Security Directory

T

Téma 21

tema21.cz

61

Téma 21 is a newly established (2024) Czech media platform specializing in journalism, interviews, podcasts, and articles. It targets Czech and Slovak audiences interested in in-depth media analysis and current affairs. The website demonstrates a professional and modern design, leveraging technologies such as Tailwind CSS and Font Awesome, hosted via Websupport. GDPR compliance is well implemented with a clear cookie consent mechanism and privacy policy. However, explicit contact information and terms of service are not prominently available, which could be improved for better transparency. Security posture is good with HTTPS and some security best practices, though additional security headers and incident response details are recommended. Overall, the platform presents high-quality content with excellent user experience and trustworthy branding.

P

Podnik podporující zdraví

podnikpodporujicizdravi.cz

62

The website 'Podnik podporující zdraví' represents a Czech government-recognized program focused on promoting health in workplaces through an annual competition and certification system. Established since 2005, it targets Czech legal entities and organizations committed to employee health and well-being. The site provides information about the competition, criteria, awarded companies, and related conferences. Technically, the website uses modern JavaScript libraries such as Google Analytics, Google Tag Manager, Flickity for carousels, and lazy loading for images, indicating a moderate level of digital maturity. The site is mobile optimized with good navigation and professional design. Security posture is adequate with HTTPS usage, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data limits domain trust verification, but the official nature of the content and references to government bodies support its legitimacy. Overall, the website is a credible resource for workplace health promotion in the Czech Republic, with recommendations to enhance privacy compliance and security transparency.

M

ÚVOD | Máme to na talíří a není nám to jedno

mametonataliri.cz

52

The website www.mametonataliri.cz is a Czech language site focused on providing information about school catering systems. It appears to be a small-scale business or informational site hosted on the Wix platform, leveraging Wix's Thunderbolt framework and standard JavaScript polyfills. The site content is accessible and does not present any WAF or security challenge barriers. However, the absence of WHOIS data and registrant information raises concerns about domain registration transparency. The site lacks privacy, cookie, and terms of service policies, and no contact information is provided, which impacts trust and compliance. Technically, the site uses modern web technologies but lacks advanced security headers and analytics integrations. Overall, the security posture is basic, with room for improvement in privacy compliance and business credibility.

B

Blueboard.cz Webhosting s.r.o.

blueboard.cz

61

Blueboard.cz Webhosting s.r.o. is a Czech Republic-based technology company specializing in domain registration, web hosting, server rental, and bulk email marketing services. With over 20 years of experience and a solid customer base including notable clients like Seznam.cz and Ford, the company positions itself as a reliable and comprehensible service provider for individuals and businesses seeking digital presence solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the website employs modern JavaScript frameworks such as Alpine.js, integrates Google Tag Manager and Plausible Analytics for tracking, and uses Crisp Chat for customer support. The site is mobile-optimized and performs moderately well, although accessibility features could be improved. Security-wise, HTTPS is enforced, and forms include validation, but the absence of security headers and cookie consent mechanisms indicates room for enhancement in security posture and privacy compliance. The security posture is generally good with no visible vulnerabilities or exposed sensitive data. However, the lack of WHOIS data transparency is a concern, as it limits trust verification. The website does not publish explicit security policies or incident response contacts, which could be improved to strengthen security culture and compliance. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy and security disclosures. Strategically, Blueboard should focus on improving transparency by resolving WHOIS data issues, implementing comprehensive cookie consent, publishing security policies, and adopting security headers. These steps will enhance user trust, compliance with GDPR, and overall security resilience.

E

eSports.cz, s.r.o.

hcvl.cz

45

HC VERVA Litvínov is a Czech ice hockey club with an official website providing comprehensive information about the team, including news, match schedules, ticket sales, and multimedia content. The site targets hockey fans and the local community, offering a professional and consistent brand experience supported by official partners and sponsors. The business operates under eSports.cz, s.r.o., indicating a structured media and sports engagement model. Technically, the website uses modern JavaScript libraries such as Swiper.js and BaguetteBox.js, with a custom CMS likely in place. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism with granular controls, but lacks explicit security headers and detailed security policies. No critical vulnerabilities or suspicious WHOIS inconsistencies were found, and the domain registration aligns well with the business identity. Overall, the site is moderately secure and compliant with GDPR, but could improve in security best practices and transparency.

PPP-T S.A. operates as a modern business and innovation development space primarily serving the Płock subregion in Poland. The company offers approximately 60 hectares of connected investment areas equipped with technical infrastructure, office spaces, conference rooms, and acceleration programs to support entrepreneurship. The website reflects a professional and regionally focused business entity linked to the ORLEN group, a major energy sector player. Technically, the website is built on Adobe Experience Manager, employs HTTPS, and integrates a comprehensive cookie consent mechanism via Cookiebot, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and consent management, but lacks some advanced security headers and explicit incident response or security policy disclosures. WHOIS data for the domain pppt.orlen.pl is unavailable from the Polish registry, which slightly reduces trustworthiness, but the website content and branding strongly indicate legitimacy. Overall, the site is well-structured, accessible, and compliant with GDPR requirements, targeting business clients and entrepreneurs in the region.

