Security Directory

D

Dark Veil Society

darkveilsociety.com

59

Dark Veil Society is a collective of independent horror authors focused on promoting and supporting dark fiction. The website serves as a platform for author collaboration, book promotion, and community engagement within the horror genre niche. The site is professionally designed with good content quality and clear navigation, targeting horror readers and writers. Technically, the site uses modern web standards, Google Analytics for tracking, and is hosted by DreamHost with DNS managed by Cloudflare. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. WHOIS data shows anomalies with a future domain creation date, which may be a data error but reduces trust slightly. Overall, the site is trustworthy and professional but could improve security and privacy practices.

I

Infinity Sports and Entertainment

createdbyinfinity.com

59

Infinity Sports and Entertainment is a small business established in 2014, providing online services targeted at the sports and entertainment community. The website presents a professional image with clear branding and a user-friendly interface, serving over 1,000 members. The company leverages WordPress CMS with the Avada theme and integrates various marketing and analytics tools such as Google Analytics and Inspectlet to monitor user engagement and optimize marketing efforts. The technical infrastructure is moderate in performance with good mobile optimization and SEO practices, though some legacy libraries like jQuery 1.12.4 are still in use. From a security perspective, the website employs HTTPS and domain locks to protect ownership but lacks DNSSEC and advanced security headers, which could enhance its security posture. Forms are protected with CAPTCHA to mitigate spam. Privacy compliance is basic, with a cookie policy and consent mechanism present but no explicit privacy policy or terms of service pages detected. Contact information is available primarily via phone and contact forms, though no company email addresses were explicitly found. Overall, the website is functional and trustworthy with moderate security and privacy compliance. Improvements in security headers, library updates, and comprehensive privacy documentation would strengthen its posture. The domain registration details align well with the business claims, indicating legitimacy and stability.

M

Message in a Bottle Productions

messageinabottleproductions.com

57

Message in a Bottle Productions is a small, Memphis-based video production company specializing in corporate, wedding, live event, and creative video projects. The company leverages over 10 years of experience and offers a comprehensive suite of video services including aerial drone footage and studio/post production. Their market position is focused on local and regional clients, with a strong emphasis on quality and customer engagement. Technically, the website is built on the Squarespace platform, utilizing modern web technologies and embedding Vimeo videos for rich media content. The site is mobile-optimized and includes standard tracking via Google Analytics and Tag Manager. Security posture is strong with HTTPS and HSTS enabled, but lacks explicit privacy and cookie policies, which impacts privacy compliance. WHOIS data is missing or unavailable, which raises some concerns about domain registration legitimacy. Overall, the website is professional and trustworthy in appearance but would benefit from improved privacy disclosures and domain registration transparency.

P

Post Media Group

postmediagroup.com

51

Post Media Group presents a corporate media website built on the Wix platform, featuring standard Wix technologies and scripts. The site is accessible without any WAF or blocking mechanisms, indicating no immediate access restrictions. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and ownership transparency. The website lacks critical compliance documents such as privacy and cookie policies, as well as contact information, which impacts trust and compliance posture. Technically, the site uses modern polyfills and Wix Thunderbolt framework, but performance and SEO optimizations appear basic. Security best practices are partially observed with HTTPS usage but lack advanced headers and incident response information. Overall, the site appears to be a basic corporate presence with limited content and transparency, warranting improvements in compliance, security, and business credibility to enhance trustworthiness.

I

International Fair Play Committee

fairplayinternational.org

47

The International Fair Play Committee is a recognized non-profit organization dedicated to promoting fair play, sportsmanship, and ethical behavior in sports globally. Their website serves as a platform to showcase their awards, events, and educational initiatives targeting sports organizations, athletes, and youth. The organization maintains a credible market position supported by partnerships with reputable entities such as the IOC and UNESCO. Technically, the website is built on Joomla CMS and utilizes legacy JavaScript libraries including jQuery 1.7.2, which introduces security risks. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. Analytics are implemented via Google Analytics and Facebook SDK, indicating moderate user tracking. From a security perspective, HTTPS is enabled but lacks advanced security headers and uses outdated libraries, which could expose the site to vulnerabilities. Privacy compliance is partial, with a privacy policy and terms of service present but no cookie consent mechanism. WHOIS data is unavailable, reducing domain registration transparency but the website content and social presence support legitimacy. Overall, the site is professional and trustworthy but would benefit from technical and security updates to enhance protection and compliance.

I

International Workers and Amateurs in Sports Confederation

csit.sport

49

The International Workers and Amateurs in Sports Confederation (CSIT) is a well-established non-profit organization founded in 1913, dedicated to promoting amateur and workers' sports globally. The website reflects a mature digital presence with comprehensive content about their events, social missions, and partnerships with recognized international bodies such as the IOC and SportAccord. Their business model focuses on organizing multi-sport events and fostering social values like sustainability, human rights, and fair play. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, including a robust cookie consent mechanism powered by Clickskeks. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. While no CMS or hosting provider is explicitly identified, the performance is moderate with good responsiveness. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. The cookie consent banner and privacy policy indicate good privacy compliance, although formal security policies and vulnerability disclosure mechanisms are absent. The WHOIS data is privacy protected, which is justified for this type of organization, and no suspicious patterns were detected. Overall, the website presents a trustworthy and professional image with strong business credibility and compliance posture. Strategic recommendations include publishing a dedicated security policy, adding a security.txt file, and enhancing HTTP security headers to further strengthen security posture.

