Security Directory

Italmec s.r.o. is a Czech-based company specializing in the sale and service of industrial machinery and chemical products, primarily sourced from Italy. With over 25 years of experience, the company targets demanding Czech customers in sectors such as washing lines, packaging machines, sports and civil surfaces, and plastic pipe production equipment. The business model focuses on B2B sales with a strong emphasis on personalized customer service. The website reflects a small-sized, established manufacturing sector player with a niche market position. Technically, the website employs common web technologies including jQuery, Google Analytics, Google Tag Manager, Google Maps API, and Google Fonts. The site is hosted under the REG-ZONER registrar and uses standard web fonts and scripts. Performance and mobile optimization are basic, with room for improvement in accessibility and SEO. No CMS or advanced frameworks are detected. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which are critical for GDPR compliance. HTTPS usage is assumed but not explicitly confirmed in the provided data. The site uses Google Analytics and Tag Manager for tracking, indicating moderate user tracking without explicit consent mechanisms. No forms or input fields are present, reducing immediate risk from input-based vulnerabilities. Overall, the website is functional and provides clear business contact information but lacks modern privacy and security best practices. Strategic improvements in security headers, privacy compliance, and mobile optimization would enhance trust and compliance. The domain WHOIS data supports the legitimacy and longevity of the business, aligning with the website content and business claims.

B

Blažek

blazek.cz

53

Blažek is a well-established Czech brand specializing in men's fashion, offering a wide range of formal and casual clothing and accessories. The company operates an e-commerce platform complemented by physical stores and bespoke tailoring services, positioning itself as a significant player in the Czech retail fashion market. The website reflects a professional and consistent brand image, targeting male customers seeking quality and style. Technically, the site employs modern web technologies and analytics tools, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and secure forms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates a mature digital presence with room for enhanced security transparency.

The website zbl.basketball serves as the official online presence for the Czech Women's Basketball League, operated under the Czech Basketball Federation. It provides comprehensive information including news, match schedules, player and team statistics, and multimedia content targeted at basketball enthusiasts, players, coaches, and officials within the Czech Republic. The site is well-branded and consistent with the federation's identity, supporting its role as a key information hub for women's basketball in the region. Technically, the site employs modern web technologies such as HTML5, CSS3, and JavaScript, with integrations of Google Tag Manager and Google Analytics for tracking and marketing purposes. The site is mobile-optimized and features a cookie consent mechanism, indicating a moderate level of digital maturity. Hosting and domain registration are consistent with the official federation, enhancing trust. From a security perspective, the site uses HTTPS with a good SSL configuration, but lacks DNSSEC and some recommended security headers. There is no visible privacy policy or terms of service, which are important for compliance and user trust. No incident response or vulnerability disclosure information is provided, which could be improved to enhance security posture. Overall, the website is professional, trustworthy, and serves its business purpose effectively. However, improvements in privacy compliance documentation and security best practices are recommended to reduce risk and increase user confidence.

The website nbl.basketball serves as the official digital platform for the Czech National Basketball League, operated by the Czech Basketball Federation. It provides comprehensive basketball-related content including news, match schedules, statistics, team profiles, and ticketing information. The site targets basketball enthusiasts, players, coaches, and officials within the Czech Republic, positioning itself as a central hub for national basketball activities. The business model appears to be informational and promotional, supported by the federation and possibly sponsorships. Technically, the website employs modern web technologies such as HTML5, CSS3, and JavaScript, with integrations of Google Tag Manager and Google Analytics for tracking and analytics. The site is hosted by Bombora Technologies Pty Ltd., with a moderate performance profile and good mobile optimization. Accessibility is basic but functional, and SEO practices are adequately implemented through meta tags and structured navigation. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; while a cookie consent mechanism is present, no privacy policy or terms of service pages were found, representing a compliance gap. Contact information and incident response details are not explicitly provided. Overall, the website is trustworthy and professionally maintained, with a strong alignment between domain registration data and website content. Strategic recommendations include implementing comprehensive privacy and security policies, enabling DNSSEC, and adding security headers to improve the security posture and compliance standing.

W

Webland AG

webland.ch

67

Webland AG is a Swiss-based hosting provider established in 1998, offering a comprehensive range of web hosting, email hosting, domain registration, and cloud office services primarily targeting private individuals and businesses in Switzerland. The company emphasizes Swiss quality, security, and data sovereignty by operating all servers within Switzerland and being a BAKOM registered Internet Service Provider. Their market position is that of a trusted, established mid-sized hosting provider with a strong local presence and a broad service portfolio including Windows and Linux hosting platforms. Technically, the website leverages modern web technologies such as Bootstrap, jQuery, FontAwesome, and DotNetNuke CMS. It integrates advanced analytics and marketing tools including Google Analytics, Google Tag Manager, Google Ads, and Intercom for customer engagement. The site is mobile-optimized with good SEO and accessibility features, reflecting a mature digital infrastructure. From a security perspective, the website uses HTTPS with excellent SSL configuration and offers security features like Web Application Firewall and SSL certificates including free Let's Encrypt options. However, there is room for improvement in implementing HTTP security headers and publishing explicit security policies or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, Webland AG presents a low-risk profile with strong business credibility, good privacy compliance, and a professional online presence. Strategic recommendations include enhancing security headers, publishing incident response information, and adding a security.txt file to improve transparency and security posture further.

