Security Directory

G

Groundspeak, Inc.

coord.info

74

Groundspeak, Inc. operates Geocaching.com, the world's largest treasure hunt platform, offering millions of geocaches worldwide and a dedicated official app. The business targets outdoor enthusiasts, families, and adventure seekers, providing a digital platform to discover and participate in geocaching activities. The company has a long-standing presence since 2000 and maintains a professional and consistent brand image. Technically, the website employs modern technologies including Google Tag Manager and Cookiebot for consent management, ensuring GDPR compliance with a comprehensive cookie consent mechanism. The site is well-optimized for mobile and accessibility, with good SEO practices and a fast, responsive design. Security posture is solid with HTTPS enforced and CSRF protections evident, though additional security headers could enhance protection. No critical vulnerabilities or suspicious activities were detected. Overall, the website presents a trustworthy and professional digital presence with moderate transparency due to missing WHOIS data. Strategic recommendations include publishing explicit privacy and security policies, adding security headers, and providing clear contact information for incident response.

M

Motion Technology, Inc.

autofry.com

54

Motion Technology, Inc. operates the AutoFry brand, specializing in automated, ventless frying technology for commercial kitchens. The company positions itself as a leader in ventless, electric, and automated deep fryers made in the USA, targeting a broad range of food service businesses from small taverns to large stadiums and multi-unit chains. Their product line includes various fryer models and accessories, supported by online resources and a dedicated webstore. Technically, the website is built on a modern CMS platform with standard web technologies and integrates multiple analytics and marketing tools. Security posture is generally good with HTTPS and no visible vulnerabilities, but lacks some security headers and formal privacy or cookie policies. The WHOIS data is missing or indicates the domain is not registered, which is a concern for domain legitimacy. Overall, the site is professional and trustworthy in content but would benefit from improved compliance and transparency.

B

Bonveno

bonveno.cz

61

Bonveno.cz is a Czech retail convenience store network offering fresh groceries, ready meals, coffee, and household essentials. The website presents a professional and user-friendly interface with clear navigation and localized content targeting neighborhood consumers. The business is supported by the Metro group, indicating a solid market position in retail. Technically, the site uses modern web standards with responsive design and HTTPS security. However, no WHOIS data was found, limiting domain trust verification. Privacy and cookie policies are present and GDPR compliant, but explicit security policies and incident response information are absent. Overall, the site demonstrates a good security posture with room for improvement in security headers and transparency. The risk level is moderate with no critical vulnerabilities detected.

B

BPR - BOHEMIA PUBLIC RELATION S.R.O.

bpr.cz

72

BPR - BOHEMIA PUBLIC RELATION S.R.O. is a well-established Czech marketing and event agency founded in 2008. The company operates two main divisions: marketing and event management, offering a broad spectrum of services from strategic marketing campaigns to organizing unique events. Their client portfolio includes reputable multinational and local brands, supported by recognized awards such as the CEA. The website reflects a professional and consistent brand image with comprehensive content and clear contact information, indicating a mature business presence in the Czech Republic and Slovakia markets. Technically, the website employs modern web technologies including Bootstrap, GSAP, and Google Tag Manager, hosted likely by WEDOS, a reputable Czech hosting provider. The site is mobile-optimized and SEO-friendly, with good performance and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are missing. Overall, the domain WHOIS data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

Balbin Artesian Water

balbinwater.com

52

Balbin Artesian Water presents itself as a niche premium beverage company specializing in the world's first grape-carbonated mineral water, inspired by the heritage of South Moravia. The website is professionally designed using the Framer platform, featuring rich multimedia content and clear branding that targets consumers interested in innovative and premium mineral water products. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and ownership transparency. Technically, the site is well-implemented with HTTPS enabled and good performance, but lacks important security headers and privacy compliance documentation. No contact information or formal policies are provided, which impacts trust and compliance posture. Overall, the site is visually appealing and functional but requires improvements in transparency, security best practices, and compliance to enhance credibility and user trust.

Tomáš Kalina's website is a personal portfolio and blog primarily targeting a general audience interested in his work or content. The site is built on WordPress using a premium theme and hosted on a Czech hosting provider. The technical infrastructure is modern and includes HTTPS with a valid SSL certificate, but lacks advanced security headers and DNSSEC. Privacy compliance is minimal, with no privacy policy or terms of service found, though a cookie consent mechanism is present. Contact information is limited to a contact form without explicit email or phone details. Overall, the site is professionally designed with good user experience but could improve in privacy and security transparency.

H

Horydoly.cz

horydoly.cz

42

Horydoly.cz is a Czech online media portal dedicated to outdoor activities including climbing, hiking, cycling, water sports, and travel. It serves a broad audience of outdoor enthusiasts by providing news, articles, event calendars, and discussion forums. The site is well-established with consistent branding and regular content updates, supported by advertising revenue streams. Technically, the website employs common web technologies such as Google Analytics, Adsense, and Google Fonts, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and consent mechanisms in place, though additional security headers and policies could enhance protection. The absence of WHOIS data reduces domain trustworthiness, but the website content and structure indicate a legitimate and professional operation. Overall, the site is safe for general audiences and maintains a good balance of content quality and technical implementation.

