Security Directory

Euroclear is a globally recognized financial market infrastructure provider specializing in securities settlement, custody, collateral management, and related services. The company holds a leading market position with a comprehensive portfolio of services targeting financial institutions and market participants. Their website reflects a mature digital presence with detailed service descriptions and strong branding consistency. Technically, the site leverages modern JavaScript libraries, Adobe Experience Manager CMS, and integrates analytics and user feedback tools, indicating a well-maintained infrastructure. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and vulnerability disclosures are absent. Overall, the site demonstrates high professionalism and trustworthiness, supporting Euroclear's enterprise stature.

O

OeKB CSD GmbH

oekb-csd.at

64

OeKB CSD GmbH operates as a central securities depository providing critical infrastructure services for the Austrian capital market. The company offers a range of services including digital securities issuance, custody, settlement via the European TARGET2-Securities platform, asset servicing, and payment processing for matured securities. Positioned as a key player within the Austrian financial ecosystem and part of the OeKB Group, it targets capital market participants such as issuers and account holders. The website content is professional, well-structured, and primarily in German with English support, reflecting a medium-sized enterprise with a solid market presence. Technically, the website employs modern web technologies including JavaScript and jQuery, with responsive design elements suitable for mobile devices. While no explicit CMS or hosting provider is identified, the site demonstrates moderate performance and good SEO practices. However, some accessibility features could be improved. Security-wise, HTTPS is enforced, and no obvious vulnerabilities or exposed sensitive data are present. The absence of security headers and explicit security policies suggests room for enhancement in security posture. The WHOIS data is unavailable due to NIC.AT registry restrictions, limiting domain registration transparency. Despite this, the website and business information appear consistent and trustworthy. No blocking or WAF mechanisms were detected, allowing full content access. Privacy compliance is supported by a comprehensive privacy policy and GDPR adherence, though cookie consent mechanisms are lacking. Overall, the site reflects a professional financial services provider with a solid digital presence but could benefit from improved security headers, cookie consent implementation, and enhanced transparency regarding incident response and vulnerability disclosure.

Česká zima is a Czech Republic-based online catalog specializing in winter accommodation and skiing in the Czech mountains. Established in 2008, it offers a platform for property owners to list apartments, chalets, and hotels with direct contact information, targeting winter tourists and skiers. The website provides additional services such as snow condition reports, ski lift information, and live webcams, positioning itself as a niche resource for winter tourism in the region. Technically, the site uses basic HTML, CSS, and JavaScript with Google AdSense for monetization. The hosting is managed by Wedos, a Czech provider, and the domain is long-standing and consistent with the business focus. Security posture is moderate with HTTPS enabled but lacking important security headers and privacy compliance mechanisms. No privacy or cookie policies were found, indicating compliance gaps. Overall, the site is functional and relevant but would benefit from improved security and privacy practices.

I

Počasí - předpověď počasí, aktuální informace | In-počasí

in-pocasi.eu

45

The website www.in-pocasi.cz is a Czech language weather forecasting portal providing detailed meteorological information including current weather, radar maps, numerical models, and weather news. It targets the general public interested in weather updates primarily in the Czech Republic. The business model appears to be advertising-supported, leveraging multiple ad networks and tracking services integrated with a consent management platform to comply with privacy regulations. Technically, the site uses modern web technologies such as SVG for interactive maps, JavaScript libraries for UI and analytics, and is served over HTTPS ensuring secure communication. The site is mobile optimized and accessible with good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers are not clearly visible in the provided data. The absence of WHOIS registration data is a notable gap, reducing domain trustworthiness, but the website content and technology usage suggest a legitimate media service. Privacy compliance is partially met with cookie consent but lacks a clearly identified privacy policy page. Overall, the site is professional and trustworthy for its intended purpose.

D

Debant s.r.o.

tuzemsko.cz

51

Dovolenavcr.cz is an online travel and accommodation platform focused on the Czech Republic, operated by Debant s.r.o. The website offers a comprehensive listing of lodging options across various Czech regions, including last minute deals and hotel bookings. It targets tourists and travelers seeking accommodation within the Czech Republic, providing regional travel information and special offers. The business model appears to be based on advertising and paid listings from accommodation providers. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, Google Fonts, Google Analytics, and Google Adsense. While the site is accessible and functional, it shows signs of basic mobile optimization and lacks advanced security headers. The security posture is adequate with HTTPS enabled and a cookie consent mechanism in place, indicating GDPR compliance. However, the absence of WHOIS data for the domain reduces trust slightly, though the website content and business information appear consistent and legitimate. Overall, the site serves as a niche regional travel portal with moderate digital maturity and a stable security baseline.

B

Bělehrad Srbsko - ubytování, zajímavosti, doprava - Belgrade Serbia

belehrad.cz

45

The website belehrad.cz is a Czech language travel information portal focused on Belgrade, Serbia, providing details on accommodation, attractions, transportation, and travel tickets. It targets tourists and travelers interested in visiting Belgrade and offers monetization primarily through advertising and affiliate links. The site has been operational since 2007, indicating a stable presence in its niche market. Technically, the site uses standard HTML and JavaScript with Google Fonts, Adsense, and Analytics integrations, hosted on HostMonster. Mobile optimization and accessibility are basic but functional. Security posture is moderate with no detected security headers and no explicit privacy or terms of service pages, though a consent management platform is implemented for GDPR compliance. The domain WHOIS data is consistent with the website's claims and age, supporting legitimacy. Overall, the site is functional and informative but could improve in security and compliance documentation.

