Security Directory

C

Cech mechanických zámkových systémů ČR

cmzs.cz

51

The website cmzs.cz represents the Cech mechanických zámkových systémů ČR (CMZS), a Czech organization uniting professionals in the field of mechanical lock systems, key manufacturing, and lock installations. The site serves both industry experts and the general public, offering services such as a product catalog, security projects, and a member search feature. The business is positioned as a trusted entity within the Czech Republic's security and locksmith sector, founded in 2007, with a small organizational size and a clear focus on mechanical lock systems. Technically, the website employs modern web technologies including JavaScript, SVG graphics, and Google Tag Manager for analytics. It is hosted under the registrar REG-GRANSY, with a domain age consistent with the organization's history. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, it lacks some advanced security headers and explicit privacy and cookie policies, which are important for compliance and user trust. From a security perspective, the site uses HTTPS and asynchronous script loading, which are positive indicators. No visible vulnerabilities or exposed sensitive data were detected. The absence of published security policies, incident response contacts, and vulnerability disclosure mechanisms represents an area for improvement. Analytics usage is moderate, primarily via Google Tag Manager, but privacy compliance is weak due to missing policies. Overall, the website is safe, professional, and trustworthy, with a solid business foundation. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and providing clear incident response and vulnerability disclosure information to improve compliance and security posture.

Ghorban Global is a German-based company specializing in the supply and export of premium gourmet foods, including fresh meat, fish, and shellfish. With over a decade of experience since its domain registration in 2009, the company positions itself as a passionate provider of high-quality fresh food products, targeting both business clients and discerning consumers. The website reflects a professional and consistent brand image with clear contact channels and social media presence, supporting its market credibility. Technically, the website employs modern front-end technologies such as Swiper.js for sliders, AOS for animations, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and performs moderately well, though no explicit CMS or backend platform is detected. Hosting and domain registration are consistent with the business location in Germany. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and important security headers like CSP and HSTS. There is no visible security or incident response policy, and no cookie consent mechanism is implemented, which may pose compliance risks under GDPR. The WHOIS data aligns well with the website content, indicating legitimacy and trustworthiness. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced security headers, privacy compliance improvements, and explicit security policies to strengthen its security posture and regulatory adherence.

The website procivis.com is currently a domain parking page offered for sale via Sedo, with no active business content or services presented. The page is primarily in Finnish and contains advertising scripts from Google Ads and Sedo, with no direct company information or contact details. The domain was registered in 2009 with a Korean registrar, but the website content does not reflect an active business, indicating the domain is likely held for resale. Technically, the site uses basic HTML, CSS, and JavaScript with embedded advertising iframes and lacks modern security features such as DNSSEC or visible HTTPS configuration. Privacy and cookie policies are minimal and provided by the Sedo parking service, with no GDPR compliance indicators or security policies present. Overall, the site has low trustworthiness and poor content quality, serving only as a placeholder for domain sale.

P

Pixelfield

pixelfield.co.uk

50

Pixelfield is a London-based digital product development agency specializing in mobile and web applications, game development, UI/UX design, and emerging technologies such as blockchain, AI, AR, and VR. The company targets startups and businesses seeking innovative digital solutions, positioning itself as a reliable and experienced partner with a strong European client base. The website reflects a professional and modern digital presence with clear navigation and comprehensive service offerings. Technically, the site employs modern web technologies and integrates multiple analytics and marketing tools, though it lacks visible privacy and cookie policies, which impacts compliance. Security posture is generally good with HTTPS and no exposed sensitive data, but could be improved by adding security headers and incident response information. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

TH.data a.s. is a Czech Republic-based small financial services company specializing in accounting, tax, payroll, and related consulting services. Established in 2000, the company offers comprehensive financial outsourcing solutions to both domestic and international clients. The website reflects a professional but basic digital presence with multilingual support and certification badges indicating trustworthiness within local business directories. Technically, the site uses legacy JavaScript libraries and lacks modern security features such as HTTPS enforcement and security headers, which impacts its security posture negatively. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Overall, the website is functional but requires significant improvements in security and privacy compliance to enhance trust and protect client data.

H

Handicare Treppenlifte Österreich

handicare-treppenlifte.at

65

Handicare Treppenlifte Österreich is a specialized provider of stairlift solutions aimed at enabling elderly and mobility-impaired individuals to maintain independence in their homes. The company offers customized stairlift products for both straight and curved staircases, supported by a network of certified partners providing personalized consultation, installation, and after-sales services. With a heritage spanning over 135 years and a global footprint of over 800,000 installed stairlifts, Handicare holds a strong market position in the healthcare mobility sector in Austria and beyond. Technically, the website is built on a modern stack including HTML5, CSS3, JavaScript, and leverages multiple analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Hotjar, all managed with a robust cookie consent mechanism. Hosting is provided via Amazon AWS, ensuring reliable infrastructure. The site demonstrates good mobile optimization, SEO practices, and basic accessibility features. From a security perspective, the site enforces HTTPS and employs consent management for cookies, with no exposed sensitive data detected. Certifications such as ISO 9001 and ISO 14001 underline the company’s commitment to quality and environmental standards. However, some security headers could be improved, and an incident response contact is not publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, presenting a low risk profile. Strategic recommendations include enhancing security headers, publishing incident response information, and continuous monitoring of third-party scripts to maintain security posture.