C

Cartful Solutions, Inc

cartfulsolutions.com

69

Cartful Solutions, Inc operates a specialized SaaS platform delivering AI-powered quizzes tailored for ecommerce brands to enhance customer engagement and increase conversions. The company positions itself as a trusted partner for top brands, offering customizable quiz solutions that integrate seamlessly with brand UX and voice. Their platform supports various quiz types, data connectors, and analytics tools to optimize marketing and product strategies. Technically, Cartful leverages modern web technologies including Webflow CMS, Google Analytics, Google Tag Manager, LinkedIn Insight Tag, and Apollo.io for tracking and marketing automation. The website is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs reCAPTCHA v3, and claims SOC 2 compliance with regular audits. Cookie consent mechanisms and privacy policies are robust, supporting GDPR compliance. However, the absence of WHOIS registration data for the domain introduces some uncertainty regarding domain legitimacy, which should be monitored. Overall, Cartful presents a professional, secure, and privacy-conscious online presence with strong business credibility in the ecommerce technology sector. Strategic recommendations include publishing a terms of service page, providing explicit incident response contacts, and adding a security.txt file to enhance transparency and trust.

T

Textron Inc.

textron.com

69

Textron Inc. is a large, diversified industrial company with a strong presence in aerospace, defense, and specialized vehicles. Founded in 1923, it operates multiple business segments including Bell, Textron Aviation, and Textron Systems. The company targets investors, customers in transportation and defense sectors, and job seekers. The website reflects a mature digital presence built on Drupal 10, with modern analytics and tracking tools integrated. It features comprehensive corporate, investor, and career information, supported by consistent branding and professional design. From a security perspective, the website enforces HTTPS and includes a Content Security Policy, along with cookie consent mechanisms indicating GDPR compliance. However, additional security headers and a vulnerability disclosure policy are absent, representing areas for improvement. The WHOIS data is unavailable or obscured, which is unusual for a public company domain but does not detract significantly from the overall trustworthiness given the extensive corporate content and social media presence. Overall, the website demonstrates a strong business credibility and technical maturity, with good privacy compliance and a solid security posture. The absence of direct contact emails and phone numbers suggests reliance on contact forms and social media channels for communication. The site is safe for general audiences with no adult or questionable content detected.

P

Pigeon Mountain Industries, Inc.

itrsonline.org

55

The International Technical Rescue Symposium (ITRS) website represents a professional event platform focused on technical rescue disciplines, co-hosted by PMI and CMC. It targets rescue professionals and volunteers, offering event registration, ticket sales, and presentation proposal submissions. The site is well-branded and consistent with its niche market positioning, serving a specialized audience in the rescue and emergency response sector. The domain is well-established since 2008, registered to Pigeon Mountain Industries, Inc., a US-based entity consistent with the event location and sponsors. Technically, the website is built on the Tilda CMS platform, integrating modern tools such as Google Analytics, Google Tag Manager, and Ticket Tailor for ticketing. It uses HTTPS with Cloudflare DNS but lacks DNSSEC and some security headers, indicating room for security enhancements. The site is mobile-optimized with good navigation and content relevance, though accessibility and SEO optimizations are basic. Security posture is moderate with HTTPS enforced and domain transfer protection enabled, but missing DNSSEC and security headers reduce the overall security score. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanisms. Business credibility is strong with clear contact information, event details, and trusted partner links. Overall, the website is a credible and professional event platform with moderate technical maturity and security posture. Strategic improvements in privacy compliance and security hardening would enhance trust and regulatory adherence.

ARVA Canada operates a professional e-commerce platform specializing in avalanche safety equipment including transceivers, airbags, backpacks, shovels, and probes. The company targets backcountry skiers, snowboarders, and mountain rescue professionals, positioning itself as a niche leader in Canadian outdoor safety retail. The website is built on Shopify, leveraging modern e-commerce technologies and integrations such as Google Analytics, Klaviyo, and Langshop for marketing and analytics. The site demonstrates good digital maturity with fast performance, mobile optimization, and clear navigation. Security posture is strong with HTTPS enforced and secure payment options, though explicit security headers and incident response information could be improved. Privacy and cookie policies are present and GDPR compliant, supporting user trust. Overall, the business presents a credible and professional online presence with room for enhanced security transparency and vulnerability disclosure.

G

Good Sailors, s.r.o.

goodsailors.cz

42

Good Sailors, s.r.o. is a Czech-based social enterprise founded in 2013 that provides digital services including application development and hardware/software supply. The company emphasizes meaningful employment for handicapped individuals and operates several socially impactful projects such as GSail and Dobrá spisovka. Their market position is strengthened by numerous awards recognizing innovation, social responsibility, and business success. Technically, the website employs modern analytics and spam protection tools, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and reCAPTCHA usage, though lacking some advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its social mission.

A

Australasian Gaming Expo

austgamingexpo.com

40

The Australasian Gaming Expo (AGE) is a well-established event organizer specializing in the gaming and hospitality industry in Australia. The website serves as a comprehensive platform for event information, exhibitor details, visitor registration, and industry news. It targets professionals and businesses within the gaming and hospitality sectors, positioning itself as a cornerstone event in the Australasian market. The business model revolves around event hosting, exhibitor services, and networking facilitation. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and integrates Google Analytics and Google reCAPTCHA for analytics and security. The site is mobile-optimized and demonstrates good SEO practices, although performance is moderate. Hosting details are limited but the domain is registered with a reputable registrar and has a long history dating back to 2003. From a security perspective, the site uses HTTPS and implements reCAPTCHA for form protection, but lacks DNSSEC and explicit security headers. There is no visible cookie consent mechanism or detailed privacy compliance features, which could be improved. No incident response or vulnerability disclosure information is publicly available, indicating room for enhancement in security transparency. Overall, the website is professional, trustworthy, and serves its business purpose effectively. Strategic improvements in security headers, privacy compliance, and incident response transparency would strengthen its security posture and user trust.