S

Special Olympics

specialolympics.org

63

Special Olympics is a globally recognized non-profit organization dedicated to providing year-round sports training and athletic competitions for children and adults with intellectual disabilities. The organization focuses on inclusion, empowerment, and community engagement through Olympic-type sports. Their website reflects a professional and consistent brand image, targeting athletes, supporters, donors, and volunteers worldwide. The business model is centered on charitable donations, community programs, and advocacy efforts to promote inclusion and awareness.

W

worldgames.com

worldgames.com

51

The website ww25.worldgames.com is a domain parking page indicating that the domain worldgames.com may be for sale. There is no substantive business content, services, or company information presented. The site primarily serves advertisements via Google Adsense and Bodis scripts, with minimal user engagement or navigation features. The WHOIS data is unavailable, suggesting the domain is either unregistered or privacy protected, which aligns with the domain parking status. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. Security posture is weak due to lack of HTTPS and security headers. Privacy compliance is minimal with only basic privacy and legal pages present but no cookie consent mechanism. Overall, the site lacks business credibility and trust indicators.

The website at arisf.sport is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any substantive content. The domain is registered to ARISF, a Swiss organization established in 2018, with transparent WHOIS data and no privacy protection. Due to the access restriction, no privacy policies, contact information, or business descriptions are available on the site. The technical infrastructure appears minimal with basic HTML and CSS, and no advanced frameworks or analytics detected. Security posture is limited by lack of DNSSEC and security headers, but the domain registration is legitimate and consistent with the organization. Overall, the site is currently non-functional for public users, limiting any meaningful analysis of business or security maturity.

A

Absolutus.cz

absolutus.cz

55

Absolutus.cz is a small Czech technology service provider specializing in affordable web design, web management, SEO, social media management, and hosting services. The company emphasizes a creative and technically skilled team with a transparent pricing model that avoids overhead costs. Their market position targets small to medium businesses and individuals primarily in the Czech Republic. Technically, the website is built on Joomla CMS with modern frameworks like Gantry and Bootstrap, and integrates Google Analytics for tracking. The site is mobile optimized and provides clear navigation and content relevant to their services. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks explicit security policies and advanced security headers. WHOIS data is missing, which reduces trustworthiness from a domain registration perspective. Overall, the website is professional, trustworthy, and compliant with GDPR, but would benefit from enhanced security disclosures and domain registration transparency.

Červený Marek Drobil - Dřevostavby is a small Czech construction company specializing in the design, manufacture, and installation of atypical wooden buildings and structures, including roubenka style houses and wooden claddings. They also engage in real estate development activities such as land servicing and sale of building plots. The company appears to be newly established in 2023, consistent with the domain registration date. Their website presents a professional portfolio of projects and clear contact information, targeting local customers interested in wooden construction and real estate development. Technically, the website uses standard web technologies including jQuery and Google Fonts, with basic mobile optimization and moderate performance. Security measures include Google reCAPTCHA for form protection, but lack advanced security headers and privacy policies, indicating room for improvement in compliance and security posture. Overall, the website is functional and credible for a small business but would benefit from enhanced security and privacy compliance to build greater trust.

B

BIOTRONIK SE & Co. KG

promricheck.com

55

BIOTRONIK SE & Co. KG operates the ProMRI SystemCheck website, providing specialized tools and information to healthcare professionals for verifying and configuring MRI conditional cardiac systems. The company is an established enterprise in the healthcare sector, with a domain age consistent with its business history. The website offers clear, professional content targeted at medical professionals and patients requiring MRI safety verification for implanted cardiac devices. Technically, the site uses a JavaServer Faces framework with PrimeFaces and Bootstrap for UI, delivering a moderately performant and mobile-optimized experience. Security posture is adequate but could be improved by enabling DNSSEC, adding security headers, and implementing cookie consent mechanisms. Privacy compliance is supported by a comprehensive privacy statement, though cookie policy and incident response contacts are missing. Overall, the website is trustworthy, professional, and safe for general audiences.

Z

Zelené město

zelene-mesto.eu

45

Zelené město is a collaborative project focused on improving the quality of life in Plzeň through environmental and social responsibility initiatives. It is supported by a consortium of local government bodies and major regional companies, positioning itself as a key local initiative in the energy and transportation sectors. The website serves as an informational platform highlighting project goals, partners, and news updates. Technically, the site is built on WordPress with modern plugins for SEO, cookie compliance, and interactive content, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS and GDPR-compliant cookie consent, though some security headers and incident response information are absent. Overall, the site is professional, trustworthy, and well-aligned with its stated mission.