H

Handicare Treppenlifte Schweiz

handicare-treppenlifte.ch

65

Handicare Treppenlifte Schweiz is a well-established company specializing in the manufacture and sale of stairlifts designed to enhance mobility and independence for elderly and mobility-impaired individuals in Switzerland. The company leverages a network of certified partners to provide personalized consultation, custom manufacturing, installation, and after-sales service. With over 130 years of history and more than 650,000 stairlifts installed worldwide, Handicare holds a strong market position supported by ISO certifications and a consistent brand presence. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Analytics, Microsoft Clarity, and Hotjar, integrated via Google Tag Manager. The site is built on a custom CMS platform (Statichs) and demonstrates good mobile optimization, SEO practices, and user experience. Cookie consent mechanisms are robust and GDPR compliant, reflecting a mature digital infrastructure. From a security perspective, the site uses HTTPS with excellent SSL configuration and implements secure form validation. However, it lacks publicly available security policies and incident response contacts, which could be improved to enhance trust and compliance. No critical vulnerabilities or suspicious activities were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for Handicare Treppenlifte Schweiz. Strategic improvements in security transparency and accessibility could further strengthen its posture.

ZEMAN maso - uzeniny, a.s. operates a regional retail business specializing in fresh meat, traditional smoked meats, and delicacies sourced from their own production facility in Příbram, Czech Republic. The company targets general consumers seeking quality meat products through physical butcher shops and an online e-shop. Their market position is that of an established regional player with a focus on quality and tradition. Technically, the website employs modern web technologies including HTML5, CSS, JavaScript, Google Fonts, Google Tag Manager, Facebook Pixel, and Smartlook for analytics and user behavior tracking. The site is moderately optimized for mobile devices and SEO, with a good user experience and clear navigation. However, some accessibility and security header improvements are recommended. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and an explicit privacy policy page. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain trustworthiness, though the website content and business presence appear legitimate. Overall, the website scores well in content quality and business credibility but should improve privacy compliance and security best practices. Strategic recommendations include adding a privacy policy, enhancing security headers, and verifying domain registration details to strengthen trust and compliance.

Uzeniny Příbram, a.s. is a Czech meat processing company operating production plants in Příbram and Zábřeh na Moravě. The company focuses on pork and beef slaughtering and producing high-quality meat products such as hams and specialties with reduced sodium content. The website provides basic company and production information primarily targeting general consumers interested in their meat products. Technically, the website uses standard web technologies including Google Fonts, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is accessible, uses HTTPS, and implements a cookie consent mechanism, but lacks a privacy policy and security headers, which are important for compliance and security posture. No WHOIS data was found, which limits domain trust verification and reduces overall legitimacy confidence. The website does not expose any critical security vulnerabilities but could improve in privacy compliance and security best practices.

S

Synpo a.s.

synpo.cz

58

Synpo a.s. is a Czech chemical company with over 70 years of tradition specializing in applied research and production of resins, varnishes, paints, adhesives, sealants, and polymers. The company serves both small and multinational companies, offering a broad range of products and services including accredited laboratories and custom production. Their market position is strong within the manufacturing sector, supported by a professional website and active social media presence. Technically, the website is built on the Solidpixels CMS platform, uses modern tracking tools like Google Analytics and Tag Manager, and is secured with HTTPS. However, the absence of WHOIS data and privacy policy pages slightly reduces trustworthiness. Security posture is moderate with room for improvement in security headers and incident response transparency. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

Plzen-katalog.cz is a Czech regional business directory focused on providing categorized listings of companies and services primarily in Plzeň and other Czech cities. The platform operates under the parent brand Česko-Katalog.cz, established in 2014, and offers users a searchable catalog of firms across diverse sectors such as real estate, transportation, retail, and government. The website targets both businesses seeking visibility and consumers searching for local services. Technically, the site uses a custom-built platform with common web technologies including jQuery, Google Analytics, and Facebook SDK for tracking and social integration. The design and navigation are basic but functional, with moderate mobile optimization and SEO features.

The website 'České Budějovice - katalog firem' serves as a regional online business directory focused on companies and services in České Budějovice and the broader Czech Republic. It is part of a network of similar directories under the parent brand Česko-Katalog.cz, established in 2014. The platform offers categorized listings and search functionality to help users find local businesses across various sectors. The site targets both consumers and businesses seeking local company information and advertising opportunities. Technically, the website employs standard web technologies such as jQuery, Google Analytics, and Facebook SDK for tracking and social integration. It uses HTTPS for secure communication but lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance. The site shows basic mobile optimization and accessibility features but could benefit from modernization and enhanced performance tuning. From a security perspective, the site demonstrates a moderate posture with no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement. The lack of cookie consent and limited privacy compliance features are notable gaps given the GDPR requirements. Overall, the website is functional and moderately professional but would benefit from enhanced security practices, improved privacy compliance, and better contact transparency to increase trustworthiness and user confidence.

Obec Mokrosuky operates as a local government authority serving the village of Mokrosuky and its surrounding area in the Czech Republic. The website provides essential administrative information, contact details, official documents, and public notices to residents and visitors. The site is positioned as a small municipal government entity focused on transparency and community engagement. Technically, the website uses standard web technologies including HTML, CSS, JavaScript, and integrates Google Analytics for visitor insights. Cookie consent management is implemented to comply with GDPR requirements, reflecting a moderate level of digital maturity. Security posture is adequate but could be improved by adding security headers and enforcing HTTPS site-wide. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is functional and trustworthy but would benefit from modernization and enhanced security practices.