I

Internet Stream s.r.o.

internetstream.cz

46

Internet Stream s.r.o. is a Czech-based company specializing in SEO optimization and the development of internet applications tailored to customer needs. Their business model focuses on providing customized marketing support and web solutions, including website creation, e-commerce platforms, and web applications. The company emphasizes quality and cost-effective solutions, supported by client testimonials and references, positioning itself as a reliable local service provider in the technology sector. Technically, the website is built on Drupal 7 with jQuery 1.10.2 and integrates Google Analytics for visitor tracking. The site includes a cookie consent mechanism compliant with GDPR principles, although explicit privacy and terms of service pages are not found. The technical infrastructure is moderate in performance and mobile optimization, with room for modernization and security improvements. From a security perspective, the site lacks visible security headers and uses an outdated JavaScript library version, which could pose vulnerabilities. The absence of WHOIS data reduces transparency and trustworthiness, although the website content and business presence suggest legitimate operations. No critical vulnerabilities or adult content are detected, and the site is fully accessible without WAF or blocking mechanisms. Overall, the website scores moderately on content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic improvements in security headers, updated libraries, and enhanced privacy documentation are recommended to strengthen trust and compliance.

A

ASTRA GAMES s.r.o.

cassoclub.cz

57

ASTRA GAMES s.r.o. operates the cassoclub.cz website, providing gambling and lottery services primarily through physical casino and gaming hall locations across the Czech Republic. The company has an established presence since 2002 and offers membership services such as e-cards. The website is built on WordPress and integrates standard technologies including jQuery, Google Analytics, and Cookiebot for cookie consent management. The site is professionally designed with good navigation and mobile optimization, targeting adult gambling customers in the Czech market. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks some advanced security headers and explicit incident response information. Privacy compliance is strong with a comprehensive privacy policy and GDPR-aligned cookie consent mechanism. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is understandable given the business sector. Overall, the website is functional, professional, and compliant with key privacy regulations, serving its target audience effectively.

K

KAJOT

kajotpoker.com

51

KAJOT POKER is a well-established live poker tournament provider operating since 2010, primarily serving the Czech and Slovak markets. The company offers a variety of poker and casino games through an exclusive network of casinos, targeting both novice and experienced players. Their website reflects a professional and consistent brand presence with clear contact information and active social media channels. Technically, the site is built on WordPress with common plugins such as Slider Revolution and uses Google Analytics for visitor tracking. While the site is accessible and performs moderately well with good mobile optimization, it lacks some advanced security features such as DNSSEC and security headers. Privacy compliance is basic, with no explicit cookie consent mechanism and only a basic privacy policy linked. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

N

NERUDA PRODUCTION s.r.o.

oktagon.tv

64

OKTAGON.TV is a specialized streaming platform focused on combat sports including MMA, Muay Thai, kickboxing, and boxing, targeting audiences primarily in Czechia, Slovakia, Germany, and Spain. The platform offers live streams, pay-per-view events, and subscription-based access to exclusive content, positioning itself as a leading regional media service for combat sports enthusiasts. The business is operated by NERUDA PRODUCTION s.r.o., a Slovak company established in 2019, reflecting a medium-sized enterprise with a clear market niche and growing digital presence. Technically, the website leverages modern web technologies such as React and Next.js, supported by Firebase backend services and Cloudflare CDN for performance and security. The platform is optimized for multiple devices including mobile, desktop, and smart TVs, with good SEO and accessibility practices. Analytics and marketing tools like Google Analytics and Smartlook are used for user behavior tracking, with appropriate privacy and cookie consent mechanisms in place. From a security perspective, the site enforces HTTPS, employs Cloudflare protection, and implements standard security headers, although DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are comprehensive and GDPR compliant, though explicit security policies or incident response contacts are not publicly disclosed. Overall, OKTAGON.TV demonstrates a solid digital maturity and trustworthy business model with a focus on delivering high-quality combat sports content. Strategic improvements could include enabling DNSSEC, publishing a vulnerability disclosure policy, and enhancing accessibility features to further strengthen security and compliance posture.

A

Autopůjčovna Taggart

taggart.cz

53

Autopůjčovna Taggart is a well-established car rental company based in Prague, Czech Republic, operating since 2010. It offers a wide range of rental vehicles including short-term, long-term, flexible monthly rentals, and specialized vehicles such as minibuses and luxury cars. The company positions itself as one of the largest and most trusted car rental providers in the region, supported by numerous positive customer reviews and multiple awards. Their business model focuses on customer convenience, transparent pricing, and comprehensive service including insurance and roadside assistance. Technically, the website is built on modern frameworks like Bootstrap and uses popular analytics and marketing tools such as Google Tag Manager, Smartlook, and Microsoft UET. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data is a concern but does not outweigh the strong trust signals from the website content and customer feedback. Overall, the company demonstrates a mature digital presence with room for minor security enhancements.

J

JPJ Forest, s.r.o.

jpjforest.cz

48

JPJ Forest, s.r.o. is a Czech company specializing in the import, manufacture, and sale of professional forestry, agricultural, and municipal machinery since 2009. The company offers a wide range of high-quality products including forestry trailers, hydraulic cranes, wood splitting machines, and hydraulic components. It serves a diverse clientele including private forest owners, agricultural businesses, and municipal service providers primarily in the Czech Republic and Slovakia. The website reflects a mature digital presence with comprehensive product information, customer references, and support services including financing and subsidies. Technically, the site is built on WordPress with modern web technologies and integrates analytics and marketing tools such as Google Analytics, Hotjar, and Google Tag Manager. Security posture is solid with HTTPS enforced and GDPR-compliant privacy and cookie policies, although some security headers and explicit incident response information are missing. The absence of WHOIS data limits domain trust verification, but the overall business credibility and professional web presence suggest legitimacy. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving accessibility compliance.

