Security Directory

V

Virtual Fiction

virtual-fiction.cz

42

Virtual Fiction is a small, established Czech company specializing in 3D visualization, interior design, graphic design, printing, photography, and web hosting services. Founded in 1996, it has developed a stable presence domestically and in several European countries. The website reflects a professional business with clear service offerings and contact information. Technically, the site uses traditional web technologies such as Bootstrap and jQuery, with moderate performance and basic mobile optimization. Security posture is average, with HTTPS implied but lacking advanced security headers and privacy compliance measures. The absence of privacy and cookie policies represents a compliance risk. Overall, the business appears legitimate and stable, but improvements in security and privacy practices are recommended.

Labe Aréna Ústeckého kraje is a regional national Olympic center for water sports in the Czech Republic, focusing on rowing and related aquatic sports. The website serves as an information portal for sports events, projects like 'Česko vesluje', and regional sports development initiatives. It targets athletes, sports clubs, schools, and the general public interested in water sports. The business model revolves around managing sports facilities, organizing competitions, and promoting rowing activities regionally. Technically, the website uses an older jQuery version and is built on the Fonio CMS platform. While the site is functional and provides relevant content, it lacks modern security headers and advanced privacy compliance features. The site is moderately optimized for mobile and accessibility but could benefit from performance and SEO improvements. From a security perspective, the absence of WHOIS data and missing privacy/cookie policies are notable gaps. The site does not show signs of advanced security measures or incident response readiness. No critical vulnerabilities were detected, but outdated libraries and lack of security headers pose potential risks. Overall, the website is moderately trustworthy and serves its informational purpose well but requires improvements in security posture, privacy compliance, and technical modernization to enhance trust and resilience against threats.

Bushman company a. s. operates a regional retail business specializing in outdoor and leisure wear for men and women who appreciate nature and quality clothing. The website bushman.eu serves as a multilingual landing page directing users to localized country-specific sites, indicating a structured regional market presence across several European countries. The business model focuses on retail sales of outdoor apparel, targeting consumers interested in comfort and nature-oriented lifestyles. The company appears to be medium-sized with consistent branding and a clear market niche in retail clothing. Technically, the website uses the Shopsys framework and standard web technologies such as HTML5, CSS, and JavaScript. The site is mobile optimized and moderately performant but lacks advanced SEO and accessibility features. Security posture is basic with no visible security headers or published policies, and no HTTPS enforcement details were found in the provided content. Privacy and cookie policies are absent, which impacts compliance and user trust. No contact information or forms are present on this landing page, limiting direct user engagement. Overall, the website is functional but minimalistic, with room for improvement in security, privacy, and user experience.

H

HG partner

hgpartner.cz

43

HG partner is a Czech Republic based engineering company specializing in water management projects, offering comprehensive services including project documentation, expert consulting, construction supervision, and support for subsidies. Established in 2002 and part of the SUDOP GROUP, the company serves public entities and private clients with a medium-sized expert team. The website reflects a professional business presence with detailed project references and clear contact channels. Technically, the site uses modern web standards and frameworks with good mobile optimization and SEO practices, though it lacks advanced security headers and privacy policies. The absence of WHOIS data is a notable gap, reducing domain trustworthiness despite the professional content. Security posture is moderate with room for improvement in compliance and incident response readiness.

M

MORAVSKÁ VODÁRENSKÁ, a.s.

smv.cz

50

MORAVSKÁ VODÁRENSKÁ, a.s. is a regional water utility company operating primarily in the Moravian region of the Czech Republic. The company provides essential water supply and wastewater management services, supported by a customer portal and accredited laboratory testing for water quality. It is part of the larger Veolia group, indicating a strong market position within the energy and utilities sector. The website reflects a professional and consistent brand image with relevant content targeted at residential and commercial customers. Technically, the website is built on the Vizus CMS platform and employs modern web technologies including JavaScript, CSS, and HTML5. It integrates analytics tools such as Google Analytics and Matomo for traffic and user behavior tracking. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR principles, although no explicit privacy policy page was found in the provided content. From a security perspective, the site uses HTTPS and implements cookie consent controls, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, although the website content and affiliation with Veolia support its credibility. Overall, the website is functional, professional, and trustworthy for its intended audience, but improvements in transparency around privacy policies, security headers, and domain registration information are recommended to enhance trust and compliance.

S

Vlajky světa | Statnivlajky.cz

statnivlajky.cz

57

Statnivlajky.cz is a Czech informational website dedicated to providing comprehensive data about world flags, including countries, US states, and international organizations. The site has been actively maintained for over 15 years, positioning itself as a niche educational resource with quizzes, downloads, and categorized flag listings. The website targets a general audience interested in vexillology and related educational content. Technically, the site uses modern web technologies such as JavaScript, JSON-LD structured data, and WebP images, with good mobile optimization and SEO practices. However, no CMS or hosting provider details are evident, and performance is moderate. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks visible security headers and explicit incident response or security policies. Privacy and cookie policies exist, though a cookie consent mechanism is absent. WHOIS data is unavailable, which impacts trust and transparency. Overall, the site is functional, informative, and safe for general audiences but could improve security and compliance transparency.