Solino is a large Polish company specializing in the production of salt brine and related natural resource products, operating under the ORLEN group umbrella. The website reflects a professional corporate presence with a focus on business customers and partners in the energy and industrial sectors. The site uses Adobe Experience Manager CMS and integrates modern technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers and explicit security policies are absent. Overall, the site is well-structured, mobile-optimized, and compliant with GDPR requirements, but lacks visible direct contact information and terms of service. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by the site's affiliation with ORLEN.

Fundacja ORLEN is a Polish non-profit foundation affiliated with the ORLEN Group, operating since 2001. It focuses on social impact through grant and scholarship programs, safety initiatives, and employee volunteering. The website is professionally designed, primarily targeting Polish-speaking audiences interested in corporate social responsibility and community support. Technically, the site is built on Adobe Experience Manager CMS and integrates modern tools such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism, although some security headers could be improved. WHOIS data is not publicly available, which is typical for .pl domains, but the website content and corporate affiliation support its legitimacy. Overall, the site demonstrates good digital maturity and compliance with GDPR requirements.

ORLEN Projekt is a well-established engineering company operating within the energy sector in Poland, providing comprehensive project documentation and EPC engineering services. The website reflects a mature digital presence with a professional design, clear navigation, and compliance with GDPR through detailed privacy and cookie policies. Technically, the site leverages Adobe Experience Manager CMS and integrates modern tools such as Google Tag Manager and Cookiebot for analytics and consent management. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be explicitly added for enhanced protection. The absence of public WHOIS data is typical for corporate domains and does not detract from the legitimacy of the site. Overall, the website demonstrates a strong business credibility and technical maturity suitable for its enterprise-level operations.

ORLEN Ochrona is a Polish security service provider affiliated with the PKN ORLEN group, focusing on comprehensive physical and digital protection services for strategic national units, individual clients, and institutions. The website presents a professional image with a clear business focus on security solutions including physical protection, transport of valuables, security systems, and specialist training. The company leverages Adobe Experience Manager for content management and employs Cookiebot for GDPR-compliant cookie consent management. The site is well-structured, mobile-optimized, and provides clear navigation to various service offerings and corporate information. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers are not visible in the HTML source. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data for the subdomain is unavailable, which is typical for subdomains under the .pl registry, but the domain's affiliation with the reputable PKN ORLEN group supports its legitimacy. Overall, the website demonstrates good technical maturity, privacy compliance, and business credibility.

ORLEN Eko is a Polish company specializing in ecological and safe waste management, occupational health and safety (BHP), and fire safety consulting. It operates as part of the ORLEN Group, a major energy sector player in Poland. The website presents a professional image with consistent branding and offers detailed information about its services, targeting businesses and individuals concerned with environmental and safety standards. The company provides a range of services including process safety analyses, industrial cleaning, environmental monitoring, and equipment servicing. Technically, the website is built on Adobe Experience Manager CMS and integrates modern technologies such as Google Tag Manager, Google Analytics, and Cookiebot for consent management and analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and cookie consent mechanisms, but explicit security headers are not clearly visible in the provided data. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy and cookie policy in Polish, and GDPR compliance is evident. Overall, the website is trustworthy and professionally maintained, with no signs of blocking or WAF interference.

ORLEN Centrum Serwisowe is a well-established service provider specializing in the maintenance and repair of fuel stations, with nearly 80 years of experience. The website reflects a professional business presence aligned with the ORLEN group, a major energy company in Poland. The site targets business customers and service clients in the energy sector, offering specialized services for fuel station upkeep. Technically, the website is built on Adobe Experience Manager CMS, employs modern JavaScript libraries, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and accessible, with good SEO practices. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism, though it lacks explicit security headers and published incident response contacts. Overall, the website demonstrates a mature digital infrastructure with strong privacy compliance but could improve transparency in security policies and incident handling.

ORLEN Aviation is a well-established Polish company specializing in the supply and storage of aviation fuels at Polish airports, operating for over 25 years as part of the international ORLEN Group. The company targets aviation businesses and airlines, offering a range of services including fuel supply, logistics, and training. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on Adobe Experience Manager, uses modern JavaScript libraries, and integrates Google Tag Manager and Cookiebot for analytics and compliance. Security posture is strong with HTTPS, cookie consent, and inferred security headers, although explicit security policies and incident response contacts are not published. Privacy compliance is robust, with a comprehensive privacy policy and cookie consent mechanism. The lack of WHOIS data for the domain reduces trust slightly but does not outweigh the strong business and technical indicators of legitimacy.

ORLEN Asfalt is a business entity focused on developing modern and environmentally friendly asphalt technologies aimed at improving road durability and safety. It operates under the ORLEN group, a major energy and petrochemical company in Poland, positioning itself as a key player in the energy and transportation sectors. The website targets businesses and stakeholders involved in road construction and infrastructure development. The digital presence is professional, with consistent branding and clear business messaging. Technically, the website is built on Adobe Experience Manager CMS, utilizing modern web technologies including Google Tag Manager and Cookiebot for analytics and privacy compliance. The site demonstrates good mobile optimization and SEO practices, though some accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism. However, explicit HTTP security headers and published security policies or incident response contacts are not evident. No vulnerabilities or suspicious content were detected, and the domain WHOIS data is privacy protected, which is typical for corporate entities in Poland. Overall, the website presents a low risk profile with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen trust and compliance.