The website www.chorvatske.sk is operated by eProgress s.r.o., a Slovak company specializing in providing comprehensive travel and accommodation information for Croatia, targeting Czech and Slovak tourists. The platform emphasizes direct contact between guests and accommodation providers, offering listings without commission fees. It has a long operational history since 2003 and maintains a strong market position in Central and Western Europe for Croatian accommodation services. Technically, the site uses a custom CMS with modern frontend technologies including Tailwind CSS and JavaScript, and integrates Google Analytics and Tag Manager for user tracking with GDPR-compliant consent mechanisms. Security posture is good with HTTPS enforced and CSRF tokens present, though some security headers are missing and no explicit security or incident response policies are published. Overall, the site is professional, user-friendly, and trustworthy with consistent branding and clear business information. Recommendations include enhancing security headers, publishing terms of service and security policies, and adding vulnerability disclosure information to improve compliance and trust.

A

Avente s.r.o.

avente.cz

49

Avente s.r.o. is a Czech-based comprehensive advertising agency specializing in modern web design, e-commerce solutions, branding, and internet marketing. With over 16 years of experience and more than 220 projects completed, the company targets businesses and organizations seeking tailored digital and marketing services. Their website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site employs modern web technologies including JavaScript libraries, Google Fonts, and tracking tools such as Google Analytics and Leady. The site is mobile-optimized and provides a good user experience with clear navigation and responsive design. Security-wise, the website enforces HTTPS and includes GDPR-compliant cookie and personal data consent mechanisms, though it lacks some advanced HTTP security headers and published security policies. The absence of WHOIS data reduces domain registration trust, but the website content and business information appear legitimate and professional. Overall, the site demonstrates a solid digital presence with room for improvement in security transparency and domain registration clarity.

G

GlobalAR LLC

home.social

48

meme.am is a niche social media platform focused on community-driven meme sharing, recently incorporating content from Home.Social. The platform offers a broad collection of memes, images, and videos targeting general internet users seeking entertainment and social engagement. The business operates with a small-scale model emphasizing user-generated content and community interaction. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and uses popular analytics tools such as Matomo and Clicky. The design is responsive and optimized for mobile devices, providing a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is implied, but explicit security headers and policies are absent. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. The domain registration is consistent and legitimate, registered to GlobalAR LLC since 2019, aligning with the business timeline. Overall, the site is safe, professional, and functional but would benefit from enhanced privacy and security practices.

M

METRO AG

mpulse.de

76

MPULSE is the official online magazine of METRO AG, providing rich content focused on wholesale, gastronomy, and independent entrepreneurs. The website serves as a content marketing platform to engage METRO's target audience with industry insights, customer stories, and trends. The site is well-branded, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, it leverages modern web technologies including Bootstrap, Google Tag Manager, and Akamai CDN for performance and scalability. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the domain registration and website content are consistent and trustworthy, supporting METRO AG's brand integrity.

R

Redakce časopisu TREKING

treking.cz

63

Treking.cz is a Czech-language online portal dedicated to hiking, trekking, and outdoor activities, offering a wide range of articles, guides, event calendars, and accommodation listings. It serves a niche audience of outdoor enthusiasts primarily in the Czech Republic and Slovakia. The website is content-rich, regularly updated, and maintains partnerships with other reputable outdoor and travel websites. Technically, it uses common web technologies including Google Fonts, Adsense, and Tag Manager, with basic mobile optimization and SEO practices in place. Security posture is moderate with HTTPS usage and a consent management platform, but lacks visible security headers and detailed security policies. The absence of WHOIS data limits domain trust verification, but the website content and structure indicate a legitimate and professional operation. Overall, the site scores well in content quality and privacy compliance but could improve in security best practices and domain transparency.

A

ABB Consulting s.r.o.

helpgdpr.cz

53

HelpGDPR.cz is a Czech knowledge platform focused on GDPR compliance, offering news, training materials, templates, and advisory content. The site is operated by ABB Consulting s.r.o. and targets a broad audience interested in data protection and GDPR regulations. The platform is well-structured, professionally designed, and regularly updated, positioning itself as a reputable source for GDPR-related information in the Czech Republic. Technically, the site uses IBM Domino CMS with standard web technologies including Bootstrap and jQuery, and integrates Google Analytics for user tracking. Security posture is moderate with HTTPS usage and cookie consent mechanisms in place, but lacks visible security headers and explicit incident response or security policies. WHOIS data is unavailable, which slightly impacts trust but the site content and presentation support legitimacy. Overall, the site is safe, compliant with GDPR, and serves as a valuable resource for GDPR knowledge and compliance guidance.

P

Projektová kancelář Kraje Vysočina, příspěvková organizace

platbyvysocina.cz

63

The website www.platbyvysocina.cz serves as the official online payment portal for the Kraj Vysočina region in the Czech Republic. It enables residents to conveniently pay various local fees such as municipal charges, school fees, and sports club memberships online, replacing traditional cash and slip payments. The portal is positioned as a regional government service, supported by the Projektová kancelář Kraje Vysočina, with clear contact information and trusted payment methods including Visa and Mastercard. Technically, the site employs modern web technologies with responsive design and structured navigation, though it lacks some advanced security headers and cookie consent mechanisms. The absence of WHOIS data limits domain registration transparency, but the overall legitimacy is supported by consistent branding and government affiliation. Security posture is good with HTTPS enforced and secure form handling, but improvements in security policy publication and vulnerability disclosure are recommended.