Zoovu (Germany) GmbH, formerly SEMKNOX GmbH, operates a professional website offering advanced product search and data processing solutions primarily targeting e-commerce businesses. Their services leverage machine learning to transform unstructured product data into structured, searchable formats, enhancing online shop conversions and customer satisfaction. The company positions itself as a specialist in next-generation product search and data cleansing technologies, serving notable clients such as Lidl and Gravis. Technically, the website is well-constructed using modern web standards, optimized for performance and mobile devices, and employs secure HTTPS connections with a cookie consent mechanism to comply with GDPR requirements. However, explicit security policies and incident response information are not published, representing an area for improvement. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity, with no indications of security vulnerabilities or questionable content.

Microsoft Learn is a comprehensive educational platform operated by Microsoft Corporation, designed to provide interactive lessons, technical documentation, certifications, and community engagement for developers and IT professionals. The platform supports skill development across a wide range of Microsoft technologies, positioning Microsoft as a leader in technology education and professional development. The website demonstrates a high level of digital maturity with modern web technologies, excellent mobile optimization, and strong SEO practices. Security is robust with HTTPS enforcement, modern security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the platform is trustworthy, professional, and well-aligned with Microsoft's brand and business objectives.

S

SpryMedia

sprymedia.co.uk

60

SpryMedia is a specialized web user-interface development studio based in Scotland, established since 2006. The company focuses on creating UI development tools and software projects such as DataTables, Visual Event, and SprySpell, targeting web developers and UI professionals. The website reflects a professional and focused business with a niche market position in technology and software development. Technically, the website uses standard web technologies including HTML, CSS, JavaScript, and jQuery, hosted via a UK-based registrar. The site loads a privacy-conscious analytics script (Plausible Analytics) and is accessible without WAF or blocking mechanisms. However, it lacks explicit privacy, cookie, and terms of service policies, and no direct contact emails or phone numbers are provided, only a contact form link. Security headers are not detected, indicating room for improvement in security posture. Overall, the website is well-designed and trustworthy, but could enhance compliance and security transparency.

S

sitegeist

sitegeist.de

48

sitegeist is a well-established digital agency based in Hamburg, Germany, with over 25 years of experience in digital transformation, web development, and online marketing. The company positions itself as a full-service digital agency offering strategic consulting, innovative AI solutions, and comprehensive web and marketing services. The website demonstrates a high level of digital maturity with modern technologies such as Neos CMS, PHP frameworks, and integration of AI-powered chatbots. Security posture is strong with HTTPS enforcement and good script management, though explicit security headers and policies could be improved. Privacy compliance is currently weak due to the absence of visible privacy and cookie policies. Overall, the website is professional, trustworthy, and well-optimized for performance and user experience.

C

ClassicPress

classicpress.net

65

ClassicPress is a community-driven open source content management system forked from WordPress 4.9, targeting users who prefer the classic WordPress editor experience. It positions itself as a lightweight, stable, and familiar CMS alternative, supported by a small but active volunteer community and nonprofit governance. The website offers resources including plugins, themes, documentation, and community support channels such as forums and chat. The project is sponsored by several infrastructure partners and funded via donations. Technically, the site runs on a ClassicPress CMS compatible with WordPress 6.2.6, leveraging LiteSpeed caching technology and modern HTML5 standards, resulting in fast performance and good mobile and accessibility support. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response policies are absent. Privacy compliance is good with a comprehensive privacy policy but lacks a cookie consent mechanism. WHOIS data is missing or unavailable, which reduces domain trustworthiness despite the legitimate and professional web presence. Overall, ClassicPress represents a credible niche open source CMS project with room for improvement in security transparency and domain registration clarity.

D

Digital Media Publishing s.r.o.

ifarnost.cz

44

The website ifarnost.cz is operated by Digital Media Publishing s.r.o., a small Czech company specializing in creating customized websites for parishes. Their service offers easy-to-use content editing, hosting, domain management, and mobile-optimized designs tailored to church communities. The site is professionally designed with good navigation and content relevance, targeting parish administrators and church organizations. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, hosted on Microsoft Azure Blob Storage. Security posture is solid with HTTPS and SSL certificates, but lacks some security headers and explicit privacy policies. WHOIS data is unavailable, which impacts domain trustworthiness. Overall, the site is functional, professional, and trustworthy for its niche audience.

S

Spreadshirt

spreadshirt.pl

61

Spreadshirt.pl is a professional e-commerce platform specializing in custom apparel and merchandise, positioning itself as the largest T-shirt printing company in Europe. The website offers users the ability to purchase ready-made designs or create their own, with a focus on fast shipping and a broad product range. The platform targets a general audience interested in personalized clothing and accessories. Technically, the site employs modern JavaScript frameworks, including Lit and Glide.js, and integrates a comprehensive cookie consent mechanism via OneTrust, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and standard security headers likely in place, though explicit security policies and incident response contacts are not published. The absence of WHOIS data from the Polish registry limits domain trust verification, but the website's professional presentation and privacy compliance mitigate concerns. Overall, the site demonstrates a solid balance of business credibility, technical sophistication, and privacy adherence.