BodyFit.cz is a Czech informational website focused on promoting a healthy lifestyle through articles and a planned directory of fitness and wellness-related businesses. The site targets a general audience interested in fitness, relaxation, and body care within the Czech Republic. The business model appears to be content-driven with revenue generated primarily through advertising, notably Google Adsense. The website has been active since 2007, indicating a longstanding presence in its niche market. Technically, the site uses basic HTML, CSS, JavaScript, and jQuery, with Google Adsense scripts for monetization. The site is hosted under the REG-WEDOS registrar, with HTTPS enabled but lacking advanced security headers or modern CMS frameworks. Security posture is basic, with no visible security policies, incident response contacts, or vulnerability disclosures. Privacy compliance is minimal, with no privacy or cookie policies detected, which is a significant compliance gap given GDPR requirements. Overall, the site is functional but would benefit from modernization and improved security and privacy practices.

Rytíři nebes operates as a small online travel agency specializing in affordable flight tickets primarily targeting Czech and European customers. The website offers online reservation services and information about various airlines and ticket sellers, focusing on popular destinations such as Paris, London, New York, and others. The business model relies heavily on affiliate marketing and Google Adsense advertising. Technically, the website uses basic HTML, CSS, and JavaScript with embedded third-party affiliate widgets and ads. Hosting is provided by HostMonster, and the domain is well-established since 2007, supporting business legitimacy. However, the site lacks modern security practices, including HTTPS verification, security headers, and privacy compliance mechanisms. No contact information or privacy policies are provided, which may impact user trust and regulatory compliance.

M

my coffee story

mycoffeestory.cz

53

My Coffee Story is a small local café business based in Prague, Czech Republic, specializing in freshly prepared coffee, breakfasts, homemade desserts, and community events. The website reflects a modest but well-structured digital presence with clear information about their offerings and contact details. The business targets local customers and coffee enthusiasts, positioning itself as a neighborhood café with a cozy atmosphere and event hosting capabilities. Technically, the website is a simple static site using basic HTML, CSS, and JavaScript with Google Fonts integration, hosted on a Czech hosting provider. The site is mobile-optimized and provides a good user experience but lacks advanced technical frameworks or CMS platforms. Security posture is weak due to missing HTTPS verification, absence of security headers, and lack of privacy and cookie policies, which are critical for GDPR compliance. No forms or analytics scripts are present, reducing data collection risks but also limiting business intelligence capabilities. Overall, the website is functional and trustworthy for its business type but requires improvements in security and compliance to enhance trust and protect user data.

M

Městská část Praha 2

praha2.cz

57

Městská část Praha 2 operates as the official local government authority for the Prague 2 district in the Czech Republic. The website serves as a comprehensive portal for residents and visitors, providing access to municipal services, news, events, and community projects. It maintains a strong market position as a trusted government entity with a focus on public service and community engagement. The site targets local citizens and stakeholders interested in district governance and cultural activities. Technically, the website employs a modern yet straightforward technology stack including HTML5, CSS3, JavaScript, and Google Fonts, managed via the Vismo CMS platform. It demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Hosting and domain registration align with Czech providers, ensuring regional compliance and reliability. From a security perspective, the site uses HTTPS and secure form handling but lacks advanced security headers and explicit incident response contacts. Privacy compliance is addressed with clear privacy and cookie policies, though no active cookie consent mechanism is present. No vulnerabilities or suspicious activities were detected, indicating a solid security posture appropriate for a government website. Overall, the website is professional, trustworthy, and well-maintained, with minor areas for improvement in security headers and incident response transparency. The risk level is low, and the site effectively supports its public service mission.

T

TANZANIA PARK

tanzania-park.cz

52

TANZANIA PARK is a small-scale children's entertainment center located in Prague, Czech Republic, offering a variety of indoor attractions and birthday party services. The website presents a professional and family-friendly image with clear information about its services and events. The technical infrastructure is based on Webnode CMS, leveraging AWS Cloudfront CDN and Google Analytics for performance and tracking. While the site uses HTTPS and has a valid SSL certificate, it lacks some security headers and a cookie consent mechanism, which are areas for improvement. The absence of WHOIS data limits full domain legitimacy verification but does not detract significantly from the business's apparent authenticity. Overall, the website is well-structured, visually appealing, and targets families with children effectively.

Půjčovna lodiček Slovanka is a small, local boat rental service operating in the historic center of Prague, Czech Republic. The business offers a variety of boats and pedal boats for rent, catering to tourists, families, couples, and business meetings. The website provides detailed descriptions of services and highlights scenic views of Prague landmarks from the Vltava river. The company has an established online presence since 2011 and maintains social media profiles on Facebook and Instagram. Technically, the website uses basic HTML, CSS, and JavaScript with an older jQuery version and Lightbox for image galleries. There is no evidence of a modern CMS or advanced frameworks. The site lacks HTTPS enforcement information and security headers, which indicates potential security weaknesses. The website is moderately optimized for performance and mobile devices but lacks accessibility and SEO best practices. From a security perspective, the site does not provide privacy or cookie policies, nor does it have an incident response or vulnerability disclosure mechanism. The WHOIS data is consistent and trustworthy, showing a domain age appropriate for the business history. However, the presence of hidden spammy links and suspicious hidden text unrelated to the business raises concerns about site integrity. Overall, the website is functional and provides relevant business information but requires improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

A

Arval BNP Paribas Group

arval.cz

69

Arval.cz is a professional website representing Arval BNP Paribas Group's vehicle leasing services in the Czech Republic. The company specializes in full-service operational leasing solutions for individuals, entrepreneurs, and companies, offering new and used vehicles with flexible leasing terms. The website is well-structured, mobile-optimized, and uses modern technologies such as Drupal 10, Google Tag Manager, and OneTrust for cookie consent, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly visible. The absence of WHOIS data limits domain trust analysis, but the site’s branding and content strongly indicate legitimacy and affiliation with BNP Paribas Group.

