Security Directory

L

Luděk Vašek

bike-sport-shop.cz

58

Bike Sport Shop is a Czech Republic-based retail business specializing in cycling, running, cross-country skiing, and outdoor equipment. With over 25 years of experience, the company operates both a well-stocked physical store in Chrudim and an e-commerce platform offering a wide range of bicycles, e-bikes, sportswear, and accessories. The business emphasizes customer service, professional advice, and after-sales support including servicing and repairs. Their market position is that of a trusted local specialist with a loyal customer base and positive reputation as evidenced by external review platforms like Heureka.cz. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and responsive design frameworks such as Foundation. The site is mobile-optimized and provides a good user experience with clear navigation and product presentation. Payment processing is handled securely via GoPay with multiple payment options displayed. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. From a security perspective, the site uses HTTPS and enforces cookie consent but lacks visible security headers such as CSP or HSTS, which could be improved. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain reduces the trust score somewhat, but the website content and business information appear legitimate and professional. Overall, the website is a solid e-commerce platform with good content quality, technical implementation, and privacy compliance. Strategic improvements in security headers and domain registration transparency would enhance trust and security posture further.

Město Milevsko operates an official municipal website serving residents and visitors with comprehensive information about local government services, events, public notices, and administrative contacts. The site features a reservation system for official documents and maintains active social media channels. The presence of ISO 50001 certification indicates a commitment to energy management standards. Technically, the website employs modern frameworks such as Foundation and jQuery, integrates Google Analytics for visitor tracking, and enforces HTTPS with a Content Security Policy header. Accessibility and mobile responsiveness are well addressed, providing a good user experience. Security posture is solid but could be enhanced with additional headers and policies. Privacy compliance is supported by a cookie consent banner and a privacy statement, though no terms of service or vulnerability disclosure policies are found. The absence of WHOIS data limits domain transparency but does not detract from the site's apparent legitimacy as a government entity. Overall, the website is professional, trustworthy, and well-suited to its public service role.

Transoft Solutions is a well-established company specializing in innovative software and services for transportation professionals, including aviation, civil infrastructure, and safety operations. With over 30 years of experience and a global user base spanning 150 countries, the company targets government agencies and engineering firms. The website reflects a mature digital presence with multilingual support and professional branding. Technically, the site is built on WordPress with modern SEO and accessibility features, though some security headers are missing. The security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of WHOIS data and explicit security policies suggests areas for improvement. Overall, the site is trustworthy and professional but would benefit from enhanced transparency and security documentation.

B

Bentley Systems

bentley.com

71

Bentley Systems is a leading global provider of infrastructure engineering software, serving architects, engineers, constructors, and owner-operators. The company offers comprehensive solutions to advance infrastructure projects across multiple sectors including transportation, energy, and urban development. Their website reflects a mature enterprise with a strong global presence, supported by multiple localized domains and professional branding. The digital infrastructure leverages modern web technologies such as WordPress, Elementor, and advanced marketing and analytics tools like Marketo and Visual Website Optimizer, indicating a sophisticated digital marketing and customer engagement strategy. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data suggests privacy protection or proxy registration, which is common for enterprises but should be monitored for consistency. Overall, the website is professional, secure, and compliant with privacy regulations, targeting a broad professional audience in the infrastructure engineering domain.

U

UNIPEX CZ s.r.o.

unipex.cz

48

UNIPEX CZ s.r.o. is a Czech Republic-based IT company established in 2000, specializing in custom software development, ERP HELIOS iNuvio implementation, e-commerce solutions, and IT infrastructure services. The company targets manufacturing, commercial, and IT firms, providing comprehensive IT services with a team of certified experts. Their market position is that of a trusted regional IT partner with long-term client relationships and recognized certifications such as Microsoft Silver Partner and Internet Effectiveness Awards. Technically, the website employs modern web technologies including .NET and JavaScript, with Google Tag Manager for analytics and marketing. The site is well-designed, mobile-optimized, and provides clear navigation and professional content. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks visible HTTP security headers and explicit security policies. WHOIS data is unavailable, which raises some trust concerns, but the website content and business information appear legitimate and professional. Overall, the site demonstrates a good level of digital maturity and business credibility with room for security improvements.

Č

ČEVAK a.s.

vodarenskavezcb.cz

59

Vodárenská věž is a public water tower and tourist attraction located in České Budějovice, Czech Republic, operated by ČEVAK a.s., a regional water utility company. The website serves as an informational and promotional platform for visitors, offering details about tours, events, and the history of the tower. The site is well-structured, visually appealing, and provides clear contact information and social media links, enhancing visitor engagement and trust. Technically, the website uses modern web technologies including Google Maps API for location services and Google Tag Manager for analytics, with a cookie consent mechanism ensuring GDPR compliance. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be added for improvement. The absence of WHOIS data limits full domain trust assessment, but the website content and contact details strongly indicate legitimacy. Overall, the site is a reliable and professional digital presence for the Vodárenská věž attraction.