S

Spreadshirt

spreadshirt.no

64

Spreadshirt.no is a well-established e-commerce platform specializing in custom printed apparel and products, positioning itself as Europe's largest T-shirt printing company. The website offers a user-friendly interface with clear navigation, modern design, and comprehensive content focused on custom design and shopping experiences. Technically, the site employs modern JavaScript frameworks and libraries, including Lit and Glide.js, and integrates robust cookie consent management via OneTrust, ensuring GDPR compliance. Security posture is strong with HTTPS enforced and multiple security headers present, although public security policies and incident response contacts are not disclosed. The absence of WHOIS data for the .no domain is a notable gap, limiting full domain legitimacy verification. Overall, the site demonstrates a mature digital presence with good privacy and security practices, suitable for its large-scale e-commerce operations.

I

IONOS Group SE

ionos-group.com

76

IONOS Group SE is a leading European digitalization partner specializing in SMB and enterprise cloud and web presence solutions. The company operates multiple well-known brands and serves approximately 6.4 million customers across 18 markets in Europe and North America. Their business model focuses on providing comprehensive hosting, cloud, and domain registration services supported by strong customer care and infrastructure. The website reflects a mature digital presence with investor relations, corporate governance, and press information, indicating a publicly listed and transparent organization. Technically, the website is built on TYPO3 CMS, uses modern web technologies, and integrates Adobe Analytics for user tracking. The site is mobile optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be improved. Hosting appears to be managed internally or via a dedicated CDN. Performance is moderate with room for optimization. Security posture is strong with HTTPS enforced and a robust cookie consent mechanism supporting GDPR compliance. However, explicit security headers are missing, and no public security policy or incident response contacts are published. The WHOIS data is incomplete or privacy protected, which is common for large enterprises but reduces transparency. No vulnerabilities or suspicious content were detected. Overall, the website and business present a low risk profile with strong credibility and compliance. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen trust and compliance.

P

Povodí Ohře, státní podnik

poh.cz

61

Povodí Ohře is a Czech state enterprise responsible for managing water resources, hydrological data, and infrastructure in the Ohře river basin. The organization provides essential services including reservoir management, water planning, and public information dissemination. The website serves as an official portal offering updates, employment opportunities, and contact information to the public and stakeholders. The company holds a stable market position as a government entity with a medium-sized operational scale, founded in 1999. Technically, the website is built on the Vismo CMS platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, and integrates Google services like Analytics and reCAPTCHA for security and user tracking. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with a clear navigation structure and consistent branding. From a security perspective, the site enforces HTTPS, employs Google reCAPTCHA on forms, and provides a cookie consent mechanism compliant with GDPR. However, explicit security headers and a published security policy or incident response contact are absent, representing areas for improvement. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business, supporting high legitimacy. Overall, the website demonstrates a strong security posture and good privacy compliance, with professional content and trustworthy business information. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure mechanism to further strengthen trust and compliance.

The website entercamp.cz is currently inaccessible beyond a Cloudflare security challenge page that requires human verification via Turnstile captcha. Due to this, no actual business content, contact information, or policies are visible for analysis. The domain is registered since 2008 with a Czech registrar and uses Cloudflare for DNS and security services. The lack of accessible content prevents a full assessment of the business model, services, or compliance posture. Technically, the site uses modern security mechanisms but does not expose any business or compliance information publicly. Security posture is difficult to evaluate fully due to the blocking mechanism, but the use of Cloudflare indicates a baseline security practice. Overall, the site appears legitimate based on domain age and registration data, but the lack of accessible content and policies limits trust and compliance evaluation.

D

dmpagency.cz s.r.o.

dmpagency.cz

57

dmpagency.cz s.r.o. is a Czech digital agency specializing in the development of large B2B and B2C e-commerce platforms, websites, and mobile applications. The company offers comprehensive services including initial analysis, development, and internet marketing, positioning itself as a strategic partner for online business solutions. The website reflects a mature digital presence with recognized certifications such as Google Partner and Microsoft Partner, indicating strong market credibility. Technically, the site uses modern web technologies including Bootstrap, JavaScript libraries, and integrates analytics and tracking tools with user consent mechanisms. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of security headers and a public privacy policy page suggests room for improvement. The lack of WHOIS data limits domain trust assessment but does not detract from the professional presentation and business legitimacy. Overall, the site is well-structured, user-friendly, and targets Czech-speaking business clients seeking digital transformation services.