C

CCS

ccs.cz

75

CCS operates as a prominent provider of fuel card and fleet management services primarily targeting businesses managing vehicle fleets in the Czech Republic and Slovakia. The company offers a comprehensive network of over 2,800 stations, enabling efficient fuel and charging solutions alongside vehicle monitoring. Their market position is strong within the regional energy and transportation sectors, supported by a professional and content-rich website presented in Czech. Technically, the website employs modern web technologies including Cookiebot for consent management, Google Fonts, and Typekit, and is built on the MerlinCMS platform. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and a detailed cookie consent mechanism, but lacks visible advanced security headers and explicit incident response information. The absence of WHOIS data limits domain trust analysis, though the website's compliance with GDPR and use of recognized third-party services indicate legitimacy. Overall, CCS demonstrates a mature digital presence with room for improvement in security transparency and contact information availability.

M

město Písek / Městský úřad Písek

mesto-pisek.cz

46

The website mesto-pisek.cz serves as the official digital presence of the city of Písek, Czech Republic. It provides comprehensive municipal information, including news, e-services, public documents, and contact details for residents and visitors. The site is well-structured and regularly updated, reflecting its role as a trusted government resource. The target audience primarily includes local citizens and stakeholders interested in city governance and services. The business model is public sector focused, delivering essential government services and information online. Technically, the website employs a modern but straightforward technology stack centered around HTML5, CSS3, JavaScript, and the Vismo CMS platform. It integrates Google Analytics for visitor insights and Google reCAPTCHA for form security. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Hosting details are not explicitly stated, but the domain and name servers suggest stable and consistent infrastructure. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to mitigate spam. It implements a cookie consent mechanism compliant with GDPR, allowing users to manage preferences. However, it lacks a publicly available security policy or incident response contacts, which could enhance transparency and preparedness. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data confirms the domain's legitimacy and long-standing registration, consistent with an official municipal website. Overall, the website demonstrates a solid security posture and good privacy compliance, with a professional and trustworthy presentation. Strategic improvements could include publishing formal security policies and incident response information to further strengthen user trust and compliance posture.

J

Jaroslav Šimek

jardasimek.cz

53

Jarda Simek is a professional UX/UI and 3D designer based in the Czech Republic, operating primarily as an independent or freelance creative. The website serves as a portfolio showcasing a variety of projects including brand design, product design, architectural visualization, mobile app design, and cinematic intros. The business targets digital creatives and clients seeking specialized design services, positioning itself as a niche personal brand with a focus on quality and creativity. The domain age and WHOIS data align well with the business history, indicating a stable and legitimate presence since 2018. Technically, the website employs modern frontend technologies such as Alpine.js and the model-viewer web component for 3D content, along with Google Fonts for typography. The site is hosted likely by Wedos, a Czech hosting provider, and demonstrates good mobile optimization and user experience. However, the site lacks advanced SEO and accessibility features, and no CMS or analytics tools are detected. From a security perspective, the site uses HTTPS but lacks explicit security headers and does not provide privacy or cookie policies, which are important for GDPR compliance. No forms or data collection mechanisms are present, reducing exposure to input-based vulnerabilities. The absence of incident response or vulnerability disclosure information suggests room for improvement in security maturity. Overall, the website is a well-designed, professional portfolio with moderate technical sophistication and business credibility. Key recommendations include implementing privacy and cookie policies, adding security headers, and enhancing compliance and security posture to build greater trust and meet regulatory requirements.

G

Givt

givt.cz

52

Givt.cz is a Czech non-profit platform established in 2015 that enables users to support over 3000 charitable organizations through their regular online shopping without paying extra. The platform integrates with numerous e-shops, displaying the percentage of purchase value donated to the selected charity. The website is professionally designed with good navigation and mobile optimization, reflecting a mature digital presence. Technically, it employs modern web technologies including Google Tag Manager and Analytics, with secure HTTPS hosting by REG-WEDOS. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response policies are not explicitly published. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie consent. Overall, the site is trustworthy and well-positioned in the non-profit e-commerce donation sector.

D

Digital Solutions s.r.o.

digitalsolutions.cz

54

Digital Solutions s.r.o. is a Czech Republic-based company specializing in custom software development, including information systems, web, and mobile applications. Established in 2003, the company targets businesses seeking tailored software solutions, emphasizing rapid delivery even for large projects. The website reflects a professional and consistent brand presence with a clear focus on technology services. Technically, the site employs modern frameworks such as Nuxt.js and Vue.js, hosted on a Czech hosting provider, and uses Craft CMS as its content management system. Performance and mobile optimization are good, though accessibility is basic. Security-wise, HTTPS is enforced, and cookie consent is managed via Cookiebot, but the site lacks published privacy policies, terms of service, and explicit security policies, which are areas for improvement. Tracking technologies include Piwik PRO and Google Tag Manager, indicating moderate user tracking with basic privacy compliance. The domain WHOIS data is consistent with the business claims, showing a long-standing registration since 2003, enhancing trustworthiness. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

F

FOAMGLAS®

foamglas.nl

75

FOAMGLAS® is a company specializing in cellular glass thermal insulation products, targeting construction professionals and building owners seeking long-term, efficient insulation solutions. The website presents a professional image with consistent branding and multilingual support, indicating an international market presence. The technical infrastructure includes modern web technologies such as Bootstrap CSS, Google Tag Manager, Google Ads, and Visual Website Optimizer for marketing and analytics purposes. The site is mobile-optimized and provides a cookie consent mechanism, reflecting attention to privacy compliance. Security posture is moderate with HTTPS implied but lacking visible advanced security headers or explicit security policies. WHOIS data is unavailable, which slightly reduces trust but does not negate the professional presentation. Overall, the site is functional, secure enough for its purpose, and compliant with basic privacy regulations.