F

FG Forrest, a.s.

vodapodkontrolou.cz

60

The website vodapodkontrolou.cz represents a professional water consumption monitoring service operated by FG Forrest, a.s., targeting households, entrepreneurs, and large companies primarily in the Czech Republic. The service offers continuous monitoring of water usage with customizable alarms and notifications to prevent water damage and reduce costs. The business model is subscription-based with monthly tariffs and a one-time installation fee, requiring no purchase of hardware by the customer. Technically, the website employs modern web technologies including JavaScript, jQuery, Google Tag Manager, and Google Maps API. The site is mobile-optimized, accessible, and SEO-friendly with comprehensive metadata and multilingual support. Performance is moderate with good user experience and clear navigation. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. Cookie consent mechanisms and privacy policies are implemented in compliance with GDPR. However, explicit security policies and incident response contacts are not found, and security headers appear to be missing or not detected. Overall, the website is trustworthy and professionally maintained, though the absence of WHOIS data reduces transparency regarding domain registration. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include enhancing security headers, publishing incident response information, and improving domain registration transparency.

B

BAKALÁŘI software s.r.o.

digiskolka.cz

40

Digiškolka is a Czech Republic based digital management platform tailored for kindergartens, developed by BAKALÁŘI software s.r.o., a company with over 30 years of experience in educational information systems. The platform aims to simplify kindergarten administration and enhance communication with parents, supported by a strong market presence in Czech educational institutions. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting educational organizations. Technically, the site is built on WordPress with UIkit framework, integrates Google Analytics and reCAPTCHA for analytics and security, and is hosted by Forpsi. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with comprehensive policies and user consent options. Overall, the website is trustworthy and well-positioned in its niche.

D

DER Touristik CZ a.s.

fischergroup.cz

54

DER Touristik CZ a.s. operates as a major travel and tourism company in the Czech Republic, consolidating several well-known brands such as EXIM tours, FISCHER, NEV-DAMA, and eTravel. The company offers a wide range of vacation packages including beach holidays, skiing trips, family vacations, and online travel booking services. As part of the REWE Group, a large German retail and tourism conglomerate, DER Touristik CZ holds a strong market position in the Czech travel industry. The website reflects a professional and consistent brand image targeting Czech consumers seeking diverse travel experiences. Technically, the website employs modern JavaScript libraries, Google reCAPTCHA for bot protection, and Usercentrics for GDPR-compliant consent management, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, although some security headers and explicit incident response information are missing. Overall, the site is safe, well-structured, and compliant with privacy regulations, but the absence of WHOIS data and contact emails slightly reduces trustworthiness.

D

DER Touristik CZ a.s.

dertouristik.cz

54

DER Touristik CZ a.s. is a major Czech travel company operating multiple well-known brands such as FISCHER, EXIM tours, NEV-DAMA, and eTravel. It is part of the German REWE Group, a leading European retail and tourism conglomerate. The company offers a broad range of travel services including beach vacations, ski holidays, family travel, and online booking options, targeting Czech consumers seeking quality holiday experiences. The website reflects a professional and consistent brand presence with clear contact information and social media engagement. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and a consent management platform to comply with privacy regulations. Security posture is solid with HTTPS and bot protection, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable, limiting domain registration trust analysis, but the business affiliation and content support legitimacy.

D

Darkmay s.r.o.

cestovnisystem.cz

56

Darkmay s.r.o. operates the CeSYS platform, a comprehensive SaaS solution for travel agencies primarily in the Czech Republic and neighboring countries. The platform offers multiple products including search engines, web design, sales management, and marketing tools tailored for travel agencies. With over 16 years of market presence and partnerships with major travel industry players, CeSYS holds a strong position in its niche. The website demonstrates a mature technical infrastructure leveraging modern web technologies and analytics tools with user consent mechanisms. Security posture is generally good with HTTPS and consent-based tracking, though explicit privacy and security policies are lacking. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

L

LogiNet

loginet.hu

60

LogiNet is a Hungarian technology company specializing in e-commerce systems, webshop development, mobile application creation, and custom software development. Positioned as a professional service provider, LogiNet targets businesses requiring tailored e-commerce and digital solutions. The website reflects a mature digital presence with good SEO practices, mobile optimization, and integration of modern marketing and analytics tools such as Google Tag Manager, Hotjar, and Cookiebot for consent management. Security-wise, the site enforces HTTPS and employs reCAPTCHA to mitigate bot traffic, though explicit security headers and policies are not prominently published. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the site demonstrates a solid technical and business foundation with room for enhanced security transparency and contact information clarity.

Q

Qubit

qubit.hu

59

Qubit.hu is a Hungarian online media platform focusing on economy, science, technology, and culture, targeting a general audience interested in these topics. The website uses modern web technologies such as Ember.js with Fastboot for server-side rendering, and integrates marketing and analytics tools like Google Tag Manager and Remp. The content is rich and professionally presented, with multiple articles, authors, and categories, indicating a mature media outlet founded in 2017. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal security policies. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, the site is legitimate and well-positioned in the Hungarian media market, but could improve transparency and security practices.

