Security Directory

M

Město Pardubice

ipardubice.cz

46

Pardubice.eu is the official web portal of the city of Pardubice, Czech Republic, serving as a comprehensive information hub for tourists, citizens, entrepreneurs, media, and city officials. The website offers a wide range of services including event calendars, tourist guides, public announcements, and contact information, positioning itself as the primary digital gateway to the city's offerings and administrative resources. The portal is well-branded with consistent city imagery and messaging, reflecting its government affiliation and public service mission. Technically, the website employs modern web technologies including JavaScript frameworks, CSS, and multiple analytics and tracking tools such as Google Tag Manager, Microsoft Clarity, Hotjar, and Facebook Pixel. It features responsive design optimized for mobile devices and includes accessibility considerations. The site uses a cookie consent management system compliant with GDPR, allowing users to control their privacy preferences. From a security perspective, the site enforces HTTPS and integrates cookie consent mechanisms, but could improve by adding explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain is registered through a reputable Czech registrar, consistent with the website's official nature. Overall, Pardubice.eu demonstrates a strong digital presence with excellent content quality, good technical implementation, and solid privacy compliance. It is a trustworthy and professional government portal with no signs of malicious activity or content safety concerns.

The Buckeye Trail Association is a well-established non-profit organization dedicated to maintaining and promoting a 1440+ mile hiking trail circling Ohio. The website serves as an information hub for hikers, volunteers, and supporters, offering resources such as maps, event details, volunteer portals, and donation opportunities. The organization has a strong community focus with active event management and volunteer engagement. Technically, the website uses basic web technologies including CSS and JavaScript, with Google Analytics for visitor tracking. Hosting is provided via iPowerWeb, and the domain is long-standing, created in 1998, which aligns with the organization's history. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional and trustworthy but could improve in compliance and security best practices.

The website at coloradotrail.org is currently inaccessible due to a security mechanism blocking access, presenting an 'Access Denied' page with network and browser verification scripts. This prevents any meaningful extraction of business, contact, or policy information. The domain is registered with GoDaddy.com, LLC since 1997, indicating a long-standing registration. However, without access to actual site content, no assessment of business operations or services can be made. The technical infrastructure appears to include JavaScript-based verification, but no CMS or analytics technologies are detectable. Security posture cannot be evaluated due to lack of accessible content and headers. Overall, the site is effectively blocked from analysis, resulting in a low AI score and unknown compliance or security status.

E

Erlebnis Akademie AG

treetop-walks.com

46

The website treetop-walks.com represents Erlebnis Akademie AG, a medium-sized German company specializing in treetop walks and nature experience paths. The business targets general audiences interested in outdoor leisure activities and operates primarily in the hospitality sector. The website is built on WordPress with Yoast SEO optimization and hosted by Hetzner Online GmbH, a reputable German hosting provider. The technical infrastructure is modern and moderately performant with good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is minimal with no explicit privacy or cookie policies detected. The website uses common analytics and tracking services including Microsoft Clarity, Google Tag Manager, and Facebook Pixel. Overall, the site is professional and trustworthy but could improve in privacy transparency and security hardening.

W

William H. Coleman, Inc.

whcoleman.com

44

William H. Coleman, Inc. is a well-established event management firm specializing in the travel industry, with a domain registered since 1998. The company positions itself as a leading organizer of travel-related events, targeting travel professionals and industry participants. Their website reflects a professional and consistent brand image, supported by active social media channels and clear contact information. Technically, the site is built on WordPress using modern themes and plugins, with integrations for analytics and social media. Performance and mobile optimization are good, though accessibility is basic. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the business credibility is high, but improvements in security and compliance are recommended.

4hosting.cz is a Czech-based small webhosting provider offering a range of hosting plans and domain registration services primarily targeting small to medium businesses and individual customers. The company emphasizes quality and affordability with a history dating back to 2004 and domain registration since 2008. Their services include webhosting packages, domain registration, and e-commerce platform rentals via their partner 4shop.cz. Technically, the website is built with standard HTML, CSS, and JavaScript, with no advanced frameworks detected. The site is moderately optimized for SEO and basic mobile responsiveness but lacks advanced accessibility features. Security posture is moderate with HTTPS usage implied but missing explicit security headers and no published security policies or incident response contacts. Privacy compliance is partially addressed with a GDPR information page but lacks cookie consent mechanisms. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

B

Bookolo System

bookoloengine.com

58

Bookolo System provides an administrative login interface likely for managing booking or scheduling services. The website is minimalistic, focusing on secure access for internal users rather than public-facing content. The technical infrastructure uses modern JavaScript libraries such as Tom Select, Stimulus, and Nette Framework components, indicating a contemporary web application design. However, the absence of WHOIS data raises concerns about domain legitimacy and registration status. Security posture is moderate with basic form protections but lacks visible security headers and privacy compliance documentation. Overall, the site is functional for its purpose but requires enhancements in security and compliance to improve trustworthiness.

