Security Directory

S

Saint-Gobain

saint-gobain.cz

57

Saint-Gobain CZ operates as a world leader in modern and sustainable construction materials, offering a wide range of products and solutions for both construction and industrial sectors. The website reflects a mature enterprise with a strong brand presence, multiple partner brands, and a focus on sustainability and innovation. The technical infrastructure is based on Drupal 10 with modern web technologies, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though some improvements in security headers and incident response transparency are recommended. Privacy compliance is partial, with a privacy policy present but lacking explicit cookie consent mechanisms. Overall, the site presents a professional and trustworthy digital presence aligned with its business stature.

S

Saint-Gobain Construction Products CZ a.s.

e-radce.cz

56

The website e-radce.cz represents Saint-Gobain Construction Products CZ a.s., a significant player in the Czech construction materials market, specializing in high-quality facade and insulation systems, plasters, coatings, and adhesives. The site targets both professional and consumer audiences interested in construction and renovation solutions, offering detailed guides, pricing, and multimedia content to support product selection and application. The business model is a hybrid B2B and B2C supplier and manufacturer, with a medium-sized market presence and consistent branding. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and various UI plugins, supported by Google Analytics and Tag Manager for tracking. Hosting appears stable and consistent with the registrar Active24. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. Performance is moderate, with asynchronous loading of scripts enhancing user experience. From a security perspective, the site uses HTTPS (assumed from modern standards though not explicitly confirmed in HTML), but lacks visible security headers and explicit security or privacy policies, which are areas for improvement. Cookie consent is implemented, indicating some GDPR compliance awareness. No forms or sensitive data collection points are present on the main page, reducing attack surface. No WAF or blocking mechanisms were detected, and no suspicious or malicious content was found. Overall, the website is professionally maintained with moderate technical maturity and business credibility. Key recommendations include adding explicit privacy and security policies, implementing security headers, and enhancing accessibility and SEO features to improve compliance and trustworthiness.

S

Supro Nivelo s.r.o.

supro-nivelo.com

50

Supro Nivelo s.r.o. is a small Czech technology company specializing in the architecture of internet services, application development, and online TV solutions. The website presents a professional but basic digital presence with clear contact information and branding consistent with a small service provider. The technical infrastructure leverages modern frontend technology (Svelte) and integrates Google Analytics for user tracking. However, the website lacks comprehensive privacy and cookie policies, security headers, and vulnerability disclosure mechanisms, indicating a low maturity in security and compliance practices. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content is accessible and business-focused. Overall, the site demonstrates moderate technical implementation but requires significant improvements in security posture and privacy compliance to enhance trust and reduce risk.

Č

Československá filmová společnost, s.r.o.

csfilm.cz

60

CS Film is a Czech media company specializing in broadcasting Czech and Slovak feature films, offering a rich catalog of over 210 films monthly. The website serves as a digital platform for viewers to access program schedules, archives, and additional information about the channel. The company positions itself as a niche broadcaster within the JOJ media group, targeting general audiences interested in classic and contemporary Czech and Slovak cinema. The business model revolves around content distribution via cable, satellite, and IPTV operators, supported by online presence and viewer engagement.

P

Private by Design, LLC

yuma.ai

71

Yuma.ai is a US-based SaaS company founded in 2022, specializing in AI-powered automation solutions for e-commerce customer support and sales. The platform offers multiple AI products including Support AI, Sales AI, Social AI, and Chat AI, designed to enhance customer satisfaction and drive revenue growth for e-commerce brands. The company integrates with major platforms like Shopify, Zendesk, Gorgias, and Kustomer, positioning itself as a leading AI-driven customer experience automation provider in the e-commerce sector. Technically, the website is built on Webflow and leverages modern JavaScript libraries such as jQuery, GSAP, and Swiper for animations and UI interactions. It uses Cloudflare for DNS and likely CDN services, and integrates multiple analytics and marketing tools including Google Analytics, HubSpot, PostHog, and LinkedIn Insight Tag. The site is well-optimized for mobile devices, fast loading, and has good SEO practices, although some security headers are missing. From a security perspective, the site uses HTTPS with a good SSL configuration and domain status protections to prevent unauthorized transfers or deletions. However, DNSSEC is not enabled, and no explicit security headers were detected. Privacy and cookie policies are not found on the site, which may impact GDPR compliance. No incident response or vulnerability disclosure information is publicly available. Overall, Yuma.ai presents a professional and trustworthy online presence with strong business credibility and technical maturity. The main risks relate to privacy compliance and some security best practices that could be improved. Strategic recommendations include publishing privacy and cookie policies, enabling DNSSEC, adding security headers, and establishing a vulnerability disclosure process to enhance trust and compliance.