L

Linkfire A/S

linkfire.com

59

Linkfire A/S operates a sophisticated SaaS platform specializing in smart links for music marketing, podcast promotion, and artist engagement. The company holds a strong market position with major label clients and over 50,000 artists using its services. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its target audience of artists, podcasters, publishers, and advertisers. Technically, the site leverages HubSpot CMS, Google Tag Manager, and OneTrust for cookie consent, ensuring modern infrastructure and compliance with privacy regulations such as GDPR. Security posture is robust with HTTPS enforcement, security headers, and anti-fraud measures like ClickCease, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high trustworthiness and business credibility with no critical vulnerabilities detected.

NAVRCHOLU.cz is a Czech web traffic monitoring and ranking platform operated by Internet Info s.r.o., established in 1997. The service provided rankings and visitor statistics for Czech websites but ceased active measurement as of January 31, 2021, now offering only historical data. The website targets Czech internet users, website owners, and digital marketers interested in web traffic insights. The business model focused on providing traffic analytics and rankings, positioning itself as a long-standing player in the Czech digital media space. Technically, the site uses standard web technologies including JavaScript, jQuery, Google Tag Manager, and Google Analytics, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial, with privacy and cookie policies present but no explicit consent mechanisms. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

W

Webnode AG

webnode.cz

69

Webnode AG operates a multilingual SaaS platform enabling users to create websites easily, including AI-assisted website generation. The company targets small businesses, individuals, and hobbyists with a freemium model and premium services such as domain registration, e-commerce, and email hosting. The platform is well-established with over 50 million websites created. Technically, the website leverages modern web technologies including AngularJS, Google Analytics, Google Ads, and Cloudfront CDN, ensuring fast performance and good mobile optimization. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable, which slightly impacts trust but the overall brand presence and content quality indicate legitimacy. Strategic recommendations include publishing security policies, improving WHOIS transparency, and enhancing vulnerability disclosure.

U

UNIWEB s.r.o.

uniweb.cz

57

UNIWEB s.r.o. is a Czech online agency specializing in web design, SEO, and custom software development, targeting primarily small to medium-sized businesses and entrepreneurs in the Czech Republic. The company has a professional web presence with a focus on responsive design and comprehensive online marketing services. Their market position is supported by a portfolio of client references and a media partnership with REGION24. Technically, the website employs modern frontend technologies including jQuery, Bootstrap, and popular marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. WHOIS data is unavailable, which slightly impacts trust but does not negate the professional appearance and business legitimacy. Overall, the website is well-structured, user-friendly, and trustworthy for its target audience.

N

Net Magnet s.r.o.

netmagnet.cz

44

Net Magnet s.r.o. is a Czech digital agency specializing in custom web development, web applications, e-shops, and online marketing services such as PPC, SEO, and CRO. With over 15 years of experience and more than 150 satisfied clients, the company positions itself as a trusted partner for businesses seeking to enhance their online presence and customer acquisition. Their service offerings include website audits and free consultations, emphasizing strategic and tailored solutions. The website is professionally designed, mobile-optimized, and rich in client testimonials and certifications, reflecting a mature digital presence. Technically, the website is built on WordPress and leverages modern JavaScript libraries and tracking tools including jQuery, Modernizr, ScrollMagic, Google Tag Manager, Facebook SDK, and Leady tracking. The site employs HTTPS with a Content Security Policy header, though additional security headers could improve its security posture. Performance is moderate with good mobile optimization and SEO practices. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Security-wise, the site demonstrates good practices such as secure form handling and HTTPS enforcement but could benefit from enhanced security headers and explicit incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain trust slightly, but the overall business credibility and transparency mitigate this concern. Overall, Net Magnet presents a professional, trustworthy, and technically competent digital agency website with minor areas for security and privacy improvement. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing security policies, and regular third-party script audits to maintain compliance and trust.

S

Statutární město České Budějovice

c-budejovice.cz

51

The website www.c-budejovice.cz serves as the official online presence of the statutory city of České Budějovice, Czech Republic. It provides comprehensive information about city governance, public services, news, cultural events, and municipal resources targeted at residents, visitors, and local businesses. The site is well-branded with official logos and maintains consistent messaging aligned with its government function. The presence of social media links and a cookie consent mechanism indicates a commitment to user engagement and regulatory compliance. Technically, the site is built on the Drupal CMS platform, leveraging common web technologies such as jQuery, Google Analytics, and JW Player for multimedia content. The site is mobile-optimized with a moderate performance profile and basic accessibility features. However, some security best practices such as HTTP security headers are not visibly implemented, and WHOIS data for the domain is missing, which raises some concerns about domain registration transparency. From a security perspective, the site uses HTTPS and anonymizes IP addresses in analytics, which are positive indicators. The cookie consent banner complies with EU regulations, but there is no visible security policy or incident response information. No vulnerabilities or malware indicators were detected in the content. Overall, the site presents a moderate security posture with room for improvement in transparency and technical security controls. The overall risk assessment is moderate with a recommendation to verify domain registration details, implement additional security headers, and publish clear security and privacy policies. These steps would enhance trust and compliance, supporting the city’s digital service delivery and citizen engagement objectives.