A

AKP marketing, s.r.o.

vseproakce.cz

50

Platforma Všeproakce is a Czech event industry platform focused on community building, education, and providing services and tools for event professionals. It serves a sizable community of over 16,000 event specialists and enthusiasts, offering consulting, mentoring, and event planning support. The website is professionally designed, mobile-optimized, and uses modern web technologies including the Solidpixels CMS framework. It integrates cookie consent mechanisms and links to relevant social media channels, enhancing user engagement and compliance. However, the absence of a publicly accessible WHOIS record and missing privacy and terms of service pages represent gaps in transparency and compliance. Security posture is generally good with HTTPS enforced, but could be improved by adding security headers and incident response information.

G

Gasgrid Finland Oy

gasgridportal.fi

62

Gasgrid Finland Oy operates the Finnish gas transmission system and provides a dedicated portal for market parties to manage their accounts and services. The website serves as a secure login gateway for authorized users, reflecting a B2B business model focused on energy infrastructure management within Finland. The domain registration and hosting infrastructure align well with the company's profile, indicating a legitimate and consistent online presence. Technically, the website employs modern web technologies including AWS Amplify for authentication and AWS DNS services, suggesting a cloud-based hosting environment. The site is functional but minimalistic, with basic mobile optimization and limited SEO features. The absence of visible analytics or tracking scripts indicates a focus on privacy and minimal user tracking. From a security perspective, the site uses HTTPS and provides a secure login form with password visibility toggling. However, no security headers were detected in the provided HTML, and there is a lack of publicly accessible privacy, cookie, or security policies. No vulnerability disclosure or incident response information is available, which could be improved to enhance trust and compliance. Overall, the website presents a moderate risk profile with a solid business credibility foundation but room for improvement in privacy compliance, security best practices, and content richness. Strategic enhancements in these areas would strengthen the portal's trustworthiness and regulatory alignment.

R

REN - Redes Energéticas Nacionais

ren.pt

67

REN - Redes Energéticas Nacionais is a leading Portuguese company responsible for the transmission of electricity and natural gas at very high voltages and pressures, managing the national electric and gas systems. The company serves a broad audience including investors, suppliers, and the general public, positioning itself as a key player in Portugal's energy infrastructure sector. The website reflects a mature digital presence with comprehensive information on services, sustainability, innovation, and corporate governance. Technically, the site uses modern web technologies including jQuery, Highcharts, Cookiebot for consent management, and Umbraco CMS, delivering a responsive and accessible user experience. Security posture is strong with HTTPS enforced, anti-CSRF cookies, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is robust with clear GDPR-aligned policies and consent dialogs. Overall, REN's website demonstrates high professionalism, trustworthiness, and alignment with its business stature.

Р

Регіональна Газова Компанія

rgc.ua

57

Регіональна Газова Компанія (РГК) є провідним українським підприємством у сфері газорозподілу, виробництва газового обладнання та інжинірингових послуг. Компанія обслуговує значну частину газової інфраструктури України, пропонуючи інноваційні рішення, включаючи проекти з чистої енергії, такі як водень та біометан. РГК має сильну позицію на ринку, підтримує кілька дочірніх сервісних доменів і активно комунікує через соціальні мережі. Технічно сайт використовує сучасні веб-технології, включаючи Google Analytics та Tag Manager, має адаптивний дизайн і базові SEO та доступності. З точки зору безпеки, сайт використовує HTTPS, але не має розширених захисних заголовків або публічних політик безпеки. Відсутні контактні дані для інцидентів безпеки. Загалом, сайт є професійним, безпечним і орієнтованим на бізнес аудиторію.

The website www.psgaz.pl is currently inaccessible to direct content analysis due to a Cloudflare Turnstile CAPTCHA challenge page that blocks automated and direct access. No meaningful business content, contact information, or policies are publicly visible. The WHOIS data for the domain is unavailable, indicating privacy protection or lack of public registration data. This limits the ability to verify the legitimacy or business details of the domain. Technically, the site uses Cloudflare services for security and performance but lacks visible security headers or metadata. Overall, the site appears to be either under protection, newly registered, or inactive with minimal public presence.

The website www.nationalgas.com is currently inaccessible due to a Cloudflare Turnstile security challenge page, which blocks access to any meaningful content or business information. The domain WHOIS data is unavailable or the domain appears unregistered, raising significant legitimacy concerns. Without access to the actual website content, no business description, contact information, or security policies can be analyzed. The technical infrastructure relies on Cloudflare for security and bot mitigation, but no further technology stack or CMS details are discernible. The security posture cannot be properly assessed due to the lack of accessible content and headers. Overall, the site is effectively blocked from analysis, resulting in a low trust and security score.

The website tsoua.com is currently inaccessible due to a Cloudflare Turnstile human verification challenge page that blocks direct access to any business content. The domain was registered in 2019 via PublicDomainRegistry.com without privacy protection, indicating some transparency in ownership, but no registrant details are publicly available. Due to the WAF challenge, no privacy policies, contact information, or business descriptions are accessible, preventing a full assessment of the company's operations or market position. The technical infrastructure relies on Cloudflare for security and performance, but no further technology stack details are available. Security posture cannot be fully evaluated given the lack of accessible content and headers. Overall, the site appears to be in a protective mode, possibly to mitigate automated threats or abuse, but this limits external analysis and trust evaluation.