T

Test-Pneumatik.cz

test-pneumatik.cz

58

Test-Pneumatik.cz is a specialized Czech online portal dedicated to aggregating thousands of tire reviews and expert test results, primarily from ADAC and AutoBild. It serves as a comprehensive resource for drivers seeking detailed information on summer, winter, and all-season tires, including user-generated reviews and ratings. The site targets Czech-speaking vehicle owners and enthusiasts, providing search capabilities by vehicle, tire size, and manufacturer. The business model appears to be content-driven with monetization likely through advertising and affiliate partnerships. The website demonstrates consistent branding and a good level of content quality, supported by structured data and social media presence. Technically, the site employs a modern JavaScript stack including jQuery, Facebook SDK, Google Tag Manager, Microsoft Clarity, and Smartlook for analytics and user behavior tracking. The site is mobile-optimized with good SEO practices and moderate performance. However, there is room for improvement in accessibility and security headers implementation. HTTPS is enforced, ensuring secure communication. From a security perspective, the site shows a solid posture with no visible vulnerabilities or exposed sensitive data. The use of multiple tracking and advertising scripts indicates extensive user data collection, but privacy compliance is basic with a cookie policy present but lacking explicit consent mechanisms. No terms of service or security policy pages were found, and no direct contact information is provided, which may impact user trust. WHOIS data is unavailable, likely due to privacy protection, but the site’s content and external signals suggest legitimacy. Overall, Test-Pneumatik.cz is a credible and useful resource within its niche, with a good balance of content and technical implementation. Strategic improvements in privacy compliance, security headers, and transparency of business contact information would enhance trust and security posture.

Č

České povlečení

ceskepovleceni.cz

45

Českepovleceni.cz is a Czech Republic-based e-commerce retailer specializing in high-quality bedding, bed linens, and home textile products primarily sourced from Czech manufacturers. The website targets domestic customers seeking quality local products with options for custom sizes and a physical store presence in Hořice. The business model focuses on direct online sales complemented by a brick-and-mortar store, emphasizing trust and customer service. The site is professionally designed with clear navigation and product categorization, supporting a positive user experience.

A

Armik.cz: Armyshop a outdoor

armik.cz

47

Armik.cz is a Czech Republic based e-commerce retailer specializing in military, outdoor, survival, and sporting goods. The website offers a wide range of products including clothing, tactical gear, and accessories, targeting outdoor enthusiasts and military gear consumers. The business has been operating since 2008, indicating a stable market presence. Technically, the site uses a proprietary e-commerce platform with modern JavaScript integrations including Google Tag Manager and Google Analytics, supporting marketing and analytics efforts. The site is mobile optimized and provides a good user experience with clear navigation and product categorization. Security posture is adequate with HTTPS enabled and asynchronous script loading, but lacks visible security headers and explicit privacy or cookie policies, which are compliance gaps. No direct contact emails or phone numbers were found in the analyzed content, limiting direct customer support visibility. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

E

Ebbot

ebbot.com

71

Ebbot is a technology company specializing in Agentic AI for customer service automation. Their platform offers AI agents that automate repetitive support tasks, live chat solutions with AI assistance, and an API for integrating AI into existing workflows. The company targets multiple industries including telecom, e-commerce, financial services, energy, public sector, travel, housing, and education. The website is professionally designed, mobile-optimized, and uses modern web technologies such as Webflow, GSAP, and Lottie animations. Security posture is strong, evidenced by HTTPS enforcement and ISO 27001 certification, although explicit privacy and cookie policies are not found on the main site. WHOIS data is unavailable, which reduces domain trust but the overall business presence and security certifications support legitimacy.

C

CZ.BASKETBALL

cbf.cz

50

CZ.BASKETBALL is a well-established Czech basketball portal founded in 2009, serving as a central hub for basketball news, videos, competitions, and community engagement in the Czech Republic. The website targets basketball fans, players, coaches, and officials, providing comprehensive coverage of national teams, leagues, and events. It maintains strong partnerships with official basketball organizations and sponsors, enhancing its market position as a leading basketball information source in the region. Technically, the site uses modern web technologies including Google Tag Manager and Google Analytics, with good mobile optimization and a custom CMS platform. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are lacking. Privacy compliance is basic, with no clear privacy policy or terms of service pages found. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve transparency and security documentation.

J

JDC Entwine

jdcentwine.org

62

JDC Entwine is a non-profit organization focused on building a generation of young Jews who lead with global Jewish responsibility. The website highlights travel programs, leadership fellowships, community engagement, and educational toolkits aimed at young Jewish audiences worldwide. The organization is affiliated with the American Jewish Joint Distribution Committee (JDC), which serves as its parent entity. The website is professionally designed using WordPress and the Divi theme, incorporating modern web technologies and plugins to enhance user experience and functionality. It includes integrations with Google Analytics and Hotjar for user behavior tracking and Mailchimp for newsletter management. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks explicit security headers and cookie consent mechanisms, which are recommended for improved compliance and protection. The WHOIS data is unavailable or privacy protected, which is common for non-profits, but the website's branding and external references support its legitimacy. Overall, the site is safe, well-structured, and serves its target audience effectively, though improvements in security headers and privacy compliance would enhance trust and resilience.

