Security Directory

Z

ZOOKEE s.r.o.

sensor.cz

69

Sensor.cz is a Czech-based e-commerce business specializing in functional sportswear made with high-quality materials, including merino wool. The company emphasizes local production in the Czech Republic and targets active individuals seeking performance and comfort in sports clothing. The website is professionally designed, mobile-optimized, and provides comprehensive information about products, materials, and company story. It integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Seznam Retargeting, with a clear cookie consent mechanism ensuring GDPR compliance. Security posture is good with HTTPS and error monitoring via Sentry, though explicit security headers could be improved. The absence of WHOIS data is a minor concern but does not detract significantly from the site's credibility given the professional presentation and business information available. Overall, the site represents a mature digital presence for a medium-sized retail company in the Czech market.

T

TRANSALPINUS s.r.o.

katadyn.cz

56

TRANSALPINUS s.r.o. operates the website bezpecnavoda.cz as a distributor of KATADYN water filtration and purification products. The company targets travelers, outdoor enthusiasts, humanitarian organizations, and military units by providing high-quality portable water filters, chemical disinfectants, UV purifiers, and desalination devices. The website reflects a professional retail business model with a focus on safe water solutions for travel and outdoor activities. The company is based in the Czech Republic and provides clear contact and company registration information, enhancing business credibility. Technically, the website is built on the Webnode CMS platform and hosted via AWS Cloudfront CDN, ensuring good performance and mobile optimization. It uses modern web technologies including JavaScript and CSS, and integrates Google Tag Manager for analytics. However, the site lacks visible privacy and cookie policies, security headers, and incident response information, which are areas for improvement in compliance and security posture. Security-wise, the site enforces HTTPS and does not expose sensitive data, but the absence of security headers and vulnerability disclosure mechanisms limits its security maturity. The WHOIS data is unavailable, which reduces trust in domain registration transparency, though the website content and company information support legitimacy. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy compliance and security best practices. Strategically, the company should prioritize publishing comprehensive privacy and cookie policies, implement security headers, and provide clear incident response contacts. These steps will improve compliance with GDPR and enhance user trust. Additionally, publishing a security.txt file and improving accessibility features would further strengthen the website's security and usability profile.

H

Hannah eshop

hannah.cz

66

Hannah.cz is a well-established Czech e-commerce retailer specializing in outdoor clothing and equipment. The company operates both online and through 40 physical stores across the Czech Republic, targeting outdoor enthusiasts and active individuals. Their business model focuses on providing high-quality, functional outdoor products with a strong emphasis on customer engagement through a loyalty club and informative blog content. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization, reflecting a mature digital presence. Technically, the site leverages modern JavaScript frameworks, including Vue.js, and integrates advanced analytics and error monitoring tools such as Google Tag Manager and Sentry. The platform demonstrates good performance and accessibility standards, although some security headers could be more explicitly implemented. Privacy compliance is robust, with clear privacy and cookie policies and user consent mechanisms aligned with GDPR requirements. From a security perspective, the site enforces HTTPS and employs best practices in error monitoring and consent management. However, it lacks a publicly available security policy, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Overall, the domain registration data aligns well with the website's claims, supporting the legitimacy and trustworthiness of the business. Strategically, Hannah.cz should focus on formalizing its security policies and incident response information, enhancing transparency around data retention, and maintaining rigorous third-party script audits to sustain its strong market position and customer trust.

K

kalkulatori.lv

kalkulatori.lv

67

kalkulatori.lv is a Latvian online platform providing a wide range of calculators and utility tools focused on finance, mathematics, unit conversions, text processing, and other household needs. The website targets a general audience in Latvia and offers free access to its tools, monetized primarily through Google Adsense advertising. The platform maintains a consistent brand presence with a professional design and clear navigation, supporting multiple languages including Latvian, Russian, and English. Technically, the website is hosted on Amazon AWS infrastructure, uses modern web technologies including HTML5, CSS3, and JavaScript, and integrates Google services for analytics, advertising, and consent management. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some advanced security headers are not explicitly present. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies and incident response contacts suggests room for improvement in transparency and preparedness. Overall, kalkulatori.lv presents a trustworthy and professionally maintained online service with a solid technical foundation and good privacy compliance. Strategic enhancements in security policy publication and incident response readiness would further strengthen its security posture and user trust.

C

Kempy Chorvatsko

chorvatskokaravany.cz

40

Kempy Chorvatsko is a small informational website focused on providing tourists, primarily from Czech Republic and Slovakia, with detailed information about camping sites and accommodation options in Croatia. The site offers a comprehensive list of campsites, travel tips, and weather information to assist visitors in planning their holidays. The business model is informational, targeting a niche market of camping enthusiasts and travelers interested in Croatian destinations. Technically, the website uses basic web technologies including XHTML 1.0 Transitional, CSS, JavaScript, and jQuery, with a simple design and moderate performance. Mobile optimization and accessibility are basic, and SEO practices are minimal but present. Security posture is weak due to lack of HTTPS information, absence of security headers, and missing privacy and cookie policies. No contact or incident response information is provided, and WHOIS data is unavailable, which raises concerns about domain legitimacy and transparency. Overall, the site is functional and content-rich but requires significant improvements in security, privacy compliance, and trust signals to enhance credibility and user confidence.