O

O2 Czech Republic a.s

o2media.cz

52

O2 Media is a marketing and advertising service leveraging unique customer data from the O2 telecommunications operator in the Czech Republic. The website presents various data-driven advertising solutions such as call-me-back SMS, direct email marketing, RTB segments, localization messaging, and retargeting. The business operates as part of O2 Czech Republic a.s, with a domain registered since 2014, indicating a stable presence in the market. Technically, the website uses modern JavaScript libraries, Google Analytics, Hotjar, and a consent management platform to comply with GDPR requirements. However, explicit privacy policies and terms of service are not found on the site, which is a compliance gap. Security posture is good with HTTPS and consent management but lacks visible security headers and incident response information. Overall, the site is professional but could improve transparency and security practices.

Č

Československá filmová společnost, s.r.o.

filmpopular.cz

62

The website filmpopular.joj.cz serves as an online archive and thematic TV channel platform focused on Czech and Slovak films and documentaries. It is part of a broader media group offering multiple thematic channels such as CS Film, CS History, CS Mystery, and CS Horror. The site targets Czech and Slovak speaking audiences interested in cultural and historical film content. The business model revolves around broadcasting and online content distribution, positioning itself as a niche media provider within the regional market. The company behind the site is Československá filmová společnost, s.r.o., a recognized media entity in the Czech Republic. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Swiper.js for interactive content presentation. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be enhanced. The absence of explicit CMS or hosting provider details limits deeper infrastructure insights. Performance is moderate, with asynchronous loading of analytics scripts. From a security perspective, the site enforces HTTPS and uses standard tracking tools without exposing sensitive data. However, it lacks visible security headers such as Content-Security-Policy and does not provide explicit cookie consent mechanisms, which are important for GDPR compliance. No incident response or vulnerability disclosure policies are published, indicating room for improvement in security transparency and readiness. Overall, the site is professionally designed and trustworthy in content delivery but would benefit from enhanced security practices and clearer privacy compliance mechanisms. The lack of WHOIS data limits domain legitimacy verification, but the domain's affiliation with the joj.cz network supports its authenticity. Strategic recommendations include implementing security headers, publishing security policies, and improving cookie consent transparency to strengthen user trust and regulatory compliance.

T

Tympanum — Audioknihy

tympanum.cz

59

Tympanum.cz is a Czech Republic-based e-commerce platform specializing in the sale of audiobooks. Established since 2006, it offers a wide catalog of audiobook titles with previews and promotional banners. The website targets Czech-speaking consumers interested in audiobooks and related media. The platform uses modern web technologies including jQuery, jPlayer, and Google Tag Manager for analytics and advertising. While the site demonstrates good content quality, navigation, and mobile optimization, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security posture is moderate with HTTPS usage implied but missing explicit security headers. No contact emails or phone numbers were found in the provided content, which may affect user trust and support accessibility. Overall, Tympanum.cz is a legitimate and established business with room for improvement in privacy and security transparency.

V

Víceúčelové sportoviště

sportvpolici.cz

53

The website 'Sport v Polici nad Metují' serves as a regional sports and recreational portal offering multi-purpose sports facilities, including running, cycling, swimming, and skiing activities in Police nad Metují, Czech Republic. It targets local residents and tourists interested in outdoor sports and leisure activities. The site provides booking options, event calendars, and contact information, positioning itself as a community-focused sports service provider. Technically, the website employs modern JavaScript libraries such as jQuery, jCarousel, and Magnific Popup, and integrates Google Analytics for visitor tracking. The site is mobile responsive and uses HTTPS, ensuring secure communication. However, it lacks explicit privacy and cookie policies and does not implement security headers, which are areas for improvement. From a security perspective, the site shows a moderate posture with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data reduces domain trustworthiness, but the presence of clear contact details and certifications like the Czech Quality System badge enhances credibility. No WAF or blocking mechanisms were detected, indicating full accessibility. Overall, the site is functional and professionally presented but would benefit from enhanced privacy compliance and security hardening to improve trust and regulatory adherence.