K

Kores

kores.at

74

Kores is a medium-sized retail company specializing in stationery and creative products, targeting general consumers and businesses primarily in Austria with an international presence. The website showcases a broad product range including glues, coloring, erasers, and office accessories, supported by a professional and consistent brand presentation. Technically, the site is built on WordPress with modern front-end technologies such as Swiper.js and Web Components, offering good mobile optimization and user experience. Security posture is moderate with HTTPS enforced but lacking explicit security headers and policies. The absence of WHOIS data and registrant information raises some concerns about domain legitimacy, although the website content and branding appear trustworthy. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.

The website www.slovakian-mountains.eu is an established online platform operated by eProgress s.r.o., specializing in providing comprehensive information and accommodation listings for the Slovakian mountain region. It offers direct contact between guests and property owners, emphasizing no commission bookings. The platform also provides additional services such as snow reports, ski resort information, webcams, and weather forecasts, targeting tourists and travelers interested in Slovakian mountain holidays. The business model is focused on direct owner-to-guest communication, enhancing trust and cost-effectiveness for users. Technically, the website employs modern web technologies including Tailwind CSS and integrates Google Analytics and Google Tag Manager for marketing and analytics purposes. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, and the site uses HTTPS ensuring secure connections. However, explicit security headers are not detected, which could be improved to enhance security posture. From a security perspective, the site demonstrates good practices such as HTTPS usage and cookie consent mechanisms compliant with GDPR. The WHOIS data is privacy protected by EURid, which is common for EU domains but limits transparency regarding registrant details. No critical vulnerabilities or exposed sensitive data were found in the HTML content. The absence of direct contact emails or phone numbers may affect user trust slightly but is mitigated by the presence of a contact form. Overall, the website presents a professional and trustworthy platform for Slovakian mountain accommodation and related services. Strategic improvements in security headers, enhanced accessibility, and more transparent contact information could further strengthen its security and user trust profile.

A

AOL

aol.com

74

The analyzed website is a consent management page for AOL, which is part of the Yahoo family of brands. It provides users with options to accept, reject, or manage privacy settings related to cookies and personal data usage. The page is well-branded, consistent with AOL and Yahoo corporate identity, and links to comprehensive privacy and cookie policies hosted on legal.yahoo.com. The business operates within the technology and media sectors, focusing on digital content and advertising services. The website targets general internet users and employs standard consent frameworks aligned with GDPR requirements. From a technical perspective, the site uses modern web technologies including JavaScript and CSS, with a moderate performance profile and good mobile optimization. However, explicit security headers are not detected, and no detailed security or incident response policies are linked, indicating room for improvement in security posture transparency. The site uses CSRF tokens in forms, indicating some security best practices. Analytics and tracking are implemented via Yahoo Rapid and IAB Transparency & Consent Framework partners, with extensive user tracking but with clear consent mechanisms. Security-wise, the site is served over HTTPS (implied by domain and scripts), but explicit security headers are not visible in the provided data. No vulnerabilities or exposed sensitive data were detected. The WHOIS data for the subdomain consent.yahoo.com is not separately registered, which is expected for a subdomain of a major brand. The domain is legitimate and consistent with the business identity. Overall, the website is professional, compliant with privacy regulations, and trustworthy. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and improving accessibility and SEO features to strengthen the site's security posture and user trust.

M

Mansion Global

mansionglobal.com

72

Mansion Global operates as a premier luxury real estate media platform, delivering high-quality news, market insights, and exclusive property listings to an affluent global audience. Affiliated with Dow Jones & Company, it holds a strong market position in the luxury real estate sector, leveraging content publishing and advertising as its primary business model. The website demonstrates a professional and consistent brand presence with excellent content quality tailored to luxury property buyers and investors. Technically, the site employs modern web technologies including JavaScript and likely React frameworks, with a custom content management system. It exhibits good mobile optimization and SEO practices, though some accessibility features could be enhanced. Performance is moderate, balancing rich content with user experience. From a security perspective, Mansion Global enforces HTTPS and implements key security headers, reflecting a mature security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public security policy or incident response contact points suggests room for improvement in transparency and preparedness. Overall, the domain's WHOIS data is missing, which is unusual but possibly due to privacy protection or registry issues. Despite this, the website's affiliation with a reputable parent company and its professional presentation mitigate concerns. Strategic recommendations include publishing explicit security policies, adding vulnerability disclosure mechanisms, and enhancing accessibility to further strengthen trust and compliance.

S

STAVOS Engineering, s.r.o.

stavosengineering.cz

50

STAVOS Engineering, s.r.o. is a Brno-based engineering company specializing in construction and development projects, operating as part of the STAVOS Brno, a.s. holding. The company offers a range of services including design, client collaboration, construction supervision, and infrastructure development, targeting clients in the real estate and construction sectors within the Czech Republic. The website presents a professional image with clear branding and relevant content tailored to its audience. Technically, the site is built on the Webnode CMS platform, leveraging Amazon Cloudfront CDN for hosting and Google Tag Manager for analytics. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is solid with HTTPS enforced, though additional security headers could enhance protection. WHOIS data is not publicly available, indicating privacy protection, which is typical for businesses of this size and type. Overall, the website reflects a legitimate and credible business with moderate digital maturity and compliance.