K

Kempy Chorvatsko

kempychorvatsko.cz

40

Kempy Chorvatsko is a Czech informational website focused on providing detailed listings and information about camping sites in Croatia. The site targets Czech and Slovak tourists interested in camping vacations, offering a comprehensive table of campsites by location and name. The business model appears to be informational with potential monetization through affiliate links and advertising partnerships with related Croatian accommodation sites. Technically, the site uses basic XHTML 1.0 Transitional markup, jQuery, and CSS, hosted on HostMonster with domain registration via REG-WEDOS. The site lacks modern security features such as HTTPS and security headers, and does not provide privacy or cookie policies, indicating compliance gaps. No contact information or incident response channels are provided, limiting user trust and support options. Overall, the site is functional with good content relevance but requires significant improvements in security and privacy compliance to meet modern standards.

The website www.korutany.org is a small-scale WordPress-based travel information portal focused on the Austrian region of Carinthia (Korutany). It provides content about vacation opportunities, accommodation, and local attractions, targeting tourists interested in winter and summer holidays in this region. The site leverages affiliate marketing for accommodation bookings and offers multilingual support via GTranslate. Technically, the site uses WordPress 6.8.2 with standard web technologies but lacks advanced performance and accessibility optimizations. Security posture is basic with HTTPS enabled but no advanced security headers or policies detected. The absence of privacy, cookie, and terms of service policies, along with missing contact information, reduces compliance and trustworthiness. WHOIS data is unavailable or malformed, limiting domain legitimacy verification. Overall, the site is functional for its niche but requires improvements in security, privacy compliance, and business transparency.

The website predpoved-pocasi.com is a Czech language weather forecast portal providing current and long-term weather predictions primarily for the Czech Republic. It offers weather information for cities such as Prague and Brno, integrates third-party weather widgets, and displays weather-related news. The business model relies on advertising revenue, mainly through Google Adsense. The site has been operational since 2009, indicating a stable presence in its niche market. Technically, the website uses standard web technologies including HTML, CSS, and JavaScript, with integration of Google Adsense and weatherwidget.io scripts. Hosting is provided via HostMonster as indicated by the nameservers. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. There is no CMS or modern web framework detected. From a security perspective, the site lacks DNSSEC, security headers, and serves some ad scripts over HTTP, which introduces mixed content risks. No privacy, cookie, or terms of service policies are present, indicating poor privacy compliance. No contact information or incident response channels are provided, limiting transparency and user trust. The domain is well aged and registered with a reputable registrar, supporting legitimacy. Overall, the website is functional and provides relevant weather content but requires improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user experience.

The website czechkrumlov.com serves as a comprehensive travel guide focused on Cesky Krumlov, a historic town in the Czech Republic. It provides detailed information about the town's history, attractions, dining options, transportation, and practical visitor tips. The site targets tourists and travelers interested in exploring this UNESCO World Heritage site. The business model appears to be informational with revenue generated through advertising and affiliate marketing. The website has been active since 2008, indicating a stable presence in its niche. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Vegas.js for slideshow effects. Hosting is provided by HostMonster, as indicated by the nameservers. The site performance is moderate with basic mobile optimization and accessibility features. SEO is adequately addressed with proper meta tags and structured content. From a security perspective, the site lacks advanced security headers and DNSSEC is not enabled, which are areas for improvement. There is no visible HTTPS enforcement information, and no privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. No contact information or incident response channels are provided, limiting transparency and trust. Overall, the website is functional and informative but would benefit from enhanced security measures, privacy compliance, and clearer business contact information to improve trustworthiness and user confidence.

S

SIA Sandra Dzerele un partneris

dzerele.lv

54

SIA Sandra Dzerele un partneris is a licensed sworn auditor company based in Latvia, providing audit, accounting, legal, valuation, personal data protection, and consulting services primarily to businesses operating or planning to start in Latvia. The website is built on the Wix platform and uses common web analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. The site is professionally designed with good navigation and mobile optimization, targeting Latvian-speaking business clients. However, it lacks explicit privacy and cookie policies, which impacts GDPR compliance. Security posture is solid with HTTPS and security headers properly configured, but incident response contact details are missing. Overall, the website reflects a legitimate and professional business presence with room for improvement in privacy compliance and security transparency.

S

SC MARIMEX KOLÍN

scmarimexkolin.cz

45

SC Marimex Kolín is a Czech ice hockey club competing in the 1st league (Maxa liga). Their official website provides comprehensive information about the team, including news updates, match schedules, ticket sales, and fan engagement through social media. The site targets local sports fans and community members interested in ice hockey. The business model revolves around sports entertainment, merchandising, and community engagement. Technically, the website uses modern web technologies such as Bootstrap 5, jQuery, and Swiper.js for UI components and interactivity. It integrates Google Fonts, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and features a cookie consent mechanism compliant with GDPR principles, although a dedicated privacy policy page is missing. From a security perspective, the site enforces HTTPS and uses cookie consent banners to manage user privacy preferences. However, no advanced security headers were detected, and there is no published security or incident response policy. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, though the website content and social media presence support its legitimacy. Overall, the website is professionally designed and functional but would benefit from enhanced privacy disclosures, security policies, and domain registration transparency to improve trust and compliance.