S

Sociální služby Česká Třebová

ssct.cz

44

Sociální služby Česká Třebová is a regional social services provider based in the Czech Republic, offering a range of care services including senior home care, palliative care, weekly daycare, caregiving, and respite care. The organization targets local residents and families requiring social support and healthcare services. The website is built on WordPress using the Neve theme and includes plugins such as Smart Slider 3 and Cookie Notice, reflecting a moderate level of digital maturity. The site is well-structured, mobile-optimized, and provides clear navigation and contact information, primarily phone numbers. Security posture is adequate with HTTPS enabled and cookie consent implemented, though it lacks advanced security headers and publicly available security policies. Overall, the website is trustworthy and professional, supporting the organization's mission effectively.

I

IBBY Canada

ibbycongress2026.org

64

IBBY Canada operates the website for the 40th IBBY World Congress 2026, an international event focused on children's literature. The site serves as an information hub and registration portal for attendees, leveraging the Shopify platform for e-commerce functionality. The website is well-structured, visually consistent, and targets professionals and enthusiasts in the children's literature community globally. Technically, the site is built on a modern, secure Shopify infrastructure with good performance and mobile optimization. Security best practices such as HTTPS and security headers are implemented, though privacy compliance could be improved with explicit cookie consent and detailed GDPR-aligned privacy policies. The absence of WHOIS data limits domain registration trust analysis, but the professional presentation and social media presence support legitimacy. Overall, the site is a credible, well-maintained platform for a niche educational event.

S

SPORTISIMO s. r. o.

loap.cz

63

LOAP.CZ is a Czech Republic based e-commerce retailer specializing in outdoor and sportswear products. The company positions itself as a pioneer in the Czech outdoor fashion and equipment market with over 25 years of experience. The website offers a broad range of products including clothing, footwear, camping gear, and accessories targeting outdoor enthusiasts. The business model is direct-to-consumer retail with a focus on quality and affordability. The website is professionally designed, mobile optimized, and provides clear navigation and relevant content for its target audience.

G

GardenBros

garden-brothers.cz

57

GardenBros is a small Czech Republic-based business specializing in garden maintenance, design, and realization services. The company emphasizes quality, attention to detail, and fair pricing, targeting homeowners and garden owners seeking professional care. Their website reflects a local service provider with a focus on customer satisfaction and collaboration with other professionals in related fields. Technically, the website is built on the Webnode platform, hosted via AWS Cloudfront CDN, and uses modern web technologies including HTTPS and JavaScript. The site is mobile-optimized and includes basic SEO and accessibility features. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks visible security headers and explicit incident response contacts. WHOIS data is unavailable, which impacts trust and transparency. Overall, the website is functional and professional but could improve in security and compliance transparency.

S

SCAN4BIM s.r.o.

scan4bim.cz

53

SCAN4BIM s.r.o. is a small Czech Republic-based company specializing in 3D laser scanning and building documentation services, primarily targeting construction professionals and property owners needing accurate digital data for reconstruction and project planning. The website is built using the Wix platform, indicating a moderate level of digital maturity with basic mobile optimization and standard web technologies. The site content is focused and relevant to its niche service offering but lacks comprehensive business and privacy information. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but the absence of security headers and privacy policies indicates room for improvement. The missing WHOIS data reduces trust in domain legitimacy, though the website itself appears professional and functional. Overall, the site presents a basic but legitimate online presence for a specialized service provider.

M

Město Aš

info-as.cz

52

The website www.info-as.cz serves as an official tourism and local information portal for the city of Aš in the Czech Republic. It provides comprehensive details about local activities, events, cultural sites, accommodation, and gastronomy, targeting tourists, families, and local visitors. The site is well-structured with clear navigation and offers multilingual support. It integrates modern JavaScript libraries and tracking tools such as Google Analytics and Tag Manager, with a cookie consent mechanism ensuring GDPR compliance. However, the absence of WHOIS data limits transparency regarding domain ownership, which slightly impacts trustworthiness. Technically, the website employs a modern tech stack including jQuery, Swiper.js, and LightGallery, delivering a moderate performance with good mobile optimization. Security posture is adequate with HTTPS enforced and consent management in place, but lacks explicit security headers and dedicated security or incident response policies. Contact information is available via a GDPR-compliant form, though no direct company emails or phone numbers are explicitly listed. Social media presence on Instagram and Facebook enhances engagement and trust. Overall, the site is professional, content-rich, and user-friendly, suitable for its purpose as a local tourism hub. The main risk lies in the lack of domain registration transparency and missing formal security policies. Strategic improvements in security headers, terms of service, and WHOIS transparency would enhance credibility and security posture.