F

FT Sun s.r.o.

chciwwwstranky.cz

36

FT Sun s.r.o. is a Czech-based digital agency specializing in data-driven digital marketing, application development, and creative services such as photo and video production. The company positions itself as a pragmatic and experienced partner for businesses seeking to leverage internet technologies effectively. Their website reflects a professional and modern digital presence with clear service offerings and a focus on client engagement through contact forms and marketing tools. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Facebook Pixel, and reCAPTCHA for security and marketing purposes. The site is mobile-optimized and uses HTTPS, ensuring secure communications. However, the absence of certain security headers and lack of visible hosting or CMS details suggest room for technical improvements. From a security perspective, the site demonstrates good practices such as GDPR-compliant privacy and cookie policies and spam protection on forms. The lack of WHOIS data is a notable concern, as it impairs domain legitimacy verification. No critical vulnerabilities or exposed sensitive data were detected, but the site would benefit from enhanced security headers and published incident response information. Overall, FT Sun's website is a solid representation of a small technology service provider with good digital maturity and compliance posture. The main risk lies in the missing WHOIS information, which should be addressed to improve trust and transparency.

O

Obec Borová Lada

borova-lada.cz

37

Obec Borová Lada operates an official municipal government website serving the local community and visitors. The site provides comprehensive information about the municipal office, local services, tourism, public notices, and contact details. It targets residents and entrepreneurs in the Borová Lada area, positioning itself as a trusted local government resource. The business model is public sector focused, delivering essential civic information and services online. Technically, the website employs standard web technologies including jQuery, Google Analytics, Google Tag Manager, and Fancybox for UI enhancements. Hosting and web design are provided by ŠumavaNet.CZ. The site is moderately performant, mobile-optimized, and accessible with good SEO practices. Cookie consent mechanisms are implemented, though a dedicated privacy policy page is missing. From a security perspective, the site uses HTTPS and includes cookie consent but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain legitimacy verification, but the website content and structure indicate a legitimate municipal entity. Overall, the website is professional, trustworthy, and serves its public sector purpose well. Strategic improvements include publishing a privacy policy, enhancing security headers, and providing incident response information to strengthen compliance and security posture.

M

Moravská zemská knihovna v Brně

mzk.cz

61

Moravská zemská knihovna v Brně operates as a regional public library institution in the Czech Republic, offering extensive library services including lending, interlibrary loans, digital catalogs, educational programs, and cultural events. The website is professionally designed using Drupal 10, featuring a rich content structure and good user experience optimized for mobile devices. Security posture is strong with HTTPS and security headers implemented, though privacy and cookie policies are not explicitly visible, indicating room for compliance improvement. The absence of WHOIS data limits domain registration trust assessment, but the website content and structure strongly support legitimacy as a public institution. Overall, the site demonstrates a mature digital presence with moderate tracking via Google Tag Manager and good accessibility and SEO practices.

A

ALEXANDRIA s.r.o.

alexandria.cz

53

CK Alexandria is a Czech Republic based travel agency specializing in holiday packages primarily to popular European and exotic destinations such as Bulgaria, Greece, Turkey, Spain, Italy, Albania, Croatia, Cyprus, Montenegro, and the UAE. The company offers a broad range of services including last minute deals, animation programs, and a premium club membership, targeting general consumers seeking vacation travel. The website is built on modern technologies including Next.js and React, with integration of multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Smartlook. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of security headers and a published privacy policy reduces compliance maturity. WHOIS data is unavailable, limiting domain trust assessment. Overall, the website presents a professional and trustworthy front for a medium-sized travel business.

C

Cestovní kancelář Čedok

cedok.cz

66

Cestovní kancelář Čedok is a well-established travel agency website offering a wide range of holiday packages, flights, and tours primarily targeting Czech-speaking travelers. The site provides detailed offers including last minute deals, ski trips, exotic destinations, and family-friendly options. The business model focuses on online bookings and travel package sales, positioning itself as a major player in the Czech travel market. The website is professionally designed with consistent branding and good content quality, appealing to a broad audience seeking travel services. Technically, the website leverages modern web technologies including React with Next.js framework, Google Tag Manager for analytics, and Visual Website Optimizer for marketing optimization. The site is mobile-optimized and uses secure HTTPS connections with appropriate security headers, indicating a mature digital infrastructure. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and security headers. However, it lacks visible privacy and cookie policies, explicit GDPR compliance indicators, and contact information for security incidents or vulnerability disclosures. The absence of WHOIS data reduces the ability to fully verify domain legitimacy, which impacts trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy front for a travel agency but would benefit from enhanced privacy compliance, clearer contact information, and improved transparency regarding security policies. These improvements would strengthen user trust and regulatory compliance.