S

SK Horácká Slavia Třebíč

hstrebic.cz

44

SK Horácká Slavia Třebíč is a well-established Czech ice hockey club with a strong regional presence and a history dating back to 1928. Their official website serves as a comprehensive portal for fans and stakeholders, offering news, schedules, multimedia content, and fan engagement features. The site is professionally designed with consistent branding and good mobile optimization, targeting primarily ice hockey enthusiasts in the Czech Republic. Technically, the website uses standard web technologies including jQuery, Bootstrap, and Slick Carousel, hosted by a Czech registrar REG-ZONER. While the site includes cookie consent mechanisms and analytics tracking, it lacks explicit privacy policies, terms of service, and direct contact information, which are areas for improvement. Security posture is moderate with no detected WAF or blocking, but missing security headers and unclear SSL configuration suggest room for enhancement. Overall, the domain registration data aligns well with the business, supporting legitimacy and trust.

VHK ROBE Vsetín is a well-established Czech ice hockey club with a strong regional presence and a comprehensive online platform serving fans and community members. The website provides detailed information about the team, schedules, ticket sales, fan shop, and youth development programs, reflecting a mature business model focused on sports entertainment and community engagement. Technically, the site uses a custom CMS with modern web technologies including JavaScript libraries, Google Fonts, and social media integrations, hosted by REG-ZONER. The site is mobile-optimized and offers good user experience with clear navigation and relevant content. Security posture is moderate; while HTTPS is implied and cookie consent mechanisms are implemented, explicit security headers and detailed security policies are absent. Analytics and tracking tools such as Google Analytics and Facebook Pixel are used with user consent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

The website dovolenachorvatsko.org is a Czech language travel portal focused on providing information and listings for affordable private accommodation in Croatia. It targets tourists interested in Croatian regions and promotes cultural, historical, and natural attractions. The business operates as a small niche informational platform with a focus on vacation rentals from private owners. Technically, the site uses basic HTML, CSS, and JavaScript with jQuery 1.6.1 and the Nivo Slider plugin. It is hosted on HostMonster servers. The site lacks modern security practices such as HTTPS enforcement and security headers, and it does not provide privacy or cookie policies, which impacts compliance and user trust. Google Analytics is used for tracking without visible consent mechanisms. The domain is privacy protected but long-standing since 2011, consistent with the business type. Overall, the site is functional but basic in design and security, with room for improvement in privacy compliance and technical modernization.

The website travelguide.sk is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, specifically an ASN block (error 1005). This prevents any meaningful content or business information from being retrieved or analyzed. The domain is well-established, registered since 2003, and uses DNSSEC with Cloudflare as its security and performance provider. However, the lack of accessible content means no privacy, cookie, or terms of service policies are visible, nor any contact or security policies. The technical infrastructure relies on Cloudflare services, but no CMS or additional frameworks are detectable. The security posture cannot be fully assessed due to the block, but the domain registration data is consistent and legitimate. Overall, the site is currently non-functional for external visitors from the blocked ASN, resulting in a very low AI score and limited insights.

H

HANS IM GLÜCK Franchise GmbH

hansimgluck.nl

59

Hans im Glück is a medium-sized hospitality franchise specializing in burger restaurants with a presence in the Netherlands and German-speaking countries. The website promotes fresh, high-quality burgers and related food and beverage offerings, targeting a general audience seeking casual dining experiences. The business model focuses on franchise operations with multiple locations and active recruitment for various restaurant roles. Technically, the website is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates GDPR-compliant consent management via Usercentrics. The site is mobile-optimized and includes social media marketing channels. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and aligned with the brand's market position.

O

Obec Smolenice

smolenice.com

67

Obec Smolenice operates an official municipal website serving residents, visitors, and local government stakeholders in Slovakia. The site provides comprehensive local news, event calendars, citizen engagement tools, and tourism information. It supports multiple languages and offers mobile applications for Android and iOS platforms, reflecting a moderate level of digital maturity. The technical infrastructure leverages modern JavaScript frameworks, Google reCAPTCHA for security, and cookie consent mechanisms to comply with privacy regulations. Security posture is strong with HTTPS enforcement and minimal vulnerabilities detected, though explicit security headers could be enhanced. Overall, the website is professional, trustworthy, and well-aligned with its public service mission.