N

NetArt Group

netart.pl

64

nazwa.pl is a well-established Polish cloud services and hosting provider operating since 1997 as part of the global NetArt Group. The company offers a comprehensive portfolio including cloud hosting, domain registration, SSL certificates, VPS, email marketing, SaaS applications, and CDN services. It positions itself as a leader in the Polish market with a strong emphasis on modern, secure, and scalable cloud solutions. The website reflects a professional and trustworthy brand with ISO/IEC 27001:2022 certification and 24/7 technical support. Technically, the site uses modern JavaScript libraries, consent management tools, and a TYPO3 CMS platform, ensuring good performance and mobile responsiveness. Security posture is strong with HTTPS, 2FA for email, and WAF protections, although explicit security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, nazwa.pl demonstrates a mature digital presence with robust business credibility and security awareness.

Qondor is a well-established SaaS platform specializing in meetings and events management, primarily serving the MICE industry. Founded in 2006, it offers a comprehensive suite of tools including project management, budgeting, invoicing, attendee management, and sustainability reporting. The company positions itself as a trusted partner for event professionals, supported by strong customer testimonials and ISO 27001 certification, underscoring its commitment to data security and compliance. Technically, the website is built on the HubSpot CMS platform, leveraging modern JavaScript libraries and Google Analytics 4 for data insights. The site is fast, mobile-optimized, and accessible, with clear navigation and professional design. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. From a security perspective, the site enforces HTTPS, employs domain transfer protections, and holds ISO 27001 certification, indicating mature security practices. However, some standard security headers are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found. The WHOIS data aligns well with the business claims, showing a long-standing domain without privacy protection, enhancing trust. Overall, Qondor presents a low-risk profile with strong business credibility, technical maturity, and privacy compliance. Strategic recommendations include enhancing security headers, publishing an incident response contact, and adding a vulnerability disclosure policy to further strengthen security posture.

E

eealibrary.org

eealibrary.org

60

The website eealibrary.org currently presents no accessible content beyond a loading spinner, indicating that the site is either under development or protected by a web application firewall or security mechanism that blocks content delivery. The domain is registered since 2014 with easyDNS Technologies Inc., showing a stable registration history but no publicly available registrant details. There is no metadata, privacy, cookie, or terms of service information available, and no contact or social media links are present. Technically, the site uses Angular framework components and standard web technologies but lacks performance and SEO optimizations. Security posture is weak with no HTTPS enforcement or security headers detected, and DNSSEC is not enabled. Overall, the site is not currently providing meaningful business or user information and lacks compliance and trust indicators.

W

www.koktejl.cz

koktejl.cz

56

Koktejl.cz is a Czech travel and lifestyle media website offering travel guides, tips, and inspirational content targeting a general audience interested in travel experiences, relaxation, and adventure. The site is positioned as a regional content publisher with a professional and consistent brand presence. Technically, the website employs modern web technologies including Tailwind CSS, HTMX, and integrates popular marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and some best practices but lacks explicit security headers and formal privacy or cookie policies. The absence of WHOIS data limits domain trust assessment, but the website content and technical setup suggest legitimacy. Overall, Koktejl.cz is a well-maintained media site with moderate risk and room for improvement in privacy compliance and security transparency.

W

www.iglanc.cz

iglanc.cz

60

iGlanc.cz is a Czech lifestyle online magazine targeting modern, intelligent, and discerning women interested in fashion, beauty, travel, living, and societal topics. The website offers rich multimedia content including articles, videos, and podcasts, positioning itself as a relevant media outlet in the Czech market. Technically, the site employs modern web technologies such as HTMX, Tailwind CSS, and integrates multiple analytics and advertising tools including Google Tag Manager, Facebook Pixel, and Gemius. The site is well optimized for mobile and SEO, providing a good user experience. Security posture is strong with HTTPS enforced and appropriate security headers, though some improvements in privacy transparency and contact information are recommended. WHOIS data is not publicly available, likely due to privacy protection, which slightly reduces trust but is common for media websites. Overall, the site is professional, content-rich, and trustworthy with moderate risk due to limited public registrant information.

W

www.poznatsvet.cz

poznatsvet.cz

58

Poznatsvět.cz is a Czech infotainment and media website focused on delivering content related to science, culture, history, and travel. The site targets a general audience interested in educational and entertaining articles. It operates a content publishing business model supported by advertising and newsletter subscriptions. The website demonstrates a consistent brand presence with good content quality and user experience. Technically, it employs modern web technologies including JavaScript frameworks, HTMX for dynamic content, and integrates advertising and tracking tools such as Google Tag Manager and Facebook Pixel. Hosting appears to be via a CDN associated with VLM. Security posture is adequate with HTTPS enabled, but lacks some recommended security headers. Privacy compliance is partial, with cookie consent mechanisms in place but no explicit privacy policy page detected. WHOIS data is unavailable, likely due to privacy protection, which is common for media sites. Overall, the site is professional, safe, and moderately trustworthy.