D

Doprava a Mechanizace a.s.

damplzen.cz

54

Doprava a Mechanizace a.s. is a regional Czech company specializing in construction-related transport, mechanization, and equipment rental services. Their offerings include production and installation of reinforcing steel, earthworks, vehicle and machinery repairs, and concrete production and transport. The company targets construction firms and contractors primarily in the Plzeň region. The website is professionally designed with clear navigation and relevant content, supporting their business model effectively. Technically, the website uses an older jQuery version (1.11.2) alongside common libraries such as FontAwesome and Google Fonts. The site is built on the UNIWEB CMS platform and includes a cookie consent mechanism compliant with GDPR principles. However, the absence of modern security headers and the use of outdated libraries present potential security risks. Performance and mobile optimization are moderate to good, but SEO and accessibility could be improved. Security posture is moderate with no visible blocking or WAF detected, but the lack of WHOIS transparency and missing explicit privacy and security policies reduce trust. The cookie consent banner is implemented well, but no incident response or security contact information is provided. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures. Strategically, the company should update its technical stack, publish comprehensive privacy and security policies, and improve transparency regarding domain registration to strengthen trust and compliance. These steps will enhance their digital maturity and reduce potential security vulnerabilities.

Ask4web, operated by Marek Hejl, is a small Czech Republic-based business currently presenting a placeholder website indicating a forthcoming new web presentation. The site provides basic contact information including email, phone, and physical address but lacks substantive content or detailed business descriptions. The technical infrastructure is minimal, with no detected CMS or advanced technologies, and no evidence of HTTPS or security headers, indicating a low digital maturity level. Security posture is weak due to absence of HTTPS, privacy policies, and security best practices. The domain WHOIS data is unavailable, which raises concerns about domain registration transparency and trustworthiness. Overall, the website is in an early stage of development with significant room for improvement in content, security, and compliance.

J

JIROUT REKLAMNÍ AGENTURA s.r.o.

rezidencetrnova.cz

60

Rezidence Nová Trnová is a Czech Republic-based real estate development project focused on providing modern, comfortable housing for approximately 200 families in Pardubice. The project emphasizes proximity to nature, accessibility to city centers, and full civic amenities including parking facilities. The website is professionally designed with clear navigation and contact options, targeting home buyers and families. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, Google Fonts, and YouTube API for video content. While the site is mobile optimized and includes cookie consent mechanisms, it lacks visible security headers and explicit SSL configuration details. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency. Overall, the website presents a moderate security posture with good privacy compliance but would benefit from enhanced security practices and domain registration verification.

T

TRIO-D spol.s.r.o.

trio-d.net

44

TRIO-D spol.s.r.o. is a Czech Republic-based agricultural company specializing in the sale of agrochemical products, seeds, and trading of agricultural commodities. Established in 1991, the company has expanded its services to include storage and post-harvest processing, serving primarily agricultural businesses and farmers. The website reflects a professional presence with clear business information and product offerings focused on agrochemicals, seeds, and commodities. Technically, the website uses standard web technologies such as jQuery and Bootstrap, with a cookie consent mechanism implemented to comply with basic privacy requirements. However, there is no visible privacy policy or terms of service, and security practices such as HTTPS enforcement and security headers are not confirmed, indicating room for improvement in security posture. Overall, the website is functional and trustworthy but would benefit from enhanced security and compliance documentation.

F

fitness-rezervace.cz

fitness-rezervace.cz

47

fitness-rezervace.cz operates a specialized online reservation and information system primarily targeting fitness centers, gyms, yoga studios, and various sports facilities in the Czech Republic. Established in 2011, the company offers a comprehensive software solution that includes user management, payment integration, live streaming capabilities, and advanced features such as turnstiles, vouchers, and REST API for developers. Their market position is that of a niche leader within the Czech fitness and sports reservation software sector, supported by a small but focused business model emphasizing customization and client support. The website reflects a professional and consistent brand image with clear business information and contact details.

L

LEVIOR, s.r.o.

levior.cz

50

LEVIOR, s.r.o. is a Czech-based company specializing in supplying tools and hardware goods primarily targeting craftsmen and tradespeople. Their website presents a comprehensive catalog of measuring tools, workshop tools, cutting tools, construction tools, and safety equipment, positioning them as a specialist supplier in the Czech retail and manufacturing sectors. The business model appears to focus on both B2B and B2C sales, emphasizing product quality and reliability. Technically, the website employs modern JavaScript libraries such as Swiper, Select2, Flatpickr, and tracking tools like Google Tag Manager and Hotjar. The site is mobile-optimized with good navigation and SEO practices. However, no CMS or hosting provider information is explicitly detected. Performance is moderate, and accessibility is basic. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, indicating some privacy awareness. However, no security headers are detected, and there is no visible privacy policy, terms of service, or incident response contact information. The absence of WHOIS data reduces transparency and trustworthiness, although the website content and professional design support legitimacy. Overall, the website scores moderately well in content quality, technical implementation, and business credibility but lacks in privacy compliance and security posture. Strategic improvements in publishing privacy and security policies, adding security headers, and clarifying WHOIS information would enhance trust and compliance.

The domain roadsafety.international is currently a parked domain with no active website content or business presence. The site displays a Sedo parking iframe and Google ads scripts, indicating it is not operational for any road safety-related business or service. The lack of privacy policies, contact information, or business details further confirms the domain is inactive. Technically, the site uses basic HTML and JavaScript with no detected CMS or advanced frameworks. There is no evidence of HTTPS enforcement or security headers, which poses a security risk if the site were to become active. The WHOIS data is minimal and does not provide creation or expiry dates, with registrant information withheld, reducing trustworthiness. Overall, the domain is not currently suitable for business use and lacks any meaningful security or compliance posture.