A

Acceler s.r.o.

acceler.cz

55

Acceler s.r.o. is a Czech-based digital agency specializing in custom website and e-shop development, online marketing, and consulting services primarily targeting small and medium-sized enterprises. Established in 2012, the company positions itself as a trusted partner helping businesses acquire customers and expand production through quality digital solutions. The website reflects a professional and consistent brand image with clear service offerings and client testimonials, supporting its market credibility. Technically, the website employs a mix of established JavaScript libraries such as jQuery, tracking and analytics tools including Google Analytics, Facebook Pixel, and Smartlook, and uses cookie consent mechanisms to comply with GDPR. The site is mobile-optimized with good SEO practices, though some improvements in accessibility and security headers could enhance its technical maturity. From a security perspective, the site enforces HTTPS and uses consent-based cookie management, but lacks visible advanced security headers and explicit public security policies or incident response contacts. No critical vulnerabilities or suspicious patterns were detected. The WHOIS data aligns well with the business claims, reinforcing legitimacy. Overall, Acceler.cz presents a solid digital presence with good business credibility and privacy compliance. Strategic enhancements in security policies, header implementation, and incident response transparency would further strengthen its security posture and trustworthiness.

I

Informační centrum Hronov

informacnicentrumhronov.cz

43

Informační centrum Hronov operates as a local government-affiliated information and tourism center for the town of Hronov in the Czech Republic. The website provides comprehensive tourist information, including accommodation, dining, cultural events, local history, and sightseeing tips. It serves primarily tourists and local visitors, positioning itself as a trusted regional resource supported by local government and cultural institutions. The business model is focused on public service and tourism promotion, with partnerships evident with regional and cultural organizations. Technically, the website uses a traditional tech stack including jQuery 1.10.2, bxSlider, and fancybox, integrated with Google Tag Manager and Google Analytics for tracking. Hosting and domain registration are consistent with the Czech Republic location. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. The cookie consent mechanism and privacy policy indicate good GDPR compliance. From a security perspective, HTTPS is enforced, and cookie consent is implemented properly. However, the site lacks explicit security headers and uses an outdated jQuery version, which could pose vulnerabilities. No incident response or security policy pages are present, and no vulnerability disclosure mechanism is found. Overall, the security posture is moderate but could be improved with modern best practices. The overall risk assessment is low, with no signs of malicious content or blocking mechanisms. Strategic recommendations include updating libraries, adding security headers, and enhancing accessibility and security documentation to strengthen trust and compliance.

K

Kulturní informační středisko Hronov

kulturahronov.cz

47

Kulturní informační středisko Hronov is a local cultural and information center based in Hronov, Czech Republic, providing a variety of cultural services including event organization, exhibitions, concerts, dance courses, and venue rentals. The website serves as a hub for local cultural activities and community engagement, targeting residents and visitors interested in cultural events. The business model appears to be that of a municipal or non-profit cultural institution with a focus on promoting local culture and events. Technically, the website employs a traditional tech stack including jQuery 1.10.2, Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good navigation and SEO practices, though some libraries are outdated. The website uses HTTPS and cookie consent mechanisms, indicating a reasonable level of digital maturity and privacy compliance. From a security perspective, the site has HTTPS enabled and cookie consent with opt-in/out options, but lacks explicit security headers and documented security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website presents a low-risk profile with good content quality and privacy compliance. Strategic recommendations include updating JavaScript libraries, implementing security headers, and adding formal security and incident response policies to enhance trust and security posture.

M

MERKURIA - ARTES a.s.

branocentrum.cz

44

MERKURIA - ARTES a.s. operates the website branocentrum.cz as an authorized dealer and service provider for BRANO brand lifting and door closing technology. The company offers a broad range of industrial lifting equipment and related products, targeting industrial and commercial customers primarily in the Czech Republic. The website features an e-commerce platform with product listings, pricing, and purchase options, supported by a physical showroom and service center. Technically, the site uses legacy JavaScript libraries and a CMS platform called Webareal, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks modern security headers and uses outdated libraries, posing potential risks. WHOIS data is unavailable, reducing domain trust from a registration perspective, but business information and contact details are clearly presented, supporting legitimacy. Privacy compliance is basic with cookie consent but no explicit privacy policy page found. Overall, the site is professional and trustworthy for its business domain but would benefit from technical and security improvements.