Tomáš Bdínka is a seasoned UX/UI and Webflow designer with over 14 years of experience, offering specialized services in digital product design and web development. The website showcases a professional portfolio targeting businesses and individuals seeking high-quality web design solutions. The technical infrastructure leverages modern web technologies including Webflow CMS, Google Analytics, and Typekit fonts, hosted on DigitalOcean, indicating a mature digital presence. Security posture is adequate with HTTPS enabled and anonymized analytics, but lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the site is well-designed and functional, but could enhance compliance and security to better protect user data and build trust.

D

Darujme.cz

darujme.cz

59

Darujme.cz is the leading online donation platform in the Czech Republic, facilitating donations for over 1500 organizations and municipalities. The platform offers personal and corporate fundraising campaigns, enabling NGOs, schools, churches, and companies to raise funds efficiently online. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience. Technically, it leverages WordPress CMS, AWS hosting, and modern analytics tools like Google Analytics and Microsoft Clarity, with a strong emphasis on privacy compliance through cookie consent mechanisms. Security posture is solid with HTTPS enforced and secure payment processing, though some security headers and explicit policies could be improved. WHOIS data is unavailable, which slightly impacts trust but the presence of clear contact information and reputable partners supports legitimacy. Overall, Darujme.cz presents a trustworthy, well-maintained platform with good business credibility and technical maturity.

N

New Logic s.r.o.

newlogic.cz

71

New Logic s.r.o. is a Czech Republic-based full-service digital agency specializing in web development, e-commerce solutions, CRM and ERP systems, mobile applications, branding, and digital marketing. The company positions itself as a professional and experienced partner for businesses seeking comprehensive digital solutions, supported by a skilled team of consultants, designers, developers, and marketers. Their market presence is reinforced by a portfolio of successful projects and industry awards, targeting primarily business clients in need of tailored digital services. Technically, the website employs a modern technology stack including JavaScript frameworks, animation libraries, and advanced tracking and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is well-optimized for performance and mobile devices, featuring lazy loading and smooth scrolling. The use of a proprietary modular CMS indicates a custom approach to content management, enhancing flexibility and scalability. From a security perspective, the site enforces HTTPS, implements key security headers, and uses cookie consent mechanisms aligned with GDPR requirements. However, there is no publicly available dedicated security policy or incident response information, which could be improved to enhance transparency and trust. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website demonstrates a high level of professionalism, technical maturity, and compliance with privacy regulations. The absence of WHOIS data reduces transparency but does not significantly detract from the site's credibility given the quality of content and business indicators. Strategic recommendations include publishing a security policy, providing incident response contacts, and maintaining vigilance on third-party scripts.

E

ERA a.s.

era.cz

58

ERA a.s. is a globally recognized leader in next-generation surveillance and flight tracking solutions, specializing in multilateration and ADS-B technologies. The company serves a specialized market including air traffic management authorities, military and security agencies, and aviation industry stakeholders. With over 160 installations across 70 countries and 5 continents, ERA holds a strong market position supported by decades of tradition and experience. Their business model focuses on providing mission-critical surveillance systems and related services in a B2B context. Technically, the website demonstrates a mature digital infrastructure using modern web technologies such as HTML5, CSS3, JavaScript, and third-party libraries like Google Tag Manager and Picturefill for responsive images. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. However, there is room for improvement in security headers and accessibility compliance. From a security perspective, ERA's website enforces HTTPS and uses secure form submission methods, with no visible vulnerabilities or exposed sensitive data. The presence of ISO 27001 certification and partnerships with reputable companies like Airbus enhance trust. However, the absence of explicit security headers and incident response information suggests areas for enhancement. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, ERA's website reflects a professional, trustworthy, and well-maintained digital presence consistent with its industry standing. The lack of public WHOIS data due to privacy protection is justified given the company's international operations. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving accessibility to further strengthen the security posture and user trust.

P

Pixel Design s.r.o.

pixeldesign.cz

43

Pixel Design s.r.o. is a Czech-based creative web and graphic design studio specializing in custom website development, e-commerce solutions, internet marketing, and graphic design services. The company targets businesses and individuals primarily in the Pardubice, Hradec Králové, and Prague regions. Their website demonstrates a professional and modern digital presence with comprehensive service offerings and client references. Technically, the site uses modern web technologies including Google reCAPTCHA v3, Microsoft Clarity, and Google Tag Manager, and appears to be built on Fork CMS. Security posture is good with HTTPS enforced and spam protection on forms, though security headers are not evident and could be improved. Privacy compliance is strong with a clear cookie consent mechanism and a detailed privacy policy in Czech. The absence of WHOIS data limits domain registration trust assessment, but the business presence and content quality support legitimacy. Overall, the website is well-designed, user-friendly, and compliant with privacy regulations, making it a trustworthy digital asset for the company.

The website jasknihy.cz is currently a parked domain landing page primarily serving advertisements and offering the domain for sale. There is no active business content or services presented, and no contact or company information is available. The technical infrastructure relies on standard HTML and JavaScript with multiple third-party ad and tracking scripts, including Google Adsense and Youseasky. The site lacks modern security practices such as HTTPS enforcement and security headers, and there is no visible privacy or cookie consent mechanism. WHOIS data indicates the domain is newly created with a suspicious future creation date and uses parking name servers, suggesting it is not actively used by a legitimate business. Overall, the site has a low trustworthiness and business credibility score.