R

Research & Development World

rdworldonline.com

61

Research & Development World is a specialized online media platform delivering the latest news, trends, and analysis in the research and development sector. It hosts the RD 100 awards and targets professionals and stakeholders in various industries engaged in R&D activities. The website demonstrates a moderate level of digital maturity, leveraging WordPress CMS with SEO optimization via Yoast and integrating advertising and tracking technologies such as Google Tag Manager and Cookiebot for privacy compliance. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and formal security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content is professional and consistent with its stated business purpose. Overall, the site is functional and trustworthy but would benefit from enhanced transparency and security documentation.

Protetika Plzeň is a specialized healthcare provider focused on orthopedic prosthetics and orthotics with a long-standing tradition dating back to the first world war. The company offers a range of services including the production of prostheses, orthoses, and orthopedic insoles, with a particular emphasis on pediatric orthoses. Their market position is that of a regional specialist serving western Czech Republic, supported by partnerships with notable institutions such as FN Plzeň and Cortex. The website reflects a professional business model targeting patients with physical disabilities and healthcare providers in the region. Technically, the website employs a modern but basic technology stack including jQuery, Google Maps API, and Google Analytics, hosted on WEDOS servers. While the site is functional and moderately optimized for performance and mobile use, it lacks advanced accessibility and SEO features. Security posture is adequate with HTTPS and reCAPTCHA implemented, but the absence of security headers and formal security policies indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which poses a compliance risk. Overall, the website is trustworthy and safe for general audiences but would benefit from enhanced privacy and security measures.

Hamernik s.r.o. is a small manufacturing company based in the Czech Republic specializing in the production of quality wooden handles, grips, tools, and wooden briquettes. Established in 1991, the company emphasizes eco-friendly sourcing of wood from European forests and combines modern technology with traditional craftsmanship. The website reflects this focus with detailed descriptions of their products and certifications such as FSC® and EKO-COM, supporting their commitment to quality and sustainability. The company is a member of IIG, a.s., indicating some corporate affiliation. Technically, the website is built on an older version of WordPress (4.6.29) with basic use of jQuery and SEO plugins. The site is accessible, with moderate performance and basic mobile optimization. However, it lacks modern security headers and up-to-date platform versions, which could expose it to vulnerabilities. There is no visible privacy or cookie policy, and no advanced analytics or tracking tools are detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS but does not implement additional security headers or explicit privacy compliance mechanisms. The absence of a vulnerability disclosure policy and incident response contacts suggests limited formal security governance. The WHOIS data is unavailable due to privacy protection, which is common for small businesses but limits domain trust verification. Overall, the site is functional and moderately trustworthy but would benefit from security and compliance enhancements. Strategically, the company should prioritize updating its CMS and plugins, implementing comprehensive privacy and cookie policies, and adding security headers to improve its security posture and regulatory compliance. Enhancing transparency around data protection and incident response would also build greater trust with customers and partners.

E

eMOTION fitness

emotionfitness.cz

42

Emotion fitness is a modern fitness center located in Plzeň, Czech Republic, established in 2020. The business offers a variety of fitness services including state-of-the-art TECHNOGYM equipment, group classes such as yoga, pilates, TRX, and specialized children's exercise programs. Additional wellness services include physiotherapy, cosmetics, massages, maderotherapy, solarium, and a café bar, targeting local residents and families. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing purposes. Hosting is provided by WEDOS, a Czech hosting provider, consistent with the business location. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit cookie consent mechanisms are lacking, representing areas for improvement. Overall, the website is trustworthy and well-positioned in its local market segment.

P

PROM-IN, s.r.o.

prom-in.cz

58

PROM-IN, s.r.o. operates a professional e-commerce website specializing in premium dietary supplements primarily targeting athletes and health-conscious consumers in the Czech Republic. The website offers a broad range of products including protein supplements, vitamins, minerals, and performance enhancers, positioning itself as a premium brand in the sports nutrition market. The company maintains an active online presence with social media integration and multi-language support to cater to a wider audience. Technically, the website is built on the Shoptet CMS platform, utilizing modern web technologies such as JavaScript, jQuery, Google Tag Manager, and Facebook SDK. It incorporates Google Analytics and Google Ads for marketing and tracking purposes, alongside a cookie consent mechanism ensuring GDPR compliance. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. From a security perspective, the website enforces HTTPS and includes secure login forms with CSRF protection. While explicit security headers are not confirmed in the HTML, the site follows best practices by not exposing sensitive data and implementing cookie consent. However, there is no public security policy or incident response information, and WHOIS data is unavailable, which slightly reduces trustworthiness. Overall, the website presents a professional and trustworthy front for its business, with good content quality and technical implementation. The absence of WHOIS data and lack of explicit security policies are areas for improvement. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving accessibility to further strengthen the site's security posture and compliance.