C

CK Blue Style

blue-style.cz

62

CK Blue Style is a Czech travel agency specializing in offering vacation packages and tours to popular European and exotic destinations such as Greece, Egypt, Tunisia, Turkey, Morocco, Italy, Bulgaria, and more. The website provides a comprehensive catalog of travel options including last minute and first minute deals, family vacations, and premium travel experiences. The company targets a broad audience including families, seniors, and adult travelers seeking quality holiday options. Technically, the website is built using modern web technologies including React and Next.js, with integrations for analytics and cookie consent management. The site is mobile optimized and provides a good user experience with clear navigation and search capabilities. Security-wise, the site enforces HTTPS and uses asynchronous script loading, but lacks some security headers and explicit security policies. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, though the website content and business presence suggest legitimate operations. Privacy compliance is partial, with cookie consent implemented but no clear privacy or terms of service pages found. Overall, the site is professional and trustworthy but would benefit from improved transparency and security practices.

E

Exim

eximtours.cz

54

EXIM tours is a well-established Czech travel agency specializing in worldwide package tours, last minute deals, and specialized travel services for families, couples, and seniors. The company operates under the DER Touristik group, positioning itself as a leading player in the Czech travel market. The website reflects a mature digital presence with modern technologies such as Vue.js, Google Tag Manager, and Usercentrics for privacy compliance. Security measures include HTTPS enforcement and bot protection via Google reCAPTCHA, although explicit security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. The absence of WHOIS data due to privacy protection is typical for such businesses and does not detract from the site's legitimacy. Overall, EXIM tours demonstrates a professional and trustworthy online presence suitable for its market segment.

F

Fischer

fischer.cz

55

CK FISCHER is a prominent Czech travel agency specializing in holiday packages, including last minute and first minute offers, with a strong loyalty program (DERCLUB). The company operates under the parent company DER Touristik CZ a.s., part of the REWE Group. The website targets general consumers seeking quality vacation services primarily in the hospitality sector. Technically, the site uses modern JavaScript frameworks (Vue.js), integrates Google Analytics, Google Tag Manager, Usercentrics for consent management, and reCAPTCHA for bot protection. The site is mobile optimized and has good SEO practices. Security posture is solid with HTTPS and consent mechanisms, but lacks some advanced security headers and explicit security policies. WHOIS data is missing, which reduces domain trust assessment confidence but the business presence and branding indicate legitimacy. Overall, the site is professional, user-friendly, and compliant with privacy regulations.

E

Eventgroove

eventgroove.com

62

Eventgroove operates an all-in-one platform specializing in event ticketing, fundraising, and ecommerce solutions tailored for nonprofits, event organizers, and distributed organizations. The website presents a professional and modern interface, leveraging WordPress with Divi theme and NitroPack for performance optimization. The platform integrates various marketing and analytics tools such as Google Tag Manager and HubSpot, indicating a mature digital marketing strategy. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are lacking. The absence of WHOIS data for the domain raises concerns about registration transparency, which slightly diminishes overall trust. Strategic recommendations include publishing comprehensive privacy and cookie policies, enhancing security headers, and providing clear contact and incident response information.

P

PANKREA s.r.o.

pankrea.cz

54

PANKREA s.r.o. is a small creative PR agency based in the Czech Republic specializing in public relations, corporate identity, web design, marketing, and custom programming services. The company targets businesses seeking to build and promote their brand identities through professional web presence and marketing communication. The website presents a professional image with clear service offerings and client references, positioning PANKREA as a creative and expert partner in the media and marketing sector. Technically, the website uses modern tools such as Google Analytics, Google Tag Manager, and Google reCAPTCHA, and is built on the Estofan CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site employs reCAPTCHA and cookie consent mechanisms but lacks visible security headers and publicly disclosed security policies. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear legitimate and professional. Overall, the site scores well on content quality and technical implementation but has room for improvement in security posture and privacy transparency.

O

ONLINE HOLDING s.r.o.

hotel.cz

63

Hotel.cz is an established online hotel booking platform primarily serving the Czech Republic and Slovakia markets. Operated by ONLINE HOLDING s.r.o., it offers a wide selection of hotels and accommodation options with a focus on competitive pricing and direct hotel payments. The website positions itself as a market leader with over 10 years of experience, targeting travelers seeking convenient and reliable hotel reservations. The platform provides multilingual support and extensive filtering options to enhance user experience. Technically, the website employs modern tracking and analytics tools including Google Analytics, Microsoft Clarity, Bing UET, and OneTrust for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized and features a responsive design, although accessibility features are basic. Performance is moderate with room for improvement in security header implementation. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but lacks visible security policies, incident response contacts, or vulnerability disclosure information. The absence of WHOIS data for the domain is a notable concern, limiting the ability to fully verify domain legitimacy and ownership. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, Hotel.cz presents a professional and trustworthy front for hotel bookings, but would benefit from enhanced transparency in privacy and security policies, as well as domain registration clarity to strengthen trust and compliance posture.

Pematex s.r.o. is a Czech-based company specializing in the wholesale and retail of fastening materials and hardware, serving manufacturing and industrial clients with a strong emphasis on fast and quality deliveries. The company operates multiple physical stores across the Czech Republic and offers a B2B e-commerce platform, positioning itself as an authorized supplier of the Nord-Lock brand. The website reflects a professional business presence with clear service offerings and customer engagement features.