W

www.fitzivot.cz

fitzivot.cz

58

FitŽivot.cz is a Czech-language health and lifestyle media website offering reliable advice and tips to help users lead healthier and more satisfying lives. The site targets a general audience interested in topics such as weight loss, mental well-being, and exercise, positioning itself as a trusted source for wellness content in the Czech Republic. The business model appears to be content-driven with revenue generated primarily through advertising and marketing partnerships. Technically, the website employs modern web technologies including JavaScript frameworks, Tailwind CSS, and integrates multiple analytics and advertising tools such as Google Tag Manager, Facebook Pixel, and Gemius. Consent management is implemented via Didomi, indicating awareness of privacy regulations. Security posture is strong with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. The absence of WHOIS data and explicit privacy policy pages slightly detracts from overall trustworthiness. Overall, the site is professional, well-branded, and safe for general audiences.

W

www.kondice.cz

kondice.cz

58

Kondice.cz is a Czech media portal specializing in expert articles on healthy lifestyle, relationships, and psychology, supplemented by videos and podcasts. The website targets a general audience interested in health and wellness topics within the Czech Republic. It operates as a content publishing platform with a moderate market presence in the regional media sector. Technically, the site employs modern web technologies including HTMX, Tailwind CSS, and integrates multiple tracking and advertising services such as Google Tag Manager, Facebook Pixel, and Gemius. The site is well-structured, mobile-optimized, and demonstrates good SEO and accessibility practices. Security-wise, the site uses HTTPS and standard security headers, but lacks explicit privacy and cookie policies, as well as clear contact information for security incidents, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the website content and technical setup appear professional and legitimate. Overall, the site scores moderately high in content quality and security posture but needs enhancements in privacy compliance and business transparency.

W

www.nationalgeographic.cz

national-geographic.cz

59

The website www.nationalgeographic.cz is a localized Czech version of the globally recognized National Geographic brand, offering rich content focused on science, nature, history, travel, and photography. It serves a general audience interested in educational and informative media content. The site demonstrates a mature digital presence with modern web technologies, including JavaScript frameworks, analytics, and advertising integrations. While the site uses HTTPS and includes privacy consent mechanisms, it lacks explicit privacy policy and terms of service pages in the provided content, which slightly impacts privacy compliance scores. Security headers are partially implemented but could be improved to enhance protection against common web threats. The absence of WHOIS data suggests privacy protection for the domain registration, which is typical for media websites and does not detract from its legitimacy. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

W

www.dumazahrada.cz

dumazahrada.cz

60

Dumazahrada.cz is a Czech media website focused on providing tips, tutorials, and inspiration for home, apartment, and garden living. The site targets homeowners and garden enthusiasts seeking practical advice and lifestyle content. It operates primarily as a content publishing platform monetized through advertising and newsletter subscriptions. Technically, the website employs modern web technologies including JavaScript frameworks, Tailwind CSS, and integrates multiple tracking and advertising services such as Google Tag Manager, Facebook Pixel, and Seznam SSP. The site is well-optimized for SEO and mobile devices, offering a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and consent management tools but lacks explicit security policies and some security headers. WHOIS data is not publicly available due to privacy protection, which is common for domains registered under CZ NIC. Overall, the site appears legitimate and professionally maintained with moderate security and privacy compliance.

W

Webfarm s.r.o.

cars.cz

56

Cars.cz is a well-established Czech online automotive marketplace operated by Webfarm s.r.o., offering a broad range of new and used vehicles, car dealerships, spare parts, financing, insurance, and automotive reviews. The platform targets car buyers and sellers primarily within the Czech Republic, serving both private individuals and businesses. The website demonstrates a mature digital infrastructure with multiple third-party integrations for analytics, advertising, and consent management, reflecting a moderate to advanced digital maturity level. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and accessibility compliance. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though WHOIS data is not publicly available due to CZ.NIC policies. Strategic recommendations include enhancing security headers, improving accessibility, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

W

www.ireceptar.cz

ireceptar.cz

50

iReceptář.cz is a Czech lifestyle and recipe website offering a broad range of content including gardening tips, cooking recipes, home living advice, DIY projects, animal care, horoscopes, and podcasts. The site targets a general Czech-speaking audience interested in everyday practical advice and entertainment. It operates primarily as a content publishing platform monetized through advertising and partnerships. Technically, the website employs modern web technologies such as Tailwind CSS, HTMX, and integrates multiple third-party analytics and advertising services, including Google Tag Manager, Facebook Pixel, and Gemius, with a consent management platform (Didomi) to comply with privacy regulations. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and consistent branding. Security-wise, the site enforces HTTPS and uses a privacy consent mechanism but lacks explicit security headers and published privacy or terms of service pages, which are areas for improvement. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, though the website's content and social media presence indicate a legitimate media entity. Overall, the site scores well on content quality and business credibility but should enhance privacy transparency and security practices to improve its security posture and compliance.

W

www.kafe.cz

kafe.cz

58

Kafe.cz is a Czech online magazine focused on women's interests including celebrity news, fashion, health, and entertainment. It operates as a popular digital media outlet in the Czech Republic, targeting a female audience with engaging content. The website is professionally designed with good navigation and mobile optimization, leveraging modern web technologies and third-party services for analytics and advertising. However, the absence of WHOIS registration data and lack of explicit privacy policy and contact information present gaps in transparency and trust. Security posture is strong with HTTPS and security headers implemented, and GDPR consent mechanisms are in place. Overall, the site is functional and trustworthy for general audiences but would benefit from improved compliance documentation and clearer business contact details.