S

SITA Slovenská tlačová agentúra

behame.sk

54

BEHAME.sk is a Slovak media portal specializing in running sports, providing news, event information, photo galleries, and video content. It is operated by SITA Slovenská tlačová agentúra, a reputable Slovak press agency, ensuring credible and consistent content for the Slovak running community. The website targets runners and sports enthusiasts primarily in Slovakia, offering a mix of news, health advice, and event calendars. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, and jQuery, with some legacy charset usage. The site is moderately optimized for performance and mobile devices, with good SEO practices and clear navigation. Security posture is adequate with HTTPS usage and cookie consent mechanisms, but lacks advanced security headers and explicit security policies. Privacy compliance is good with accessible privacy and cookie policies. No direct contact emails or phone numbers are found, which may limit direct user support. Overall, the site is trustworthy, professional, and safe for general audiences.

F

FNSHP.cz

fnshp.cz

71

FNSHP.cz operates as a specialized e-commerce platform offering official licensed merchandise primarily for Czech sports teams and organizations, including football, hockey, and e-sports. The website targets sports fans seeking authentic fan gear and sports equipment. It maintains a moderate market position as an official licensed merchandise provider with a consistent brand presence and customer trust signals such as verified reviews and secure payment options. Technically, the site leverages modern JavaScript frameworks, integrates multiple analytics and marketing tools, and uses a proprietary e-commerce platform (wpj.cz). The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS, uses Sentry for error tracking, and implements cookie consent mechanisms, but lacks some advanced security headers and explicit incident response policies. The absence of WHOIS data reduces domain trustworthiness, though the business appears legitimate based on content and licensing. Overall, the site scores well in content quality, technical implementation, and security posture, with room for improvement in transparency and security policy disclosures.

D

Dr.Max

drmax.sk

75

Dr.Max Slovakia operates a professional online pharmacy e-commerce platform offering over 25,000 products with a large customer base. The website demonstrates a mature digital presence with a modern tech stack including Magento backend and Nuxt.js frontend, supported by Cloudflare for security and performance. The site integrates multiple marketing and analytics tools such as Google Analytics, Hotjar, and Persoo personalization, reflecting a data-driven approach to customer engagement. Security posture is strong with HTTPS, security headers, and bot protection via Cloudflare Turnstile CAPTCHA. However, the absence of a public security policy, incident response contacts, and terms of service pages indicates areas for improvement in transparency and compliance. Overall, the website is well-structured, GDPR compliant with comprehensive cookie consent mechanisms, and safe for general audiences.

P

PhysioDOG

physiodog.cz

57

PhysioDOG is a specialized animal physiotherapy and rehabilitation center based in the Czech Republic, operating since 2008. The company is recognized as a pioneer in the field, led by an experienced founder with a strong professional team. Their services focus on neurological and orthopedic rehabilitation for small animals, including preventive care for sporting and elderly pets. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website is built on the Webnode CMS platform, leveraging AWS Cloudfront CDN for content delivery. It uses modern web technologies such as JavaScript and CSS, and is optimized for mobile devices with moderate performance. However, some technical improvements could be made in accessibility and SEO optimization. From a security perspective, the site enforces HTTPS but lacks several important security headers and formal security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a cookie consent mechanism present but no dedicated privacy or terms of service pages. WHOIS data is missing, which raises concerns about domain registration transparency. Overall, the website presents a trustworthy and professional business with room for improvement in security and compliance documentation. The lack of WHOIS data is a notable risk factor that should be addressed to enhance trustworthiness.

R

Rozběháme Česko

jdubehat.cz

46

Jdu běhat is a Czech Republic based project focused on providing running courses and training primarily for women. The website offers a variety of running courses for beginners and advanced runners, both in-person and online, supported by a community and professional trainers. The project is positioned as a specialized fitness and community initiative within the Czech market, leveraging multiple partner sites and social media channels to engage its audience. Technically, the website uses a custom CMS with AJAX and JavaScript components, integrates Google Analytics and Facebook Pixel for tracking, and enforces HTTPS with cookie consent mechanisms. Security posture is solid with no critical vulnerabilities detected, though security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable platform for its target audience.

R

Rozbeháme Slovensko | Bežecký svet

rozbehameslovensko.sk

47

Rozbeháme Slovensko is a Slovak community-oriented project focused on promoting healthy lifestyles through running and canicross activities. It organizes free running events, educational courses, and charity runs across Slovakia, targeting sports enthusiasts and the general public interested in fitness and social engagement. The website reflects a regional community project with consistent branding and cooperation with Czech partner projects. Technically, the site uses a custom CMS with modern JavaScript components, integrates Google Analytics and Facebook Pixel for tracking, and implements cookie consent mechanisms. The site is mobile responsive and well-structured, providing a good user experience. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is good with accessible privacy and cookie policies. Overall, the domain registration data aligns well with the website content, indicating legitimacy and consistency. The site is safe for general audiences and does not contain adult or explicit content.

B

BIKE FUN International s.r.o.

bikefunint.com

51

BIKE FUN International s.r.o. is a Czech Republic-based bicycle manufacturer specializing in a wide range of bicycles including mountain, trekking, road, children's, and electric bikes. The company operates multiple well-known bicycle brands and holds certifications such as AEO, indicating a reputable position in the manufacturing and transportation sectors. The website reflects a professional business with clear branding and relevant content targeted at cycling enthusiasts and retail partners. Technically, the website uses standard web technologies including HTML, CSS, JavaScript, and jQuery, with Cloudflare DNS and HTTPS ensuring basic security and performance. Google Analytics is used for visitor tracking, although no explicit cookie or privacy policies are present, which is a compliance gap. Security posture is generally good with HTTPS and no visible vulnerabilities, but the absence of DNSSEC and security headers suggests room for improvement. Overall, the website is trustworthy, well-structured, and serves its business purpose effectively.