P

Promat

promat.nl

64

Promat is a specialized provider of passive fire protection solutions tailored for the construction industry, offering products such as fire-resistant boards, spray mortars, paints, and fire sealing systems. The company operates under the Etex Industry division, indicating a large-scale manufacturing and industrial presence. The website is professionally designed with good content quality, targeting construction professionals and businesses seeking fire safety solutions. Technically, the site uses modern technologies including Azure Application Insights, HubSpot, Google Tag Manager, and OneTrust for cookie consent, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The lack of WHOIS data for the domain raises some concerns about domain registration transparency, but the website's branding and content suggest legitimacy. Overall, the site is a credible business platform with room for improvement in privacy and security disclosures.

I

ISOPARTNER Nederland

isopartner.nl

69

ISOPARTNER Nederland is a specialized distributor and producer of innovative technical insulation solutions, serving professional clients primarily in the manufacturing, construction, and energy sectors within the Netherlands. The company operates under the parent group IPCOM-Groep and offers a comprehensive range of services including custom and standard insulation products, professional advice, and logistics support. The website is well-structured, professionally designed, and provides clear navigation and multilingual support, reflecting a mature digital presence. Technically, the site is built on Drupal 10 with modern integrations such as Google Tag Manager, Usercentrics CMP for cookie consent, and Google reCAPTCHA for form security. Security posture is solid with HTTPS enforced and anti-bot measures, though explicit security headers and incident response policies are absent. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Overall, the website projects high business credibility and trustworthiness.

S

Swisspearl

swisspearl.com

61

Swisspearl is a Swiss-based manufacturer specializing in premium fiber cement products for building facades, roofs, interior cladding, and garden elements. The company positions itself as a leader in sustainable and innovative building materials with a heritage of over 100 years. Their website targets architects, designers, and contractors, offering detailed product information, consultation services, and sample ordering. The site is professionally designed, multilingual, and optimized for modern devices, reflecting a mature digital presence. Technically, the website employs multiple third-party marketing and analytics tools, including Google Tag Manager, Usercentrics for consent management, and visitor tracking services like TruConversion and RevealID. While HTTPS is used, explicit security headers and privacy policies are not clearly present in the provided content, indicating room for improvement in security posture and privacy compliance. The WHOIS data is unavailable or inconsistent, which raises some concerns about domain transparency but does not directly contradict the professional nature of the website. Overall, Swisspearl's digital infrastructure supports its business goals effectively but would benefit from enhanced privacy disclosures and security best practices.

J

James Hardie Europe GmbH

fermacell.nl

65

The website www.fermacell.nl represents James Hardie Europe GmbH's Fermacell brand, specializing in manufacturing and supplying innovative construction materials such as cement-bonded panels, gypsum fiber boards, and floor heating systems. The site targets construction professionals and dealers, providing product information, technical downloads, and configurator tools. The business is positioned as a large, established player in the European manufacturing sector with a focus on sustainability and innovation. Technically, the site runs on ASP.NET with Kentico CMS, integrates OneTrust for cookie consent, and uses Google Tag Manager for analytics. The design is professional, mobile-optimized, and offers clear navigation. Security posture is good with HTTPS and cookie consent but lacks explicit published security policies or incident response contacts. Privacy compliance is partial, with cookie consent but no visible privacy or terms of service pages. Overall, the site is trustworthy and business credible but could improve transparency on privacy and security policies.

T

Truhlíky Herink

truhlikyherink.cz

52

Truhlíky Herink is a small Czech e-commerce business specializing in handcrafted wooden raised garden beds and planters. The company emphasizes quality craftsmanship and offers customizable products primarily targeting gardening enthusiasts and homeowners with balconies or gardens. Their market position is that of a specialized local retailer with a focus on durable, aesthetically pleasing wooden garden products. Technically, the website is built on the Upgates e-commerce platform, utilizing modern web technologies such as Bootstrap, jQuery, and Google Analytics 4. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms with granular user control, but lacks some security headers and published security policies. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness from a domain registration perspective. Overall, the website is safe, professional, and functional, but would benefit from enhanced security practices and domain registration transparency.

D

digital mediate s.r.o.

digitalmediate.cz

36

digital mediate s.r.o. is a small Czech Republic-based digital innovation collective specializing in consulting, branding, product design, software engineering, and marketing services. The company emphasizes multidisciplinary collaboration among managers, entrepreneurs, creators, and engineers to deliver innovative digital solutions that positively impact business and culture. Their market position is niche, targeting startups and businesses seeking growth and digital transformation. The website reflects a professional and consistent brand image with clear contact and company registration information, supporting business credibility. Technically, the website uses modern web standards including HTML5, CSS3, and JavaScript with jQuery and Google Fonts. The site is mobile optimized and has good SEO fundamentals but lacks advanced frameworks or CMS indications. Performance is moderate, and accessibility is basic. No analytics or tracking scripts were detected, indicating minimal user tracking and privacy risk. Security posture is moderate with HTTPS implied but no explicit security headers detected. The absence of privacy, cookie, and terms policies is a compliance gap. No vulnerability disclosure or incident response information is provided. WHOIS data is missing, which reduces trustworthiness and suggests the need for further verification of domain registration status. Overall, the website is professional and safe but would benefit from enhanced security practices, privacy compliance, and transparency regarding domain registration to improve trust and reduce risk.