N

Nakladatelství Portál

portal.cz

57

Nakladatelství Portál is a Czech publishing house website offering content related to books and magazines. The website presents a professional design with a focus on publishing services, targeting a general Czech-speaking audience. The technical infrastructure includes modern frontend technologies such as Bootstrap 4 and Google Tag Manager for analytics and cookie consent management. However, the absence of WHOIS data and registrant information raises concerns about domain legitimacy and transparency. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and explicit privacy or terms of service documentation. Overall, the website is functional and safe but would benefit from enhanced transparency and security practices.

M

MEDIATE s.r.o.

cajeapotheke.cz

40

MEDIATE s.r.o. is a Czech family-owned company founded in 1996 specializing in the manufacture and supply of herbal teas, syrups, and dietary supplements primarily for pharmacies and healthy nutrition stores. The company maintains a strong market position in the Czech Republic and exports products internationally through exclusive partners. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics, hosted likely by WEDOS, a Czech provider. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though explicit security policies and incident response contacts are not found. The domain is very recently registered, which is a minor discrepancy given the company's long history but does not indicate illegitimacy. Overall, the site is trustworthy and well-maintained.

J

JIP Východočeská a.s.

jip-potraviny.cz

54

JIP Východočeská a.s. operates a comprehensive food supply business serving both gastronomy professionals and the general public across the Czech Republic. The company maintains a strong nationwide presence with wholesale and retail outlets, supported by its own distribution network. Their website reflects a professional and well-branded digital presence, offering clear navigation and relevant content tailored to their target audiences including B2B partners and retail customers. The business model focuses on wholesale supply, retail sales, and customer loyalty programs, positioning JIP as a key player in the Czech food retail and hospitality sectors. Technically, the website is built on WordPress with modern SEO practices via the Yoast plugin. It demonstrates good mobile optimization and accessibility, though performance is moderate. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks some advanced security headers and explicit incident response information. The absence of WHOIS data limits full trust verification, but the site’s content and business information appear legitimate and consistent. Security-wise, the site shows good baseline practices but could improve by adding security headers and publishing a vulnerability disclosure policy. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Overall, the site is trustworthy and professional, though domain registration transparency should be verified to enhance legitimacy. Strategically, JIP should focus on enhancing security transparency and verifying domain registration details to strengthen trust. Continued investment in digital maturity and compliance will support their market position and customer confidence.

A

Alpiro s.r.o.

alpiro.cz

57

Alpiro s.r.o. is a Czech-based company specializing in the sale and issuance of SSL certificates for web servers, offering a broad portfolio including standard, EV, multidomain, wildcard, code-signing, document-signing, and S/MIME certificates. The company targets web administrators and businesses seeking reliable encryption solutions, positioning itself as a trusted local provider with competitive pricing and a strong emphasis on customer satisfaction, including a 30-day money-back guarantee. The website is professionally designed, content-rich, and primarily in Czech, reflecting a focused regional market approach. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript, and jQuery 1.8.0, with Google Analytics integrated for visitor tracking. While the site is accessible and moderately optimized for performance and mobile use, some technical improvements are recommended such as updating JavaScript libraries and implementing security headers to enhance security posture. The absence of a cookie consent mechanism suggests partial GDPR compliance. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers and up-to-date libraries, which could be improved. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable or privacy protected, but the website provides clear company registration details, physical address, and contact information, supporting legitimacy. No WAF or blocking mechanisms were detected, allowing full content access. Overall, Alpiro.cz presents a trustworthy and professional online presence for SSL certificate services with room for technical and privacy compliance enhancements. Strategic recommendations include implementing cookie consent, upgrading libraries, adding security headers, and publishing security policies to strengthen trust and compliance.

Apartmány Šumava is a small hospitality business offering family apartments for rent in the Šumava region of the Czech Republic, specifically in the village of Borová Lada. The website provides detailed information about accommodation options, local attractions, and contact details, targeting tourists and families seeking a quiet and nature-oriented stay. The business appears to be operated by Freetime Europe s.r.o. and FT Sun s.r.o., with a local focus and modest market presence. Technically, the website is built with basic HTML, CSS, and JavaScript, without modern CMS or frameworks. It uses Google Analytics for visitor tracking but lacks privacy and cookie policies, which raises compliance concerns. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. A suspicious external script from an untrusted GitHub source is embedded, posing a security risk. Security posture is moderate but incomplete. There is no evidence of security headers or advanced protections, and the SSL configuration is unknown. The absence of WHOIS data for the domain is unusual and reduces trustworthiness, although the website content and contact information appear legitimate. No forms or sensitive data collection mechanisms are present, reducing attack surface but also limiting user engagement. Overall, the website is functional and serves its business purpose but requires improvements in security, privacy compliance, and technical modernization to enhance trust and protect visitors. Strategic recommendations include removing suspicious scripts, adding privacy and cookie policies, implementing security headers, and verifying domain registration details to improve legitimacy and compliance.

Z

Zest Brand

zestbrand.cz

55

Zest Brand is a small Czech company specializing in web development and advertising services, primarily targeting clients in the Tábor region. The website is built on WordPress using the Divi theme, indicating a modern and flexible technical infrastructure. The site employs Google Tag Manager and Google Analytics for user tracking and performance monitoring. While the website demonstrates good design quality and user experience, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate but could be improved by implementing security headers and publishing security policies. Overall, the website is functional and professional but would benefit from enhanced privacy and security measures to improve trust and compliance.