M

Megazone France

megazone.fr

42

Megazone France is a leading French company specializing in the supply and installation of laser game equipment and arenas for professional leisure establishments. The company positions itself as the market leader in France with over 135 active centers equipped in 2025. Their offerings include hardware, software, arena design, and customizable solutions tailored to client needs. The website is professionally designed, bilingual (French and Spanish), and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with Elementor and uses modern performance and tracking tools such as WP Rocket and Google Analytics. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit privacy policies are missing. WHOIS data is unavailable, which slightly reduces trust but does not outweigh the professional presentation and business legitimacy. Overall, the site is a credible B2B platform serving the leisure and entertainment sector in France.

D

DECO – Associação Portuguesa para a Defesa do Consumidor

deco.pt

51

DECO is a prominent Portuguese non-profit association dedicated to consumer protection, advocacy, and education. The website reflects a mature digital presence with comprehensive content targeting Portuguese consumers and stakeholders interested in consumer rights, energy, and financial protection. The organization maintains a strong market position as a trusted authority in consumer defense, supported by clear branding and consistent messaging. Technically, the site is built on WordPress with a modern plugin ecosystem, including event management and user engagement tools, and integrates Google Analytics and Site Kit for performance monitoring. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and user interaction safeguards such as reCAPTCHA and exit notifications. No critical vulnerabilities or compliance gaps were detected, indicating a well-maintained and secure platform. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and related privacy regulations.

M

Município de Cinfães

cm-cinfaes.pt

45

The website https://cm-cinfaes.pt/ serves as the official digital presence of the Município de Cinfães, a municipal government entity in Portugal. It provides comprehensive information about local governance, citizen services, events, and cultural activities, targeting residents and visitors. The site is well-structured with a focus on accessibility and transparency, including GDPR-compliant privacy and cookie policies. The business model is public sector focused, delivering municipal services and information digitally. Technically, the website is built on Joomla CMS with Yootheme Pro and UIkit frameworks, leveraging modern web technologies such as jQuery and Google Analytics for user insights. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS, includes multiple security headers, and uses nonce attributes to mitigate script injection risks. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not published, which could be improved to enhance trust and readiness. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing a formal security policy, adding incident response contact details, and considering a vulnerability disclosure policy to further strengthen security posture and transparency.

S

SYNOT TIP, a.s.

synottip.sk

66

SYNOT TIP, a.s. operates a professional online sports betting and gaming platform primarily targeting Slovak customers. The website offers a variety of betting options including live bets, virtual games, and promotions, positioning itself as a leading player in the Slovak market. The company branding is consistent and the site content is relevant and professionally presented. Technically, the site uses a modern tech stack including ASP.NET, jQuery, and integrates third-party services such as Google Analytics, Hotjar, Zendesk, and Cookiebot for analytics, customer support, and privacy compliance. Security posture is solid with HTTPS enforced, anti-CSRF protections, and bot detection mechanisms in place. However, explicit security policies and incident response contacts are not published, and no terms of service page was found. Overall, the site is trustworthy and compliant with GDPR, with a comprehensive cookie consent mechanism. The domain WHOIS data aligns well with the business claims, reinforcing legitimacy.

U

UITP Summit

uitpsummit.org

63

UITP Summit is a prominent event organizer specializing in public transport sector events, with the 2026 summit scheduled in Dubai. The website serves as a comprehensive platform for event information, including exhibition, congress, networking, sponsorship, and exhibitor opportunities. The site targets professionals and stakeholders in the public transport industry, offering a well-structured and professionally designed user experience. Technically, the website is built on WordPress with modern SEO and analytics tools integrated, including Yoast SEO, Google Analytics, and CookieYes for consent management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates a mature digital presence aligned with its business goals.

S

Start Driving

startdriving.cz

54

Start Driving is a Czech Republic-based educational project focused on enhancing the knowledge, responsibility, and driving skills of novice drivers. Supported by the Association of Driving Schools of the Czech Republic and other partners including government bodies, the project offers free advanced driver training and educational activities for young drivers, driving instructors, and responsible parents. The website reflects a well-structured initiative with strong institutional backing and a clear mission to improve road safety through education. Technically, the website is built on WordPress and integrates modern tools such as Google Tag Manager, Google Analytics, and YouTube embeds. It implements a cookie consent mechanism compliant with GDPR requirements, although a dedicated privacy policy page is not clearly found. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some security headers are missing, and the Google Maps API key is exposed in the source code, which should be reviewed for restrictions. From a security perspective, the site uses HTTPS and has no visible critical vulnerabilities or exposed sensitive data. The cookie consent mechanism and partner trust signals enhance its compliance posture. The absence of WHOIS registrant data limits domain trust assessment but does not detract significantly from the overall legitimacy given the project's nature and partnerships. Overall, Start Driving presents a credible, well-supported educational platform with moderate technical maturity and good security practices. Strategic improvements in privacy policy transparency and security header implementation are recommended to enhance compliance and trust further.

B

B interactive

binteractive.cz

61

B interactive is a Czech-based creative studio specializing in web development, graphic design, and hosting services, operating since 2013. The company targets businesses and organizations seeking professional web and graphic solutions, positioning itself as a quality-focused local service provider. Their website reflects a consistent brand and offers clear navigation and relevant content to their audience. Technically, the site uses common web technologies such as jQuery, Slick Carousel, Google Analytics, and Google Tag Manager, hosted under Czech domain registrars and name servers. Mobile optimization and SEO practices are adequately implemented, though accessibility features are basic. Security posture is moderate with cookie consent mechanisms in place, but lacks explicit security headers and incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR through its privacy and cookie policies.