Collata.site is a specialized website builder and content management system tailored specifically for public libraries. The platform offers a comprehensive suite of tools including event and space reservation systems, book lists, blogs, accessibility features, and digital signage. The business targets small to medium-sized public libraries, providing both a hosted SaaS edition and an open-source community edition, positioning itself as a niche player in the education technology sector. The website content is professionally designed, consistent in branding, and rich in relevant information, supported by client logos from various public libraries, which enhances trust and credibility. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, Google Fonts, and Font Awesome. It integrates Google Translate for multilingual support and uses legacy Google Analytics for tracking. The site appears mobile-optimized and accessible, with features supporting WCAG compliance. However, there is no evidence of advanced security headers or DNSSEC, and the domain uses privacy protection services, which is common for small tech companies. From a security perspective, the site uses HTTPS and has a clientTransferProhibited domain status, but lacks visible security headers like CSP or HSTS. The use of legacy analytics scripts and absence of privacy and cookie policies indicate gaps in privacy compliance. No incident response or vulnerability disclosure information is present. Overall, the security posture is moderate but could be improved with better headers, updated analytics, and explicit privacy documentation. The overall risk assessment suggests a legitimate, niche-focused business with good technical and content quality but with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, updating analytics tools, and providing clear incident response contacts to enhance trust and compliance.

The website www.legacy.com is currently inaccessible beyond a Cloudflare security challenge page that requires human verification via Turnstile captcha. Due to this, no substantive content about the business, services, or company information is available for analysis. The WHOIS lookup for the domain returned no registration data, indicating either a privacy-protected registration or an unregistered domain, which raises concerns about legitimacy. The technical infrastructure includes Cloudflare's security platform, but no further technology stack or CMS details are visible. Security posture is limited to the presence of Cloudflare's WAF and captcha challenge, which provides some protection but also blocks content access. Overall, the site cannot be fully assessed for business credibility, privacy compliance, or security beyond the WAF presence.

The website 'An IndieWeb Webring' is a small community-driven project aimed at connecting personal websites that implement IndieWeb building blocks. It provides a directory, random site navigation, and membership sign-in via IndieAuth or RelMeAuth, targeting IndieWeb enthusiasts. The project is open source with active maintenance and blog updates, positioning itself as a niche community resource within the IndieWeb ecosystem. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and PHP, with no detected CMS. The site is moderately performant and mobile-optimized, though accessibility and SEO are basic. Security practices include CSRF protection on forms but lack advanced HTTP security headers. The domain is privacy protected but consistent with the project's age and scope. Security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in HTTPS enforcement, security headers, and explicit privacy and cookie policies. No advertising or tracking is present, supporting user privacy. Overall, the site is trustworthy and safe for general audiences. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing a privacy policy with GDPR compliance, and improving contact transparency to strengthen trust and compliance.

Ú

ÚRS CZ

pro-rozpocty.cz

59

ÚRS CZ is a Czech company specializing in providing comprehensive construction cost estimation tools, software, and training services. Their offerings include the KROS software suite, online applications, BIM valuation tools, and carbon footprint calculation applications. The company targets construction professionals such as estimators, project managers, and investors, positioning itself as a key player in the Czech construction software market. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site uses modern web technologies including Vue.js, UIkit, and integrates Google reCAPTCHA and analytics tools, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and anti-bot measures in place, though explicit security headers and detailed privacy policies are lacking. Overall, the site is trustworthy and well-maintained, but the absence of WHOIS data and privacy policy documentation suggests areas for improvement in transparency and compliance.

M

MAS Chrudimsko, z.s.

maschrudimsko.cz

59

MAS Chrudimsko, z.s. is a non-profit local action group established in 2013 focused on promoting sustainable development in the Chrudimsko region of the Czech Republic. The organization operates through community-led local development strategies and supports projects aligned with regional growth and sustainability goals. Their website reflects a well-structured and professional digital presence, leveraging OctoberCMS and hosted by a regional provider. The site offers comprehensive information about their activities, partnerships, and funding programs, targeting local municipalities and stakeholders. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks advanced security headers and explicit incident response policies. Overall, the website is trustworthy, compliant with GDPR, and serves its community-oriented mission effectively.

Č

Českobudějovicko - Hlubocko, z.s.

cb-hl.cz

37

Českobudějovicko - Hlubocko, z.s. is a regional non-profit organization focused on promoting tourism and coordinating activities in the South Bohemian region of the Czech Republic. The website serves as a hub for tourism information, event calendars, educational resources, and partner collaboration. It targets tourists, local businesses, and regional stakeholders. The organization appears well-integrated with regional government and tourism bodies, as evidenced by partner logos and references. Technically, the website uses a modern tech stack including HTML5, CSS3, JavaScript with jQuery, and several third-party libraries for galleries and lazy loading. It integrates Google Analytics, Google Tag Manager, Facebook Pixel, and SmartEmailing for tracking and marketing purposes. The site is mobile-optimized and has good navigation and content structure, though accessibility features are basic. Security-wise, the site uses HTTPS and asynchronous script loading but lacks visible security headers and explicit privacy or cookie policies, which are compliance gaps. No WHOIS data is available, limiting domain trust assessment, but the site content and partner affiliations suggest legitimacy. Overall, the site has a moderate security posture with room for improvement in privacy compliance and security best practices. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in privacy policy publication, security headers, and WHOIS transparency would enhance trust and compliance.

