policies indicates areas for improvement. The domain registration data is consistent with the business claims, showing a long-standing domain age and no privacy protection, which supports legitimacy. Overall, CBSystem.cz is a functional and professional ticketing platform with good content quality and user experience. To enhance trust and compliance, it should implement comprehensive privacy and cookie policies, improve security headers, and provide clear incident response contacts. These steps will strengthen its security posture and regulatory compliance, benefiting both the business and its customers.

M

Mikroregion Horní Vltava-Boubínsko

hornivltava.cz

58

Mikroregion Horní Vltava-Boubínsko is a regional non-profit interest association focused on the development and cooperation of municipalities located in the Šumava National Park and Protected Landscape Area. The organization supports local development projects, cultural heritage preservation, and tourism promotion within its member municipalities. The website reflects a well-structured regional portal with clear navigation and relevant content for residents and visitors. Technically, the site uses common JavaScript libraries such as jQuery, Flexslider, and Fancybox, providing a moderate level of interactivity and responsiveness. Privacy compliance is well addressed with a detailed cookie consent mechanism and a comprehensive privacy policy. Security posture is moderate, with HTTPS implied but lacking explicit security headers and incident response information. Overall, the site presents a trustworthy and professional image consistent with a small regional government or non-profit entity.

Z

Základní škola a Mateřská škola Jistebnice

zsjistebnice.cz

44

Základní škola a Mateřská škola Jistebnice is a local educational institution providing primary and nursery education services to the community of Jistebnice, Czech Republic. The website serves as an information portal for parents, students, and local stakeholders, offering updates on school activities, contact information, and resources such as school menus and forms. The institution operates as a public organization under the municipality of Jistebnice, focusing on educational and childcare services. Technically, the website is built on the WRS content management system by W Partner s.r.o., utilizing a combination of legacy and modern web technologies including jQuery, Bootstrap, and various slider and gallery plugins. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. The design is consistent and professional, supporting a positive user experience. From a security perspective, the website uses HTTPS but lacks visible advanced security headers and explicit privacy or cookie consent mechanisms. The use of an outdated jQuery version presents a potential security risk. No WHOIS data is available for the domain, which reduces domain trustworthiness, although the website content and contact details appear legitimate and consistent with a public educational institution. Overall, the website is functional and trustworthy for its intended audience but would benefit from improved security practices, updated technology stack, and enhanced privacy compliance to strengthen its digital maturity and risk posture.

W Partner s. r. o. is a Czech small-sized technology company specializing in web editorial systems and sales of computing technology. Their website offers services including a custom web content management system (WRS), IT hardware sales, hardware and software servicing, training, and virtual tours. The company targets small to medium businesses or individuals seeking easy-to-manage web solutions and IT support within the Czech Republic. The website is professionally designed with good content quality and consistent branding, supporting their niche market position. Technically, the website uses a custom CMS and incorporates several JavaScript libraries such as jQuery 1.11.3, Fancybox, Flexslider, and Bootstrap 4 beta. While the site is functional and moderately optimized for mobile and accessibility, some libraries are outdated, posing potential security risks. No advanced frameworks or hosting provider details are evident. SEO and accessibility features are basic but adequate for the target audience. From a security perspective, the site uses HTTPS but lacks visible security headers and employs outdated JavaScript libraries, which could expose vulnerabilities. There is no explicit cookie consent mechanism despite the presence of cookie and privacy policy pages. WHOIS data is missing, which reduces trustworthiness from a domain registration perspective, though the website content and business information appear legitimate and consistent with a small Czech IT company. Overall, the website is safe, professional, and functional but would benefit from technical and security updates, improved privacy compliance, and better domain registration transparency to enhance trust and security posture.