Croazia-Adriatico.it is a specialized online platform operated by eProgress s.r.o. that offers a comprehensive listing of accommodation options in the Croatian Adriatic region. The website targets Italian-speaking tourists and travelers seeking direct contact with property owners to avoid commission fees. It also provides travel-related information such as weather forecasts, ferry schedules, and last-minute offers, positioning itself as a niche player in the hospitality sector focused on Croatia. The business has been established since 2003, indicating a mature presence in the market. From a technical perspective, the website employs standard web technologies including HTML5, CSS3 with Tailwind CSS, and JavaScript. It integrates Google Analytics and Google Tag Manager for visitor tracking and marketing purposes. The site is mobile-optimized with a responsive design and good SEO practices. However, it lacks advanced security headers and explicit incident response or security policies. Security posture is moderate with HTTPS enforced and cookie consent mechanisms implemented, reflecting basic GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the business entity, supporting trustworthiness. Overall, the site demonstrates a solid foundation but could benefit from enhanced security controls and clearer business contact information. Strategic recommendations include implementing additional security headers, publishing detailed security and incident response policies, and improving transparency around data protection officers and vulnerability disclosures to strengthen compliance and user trust.

M

Městský úřad Jemnice

mesto-jemnice.cz

51

The website mesto-jemnice.cz serves as the official online presence for the town of Jemnice in the Czech Republic. It provides comprehensive municipal information including news, public documents, event calendars, and contact details for local government offices. The site targets residents, visitors, and stakeholders interested in local governance and community services. The business model is that of a government entity providing public services and information. The website is well-branded and consistent with its municipal identity, offering good content quality and trust indicators such as official contact information and document archives. Technically, the site uses the vismo CMS platform with standard web technologies including HTML5, CSS, JavaScript, and integrates Google services such as reCAPTCHA and Translate. The site is mobile optimized and offers basic accessibility features. Performance is moderate with room for improvement in SEO and security headers. The hosting provider is not explicitly identified. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect its contact form from spam. However, it lacks explicit security headers which could enhance protection against common web vulnerabilities. Privacy policies and cookie usage statements are present but lack an active consent mechanism, which may be a compliance gap under GDPR. No incident response or vulnerability disclosure information is provided. Overall, the website is a trustworthy and professional municipal portal with a solid foundation but could benefit from enhanced security practices and privacy compliance measures. The domain registration data supports the legitimacy and long-standing presence of the site. Strategic recommendations include implementing security headers, improving cookie consent mechanisms, and publishing security policies to strengthen user trust and regulatory compliance.

I

ICE invest spol. s r.o.

iceinvest.cz

65

ICE invest spol. s r.o. is a well-established Czech company founded in 2009, operating as the largest ice cream stand operator in Central Europe. The company runs multiple divisions including ice cream production, coffee roasting, café operations, and food delivery services. Their market position is strong with a diversified hospitality and retail business model targeting both consumers and business clients in the gastronomy sector. The website reflects a professional digital presence with clear branding, comprehensive content, and customer testimonials supporting trustworthiness. Technically, the site uses modern web technologies, is mobile optimized, and employs Google Analytics for minimal user tracking. Security posture is good with HTTPS enforced and cookie consent implemented, though improvements are recommended in security headers and privacy policy transparency. Overall, the business credibility is high, supported by consistent WHOIS data and clear contact information.

SDH Jaroměřice nad Rokytnou is a small, local volunteer fire department organization based in the Czech Republic, supported by municipal subsidies. The website serves as an informational portal for community members and volunteers, providing details about firefighting activities, sports, events, and facility rentals. The organization maintains active social media channels to engage with the community. Technically, the website is built using Incomedia WebSite X5 Evo, employing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site includes embedded social media widgets and video content but lacks advanced SEO and accessibility features. Security posture is basic, with no detected security headers or privacy policies, and no explicit HTTPS enforcement visible in the content. The domain is well-established since 2005, consistent with the organization's local presence and legitimacy. Overall, the website is functional but requires improvements in privacy compliance, security best practices, and richer content to enhance trust and professionalism.

M

Město Jaroměřice nad Rokytnou

jaromericenr.cz

50

The website jaromericenr.cz serves as the official online presence for the municipal government of Jaroměřice nad Rokytnou, Czech Republic. It provides residents and visitors with essential information including news updates, event calendars, contact details, and public service announcements. The site targets local citizens, tourists, and businesses, offering a centralized platform for municipal communication and services. The business model is typical for a government entity, focusing on transparency and community engagement rather than commercial activities. Technically, the website employs a traditional HTML/CSS/JavaScript stack powered by the vismo CMS platform. It integrates Google services such as Tag Manager, Analytics, reCAPTCHA, and Translate widgets to enhance functionality and user experience. The site is hosted by REG-ZONER, a Czech registrar and hosting provider, and uses HTTPS to secure communications. Mobile optimization and accessibility are basic but functional, with room for improvement in accessibility compliance and performance tuning. From a security perspective, the site demonstrates good baseline practices including HTTPS enforcement, use of reCAPTCHA on forms, and a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is a trustworthy and professional municipal portal with solid business credibility and moderate technical sophistication. Strategic improvements in security policy publication, accessibility, and technical modernization would further strengthen its posture and user trust.