L

Leskros | Závod Rozběháme Česko

leskros.cz

46

Leskros.cz is a Czech website dedicated to organizing and promoting a series of running events under the Rozběháme Česko project. The site targets runners and sports enthusiasts primarily in the Czech Republic, offering event registration, team challenges, charity runs, and running camps. The business operates as a small-scale event organizer with a niche focus on community sports activities. Technically, the website employs modern JavaScript frameworks, AJAX for dynamic content, and integrates Google Analytics and Facebook Pixel for tracking. The site is mobile-optimized and uses HTTPS for secure communications. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks visible advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy and cookie banner present in Czech language. Overall, the website is professionally maintained with consistent branding and partner relationships, though WHOIS data is unavailable, likely due to privacy protection. The site poses low risk and is safe for general audiences.

P

PassMachine

passmachine.eu

63

PassMachine is a technology company specializing in digital card solutions compatible with Apple Wallet and Google Wallet. The company offers a B2B SaaS platform that enables businesses to issue and manage various types of digital cards such as loyalty cards, membership cards, stamp cards, digital business cards, event tickets, and transport tickets. Their platform supports real-time notifications and segmented communication, positioning them as a global partner trusted by hundreds of companies worldwide. The website is professionally designed, multilingual, and optimized for mobile devices, reflecting a mature digital presence.

Les Deux Messieurs operates as a French bakery and café with physical locations in Munich and Wiesbaden, Germany. The business focuses on offering authentic French baked goods and café dining experiences, targeting customers who appreciate French culinary culture. The website is professionally designed, mobile-optimized, and includes strong accessibility features, enhancing user experience for diverse audiences. Technically, the site uses modern web technologies and HTTPS, ensuring secure communication. However, the absence of explicit privacy, cookie, and terms of service policies indicates gaps in compliance and transparency. Security posture is generally good, but could be improved by adding security headers and incident response contacts. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

M

Müller & Egerer Bäckerei und Konditorei GmbH

mueller-egerer.de

54

Müller & Egerer Bäckerei und Konditorei GmbH is a well-established regional bakery and café chain in Germany, operating since 1948 with over 70 branches primarily in northern Germany. The company offers a wide range of bakery products, confectionery, and café services, supported by customer loyalty programs and a mobile app. Their market position is strong locally, emphasizing tradition, quality, and sustainability. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and the Uikit framework, with progressive web app features and a service worker for enhanced user experience. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and cookie consent management implemented, though security headers and explicit security policies are absent. Privacy compliance is robust with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and safe for general audiences.

G

Groupe point chaud

pointchaud.be

38

Point Chaud is a Belgian bakery and quick-service food chain specializing in boulangerie, viennoiserie, pâtisserie, and sandwicherie products. The company operates multiple points of sale and offers franchise opportunities and a loyalty program, positioning itself as a recognized regional player in the retail food sector. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content about products, company values, and services. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and reCAPTCHA for security and marketing purposes. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. WHOIS data is restricted, limiting transparency but the website's contact details and social media presence support legitimacy. Overall, the site is trustworthy and well-maintained with room for security enhancements.

DECOLAB BY G. BENEDIKT GROUP is a specialized business offering high-quality digital printing on hard porcelain, positioning itself as an innovative player in the porcelain manufacturing industry. The website presents a professional and creative brand image focused on enabling customers to design their own porcelain collections using advanced digital printing technology. The technical infrastructure is based on the Pixieset platform, utilizing modern web technologies and tracking tools such as Google Tag Manager and Facebook Pixel. However, the absence of WHOIS data raises concerns about domain registration legitimacy. Security posture is moderate with HTTPS implied but lacks explicit security headers and policies. Privacy compliance is weak due to missing privacy and cookie policies, and no contact or incident response information is provided, which could impact trust and regulatory compliance. Overall, the website is functional and visually appealing but requires improvements in transparency, security, and compliance to enhance credibility and user trust.

D

Dynamicweb Inc.

dynamicweb.no

65

Dynamicweb Inc. operates a cloud-based all-in-one commerce suite integrating PIM, eCommerce, CMS, and marketing automation, targeting B2B, B2C, and D2C businesses. The company holds a strong market position with over 300 certified partners and deep integration with Microsoft Dynamics ERP systems. The website reflects a mature digital infrastructure with modern technologies such as MACH architecture and API-first design, ensuring scalability and flexibility. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response details are absent. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for performance and SEO.