SBS "IVA" , s.r.o. is a Czech Republic-based security services company operating since 1996, providing personal and property guarding services. The company has expanded with subsidiaries and is part of SECURITY HOLDING, a.s. The website presents basic information about the company and its services, targeting businesses and organizations in need of security solutions. Technically, the website uses an older jQuery version and the eStránky.cz CMS platform, with basic mobile optimization and accessibility features. Security posture is limited by lack of visible HTTPS enforcement and missing security headers. Privacy and cookie policies are absent, reducing compliance confidence. Overall, the site is functional but requires improvements in security, privacy, and contact transparency to enhance trust and compliance.

P

PPD stav s.r.o.

ppdstav.cz

47

PPD stav s.r.o. is a professional construction company based in the Czech Republic, specializing in residential, civic, and industrial building projects. Founded in 2017, the company leverages over 20 years of employee experience to deliver tailored construction services primarily in Plzeň, the Plzeň region, and Prague. Their key services include bytová výstavba (residential construction), občanská výstavba (civic construction), průmyslová výstavba (industrial construction), and truhlářství (carpentry). The company positions itself as a reliable regional player with a focus on quality and customer-specific solutions.

T

TRIO-D spol.s.r.o.

trio-d.cz

55

TRIO-D spol.s.r.o. is a Czech Republic based small enterprise specializing in the sale and distribution of agrochemicals, seeds, and agricultural commodities. Established in 1991, the company has a long-standing presence in the agricultural sector, offering a broad range of products including herbicides, fungicides, insecticides, various seeds, and commodity trading with storage services. The website reflects a professional business with clear contact information and certifications relevant to their industry. Technically, the site uses common web technologies such as jQuery and Bootstrap, with a cookie consent mechanism implemented to comply with privacy regulations. However, the absence of a privacy policy and terms of service pages indicates room for improvement in compliance documentation. Security posture is moderate with no HTTPS or security headers data provided, and no incident response or vulnerability disclosure policies are present. Overall, the website is functional, trustworthy, and serves its target audience effectively but would benefit from enhanced security and privacy compliance measures.

FOINIA STEEL spol. s r.o. is a medium-sized, family-owned Czech company specializing in the sale and processing of steel and metallurgical materials since 1991. The company serves both business clients and individual craftsmen, offering a broad product range including pipes, profiles, sheets, and additional value-added services such as cutting, bending, locksmith work, and delivery across the Czech Republic. Their website reflects a professional and consistent brand image with clear contact information and GDPR-compliant privacy and cookie policies. Technically, the website is built on a custom CMS platform (IPO CMS) utilizing jQuery, jQuery UI, Google reCAPTCHA, and Matomo analytics for privacy-conscious tracking. The site is mobile-optimized with good SEO and accessibility basics, though some security headers are missing. HTTPS is enforced, and cookie consent mechanisms are implemented effectively. From a security perspective, the site shows good practices such as HTTPS and CAPTCHA protection but lacks explicit security policies and incident response contacts. The absence of WHOIS domain registration data is a notable concern, reducing domain trustworthiness and raising questions about domain legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is safe, professional, and functional with moderate technical maturity. Strategic improvements in security headers, incident response transparency, and domain registration transparency are recommended to enhance trust and compliance.

Š

ŠKODA JS a.s.

skoda-js.cz

46

ŠKODA JS a.s. is a well-established Czech company specializing in nuclear engineering, manufacturing, and servicing with a history dating back to 1956. The company positions itself as a strategic partner in the European nuclear energy sector, offering a comprehensive portfolio of services including engineering, production of components, and maintenance of nuclear power plants. Their business model is based on a triangular approach integrating engineering, manufacturing, and servicing, targeting large energy sector clients and nuclear power plant operators. Technically, the website is built on WordPress with modern integrations such as Google reCAPTCHA for security and Facebook Pixel for marketing analytics. The site is mobile-optimized and features a cookie consent mechanism, although it lacks a published privacy policy and detailed security headers. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site uses HTTPS and implements anti-bot measures but lacks advanced security headers and explicit incident response or vulnerability disclosure policies. The absence of WHOIS data reduces domain trustworthiness, although the website content and business information appear legitimate and professional. Overall, the website presents a professional and credible front for ŠKODA JS a.s., but improvements in privacy compliance, security policies, and domain registration transparency are recommended to enhance trust and compliance.

C

CZ STAVEBNÍ HOLDING, a.s.

czstavhold.cz

61

CZ STAVEBNÍ HOLDING, a.s. is a Czech real estate development company specializing in residential housing projects including houses and apartments across multiple Czech localities. The company has been active for approximately 7 years and presents itself as a medium-sized player in the real estate market with a portfolio of ongoing and completed projects. Their website provides detailed project information, contact options, and updates, targeting home buyers and investors in the Czech Republic. Technically, the website employs modern web technologies such as Google Fonts, YouTube API, and Google reCAPTCHA for form protection, and it is served over HTTPS ensuring secure communications. The site is mobile optimized and provides a cookie consent mechanism compliant with GDPR requirements. Security posture is generally good with HTTPS and spam protection, but lacks explicit security headers and formal security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact details appear professional and legitimate. Overall, the site is functional, secure, and user-friendly with room for improvement in security transparency and domain registration clarity.