Onlinehosting s.r.o operates the website onlinehosting.cz, providing professional and extremely fast web hosting services primarily targeting demanding projects, businesses, and open source PHP projects. The company offers a range of services including PHP webhosting, large capacity email hosting, corporate cloud storage, and managed server rentals. With over 24 years in the market, the company positions itself as a reliable and technologically current hosting provider in the Czech Republic. The website is well-designed, mobile-optimized, and uses modern frontend technologies such as Bootstrap and Font Awesome, alongside Google Analytics for traffic monitoring. Security posture is adequate with HTTPS enforced and secure login forms, though there is room for improvement in security headers and updated libraries. Privacy and cookie policies are not found, indicating a gap in compliance and transparency. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

VIRTUAL ZOOM s.r.o. is a Czech-based digital agency specializing in professional web design services primarily targeting the hospitality sector and related industries. Their offerings include custom web design, a proprietary CMS platform named ZOOM DRIVER, and various plug-ins to enhance website functionality. The company positions itself as a partner in digital excellence, focusing on modern, responsive, and technically sound web solutions that help clients attract and convert customers. The website content is well-structured, professionally presented, and localized in Czech, with clear contact information and social media presence. Technically, the website employs a modern JavaScript stack including jQuery, AOS for animations, Tippy.js for tooltips, and Google services such as reCAPTCHA and Tag Manager for analytics and security. The site uses HTTPS with good SSL configuration and includes a GDPR-compliant cookie consent mechanism. However, some security headers are missing, and there is no explicit security or incident response policy published. The CMS is custom-built, indicating a tailored approach but also requiring ongoing maintenance to avoid vulnerabilities. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and bot protection via reCAPTCHA. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is evident through cookie management and a privacy policy page. However, the absence of WHOIS registration data for the domain is a significant concern, potentially indicating an unregistered domain or privacy protection that conflicts with the professional business presentation. Overall, the website is professional, functional, and compliant with basic privacy standards, but the missing WHOIS data reduces trustworthiness. Strategic recommendations include improving security headers, publishing terms of service, and verifying domain registration details to enhance credibility and trust.

H

HAVEL & PARTNERS

nextzeny.sk

44

NextŽeny is a project led by the reputable law firm HAVEL & PARTNERS, focusing on the global trend of wealth transfer into the hands of women, supporting female entrepreneurship, investment, and networking in the Czech and Slovak markets. The website provides research, studies, and a magazine to inform and empower women managing wealth. Technically, the site is built on WordPress with modern performance optimizations and multilingual support. Security posture is solid with HTTPS and DNSSEC enabled, though explicit security policies and cookie consent mechanisms are missing. The WHOIS data shows inconsistencies with domain creation dates, which should be verified to ensure trustworthiness. Overall, the site is professional, content-rich, and targeted at a finance-savvy female audience in Slovakia and the Czech Republic.

G

Geis CZ s.r.o.

geis-group.cz

54

Geis CZ s.r.o. is a well-established logistics company operating primarily in the Czech Republic, offering a comprehensive range of transportation and logistics services including pallet transport, full truckload, warehousing, air and sea freight, packaging, and customs services. The company emphasizes sustainability and responsibility through its MissionZero program and has a strong international network supported by numerous branches and partners. The website is professionally designed, content-rich, and targets business clients seeking logistics solutions. Technically, the site uses modern JavaScript libraries and analytics tools, with good mobile optimization and SEO practices. Security posture is generally good with HTTPS and cookie consent mechanisms, though it lacks visible security headers and explicit published security policies. WHOIS data is unavailable, which slightly reduces domain trust but the overall digital footprint and business presence support legitimacy.

E

EPRAVO.CZ, a.s.

epravo.cz

51

EPRAVO.CZ, a.s. operates a well-established Czech legal information portal providing comprehensive legal content including laws, court decisions, articles, and educational resources. The platform targets legal professionals and the general public interested in law, offering subscription-based premium services and an e-shop for courses and publications. The website demonstrates a mature digital infrastructure utilizing modern web technologies such as jQuery, Bootstrap, and various analytics and marketing tools. Security posture is solid with HTTPS enforcement, bot protection via Cloudflare Turnstile, and cookie consent mechanisms, although some security headers could be improved. The absence of WHOIS data reduces domain registration transparency but does not detract from the professional presentation and trust signals evident on the site. Overall, the site is a credible and valuable resource in the Czech legal domain.