D

Dynamicweb Inc.

dynamicweb.nl

63

Dynamicweb Inc. operates a mature and well-established eCommerce and content management platform, offering a unified Commerce Suite that integrates CMS, PIM, Digital Marketing, and eCommerce capabilities with Microsoft Dynamics ERP systems. The company targets B2B, B2C, and D2C businesses seeking scalable and composable commerce solutions. Their market position is strong, evidenced by industry recognition such as the Emerce 100 award. Technically, the website employs modern web standards, responsive design, and integrates marketing and analytics tools like HubSpot and Facebook Pixel, reflecting a high level of digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, with comprehensive legal documentation and a broad partner ecosystem.

D

Dynamicweb Inc.

dynamicweb.de

61

Dynamicweb Inc. operates a comprehensive cloud-based e-commerce platform that integrates Product Information Management (PIM), Content Management System (CMS), marketing automation, and e-commerce functionalities into a single suite. The platform is designed to support B2B, B2C, and D2C commerce models with strong standard integrations to Microsoft Dynamics ERP systems, positioning Dynamicweb as a significant player in the e-commerce technology sector, particularly in the German market. Their extensive partner network and focus on composable commerce demonstrate a mature business model aimed at scalable and flexible digital commerce solutions. Technically, the website employs modern web technologies including JavaScript frameworks, Bootstrap for responsive design, and HubSpot for marketing and analytics. The platform embraces MACH architecture principles and supports headless CMS implementations, indicating a forward-looking technical infrastructure. The site is well-optimized for mobile devices and accessibility, with good SEO practices evident from meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses standard security practices, though explicit security headers and policies are not fully documented in the HTML content. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. However, the absence of a public security policy or incident response contact points to areas for improvement in transparency and readiness. Overall, Dynamicweb presents a professional, trustworthy, and technically sound online presence with a strong focus on e-commerce solutions. The risk profile is low, with no evident vulnerabilities or suspicious indicators. Strategic recommendations include enhancing security header implementation, publishing a security policy, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

D

Dynamicweb

dynamicweb.dk

65

Dynamicweb is a Danish technology company offering a cloud-based all-in-one eCommerce suite that integrates PIM, eCommerce, Marketing, and CMS functionalities with Microsoft Dynamics ERP systems. The company targets B2B and B2C businesses seeking comprehensive digital commerce solutions. Their market position is strong, supported by a large certified partner network and notable clients such as Winnebago and Nespresso. The website is professionally designed, mobile-optimized, and provides rich content in multiple languages, reflecting a mature digital presence. Technically, the website leverages modern JavaScript frameworks, Bootstrap for responsive design, and HubSpot for marketing and analytics. The platform is cloud-hosted with fast performance and good SEO and accessibility practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are absent. No vulnerabilities or exposed sensitive data were detected. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness. The company maintains GDPR compliance with clear privacy and cookie policies. Social media presence on LinkedIn and Facebook supports their professional branding. The risk profile is low with recommendations to enhance security headers, publish a security policy, and provide vulnerability disclosure channels to further strengthen trust and compliance.

J

Ještědská stavební společnost, spol. s r.o.

jss.cz

57

Ještědská stavební společnost, spol. s r.o. is a well-established Czech construction company specializing in building and water management projects with over 30 years of experience and more than 790 completed projects. The company targets clients in the Liberec region and broader Czech Republic, offering comprehensive construction services including new builds, reconstructions, and ecological water infrastructure. The website reflects a professional and consistent brand presence with clear service descriptions and references. Technically, the site uses modern JavaScript libraries and Google analytics tools, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and published security policies. Privacy compliance is partial due to missing privacy and terms documents. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the site is trustworthy and functional with room for improvement in compliance and security best practices.

F

FORUM ÚSTÍ NAD LABEM

forumustinadlabem.cz

70

Forum Ústí nad Labem is a large retail and entertainment shopping center located in the Czech Republic, operated under the NEPI Rockcastle group. The website presents a comprehensive overview of the center's offerings including over 100 shops, restaurants, cafes, a cinema, children's play area, and extensive parking facilities. The site targets general consumers, families, and entertainment seekers in the region, positioning itself as a key shopping destination in Ústí nad Labem. Technically, the website is built using modern web technologies including React with Next.js framework, enhanced by jQuery and Swiper.js for interactive elements. It integrates Google Tag Manager for analytics and marketing purposes. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and includes standard security headers, indicating a good baseline security posture. Privacy and cookie policies are clearly presented with consent mechanisms, supporting GDPR compliance. However, the absence of a published security policy or incident response contact reduces transparency. The lack of WHOIS data for the domain is a concern but likely due to privacy protection or data unavailability rather than malicious intent. Overall, the website is professional, trustworthy, and well-maintained, serving its business purpose effectively. Strategic improvements in security transparency and domain registration clarity would enhance trust and compliance further.