P

Page Builder s.r.o.

pobo.space

56

Pobo Page Builder, operated by Page Builder s.r.o., is a specialized SaaS provider offering a drag and drop editor with integrated AI and A/B testing capabilities to enhance product, category, and blog descriptions for e-commerce platforms, primarily Shopify. The company has established a solid market presence with over 1,200 active e-shops and a high user satisfaction rating. Technically, the website employs modern JavaScript frameworks and integrates marketing and analytics tools such as Google Tag Manager and Google Optimize, hosted on VasHosting.cz. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and explicit cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience, with transparent business information and consistent branding.

P

Page Builder s.r.o.

pobo.hu

49

Pobo Page Builder, operated by Page Builder s.r.o., is a technology company specializing in providing a page building tool primarily targeting e-commerce businesses in Hungary and the Czech Republic. The website showcases their services including AI-powered content generation and design tools, supported by customer service and marketing teams. The company positions itself as a niche SaaS provider with a focus on enhancing online shops' page design and functionality. Technically, the website employs modern tracking and chat technologies such as Google Tag Manager, Google Optimize, Freshchat, and Abgar widgets, hosted on VasHosting.cz. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is partial, with privacy and terms documents available as PDFs but no cookie consent mechanism or security incident contact information. Overall, the website is professional but shows some content placeholders indicating incomplete localization or content delivery. The WHOIS data aligns well with the website's business claims, supporting legitimacy. Strategic improvements in security policies, privacy compliance, and content completeness would enhance trust and compliance.

U

Ultimate Store Kit

storekit.pro

28

Ultimate Store Kit is a specialized WooCommerce Elementor addon provider offering a plugin with over 69 widgets designed to enhance WooCommerce websites. The business targets web designers and WooCommerce users seeking to build custom product pages and dynamic checkout experiences. The website is built on WordPress with WooCommerce and Elementor frameworks, reflecting a modern and professional digital infrastructure. SEO optimization is evident with Rank Math integration and structured data usage. Security posture is moderate with HTTPS enabled but lacks advanced security headers and privacy compliance features. The absence of contact information and privacy policies suggests room for improvement in transparency and compliance. Overall, the domain appears legitimate though WHOIS data is unavailable due to TLD restrictions and privacy protection, which is common for small plugin businesses.

W

Waldhart Software

onlineshop.ws

45

Waldhart Software operates the onlineshop.ws domain, providing specialized e-commerce solutions primarily for ski schools, snow sports schools, and related outdoor sports businesses. The website serves as a reference portal showcasing over 300 live client online shops, indicating a focused B2B business model targeting the winter and summer sports education sector. The company appears to be a small-sized entity founded in 2018, with a consistent brand presence and a clear market niche in Austria and neighboring countries. Technically, the website leverages modern web technologies including the Quasar Framework and Google Maps API, delivering a responsive and user-friendly experience. Hosting is likely provided by profiwebspace.at, with domain registration managed by InterNetX GmbH. The site uses HTTPS, but lacks DNSSEC and security headers, which are areas for improvement. No analytics or advertising scripts were detected, suggesting a privacy-conscious or minimalistic approach. From a security perspective, the site has a moderate posture with HTTPS enabled but missing important security headers and DNSSEC. There are no visible vulnerabilities or exposed sensitive data in the provided content. However, the absence of privacy and cookie policies, as well as terms of service, indicates compliance gaps with GDPR and general privacy best practices. Overall, the website is professional and trustworthy within its niche but would benefit from enhanced privacy compliance and improved security configurations to strengthen user trust and regulatory adherence.

P

Perfectweb

perfectweb.at

48

Perfectweb is a small regional web design and advertising agency based in Austria, specializing in web design, CMS, graphic design, marketing, and online shop solutions primarily serving Vienna and the Weinviertel region. The website presents a basic but professional digital presence with clear navigation and references to client projects. Technical infrastructure is modest, relying on standard HTML, CSS, and JavaScript with a cookie consent plugin for GDPR compliance. Security posture is limited with no visible HTTPS confirmation or security headers, and WHOIS data is unavailable, which raises concerns about domain transparency. Overall, the site is functional but would benefit from enhanced security and technical modernization.

M

Muzeum literatury

muzeumliteratury.cz

44

The website www.muzeumliteratury.cz represents the official online presence of the Czech Museum of Literature, a government-funded cultural institution dedicated to preserving and promoting literary heritage. The site offers comprehensive information about exhibitions, events, research services, and educational programs, targeting a broad audience including visitors, researchers, and educators. The content is well-structured, professionally presented, and localized in Czech, reflecting its national cultural focus. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager for analytics and consent management, and New Relic for performance monitoring. The site is served over HTTPS with appropriate security headers, indicating a good security posture. Mobile optimization and SEO practices are adequately implemented, providing a positive user experience across devices. Security-wise, the site demonstrates adherence to best practices such as HTTPS enforcement and cookie consent mechanisms. However, explicit security policies, incident response contacts, and vulnerability disclosure information are not present, representing areas for improvement. The absence of WHOIS data limits domain registration transparency but is consistent with privacy protection often used by government entities. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations such as GDPR. Strategic recommendations include publishing a dedicated security policy, providing incident response contacts, and considering a vulnerability disclosure program to enhance transparency and security readiness.