R

RealGeek.cz - ten největší e-shop s merchem influencerů v ČR a SR - RealGeek.cz

realgeek.cz

59

RealGeek.cz operates as the largest e-commerce platform specializing in merchandise for influencers, particularly targeting Czech and Slovak YouTubers and streamers. The website offers a variety of products such as t-shirts, hoodies, and caps, with a focus on fast delivery and customer incentives like free gifts. The platform demonstrates a moderate level of digital maturity, utilizing modern tracking and marketing technologies including Google Analytics, Facebook Pixel, and Smartlook, supported by a CDN infrastructure via Amazon Cloudfront. The site is built on PrestaShop, a popular e-commerce CMS, and shows good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in implementing security headers and publishing explicit security policies. The absence of WHOIS data reduces domain trustworthiness, but the website content and operational indicators suggest a legitimate business. Overall, the site presents a professional and user-friendly experience with moderate risk factors primarily related to domain registration transparency.

T

TEMPO, obchodní družstvo

odtempo.cz

50

TEMPO, obchodní družstvo is a Czech retail cooperative operating 86 stores and a logistics center supplying daily necessities. The company collaborates with partners such as COOP and CBA and holds recognized certifications like 'Tradiční český obchod', indicating a strong regional market presence and commitment to quality. The website supports automated 24/7 store operations and offers online shopping via Foodora, complemented by a mobile app for customer convenience. Technically, the site is built on the Webnode CMS platform, leveraging AWS Cloudfront CDN and modern JavaScript libraries, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and explicit policies could enhance protection. Overall, the domain registration aligns with the business identity, and no blocking or suspicious content is detected, reflecting a trustworthy and professional online presence.

O

OptimWeb s.r.o.

optimweb.cz

66

OptimWeb s.r.o. is a Czech-based company specializing in the creation of modern, responsive websites and custom e-shops tailored to client needs. Their market position is that of a specialized provider offering cloud-hosted, scalable web solutions primarily targeting businesses, entrepreneurs, e-commerce projects, agencies, and specialists. The company emphasizes long-term partnerships, security features such as HTTPS and DNSSEC, and a user-friendly approach to technical solutions. Technically, the website leverages modern technologies including Bootstrap, Google Tag Manager, Hotjar, and is hosted on Amazon Web Services, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and multi-factor authentication mentioned, though explicit security headers and incident response policies are not publicly documented. Privacy compliance is strong with comprehensive privacy and cookie policies and user consent mechanisms. The absence of WHOIS data is a notable gap affecting domain transparency and trust, but the professional website content and client testimonials support the company's legitimacy. Overall, the website scores well on content quality, technical implementation, and privacy compliance, with room for improvement in security best practices and domain registration transparency.

E

Exvalos spol. s r. o.

exvalos.cz

55

Exvalos spol. s r. o. is a Czech Republic based small manufacturing business specializing in the distribution and supply of industrial components such as bearings, hose clamps, linear technology, adhesives, lubricants, and related products. The company maintains partnerships with major industry brands including SKF, NSK, and Schaeffler, positioning itself as a reliable B2B supplier in the manufacturing sector. Their website reflects a professional and consistent brand image with a comprehensive product catalog and clear contact information. Technically, the website employs modern web technologies including Google Fonts, FontAwesome, and Google Analytics, with a responsive design optimized for mobile devices. While the site uses HTTPS and implements cookie consent mechanisms indicating GDPR compliance, it lacks some advanced security headers and explicit security policies, suggesting room for improvement in security posture. From a security perspective, the site shows good practices such as HTTPS enforcement and no visible exposure of sensitive data. However, the absence of WHOIS data raises concerns about domain registration legitimacy, which could impact trust. No critical vulnerabilities or malware indicators were found, but the site would benefit from enhanced security headers and a published vulnerability disclosure policy. Overall, the website is safe, professional, and well-structured, serving its target industrial audience effectively. Strategic recommendations include improving security headers, publishing detailed security and incident response policies, and verifying domain registration details to enhance trust and compliance.

B

BPA sport marketing a.s.

bpa.cz

45

BPA sport marketing a.s. is a well-established Czech marketing agency specializing in sports marketing, sponsorship, and advertising, particularly focused on ice hockey. Operating since 1993, the company holds exclusive marketing partnerships with major Czech hockey leagues such as the Tipsport extraliga and Maxa liga. Their services include marketing, media presentation, event realization, and online projects, targeting sports organizations, fans, and advertisers within the Czech Republic. The website reflects a professional and consistent brand image with clear business information and active engagement in sports marketing projects. Technically, the website employs modern web technologies including Google Fonts, Google reCAPTCHA, and Google Translate for multilingual support. It is built on the Webnia CMS platform and uses HTTPS with valid SSL certificates, ensuring secure communication. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR requirements. However, some security best practices such as security headers and explicit security policies are missing. From a security perspective, the site demonstrates a good posture with HTTPS enforcement and bot protection via reCAPTCHA. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness and suggesting the need for further domain registration verification. No critical vulnerabilities or malicious content were detected. Privacy policies and cookie management are implemented appropriately, supporting compliance with data protection regulations. Overall, BPA sport marketing a.s. presents a credible and professional online presence with solid business and technical foundations. To enhance trust and security, it is recommended to address the missing WHOIS transparency, implement security headers, and publish clear security and incident response policies.

M

Movisio s.r.o.

ctech.cz

70

Movisio s.r.o. is a medium-sized technology company based in Prague, Czech Republic, specializing in digital business solutions including 2D and 3D graphic solutions, interactive 3D, software development, linear constructions, and BIM. With over 20 years of experience and a team of more than 50 employees, Movisio serves corporations and large to medium-sized companies globally. The website reflects a professional and modern digital presence with clear navigation and comprehensive service offerings. Technically, the website employs a modern tech stack including Google Tag Manager, Google Analytics, Facebook Pixel, Smartlook, and Piwik/Matomo for analytics and marketing. The site is mobile optimized and performs moderately well, though accessibility features are basic. The CMS appears custom-built, and the hosting provider is not explicitly identified. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR compliance. However, it lacks visible security headers and explicit security or incident response policies. No vulnerability disclosure or security.txt files are present. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and business information appear legitimate. Overall, Movisio presents a trustworthy and professional digital business front with room for improvement in security transparency and domain registration clarity. Strategic recommendations include enhancing security headers, publishing security policies, and addressing WHOIS data inconsistencies to strengthen trust and compliance.