R

Ráj aut

rajaut.cz

53

Ráj aut is a Czech Republic based online automotive classifieds platform specializing in car advertisements, sales, and bazaar listings. The website offers a comprehensive search and filter system for vehicles, targeting car buyers and sellers primarily within the Czech market. It maintains a moderate market position with partnerships to related automotive sites and services. Technically, the site uses standard web technologies including Google Analytics, Google Tag Manager, Google Adsense, and Adform for advertising and tracking. The site is served over HTTPS, ensuring secure data transmission, but lacks some advanced security headers and has only basic mobile optimization. Privacy and cookie policies are present but could be more explicit and comprehensive. No WHOIS data was retrievable, which slightly impacts trustworthiness but the site content and business presence indicate legitimate operation. Overall, the website is functional, moderately secure, and serves its niche audience effectively.

R

Ráj veteránů

rajveteranu.cz

55

Ráj veteránů is a specialized online classifieds platform focused on vintage and classic vehicles primarily serving the Czech Republic market. The website offers a comprehensive vehicle listing service with detailed search filters, partner promotions, and community engagement through a Facebook group. The business operates as a niche marketplace catering to classic car enthusiasts and sellers, with a business model centered on advertising and listing fees. Technically, the site employs modern web technologies including Google Fonts, Google Analytics, and Adform for advertising and tracking, with HTTPS and security headers implemented to ensure secure user interactions. Privacy compliance is addressed with cookie consent mechanisms and a privacy policy, though direct contact information is limited to a contact form. The absence of WHOIS data limits domain trust assessment, but the website's professional presentation and active content suggest legitimacy. Overall, the site demonstrates a good balance of content quality, technical implementation, and security posture, making it a reliable resource for its target audience.

S

Sportovní vozy

sportovnivozy.cz

55

Sportovní vozy is a Czech online platform specializing in the listing and sale of sports cars. It offers classified ads, dealer catalogs, automotive news, and advertising opportunities primarily targeting car enthusiasts and buyers in the Czech Republic and Slovakia. The website has been active since at least 2007, indicating a stable presence in its niche market. The business model revolves around providing a marketplace for sports car sales and monetizing through advertising and partnerships. Technically, the website employs common web technologies including Google Analytics, Google Tag Manager, Google Adsense, and Adform for advertising and tracking. The site uses HTTPS and Google Fonts, but lacks advanced security headers and explicit privacy or terms of service pages. Mobile optimization and accessibility are basic, with room for improvement. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR principles. However, the absence of WHOIS registrant data and missing security headers reduce trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. The site uses extensive user tracking through third-party analytics and advertising services. Overall, the website is functional and professionally designed for its target audience but would benefit from enhanced security practices, clearer privacy disclosures, and improved contact transparency. The domain's WHOIS data is unavailable, which slightly impacts the trust score but does not negate the site's legitimacy based on content and longevity.

T

TECHNOLOGY - GARAGE spol. s r.o.

technology-garage.cz

73

TECHNOLOGY - GARAGE spol. s r.o. is a Czech Republic based company specializing in professional equipment and machinery for automotive service centers, tire services, industrial workshops, and the energy sector. Established since 1995, the company offers a broad catalog of products including lifts, compressors, diagnostic tools, and safety equipment, positioning itself as a trusted supplier in its niche markets. The website reflects a mature business with a clear focus on B2B customers in automotive and energy industries. The technical infrastructure of the website is built on a proprietary or custom e-commerce platform (wpj.cz), utilizing modern web technologies such as JavaScript, CSS, Google Tag Manager, Google Analytics, and Sentry for error monitoring. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be improved. Performance is moderate, and the site uses HTTPS with a good SSL configuration. From a security perspective, the website employs HTTPS and error monitoring but lacks some important security headers and explicit privacy and security policies. Cookie consent mechanisms are implemented, indicating some level of privacy compliance, but no dedicated privacy or terms of service pages were found. The absence of WHOIS data for the domain reduces trust in the domain registration legitimacy, though the website content and business presence suggest a legitimate operation. Overall, the website presents a professional and trustworthy business front with room for improvement in security best practices and privacy transparency. The risk level is moderate, primarily due to missing domain registration data and incomplete privacy documentation.

E

EasyStore

easystore.co

68

EasyStore is a technology company specializing in providing a unified customer experience platform for retailers and e-commerce merchants. Their platform integrates online stores, point of sale systems, marketplaces, live selling, payment gateways, and customer engagement tools to create seamless shopping journeys across multiple channels. The company targets retailers and brands seeking to unify their customer interactions and enhance loyalty through technology. Technically, the website is built with modern JavaScript frameworks and integrates multiple analytics and marketing tools, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS, CSRF tokens, and no visible vulnerabilities, though explicit security policies and headers could be improved. The absence of WHOIS data is due to privacy protection, which is justified for this business type. Overall, EasyStore presents a professional, trustworthy, and technologically advanced platform with a strong market presence.

Jumpseller is an established e-commerce platform founded in 2012, offering a SaaS online store builder targeted at fast-growing businesses and entrepreneurs. The platform supports multiple languages and countries, positioning itself as a versatile solution for online retail. The website presents a professional and consistent brand image with clear business descriptions and a 14-day free trial offer, indicating a customer-focused approach. Technically, the website employs modern front-end technologies including Bootstrap, FontAwesome, and Google Fonts, alongside robust analytics and marketing tools such as Google Analytics, Microsoft Clarity, Mixpanel, Facebook Pixel, and Visual Website Optimizer. Hosting appears to be on AWS infrastructure, ensuring scalability and reliability. The site is mobile-optimized and SEO-friendly, with good performance metrics. From a security perspective, the site uses HTTPS and implements reCAPTCHA v3 for bot mitigation. However, DNSSEC is not enabled, and no explicit security headers were detected in the provided data. There is no published security policy or incident response information, which could be improved to enhance trust. Privacy and cookie policies are not explicitly found, though a consent mechanism is implied. Overall, Jumpseller demonstrates a solid business and technical foundation with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

