Security Directory

Gleznukalns Creative operates an e-commerce website focused on publishing and selling coloring books and digital printables for both kids and adults, emphasizing mindfulness and relaxation. The business is relatively new, founded in 2023, and targets a niche market interested in creative and stress-relief activities. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Klaviyo for marketing and Judge.me for customer reviews. The technical infrastructure is solid with good mobile optimization and moderate performance, though some improvements in accessibility and SEO could be made. Security posture is adequate with HTTPS and domain locking, but lacks advanced security headers and explicit security policies. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the site is professional and trustworthy but could enhance transparency and security documentation to improve user trust and compliance.

A

Aleksander Zinko

iamzinko.com

61

Aleksander Zinko is a professional event host specializing in weddings, corporate events, and parties, with a portfolio spanning over 300 events in 14 countries. The website presents a strong personal brand with clear service offerings and a focus on a sophisticated, multicultural audience. Technically, the site is built on the Tilda CMS platform, leveraging modern web technologies and CDN hosting for performance and reliability. While the site is visually appealing and content-rich, it lacks formal privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and vulnerability disclosure mechanisms. Overall, the domain registration is transparent and consistent with the business, though the domain age is relatively new compared to the claimed experience. The site is safe, professional, and trustworthy, with clear contact channels and social media integration.

S

SIA LATVIAN AMUSEMENT AGENCY

abpark.lv

43

The website www.abpark.lv represents a Latvian amusement park named "Avārijas brigāde" operated by SIA LATVIAN AMUSEMENT AGENCY. It targets families and visitors seeking entertainment and leisure activities, offering various attractions and ticket sales. The site is well-structured, mobile-optimized, and provides clear contact information and social media links, supporting a positive user experience and business credibility. Technically, the site uses modern web technologies including Bootstrap and Facebook SDK, with HTTPS enforced and cookie consent mechanisms in place. However, security headers are not evident, and no formal security or incident response policies are published. Overall, the security posture is good but could be improved with additional headers and documented policies. The domain WHOIS data aligns well with the business claims, showing a legitimate Latvian company without privacy protection, enhancing trustworthiness. No adult or questionable content is present, making the site safe for general audiences.

B

BSSHOP s.r.o.

bsshop.sk

55

BSSHOP s.r.o. is a well-established Czech company specializing in the development of e-commerce platforms integrated with the POHODA economic system. With over 20 years of experience and more than 650 active e-shops, they hold a strong market position in the Czech and Slovak e-commerce sectors. Their key services include e-shop creation, integration with IS POHODA, process automation, supplier integration, marketing tools, and custom modifications. The company also operates its own online store, demonstrating practical expertise in e-commerce operations. Technically, the website employs modern web technologies including JavaScript, jQuery, Bootstrap, and integrates analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized and shows good SEO practices, although accessibility features are basic. Hosting appears to be managed via their own CDN and infrastructure. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, it lacks visible security headers and does not provide explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professional, trustworthy, and business-focused with clear contact information and partner references. The absence of privacy and terms of service pages is a notable gap. The domain WHOIS data aligns well with the business claims, supporting legitimacy. Strategic improvements in security policies and compliance documentation are recommended to enhance trust and security posture.

N

National Heritage Institute

kvetnazahrada-kromeriz.cz

43

The website represents the National Heritage Institute's official presentation of the Květná zahrada Kroměříž, a UNESCO World Heritage flower garden in the Czech Republic. It serves as an authoritative source for visitor information, tours, opening hours, and cultural heritage publications. The site targets tourists and cultural heritage enthusiasts, providing comprehensive content and clear navigation. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, Leaflet.js for maps, and Mapy.cz API, ensuring a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though some security headers and explicit security policies are absent. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate government entity. Recommendations include enhancing security headers and publishing incident response contacts to improve security maturity.

H

HDT impex, s.r.o.

iled.cz

45

HDT impex, s.r.o. operates the website iled.cz as a professional supplier of LED lighting solutions focused on energy savings for interior, exterior, and public lighting applications. The company emphasizes its own EU-based development and manufacturing capabilities, offering customized LED products and comprehensive project services including audits, installation, and financing. The website presents a professional image with clear business information and multiple partner links, targeting businesses and public sector clients in the Czech Republic and surrounding regions. Technically, the site uses standard web technologies including JavaScript libraries and Google Analytics for tracking, but lacks advanced security headers and visible privacy or cookie policies, indicating room for compliance improvement. Security posture is moderate with no blocking or WAF detected, but missing key security best practices. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

H

HDT impex, s.r.o.

nodeply.cz

45

Nodeply.cz is a Czech Republic-based technology company specializing in digital signage solutions. Their platform enables remote management of digital displays, interactive content, live production, and cloud-based content management. The company targets businesses and organizations needing scalable and interactive digital signage, offering a subscription-based model with volume discounts. The website is professionally designed with clear navigation and relevant business content, reflecting a small but focused technology provider founded in 2019. Technically, the site uses modern web standards and integrates Google Analytics for user tracking but lacks visible privacy and cookie policies or consent mechanisms. Security posture is moderate with no detected security headers or explicit security policies, and SSL status is unknown from the provided data. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional and business-appropriate but would benefit from improved privacy compliance and security best practices.