B

Beton Union Plzeň s.r.o.

betonunion.cz

55

Beton Union Plzeň s.r.o. is a regional specialist company focused on the production, transportation, and placement of concrete and mortar mixtures primarily serving western Czech Republic. The company operates multiple concrete plants and offers customized concrete mixes supported by laboratory testing and professional consulting. Their website reflects a medium-sized manufacturing and transportation business with a clear market position and professional branding. Technically, the website uses modern JavaScript libraries and frameworks, is mobile optimized, and implements cookie consent mechanisms, though it lacks some security headers and explicit privacy policy documentation. Security posture is moderate with HTTPS enabled but could be improved by adding security headers and incident response information. The absence of WHOIS data reduces domain trustworthiness, but the website content and social media presence support legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

B

BVG Holding a.s.

bvgroup.cz

38

BVG Holding a.s. is a Czech-based holding company specializing in industrial and residential flooring, steel constructions, and related construction services. The company operates through several subsidiaries, each focusing on specific areas such as flooring installation, floor repairs, steel structure manufacturing, real estate management, and marketing services. The website presents a professional image with detailed service descriptions and a portfolio of completed projects, targeting industrial and residential construction clients in the Czech Republic region. Technically, the website uses a legacy jQuery version along with common front-end libraries such as Lightbox and Slick Carousel. The site is mobile-optimized with a responsive design and clear navigation. However, it lacks modern security headers and uses outdated JavaScript libraries, which may pose security risks. No CMS or hosting provider details are evident, and performance is moderate. From a security perspective, the site uses HTTPS but does not implement additional security headers or provide privacy and cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is available. The absence of WHOIS data limits the ability to fully verify domain legitimacy, although the website content and contact information appear legitimate. Overall, the site is functional and professional but would benefit from improved security practices, updated technology, and enhanced privacy compliance to reduce risk and increase trustworthiness.

B

BIOTRONIK SE & Co. KG

biotronik.com

64

BIOTRONIK SE & Co. KG is a globally recognized healthcare company specializing in advanced medical devices for cardiac rhythm management, electrophysiology, and neuromodulation. Founded in 1963 in Germany, the company has a strong market position as a pioneer and leader in life-changing therapies and digital health innovations. Their website reflects a mature digital presence with comprehensive product information, clinical studies, and corporate responsibility content targeting patients, healthcare professionals, and partners. Technically, the website is built on Drupal 10, leveraging modern JavaScript frameworks and consent management tools like Usercentrics. The site is mobile-optimized, accessible, and SEO-friendly, with good performance and structured navigation. Security posture is strong with HTTPS enforced and privacy compliance evident through detailed policies and consent mechanisms, although explicit security headers and incident response information could be improved. Overall, the website demonstrates a high level of professionalism and trustworthiness, supported by consistent branding and active social media engagement. However, the absence of WHOIS data for the domain is unusual and should be further investigated to confirm domain registration legitimacy. No critical vulnerabilities or suspicious content were detected, making the site safe for general audiences.

V

VODÁRNA PLZEŇ a.s.

vodarna.cz

54

VODÁRNA PLZEŇ a.s. is a regional water utility company operating in Plzeň and surrounding areas in the Czech Republic. The company provides essential water supply and wastewater treatment services, targeting local residents and businesses. Their website reflects a professional and service-oriented business model with clear customer engagement channels and a focus on water quality and infrastructure maintenance. Technically, the website employs modern web technologies including jQuery, Flowplayer, and Google Analytics, with a cookie consent mechanism ensuring compliance with privacy regulations. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data is a notable gap in transparency but does not detract significantly from the overall legitimacy given the professional presentation and trust indicators. Overall, the website and business demonstrate a mature digital presence suitable for a utility provider.

S

Stavitelství Drobil s.r.o.

drobil.com

40

Stavitelství Drobil s.r.o. is a well-established construction and development company based in the Czech Republic, with over 25 years of experience. The company specializes in project management, construction of technically demanding buildings including smart homes, and real estate development. Their market position is solid within the regional European construction sector, serving both domestic and foreign investors. The website reflects a professional business model focused on comprehensive construction services and developer activities. Technically, the website uses modern frontend technologies such as jQuery, Bootstrap, and Swiper.js, and is built on the K-CMS 3.0 platform. The site is mobile optimized and provides clear navigation and relevant content, though performance is moderate. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

Č

Český svaz házené

handball.cz

47

The website represents the Czech Handball Federation (Český svaz házené), a national sports organization dedicated to handball in the Czech Republic. The site provides information about the federation but lacks detailed business or contact information in the analyzed HTML snippet. The technical infrastructure is modern, leveraging Nuxt.js and Bootstrap frameworks, with integration of Google Analytics and Tag Manager for user tracking. However, the absence of visible privacy and cookie policies indicates a gap in compliance with data protection regulations such as GDPR. Security posture is moderate due to lack of detected security headers and unknown SSL configuration. The domain WHOIS data is not publicly available, likely due to privacy protection, which is common but slightly reduces trust. Overall, the site is functional and professional but would benefit from enhanced transparency and security measures.

Q

Quickwash

quickwash.cz

55

Quickwash.cz is a Czech and Slovak regional network of branded self-service laundries operating under a franchise business model. Established in 2013 with the first laundry opening in 2014, the company has grown to over 20 locations. The website is built on WordPress using Elementor and integrates modern marketing tools such as Facebook Pixel and Seznam Retargeting. The site is well-structured, mobile-optimized, and provides clear information about locations and franchise opportunities. However, it lacks explicit privacy and terms of service pages, which are important for compliance. Security posture is good with HTTPS and cookie consent implemented, but could be improved with additional security headers and policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and stability.