William H. Coleman, Inc. operates a member login portal primarily serving its clients, likely in the energy sector. The website provides essential member services such as login, sign-up, password recovery, and contact options. The company has an established presence since 2012, supported by a domain registration consistent with its business age and sector. The site is built on ASP.NET Web Forms technology with Bootstrap for styling and includes basic client-side validation and CAPTCHA to enhance security. The technical infrastructure suggests hosting on Microsoft Azure DNS with GoDaddy as the registrar. Security posture is moderate with HTTPS enforced and CAPTCHA implemented, but lacks modern security headers and uses an outdated Google Analytics script. Privacy compliance is basic with a privacy policy and terms of service linked but no cookie consent mechanism. Overall, the website is functional and professional but could benefit from security and privacy enhancements.

A

Asociace výrobců minerální izolace (AVMI)

avmi.cz

57

The website www.avmi.cz represents the Asociace výrobců minerální izolace (AVMI), an association focused on mineral and thermal insulation for buildings. The site provides information about insulation materials such as mineral wool, polystyrene, and PUR foam, targeting general audiences interested in building insulation solutions. The business appears to be a small association operating primarily in the Czech Republic, with a professional web presence built on the Wix platform. Technical infrastructure relies on Wix's hosting and content management system, with standard JavaScript libraries and analytics tools such as Google Tag Manager and Sentry for error monitoring. Security posture is moderate, with HTTPS implied but lacking explicit security headers and privacy policies. The absence of WHOIS data reduces domain trustworthiness, but the website content and design indicate a legitimate business entity. Overall, the site is safe, professional, and relevant to its industry, but improvements in privacy compliance and security best practices are recommended.

Biogen Slovakia s.r.o. operates as a subsidiary of the global biotechnology leader Biogen Inc., focusing on innovative therapies for neurological and rare diseases. The website serves healthcare professionals and patients in Slovakia, providing comprehensive information about therapeutic areas, corporate responsibility, and career opportunities. The digital infrastructure is built on Adobe Experience Manager, leveraging modern JavaScript libraries and cookie consent management tools to ensure compliance and user experience. Security posture is solid with HTTPS enforcement and cookie management, though some HTTP security headers could be improved. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant, enhancing trust. Overall, the website reflects a professional and credible corporate presence with good technical implementation and user experience.

S

Strom - shop

stromshop.cz

71

Stromshop.cz is an established e-commerce platform specializing in the sale of John Deere branded products in the Czech Republic. Founded in 2013, it serves as the official John Deere online shop offering a wide range of products including garden machinery, clothing, toys, and accessories. The website demonstrates a consistent brand presence and targets consumers interested in John Deere merchandise. Technically, the site uses ASP.NET WebForms with Kentico CMS, integrates Google Tag Manager and reCAPTCHA for tracking and security, and shows moderate performance with good mobile optimization. Security practices include HTTPS and CSRF protection, though some security headers are not explicitly confirmed. Privacy and cookie policies are present, indicating basic GDPR compliance, but no explicit security policy or incident response information is found. Overall, the site is professional, trustworthy, and safe for general audiences.

H

Najděte si skvělého terapeuta — Hedepy online terapie

hedepy.cz

10

Hedepy.cz is an established online therapy platform founded in 2020, offering clients access to a wide network of vetted therapists primarily in the Czech Republic and other European countries. The platform emphasizes personalized therapist matching and provides a mobile app for convenient access to therapy sessions. With over 50,000 clients served and 700+ therapists, Hedepy positions itself as a trusted player in the online mental health space. The website content is professionally designed, mobile-optimized, and includes positive client testimonials and insurance partnerships, enhancing its credibility. Technically, the website leverages modern web technologies including React and Next.js, hosted on Vercel, with integrated error monitoring via Sentry and analytics through Google Tag Manager. The platform supports multiple languages and regional domains, indicating a mature digital infrastructure. Performance and SEO optimizations are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses monitoring tools but lacks visible security headers and published security policies or incident response contacts. Privacy and cookie policies are not clearly accessible, which is a compliance gap. No vulnerabilities or suspicious domains were detected, and no WAF or blocking mechanisms interfere with content access. Overall, Hedepy.cz demonstrates a solid business and technical foundation with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

A

Amazing places for your holiday | Amazing Places

amazingplaces.cz

57

The website 'Amazing Places' offers curated travel content focused on handpicked holiday destinations within the Czech Republic. It targets general audiences interested in exploring unique and interesting places for vacations. The business model appears to be content curation and travel inspiration, likely monetized through advertising or affiliate partnerships, though no explicit monetization details are visible. The site uses modern web technologies including Vue.js and Vuetify, with integration of Google Analytics and Tag Manager for visitor tracking. The technical infrastructure is moderately mature, with good mobile optimization and SEO practices, but lacks visible security headers and explicit privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS data limits the ability to verify domain ownership and registration legitimacy, introducing moderate risk in trust assessment. Overall, the site is functional and professional but could improve in transparency and security compliance.

The website stockphotos.com is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge page that blocks direct access to its content. As a result, no business-specific content, contact information, or policies are available for analysis. The domain is long-established, created in 1995, and registered with RegistryGate GmbH, showing legitimacy and consistency with the domain name. The site uses Cloudflare for security and performance, but DNSSEC is not enabled. Due to the blocking mechanism, technical, security, and privacy compliance assessments cannot be performed accurately. The content safety rating is safe as no adult or explicit content is detected on the challenge page.