S

Sockshire s.r.o.

kastomi.com

42

Kastomi, operated by Sockshire s.r.o., is a Czech-based small business specializing in custom textile manufacturing, online tailoring repairs, and club merchandise e-shops. The company targets businesses, sports clubs, and individuals seeking unique, ecological, and design-focused textile solutions. The website is professionally designed with clear navigation and good content quality, supporting the business model effectively. Technically, the site uses modern frameworks like Bootstrap and integrates analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and HubSpot Forms. Hosting is provided by WEDOS Internet, a reputable Czech provider. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks DNSSEC and security headers, and no explicit security or incident response policies are published. Privacy compliance is partial, with GDPR policy present but no cookie consent mechanism. Overall, the domain registration data aligns well with the business information, supporting legitimacy and trustworthiness.

P

Pardubice Stallions

stallions.cz

59

The website www.stallions.cz represents the Pardubice Stallions, a local American football team based in Pardubice, Czech Republic. The site serves as a hub for team news, recruitment information, match updates, and partner acknowledgments. It targets sports enthusiasts and community members interested in American football. The business model is that of a small non-profit sports club supported by local sponsors and partners. The website content is well-structured, visually consistent, and provides relevant information about the team and its activities. Technically, the website is built on the Webnode platform, utilizing modern web technologies such as HTML5, CSS3, and JavaScript, with assets delivered via Amazon Cloudfront CDN. The site is mobile-optimized and loads with moderate performance. However, accessibility and SEO optimizations are basic, and no advanced frameworks or CMS customizations are detected. From a security perspective, the website enforces HTTPS with a valid SSL certificate and implements a cookie consent banner compliant with GDPR principles. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, and no privacy policy or terms of service pages are present. No contact information for security incidents or data protection officers is provided. The WHOIS data is unavailable or privacy protected, which is typical for small organizations but limits domain trust assessment. Overall, the website is functional, trustworthy for its purpose, and safe for general audiences. Strategic improvements include adding privacy and terms policies, enhancing security headers, and providing clear contact information to improve compliance and trustworthiness.

The website moravatour.cz is currently a parked domain with no active business content. It is primarily used to advertise the domain for sale, targeting potential domain buyers. The site lacks any company information, contact details, or service descriptions, indicating no operational business presence. The technical infrastructure relies on basic HTML and JavaScript with advertising scripts from Google Adsense and related networks. The site is hosted on Cloudfront CDN, providing moderate performance and basic mobile optimization. Security posture is weak due to absence of HTTPS enforcement, lack of security headers, and no visible security policies or incident response information. Privacy compliance is minimal with only a basic privacy policy linked via a popup and no cookie consent mechanism. Overall, the site presents low trustworthiness and limited business credibility.

T

TJ ISMM JISTEBNÍK, z.s.

tjjistebnik.cz

55

TJ ISMM Jistebník, z.s. is a local Czech sports club primarily focused on football activities, including men's teams, youth training, and community events. The website serves as an information portal for club news, match schedules, membership, and event announcements, targeting local sports enthusiasts and club members. The business operates as a non-profit entity with regional sponsorship support, emphasizing community engagement and sports development. Technically, the website is built on the Webnode CMS platform, utilizing modern web technologies such as JavaScript, CSS, and HTML5, and is hosted via AWS Cloudfront CDN. It employs Google Tag Manager for analytics and tracking. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. However, it lacks advanced security headers and visible privacy or cookie policies. From a security perspective, the site enforces HTTPS and uses standard tracking tools but does not implement comprehensive security headers or provide incident response contacts. The absence of WHOIS data due to privacy protection limits domain trust analysis, though the website content and structure appear legitimate and appropriate for its community sports role. Overall, the website presents a good user experience and content quality for its audience but would benefit from enhanced privacy compliance, security hardening, and transparency improvements to strengthen trust and regulatory adherence.

I

ISMM & TESO s.r.o.

teso-jistebnik.cz

47

ISMM & TESO s.r.o. is a Czech manufacturing company specializing in teraco products such as stairs, stair arms, tiles, and accessories, with a tradition spanning over 30 years. The company targets construction professionals and end customers seeking high-quality teraco solutions. Their market position is supported by strong references and membership in the ISMM group, indicating industry credibility. The website reflects a professional business with clear contact information and product offerings. Technically, the site uses standard web technologies including jQuery and lightbox scripts, hosted likely by Wedos, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and privacy compliance mechanisms like cookie consent are missing. The site uses Google Analytics for tracking without explicit cookie consent, indicating partial GDPR compliance. Overall, the website is trustworthy and professionally presented but could improve in privacy and security best practices.

K

KVD spol. s r.o.

kvd.cz

50

KVD spol. s r.o. is a well-established Czech manufacturer specializing in corrugated cardboard packaging solutions, with over 30 years of market presence. The company offers custom packaging, logo printing, and wholesale distribution, supported by additional e-commerce platforms for packaging and wool products. Their website reflects a professional and consistent brand image targeting business customers requiring quality packaging solutions. Technically, the site uses modern JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though lacking explicit security policies or incident response contacts. Overall, the website is trustworthy and compliant with GDPR, providing clear contact information and business legitimacy supported by consistent WHOIS data.