Mechanics' Institute is a well-established non-profit cultural and educational organization based in San Francisco, offering a wide range of services including library access, cultural programming, chess education, and community events. The website reflects the organization's mission to serve as a vibrant arts and cultural hub, providing resources and programs for community engagement. The business model focuses on membership, events, and educational services, targeting community members interested in culture, education, and chess. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript libraries including Swiper.js and FontAwesome, and is hosted behind Cloudflare DNS services. The site is mobile-optimized and includes accessibility features, though no explicit CMS or framework is detected. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, it lacks DNSSEC and security headers, and does not publish privacy, cookie, or security policies, indicating gaps in compliance and security posture. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security header implementation, and explicit security and incident response policies to improve its security posture and regulatory adherence.

P

PAPRIKA

my-paprika.com

52

PAPRIKA is a hospitality business specializing in Mediterranean street food, particularly hummus, with multiple locations in Prague and Brno, Czechia. The website presents a professional and user-friendly interface offering menus, table reservations, catering services, and a kitchen market. The business targets general consumers seeking quality Mediterranean cuisine and related catering services. Technically, the site is built on the Site123 CMS platform, utilizing modern web technologies and includes analytics and marketing tracking tools. Security posture is moderate with HTTPS implied but lacks explicit security headers and privacy policies. The absence of WHOIS data for the domain raises some legitimacy concerns, though the website content and business presence appear genuine. Privacy compliance is weak due to missing policies and cookie consent mechanisms. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

P

PROSTĚ NA KOLECH - pojízdný bar

prostenakolech.cz

39

Prostě na kolech is a small hospitality business based in the Czech Republic offering a unique mobile bar rental service. They have transformed a horse trailer into a portable bar suitable for events such as weddings, celebrations, and corporate parties. Their service includes bar rental, optional bar staff, decorations, and delivery within a specified radius. The website is professionally designed with clear navigation and good content quality, targeting event organizers and individuals seeking a stylish bar solution for their events. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, and various JavaScript libraries for UI effects and analytics. The site is mobile optimized and includes Google Analytics for visitor tracking. However, it lacks privacy and cookie policies and does not implement a cookie consent mechanism, which is a compliance gap. No forms are present, reducing data collection risks. From a security perspective, the site uses HTTPS but lacks visible security headers and vulnerability disclosures. The absence of WHOIS data for the domain is a significant concern, impacting trust and legitimacy assessments. No critical vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website presents a professional and functional online presence for a niche hospitality service but requires improvements in privacy compliance, security headers, and domain transparency to enhance trust and regulatory adherence.

M

Madcat.beer a.s.

madcat.beer

49

MadCat is a Czech craft brewery specializing in sour ales, lagers, and traditional ales, operating since 2011. The company is structured as a stock company with over 100 shareholders, emphasizing community involvement and direct sales through brewery visits and an online e-shop. Their market position is niche but strong locally, with active participation in charity projects and brewing workshops. Technically, the website is built on the Webnode platform, uses modern CDN hosting, and is mobile optimized with good performance. Security posture is solid with HTTPS and cookie consent implemented, though lacks published security policies and privacy documentation. Overall, the site is professional and trustworthy, with room for improvement in compliance documentation and security headers.

P

Pavel Miřejovský

dusty.cz

51

The website dusty.cz represents a personal portfolio for Pavel Miřejovský, a Czech freelance designer specializing in computer graphics, print material preparation, web presentation design, and GUI design for mobile applications. The site targets clients seeking professional design services in the Czech Republic and operates as a small-scale freelance business. The website is simple, with basic content and consistent branding, but lacks comprehensive business or legal documentation such as privacy or cookie policies. Technically, the site uses standard HTML5, CSS, JavaScript, and modern web fonts (WOFF2). It appears to be a static site without a CMS or complex frameworks. Mobile optimization is good, but accessibility and SEO are basic. No advanced analytics or advertising technologies are detected, indicating minimal tracking or marketing automation. From a security perspective, the site lacks visible security headers and no HTTPS status was provided, which may indicate suboptimal security posture. The absence of WHOIS data is a concern for domain legitimacy and transparency. No privacy or cookie policies are present, which impacts GDPR compliance. Contact information is clearly provided, but no incident response or vulnerability disclosure mechanisms are found. Overall, the website is functional and serves its purpose as a personal portfolio but has room for improvement in security, privacy compliance, and domain transparency. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and improving domain registration visibility to enhance trust and compliance.