C

Camperguru

camperguru.com

67

Camperguru is a specialized online platform founded in 2015 that curates and offers a verified collection of the best camping spots across Europe. The business targets camping enthusiasts and outdoor travelers, providing inspiration, detailed listings, and a mobile app companion for easier navigation and planning. The platform leverages a community-driven ambassador program to maintain high-quality content and unique outdoor stay options such as glamping, winery camping, and family-friendly sites. Technically, the website is built on WordPress with modern JavaScript frameworks and integrates Google Tag Manager for analytics. It is hosted with a reputable registrar and uses Cloudflare DNS, ensuring good performance and security. The site enforces HTTPS and includes a GDPR-compliant privacy and cookie policy with an opt-in consent mechanism. Security headers are not fully verified but the overall security posture is good with no visible vulnerabilities or exposed sensitive data. No direct contact information or terms of service were found, which could be improved for better business credibility. Overall, Camperguru presents a professional, trustworthy, and user-friendly platform with a strong market position in the European camping niche.

M

MAFRA, a.s.

metro.cz

62

Metro.cz is a well-established Czech online news portal operated by MAFRA, a.s., providing comprehensive news coverage focused on Prague and regional areas. The site offers a variety of content including articles, podcasts, photo galleries, and user community features, supported primarily through advertising revenue. Technically, the website employs modern web technologies and integrates multiple analytics and advertising platforms, ensuring good performance and user experience. Security posture is strong with HTTPS enforcement and consent management, though additional security headers could enhance protection. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences, though the absence of WHOIS data limits domain registration trust analysis.

M

MAFRA, a.s.

lidovky.cz

63

Lidovky.cz is a prominent Czech news portal operated by MAFRA, a.s., offering a wide range of news, analyses, interviews, and premium content to a general audience interested in current affairs. The website demonstrates a mature digital infrastructure with integration of multiple advertising and analytics technologies, including Google Analytics, Gemius, and advanced consent management via Didomi. The site is well-designed with excellent content quality, clear navigation, and mobile optimization. Security posture is good with HTTPS enforced and consent mechanisms in place, though some improvements in security headers and incident response transparency are recommended. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the strong business branding and content quality. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving accessibility features to further strengthen trust and compliance.

Ú

Úřad průmyslového vlastnictví

upv.cz

70

Úřad průmyslového vlastnictví is the central government authority in the Czech Republic responsible for the protection of industrial property rights. The website serves as an official portal providing comprehensive information and services related to patents, trademarks, industrial designs, geographical indications, and related intellectual property matters. It targets a broad audience including inventors, businesses, legal professionals, and the general public. The agency offers educational resources, electronic submission portals, and maintains databases for intellectual property rights. The site reflects a mature government entity with a strong market position in the Czech Republic's IP ecosystem. Technically, the website employs modern web technologies including Bootstrap for responsive design, jQuery, and Select2 for enhanced UI components. It uses Matomo analytics with a cookie consent mechanism, indicating a privacy-conscious approach. The site is well-structured, mobile-optimized, and accessible, with good SEO practices. However, no CMS or hosting provider details were detected. From a security perspective, the site enforces HTTPS and implements cookie consent. It references ISO certifications including ISO 27001, indicating a commitment to information security management. No critical vulnerabilities or exposed sensitive data were found. Security headers could be improved, and a security.txt file or explicit incident response contacts are absent. Overall, the website is professional, trustworthy, and compliant with GDPR. The missing WHOIS data is a notable anomaly but does not detract significantly from the site's legitimacy given its government domain and content quality. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and maintaining regular security audits.

K

KOSMAS.cz

kosmas.cz

62

KOSMAS.cz is a well-established Czech online bookstore offering a wide range of products including physical books, e-books, audiobooks, music, and games. The company operates 35 physical stores and maintains a strong online presence with a user-friendly website. Their market position is solid within the Czech retail book sector, supported by customer reviews and recognized certifications such as 'Zelená firma' and 'Ověřeno Heurekou'. The website targets Czech-speaking book buyers and readers, providing comprehensive product information and a smooth shopping experience. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Tag Manager, Google Analytics, Bing Ads, and Typekit fonts. The site is mobile-optimized and demonstrates good SEO practices. However, some security headers are missing, and no explicit security policy or incident response pages are published, which could be improved to enhance security posture. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, indicating compliance with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces transparency but does not significantly impact the overall trustworthiness given the website's professional presentation and contact information. Overall, KOSMAS.cz presents a trustworthy and professional e-commerce platform with good content quality and business credibility. Strategic improvements in security headers and transparency policies would further strengthen their security posture and compliance.

C

Cech kachliarov

cechkachliarov.sk

61

Cech kachliarov is a Slovak professional association dedicated to supporting and representing stove and fireplace professionals. The organization provides consumer guidance, educational resources, and a platform to find qualified professionals, ensuring quality and safety in the industry. Their website reflects a well-structured, professional presence with clear branding and relevant content targeted at Slovak residents seeking expert services in this niche. Technically, the site is built on Contao CMS and uses modern web technologies including Google Analytics, Facebook Pixel, and Google Tag Manager for analytics and marketing. The site is mobile optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though it lacks explicit security headers and a cookie consent mechanism, which are areas for improvement. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website is trustworthy, professional, and functional, serving its target audience effectively.