P

podmravencistezkou

podmravencistezkou.cz

57

The website podmravencistezkou.cz represents a small hospitality business offering cozy apartment accommodation in the Šumava National Park region of the Czech Republic. It targets tourists and visitors interested in nature, hiking, cycling, and winter sports. The business operates a single apartment located in the mountain village of Srní, providing a quiet and scenic lodging option. The website content is well-focused on describing the accommodation and local attractions, catering to a general audience seeking travel and leisure services. Technically, the website is built on the Webnode CMS platform and leverages Amazon Cloudfront CDN for content delivery. It uses modern web technologies including JavaScript and CSS, and includes a cookie consent mechanism compliant with basic GDPR requirements. Google Tag Manager is integrated for analytics and tracking purposes. The site is mobile-optimized with a good user experience and clear navigation, although accessibility features are basic. From a security perspective, the site uses HTTPS ensuring encrypted communication. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, which could improve protection against common web attacks. There is no visible privacy policy or terms of service, and no contact emails or phone numbers are provided, which limits transparency and trust. The WHOIS data is not publicly available, indicating privacy protection for the domain registration, which is common for small businesses but reduces trust slightly. Overall, the website is functional and safe for general users, with a moderate security posture and basic privacy compliance. Strategic improvements include adding comprehensive privacy and terms policies, enhancing security headers, and providing verified contact information to improve business credibility and user trust.

S

Sdružení historie hasičstva Stachy

muzeumstachy.cz

44

The website www.muzeumstachy.cz represents the Pošumavské hasičské muzeum Stachy, a small regional museum dedicated to the history of firefighting in the Pošumaví region of the Czech Republic. Operated by the Sdružení historie hasičstva Stachy, the site provides information about the museum's exhibitions, including a notable exhibit on fire cause investigation supported by the Jihočeský kraj. The museum targets general visitors interested in cultural heritage and firefighting history. The business model is non-profit and educational, focusing on local community engagement and historical preservation. Technically, the website is built on the Webnode CMS platform and leverages modern web technologies including HTML5, CSS3, JavaScript, and external services such as Facebook SDK and Google Tag Manager. Hosting is provided via Amazon Cloudfront CDN, ensuring moderate performance and good mobile optimization. SEO and accessibility are basic but functional. The site lacks advanced security headers but enforces HTTPS, contributing to a reasonable security posture. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, as well as missing WHOIS domain registration data, reduces overall trust and compliance posture. The lack of contact emails and phone numbers on the homepage limits direct communication channels. The site uses tracking scripts from Google and Facebook, but no explicit consent mechanisms or GDPR compliance indicators are present. Overall, the website is a legitimate cultural institution's online presence with good content quality and technical implementation but requires improvements in privacy compliance, security headers, and transparency of domain registration to enhance trustworthiness and regulatory adherence.

The website kolinec.eu serves as a local informational and archival resource dedicated to the town of Kolinec in the Czech Republic. It provides extensive historical documents, chronicles, geographical data, and cultural content aimed primarily at residents, historians, and visitors interested in the town's heritage. The site does not operate as a commercial business but rather as a community or government-related informational portal. Technically, the website is built using basic HTML, CSS, and JavaScript without modern frameworks or CMS platforms. It lacks mobile optimization and accessibility features, which may limit usability on various devices. The site includes a visitor counter script from navrcholu.cz but no other analytics or tracking technologies. Performance is moderate, with no advanced SEO or meta tags detected. From a security perspective, the site shows weaknesses including no detected HTTPS enforcement or security headers, absence of privacy and cookie policies, and no contact or incident response information. There are no forms or inputs to assess for secure handling. These factors indicate a low security posture and limited compliance with modern privacy regulations such as GDPR. Overall, the website is safe for general audiences and provides valuable cultural and historical content but requires significant improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user experience.

The website charitasusice.cz is currently a parked domain with no active business content or services. It primarily serves as a landing page offering the domain for sale and displays advertisements from third-party ad networks such as Google Adsense and Youseasky. The site lacks any meaningful business information, contact details, or user engagement features. Technically, the site uses basic HTML and JavaScript with content delivery via Amazon Cloudfront CDN. However, it lacks HTTPS and security headers, which are critical for secure web presence. Privacy compliance is minimal, with only a basic privacy policy accessible via a popup and no cookie consent mechanism. Overall, the site demonstrates low digital maturity and poor security posture.

I

Ittjártam.hu Kft.

ittjartam.hu

50

Ittjártam.hu Kft. operates a well-established Hungarian-language platform focused on hospitality reviews, including hotels, restaurants, and attractions. The website offers user-generated content, travel blogs, and recommendations, targeting Hungarian travelers and consumers seeking reliable reviews. The platform maintains a consistent brand presence with active social media channels and a community of engaged reviewers. Technically, the site uses a custom CMS with modern web technologies such as jQuery and WebP images, delivering a good user experience with mobile optimization and clear navigation. Security posture is moderate, with HTTPS implied and cookie consent implemented, but lacks explicit security headers and published security policies. Privacy compliance is good, with a clear privacy policy and GDPR-aligned cookie consent mechanisms. No contact emails or phone numbers are explicitly provided on the homepage, which could be improved for business credibility. Overall, the website is trustworthy, content-rich, and professionally maintained, serving a niche hospitality review market in Hungary.