M

Mekr´s

mekrs.cz

46

Mekr´s is a Czech-based wholesale supplier specializing in fastening and anchoring materials, offering over 60,000 items and serving more than 20 countries. Established in 1994, the company targets B2B customers in engineering, electronics, metallurgy, and automotive sectors. Their business model focuses on providing a comprehensive product range with custom solutions and a regional dealer network, supported by an e-commerce platform. Technically, the website is built on WordPress with Elementor, integrating modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Microsoft Clarity. The site is well-structured, mobile-optimized, and includes multi-language support. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are not explicitly detected and no formal security policy or incident response contacts are published. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and business presence appear professional and legitimate. Overall, the site demonstrates a mature digital presence with room for improvement in security transparency and domain registration clarity.

BYD Trutnov, operated by Autostyl a.s., is an authorized dealership and service center specializing in electric vehicles and plug-in hybrids from the BYD brand. Positioned as the first BYD representative in the Trutnov region of the Czech Republic, the company focuses on delivering modern, eco-friendly mobility solutions to local consumers. The website reflects a professional business presence with clear branding, comprehensive product offerings, and accessible customer contact points. Technically, the website is built on a modern stack including October CMS, Bootstrap, and JavaScript libraries such as Swiper.js and jQuery. It is mobile-optimized and includes SEO best practices like meta tags and Open Graph data. Google Tag Manager is used for analytics and tracking, with a cookie consent mechanism that aligns with GDPR requirements. From a security perspective, the site enforces HTTPS and implements cookie consent controls, but lacks visible security headers which could enhance protection against common web threats. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data raises concerns about domain legitimacy and should be investigated further. Overall, the website presents a trustworthy and professional front for the business, but improvements in security headers and domain registration transparency are recommended to strengthen trust and compliance.

T

Toyota Česko

toyotatrutnov.cz

65

Toyota Central Europe - Czech s.r.o., represented online by Autostyl a.s., operates as an official regional dealer for Toyota in the Czech Republic. The company provides comprehensive automotive sales, servicing, and customer support, targeting consumers interested in Toyota vehicles and accessories. The website reflects a professional and consistent brand presence aligned with Toyota's corporate identity. Technically, the site leverages Adobe Experience Manager and Scene7 for content management and media delivery, supported by Google Tag Manager for analytics and cookie consent management. The infrastructure indicates a mature digital presence with moderate performance and good mobile optimization. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed through cookie consent mechanisms and GDPR-aligned privacy policies. Overall, the domain appears legitimate and trustworthy despite the absence of public WHOIS data, which is common for corporate domains. Strategic recommendations include enhancing public security policy disclosures and incident response information to further build trust and compliance.

R

Rentstyl, s.r.o.

rentstyl.cz

53

Rentstyl, s.r.o. operates a Czech-language website offering operational leasing and car rental services primarily for Škoda and Toyota vehicles. The company targets individuals and businesses seeking flexible vehicle leasing solutions with fixed monthly payments including insurance and servicing. The website is professionally designed with good content quality and clear navigation, optimized for mobile devices. Technically, the site uses a custom MVC-based CMS integrated with BSSHOP e-commerce platform and employs Google Tag Manager for analytics and marketing. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though HTTP security headers are not explicitly detected. The absence of WHOIS data limits domain ownership transparency, which slightly impacts trustworthiness. Overall, the site presents a legitimate and professional business with moderate risk due to incomplete domain registration information.

Š

Škoda Auto a.s.

skodaplus.cz

73

Škoda Plus is a certified used car sales program operated by Škoda Auto a.s. in the Czech Republic, offering quality-assured used vehicles through authorized dealers. The website presents a professional and well-structured platform with comprehensive information about the program, vehicle offerings, financing, and insurance options. Technically, the site uses modern web technologies including React and Next.js, with integration of Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and nonce attributes on scripts, although some security headers and explicit policies are missing. Privacy and cookie policies are present and GDPR compliant. The absence of WHOIS data limits domain trust assessment, but the branding and content strongly indicate legitimacy. Overall, the site is well-designed, user-friendly, and trustworthy for its target audience.

Yellow Point, spol. s r.o. operates an e-commerce platform specializing in the sale of experience gifts and adventure activities primarily in the Czech Republic. The website offers a variety of products such as gift certificates, adrenaline experiences, and seasonal activities, targeting general consumers seeking unique gift options. The company appears to hold a solid regional market position with a medium-sized business model focused on direct online sales and bookings. Technically, the website is built on the WPJ CMS platform and employs modern JavaScript libraries and tracking tools including Google Analytics 4, Google Tag Manager, Adform, and Seznam retargeting. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Security measures include HTTPS enforcement and Sentry error monitoring, but lack some advanced HTTP security headers and explicit vulnerability disclosure mechanisms. From a security perspective, the site demonstrates a moderate security posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Contact information is transparent, enhancing business credibility. However, WHOIS data is unavailable, likely due to privacy protection, which slightly limits domain trust analysis. Overall, the website is professional, trustworthy, and secure for its business purpose. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its posture. The absence of WHOIS data is mitigated by strong on-site trust signals and compliance features.