M

MMN, a.s.

nemjil.cz

60

MMN, a.s. operates as a regional hospital in Jilemnice, Czech Republic, providing a broad range of healthcare services including emergency care, radiology, blood donation, and pharmacy services. The website positions the hospital as a modern and future-oriented healthcare provider emphasizing quality, safety, specialization, and interdisciplinary cooperation. The target audience includes patients, healthcare professionals, and the general public seeking medical services in the region. The hospital maintains an active online presence with social media channels and an e-shop pharmacy partner.

The website www.janskelazne.cz serves as an official tourism and accommodation information portal for Janské Lázně and the SkiResort Černá hora-PEC, the largest ski resort in the Czech Republic. It offers online booking services with promotional discounts on ski passes and leisure activities, targeting tourists and visitors interested in winter sports and summer leisure in the Krkonoše region. The site demonstrates a consistent brand presence and provides clear contact information, reinforcing its role as a local tourism information center with over two decades of experience. Technically, the website employs a traditional web stack including jQuery, jQuery UI, Google Analytics, Google Tag Manager, and Google Maps API, indicating moderate digital maturity. The site is mobile-optimized with good navigation and content relevance, although some accessibility features could be improved. Performance is moderate, with external dependencies on trusted providers for fonts and analytics. From a security perspective, the site uses HTTPS and standard tracking scripts but lacks explicit security headers and privacy/cookie policies, which are critical for GDPR compliance and user trust. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which should be addressed to enhance trustworthiness. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security practices, and verification of domain registration details to strengthen its security posture and business credibility.

VIRTUAL ZOOM s.r.o. is a Czech Republic-based company specializing in digital solutions for the hospitality sector, including automated mailing systems, loyalty programs, e-commerce platforms, and custom website development. Established since 2003, it positions itself as a leader in smart digital solutions for hotels, restaurants, and related businesses across Europe. The website is professionally designed, content-rich, and targets hospitality businesses seeking to enhance customer engagement and revenue through digital tools. Technically, the site uses modern JavaScript libraries and frameworks, integrates Google Tag Manager and reCAPTCHA for security and analytics, and implements cookie consent mechanisms to comply with privacy regulations. Security posture is good with HTTPS enforced and secure form handling, though some security headers are missing. WHOIS data is unavailable, which slightly impacts trust but the website's professional presentation and client testimonials support its legitimacy. Overall, the site is well-structured, user-friendly, and compliant with GDPR, making it a credible digital presence for its business domain.

H

HERHSIANG Information Co., LTD.

tgb.com.tw

8

The website tgb.com.tw/webmail serves as a corporate webmail login portal primarily targeting employees or users associated with the tgb.com.tw domain. The business behind the site is HERHSIANG Information Co., LTD., a Taiwanese company providing webmail services. The site is minimalistic, focusing on secure user authentication with features such as XSRF tokens and two-step verification code mechanisms. However, it lacks publicly visible privacy, cookie, or terms of service policies, and no contact information is provided on the page. From a technical perspective, the site uses standard web technologies including HTML, CSS, JavaScript, jQuery, and jQuery UI. The performance and mobile optimization are basic, with no advanced frameworks or CMS detected. Security best practices are partially implemented, but the absence of visible HTTPS enforcement and security headers reduces the overall security posture. No analytics or advertising scripts are present, indicating a focus on internal use rather than marketing. Security-wise, the site shows some good practices such as hidden XSRF tokens and password input protections, but the lack of explicit HTTPS enforcement and security headers is a concern. There is no evidence of vulnerability disclosure or incident response policies. The domain registration data is consistent and legitimate, registered through TWNIC with no suspicious patterns. Overall, the website is functional for its intended purpose but would benefit from enhanced security measures, privacy compliance, and improved user trust signals. Strategic recommendations include implementing HTTPS with HSTS, adding security headers, publishing privacy and cookie policies, and providing clear contact information to improve credibility and compliance.