D

David Kučera

dkgr.cz

45

David Kučera operates as a freelance graphic designer based in the Czech Republic, offering a broad range of design services including logos, corporate graphics, print materials, infographics, web design, and UX tailored to client needs. The business model is primarily freelance with the flexibility to assemble teams of specialists for larger projects. The website presents a professional portfolio with extensive references and partner collaborations, positioning the business as a credible and experienced service provider in the graphic design sector. Technically, the website is built with standard HTML5, CSS3, and JavaScript, utilizing jQuery libraries. Hosting is provided by a Czech hosting company inferred from the nameservers. The site is moderately performant with good mobile optimization and basic accessibility features. SEO is well addressed through meta tags and Open Graph data, although no CMS or advanced frameworks are detected. From a security perspective, the site lacks advanced security headers and does not provide privacy or cookie policies, which are compliance gaps. No forms or data collection mechanisms are present, reducing exposure to input-based vulnerabilities. The domain registration is consistent and transparent, supporting the legitimacy of the business. No WAF or blocking mechanisms are detected, and the content is safe for general audiences. Overall, the website is professional and trustworthy but would benefit from enhanced security practices and privacy compliance measures to improve its security posture and regulatory adherence.

T

tix02 SRL

tix02.be

56

tix02 SRL is a small, professional design and development studio based in Namur, Belgium, specializing in branding, visual communication, website and mobile application development. The website presents a clear business focus targeting local and regional clients seeking digital design and development services. Technically, the site uses modern web technologies including SVG graphics, WOFF2 fonts, and JavaScript, with good mobile optimization and a clean, professional design. However, the site lacks explicit privacy and cookie policies, security headers, and WHOIS transparency due to restricted domain registration data. The security posture is moderate but could be improved with better header configurations and compliance documentation. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security practices to improve compliance and user trust.

S

Solid Affiliate

solidaffiliate.com

57

Solid Affiliate is a specialized WordPress plugin designed to enable WooCommerce store owners to launch and manage affiliate marketing programs efficiently. Positioned as the leading affiliate plugin for WooCommerce, it boasts over 10,000 users and offers features such as affiliate onboarding, flexible commissions, fraud prevention, and one-click payouts. The website reflects a mature business with consistent branding and a professional digital presence. Technically, the site is built on WordPress and WooCommerce, leveraging modern JavaScript libraries and SEO best practices, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enabled and domain registration protections, though improvements are recommended in security headers and explicit privacy compliance documentation. Overall, the site is trustworthy and well-positioned in the e-commerce technology sector.

S

Saw.com

sawsells.com

63

Saw.com operates as a leading premium domain brokerage marketplace, facilitating the buying, selling, and appraisal of domain names. With a domain history dating back to 1995 and a strong market position, Saw.com offers a secure and user-friendly platform supported by expert brokers and multiple payment options. The website demonstrates a high level of professionalism, trustworthiness, and technical maturity, leveraging modern technologies such as SvelteKit and Cloudflare services. While the site is well-optimized for performance and mobile use, it lacks explicit cookie consent mechanisms and published security policies, which are areas for improvement. Overall, Saw.com presents a robust digital presence with strong business credibility and a secure environment for domain transactions.

The website www.letenky-1.cz operates as an online platform for selling cheap flight tickets primarily targeting the Czech market. It offers a fast and unique flight search and booking experience by embedding a third-party booking engine via iframe. The business appears to be a small-sized entity under the legal name AliaWeb, spol. s r.o., with a partnership connection to Agentura Zájezdy, a.s. and other Czech travel portals. The site content is in Czech and focuses on transportation services related to air travel. Technically, the website uses basic JavaScript and jQuery libraries, with external resources loaded over HTTP, indicating a lack of HTTPS enforcement. The site embeds external scripts and stylesheets from multiple domains, including partner and advertising networks. The design and user experience are basic, with moderate SEO and accessibility features. The site lacks modern CMS or frameworks and shows signs of technical debt, such as commented-out analytics code and no visible security headers. From a security perspective, the site lacks HTTPS, security headers, and cookie consent mechanisms, which lowers its security posture. The WHOIS data is unavailable, suggesting privacy protection or unregistered status, which impacts trust. No explicit privacy or incident response policies are found on the site, though a basic privacy policy is linked externally. The site does not expose sensitive data visibly but could improve security by implementing HTTPS and security best practices. Overall, the website presents moderate business credibility but requires significant improvements in security and privacy compliance to enhance trustworthiness and protect user data. Strategic recommendations include implementing HTTPS, adding security headers, establishing cookie consent, and improving WHOIS transparency.

JenProČasopisy.cz is a Czech media subscription platform operated by MAFRA, a.s., offering printed magazine subscriptions targeted at women, men, children, and lifestyle audiences. The website provides a broad catalog of magazine titles, digital edition access, and customer support including SMS ordering. The business model centers on subscription sales with a clear market position in the Czech media sector. Technically, the site employs modern analytics and advertising technologies such as Google Tag Manager, Google Analytics, Gemius, and Maileon Analytics, alongside a consent management platform to comply with GDPR requirements. The site is accessible, mobile-optimized, and well-structured with good navigation and content relevance. Security posture is moderate with HTTPS enforced and consent mechanisms in place, but lacks explicit security headers and published security policies. WHOIS data is unavailable, which impacts domain trust assessment negatively. Overall, the site is professional and trustworthy from a business and user perspective but could improve transparency and security practices.