F

FBC Třinec

fbctrinec.cz

45

FBC Třinec is a Czech floorball sports club with a professional online presence targeting local players, fans, and community members. The website provides information about teams, training schedules, match programs, and club news, positioning itself as a key regional sports entity. The technical infrastructure leverages modern JavaScript libraries such as Alpine.js and Swiper.js, hosted on EOS CMS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, but lacks some security headers and formal privacy or cookie policies. The absence of WHOIS data reduces domain trustworthiness, though the website's content and social media presence support legitimacy. Overall, the site is functional, professional, and safe for general audiences.

K

Kanonýři Kladno

kanonyrikladno.cz

50

Kanonýři Kladno is a progressive and modern Czech florbal sports club focused on developing and representing florbal both competitively and socially. The club prioritizes care for its players and engages actively with fans and partners. The website reflects a well-structured digital presence with news, team information, events, and merchandising options. Technically, the site uses modern JavaScript frameworks like Alpine.js and Swiper.js, integrates Google Analytics and Tag Manager for tracking, and is mobile optimized with good performance. Security posture is solid with HTTPS and cookie consent, though lacks some security headers and formal privacy and terms policies. The absence of WHOIS data reduces domain trust slightly, but the extensive social media presence and partner affiliations support legitimacy. Overall, the site is professional and trustworthy for its audience.

F

FBC Liberec

fbcliberec.cz

43

FBC Liberec is a local sports club focused on floorball activities in the Liberec region of the Czech Republic. The website serves as an informational portal for the club's activities, training sessions, and recruitment. The business operates primarily as a community sports organization with a small scale and local market presence. The domain age of over 20 years supports the legitimacy and established nature of the club. Technically, the website is built with basic HTML and CSS, utilizing Bootstrap for styling. There is no evidence of advanced CMS or frameworks. The site shows moderate performance and basic mobile optimization but lacks accessibility features and modern security practices such as HTTPS and security headers. No analytics or tracking technologies are detected, indicating minimal digital marketing or user tracking. From a security perspective, the absence of HTTPS and security headers is a significant concern. No privacy or cookie policies are present, and no contact or incident response information is provided. The site does not collect user data via forms, reducing exposure but also limiting engagement capabilities. Overall, the security posture is weak and requires improvements to meet modern standards. The overall risk is moderate given the nature of the site as a local sports club with limited sensitive data handling. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving mobile and accessibility features, and providing clear contact and security incident response information to enhance trust and compliance.

PHOBS operates an online booking management platform accessible via a secure login portal. The website is designed for authorized organizational users to manage bookings, featuring standard login and password recovery mechanisms. The technical infrastructure relies on common web technologies including jQuery and PHP, with some use of progressive web app manifest files. However, the site lacks visible security headers and privacy compliance documentation, which are critical for protecting user data and meeting regulatory requirements. The absence of WHOIS registration data for the domain raises concerns about the legitimacy and transparency of the domain ownership. Overall, while the site functions as intended for booking administration, it requires significant improvements in security posture and compliance to enhance trustworthiness and protect user information.

O

Občianske združenie/MAS Podhoran

podhoran.sk

58

MAS Podhoran is a Slovak non-profit civic association focused on community-led local development and regional support in the Podhoran area. The organization facilitates grant programs, promotes regional cooperation, and supports local municipalities and stakeholders. The website serves as an information hub for news, calls for proposals, and documentation related to rural development projects. Technically, the site is built on the Webnode CMS platform, uses HTTPS with a valid SSL certificate, and integrates Google Analytics and Facebook SDK for tracking and social media presence. While the site is mobile-optimized and well-structured, it lacks advanced security headers and a cookie consent mechanism, which are important for compliance and security. Overall, the security posture is moderate with room for improvement in headers and privacy compliance. The domain registration is consistent with the organization's profile, supporting legitimacy. The site is safe for general audiences and does not contain any adult or questionable content.

D

Divadlo loutek Ostrava, příspěvková organizace

divadloloutek.cz

47

Divadlo loutek Ostrava is a cultural non-profit organization specializing in puppet theatre performances primarily targeting children, families, and schools in Ostrava, Czech Republic. The website presents a professional and well-structured platform showcasing upcoming performances, educational programs, and the artistic ensemble. The organization maintains active social media channels and provides clear contact information, enhancing its accessibility and community engagement. Technically, the website employs modern web technologies including JavaScript frameworks and CDN hosting, ensuring a responsive and visually appealing user experience. However, the absence of WHOIS data and explicit privacy policies slightly detracts from the overall trustworthiness. Security posture is moderate with HTTPS usage but lacks visible security headers and comprehensive privacy compliance documentation. Overall, the site is suitable for its audience with a good balance of content quality and technical implementation.