The website kroatische.de is an established online platform operated by eProgress s.r.o., providing comprehensive accommodation listings and travel information for Croatia. It targets travelers seeking direct contact with property owners to avoid commission fees. The platform is part of a broader network of regional accommodation portals in Central Europe, reflecting a consistent business model and brand presence since 2003. Technically, the site uses modern frontend technologies including Tailwind CSS and integrates Google Analytics and Google Ads for marketing and tracking. The site is hosted on European infrastructure with Forpsi nameservers, supporting its regional focus. Security posture is adequate with HTTPS and cookie consent mechanisms implemented, though some security headers are missing and no explicit incident response or security policies are publicly disclosed. Privacy compliance is good with GDPR-aligned cookie consent and privacy policy in German. Overall, the site is professional, trustworthy, and well-positioned in the hospitality sector for the German-speaking market.

The website www.slowakische.de is a specialized online platform operated by eProgress s.r.o., focusing on providing comprehensive information and direct accommodation booking options in the Slovakian mountain regions. Established since 2002, it serves primarily German-speaking tourists seeking commission-free lodging options such as hotels, pensions, apartments, and huts. The platform also offers additional services like weather updates, webcams, and last-minute deals, positioning itself as a trusted and niche hospitality service provider in the European travel market. Technically, the site employs modern web technologies including Tailwind CSS and integrates Google Analytics and Tag Manager for user tracking, with a GDPR-compliant cookie consent mechanism in place. The hosting is managed via Forpsi, a reputable European hosting provider, ensuring stable infrastructure.

The website www.slowackie.pl is a tourism and accommodation platform focused on Slovakian mountains, operated by eProgress s.r.o., a company established in 2002. It offers comprehensive information about mountain regions, lodging options without commission, weather, ski conditions, and live cameras. The platform emphasizes direct contact between guests and property owners, promoting trust and cost savings. Technically, the site uses modern frontend technologies including Tailwind CSS and integrates Google Analytics and Tag Manager for marketing and tracking. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. WHOIS data is unavailable, which reduces transparency but the business branding and content suggest legitimacy. Overall, the site provides a good user experience with clear navigation and relevant content for its target audience.

SIA Sertifikācijas centrs is a well-established Latvian certification institution founded in 2012, accredited by the Latvian National Accreditation Bureau and notified in EU institutions. The company specializes in product, personnel, and management system certifications, serving a broad regional market including Latvia and neighboring countries. Their website reflects a professional business presence with clear service descriptions and contact information. Technically, the site uses standard web technologies such as HTML, CSS, and jQuery, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website and WHOIS data indicate a legitimate and credible business with room for improvement in security and privacy practices.

The website www.czech-mountains.eu is a well-established online platform operated by eProgress s.r.o., providing comprehensive accommodation listings and travel information for the Czech mountains. It emphasizes direct contact between guests and property owners, offering commission-free booking options. The platform also includes additional services such as snow reports, ski resort information, webcams, and weather forecasts, targeting tourists and travelers interested in mountain vacations. Technically, the site uses modern web technologies including Tailwind CSS and JavaScript, with integration of Google Analytics and Tag Manager for user tracking under GDPR-compliant consent mechanisms. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies could be improved. The domain WHOIS data is not publicly available due to EURid privacy policies, but the website's longevity and consistent branding support its legitimacy. Overall, the site presents a professional, user-friendly experience with good content quality and moderate technical performance.

The website www.tschechische-gebirge.de is a well-established online platform operated by eProgress s.r.o., specializing in providing comprehensive accommodation listings in the Czech mountain regions. It offers direct contact between guests and property owners, emphasizing no commission fees, which positions it as a trusted and cost-effective resource for travelers. The platform includes additional services such as weather updates, webcams, and last-minute deals, enhancing user engagement and utility. Technically, the site employs modern web technologies including Tailwind CSS and JavaScript, with integration of Google Analytics and Tag Manager for data insights, all served over HTTPS ensuring secure connections. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned privacy policies. Security posture is solid with SSL enabled and CSRF tokens present, though some security headers could be improved. Overall, the site demonstrates a mature digital presence with good content quality and user experience, suitable for its target audience of tourists and travelers seeking mountain accommodations in the Czech Republic.

G

GIOMETAL

giometal.cz

57

GIOMETAL is a small manufacturing company specializing in the production and installation of ventilation systems and components based in Brno, Czech Republic. The company serves both the domestic Czech market and other European Union countries, targeting business customers in the HVAC sector. Their website presents a professional and consistent brand image with clear descriptions of their services and regional market focus. Technically, the website uses Bootstrap 3.3.5 and standard web technologies, providing a moderate performance and good mobile optimization. Security-wise, the site is served over HTTPS but lacks important security headers and formal security policies, which could be improved to enhance trust and compliance. The absence of WHOIS data limits the ability to fully verify domain legitimacy, representing a moderate risk factor. Overall, the website is functional and business-appropriate but would benefit from enhanced privacy compliance and security best practices.