M

MERKURIA-ARTES a. s.

nilfiskcentrum.cz

42

Nilfiskcentrum.cz is a Czech Republic-based specialized retailer and service provider focused on professional cleaning equipment, primarily the Nilfisk and Nilfisk Alto brands. The company MERKURIA-ARTES a. s. operates the site, offering a broad range of cleaning machines, accessories, and related services including machine rental and ecological disposal. The website targets professional cleaning service providers and end customers within the Czech market. The business model is primarily e-commerce combined with service offerings, positioning itself as a regional leader in cleaning technology retail and support. Technically, the website runs on the BohemiaSoft e-commerce platform, utilizing a mix of legacy and modern JavaScript libraries such as jQuery 1.8.3, jQuery UI, Select2, and Owl Carousel. Google Analytics and Facebook SDK are integrated for analytics and marketing purposes. The site is mobile optimized with good SEO practices and basic accessibility features. Performance is moderate, with room for improvement in updating legacy libraries. From a security perspective, the site enforces HTTPS and uses standard security cookies including CSRF tokens and session management. However, the use of outdated jQuery versions introduces potential vulnerabilities. Security headers are minimal, and no explicit security policies or incident response information are published. Cookie consent mechanisms are implemented, indicating GDPR awareness. Overall, the website is professional and trustworthy in appearance, with clear contact information and social media presence. The absence of WHOIS data for the domain reduces domain trust and raises questions about registration transparency. There are no indications of adult or questionable content, and the site is fully accessible without WAF or blocking mechanisms. Strategic recommendations include updating JavaScript libraries to mitigate vulnerabilities, enhancing security headers, publishing clear security and incident response policies, and verifying domain registration details to improve trustworthiness.

M

MERKURIA - ARTES a.s.

vodacentrum.cz

44

Vodacentrum.cz is an established Czech e-commerce retailer specializing in kitchen sinks, faucets, valves, and range hoods, primarily offering products from reputable European brands such as Franke, Silfra, and Paffoni. The company, MERKURIA - ARTES a.s., targets consumers and businesses in the Czech Republic seeking quality sanitary and kitchen installation products. The website demonstrates a professional and consistent brand presence with clear navigation and relevant product offerings. Technically, the website employs a variety of JavaScript libraries including jQuery, jQuery UI, and several UI components like MasterSlider and Owl Carousel. It integrates Google Analytics, Google Tag Manager, and Facebook SDK for marketing and analytics purposes. The site is built on the Webareal CMS platform and uses HTTPS to secure communications. However, the use of an outdated jQuery version poses potential security risks, and there is no evidence of advanced security headers such as CSP. From a security perspective, the site follows basic best practices including HTTPS enforcement and cookie consent mechanisms. There is no visible security policy or incident response contact information, and no vulnerability disclosure or security.txt file is present. The absence of WHOIS data reduces domain trustworthiness, although the website content and contact details appear legitimate and professional. Overall, Vodacentrum.cz presents a trustworthy and functional e-commerce platform with room for improvement in security practices and domain transparency. Strategic enhancements in updating libraries, implementing security headers, and publishing vulnerability disclosure policies would strengthen its security posture and trustworthiness.

C

CloudPano

cloudpano.com

62

CloudPano is a technology company specializing in 360° virtual tour software, targeting real estate, photography, automotive, and various business sectors. The platform offers an easy-to-use SaaS solution enabling users to create, customize, and publish immersive virtual tours with features such as live video chat and Google Street View integration. The company has a strong market presence with a large user base and enterprise clients, supported by professional branding and extensive third-party integrations. Technically, the website is built on modern frameworks like Webflow and integrates multiple analytics and marketing tools, ensuring good performance, mobile optimization, and SEO. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies are not fully disclosed. Privacy compliance is basic, lacking clear privacy and cookie policies on the main site. Overall, CloudPano demonstrates a mature digital infrastructure and business model, though improvements in transparency around privacy, security policies, and domain registration details would enhance trust and compliance. The absence of WHOIS data is a notable gap but does not detract from the professional quality of the website and services offered.