I

Globus výdejní služba

iglobus.cz

68

The website shop.iglobus.cz serves as an online retail platform for Globus Hypermarkets in the Czech Republic, offering a wide range of over 25,000 products with a focus on online ordering and store pickup services. The platform is built on the Spryker Commerce OS, leveraging modern web technologies and integrating marketing and analytics tools such as Google Tag Manager and Cookiebot for cookie consent management. The site demonstrates good design quality, clear navigation, and mobile optimization, targeting general consumers in the Czech market seeking convenient grocery and retail shopping solutions. From a technical perspective, the website uses a modern e-commerce framework (Spryker) and includes secure login forms with CSRF protection. However, explicit security headers are not evident in the provided data, and privacy and terms of service pages are not clearly found, indicating areas for improvement in compliance and security transparency. The site employs HTTPS, ensuring encrypted communications, and integrates marketing and tracking services responsibly with cookie consent mechanisms. Security posture is moderate with no visible vulnerabilities or exposed sensitive data, but the absence of WHOIS registration data reduces domain trustworthiness. The lack of registrant information and domain age details limits the ability to fully assess legitimacy, although the branding and content strongly suggest a legitimate business linked to Globus Hypermarkets. No adult or questionable content is present, and the site is safe for general audiences. Overall, the website is a functional and professional e-commerce platform with room for enhancement in privacy policy visibility, security header implementation, and domain registration transparency. Strategic recommendations include publishing comprehensive privacy and terms documents, improving security headers, and providing clear contact and incident response information to bolster trust and compliance.

D

Debant s.r.o.

prazsky.cz

50

Pražský.cz is a Czech Republic based online directory and advertising platform focused on tradespeople, professionals, and services in Prague. Established in 2008 and operated by Debant s.r.o., the website offers a comprehensive catalog of local craftsmen, service providers, and related businesses, targeting residents and businesses within Prague. The platform also includes advertising opportunities and links to related partner sites in accommodation and other sectors. Technically, the site uses a custom-built infrastructure with standard web technologies including HTML, CSS, JavaScript, Google Fonts, and integrates Google Adsense and Google Analytics for monetization and analytics. It employs an IAB Transparency and Consent Framework compliant consent management platform to address GDPR requirements. Security posture is moderate with HTTPS enabled but lacks explicit security headers and detailed security policies. Contact information is available but decentralized, with no dedicated privacy or terms of service pages. Overall, the site is functional and serves its niche well but could improve in privacy transparency and security best practices.

Bulharska.cz is a Czech-language travel information website focused on providing comprehensive details about vacations in Bulgaria, including popular destinations, beaches, cultural sites, and travel tips. The site targets Czech tourists, especially families, looking for affordable and enjoyable holiday options in Bulgaria. It operates primarily as an informational portal with affiliate marketing for travel bookings and vacation packages. Technically, the site uses standard HTML, CSS, and JavaScript, with advertising integrations from Google Adsense and AdFox. Hosting is provided via HostMonster, indicated by the nameservers. The website is moderately optimized for performance and SEO but has basic mobile and accessibility features. Security posture is weak, lacking security headers and published privacy or cookie policies, which poses compliance risks. No contact information or security incident channels are provided, limiting trust and transparency. The domain is well-established since 2008, consistent with the business claims and language. Overall, the site is functional and relevant but requires improvements in privacy, security, and user trust to enhance its credibility and compliance.

1pujcky.cz is a Czech-language affiliate marketing website specializing in non-bank loans, loans without credit registry checks, and related financial products such as insurance, savings, and mortgages. The site targets individuals who may have difficulty obtaining loans from traditional banks, offering them alternative financial solutions through affiliate links. The domain is well-established since 2009, indicating a mature presence in the Czech financial affiliate market. Technically, the site uses standard web technologies including Google Fonts, Adsense, and a GDPR-compliant consent management platform. However, it lacks explicit privacy policies, terms of service, and direct contact information, which are critical for trust and compliance. Security practices are basic, with no visible security headers or incident response information. Overall, the site functions as an informational and lead generation platform with moderate technical and security maturity.

E

Endorphin Republic

endorphinrepublic.sk

57

Endorphin Republic is a Slovakia-based specialized e-commerce retailer offering premium sports equipment and apparel focused on cycling, skiing, running, outdoor, and lifestyle categories. The website demonstrates a solid market position with partnerships with well-known brands such as SCOTT, Dolomite, and Oakley. The platform provides a professional user experience with clear navigation, mobile optimization, and integrated live chat support. Technically, the site uses modern JavaScript frameworks and integrates multiple marketing and analytics tools including Google Analytics, Bing Ads, and Facebook Pixel. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers could be enhanced. No privacy policy or terms of service pages were detected, indicating room for compliance improvements. Overall, the website is trustworthy, safe, and professionally maintained, suitable for general audiences interested in sports retail.

Ostrava Towers Complex is a real estate development project by RT TORAX, s.r.o., focused on creating a vibrant urban center in Ostrava, Czech Republic. The project integrates residential and multifunctional towers with public spaces, aiming to connect historic and new city areas. The website presents detailed architectural concepts and company vision, targeting residents, investors, and local businesses. Technically, the website uses standard web technologies with a clean design and good mobile optimization but lacks advanced security headers and privacy compliance features. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the website content and branding appear professional and consistent with the business. Overall, the site demonstrates moderate digital maturity with room for security and compliance improvements.