A

ActiveCampaign

activehosted.com

71

ActiveCampaign is a leading marketing automation platform that leverages AI to automate and optimize customer engagement across multiple channels including email, SMS, and WhatsApp. The company positions itself as a provider of autonomous marketing solutions that reduce manual workload and accelerate campaign deployment. Their platform targets businesses seeking to enhance marketing efficiency and customer relationship management through intelligent automation. Technically, the website demonstrates a mature digital infrastructure with modern JavaScript frameworks, responsive design, and integration of advanced analytics and tracking tools such as Google Tag Manager, Hotjar, and Adobe AppMeasurement. Security-wise, the site enforces HTTPS and employs best practices in script management, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the professional web presence and comprehensive privacy compliance. Overall, the website reflects a high level of professionalism, technical sophistication, and business credibility, with room for improvement in transparency around security policies and domain registration details.

M

mBank S.A.

mbank.cz

65

mBank S.A. operates a modern digital banking platform targeting personal finance customers and entrepreneurs primarily in the Czech Republic. The website offers a comprehensive suite of financial products including current accounts, loans, mortgages, credit and debit cards, savings products, insurance, and mobile banking applications. The bank positions itself as a digital-first institution with a focus on simplicity, practicality, and accessibility. The site is professionally designed with excellent content quality and clear navigation, optimized for mobile devices. Technically, the site uses a modern tech stack including jQuery and Google Tag Manager, and is built on the StartWeb6.0 CMS platform. Security posture is strong with HTTPS enforced and secure login mechanisms, although explicit security headers are not visibly present in the HTML. Privacy compliance is robust with clear GDPR-aligned privacy and cookie policies and consent mechanisms. However, WHOIS data for the domain is missing, which reduces transparency and slightly impacts trustworthiness. Overall, the site is highly professional, trustworthy, and well-suited for its target audience.

D

Dressing Your Truth

teathemes.net

65

Dressing Your Truth operates an e-commerce store specializing in beauty and personal style products, targeting a global audience of women interested in makeup and haircare. The business leverages Shopify's platform for its online presence, integrating various marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Klaviyo to optimize customer engagement and sales. The website is professionally designed with good SEO and mobile optimization, reflecting a mature digital infrastructure suitable for a niche retail market. Security posture is generally good with HTTPS enforced and secure payment options, though there is room for improvement in implementing security headers and explicit privacy policies. The absence of WHOIS data is consistent with Shopify subdomains but limits domain trust verification. Overall, the site presents a credible and professional e-commerce presence with moderate risk due to privacy compliance gaps.

O

Omegatheme

omegatheme.com

72

Omegatheme is a professional provider of Shopify apps designed to help e-commerce merchants increase sales, automate workflows, and reduce operational costs. The company offers a portfolio of 28 apps with features ranging from order tracking and fraud prevention to marketing pixel integrations and GDPR compliance tools. Positioned as a leading Shopify app provider, Omegatheme targets Shopify merchants and e-commerce businesses globally, supported by a medium-sized operation based in Vietnam under the parent company XIPAT Flexible Solutions. Technically, the website is built on Joomla CMS with the Helix Ultimate framework and incorporates modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience. The site is mobile-optimized, SEO-friendly, and integrates multiple e-commerce platforms such as WooCommerce, Wix, and BigCommerce, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, there is a lack of explicit security headers and no visible security policy or incident response information, which are areas for improvement. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and business information appear legitimate and professional. Overall, Omegatheme presents a trustworthy and professional e-commerce technology provider with strong business credibility and technical maturity. Strategic enhancements in security transparency and domain registration clarity would further strengthen its risk posture and trustworthiness.

D

Direct Family s.r.o.

direct-technologies.cz

65

Direct technologies is a Czech Republic-based technology company operating as part of the Direct Family group. The company focuses on delivering agile, innovative, and reliable technology solutions in partnership with business units, leveraging modern technologies and data insights to build functional business systems. Their market position is that of a medium-sized technology partner supporting sectors including insurance, automotive, fintech, and non-profit foundations. The website demonstrates a professional digital presence with good content quality and modern technical infrastructure, including React and Next.js frameworks and AWS S3 for media hosting. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are not published. The absence of WHOIS data limits domain legitimacy verification, but the overall business credibility and trust indicators are strong.

D

Direct Investments

directinvestments.cz

66

Direct Investments is a Czech investment group specializing in building and managing a portfolio of companies primarily in the insurance, mobility, finance, and technology sectors. The group emphasizes Czech ownership and control, aiming to create trustworthy and sustainable businesses. Their market position is strong with over one million clients and a significant annual turnover. The website presents a professional image with clear information about subsidiaries and investment opportunities. Technically, the website is built using modern frameworks such as React and Next.js, ensuring good performance and mobile optimization. The presence of Google Tag Manager and cookie consent mechanisms indicates a moderate level of digital maturity and privacy awareness. However, some improvements could be made in accessibility and security headers. From a security perspective, the site uses HTTPS and has basic privacy mechanisms, but lacks visible security policies, incident response contacts, and vulnerability disclosure information. The absence of WHOIS data reduces transparency and trustworthiness from a domain registration standpoint. Overall, the website is professional and trustworthy in content and design but would benefit from enhanced security disclosures and domain registration transparency to improve its risk profile and compliance posture.