M

MAFRA, a.s.

mfdnes.cz

59

MF DNES is a major Czech media company offering subscription-based access to daily newspapers and thematic magazines in both digital and print formats. The website provides clear subscription options, loyalty programs, and regional news coverage, targeting a broad audience interested in news and lifestyle content. The business is positioned as one of the largest media outlets in the Czech Republic with a professional editorial team and consistent branding. Technically, the website employs modern tracking and analytics technologies including Google Tag Manager, Google Analytics, Gemius, and a consent management platform (Didomi) to ensure GDPR compliance. The site is well-structured with good mobile optimization and SEO practices, although some security headers are not explicitly detected. The SSL configuration is excellent, and secure login forms with client-side validation are implemented. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and consent management but lacks publicly available security policies or incident response contacts. The absence of WHOIS data is a notable anomaly that reduces domain registration trustworthiness, although the website content and business information strongly indicate legitimacy. No vulnerabilities or adult content were detected, and the site is fully accessible without WAF blocking. Overall, the website is professional, secure, and compliant with privacy regulations, but improvements in domain transparency and security policy publication are recommended to enhance trust and security posture.

B

Blogosvět.cz

blogosvet.cz

58

Blogosvět.cz is a Czech media platform providing an open space for bloggers and authors to freely express their opinions. It hosts a variety of articles covering political, social, and cultural topics, targeting a general Czech-speaking audience. The platform partners with established media companies such as SPM MEDIA and Echo24.cz, enhancing its credibility within the local media landscape. Technically, the website is built using modern web technologies including React and Next.js, offering good mobile optimization and user experience. Security posture is adequate with HTTPS enforced and secure forms, but lacks some advanced security headers and explicit privacy compliance mechanisms. The absence of WHOIS data for the domain raises concerns about domain registration transparency, which impacts trustworthiness. Overall, the platform is functional and professional but would benefit from improved privacy and security disclosures.

R

Radio Prostor

radioprostor.cz

56

Radio Prostor is a Czech media outlet providing a platform for information, politics, economy, business, sports, culture, and modern lifestyle content. It operates a live radio streaming service alongside a rich collection of news articles and interviews, targeting a broad audience interested in current affairs and cultural topics. The website demonstrates a professional and consistent brand presence with active social media engagement and accessible contact information. Technically, the site is built on modern web technologies including React and Next.js, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, though additional security headers and explicit policies could enhance protection. The absence of WHOIS data reduces domain transparency and trust slightly, but the overall content quality and business credibility remain high. Strategic recommendations include improving security headers, publishing incident response information, and monitoring domain registration status to ensure ongoing legitimacy.

Coolpany SE is a media company operating multiple media outlets and publications primarily in the Czech Republic. The website currently is under construction and serves as a landing page linking to various associated media projects such as Echo24, Týdeník Echo, and Radio Prostor. The business model focuses on media publishing and content distribution targeting a general audience. The company appears to have been founded in 2013 and maintains a medium-sized presence in the media sector. Technically, the website is built using modern JavaScript frameworks including Next.js and React, indicating a contemporary digital infrastructure. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. However, the site content is minimal and lacks advanced technical configurations such as security headers or analytics integrations. From a security perspective, the site uses HTTPS but lacks visible security headers and privacy compliance documentation. No forms or data collection mechanisms are present, reducing immediate data exposure risks. The WHOIS data is missing or inaccessible, which raises concerns about domain registration legitimacy and trustworthiness. No privacy or cookie policies are published, which impacts compliance with GDPR and other regulations. Overall, the website presents a basic digital presence with moderate technical maturity but significant gaps in security posture and compliance. Strategic recommendations include improving security headers, publishing privacy and cookie policies, verifying domain registration legitimacy, and enhancing transparency with contact and incident response information.

Č

Český olympijský tým

dualcareer.cz

55

The website www.olympijskytym.cz is the official portal for the Czech Olympic Team, providing comprehensive information about Olympic games, athlete support programs such as the Dual Career program, and educational initiatives. It serves as a national authoritative platform for Olympic-related content in the Czech Republic, targeting athletes, sports enthusiasts, and the general public interested in Olympic sports. The site demonstrates consistent branding and a professional presentation aligned with its governmental and non-profit nature. Technically, the website employs modern web technologies including HTML5, CSS3, and JavaScript, with integrations of tracking and analytics tools such as Google Tag Manager, Facebook SDK, Pinterest tracking, and Hotjar. The site is mobile optimized and accessible, with good SEO practices evident from meta tags and structured navigation. However, no explicit CMS or hosting provider information was identified. From a security perspective, the site uses HTTPS and shows no signs of exposed sensitive data or vulnerable libraries. Some standard security headers are not explicitly detected, and there is no visible security policy or incident response information. Privacy compliance is basic, with a cookie consent mechanism present but no clear privacy or terms of service pages found in the analyzed content. The WHOIS data is unavailable, likely due to privacy protection, which is common and justified for such an organization. Overall, the website is trustworthy and professional, with moderate to good scores in content quality, technical implementation, and security posture. Strategic improvements include publishing clear privacy and security policies, enhancing contact information visibility, and implementing additional security headers to strengthen the security posture.