A

adria-chorvatsko.cz

adria-chorvatsko.cz

48

adria-chorvatsko.cz is a Czech language travel and lifestyle website focused on providing guides, tips, and news about the Croatian coast. The site targets general audiences interested in travel and culture related to Croatia, operating primarily as a content publishing platform monetized through advertising. The website is relatively new, with domain registration in 2024, and hosts a variety of articles across multiple categories such as finance, technology, society, and health. The business model centers on content delivery with ad revenue as a key income source. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with analytics powered by Matomo and advertising via Google Adsense. The hosting provider is identified as vas-hosting.com. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with no major errors or broken elements detected. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers such as Content-Security-Policy and X-Frame-Options. No security policy or incident response information is published, and no vulnerability disclosure or security.txt file is present. Privacy compliance is partial; a privacy policy and terms of use exist, but no cookie consent mechanism is implemented, which is a GDPR compliance gap. Contact information is limited to a contact form, with no direct emails or phone numbers provided. Overall, the website presents a moderate risk profile with no critical security issues detected but room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing cookie consent, adding security headers, publishing security policies, and enhancing contact transparency to improve trust and compliance.

BENCOLOR.CZ is a Czech Republic-based e-commerce business specializing in the sale of paints, automotive refinishing products, protective work equipment, and related accessories. The website offers a broad catalog of products including spray guns, polishing compounds, masking tapes, and industrial coatings, targeting both professional and retail customers in the automotive and household paint sectors. The business model is primarily online retail with a niche focus on automotive and industrial paint supplies. The company maintains a professional online presence with clear navigation and categorized product offerings.

RT TORAX, s.r.o. is a Czech Republic-based company operating primarily in the real estate development and automotive sectors. Their website highlights various real estate projects including residential and commercial properties, alongside automotive sales and leasing services. The company appears to target regional customers interested in property investment and automotive purchases or leasing. The business model combines property development with automotive retail and financial services, positioning RT TORAX as a medium-sized regional player with a diversified portfolio. Technically, the website is built with standard HTML, CSS, and JavaScript, utilizing Google Fonts for typography. The site is moderately optimized for performance and mobile use but lacks advanced technical frameworks or CMS platforms. There is no evidence of analytics or tracking technologies, and the site does not implement modern security headers or privacy mechanisms. The absence of privacy and cookie policies, as well as contact information, limits the site's compliance posture. From a security perspective, the site uses HTTPS (assumed from URL scheme) but lacks visible security headers and incident response contacts. The WHOIS data is unavailable due to privacy protection or query failure, which reduces transparency and trustworthiness. No forms or data collection points are present, minimizing immediate data exposure risks but also limiting user engagement. Overall, the security posture is basic with room for improvement in compliance and transparency. The overall risk assessment indicates a moderately trustworthy business website with limited security and privacy features. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, publishing contact and incident response information, and improving WHOIS transparency where possible to build greater trust with users and partners.

T

Taneční klub Tlučná

tktlucna.cz

41

Taneční klub Tlučná is a well-established dance club based in the Czech Republic, offering dance education and activities for children from 3 years old through adults. The club specializes in various dance styles including standard, Latin-American, Caribbean, and fitness dance, and actively participates in national and international competitions. The website provides comprehensive information about training schedules, events, and achievements, supported by multimedia content such as videos and photo galleries. Technically, the website is built with standard HTML and CSS, embedding YouTube videos for engagement, and is mobile-friendly with good SEO practices. However, the absence of WHOIS data and lack of explicit privacy and cookie policies indicate areas for improvement in transparency and compliance. Security posture is moderate with assumed HTTPS but missing security headers and vulnerability disclosures. Overall, the site reflects a credible and community-focused organization with room to enhance privacy and security measures.

Y

YMCA PLZEŇ

slunickotlucna.cz

59

Sluníčko Tlučná is a local branch of YMCA Plzeň, a well-known Christian non-profit organization focused on community engagement, education, and recreational activities for children, youth, and families. The website presents a clear overview of their offerings including language courses, camps, creative workshops, and religious meetings. The organization targets local community members and families seeking educational and social activities in Tlučná, Czech Republic. Technically, the website is built on the Webnode CMS platform, leveraging Amazon Cloudfront CDN for content delivery. It uses modern web standards including HTTPS, responsive design, and includes a cookie consent mechanism. However, some security best practices such as security headers are missing, and the site lacks a dedicated privacy policy page, which is important for GDPR compliance. From a security perspective, the site is accessible without WAF or blocking challenges and uses HTTPS properly. The absence of WHOIS data for the domain is a concern for domain legitimacy and trust, although the website content and contact information appear consistent with a legitimate non-profit entity. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is functional, informative, and serves its community purpose well but would benefit from improved security headers, a published privacy policy, and verification of domain registration to enhance trust and compliance.

G

Gauselmann Group

neverstopexploring.cz

55

MerkurXtip is an online gambling platform operating in the Czech Republic, offering a combination of online casino slot games and sports betting services. It is part of the established German Gauselmann Group and holds a valid Czech gambling license issued in 2022. The platform targets Czech-speaking adult users interested in regulated online gambling with a focus on slots and sports betting, including live betting and e-sports. The website provides detailed information on games, bonuses, payment methods, and customer support, reflecting a mature business model with a medium market presence. Technically, the website is built with standard web technologies (HTML5, CSS, JavaScript) and uses Cloudflare DNS services. It is mobile-optimized with responsive design but lacks explicit CMS or advanced frameworks. Performance is moderate with good SEO and accessibility features. Security practices include Bank ID verification for user identity and secure payment verification, but the site lacks visible security headers and published security policies. Security posture is adequate but could be improved by adding privacy and cookie policies, security headers, and incident response disclosures. The domain WHOIS data shows a suspicious future creation date inconsistent with the business founding date, which slightly reduces trust but does not negate legitimacy given the detailed content and licensing. Overall, the site is professional and trustworthy for its intended audience but needs improvements in privacy compliance and security transparency. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, enhancing security headers, publishing incident response and vulnerability disclosure information, and clarifying data protection officer contacts to improve compliance and user trust.