O

OMNIPOL a.s.

omnipol.cz

10

OMNIPOL a.s. is a well-established Czech industrial group specializing in aerospace and defense manufacturing with a history dating back to 1934. The company integrates several subsidiaries focused on aircraft production, surveillance systems, military communications, and aviation instruments, serving clients in over 60 countries. Their website reflects a professional and modern digital presence with clear branding and comprehensive business information. Technically, the site uses modern JavaScript frameworks and libraries, is mobile-optimized, and includes GDPR-compliant privacy and cookie policies. Security posture is good with HTTPS and cookie consent mechanisms, but lacks explicit security headers and incident response information. The absence of WHOIS data reduces domain trust slightly but does not detract from the overall legitimacy of the business.

A

ACTIVA spol. s r.o.

potrebyprokancelar.cz

10

ACTIVA spol. s r.o. is a well-established Czech retail company specializing in office supplies, school and art materials, hygiene products, and refreshments. Founded in 1992, it operates multiple e-commerce platforms serving both B2B and B2C customers primarily in the Czech Republic and Slovakia. The company has a strong market presence with a broad product portfolio and recognized trust signals such as verified customer reviews and industry awards. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and responsive design, ensuring a good user experience across devices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers and explicit incident response contacts are absent. The lack of publicly available WHOIS data slightly reduces trustworthiness but does not detract from the professional presentation and operational legitimacy of the business.

CEE Digital Coalition operates a professional website promoting the annual CEE Digital Summit, a key regional event focused on digital transformation and policy in Central and Eastern Europe. The site targets policymakers, industry experts, and civil society organizations, providing detailed agenda, speaker information, and registration links. The business is positioned as a regional leader in digital policy dialogue with a small organizational size and a founding date consistent with the domain registration in 2022. Technically, the website uses modern frameworks like Bootstrap and jQuery, hosted on Polish infrastructure, with moderate performance and good mobile optimization. Security posture is adequate but could be improved by enabling DNSSEC and adding security headers. Privacy and cookie policies are missing, representing a compliance gap. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy and security measures.

NeXA, s.r.o. operates as a creative web studio under the brand Nexavision, specializing in custom web development, e-commerce solutions, animated video production, mobile applications, comprehensive web systems, and internet marketing. The company targets businesses and organizations seeking professional digital presence and marketing services, positioning itself as a mature, small-sized local player with a diverse client portfolio. The website reflects a professional design with clear navigation and a consistent brand image, supported by client references and company registration details. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with Google Analytics integrated for user tracking. The site shows moderate performance and good mobile optimization but lacks modern security practices such as HTTPS enforcement and security headers. The use of HTTP for loading jQuery introduces mixed content risks. SEO and accessibility are basic but functional. From a security perspective, the site lacks visible security policies, incident response contacts, and privacy compliance mechanisms such as cookie consent or GDPR disclosures. No forms are present to collect user data, reducing immediate input risks, but the absence of HTTPS and security headers lowers the overall security posture. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website is functional and professional but requires improvements in security, privacy compliance, and technical modernization to enhance trust and protect user data effectively.

V

Voz de América

vozdeamerica.com

66

Voz de América is a prominent Spanish-language news media organization providing comprehensive news coverage, analysis, and multimedia content focused on the United States, Latin America, and global events. The website serves a broad Spanish-speaking audience with a variety of content formats including articles, radio, TV programs, podcasts, and videos. It is positioned as a trusted international news source with strong branding and consistent social media presence. Technically, the site employs a modern technology stack with multiple third-party analytics and marketing tools, and it is optimized for mobile and accessibility. Security posture is good with HTTPS enforced, though some security headers could be improved. Privacy compliance is moderate with a clear privacy policy but lacking explicit cookie consent mechanisms. WHOIS data is missing or unavailable, which is unusual but does not detract significantly from the site's legitimacy given its content and affiliations. Overall, the site is professional, trustworthy, and well-maintained.

I

IndiKit

indikit.net

66

IndiKit is a technology-focused website offering an indicator library service. The site is professionally designed with consistent branding and provides a cookie consent mechanism compliant with GDPR. The technical infrastructure includes modern web technologies such as Google Tag Manager, Cookiebot for consent management, Weglot for translations, and reCAPTCHA for bot protection. However, the absence of WHOIS registration data raises concerns about domain legitimacy or recent registration status. Security posture is generally good with HTTPS and consent management but lacks explicit security policies and headers. Contact information and business credentials are not publicly available, limiting business credibility assessment. Overall, the site is functional and moderately secure but would benefit from enhanced transparency and security documentation.

Emersion Software is a Czech Republic based technology company specializing in web development, proprietary CMS solutions, and web application hosting and support. With over 20 years of experience, the company positions itself as a trusted innovator delivering high-quality, customized web projects to business clients. Their website reflects a professional and modern digital presence with clear service offerings and client references. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Tiny Slider, and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit incident response or security policy is published. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high based on website content and social proof. Recommendations include improving security headers, publishing security policies, and adding more direct contact options.