B

Bayerisches Staatsministerium für Wirtschaft, Landesentwicklung und Energie

by-cz.eu

65

The website www.by-cz.eu serves as the official platform for the INTERREG Bayern - Tschechien program, a European Union funded cross-border cooperation initiative between Bavaria and the Czech Republic for the 2021-2027 funding period. It provides comprehensive information about funding opportunities, project application processes, and program updates. The site is managed under the auspices of the Bavarian State Ministry for Economic Affairs, Regional Development and Energy, reflecting a strong governmental affiliation and public sector focus. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs Matomo analytics configured to respect user privacy. The site is well-structured, mobile-optimized, and includes accessibility features such as easy language and sign language options. Security is well-handled with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. From a security and compliance perspective, the site shows good privacy compliance with GDPR-aligned cookie consent and a detailed privacy policy. However, no explicit security policy or incident response contact information is published, and WHOIS data is unavailable due to registry privacy protections. Despite this, the presence of official ministry logos and consistent branding supports the site's legitimacy. Overall, the website is a trustworthy, professional government portal with a clear mission to support cross-border regional development projects. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing explicit incident response contacts to further strengthen security posture and user trust.

A

ARCHITECTURAL STUDIO CREATE

create.works

56

The website www.create.works represents an architectural studio named ARCHITECTURAL STUDIO CREATE based in Bratislava, Slovakia. The business focuses on architecture with an emphasis on ecological solutions and modern design. The site is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as JavaScript, CSS, and HTML5. The technical infrastructure is typical for small service-oriented businesses using website builders, offering moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and privacy compliance mechanisms such as cookie consent or privacy policies. Contact information is clearly provided, enhancing business credibility, though social media links appear to be generic Wix accounts rather than company-specific profiles. WHOIS data is privacy protected, which is common for small businesses, and no suspicious patterns were detected. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security best practices.

N

NOVOdesign.cz – Hedvika Novotná

novodesign.cz

55

NOVOdesign.cz, led by Hedvika Novotná, is a small Czech interior design business specializing in turnkey interior design and realization services for both residential and commercial clients. The company also offers interior design courses and targets investors interested in short-term rental properties. The website is professionally designed, featuring modern technologies such as A-Frame for 3D visualization, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing purposes. Privacy and cookie policies are implemented with GDPR compliance, enhancing user trust. Security posture is solid with HTTPS enforced, though security headers are absent and could be improved. Overall, the website reflects a mature and credible business with a clear market niche.

I

Intuit Inc.

intuit.com

79

Intuit Inc. is a leading financial software company providing a suite of products including TurboTax, Credit Karma, QuickBooks, and Mailchimp. The company targets individual consumers, small and medium businesses, and accounting professionals, offering SaaS-based solutions that empower users with financial confidence. Intuit holds a strong market position as a trusted brand in the finance and technology sectors. The website reflects a mature digital infrastructure leveraging modern web technologies such as React and Next.js, optimized for performance and mobile responsiveness. Security posture is robust with HTTPS enforcement, comprehensive security headers, and privacy compliance mechanisms including GDPR adherence and cookie consent management. While WHOIS data is privacy protected, the domain and website content align with Intuit's corporate identity, supporting legitimacy. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with industry best practices.

S

Soprema Iberia

soprema.es

56

Soprema Iberia is a well-established company specializing in waterproofing and insulation solutions for the construction industry, boasting over 100 years of experience. The company targets construction professionals including installers, distributors, and project designers, offering a broad portfolio of products and services focused on sustainable building practices. Their market position is strong within Spain and Europe, supported by comprehensive product documentation, training programs, and personalized technical advice. Technically, the website employs modern web technologies, integrates multiple analytics and marketing tools, and is hosted on reliable infrastructure with good performance and mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security and incident response policies are not prominently published. Overall, the website reflects a professional and trustworthy digital presence aligned with the company's business goals.

S

Soprema AG

soprema.ch

55

Soprema AG is a well-established Swiss company specializing in sustainable building solutions, particularly waterproofing and insulation products for flat roofs and civil engineering. The company benefits from a strong market position supported by its parent French family-owned group, with a history dating back to 1908. The website reflects a mature digital presence with a comprehensive product catalog, customer support services, and active social media engagement. Technically, the site uses modern web technologies and enforces HTTPS with appropriate security headers, ensuring a secure browsing experience. Privacy compliance is well addressed with a forced-choice cookie consent mechanism and a detailed privacy policy. However, there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and aligned with industry standards.

S

Soprema Srl

soprema.it

55

Soprema Italia is a well-established company specializing in waterproofing and insulation solutions for the construction industry. The website reflects a mature digital presence with comprehensive product offerings, technical documentation, and training resources aimed at professionals such as architects and engineers. The company positions itself as a leader in sustainable building materials with a strong emphasis on innovation and environmental responsibility. Technically, the website uses modern web technologies and integrates marketing automation tools like Pardot and Google Tag Manager, hosted on AWS infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) that displays when a website cannot be loaded. The page includes embedded JavaScript and CSS for the offline dinosaur game but contains no actual website content, business information, or external links. As such, it does not represent a public website or business entity. The technical infrastructure is limited to Chromium's internal resources and scripts. Security posture is minimal due to the nature of the page being a local error page with no external exposure. Privacy and compliance policies are absent, as expected for an internal browser page. Overall, this is not a website but a browser-generated error page with embedded game code.