S

SilesNet Polska Sp. z o. o.

silesnet.pl

59

SilesNet Polska Sp. z o. o. is a small regional telecommunications provider based in Poland, specializing in high-quality fiber-optic and wireless internet services for residential and business customers. With over 21 years of market presence, the company emphasizes reliability, professional customer support, and tailored internet solutions. Their website reflects a professional and consistent brand image, targeting Polish-speaking customers primarily in the Cieszyn region. Technically, the website uses modern JavaScript libraries such as Swiper.js for UI elements and integrates Google Tag Manager and Google Analytics for tracking and marketing purposes. The site is mobile-optimized and provides clear navigation and contact information, though it lacks explicit privacy and terms of service pages. Security posture is moderate, with HTTPS usage and cookie consent implemented, but missing DNSSEC and security headers reduce the overall security maturity. No signs of WAF or content blocking were detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website is professional and trustworthy but could improve in privacy transparency and security best practices.

S

SilesNet s.r.o.

silesnet.cz

57

SilesNet s.r.o. is a regional telecommunications provider based in the Czech Republic, operating since 1998. The company specializes in delivering high-speed internet services via fiber optic and wireless technologies, targeting residential customers, businesses, and organizations. Their offerings include internet for apartments, houses, and enterprises, complemented by television services and dedicated technical support. The website reflects a stable market position with a focus on personalized customer service and regional expertise. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and popular libraries such as Swiper.js for UI components. Google Tag Manager and Google Analytics are used for tracking and analytics. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Hosting appears to be provided by rails.cz, indicating a reliable infrastructure. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, demonstrating awareness of privacy regulations. However, explicit security headers are missing, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data confirms domain legitimacy with consistent registration details and a long operational history. Overall, the website presents a professional and trustworthy digital presence with room for improvement in privacy policy transparency and security header implementation. Strategic enhancements in these areas would strengthen compliance and security posture, supporting continued business growth and customer trust.

R

Railsformers s.r.o.

rails.cz

70

Railsformers s.r.o. is a Czech-based IT service provider specializing in custom web and mobile application development, online marketing, SEO, e-commerce solutions, and cybersecurity services. Established in 2009, the company has a solid market presence with over 300 clients and 700 projects completed, supported by four international awards. Their website reflects a professional and consistent brand image, targeting businesses seeking comprehensive IT solutions. Technically, the site employs modern web technologies, including Google Tag Manager and cookie consent mechanisms, hosted under a reputable registrar. Security posture is good with HTTPS enabled and basic security best practices observed, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is partial, with cookie consent present but no clear privacy or terms of service pages. Overall, the domain registration data aligns well with the website content, supporting the company's legitimacy.

S

STROM PRAHA a. s.

strom.cz

72

STROM PRAHA a.s. is a specialized distributor of agricultural, garden, municipal, and sports equipment, notably serving as the exclusive distributor for John Deere and other reputable brands in the Czech Republic. The company targets agricultural businesses, municipal service providers, and sports facility managers, offering a broad range of machinery and equipment along with financing and used machinery sales. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the website is built on ASP.NET WebForms with modern integrations such as Google Tag Manager and Google reCAPTCHA v3 for form security. The site is mobile-optimized and uses HTTPS throughout, though it lacks some advanced security headers and explicit cookie consent mechanisms. The digital infrastructure is moderate in performance and SEO optimized, indicating a mature but improvable technical setup. From a security perspective, the site demonstrates good practices like HTTPS enforcement, CSRF tokens, and CAPTCHA protection on forms. However, the absence of visible security headers and a public security policy or incident response information suggests room for improvement. The missing WHOIS data, likely due to privacy protection, does not raise immediate concerns given the professional nature of the site and consistent business information. Overall, the website presents a low-risk profile with strong business credibility and a good security posture, though enhancements in privacy compliance and security transparency are recommended to further strengthen trust and compliance.

A

AGROZET České Budějovice, a.s.

agrozet.cz

49

AGROZET České Budějovice, a.s. operates a professional and well-established e-commerce platform specializing in agricultural machinery, spare parts, and related equipment. The company positions itself as the largest Czech e-shop in its category, serving a broad agricultural audience including farmers and agricultural enterprises. Their website offers a comprehensive catalog of products, detailed articles, and promotional content, reflecting a mature digital presence. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and Facebook Pixel for marketing and analytics, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforcement, secure forms, and cookie consent mechanisms, although some security headers could be improved. The absence of public WHOIS data is due to privacy protection, which is common and justified for commercial entities. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR regulations.