P

Pacific Northwest Trail Association

pnt.org

53

The Pacific Northwest Trail Association (PNTA) is a dedicated non-profit organization focused on the stewardship, construction, and maintenance of the Pacific Northwest Trail, a 1,200-mile National Scenic Trail. The website serves as a comprehensive resource for hikers, volunteers, donors, and conservationists, offering maps, trip planning tools, and updates on trail conditions and organizational activities. The PNTA maintains an active digital presence with regular blog posts, newsletters, and social media engagement, positioning itself as the authoritative steward of the trail. Technically, the website is built on WordPress with a robust set of plugins including WooCommerce for e-commerce, Events Manager for event handling, and WP FullCalendar for calendar displays. The site uses modern web technologies such as jQuery, Google Maps API, and FontAwesome icons, delivering a responsive and user-friendly experience. SEO and accessibility are adequately addressed, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses secure external scripts. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no visible security or incident response policies are published. The WHOIS data is incomplete, which slightly impacts trustworthiness, but the professional presentation and active content mitigate concerns. Overall, the PNTA website is a well-maintained, content-rich platform serving a niche outdoor and conservation community. Strategic improvements in privacy policy visibility, security header implementation, and WHOIS transparency would enhance trust and compliance.

S

SkiResort ČERNÁ HORA – PEC

skiresort.cz

50

SkiResort ČERNÁ HORA – PEC operates as the largest ski resort in the Czech Republic, offering extensive skiing terrain across six interconnected ski areas. The business targets winter sports enthusiasts, families, and tourists, providing services such as ski pass sales, ski schools, equipment rental, and accommodation. The website demonstrates a mature digital presence with modern technologies, interactive booking forms, and comprehensive content. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are lacking. The absence of WHOIS data limits domain trust verification but does not detract significantly from the overall legitimacy given the professional branding and partner affiliations. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and improving transparency around data protection officers and incident response.

S

SEDIGAS. Asociación Española del Gas

sedigas.es

48

SEDIGAS is a well-established Spanish non-profit association representing the gas industry, founded in 1970. The organization focuses on promoting the gas sector, ecological transition, renewable gases, training, certification, and communication within Spain. The website reflects a professional and comprehensive digital presence with rich content, including sector data, press releases, and educational resources. The target audience includes industry professionals, companies, and the general public interested in energy and gas topics. Technically, the website uses a modern tech stack including Bootstrap, jQuery, FontAwesome, and Google reCAPTCHA, ensuring a responsive and user-friendly experience. The site is well-optimized for SEO and mobile devices, with good accessibility features. Performance is moderate, with multimedia content such as videos and sliders enhancing engagement. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks visible security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear cookie and privacy policies and consent mechanisms aligned with GDPR requirements. Overall, the website presents a low-risk profile with strong business credibility and digital maturity. The main limitation is the lack of publicly accessible WHOIS data due to registry restrictions, which slightly reduces domain trust analysis completeness. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further improve trust and security posture.

S

Střední průmyslová škola Třebíč

spst.cz

50

Střední průmyslová škola Třebíč is a well-established regional technical secondary school in the Czech Republic, offering a variety of vocational and technical education programs including energy, IT, mechanical engineering, and artistic metalworking. The school maintains strong industry partnerships and has received multiple certifications and awards, positioning it as a reputable educational institution in its region. The website is built on Drupal 10, leveraging modern web technologies and providing a good user experience with clear navigation and mobile optimization. However, the absence of explicit privacy and cookie policies and missing WHOIS data present compliance and trust challenges. Security posture is moderate with HTTPS implied but lacking visible security headers and incident response information. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

S

Správa železnic, státní organizace

zeleznicenaletiste.cz

57

Správa železnic, státní organizace, operates the official website zeleznicenaletiste.cz to provide information about the modernization and construction of railway infrastructure connecting Prague, Václav Havel Airport, and Kladno. The website serves as a communication platform for residents, commuters, and travelers, offering project updates, news, and detailed descriptions of the railway sections. The organization holds a strong market position as a government entity responsible for transportation infrastructure in the Czech Republic. Technically, the website is built on the Liferay CMS platform, utilizing modern JavaScript libraries such as jQuery, Slick Carousel, and Unite Gallery. It integrates analytics and marketing tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized with good navigation and accessibility features, although some improvements in accessibility could be made. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, explicit security headers and a public security policy or vulnerability disclosure program are absent. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the organization's profile. Overall, the website demonstrates a solid security posture and good privacy compliance, with room for enhancements in security policy transparency and accessibility. The site is trustworthy, professionally maintained, and serves its public sector mission effectively.