U

UC AB

uc.se

73

UC AB is Sweden's leading business and credit information company, providing comprehensive credit reports, risk assessments, and related services to both businesses and private individuals. The company operates under the parent group Enento and offers a wide range of services including corporate and personal credit information, ID protection, and credit scoring. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to its target audience in Sweden. Technically, the site uses modern web technologies such as Episerver CMS, Google Tag Manager, and cookie consent management tools, ensuring good performance and compliance with privacy regulations. Security posture is strong with HTTPS enforced and ISO certifications (9001 and 27701) indicating a commitment to quality and privacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, UC AB demonstrates a high level of business credibility and digital maturity, with clear trust signals and compliance adherence.

A

Autoškolský ombudsman

autoskolsky-ombudsman.cz

50

The website 'Autoškolský ombudsman' serves as an independent advisory and mediation portal focused on driving schools and related stakeholders in the Czech Republic. It is a joint project of two professional associations representing driving schools, providing free expert advice, mediation services, and legislative input collection. The site targets driving school students, instructors, examiners, and operators, positioning itself as a niche expert resource within the transportation and education sectors. The business model is non-profit, funded initially by sponsorships and planned contributions from driving schools. Technically, the site employs a modern but basic technology stack including Bootstrap, jQuery, and Google Analytics. The design is professional and mobile-optimized with clear navigation and consistent branding. However, the site lacks advanced accessibility features and comprehensive SEO optimization. No CMS or hosting provider details were detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal privacy or cookie policies. No incident response or security contact information is provided. The absence of WHOIS data for the domain reduces trustworthiness, although the site content and partner affiliations support legitimacy. Tracking via Google Analytics is present, but privacy compliance is minimal. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance, and domain registration transparency to improve trust and compliance posture.

S

SPŠ stavební Liberec

stavlib.cz

41

SPŠ stavební Liberec is a vocational secondary school specializing in construction and geodesy education located in the Czech Republic. The website serves as an information portal for prospective students, current students, and other stakeholders, offering detailed course information, news, and resources. The institution positions itself as a reputable regional educational provider with a focus on practical training and career readiness in prestigious technical fields. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and social media integrations, reflecting a mature digital presence. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the website content and social media presence support legitimacy. Overall, the site is professional, content-rich, and compliant with GDPR, making it a trustworthy source for its audience.

R

Região de Turismo do Algarve

visitalgarve.pt

57

VisitAlgarve.pt is the official tourism portal for the Algarve region in Portugal, providing comprehensive information about the region's attractions, events, and travel services. The website serves as a key marketing platform to promote Algarve as a premier holiday destination in Europe, targeting tourists and travel professionals. It offers event promotion, corporate and convention services, and travel trade support, positioning itself as a leading regional tourism authority. Technically, the site is built on modern web technologies including React and integrates Google services for analytics and translation, reflecting a moderate to good level of digital maturity. The website is mobile optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates a solid security posture with room for improvement in security best practices and incident response readiness. The domain registration data aligns well with the website's regional tourism focus, indicating high legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility compliance to further strengthen the site's security and compliance posture.

C

Cáritas Portuguesa

caritas.pt

38

Cáritas Portuguesa is a well-established non-profit organization in Portugal focused on social intervention, institutional development, international projects, and community support. The website serves as a platform to communicate their mission, programs, and opportunities for collaboration such as volunteering and donations. The organization maintains a consistent brand presence with active social media links and a professional website design. Technically, the site is built on WordPress with popular plugins like WooCommerce and BuddyPress, indicating a mature digital infrastructure. The site is mobile optimized and includes SEO best practices via Yoast SEO. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. No critical vulnerabilities or blocking mechanisms were detected, and the site content is safe for general audiences. Overall, the website reflects a credible and professional non-profit entity with moderate to good technical and security maturity.

G

Good Sailors s.r.o.

ceskeparky.cz

58

The website ceskeparky.cz operates as an e-commerce platform focused on selling souvenirs that support Czech national parks and ecological projects. The business is run by Good Sailors s.r.o. and collaborates with national parks and environmental organizations, including endorsement by the Czech Ministry of Environment. The platform targets eco-conscious consumers and visitors to Czech natural reserves, offering products such as clothing, books, and accessories with nature-inspired motifs. The business model integrates charitable contributions from sales proceeds to support conservation efforts. Technically, the website is built on the Shoptet e-commerce platform, utilizing technologies such as jQuery 1.11.3, Google Analytics, and Facebook SDK for tracking and marketing. The site is mobile-optimized, accessible, and SEO-friendly with proper metadata and structured content. Performance is moderate, with room for improvement in updating legacy libraries. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, with a cookie consent mechanism compliant with GDPR. However, no explicit security headers were detected, and the WHOIS data is missing, which reduces transparency and trust. No vulnerabilities or malware were found, and the site maintains a good security posture overall. Overall, the website presents a professional and trustworthy front for a niche retail business with a strong social and environmental mission. Strategic improvements in security headers, WHOIS transparency, and technology updates would enhance its security and credibility further.