Ajax Search Lite is a WordPress plugin offering a free live search solution with support for custom post types and configurable filters. The business operates a freemium model with a PRO version upsell, targeting WordPress site owners and developers. The website is professionally designed, mobile-optimized, and integrates standard technologies such as WordPress, AJAX, and Google Fonts. Hosting and DNS are managed via Cloudflare, providing reliable infrastructure. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, reducing compliance maturity. No direct contact information or security policies are published, limiting transparency. Overall, the site is functional and trustworthy but could improve privacy and security disclosures.

WebPal Cloud Server, operated by Palomino System Innovations Inc., is a mature and established cloud-based content management and collaboration platform serving over 400,000 users worldwide. The company offers integrated solutions for website building, document management, file sharing, and business process applications, targeting enterprises and small businesses. The platform emphasizes secure, private hosting in selected top-tier data centers with dedicated support based in Toronto, Canada. The website presents a professional and consistent brand image with clear service offerings and client testimonials, reinforcing its market position as a trusted content management solution provider. Technically, the website uses a modern tech stack including HTML5, CSS3, JavaScript libraries such as jQuery and Bootstrap, and integrates Google Analytics and Google Ads for marketing and tracking. The site is moderately optimized for performance and mobile responsiveness, though accessibility features are basic. The hosting infrastructure allows clients to choose server locations across multiple global data centers, enhancing data sovereignty and reliability. From a security perspective, the domain is well-established with no privacy protection, indicating transparency. However, DNSSEC is not enabled, and no HTTP security headers were detected in the HTML content, which are areas for improvement. The site lacks a published security policy, incident response contacts, and cookie consent mechanisms, which are important for compliance and trust. The use of Google tracking scripts indicates moderate user tracking, but privacy compliance appears basic. Overall, WebPal.net is a credible and professional business website with a solid foundation but could enhance its security posture and privacy compliance to better align with modern standards and regulations.

SZM.com s.r.o. is a Slovak-based small technology company specializing in free and paid web hosting and email services. The company has a long-standing presence since 1999, offering free email addresses and web space under the szm.com and szm.sk domains, with premium paid packages for enhanced features. Their market position is that of a local hosting provider targeting individuals and small businesses seeking affordable hosting solutions. The website content is primarily in Slovak and provides clear information about their freehosting offerings, supported by a stable domain and consistent branding. Technically, the website employs standard web technologies including HTML, CSS, and JavaScript, with integrations of Google Tag Manager, Google Analytics, Microsoft Clarity, and Facebook Pixel for analytics and marketing. The hosting infrastructure appears stable but basic, with moderate performance and limited mobile optimization. The site lacks a CMS and uses custom-built pages. Advertising is managed via Google Adsense, and tracking is extensive but without visible cookie consent mechanisms. From a security perspective, the site uses HTTPS for mail services with SSL encryption and applies antivirus and antispam filtering for emails. However, DNSSEC is not enabled, and no security headers such as CSP or HSTS are detected, which are recommended best practices. There is no published security policy or incident response contact information. Privacy compliance is weak due to the absence of privacy and cookie policies despite the use of tracking technologies. Overall, SZM.com presents a moderately trustworthy and functional hosting service with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing DNSSEC, publishing privacy and cookie policies with consent mechanisms, adding security headers, and providing clear incident response contacts to enhance trust and compliance.

S

Slovenský zväz sclerosis multiplex

szsm.sk

67

Slovenský zväz sclerosis multiplex (SZSM) is a Slovak non-profit organization dedicated to supporting patients with sclerosis multiplex. The website serves as an information hub, providing medical information, event announcements, and contact details for patients and stakeholders. It holds a reputable position within its niche, supported by partnerships with recognized healthcare companies such as Biogen and Coloplast. The site targets patients, caregivers, and medical professionals interested in sclerosis multiplex support and information. Technically, the website employs modern web technologies including Google reCAPTCHA for security, Facebook SDK for social media integration, and a cookie consent mechanism to comply with privacy regulations. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Hosting appears reliable, possibly via Websupport, a partner displayed on the site. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks explicit security headers and a published security policy or incident response plan. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements include adding security headers, publishing a security policy, and implementing a vulnerability disclosure mechanism to further enhance trust and security posture.

K

Komerční banka, a. s.

nastartujtese.cz

62

Nastartujtese.cz is a Czech entrepreneurship support platform sponsored by Komerční banka, offering a competition and marketplace for starting entrepreneurs. The website provides information about the competition, prizes, partners, and business advice, targeting new business founders in the Czech Republic. The platform is positioned as a reputable grant and support program with a medium-sized presence and a focus on finance and non-profit sectors. Technically, the website uses modern web technologies including React and Google Tag Manager, with good mobile optimization and performance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response details are missing. The absence of WHOIS data is a concern for domain legitimacy verification but the website's branding and partner ecosystem support its credibility. Overall, the site is professional, trustworthy, and compliant with GDPR, serving its target audience effectively.