R

RRT s.r.o.

autaslovensky.sk

52

AUTÁSLOVENSKY.sk is a specialized service provider focused on integrating Slovak and Czech language translations into vehicle control systems. With over 17 years of experience and more than 17,500 vehicles served, the company operates primarily in Slovakia and the Czech Republic, offering on-site installation and custom software development for automotive brands. The website reflects a professional and trustworthy business with clear contact channels and customer testimonials. Technically, the site uses modern web technologies including Google Tag Manager, reCAPTCHA v3, and LiveChat, ensuring user interaction and marketing capabilities. Security posture is solid with HTTPS and form protections, though additional HTTP security headers and incident response information could enhance resilience. Overall, the site is well-structured, GDPR compliant, and presents a credible business presence in the automotive localization niche.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which is displayed when the browser cannot load external website content. This page includes embedded JavaScript and CSS for the Chrome offline dinosaur game, but contains no actual business or website content. There are no privacy policies, cookie notices, terms of service, or contact information present. The page is not a public website but a browser-generated error page, thus no business or security policies are applicable. The technical infrastructure is limited to embedded Chromium scripts and canvas-based game code. Security posture is minimal due to the nature of the page, with no security headers or policies detected. Overall, this is not a legitimate website but a browser error page with embedded game functionality.

B

The Best No-Code Website Builder | Website Builder for Non-Techies

brizy.io

69

Brizy.io is a technology company offering a no-code website builder platform designed for non-technical users. The platform emphasizes ease of use, providing beautiful templates and white label customization options. The website is professionally designed with good content quality and targets individuals and businesses seeking simple website creation solutions without coding knowledge. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and leverages CDN services for content delivery. However, the site lacks visible security headers and explicit privacy or cookie policies, which are important for compliance and trust. The WHOIS data is privacy protected or unavailable, which is common but reduces transparency. Overall, the security posture is moderate with room for improvement in policy visibility and security best practices. The site is accessible with no WAF or blocking detected, and content is safe for general audiences.

Envo Demos is a newly established WordPress-based blog focused on philosophy content, branded as 'Mindblown'. The website currently hosts minimal content, including a welcome post, and targets a general audience interested in philosophical topics. The business model is primarily content-driven with no evident commercial services or products. Technically, the site uses WordPress with standard block editor features and jQuery libraries, hosted by WEDOS Internet, a reputable registrar and hosting provider. The site demonstrates basic mobile optimization and accessibility but lacks advanced SEO and performance tuning. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, which are recommended for improved protection. Privacy compliance is minimal, with no visible privacy or cookie policies, and no contact or incident response information is provided. Overall, the site is functional but immature in terms of security and compliance maturity.

The website rybarskedny.cz is currently a parked domain with no active business content or services. It primarily serves as a placeholder with advertising and domain sale offers. The domain was registered recently in November 2024 and uses parking name servers, indicating no operational business presence. The technical infrastructure relies on standard HTML and JavaScript with integration of Google Adsense Domains CAF and other advertising/tracking scripts. There is no evidence of a CMS or advanced frameworks. Security posture is weak due to lack of HTTPS enforcement and missing security headers. Privacy compliance is minimal with only a basic privacy policy accessible via a popup link and no cookie consent mechanism. Business credibility is low due to absence of contact information or company identity. Overall, the site is low trust and low content quality, suitable only as a domain parking page.

4

4DPrime

4dprime.com

62

4DPrime is a UK-based technology service provider specializing in mobile apps, websites, bespoke software, and AI solutions. Established in 2012, the company serves startups, SMEs, governments, and enterprises worldwide, positioning itself as a trusted digital partner with over two decades of experience. The website reflects a professional and modern digital presence built on the Astro framework, optimized for performance and mobile responsiveness. Security posture is solid with HTTPS and domain transfer protections, though improvements such as enabling DNSSEC and security headers are recommended. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the site demonstrates high business credibility and trustworthiness.

T

Tourismusverband Ostbayern e.V.

goldsteig-wandern.de

41

The website www.goldsteig-wandern.de serves as the official portal for the Goldsteig hiking trail, a prominent 660 km long trail in Bavaria and Bohemia, Germany. Operated by the Tourismusverband Ostbayern e.V., it provides comprehensive information on hiking routes, accommodations, events, and booking services. The site targets hiking enthusiasts and tourists seeking outdoor experiences in the region, positioning itself as a key player in regional tourism with recognized affiliations such as the Top Trails of Germany. Technically, the site employs modern web technologies, including JavaScript and CSS, and integrates third-party services like Google Translate and CCM19 for cookie consent management. The website is mobile-optimized, accessible, and SEO-friendly, offering a professional user experience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and incident response contact information. Overall, the domain and website content are consistent and legitimate, with no signs of blocking or WAF interference.

The website at suckgame988.com currently serves only as a default server placeholder page, indicating that the domain is either not yet pointed to active content or is still propagating. There is no business information, contact details, or any form of user engagement present. The domain was registered in early 2023 and uses Cloudflare DNS services, but DNSSEC is not enabled. Hosting is provided by SiteGround, as indicated by the placeholder content. The technical infrastructure is minimal and lacks modern web features or CMS integration. Security posture is weak due to the absence of HTTPS and security headers, and no privacy or cookie policies are present, indicating a lack of compliance with common data protection standards. Overall, the site is not operational and provides no business or security assurances.