K

kalkulatori.lv

kalkulatori.lv

67

kalkulatori.lv is a Latvian online platform providing a wide range of calculators and utility tools focused on finance, mathematics, unit conversions, text processing, and other household needs. The website targets a general audience in Latvia and offers free access to its tools, monetized primarily through Google Adsense advertising. The platform maintains a consistent brand presence with a professional design and clear navigation, supporting multiple languages including Latvian, Russian, and English. Technically, the website is hosted on Amazon AWS infrastructure, uses modern web technologies including HTML5, CSS3, and JavaScript, and integrates Google services for analytics, advertising, and consent management. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some advanced security headers are not explicitly present. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies and incident response contacts suggests room for improvement in transparency and preparedness. Overall, kalkulatori.lv presents a trustworthy and professionally maintained online service with a solid technical foundation and good privacy compliance. Strategic enhancements in security policy publication and incident response readiness would further strengthen its security posture and user trust.

P

Poradne komplexnej pomoci

pomahamedlznikom.sk

58

Poradne komplexnej pomoci is an official Slovak government initiative providing free, confidential advisory services to individuals, couples, and families across Slovakia. The project integrates psychological, social, legal, and economic counseling to support clients facing financial difficulties and interpersonal challenges. It is co-financed by the European Union and managed under the Slovak Ministry of Labour, Social Affairs and Family, positioning it as a trusted public service with a strong social mission. The website serves as an information portal and contact point for accessing these services.

The website czechkrumlov.com serves as a comprehensive travel guide focused on Cesky Krumlov, a historic town in the Czech Republic. It provides detailed information about the town's history, attractions, dining options, transportation, and practical visitor tips. The site targets tourists and travelers interested in exploring this UNESCO World Heritage site. The business model appears to be informational with revenue generated through advertising and affiliate marketing. The website has been active since 2008, indicating a stable presence in its niche. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Vegas.js for slideshow effects. Hosting is provided by HostMonster, as indicated by the nameservers. The site performance is moderate with basic mobile optimization and accessibility features. SEO is adequately addressed with proper meta tags and structured content. From a security perspective, the site lacks advanced security headers and DNSSEC is not enabled, which are areas for improvement. There is no visible HTTPS enforcement information, and no privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. No contact information or incident response channels are provided, limiting transparency and trust. Overall, the website is functional and informative but would benefit from enhanced security measures, privacy compliance, and clearer business contact information to improve trustworthiness and user confidence.

S

SC MARIMEX KOLÍN

scmarimexkolin.cz

45

SC Marimex Kolín is a Czech ice hockey club competing in the 1st league (Maxa liga). Their official website provides comprehensive information about the team, including news updates, match schedules, ticket sales, and fan engagement through social media. The site targets local sports fans and community members interested in ice hockey. The business model revolves around sports entertainment, merchandising, and community engagement. Technically, the website uses modern web technologies such as Bootstrap 5, jQuery, and Swiper.js for UI components and interactivity. It integrates Google Fonts, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and features a cookie consent mechanism compliant with GDPR principles, although a dedicated privacy policy page is missing. From a security perspective, the site enforces HTTPS and uses cookie consent banners to manage user privacy preferences. However, no advanced security headers were detected, and there is no published security or incident response policy. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, though the website content and social media presence support its legitimacy. Overall, the website is professionally designed and functional but would benefit from enhanced privacy disclosures, security policies, and domain registration transparency to improve trust and compliance.

S

SK Horácká Slavia Třebíč

hstrebic.cz

44

SK Horácká Slavia Třebíč is a well-established Czech ice hockey club with a strong regional presence and a history dating back to 1928. Their official website serves as a comprehensive portal for fans and stakeholders, offering news, schedules, multimedia content, and fan engagement features. The site is professionally designed with consistent branding and good mobile optimization, targeting primarily ice hockey enthusiasts in the Czech Republic. Technically, the website uses standard web technologies including jQuery, Bootstrap, and Slick Carousel, hosted by a Czech registrar REG-ZONER. While the site includes cookie consent mechanisms and analytics tracking, it lacks explicit privacy policies, terms of service, and direct contact information, which are areas for improvement. Security posture is moderate with no detected WAF or blocking, but missing security headers and unclear SSL configuration suggest room for enhancement. Overall, the domain registration data aligns well with the business, supporting legitimacy and trust.