M

MerkurXtip.CZ | Sázková Kancelář Online | Sportovní Výsledky a Kasino

merkurxtip.cz

66

MerkurXtip.cz is an online betting and casino platform targeting Czech-speaking users interested in sports betting and casino games. The website offers a variety of casino games and sports results, positioning itself as a regional player in the Czech Republic's online gambling market. The business model revolves around online gambling services, catering to a mature audience. Technically, the site uses modern web technologies including JavaScript frameworks (likely Vue.js), Google Tag Manager for analytics, and responsive design for mobile users. However, the site lacks visible security headers and privacy policies, which are critical for user trust and regulatory compliance. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trustworthiness but is common in the gambling industry. Overall, the site is functional and professional but could improve in security and privacy transparency.

L

Loterie Maxa s.r.o.

korunka.eu

66

Loterie Maxa s.r.o. operates a Czech lottery and gambling platform offering a variety of games including lotteries, online scratch cards, bingo, and Vegas-style casino games. The company targets adult users interested in gaming and gambling, providing daily opportunities to win significant prizes. The website demonstrates strong branding and partnerships with established Czech betting companies such as Tipsport and Chance, enhancing its market position. The business model revolves around online and physical lottery services with promotional bonuses and a partner program to expand reach. Technically, the website is built using modern web technologies including React and JavaScript, with integrations for analytics and performance monitoring via Google Tag Manager and Dynatrace. The site is mobile optimized and provides a good user experience with clear navigation and professional design. However, some accessibility features could be improved. The website enforces HTTPS and implements cookie consent mechanisms, reflecting a good level of privacy compliance. From a security perspective, the site uses HTTPS and consent management but lacks visible security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS data for the domain is a concern for trust and legitimacy verification, although the website content and partnerships suggest a legitimate operation. Overall, the website presents a professional and trustworthy platform for lottery gaming in the Czech Republic, but improvements in transparency regarding domain registration, security policies, and contact information would enhance trust and compliance.

M

Mad Blue s.r.o.

detail.cz

52

Detail.cz is a Czech Republic-based business data aggregation platform operated by Mad Blue s.r.o. The website offers comprehensive company profiles, financial analyses, risk scoring, and relationship tracking services aimed at business users seeking detailed information on Czech companies. The platform integrates multiple data sources to provide enhanced business intelligence and supports CRM and API integrations for marketing and sales purposes. The site is professionally designed with good content quality and clear navigation, targeting primarily B2B users within the Czech market. Technically, the website employs modern JavaScript libraries and third-party marketing and tracking tools such as Google Tag Manager, Salespanel.io, and Leadinfo. It uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, no CMS or hosting provider information is explicitly detected, and some security best practices like security headers are not evident. The site performs moderately well with good mobile optimization and basic accessibility features. From a security perspective, the site benefits from HTTPS and CSRF protection in forms but lacks visible security headers and published security policies or incident response contacts. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and business information appear credible and professional. No critical vulnerabilities or adult content are detected, and privacy compliance is adequately addressed through cookie consent and a GDPR policy page. Overall, Detail.cz presents a solid business intelligence service with a good digital presence but should improve transparency regarding domain registration, security policies, and contact information to enhance trust and compliance. Strategic recommendations include implementing security headers, publishing terms of service and security policies, and verifying domain registration details.

N

NextPage Media, s.r.o.

penize.cz

58

NextPage Media, s.r.o. operates Peníze.cz, the largest Czech website dedicated to personal finance. The site offers comprehensive financial news, advice, product comparisons, calculators, and market data targeting Czech internet users interested in managing their finances. The company is a subsidiary of Partners HoldCo and manages several related media properties, positioning itself as a key player in the Czech financial media sector. Technically, the website employs a modern JavaScript stack with multiple third-party advertising and analytics integrations, including consent management to comply with privacy regulations. Security posture is solid with HTTPS and some security headers, though additional enhancements are recommended. The absence of WHOIS data reduces domain trust but the business information and content quality support legitimacy. Overall, the site is professional, content-rich, and well-optimized for users.

A

Allwyn

allwynentertainment.com

75

Allwyn is a global lottery-led entertainment company that operates across multiple countries including the United Kingdom, Austria, Czech Republic, Greece, Cyprus, and the United States. The company offers a diverse portfolio of gaming products such as lottery games, instant win games, scratch cards, iGaming, retail casinos, and sports betting. Their business model centers on creating engaging play experiences that bring hope and excitement to players while emphasizing social responsibility and community impact. The website reflects a strong market position with partnerships including Formula 1 and McLaren, highlighting their brand strength and global reach. Technically, the website is built using modern web technologies including React and Next.js, optimized for performance and mobile responsiveness. It employs Google Tag Manager and reCAPTCHA for analytics and security respectively. The site demonstrates good SEO practices, accessibility, and fast loading times, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and includes standard security headers, indicating a solid baseline security posture. However, there is no publicly available security policy or incident response information, and no vulnerability disclosure program is evident. The absence of WHOIS data for the domain is a notable transparency gap, although the website content and branding suggest legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, but improvements in transparency around security policies and domain registration details are recommended to enhance trust and credibility.