A

A.I.S. s.r.o.

ais.sk

54

A.I.S. s.r.o. is a Slovakian IT service provider established in 1999, specializing in computer network management, server administration, computer servicing, electronic security, and web development. The company targets businesses and organizations in need of comprehensive IT infrastructure and web solutions. Their website reflects a broad portfolio of services including hardware supply, VPN, firewall protection, and SGI hardware representation. Technically, the website uses standard HTML, CSS, and JavaScript with Google Analytics for tracking and a simple image gallery script. The site is accessible and moderately optimized but lacks advanced mobile responsiveness and accessibility features. Security posture is moderate; HTTPS is implied but no security headers or incident response contacts are published. Privacy compliance is partial, with a cookie consent banner present but no privacy policy or terms of service. Overall, the website is professional but could improve in compliance and security transparency.

Z

Zo školy do školy | IKAR

zoskolydoskoly.sk

55

The website zoskolydoskoly.sk is an e-commerce platform specializing in children's books targeted at children aged 0 to 12 years. It offers a wide catalog of books with a focus on educational and entertaining literature for young readers. The site is localized in Slovak language and hosted on a Slovak hosting provider, indicating a regional focus. The business appears to be newly established in 2024, consistent with the domain registration date. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and integrates Google Tag Manager for analytics and tracking, although it currently denies ad and analytics storage by default, showing some privacy consideration. Security posture is moderate with HTTPS and DNSSEC enabled, but lacks security headers and formal security policies. No privacy or cookie policies were found, which is a compliance gap. Contact information is not explicitly provided on the visible content, which may affect user trust and support accessibility. Overall, the website is professionally designed with good navigation and content relevance, suitable for its target audience. The content is safe with no adult or explicit material.

L

LAD.CZ

pracujnalodi.cz

40

Pracujnalodi.cz is a specialized employment agency focused on providing job placement services for positions on river and ocean cruise ships, primarily in hospitality and service roles. The website targets job seekers interested in maritime employment, offering job listings, CV submission, and updates on seasonal opportunities. The business operates from the Czech Republic and maintains partnerships with recognized cruise and travel companies, enhancing its market credibility. Technically, the website employs a modern tech stack including Bootstrap 4, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. While the site is well-structured and mobile-optimized, it lacks some advanced accessibility features and security headers that could improve its overall robustness. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and obfuscates email addresses to reduce spam. However, it lacks explicit privacy and cookie policies, security headers, and a vulnerability disclosure mechanism, which are important for compliance and trust. The WHOIS data aligns well with the business claims, showing transparency and legitimacy. No adult or questionable content is present, making the site safe for general audiences. Overall, Pracujnalodi.cz presents a professional and credible platform for maritime job seekers but should enhance its privacy compliance and security posture to meet modern standards and increase user trust.

D

Dave Design

davedesign.cz

43

Dave Design is a Czech-based graphic and web design studio established in 1998, specializing in custom web design, graphic design, corporate identity, SEO, e-shops, and related digital services. The company serves a diverse client base ranging from small businesses to large corporations such as Vítkovice Steel. Their website reflects a professional and consistent brand image with a portfolio showcasing various projects and client references. Technically, the website uses traditional web technologies including HTML, CSS, JavaScript, and jQuery, supplemented by Google Analytics and Tag Manager for tracking. While the site is functional and well-structured, it lacks modern security headers and privacy compliance features such as a privacy policy or cookie consent mechanism. Security posture is moderate with room for improvement, especially in enforcing HTTPS and updating outdated libraries. Overall, the website is trustworthy and credible but would benefit from enhanced security and privacy practices.

O

Obchodní a technologický holding a.s.

otholding.cz

40

Obchodní a technologický holding a.s. is a Czech investment holding company focused on technology and startups. The company provides a portfolio of services including lead management, mobile app development, web notifications, LED panel rentals, and digitalization solutions for municipalities. Their market position is that of an innovator and quality leader in their sectors, targeting businesses and startups primarily in the Czech Republic and Slovakia. The website content is professional and well-structured, supporting their business model and market positioning. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and popular libraries such as jQuery, Swiper.js, and BaguetteBox.js. Google Analytics and Google Tag Manager are used for tracking, but no explicit privacy or cookie policies are present, indicating a gap in privacy compliance. The site shows moderate performance and basic mobile optimization. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, no security headers were detected, and there is no visible incident response or security policy information. The lack of WHOIS data reduces trust and transparency, which is a concern for legitimacy. Overall, the security posture is moderate but could be improved with better privacy compliance and security best practices. The overall risk assessment suggests a generally trustworthy and professional business website with some compliance and transparency gaps. Strategic recommendations include implementing privacy and cookie policies, adding security headers, improving mobile and accessibility features, and enhancing contact and incident response information to strengthen trust and security posture.