VHK ROBE Vsetín is a well-established Czech ice hockey club with a strong regional presence and a comprehensive online platform serving fans and community members. The website provides detailed information about the team, schedules, ticket sales, fan shop, and youth development programs, reflecting a mature business model focused on sports entertainment and community engagement. Technically, the site uses a custom CMS with modern web technologies including JavaScript libraries, Google Fonts, and social media integrations, hosted by REG-ZONER. The site is mobile-optimized and offers good user experience with clear navigation and relevant content. Security posture is moderate; while HTTPS is implied and cookie consent mechanisms are implemented, explicit security headers and detailed security policies are absent. Analytics and tracking tools such as Google Analytics and Facebook Pixel are used with user consent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

ELEKTRO-ULDRICH, spol. s r.o. is a Czech-based electrical installation company with over 25 years of experience, specializing in both high and low voltage electrical systems, security technologies, intelligent building controls, IT technologies, and data center solutions. The company positions itself as a reliable and experienced service provider with a strong local presence and a portfolio of significant projects valued in millions of Czech crowns. The website reflects a professional business service model targeting organizations requiring comprehensive electrical and technological installations. Technically, the website is built on WordPress with modern SEO plugins and JavaScript libraries for enhanced user experience and mobile responsiveness. However, the site lacks visible contact emails and phone numbers, and no privacy or cookie policies are present, which are notable compliance gaps. Security-wise, the site uses HTTPS but lacks security headers and visible protections on forms, suggesting room for improvement in security posture. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security hardening to improve trust and regulatory adherence.

The website travelguide.sk is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, specifically an ASN block (error 1005). This prevents any meaningful content or business information from being retrieved or analyzed. The domain is well-established, registered since 2003, and uses DNSSEC with Cloudflare as its security and performance provider. However, the lack of accessible content means no privacy, cookie, or terms of service policies are visible, nor any contact or security policies. The technical infrastructure relies on Cloudflare services, but no CMS or additional frameworks are detectable. The security posture cannot be fully assessed due to the block, but the domain registration data is consistent and legitimate. Overall, the site is currently non-functional for external visitors from the blocked ASN, resulting in a very low AI score and limited insights.

S

SITA Slovenská tlačová agentúra

behame.sk

54

BEHAME.sk is a Slovak media portal specializing in running sports, providing news, event information, photo galleries, and video content. It is operated by SITA Slovenská tlačová agentúra, a reputable Slovak press agency, ensuring credible and consistent content for the Slovak running community. The website targets runners and sports enthusiasts primarily in Slovakia, offering a mix of news, health advice, and event calendars. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, and jQuery, with some legacy charset usage. The site is moderately optimized for performance and mobile devices, with good SEO practices and clear navigation. Security posture is adequate with HTTPS usage and cookie consent mechanisms, but lacks advanced security headers and explicit security policies. Privacy compliance is good with accessible privacy and cookie policies. No direct contact emails or phone numbers are found, which may limit direct user support. Overall, the site is trustworthy, professional, and safe for general audiences.

P

PhysioDOG

physiodog.cz

57

PhysioDOG is a specialized animal physiotherapy and rehabilitation center based in the Czech Republic, operating since 2008. The company is recognized as a pioneer in the field, led by an experienced founder with a strong professional team. Their services focus on neurological and orthopedic rehabilitation for small animals, including preventive care for sporting and elderly pets. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website is built on the Webnode CMS platform, leveraging AWS Cloudfront CDN for content delivery. It uses modern web technologies such as JavaScript and CSS, and is optimized for mobile devices with moderate performance. However, some technical improvements could be made in accessibility and SEO optimization. From a security perspective, the site enforces HTTPS but lacks several important security headers and formal security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a cookie consent mechanism present but no dedicated privacy or terms of service pages. WHOIS data is missing, which raises concerns about domain registration transparency. Overall, the website presents a trustworthy and professional business with room for improvement in security and compliance documentation. The lack of WHOIS data is a notable risk factor that should be addressed to enhance trustworthiness.

B

BIKE FUN International s.r.o.

bikefunint.com

51

BIKE FUN International s.r.o. is a Czech Republic-based bicycle manufacturer specializing in a wide range of bicycles including mountain, trekking, road, children's, and electric bikes. The company operates multiple well-known bicycle brands and holds certifications such as AEO, indicating a reputable position in the manufacturing and transportation sectors. The website reflects a professional business with clear branding and relevant content targeted at cycling enthusiasts and retail partners. Technically, the website uses standard web technologies including HTML, CSS, JavaScript, and jQuery, with Cloudflare DNS and HTTPS ensuring basic security and performance. Google Analytics is used for visitor tracking, although no explicit cookie or privacy policies are present, which is a compliance gap. Security posture is generally good with HTTPS and no visible vulnerabilities, but the absence of DNSSEC and security headers suggests room for improvement. Overall, the website is trustworthy, well-structured, and serves its business purpose effectively.

Les Deux Messieurs operates as a French bakery and café with physical locations in Munich and Wiesbaden, Germany. The business focuses on offering authentic French baked goods and café dining experiences, targeting customers who appreciate French culinary culture. The website is professionally designed, mobile-optimized, and includes strong accessibility features, enhancing user experience for diverse audiences. Technically, the site uses modern web technologies and HTTPS, ensuring secure communication. However, the absence of explicit privacy, cookie, and terms of service policies indicates gaps in compliance and transparency. Security posture is generally good, but could be improved by adding security headers and incident response contacts. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

M

Müller & Egerer Bäckerei und Konditorei GmbH

mueller-egerer.de

54

Müller & Egerer Bäckerei und Konditorei GmbH is a well-established regional bakery and café chain in Germany, operating since 1948 with over 70 branches primarily in northern Germany. The company offers a wide range of bakery products, confectionery, and café services, supported by customer loyalty programs and a mobile app. Their market position is strong locally, emphasizing tradition, quality, and sustainability. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and the Uikit framework, with progressive web app features and a service worker for enhanced user experience. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and cookie consent management implemented, though security headers and explicit security policies are absent. Privacy compliance is robust with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and safe for general audiences.