The website patrikelias.cz serves as the official personal brand platform for former NHL player Patrik Eliáš, focusing on his career highlights, achievements, and legacy. It targets ice hockey fans and sports enthusiasts, providing a visually engaging experience through a modern swiper-based slideshow. The business behind the site is a small-scale PR and marketing entity based in the Czech Republic, with clear contact details and a professional presentation. Technically, the site employs standard web technologies including HTML5, CSS3, JavaScript, and the Swiper.js library for interactive content display. It leverages Google Fonts for typography and is hosted via WEDOS, a Czech hosting provider. The site is mobile optimized with good SEO practices but lacks advanced accessibility features and security headers. From a security perspective, the site uses HTTPS, but no explicit security headers or privacy-related policies are present. There are no forms or data collection points, minimizing exposure to common web vulnerabilities. However, the absence of privacy and cookie policies represents a compliance gap, especially under GDPR regulations. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

N

NORDBEANS.CZ

nordbeans.cz

64

Nordbeans.cz is a Czech Republic-based specialty coffee roaster and retailer focused on providing high-quality coffee products sourced from organic farms and developed through long-term partnerships. The company targets both retail consumers and B2B partners such as cafes and restaurants. The website is professionally designed, mobile-optimized, and features rich content including product catalogs, educational materials, and a blog. Technically, the site uses modern web technologies including JavaScript frameworks, Google Tag Manager, and Sentry for error monitoring. Security posture is good with HTTPS enforced and security headers present, though explicit security and privacy policies are not prominently available. The WHOIS data is unavailable or privacy protected, which is common for commercial sites but limits domain trust verification. Overall, the site presents a trustworthy and professional digital presence with moderate tracking and cookie consent mechanisms in place.

B

BPR – BOHEMIA PUBLIC RELATION s.r.o.

bprtravel.cz

66

BPR – BOHEMIA PUBLIC RELATION s.r.o. operates a professional travel agency website focused on luxury travel, concierge services, and business travel management primarily targeting Czech and international clients seeking premium travel experiences. The company has a clear market niche in hospitality and travel services with a strong emphasis on personalized and high-quality service. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries such as GSAP and Swiper.js, integrates Google Tag Manager and reCAPTCHA for analytics and security, and employs a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. The domain registration data is consistent and supports the legitimacy of the business. Overall, the website demonstrates good business credibility, privacy compliance, and technical implementation.

M

Martin Petráček

martinpetracek.com

10

Martin Petráček operates a professional freelance web design and IT consulting business based in the Czech Republic, with over 15 years of experience. The website showcases services including custom web development, internet marketing, graphic design, and IT outsourcing, targeting small to medium-sized businesses. The business model is service-oriented, emphasizing personalized client engagement and competitive pricing. The site features a portfolio of completed projects and certifications that enhance credibility. Technically, the website uses a modern tech stack including Bootstrap, Drupal CMS, and JavaScript libraries, with moderate performance and good mobile optimization. Analytics and tracking tools such as Google Analytics and Smartlook are implemented, though privacy compliance is lacking due to missing policies and consent mechanisms. Security posture is moderate with no critical vulnerabilities detected but improvements are recommended in security headers and DNSSEC. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

M

Motion Technology, Inc.

autofry.com

54

Motion Technology, Inc. operates the AutoFry brand, specializing in automated, ventless frying technology for commercial kitchens. The company positions itself as a leader in ventless, electric, and automated deep fryers made in the USA, targeting a broad range of food service businesses from small taverns to large stadiums and multi-unit chains. Their product line includes various fryer models and accessories, supported by online resources and a dedicated webstore. Technically, the website is built on a modern CMS platform with standard web technologies and integrates multiple analytics and marketing tools. Security posture is generally good with HTTPS and no visible vulnerabilities, but lacks some security headers and formal privacy or cookie policies. The WHOIS data is missing or indicates the domain is not registered, which is a concern for domain legitimacy. Overall, the site is professional and trustworthy in content but would benefit from improved compliance and transparency.

U

Universal Pictures

jurassicworld.com

64

Jurassic World Rebirth's official website serves as a comprehensive platform for movie promotion, providing users with showtimes, ticket purchasing options, trailers, cast information, and galleries. The site is professionally designed and targets moviegoers and fans of the Jurassic World franchise, positioning itself as a key marketing tool for Universal Pictures and its parent company NBCUniversal. Technically, the site employs a modern tech stack including JavaScript frameworks, Google Tag Manager, and multiple advertising and analytics pixels, hosted on AWS Cloudfront for performance and reliability. Privacy compliance is robust, with clear privacy and cookie policies managed via OneTrust, reflecting adherence to GDPR and other regulations. Security posture is strong, with HTTPS enforced and appropriate security headers in place, although no explicit security or incident response policies are publicly disclosed. The WHOIS data is unavailable, which is unusual but likely due to privacy protection or proxy registration, slightly impacting business credibility. Overall, the site is trustworthy, secure, and professionally maintained, effectively supporting the movie's marketing and audience engagement objectives.

UpDown Media, s.r.o. is a small Czech media company operating since 2009, specializing in outdoor and regional news internet portals such as Horydoly.cz, Desítka.cz, Koupání.cz, and NašeBrdy.cz. The company provides editorial content, advertising services, and custom content production for print and broadcast media. Their target audience includes outdoor enthusiasts and regional readers, with a business model focused on content publishing and advertising revenue. Technically, the website uses basic HTML, CSS, and JavaScript with an embedded RSS feed widget but lacks modern CMS or advanced frameworks. The site is not mobile optimized and shows basic SEO and accessibility features. Security posture is weak due to lack of HTTPS enforcement, missing security headers, and absence of privacy or cookie policies, which also impacts GDPR compliance. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional but requires significant improvements in security and privacy compliance to meet modern standards.