Olympijský víceboj is a Czech Republic-based educational sports initiative operated under the auspices of the Czech Olympic Committee (ČOV). Founded in 2013, it focuses on promoting physical education among school children by providing sport talent analysis and motivational programs such as the Olympijský diplom and Olympijský odznak. The website serves as an information portal for schools, teachers, and parents, offering resources, event information, and partner engagement. The project enjoys strong market positioning as a leading school sports program in the Czech Republic, supported by reputable corporate partners and government institutions. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Bootstrap, with Google Analytics for visitor tracking. Hosting is managed by REG-ZONER, a known Czech hosting provider. Security posture is moderate with HTTPS usage and cookie consent implemented, but lacks explicit security headers and detailed privacy policies. Contact information is clearly presented, enhancing business credibility. No adult or questionable content is present, making it safe for general audiences.

I

Internet Index Czech, s.r.o.

adulto.cz

61

Adulto.cz is a Czech-based company specializing in online age verification services for e-commerce platforms selling age-restricted products such as tobacco, alcohol, and adult goods. Founded in 2023 and operated by Internet Index Czech, s.r.o., the company has quickly established itself as a leading provider in the Czech and Slovak markets, serving over 450 e-shops and performing millions of verifications. Their service integrates multiple verification methods including bank identity and MojeID, ensuring compliance with Czech laws and protecting minors from restricted product sales. The website is professionally designed, mobile-optimized, and provides comprehensive information and customer testimonials, reinforcing trust and credibility.

W

web4ukraine.org | STOP Russian military aggression against Ukraine

web4ukraine.org

53

The website web4ukraine.org is a small-scale advocacy platform focused on opposing Russian military aggression against Ukraine. It provides a JavaScript tool that is actively used on over 9,000 websites to delay Russian user visits, demonstrating a niche but impactful service. The site is hosted via Cloudflare and uses modern front-end technologies such as Bootstrap and Google Fonts, with Google Analytics integrated for visitor tracking. The content is clear, relevant, and professionally presented, targeting website owners and administrators who wish to participate in the campaign. From a technical perspective, the website employs a modern tech stack with good mobile optimization and moderate performance. However, it lacks some security best practices such as DNSSEC and security headers, which could be improved. The site uses HTTPS properly, ensuring encrypted communication. Privacy compliance is weak due to the absence of privacy and cookie policies, and no consent mechanisms are present. Security posture is moderate; no critical vulnerabilities or exposed sensitive data were detected, but the lack of security headers and DNSSEC reduces the overall security score. The WHOIS data is consistent with the website's origin and purpose, with no suspicious patterns. Overall, the website is trustworthy but could benefit from enhanced privacy and security measures. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies with consent mechanisms, and establishing incident response contacts to improve compliance and trustworthiness.

The website www.fotojanout.cz is a personal photography portfolio showcasing the work of František Janout, focusing primarily on nature and landscapes of the Šumava region and various international travel destinations. The site targets photography enthusiasts and travelers interested in these regions. It operates as a small-scale personal project without commercial business registration details or contact information. Technically, the site uses basic web technologies including HTML, CSS, JavaScript with jQuery and Facebook SDK integration. It is hosted on the eStránky.cz platform and shows moderate performance and basic mobile optimization. Security posture is weak due to lack of HTTPS confirmation, missing security headers, and absence of privacy or cookie policies. No WHOIS data is available, raising concerns about domain registration legitimacy. Overall, the site is safe for general audiences but lacks professional security and privacy compliance features.

H

Hotely Srní

hotelysrni.cz

47

Hotely Srní operates a hospitality business focused on hotel accommodation, wellness, conference facilities, and restaurant services in the Šumava region of the Czech Republic. The website provides a comprehensive online presence with booking capabilities and active social media engagement, positioning itself as a regional player in tourism and hospitality. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and animation libraries, delivering a good user experience with mobile responsiveness and interactive features. Security posture is adequate with HTTPS enforced and secure form handling, though the absence of security headers and a published privacy policy indicates room for improvement. The lack of WHOIS data is a concern for domain legitimacy but does not directly contradict the business's apparent authenticity. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security practices.

V

Vodafone Czech Republic a. s.

oskarta.cz

62

Oskarta.cz is a Czech Republic-based prepaid mobile telecommunications service brand operated under Vodafone Czech Republic a. s. The website primarily serves as an informational and redirect portal, informing users that Oskarta prepaid services are now available through Vodafone's main website. The business targets prepaid mobile users seeking affordable calling and SMS options without contractual obligations. The site provides essential service information, pricing, and links to terms, privacy, and cookie policies, reflecting a professional and user-focused approach. Technically, the website employs established JavaScript libraries such as jQuery and Modernizr, and integrates enterprise-grade analytics tools like Adobe Omniture and Tealium, indicating a mature digital infrastructure. Hosting and domain management appear to be under Vodafone's control, although WHOIS data is unavailable, possibly due to privacy protection or domain status issues. Security posture is generally good with enforced HTTPS and cookie consent mechanisms; however, explicit security headers and incident response information are absent, representing areas for improvement. Overall, the website is trustworthy and professionally maintained, but the lack of WHOIS transparency and some security best practices slightly reduce its trust score.