D

Direct Fondee a.s.

fondee.cz

55

Fondee is a Czech Republic-based online investment platform specializing in simple, tailored ETF portfolios and corporate bond investments. The company targets retail investors seeking low-cost, transparent investment solutions, including sustainable ESG portfolios, children's accounts, and pension investment plans. The platform emphasizes ease of use, trust, and regulatory compliance, positioning itself as an emerging fintech player in the Czech market with growing media recognition. Technically, the website leverages modern web technologies including React, Google Tag Manager, and Google reCAPTCHA v3, hosted on DigitalOcean infrastructure with CDN support. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a professional and user-friendly experience. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure reduces transparency. No WHOIS registration data was found, which impacts trust assessment but the overall site content and media presence support legitimacy. Overall, Fondee presents a secure, professional, and privacy-conscious investment platform with room for improvement in transparency and contact availability. Strategic recommendations include publishing security and incident response policies, verifying domain registration details, and enhancing visible contact information.

D

Direct pojišťovna a.s. spółka akcyjna oddział w Polsce

directubezpieczenia.pl

65

Direct ubezpieczenia is a Polish branch of the Czech insurance company Direct pojišťovna a.s., offering modern and transparent insurance solutions primarily in the automotive, property, and travel sectors. With over 300,000 clients in Poland and a decade of experience, the company emphasizes simplicity, fast claims processing, and customer-friendly service. The business model leverages direct sales and agent networks, with claims and customer service managed by UNEXT sp. z o.o., a trusted partner in Poland. The website reflects a professional and consistent brand image, targeting individual and corporate clients in Poland.

M

Ministerstvo spravedlnosti České republiky

justice.cz

59

The website msp.gov.cz is the official portal of the Ministry of Justice of the Czech Republic, serving as a comprehensive resource for justice-related information, public registries, legal news, and e-services. It targets the general public, legal professionals, and government officials, providing authoritative content and access to various justice system components. The site is well-branded, consistent, and maintains a high level of trust as a government domain. Technically, the site is built on the Liferay CMS platform with modern web technologies including React and Alloy UI. It employs HTTPS with strong SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. The site is mobile-optimized and accessible, with good SEO practices and structured navigation. From a security perspective, the site enforces HTTPS and uses nonce-based inline scripts to mitigate injection risks. However, it lacks explicit security headers such as Content-Security-Policy and X-Frame-Options, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which is unusual for a government domain but likely due to registry policies rather than malicious intent. Overall, the site presents a strong security posture and digital maturity appropriate for a government entity, with room for improvement in security header implementation and publishing a formal security policy or vulnerability disclosure program.

F

FT Sun s.r.o.

ftsun.cz

46

FT Sun s.r.o. is a Czech digital agency specializing in data-driven digital services including application development, e-marketing, photo and video production, graphic design, and e-shop solutions. The company targets businesses seeking pragmatic and technologically standardized digital partners. The website presents a professional image with clear service offerings and a focus on GDPR compliance. Technically, the site uses modern web technologies such as Bootstrap, Owl Carousel, Google Analytics, Google Tag Manager, Facebook Pixel, and reCAPTCHA to enhance user experience and security. Security posture is solid with HTTPS enforced and consent mechanisms in place, though the absence of security headers and WHOIS data reduces overall trust. The domain WHOIS data is missing, which is a concern for domain legitimacy but the website content and business information appear consistent and professional. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations, making it a credible digital agency in the Czech market.

4

42 Vienna

42vienna.com

58

42 Vienna is a Digital Excellence Campus based in Austria, providing innovative, free, and open-access coding education using a peer-to-peer learning model without teachers or lectures. It targets aspiring programmers and IT professionals, emphasizing inclusivity regardless of financial or academic background. The website is professionally designed, mobile-optimized, and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are absent. WHOIS data is unavailable, which slightly impacts trust but is mitigated by consistent branding and social media presence. Overall, the site reflects a credible educational institution with room for improvement in privacy and security transparency.

4

42 Berlin

42berlin.de

62

42 Berlin is a tuition-free, non-profit software engineering school located in Berlin, Germany. It offers an innovative peer-to-peer learning environment focused on hands-on projects and real-world challenges, targeting aspiring software developers and students interested in coding education. The website is built on WordPress using Elementor, with modern SEO and structured data implementations, and is hosted behind Cloudflare. The site integrates multiple third-party analytics and tracking pixels including Google Analytics, TikTok, Facebook, and Reddit, with GDPR consent mechanisms in place via the Complianz plugin. Security posture is generally good with HTTPS enforced and Cloudflare protection, but lacks explicit security headers and published security policies. Contact information and privacy policies are not explicitly found in the analyzed content, which represents an area for improvement. Overall, the website is professional, trustworthy, and well-positioned in the education sector, but could enhance privacy compliance and security transparency.