D

Digital Sparks B.V.

flinch77.com

66

Digital Sparks B.V. is a specialized Webflow development and design agency that has completed over 250 projects, serving a global clientele including notable brands such as Walmart, Tommy Hilfiger, and Michael Kors. The company positions itself as a top 10 certified Webflow partner worldwide, offering comprehensive services including complete website builds, custom development, and growth optimization. Their business model focuses on delivering scalable, high-performance websites tailored to maximize brand visibility and engagement. Technically, the website is built on the Webflow platform, leveraging modern JavaScript libraries and SVG graphics for a visually appealing and responsive user experience. The site is hosted on Webflow's infrastructure and integrates Google Tag Manager for analytics. Performance and mobile optimization are excellent, with good SEO and accessibility practices observed. However, explicit security headers are not detected, and no vulnerability disclosure or security policy pages are present. From a security perspective, the site uses HTTPS and does not expose sensitive data. The absence of WHOIS registration data raises some concerns about domain legitimacy, although the professional presentation and client testimonials support credibility. Privacy and cookie policies are not found, indicating potential compliance gaps with GDPR and other privacy regulations. Overall, the website demonstrates strong business credibility and technical maturity but would benefit from enhanced transparency in privacy, security policies, and domain registration information to improve trust and compliance posture.

Q

QC Group

qcgroup.cz

54

QC Group is a Czech-based company specializing in ISO standard implementation and training services aimed at helping businesses improve and develop their operations. The website is built on WordPress using the Divi theme, indicating a modern and maintainable technical infrastructure. The site employs standard security measures such as HTTPS, Google reCAPTCHA, and Cookiebot for cookie consent, reflecting a moderate security posture. However, the absence of explicit privacy policies, terms of service, and contact information reduces privacy compliance and business transparency. Overall, the website is professional and targeted at business clients seeking ISO consulting services in the Czech Republic.

W

World Federation of Insurance Intermediaries (WFII)

wfii.org

59

The World Federation of Insurance Intermediaries (WFII) is a non-profit international federation representing insurance agents and brokers globally. Founded in 1999 and legally established under Belgian law, WFII acts as a unified voice for over 500,000 intermediaries across more than 80 countries. The organization is recognized by major international bodies such as the OECD, FATF, IAIS, WTO, and the UN, highlighting its authoritative role in international public affairs related to insurance intermediaries. The website provides clear information about WFII's mission, structure, and key issues, targeting insurance professionals and national associations worldwide. Technically, the website is built on the Wix platform, leveraging Wix Thunderbolt and associated UI libraries, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and some JavaScript security hardening, but lacks some security headers and cookie consent mechanisms. Privacy compliance is basic, with a privacy policy present but no explicit GDPR consent tools. Contact information and incident response details are not prominently available, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and serves its business purpose effectively, though there is room for improvement in security and privacy transparency.

The website at cernaai.cz/lander is currently a minimal placeholder or parking page with no substantive content, business information, or user engagement features. The domain WHOIS data is suspicious due to a creation date set in the future (August 2025), which undermines trust and legitimacy. The site loads external scripts related to Google Adsense and parking-lander assets but lacks any privacy, cookie, or terms of service policies. No contact information or social media links are present, and no forms or data collection mechanisms exist. Technically, the site uses basic JavaScript but lacks modern frameworks or CMS platforms. Security posture is weak with no visible security headers or SSL details. Overall, the site appears inactive or not yet launched for business purposes.

B

Blueprint

blf.cz

58

Business Leaders Forum (BLF) is a well-established Czech platform dedicated to fostering sustainable and resilient business leadership. Founded in 1999, it serves as a national hub for companies aiming to grow responsibly by sharing expertise and advancing sustainability practices. The website highlights BLF's role in supporting ESG strategies, managing sustainable projects, and providing educational events and networking opportunities. The organization positions itself as a pioneer in the Czech market with over 30 years of experience and a strong membership base. Technically, the website is built on WordPress with modern optimizations including WP Rocket for performance, Alpine.js for interactivity, and GDPR-compliant cookie management via Complianz. Hosting is provided by cesky-hosting.eu, a Czech hosting provider, ensuring local infrastructure. The site is mobile-optimized, fast-loading, and SEO-friendly with comprehensive metadata and structured data. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, BLF presents a professional, trustworthy, and compliant online presence with strong business credibility in the sustainability sector. The domain registration data corroborates the legitimacy and longevity of the organization. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and maintaining regular security audits to uphold trust and compliance.

G

GE Aviation Czech s.r.o.

geaviationturboprop.com

67

GE Aviation Czech s.r.o. operates as a specialized division of GE Aviation focusing on the design, development, manufacturing, and servicing of turboprop engines, specifically the GE H-Series. The website serves aerospace industry professionals, customers, and partners, providing detailed product information, customer support, career opportunities, and news updates. The company is positioned as a medium-sized enterprise within the transportation sector, headquartered in the Czech Republic and founded in 2016 as part of the larger GE Aviation group. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and reCAPTCHA for security and analytics purposes. The site is hosted via Websupport.cz and demonstrates good mobile optimization and SEO practices. However, no major CMS or frameworks are explicitly detected, suggesting a custom or proprietary platform. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to mitigate bot activity. A cookie consent mechanism is implemented, reflecting GDPR compliance. However, the absence of explicit security headers and a published security policy indicates room for improvement in security posture. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the business's credibility and market position. Strategic enhancements in security policies and technical headers would further strengthen its security and compliance standing.