D

DEEP VISION s.r.o.

sferapardubice.eu

58

SFÉRA Pardubice is a community-focused educational organization based in Pardubice, Czech Republic, operated by DEEP VISION s.r.o. The organization provides innovative educational programs, workshops, and events aimed at children, students, educators, and the general public. Their offerings include science laboratories, creative workshops, and thematic events that promote interdisciplinary learning and community engagement. The website reflects a well-structured and content-rich platform that supports their mission of educating for the future. Technically, the site uses modern web technologies including Google Tag Manager for analytics and implements a cookie consent mechanism, although it lacks explicit privacy and terms of service pages. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and formal policies. Overall, the domain is privacy protected via EURid, which is typical for EU domains, and the website content aligns with a legitimate educational entity. The site is accessible, professionally designed, and trustworthy, with clear contact information and social media presence.

C

Ekofarma Adršpach | Bio hovězí maso | Plemenný chov

charolais-chov.cz

43

The website www.ekofarmaadrspach.cz appears to represent a small agricultural or farm-related business, likely based in the Czech Republic given the language and domain. The site is built on the Wix platform, utilizing standard Wix scripts and assets, indicating a basic digital infrastructure suitable for small businesses. However, the site lacks visible business descriptions, contact information, and legal or compliance documentation, which limits its business credibility and user trust. Technically, the site uses HTTPS and includes some modern JavaScript libraries such as Sentry for error monitoring, but it lacks advanced security headers and privacy compliance mechanisms. The absence of WHOIS data suggests privacy protection or an unregistered domain, which reduces trustworthiness from a domain registration perspective. Overall, the site is accessible without WAF or blocking mechanisms, but the content is minimal and lacks comprehensive business and security information.

Střední škola zemědělská a přírodovědná Rožnov pod Radhoštěm is a well-established secondary educational institution in the Czech Republic with over 120 years of tradition. The school specializes in agricultural and natural science education, offering comprehensive programs including practical training, student accommodation, and canteen services. It serves students, parents, and applicants primarily within the region and operates under the governance of the Zlínský kraj. The website reflects a professional and consistent brand image with clear contact information and access to official documents.

Zerlina s.r.o. operates a small family ecological goat farm located in Rožnov pod Radhoštěm, Czech Republic. The business focuses on producing high-quality organic goat dairy products including fresh and aged cheeses, yogurts, kefir, and ice cream. Additionally, the farm offers agrotourism experiences, farm tours, and accommodation services, targeting families, individuals, and groups interested in sustainable farming and local gastronomy. The company positions itself as a trusted regional player with a strong emphasis on tradition and ecological sustainability. Technically, the website is built on WordPress with a modern tech stack including JavaScript libraries, Google reCAPTCHA for form security, and Google Analytics for visitor tracking. The site is well-optimized for mobile devices and provides a good user experience with clear navigation and professional design. Cookie consent and privacy policies are implemented in compliance with GDPR requirements. From a security perspective, the site uses HTTPS with a valid SSL certificate and integrates reCAPTCHA to protect forms. However, it lacks some recommended security headers which could enhance protection against common web threats. The absence of WHOIS registration data reduces domain trustworthiness, but the website content and business information appear legitimate and professional. Overall, Zerlina's website demonstrates a solid digital presence for a small ecological farm with good privacy compliance and user experience. Strategic improvements in security headers and domain registration transparency would further strengthen trust and security posture.

M

Markol Food s.r.o.

markol.net

59

Markol Food s.r.o. is a small Czech company specializing in the production and sale of various healthy snack bars including Bio Bars, Protein Bars, RAW Bars, Tiger Bars, and Baked Assortment. Originating from a home-based production in Jevíčko, the company has expanded to export products internationally and offers private label and customized promotional bar manufacturing. The website reflects a professional e-commerce platform powered by Webnode CMS and hosted via AWS Cloudfront CDN, featuring modern technologies and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and headers are lacking. WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not directly contradict the business legitimacy. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations.

G

Golemos s.r.o.

eshoprychle.cz

55

Eshop-rychle.cz is a Czech-based e-commerce platform operated by Golemos s.r.o., providing entrepreneurs and small to medium businesses with an easy-to-use SaaS solution for creating and managing online shops. The platform emphasizes speed, professional features, modern design, and strong customer support, serving over 7,000 e-shops with a significant annual transaction volume. Technically, the website employs modern JavaScript frameworks, tracking tools like Microsoft Clarity and Google Tag Manager, and ensures mobile responsiveness and good SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. The absence of WHOIS data reduces transparency but does not critically impact trust given the professional presentation and business consistency. Overall, the website is a well-established, trustworthy e-commerce service provider in the Czech market.

K

Korea Hydro and Nuclear Power Company (KHNP)

korejskaenergie.cz

53

Korejskaenergie.cz is a professionally designed website representing Korea Hydro and Nuclear Power Company (KHNP), a large South Korean state-owned enterprise specializing in nuclear power plant construction and operation. The site targets Czech stakeholders and investors, promoting KHNP's advanced nuclear technology and experience, particularly for the Dukovany nuclear power plant project. The website uses modern web technologies including Nuxt.js and integrates social media and video content to enhance engagement. Security posture is moderate with HTTPS usage and no visible sensitive data exposure, but lacks published privacy and cookie policies, security headers, and explicit contact information. The domain registration is consistent and appropriate for the business's regional presence. Overall, the site is trustworthy and professional but could improve compliance and security transparency.