B

Balonky Praha

balonkypraha.cz

61

Balonky Praha operates a well-established e-commerce platform and physical stores specializing in party decorations, balloons, and helium supplies primarily serving the Czech and Slovak markets. Founded in 2014, the company offers a broad range of party-related products and services including balloon printing, party rentals, and event accessories. The website demonstrates a mature digital presence with a professional design, clear navigation, and comprehensive product offerings. Technically, the site is built on the nopCommerce platform, integrates modern marketing and analytics tools such as Google Analytics 4 and Facebook Pixel, and employs cookie consent mechanisms ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though improvements in security headers are recommended. Overall, the site reflects a trustworthy and credible business with good privacy practices and a user-friendly shopping experience.

Č

Čokoládovna Chocotopia

chocotopia.cz

46

Čokoládovna Chocotopia is a Czech Republic-based chocolate experience center and retailer specializing in chocolate products and immersive chocolate-related experiences. The website is professionally designed using WordPress and Elementor, optimized for mobile devices, and includes comprehensive privacy and cookie policies compliant with GDPR. The technical infrastructure leverages modern CMS plugins and caching technologies to ensure moderate performance and good SEO. Security posture is solid with HTTPS enforcement and security headers, though no explicit security policy or incident response information is published. The absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy, but the website content and business information appear consistent and trustworthy. Overall, the site presents a low-risk profile with room for improvement in transparency and security documentation.

J

Jojo Gym | Vaše sportovní centrum

jojogym.cz

47

Jojo Gym is a local sports and fitness center based in the Czech Republic, offering gym facilities and fitness training services. The website is built on WordPress using the Divi theme and includes WooCommerce for e-commerce capabilities. The technical infrastructure is modern with common web technologies such as jQuery and Google reCAPTCHA for form security. The website is accessible without any WAF or security challenges, indicating good availability. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership. Security posture is moderate with HTTPS enabled and reCAPTCHA implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to missing privacy and terms of service pages, though a cookie consent mechanism is present. Overall, the website is functional and professional but would benefit from enhanced security and compliance documentation.

S

Senta s.r.o.

air-track.cz

46

Air-Track.cz is a Czech Republic based e-commerce retailer specializing in branded AirTrack inflatable gymnastics and acrobatic equipment. The company operates as the exclusive distributor for AirTrack Factory in the Czech Republic and an authorized distributor for Slovakia, targeting gymnastics enthusiasts, cheerleading, freerun, parkour practitioners, schools, trampoline parks, and home users. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, it is built on the PrestaShop CMS platform, utilizing common web technologies and analytics tools such as Smartlook and Google Tag Manager. Security posture is adequate with HTTPS enforced and cookie consent implemented, though lacking advanced security headers and explicit security policies. Business credibility is strong with clear contact details, company registration, and trust signals like warranty and exclusive distributorship. Overall, the website presents a trustworthy and professional online presence for a niche sports equipment retailer.

S

Sosan

sosan.cz

51

Sosan.cz is a Czech private healthcare company specializing in comprehensive medical transport services using ambulances since 2003. The website presents a professional and consistent brand image targeting general audiences seeking private ambulance services. The technical infrastructure is based on Joomla CMS with modern web technologies including jQuery, Mootools, and Gantry framework. Google Analytics is integrated for visitor tracking, and a cookie consent mechanism is implemented to comply with privacy regulations. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit privacy or security policies. WHOIS data is missing, which raises concerns about domain registration transparency. Overall, the website is functional, moderately optimized, and trustworthy but would benefit from enhanced transparency and security documentation.

S

SPARROW

sp-sparrow.cz

45

SPARROW is a small family-owned business based in the Czech Republic specializing in the manufacture and retail of sportswear and fitness clothing, with over 25 years of experience. The company offers custom club clothing, costumes, and jerseys, leveraging high-quality imported materials and modern production technologies. Their website serves as an e-commerce platform showcasing their product range and custom design services. Technically, the website uses a legacy jQuery version and BohemiaSoft e-commerce platform scripts, with Google Tag Manager and Google Analytics for tracking. While the site is accessible and mobile-optimized, some technical issues such as outdated libraries and malformed script tags were identified. Security posture is moderate with HTTPS enforced and basic cookie consent mechanisms, but lacks advanced security headers and updated libraries. The absence of WHOIS data and a formal privacy policy page reduces trust and compliance confidence. Overall, the site is functional and professional but would benefit from technical and compliance improvements.

D

Diony Sports

dionysports.com

54

Diony Sports operates an e-commerce platform specializing in high-quality Czech gymnastics equipment, targeting gymnastics clubs, athletes, and sports facilities. The company positions itself as a competitive alternative to leading international brands by offering quality products at lower prices. The website features a comprehensive product catalog, 3D project services, and certifications such as FIG, enhancing its market credibility. Technically, the website employs modern JavaScript libraries, Google Analytics, and embedded YouTube videos to engage users and track performance. The site is accessible, uses HTTPS, and includes a cookie consent mechanism, though mobile optimization and accessibility are basic. No CMS or hosting provider details were identified. From a security perspective, the site benefits from HTTPS but lacks visible security headers and formal privacy or terms of service pages. No contact information for incident response or data protection officers is provided. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding appear professional and trustworthy. Overall, the site is functional and business-focused but would benefit from enhanced security practices, clearer privacy compliance, and verified domain registration to improve trust and compliance posture.