H

HT dveře

htdvere.cz

47

HT dveře is a Czech company specializing in the manufacture and installation of high-quality security doors for apartments and family homes. The website positions the company as a trusted market leader with over 50,000 satisfied customers and 18 years of experience. Their offerings include various door models, installation services, and customer support, targeting residential customers primarily within the Czech Republic. The site features customer testimonials and detailed product information, reinforcing their market credibility. Technically, the website employs modern web technologies including Google Tag Manager, Visual Website Optimizer, and YouTube integration, with responsive design and good SEO practices. Cookie consent and privacy policies are implemented, reflecting GDPR compliance. However, no CMS or hosting provider details are evident, and some security headers are missing, which could be improved. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, but lacks explicit security policies or incident response contacts. The absence of WHOIS data for the domain is a notable concern, impacting domain legitimacy and trustworthiness. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website presents a professional and trustworthy front for the business, but the missing WHOIS information and lack of some security best practices suggest areas for improvement to enhance trust and compliance.

G

GOLD SERVICE s.r.o.

goldservice.cz

63

GOLD SERVICE s.r.o. is a well-established Czech logistics and freight forwarding company with over 30 years of experience. The company offers a comprehensive range of services including road, sea, and air transport, customs declarations, warehousing, and specialized logistics solutions. Their market position is that of a reliable local partner with a family business approach and a medium-sized operational scale. The website is professionally designed, multilingual, and provides clear contact information and customer testimonials, enhancing trustworthiness. Technically, the website uses a custom CMS developed by eBRÁNA s.r.o., employs modern web technologies such as responsive design, Google Fonts, and JavaScript libraries for enhanced user experience. Hosting is provided by WEDOS, consistent with the domain registrar. The site performs moderately well with good mobile optimization and basic accessibility features. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, security headers are minimal and could be improved to enhance protection. No explicit security policies or incident response contacts are published, and no vulnerability disclosure mechanisms are evident. No suspicious or vulnerable scripts were detected. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements in security headers and incident response transparency would further strengthen their security posture.

O

Odtahové vozy s.r.o

odtahovevozy.eu

58

Odtahové vozy s.r.o is a Czech-based company specializing in professional towing equipment and vehicles. Founded in 2021, it serves towing companies in the Czech Republic and Slovakia as an official representative of several reputable brands. The company offers a broad range of towing vehicles, accessories, and custom products through its website and e-shop, positioning itself as a trusted supplier in the transportation sector. The website is well-structured, professionally designed, and provides clear contact channels, enhancing customer engagement and trust. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Facebook Pixel for analytics and marketing. It features responsive design and basic accessibility, with a moderate performance profile. The site enforces HTTPS and includes a comprehensive cookie consent mechanism aligned with GDPR requirements, reflecting a mature digital presence. From a security perspective, the site demonstrates good practices such as secure forms and user consent management but lacks explicit security headers and detailed security policies. No vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable due to EURid privacy policies, but no suspicious indicators were found, and the domain appears consistent with the business claims. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its security and user trust.

J

Jihočeská vědecká knihovna v Českých Budějovicích

cbvk.cz

50

Jihočeská vědecká knihovna v Českých Budějovicích is a well-established regional scientific library serving the South Bohemia region of the Czech Republic. The institution offers a broad range of services including lending of books, periodicals, DVDs, audio CDs, access to digital libraries, and online databases. It also supports educational and cultural activities targeting readers, students, schools, and other libraries. The library operates under the auspices of the Jihočeský kraj (South Bohemian Region) and has a domain age consistent with its long history since 1995. Technically, the website employs standard web technologies such as HTML5, CSS3, JavaScript with jQuery, and integrates social media SDKs like Facebook. The site is hosted with a Czech registrar and uses HTTPS with a good SSL configuration. While the site is mobile responsive at a basic level and includes accessibility features, there is room for improvement in security headers and cookie consent mechanisms. SEO and navigation are well implemented, supporting a positive user experience. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and secure login forms. However, it lacks explicit published security policies, incident response contacts, and cookie consent banners, which are important for GDPR compliance and user trust. No vulnerabilities or suspicious content were detected. The WHOIS data is transparent and consistent with the library’s identity, supporting high legitimacy. Overall, the website is professional, trustworthy, and serves its educational mission effectively. Strategic improvements in privacy compliance and security policy transparency would enhance its security posture and user trust.

The website suwer.pl represents a modern urban bike rental system operating in Suwałki, Poland, managed by ROOVEE S.A. The service offers 160 bikes across 17 stations, including standard, electric, and tandem bikes. The platform supports multiple languages and integrates with a dedicated mobile app for seamless rental and payment experiences. The business is positioned as a local transportation solution with EU co-financing, indicating public sector support and legitimacy. Technically, the site uses standard web technologies including jQuery, Google Maps API, and FontAwesome, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements are recommended in DNSSEC and security headers. No critical vulnerabilities or suspicious elements were detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, providing clear contact information and user support channels.

Płocki Rower Miejski is a municipal bike rental service operated by ROOVEE S.A., offering a fleet of approximately 310 bikes across 31 stations in Płock, Poland. The service targets local residents and visitors, providing flexible bike rental options via a dedicated mobile application and SMS. The platform integrates with local city cards (PłocKArta) to offer benefits such as free initial ride time. The website is professionally designed with clear navigation, accessibility features, and multilingual support, reflecting a mature digital presence for a recently founded business (2023). Technically, the site uses modern web technologies including Google Maps API and FontAwesome, but relies on an outdated jQuery version and lacks some advanced security headers and DNSSEC, indicating room for technical improvement. Security posture is moderate with HTTPS enforced and cookie consent implemented, but no explicit security or incident response policies are published. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy, safe, and well-aligned with its business purpose.