Elasticbox.eu is a Slovenian-based cloud and open source service provider operating since 2015 under the brand Agenda Open Systems. The company offers a range of cloud infrastructure (IaaS), platform (PaaS), and software (SaaS) services including virtual servers, OpenStack cloud, virtualization, and enterprise applications such as Alfresco and Zimbra. Their target audience includes businesses and organizations seeking reliable cloud and open source IT solutions. The website is built on WordPress with modern plugins and demonstrates moderate digital maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks published privacy policies, terms of service, and advanced security headers. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

E

Ergomotion® Plus

ergomotionplus.com

71

Ergomotion® Plus operates an e-commerce platform specializing in smart beds designed to improve sleep quality and health. The website targets consumers interested in advanced sleep solutions, offering a range of smart beds through a Shopify-based online store. The business positions itself in a niche market with a focus on comfort and health benefits, leveraging multilingual support to cater to European markets. The company employs modern marketing and analytics tools such as Google Analytics, Facebook Pixel, Hotjar, and Trustpilot to enhance customer engagement and trust. Technically, the website is built on the Shopify platform using the Dawn theme, ensuring a responsive and user-friendly experience across devices. The infrastructure includes integrations with multiple third-party services for marketing, analytics, and cookie consent management. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are well implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and uses CAPTCHA on forms, indicating a baseline security posture. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no published security or incident response policies are available. The absence of WHOIS registration data raises concerns about domain legitimacy and transparency, which impacts overall trustworthiness. Overall, Ergomotion® Plus presents a professional and functional e-commerce presence with good privacy compliance and marketing sophistication. The main risks relate to domain registration opacity and limited published security policies. Strategic improvements in security transparency and direct contact information would enhance trust and compliance.

Český červený kříž is a well-established national non-profit humanitarian organization in the Czech Republic focused on providing first aid training, blood donation services, social activities, and humanitarian aid. The website serves as an official portal offering comprehensive information, news, event planning, and educational resources targeted at the general public, donors, volunteers, and partner institutions. The organization maintains a strong market position as a trusted entity in the humanitarian sector with a large operational scale. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and integrates Google Analytics and Facebook Pixel for user tracking and marketing. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers are lacking and no explicit security or incident response policies are published. WHOIS data is not publicly available due to EURid privacy policies, but the website content and branding strongly support legitimacy. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

Silnice LK a.s.

silnicelk.cz

50

Silnice LK a.s. is a regional transportation service company specializing in the maintenance and upkeep of roads, greenery, and related infrastructure within the Liberecký kraj region of the Czech Republic. The company provides essential services including summer and winter road maintenance, vegetation management, and repair of road components, positioning itself as a key regional player in transportation infrastructure services. The website reflects a professional and consistent brand image, targeting local government entities, residents, and road users in the region. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, jQuery, and Bootstrap, hosted likely within the Czech Republic under a reputable registrar. The site uses Insite CMS, supports mobile optimization, and implements cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and employs cookie consent with default denial of storage, indicating a privacy-conscious approach. However, it lacks explicit security headers and published incident response or vulnerability disclosure policies. No vulnerabilities or exposed sensitive data were detected, and the WHOIS data is consistent and legitimate, supporting trustworthiness. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements include enhancing security headers, publishing security and incident response policies, and expanding accessibility features to further strengthen the security posture and user trust.

A

Autoškola Jiří Novotný

novotny-autoskola.cz

41

Autoškola Jiří Novotný is a small regional driving school based in Železný Brod, Czech Republic, specializing in comprehensive driver training for all license categories including motorcycles and tractors. The company holds a unique market position in its region by offering a broad range of driver education services and cooperating with the Czech Labor Office for retraining programs. The website reflects a service-oriented business model targeting individuals seeking driver licenses in the local area. Technically, the website uses legacy JavaScript libraries and a CMS platform called WebMaker System, with moderate performance and basic mobile optimization. Security posture is moderate but could be improved by updating libraries and implementing security headers. Privacy compliance is weak due to missing policies and consent mechanisms. Overall, the site is functional and professional but would benefit from modernization and enhanced security and privacy practices.

A

Asociace autoškol ČR, z.s.

asociaceautoskol.cz

47

Asociace autoškol ČR, z.s. is a Czech non-profit association dedicated to improving the quality and standards of driving schools and driver education in the Czech Republic. The organization provides educational seminars, develops innovative testing materials including hazard perception videos, and offers support services such as an ombudsman for driving schools and students. It maintains partnerships with government bodies and safety organizations, positioning itself as a key stakeholder in national driver education and road safety. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Google services such as reCAPTCHA v3 and Google Analytics. The site is mobile-optimized with a good user experience and clear navigation. Cookie consent mechanisms are implemented, reflecting awareness of privacy compliance requirements, although a formal privacy policy page is not found. From a security perspective, the site uses HTTPS and bot protection but lacks visible security headers and formal security policies. No critical vulnerabilities were detected in the content or scripts. The absence of WHOIS data reduces transparency and slightly impacts trustworthiness, but the professional presentation and official contact information mitigate concerns. Overall, the website is a credible and professional platform supporting a non-profit association with a clear mission in driver education. Strategic improvements in privacy documentation, security headers, and WHOIS transparency would enhance trust and compliance.

M

MSC Abensberg e.V.

msc-abensberg.de

51

MSC Abensberg e.V. is a well-established motorsport club based in Abensberg, Germany, with a rich history dating back to 1928. The club specializes in speedway racing and hosts significant international events such as the FIM Speedway Grand Prix Qualifying rounds. It also emphasizes youth development and community engagement, serving over 500 members. The website reflects a professional and consistent brand image, providing comprehensive event information, news updates, and membership details. Technical infrastructure includes modern web technologies, integration of Google Maps for location services, and Google Analytics for visitor tracking, complemented by a GDPR-compliant cookie consent mechanism. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and explicit security policies. Overall, the site is user-friendly, mobile-optimized, and trustworthy, supporting the club's community and promotional goals effectively.