Č

Česká unie kolektivních a individuálních sportů z.s.

cukis.cz

42

ČUKIS (Česká unie kolektivních a individuálních sportů z.s.) is a Czech non-profit sports union established in 2016, supporting a variety of collective and individual sports with over 40,000 athletes across 16 member organizations. The website serves as an informational portal providing news, member lists, and contact details, targeting sports organizations and athletes within the Czech Republic. Technically, the site is built on WordPress using the Elementor page builder, incorporating modern web technologies such as jQuery and YouTube embeds. The site is mobile-optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and functional but could improve in compliance and security transparency.

I

International Cheer Union

cheerunion.org

61

The International Cheer Union (ICU) is a globally recognized non-profit organization serving as the world governing body for the sport of cheerleading and performance cheer. Established in 2004, ICU represents 121 national federations and over 10 million athletes worldwide. The organization provides governance, education, certification, and organizes international championships, positioning itself as a key authority in the cheerleading sports sector. The website reflects a professional and content-rich platform targeting athletes, coaches, judges, and member federations globally. Technically, the website is built on WordPress with a modern tech stack including SiteOrigin Panels and WP Carousel Pro. It integrates Google Analytics and Google Tag Manager for analytics and marketing. The site is mobile-optimized with good SEO and accessibility basics, though some security headers and DNSSEC could be improved. Hosting appears stable with Cloudflare DNS and a reputable registrar. Security posture is solid with HTTPS enforced and domain transfer protections in place. However, the absence of DNSSEC and some security headers like Content-Security-Policy are areas for enhancement. Privacy compliance is strong with clear privacy and cookie policies and GDPR considerations. Contact information is transparent and includes multiple channels. Overall, ICU's digital presence is trustworthy and professional, supporting its role as a global sports governing body. Strategic improvements in security headers and DNS security would further strengthen its posture. No critical vulnerabilities or content safety concerns were identified.

I

International Cheer Union

cheerunion.eu

60

The International Cheer Union (ICU) is a globally recognized governing body for the sport of cheerleading, with this website focusing on its European region. The organization provides governance, education, championships, and safeguarding services to cheerleading communities. The website is professionally designed, well-structured, and provides comprehensive information including upcoming events, member nations, and resources. Technically, the site is built on WordPress with modern plugins and frameworks, hosted with reputable providers and secured via HTTPS. Security posture is good but could be enhanced with additional HTTP security headers and DNSSEC. Privacy compliance is strong with clear policies and cookie consent mechanisms. Contact information and social media presence reinforce business credibility. Overall, the site is trustworthy and serves its target audience effectively.

X

Xenoplexus Webstudios, LLC

idowebsitestuff.com

56

Xenoplexus Webstudios, LLC is a small freelance web development business operated by Blake Myers, offering custom website design, performance optimization, responsive development, logo creation, and consulting services. The company targets small businesses, non-profits, and schools, emphasizing high-quality, standards-compliant web solutions. The website demonstrates a professional portfolio with multiple client projects and clear contact information including physical addresses in the US and Czech Republic. Technically, the site uses modern web technologies such as HTML5, CSS3, JavaScript, and PHP, with a focus on responsive design and performance. Hosting is provided by DreamHost, with Cloudflare nameservers, and the site enforces HTTPS with a clientTransferProhibited domain status, indicating good security practices. However, DNSSEC is not enabled and security headers are not detected, suggesting room for improvement in security hardening. Privacy compliance is addressed with a GDPR privacy policy, but no cookie consent mechanism is present. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. Overall, the website is well-structured, trustworthy, and professionally maintained, with a solid security posture but some opportunities for enhancement.

Č

Česká asociace cheerleaders

cheerleadingjesport.cz

45

The website 'Cheerleading je sport!' serves as the official online presence for the Czech Association of Cheerleaders (ČACH), a national sports authority representing cheerleading clubs and athletes in the Czech Republic. It provides educational content about cheerleading, club directories, national team information, and historical context. The site targets cheerleading enthusiasts, athletes, and the general public interested in the sport within the Czech Republic. The business model is non-profit and focused on sport promotion and community building. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, jQuery, and FontAwesome icons, with a responsive design framework (Skel) to support mobile devices. The site loads moderately fast and offers a good user experience with clear navigation and relevant content. However, there is no detected CMS or advanced analytics, indicating a relatively simple technical infrastructure. From a security perspective, the site lacks visible security headers and privacy/cookie policies, which are important for GDPR compliance and user trust. No forms or sensitive data collection mechanisms are present, reducing immediate privacy risks. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for small non-commercial organizations. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website is a legitimate, well-structured resource for cheerleading in the Czech Republic but would benefit from enhanced privacy compliance, improved security headers, and more transparent business contact information to strengthen trust and compliance.