S

SOLLAU CZ s.r.o.

sollau-cz.cz

54

SOLLAU CZ s.r.o. is a Czech company specializing in supplying materials and products for the plastics industry, including plastic shredders, magnetic separators, and recycling technologies. The company positions itself as a trusted partner with 15 years of experience, offering comprehensive services from material supply to testing and equipment servicing. Their market focus is primarily on the Czech Republic and surrounding regions, targeting plastic processors and manufacturers. Technically, the website is well-structured, mobile-optimized, and uses modern web technologies such as jQuery and Google Tag Manager for analytics. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are absent. The lack of WHOIS data reduces domain trust but the website content and business information appear professional and credible. Overall, the site scores well on content quality, privacy compliance, and business credibility, with room for improvement in security transparency and domain registration verification.

Plainlanguage.gov is an official U.S. government website managed by the Plain Language Action and Information Network (PLAIN), a community of federal employees promoting clear and accessible government communications. The site provides comprehensive resources including guidelines, training, examples, and events to support the use of plain language across federal agencies. It is affiliated with the U.S. General Services Administration (GSA), reinforcing its authoritative position in the government sector. Technically, the website leverages modern web standards and the U.S. Web Design System (USWDS) to ensure accessibility, mobile optimization, and fast performance. It integrates Google Analytics and DigitalGov analytics for user tracking and measurement, while maintaining a clean and professional design with clear navigation and structured content. From a security perspective, the site enforces HTTPS and follows good practices by not exposing sensitive data. However, it lacks some advanced security headers and a formal security policy or incident response contact, which could be areas for improvement. Privacy compliance is moderate, with a clear privacy policy but no cookie consent mechanism detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and usability, making it a reliable resource for its target audience. The domain's WHOIS data is limited due to .gov domain policies but the affiliation with GSA and consistent branding strongly support legitimacy and trust.

SatysfakcjaKlienta.pl is a Polish online platform specializing in customer satisfaction surveys, primarily targeting healthcare and hospitality sectors such as hotels, hospitals, medical points, and pharmacies. The service offers a professional survey creator with a user-friendly management panel, automated reporting, and features like personalized graphic surveys and emotion analysis of respondents. The business operates as a small-sized entity founded in 2018 and is managed by MTD Consulting Marcin Król, with clear contact details and GDPR-compliant privacy policies. The website is professionally designed with consistent branding and good content relevance, supporting its niche market position. Technically, the website uses a modern but straightforward tech stack including Bootstrap, jQuery, FontAwesome, and Google Fonts. It is mobile-optimized and SEO-friendly, though no CMS or advanced platforms are detected. Hosting is likely provided by home.pl S.A., the domain registrar. Performance is moderate with basic accessibility features. No analytics or advertising scripts are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS (implied by URL), but lacks visible security headers and DNSSEC is not enabled. The privacy policy is comprehensive and GDPR-compliant, but no explicit security policy or incident response contacts are provided. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the business profile, showing a domain age appropriate for the company’s founding date. Overall, the website presents a trustworthy and professional image with good privacy compliance and moderate security posture. Strategic improvements in security headers, DNSSEC, and incident response transparency would enhance its security maturity and trustworthiness.

The website inwestycjejst.pl serves as a modern portal designed to present investment offers for local government units (Gminy) in Poland. It provides a simple, intuitive, and graphically customizable platform available in multiple languages and compliant with PAIH standards. The business targets municipalities and investors, positioning itself as a niche service provider in the government technology sector. The domain is registered with a reputable Polish registrar and has been active since 2018, aligning well with the business's operational timeline. Technically, the website employs standard web technologies such as HTML5, CSS3, and Google Fonts, with no detected CMS or complex frameworks. The site is moderately optimized for performance and mobile devices, with good SEO practices evident from meta tags and structured content. However, accessibility features are basic, and no advanced technical frameworks or analytics tools are detected. From a security perspective, the site lacks visible security headers and does not provide privacy, cookie, or terms of service policies, indicating compliance gaps with GDPR and related regulations. No incident response or vulnerability disclosure mechanisms are present. The domain uses HTTPS (assumed from URL), but DNSSEC is not enabled, which could improve DNS security. Overall, the security posture is moderate but requires enhancements to meet best practices. The overall risk assessment suggests a legitimate and professionally presented business with minor compliance and security shortcomings. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and establishing vulnerability disclosure and incident response protocols to enhance trust and compliance.

M

Maltézská pomoc

osobni-asistence.cz

47

The website osobni-asistence.cz is a Czech-language informational platform dedicated to personal assistance and care for seniors, operated under the Maltézská pomoc non-profit organization. It provides caregivers and family members with guides, service directories, and video tutorials to support home care for elderly individuals. The site leverages modern web technologies including jQuery, Google Fonts, and dotLottie animations, and integrates Google Analytics with user consent mechanisms. The domain has been registered since 2011, aligning with the organization's claim of over 15 years of experience in senior care assistance. While the site is professionally designed and offers good user experience and navigation, it lacks explicit privacy policy and terms of service pages, and no direct contact information is visible. Security posture is moderate with no detected security headers and unknown SSL configuration, but no critical vulnerabilities were found in the content.