V

Vodafone

sazkamobil.cz

65

Vodafone.cz is the official website for Vodafone's prepaid SIM service 'Oskarta' in the Czech Republic. The site offers prepaid SIM cards with customizable packages, initial credit, and rewards for top-ups and referrals. Vodafone is a major telecommunications provider with a strong market presence in the region. The website is professionally designed, mobile-optimized, and uses modern web technologies including jQuery, Omniture analytics, and Google reCAPTCHA for security. The site is secured with HTTPS and implements standard security headers, reflecting a good security posture. However, explicit privacy and cookie policies were not found in the provided content, which is a compliance gap. WHOIS data for the domain is unavailable, likely due to registry policies or privacy protection, but this does not detract from the site's legitimacy given Vodafone's brand recognition. Overall, the site is trustworthy and well-maintained, serving a broad consumer audience in the Czech Republic.

The website tipsport.org currently presents minimal content consisting solely of a single image and a Cloudflare analytics beacon script. There is no visible business description, contact information, or legal policies such as privacy or cookie policies. The domain is registered since 2009 under Gransy, s.r.o., a Czech registrar, which aligns with the Czech language detected in the HTML. The website uses Cloudflare as a CDN and for analytics but does not show any active WAF challenge or blocking mechanisms. The lack of substantive content and absence of security and privacy policies indicate a low digital maturity and poor user experience. Security posture is weak due to missing security headers and no visible incident response or vulnerability disclosure information. Overall, the site appears legitimate based on WHOIS data but lacks essential business and compliance information, resulting in a low trust and credibility score.

K

Kajot Games

kajotgames.com

63

Kajot Games is a Malta-based B2B gaming software provider specializing in the development and integration of casino games and gaming solutions. Established in 2011 and operating under Development MT Limited, the company holds reputable certifications including the Malta Gaming Authority license and Gaming Labs certification, positioning it as a trusted partner in the gaming industry. Their website showcases a portfolio of games, integration services, and strong partnerships with notable gaming operators. Technically, the site is built on WordPress with modern JavaScript libraries and SEO optimizations, providing a good user experience across devices. Security measures include HTTPS enforcement and Google reCAPTCHA on contact forms, though some security headers are missing and DNSSEC is not enabled. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanisms. Overall, Kajot Games demonstrates a solid digital presence and trustworthy business operations with room for security enhancements.

D

DEBANT, s.r.o.

reklamauceskoj.cz

41

The website reklamauceskoj.cz operates as an online advertising platform specializing in the promotion of private accommodation and tourist objects primarily targeting the Czech, Polish, Slovak, and other European markets. With over 20 years of experience, the company DEBANT, s.r.o. offers a multi-lingual catalog presence, enabling property owners to advertise their apartments and rooms without commission fees, facilitating direct contact with potential guests. The platform emphasizes extensive reach through multiple regional portals and languages, supported by a moderate technical infrastructure including Google Analytics and live chat support.

C

CHORVATSKO UBYTOVÁNÍ | dovolená a zájezdy do Chorvatska ●

chorvatska.cz

48

The website chorvatska.cz is a Czech-language travel accommodation portal specializing in affordable apartments and travel packages in Croatia. It offers a large catalog of properties with direct owner contacts, emphasizing commission-free bookings. The site targets Czech tourists planning holidays in Croatia, providing detailed regional information and accommodation options. The business appears to be a small, established player in the hospitality sector, with a domain registered since 2007, indicating longevity and market presence. Technically, the website uses standard HTML, CSS, and JavaScript with integrations such as Google Analytics and Google Custom Search Engine. Hosting is likely provided by Coolhosting.cz, with domain registration via REG-WEDOS. The site has a basic but functional design, moderate performance, and basic mobile optimization. SEO is adequately addressed through meta tags and structured navigation. From a security perspective, the site uses HTTPS but lacks visible security headers like CSP or HSTS in the provided content. No explicit privacy or cookie consent mechanisms are present despite having a privacy policy page, indicating partial GDPR compliance. No contact emails or phone numbers are directly available on the main page, which may affect user trust and support accessibility. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the site is functional and relevant for its target audience but would benefit from enhanced security practices, improved privacy compliance, and clearer contact information to strengthen trust and compliance posture.

The website chorvatsko-dovolena.info operates as a Czech-language online catalog specializing in affordable private accommodation in Croatia. It targets Czech tourists seeking direct owner contacts for holiday rentals across multiple Croatian regions. The business is operated by Debant s.r.o., a small company established in 2006, positioning itself as the largest Czech internet catalog for Croatian private accommodation. Technically, the site uses basic HTML, CSS, and JavaScript with monetization through Google Adsense and tracking via Google Analytics. The design and user experience are functional but basic, with limited mobile optimization and accessibility features. Security posture is moderate; HTTPS is used but lacks advanced security headers and policies. Privacy compliance is weak, with no visible privacy or cookie policies, which may pose regulatory risks. Overall, the domain is privacy-protected in WHOIS, which is typical for small businesses, and no suspicious patterns were detected. Strategic improvements in privacy compliance and security headers are recommended to enhance trust and regulatory adherence.

D

Debant, s.r.o.

dovolenachorvatsko.cz

41

Dovolenachorvatsko.cz is an established Czech-based online platform specializing in vacation rentals and accommodation listings across Croatia. The website offers direct contact to property owners, bypassing travel agencies to provide affordable holiday options. It targets primarily Czech tourists but supports multiple languages through related domains. The business operates with a small company size and has been active since 2007, indicating a stable market presence. Technically, the site uses standard web technologies with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, which are compliance gaps. The site integrates advertising and affiliate marketing, leveraging Google Analytics and AddThis for tracking and social sharing. Overall, the website is safe for general audiences and maintains a moderate trust level, though improvements in privacy compliance and security practices are recommended.