E

ERA a.s.

era.aero

62

ERA a.s. is a specialized technology company focused on next-generation surveillance and flight tracking solutions, including multilateration and ADS-B technologies. The company serves both civil air traffic management and military sectors, positioning itself as a global leader with over 160 installations in more than 70 countries. ERA operates under the parent company OMNIPOL a.s. and maintains partnerships with major industry players such as Airbus. The website reflects a mature business with comprehensive service offerings and a strong market presence in the aviation and defense technology sectors. Technically, the website employs modern web technologies, including responsive design and asynchronous script loading, ensuring good user experience and accessibility across devices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. The WHOIS data is incomplete and malformed, limiting domain trust analysis, but the overall business credibility and content quality support legitimacy. Strategic recommendations include enhancing security headers, publishing explicit incident response contacts, and improving WHOIS transparency to strengthen trust further.

A

ACTIVA spol. s r.o.

activa.sk

56

ACTIVA spol. s r.o. is a well-established Slovakian company founded in 1992, specializing in the supply of office, school, and art supplies. It operates multiple e-commerce platforms targeting both business and consumer markets, offering a broad product range with a significant market presence in Slovakia. The website is professionally designed, mobile-optimized, and provides comprehensive product catalogs and customer services. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and Bing Ads for marketing and analytics, with good performance and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The domain registration data aligns well with the business claims, supporting high legitimacy. Overall, the site demonstrates a mature digital infrastructure and trustworthy business operations.

B

Budapest Festival Orchestra

bfz.hu

67

The Budapest Festival Orchestra is a well-established, internationally recognized classical music organization based in Hungary. The website reflects a professional and comprehensive digital presence, offering detailed information about concerts, tours, educational programs, and fundraising initiatives. The organization targets classical music enthusiasts and supporters, providing multiple channels for engagement including ticket sales, newsletters, and social media. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, and Facebook Pixel for analytics and marketing, with a good level of mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements.

M

MITSUBISHI ELECTRIC AUTOMOTIVE CZECH s.r.o.

mitsubishielectric.cz

55

MITSUBISHI ELECTRIC AUTOMOTIVE CZECH s.r.o. is a Czech subsidiary of the global Mitsubishi Electric Corporation, specializing in manufacturing advanced automotive electrical components such as integrated starter generators. The company emphasizes innovation and quality, employing approximately 900 professionals and operating modern production facilities. The website targets industry professionals, potential employees, and business partners, providing corporate information, news, career opportunities, and compliance details. Technically, the website is built with modern web technologies including JavaScript frameworks and Google Tag Manager for analytics. It is mobile-optimized, accessible, and SEO-friendly, with a clear navigation structure. The site uses HTTPS and implements cookie consent mechanisms, reflecting a good level of digital maturity. From a security perspective, the site enforces HTTPS and cookie consent but lacks explicit security headers and publicly available incident response or vulnerability disclosure information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces domain trustworthiness, though the website content and branding are consistent with a legitimate corporate entity. Overall, the website presents a professional and trustworthy front for the company, with recommendations to enhance security headers, publish incident response contacts, and improve domain registration transparency to strengthen trust and compliance.

S

Sony Pictures Classics

sonyclassics.com

58

Sony Pictures Classics is a well-established autonomous division of Sony Pictures Entertainment specializing in the distribution, production, and acquisition of independent films globally. Founded in 1992, it holds a significant market position with numerous Academy Award nominations and wins, reflecting its prestige in the film industry. The website effectively communicates the company's offerings and brand identity, targeting film enthusiasts and industry stakeholders. Technically, the site employs modern JavaScript libraries, monitoring tools like New Relic, and Google Tag Manager, ensuring good performance and user experience across devices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms; however, the absence of explicit security policies and incident response contacts suggests room for improvement. The lack of WHOIS transparency is a notable concern but is somewhat mitigated by strong branding and official domain usage. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving its audience effectively.

Crunchyroll is a prominent media streaming platform specializing in anime and manga content, targeting a global audience of anime enthusiasts. The website demonstrates a professional design with consistent branding and a clear focus on subscription-based streaming services. The technical infrastructure leverages modern analytics and marketing tools such as Segment, Braze, Firebase, and Google Tag Manager, indicating a mature digital presence. The site is served over HTTPS with asynchronous loading of scripts, contributing to good performance and user experience. However, the absence of visible privacy policies and terms of service in the provided HTML snapshot suggests room for improvement in transparency and compliance. Security posture is generally strong with HTTPS enforced, but the lack of security headers and explicit contact information for security incidents or data protection inquiries are notable gaps. Overall, the website is safe for general audiences with no adult content detected, and the domain appears legitimate despite missing WHOIS data, likely due to privacy protection or registrar policies.

S

Sony Pictures Digital Productions Inc.

abigboldbeautifuljourney.movie

59

The website 'abigboldbeautifuljourney.movie' serves as the official promotional platform for the Sony Pictures film 'A Big Bold Beautiful Journey'. It provides comprehensive content including movie synopsis, trailers, ticket purchasing options, and sweepstakes, targeting general moviegoers. The site is well-branded with consistent Sony Pictures identity and links to official Sony domains for privacy and terms. Technically, the site employs modern web technologies such as Bootstrap, jQuery, Google Tag Manager, and New Relic for monitoring, hosted on AWS Cloudfront CDN, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be verified further. The domain WHOIS data is privacy protected, which is typical for entertainment domains, and no suspicious patterns were detected. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.