DECOLAB BY G. BENEDIKT GROUP is a specialized business offering high-quality digital printing on hard porcelain, positioning itself as an innovative player in the porcelain manufacturing industry. The website presents a professional and creative brand image focused on enabling customers to design their own porcelain collections using advanced digital printing technology. The technical infrastructure is based on the Pixieset platform, utilizing modern web technologies and tracking tools such as Google Tag Manager and Facebook Pixel. However, the absence of WHOIS data raises concerns about domain registration legitimacy. Security posture is moderate with HTTPS implied but lacks explicit security headers and policies. Privacy compliance is weak due to missing privacy and cookie policies, and no contact or incident response information is provided, which could impact trust and regulatory compliance. Overall, the website is functional and visually appealing but requires improvements in transparency, security, and compliance to enhance credibility and user trust.

D

Dynamicweb Inc.

dynamicweb.nl

63

Dynamicweb Inc. operates a mature and well-established eCommerce and content management platform, offering a unified Commerce Suite that integrates CMS, PIM, Digital Marketing, and eCommerce capabilities with Microsoft Dynamics ERP systems. The company targets B2B, B2C, and D2C businesses seeking scalable and composable commerce solutions. Their market position is strong, evidenced by industry recognition such as the Emerce 100 award. Technically, the website employs modern web standards, responsive design, and integrates marketing and analytics tools like HubSpot and Facebook Pixel, reflecting a high level of digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, with comprehensive legal documentation and a broad partner ecosystem.

The website patrikelias.cz serves as the official personal brand platform for former NHL player Patrik Eliáš, focusing on his career highlights, achievements, and legacy. It targets ice hockey fans and sports enthusiasts, providing a visually engaging experience through a modern swiper-based slideshow. The business behind the site is a small-scale PR and marketing entity based in the Czech Republic, with clear contact details and a professional presentation. Technically, the site employs standard web technologies including HTML5, CSS3, JavaScript, and the Swiper.js library for interactive content display. It leverages Google Fonts for typography and is hosted via WEDOS, a Czech hosting provider. The site is mobile optimized with good SEO practices but lacks advanced accessibility features and security headers. From a security perspective, the site uses HTTPS, but no explicit security headers or privacy-related policies are present. There are no forms or data collection points, minimizing exposure to common web vulnerabilities. However, the absence of privacy and cookie policies represents a compliance gap, especially under GDPR regulations. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

N

NORDBEANS.CZ

nordbeans.cz

64

Nordbeans.cz is a Czech Republic-based specialty coffee roaster and retailer focused on providing high-quality coffee products sourced from organic farms and developed through long-term partnerships. The company targets both retail consumers and B2B partners such as cafes and restaurants. The website is professionally designed, mobile-optimized, and features rich content including product catalogs, educational materials, and a blog. Technically, the site uses modern web technologies including JavaScript frameworks, Google Tag Manager, and Sentry for error monitoring. Security posture is good with HTTPS enforced and security headers present, though explicit security and privacy policies are not prominently available. The WHOIS data is unavailable or privacy protected, which is common for commercial sites but limits domain trust verification. Overall, the site presents a trustworthy and professional digital presence with moderate tracking and cookie consent mechanisms in place.

B

BPR – BOHEMIA PUBLIC RELATION s.r.o.

bprtravel.cz

66

BPR – BOHEMIA PUBLIC RELATION s.r.o. operates a professional travel agency website focused on luxury travel, concierge services, and business travel management primarily targeting Czech and international clients seeking premium travel experiences. The company has a clear market niche in hospitality and travel services with a strong emphasis on personalized and high-quality service. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries such as GSAP and Swiper.js, integrates Google Tag Manager and reCAPTCHA for analytics and security, and employs a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. The domain registration data is consistent and supports the legitimacy of the business. Overall, the website demonstrates good business credibility, privacy compliance, and technical implementation.

M

Martin Petráček

martinpetracek.com

10

Martin Petráček operates a professional freelance web design and IT consulting business based in the Czech Republic, with over 15 years of experience. The website showcases services including custom web development, internet marketing, graphic design, and IT outsourcing, targeting small to medium-sized businesses. The business model is service-oriented, emphasizing personalized client engagement and competitive pricing. The site features a portfolio of completed projects and certifications that enhance credibility. Technically, the website uses a modern tech stack including Bootstrap, Drupal CMS, and JavaScript libraries, with moderate performance and good mobile optimization. Analytics and tracking tools such as Google Analytics and Smartlook are implemented, though privacy compliance is lacking due to missing policies and consent mechanisms. Security posture is moderate with no critical vulnerabilities detected but improvements are recommended in security headers and DNSSEC. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.