D

Delta Digital s.r.o.

promestaobce.cz

56

The website 'Pro města a obce' is a Czech-language news portal and magazine focused on public administration and local government topics. It targets municipal representatives, officials, and key actors in public administration, providing current news, in-depth analyses, and inspirational content. The business model revolves around content publication, newsletter distribution, and advertising services. The site is operated by Delta Digital s.r.o., a Czech company, and holds a strong market position as a leading information source in its niche. Technically, the website is built on WordPress with modern web technologies including Bootstrap, JavaScript libraries, and Google Tag Manager for analytics and marketing. It employs a cookie consent mechanism compliant with GDPR principles, and the site is mobile-optimized with good SEO practices. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and has implemented cookie consent with granular user controls. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain is a concern, limiting the ability to fully verify domain legitimacy. Overall, the website presents a professional and trustworthy front for its business, but improvements in transparency regarding privacy, security policies, and domain registration information are recommended to enhance trust and compliance.

Střední podnikatelský stav, z.s. is a Czech non-profit organization established in 2001 focused on supporting medium-sized businesses through lobbying, organizing competitions such as Exportér roku and Talenty pro firmy T-PROFI, and promoting vocational education initiatives. The organization targets medium-sized entrepreneurs in the Czech Republic, aiming to improve the business environment and workforce qualifications. The website reflects a consistent and professional brand image with clear business information and contact details. Technically, the site is built on WordPress with common JavaScript libraries and moderate performance and mobile optimization. Security posture is basic with HTTPS usage but lacks advanced security headers and privacy compliance mechanisms such as privacy and cookie policies. Analytics tools like Google Analytics and Tag Manager are used, indicating moderate user tracking without explicit consent mechanisms. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

L

Meteorologická stanice Sehradice

luhamet.cz

47

Luhamet.cz operates a local meteorological station located in Sehradice, Czech Republic, providing real-time weather data, forecasts, and environmental monitoring services since 2015. The website targets general public and weather enthusiasts interested in detailed local meteorological information. The business model centers on data provision and community engagement through webcams, radar, and video content. Technically, the site uses modern frontend technologies including Bootstrap 5, jQuery, and FontAwesome, hosted likely by WEDOS, a Czech hosting provider. The site is mobile-optimized and offers good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is presumed but no advanced security headers or policies are detected. Privacy compliance is lacking due to absence of privacy and cookie policies. Contact information is transparent and includes email, phone, and physical address, enhancing business credibility. Overall, the site is trustworthy but would benefit from improved privacy and security practices.

V

Výlety s tátou

vyletystatou.cz

9

Výlety s tátou is a Czech-language travel blog focused on providing tips and guides for family-friendly trips, outdoor activities, and nature excursions primarily in the Czech Republic and some international destinations. The website targets families with children, adults interested in nature, and tourists seeking practical travel advice. It operates as a content publishing platform monetized through advertising and possibly affiliate marketing, with a niche market position in family and outdoor travel content. The site was established in 2018 and maintains a consistent brand presence with active social media channels on Facebook, Instagram, and YouTube. Technically, the website uses standard web technologies including HTML5, CSS, and JavaScript, with integrations of Google Custom Search Engine, Google Analytics, and Google Tag Manager for search and analytics functionality. Hosting is provided by cesky-hosting.eu. The site is mobile-optimized with good SEO practices but lacks advanced accessibility features. Performance is moderate, and the site uses HTTPS with a good SSL configuration. From a security perspective, the site has HTTPS enabled but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible cookie consent mechanism or comprehensive privacy compliance features, which may pose GDPR compliance risks. No contact information or incident response channels are clearly provided, limiting transparency for security or privacy concerns. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is a moderately secure and professionally presented travel blog with good content quality and user experience. However, it should improve privacy compliance, security headers, and contact transparency to enhance trust and regulatory adherence.

J

Kavárna

jtcafe.cz

61

J&T café is a stylish local café located in Brno, Czech Republic, offering breakfast, brunch, coffee, and event hosting services. The website presents a professional and elegant atmosphere targeting general audiences seeking a quality café experience. The business model focuses on hospitality with additional services such as meeting room rental and event hosting. The website is well-structured with clear navigation, a reservation form, and contact information, supporting good user experience and business credibility. Technically, the site uses a modern CMS (Solidpixels) and integrates multiple marketing and analytics tools including Microsoft Clarity, Facebook Pixel, and Google Tag Manager. The site is mobile optimized and performs moderately well. However, some security best practices such as security headers are missing, and no privacy policy or terms of service pages were found, which could impact compliance and user trust. Security posture is generally good with HTTPS enforced and secure form handling, but the absence of WHOIS data limits domain legitimacy verification. No signs of malware or phishing were detected. The site employs cookie consent mechanisms aligned with GDPR principles but lacks explicit privacy documentation. Overall, the website is trustworthy and professional but would benefit from enhanced transparency and security measures. Strategic improvements in privacy policy publication, security headers implementation, and WHOIS data availability would strengthen its security and compliance posture.

W

Wirtschaftsförderung Erzgebirge GmbH

wfe-erzgebirge.de

52

Wirtschaftsförderung Erzgebirge GmbH is a regional economic development agency serving the Erzgebirge region in Germany. The organization acts as a flexible and reliable service provider for entrepreneurs, businesses, startups, and municipalities, offering expertise and targeted services to support regional economic growth. Their key services include workforce development, business founding and funding support, innovation and technology transfer, rental and event offerings, regional marketing, and tourism infrastructure development. The website is built on TYPO3 CMS and demonstrates a moderate level of digital maturity with good content quality and navigation. Security posture is adequate with HTTPS and a Content-Security-Policy header, though the CSP could be hardened. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the site is professional and trustworthy, reflecting a legitimate government/non-profit entity focused on regional economic development.