Q

QCM s.r.o.

ezak.cz

60

QCM s.r.o. operates the E-ZAK platform, a certified electronic tool designed for the management and administration of public procurement processes in the Czech Republic. The platform complies with relevant legislation (law no. 134/2016 Sb.) and serves a broad audience including public contracting authorities, suppliers, and the professional public. With a significant user base and numerous installations, E-ZAK holds a strong market position in the government sector for procurement software solutions. The business model includes both licensing and rental options, with hosting services provided in a certified environment to ensure compliance and operational reliability. Technically, the website employs modern web technologies including Google Tag Manager, Google reCAPTCHA, and modular JavaScript and CSS. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Hosting appears to be managed by QCM's own certified hosting center, ensuring control over the operational environment. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and avoids exposing sensitive data. However, it lacks explicit security headers and a published security policy or incident response contact. Privacy compliance is well addressed with a GDPR policy and cookie consent mechanism. The WHOIS data confirms domain legitimacy with consistent registration details and an appropriate domain age. Overall, the website and business demonstrate a mature and trustworthy presence with strong compliance and security postures. Recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen trust and resilience.

The Encyklopedie dějin Brna website is a specialized educational platform dedicated to the history of Brno, offering a rich repository of historical data, biographies, events, and cultural heritage. It is supported by reputable academic and museum institutions, which enhances its credibility and trustworthiness. The site targets researchers, students, and the general public interested in regional history, operating as a non-commercial cultural resource. Technically, the website employs modern web technologies including Bootstrap, Google Fonts, and Google Analytics, ensuring a responsive and user-friendly experience across devices. The site is well-structured with clear navigation and relevant content, though it lacks some advanced accessibility features.

S

Střední škola, Základní škola a Mateřská škola Rakovník, příspěvková organizace

zsrako.cz

46

Střední škola, Základní škola a Mateřská škola Rakovník is a public educational institution based in the Czech Republic, providing preschool, elementary, special, and secondary education with a focus on special pedagogical care. The website serves students, parents, and educators with relevant information, news, and resources. It holds a stable market position as a regional educational provider with a domain registered since 2007, reflecting its established presence. The institution offers key services including various school levels, school club activities, and meal ordering facilities.

M

Mateřská škola Velké Němčice

msvelkenemcice.cz

57

The website represents Mateřská škola Velké Němčice, a small public preschool educational institution located in the Czech Republic. It provides preschool education and childcare services primarily targeting local parents and guardians. The site offers announcements, organizational information, and educational content relevant to its audience. The business model is that of a public educational organization with a local community focus. Technically, the website is built on the Webnode platform, leveraging Amazon Cloudfront CDN for content delivery. It uses modern web technologies including HTML5, CSS3, and JavaScript, and is optimized for mobile devices with moderate performance. The site includes a cookie consent mechanism and uses Google Tag Manager for analytics, indicating a basic level of digital maturity. From a security perspective, the site enforces HTTPS with a valid SSL certificate and implements cookie consent for privacy compliance. However, it lacks visible security headers and formal privacy or terms of service documents, which are areas for improvement. No vulnerabilities or suspicious content were detected, and the site appears safe for general audiences. Overall, the website is functional and professional for its purpose but would benefit from enhanced security practices and clearer privacy documentation to improve trust and compliance.

B

brain at work GmbH

brain-at-work.de

48

brain at work GmbH is a well-established German web agency specializing in website creation, online shops, SEO, and tailored online marketing solutions. With over 25 years of experience and a strong regional focus in Germany, the company demonstrates a solid market position supported by long-term client relationships and high customer satisfaction. Their service portfolio includes website and webshop development, SEO services, employee recruitment support, and accessibility solutions, reflecting a comprehensive digital marketing approach. Technically, the website is built on a proprietary CMS (bee.tools®), employs modern web technologies, and is hosted on reliable German infrastructure. The site is mobile-optimized and SEO-friendly, with good performance and accessibility standards. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks visible cookie consent mechanisms and published security policies, which are areas for improvement. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

J

Jiří Prskavec

jiriprskavec.cz

41

The website www.jiriprskavec.cz is a professionally designed personal site dedicated to Jiří Prskavec, an Olympic gold medalist in canoe slalom. It serves as a platform to showcase his biography, career achievements, photo and video galleries, and partnerships with various sponsors. The site targets fans, media, and sponsors, focusing on personal branding and promotion. Technically, the site uses modern web technologies including JavaScript libraries, Google Analytics, and social media SDKs, with a responsive design optimized for mobile devices. However, the site lacks explicit privacy and cookie policies, and no WHOIS data is available for the domain, which limits trust verification. Security headers are not detected, indicating room for improvement in security posture. Overall, the site is content-rich, trustworthy, and professionally maintained but would benefit from enhanced compliance and security measures.

TÜV SÜD Czech is a well-established enterprise providing trusted solutions in safety, security, and sustainability sectors. With over 150 years of experience, the company offers a broad portfolio of services including testing, certification, auditing, inspection, calibration, cybersecurity, and training. The website reflects a mature digital presence with professional design, multi-language support, and compliance with GDPR and cookie consent regulations. Technically, the site uses modern technologies such as Sitecore CMS, Google Tag Manager, and Adobe Tag Manager, ensuring good performance and user experience across devices. Security posture is strong with HTTPS enforced and privacy-focused consent mechanisms, though explicit security headers and published security policies are absent. The lack of WHOIS data limits domain registration trust verification but does not detract from the overall legitimacy indicated by the website content and branding.