B

Bridge Alliance

thefulcrum.us

67

The Fulcrum is a US-based media platform operated by Bridge Alliance, founded in 2019. It focuses on nonpartisan news, debate, and community engagement aimed at fostering better democracy through bridging political divides. The website offers news content and facilitates cross-partisan dialogue, targeting a general audience interested in political reform and solutions. The platform maintains a consistent brand presence with active social media channels on Instagram, Facebook, LinkedIn, Twitter, and YouTube. Technically, the site is built on the RebelMouse CMS platform, hosted via GoDaddy, and employs modern JavaScript frameworks and Google reCAPTCHA for bot protection. Performance and mobile optimization are moderate to good, with SEO best practices partially implemented. Security posture is adequate with HTTPS enabled and bot protection, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy but would benefit from enhanced transparency and security measures.

M

MOSER, a.s.

moser.com

70

Moser, a.s. is a premium Czech manufacturer specializing in handcrafted glass products, including hand-blown, hand-cut, and hand-engraved glassware. The company positions itself as a luxury brand targeting consumers and collectors who appreciate artisanal craftsmanship. The website reflects a mature digital presence with comprehensive content, clear branding, and multilingual support. Technically, the site employs modern JavaScript frameworks, Google Tag Manager, and analytics tools, ensuring good performance and SEO optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are absent. The absence of WHOIS data is a notable anomaly, suggesting either privacy protection or registration issues, which slightly impacts trust but does not negate the legitimacy indicated by the website content and structured data.

K

Krizovatkachuti.cz

krizovatkachuti.cz

58

Křižovatka chutí is a Czech language website dedicated to gourmet food and beverages, including wine, beer, distillates, coffee, restaurants, cooking, and reviews. It targets gourmet enthusiasts and food lovers, providing articles, recipes, and reviews. The business model appears to be content publishing supported by advertising and newsletter subscriptions. Technically, the site runs on WordPress with modern plugins such as Rank Math SEO and Jetpack, and integrates Google Analytics and AdSense for analytics and monetization. The site is mobile optimized and has good SEO practices. Security posture is decent with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and a privacy policy page. WHOIS data is unavailable, which reduces domain trustworthiness. Overall, the site is professional and functional but could improve privacy compliance and security transparency.

L

Life4you.cz

life4you.cz

57

Life4you.cz is a Czech lifestyle, culture, and travel media website founded in 2021. It provides news, articles, and podcasts targeting a general audience interested in lifestyle and cultural topics. The website operates on WordPress CMS and integrates common digital marketing and analytics tools such as Google Analytics, Microsoft Clarity, and Google Tag Manager. It monetizes primarily through advertising networks including Google AdSense and Seznam Ads. The site demonstrates good SEO practices and a consistent brand presence across social media platforms including Facebook, Instagram, YouTube, and Spotify. Technically, the website is hosted likely by Active24, a Czech hosting and registrar provider, and uses HTTPS with a good SSL configuration. The site is mobile optimized and performs moderately well. Accessibility features are basic but present. Security headers are not fully implemented, suggesting room for improvement in security hardening. The site includes a GDPR-compliant cookie consent mechanism and a comprehensive privacy policy, but lacks explicit terms of service and security incident response policies. From a security perspective, the site shows a moderate security posture with no critical vulnerabilities detected in the HTML content. However, it would benefit from enhanced security headers and published incident response contacts. The domain registration data is consistent with the website's business claims and location, supporting its legitimacy. Overall, Life4you.cz is a professionally maintained small media site with good content quality and compliance posture. Strategic improvements in security policies and technical security controls would further strengthen its risk profile.

L

Leo Express Global a. s.

leoexpress.com

78

Leo Express is a transportation company specializing in train and bus ticket sales across Central Europe, offering travel to over 120 destinations. The website is professionally designed with a clear focus on user experience, mobile optimization, and accessibility. It leverages modern web technologies such as React and Next.js, ensuring a responsive and performant platform. Privacy compliance is well addressed with comprehensive privacy and cookie policies and an active consent mechanism. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not published. Overall, the website presents a trustworthy and professional front for its business operations.

B

Bonveno

bonveno.cz

61

Bonveno.cz is a Czech retail convenience store network offering fresh groceries, ready meals, coffee, and household essentials. The website presents a professional and user-friendly interface with clear navigation and localized content targeting neighborhood consumers. The business is supported by the Metro group, indicating a solid market position in retail. Technically, the site uses modern web standards with responsive design and HTTPS security. However, no WHOIS data was found, limiting domain trust verification. Privacy and cookie policies are present and GDPR compliant, but explicit security policies and incident response information are absent. Overall, the site demonstrates a good security posture with room for improvement in security headers and transparency. The risk level is moderate with no critical vulnerabilities detected.