D

DONAP s.r.o.

donap.cz

53

DONAP s.r.o. is a Czech Republic-based company specializing in the retail and installation of windows, doors, gates, shading solutions, pergolas, and winter gardens. Established in 1993, the company has a strong regional presence with five physical stores and over 7,500 completed projects, positioning it as a trusted provider in the home improvement sector. The website reflects a professional and consistent brand image targeting residential and commercial customers within the Czech market. Technically, the site employs common web technologies such as jQuery and Nivo Slider, integrated with Google Tag Manager and Google Analytics for marketing and analytics purposes. The site is mobile-optimized and provides clear navigation and relevant content.

B

Betonpres a.s.

betonpres.cz

46

Betonpres a.s. is a Czech manufacturing company specializing in the production and sale of high-quality concrete roofing materials, including roofing tiles, concrete blocks, and roofing accessories. With over 30 years of experience, Betonpres holds a strong market position as a leading supplier in the Czech Republic, serving both professional roofers and end customers. The company emphasizes quality control with daily inspections and offers additional services such as roof calculation tools and training for professionals. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, and lazy loading for images, ensuring good performance and mobile optimization. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. Security posture is solid with HTTPS enforced and consent mode implemented, though some security headers and explicit security policies are missing. The absence of WHOIS data for the domain reduces trust in domain registration legitimacy but does not detract from the professional presentation and business credibility of the company. Overall, Betonpres demonstrates a mature digital presence with room for improvement in security transparency and domain registration verification.

S

Stavební keramika spol. s r.o.

stavebnikeramika.cz

46

Stavební keramika spol. s r.o. is a Czech Republic based small retail business specializing in the expert sale of ceramic tiles, bathroom equipment, and related chemicals. Established in 1990, the company operates two physical studios in Řečany nad Labem and Hradec Králové, offering additional services such as 3D bathroom visualization and professional consultancy. The website reflects a well-established regional player with a clear focus on quality and customer service. Technically, the site is built on WordPress with a modern plugin ecosystem including Yoast SEO, Slider Revolution, and Google Analytics integration, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit incident response or vulnerability disclosure policies are found. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high based on website content and contact information. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving accessibility features to further strengthen the digital maturity and trustworthiness of the online presence.

D

DEK a.s.

dekwood.cz

62

DEKWOOD, a division of DEK a.s., operates in the Czech Republic manufacturing and retailing wood construction materials including wall systems, CNC machining, timber houses, and trusses. The company targets construction professionals and end customers seeking quality wood building solutions. The website is professionally designed with good navigation and mobile optimization, leveraging modern frameworks like UIkit and Vue.js, though it uses an outdated jQuery version. Security posture is moderate with cookie consent and privacy policy in place, but lacks explicit security headers and updated libraries. WHOIS data confirms domain legitimacy and business consistency. Overall, the site reflects a credible medium-sized manufacturing business with room for technical and security improvements.

T

Transguard Group

transguarddelivery.com

70

Transguard Delivery Service, a subsidiary of Transguard Group, operates as a delivery service provider across the UAE, offering express, economy, and standard delivery options with real-time tracking and 24/7 customer support. The company targets SMEs and general customers, positioning itself as a reliable and technology-enabled logistics provider within the UAE market. The website is built on WordPress with modern front-end technologies and integrates Google Analytics and Tag Manager for user tracking and marketing insights. Security posture is moderate with HTTPS enforced but lacks advanced security headers and cookie consent mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding appear professional and consistent with a legitimate business. Overall, the site demonstrates good technical implementation and user experience but requires improvements in privacy compliance and security best practices.

T

Transguard Living

transguardliving.com

53

Transguard Living is a Dubai-based service provider specializing in comprehensive home maintenance, cleaning, and moving services. The company offers a convenient mobile app for booking services, targeting residents and businesses in Dubai. Their market position is that of a trusted local partner with a broad range of offerings including A/C servicing, electrical and plumbing repairs, cleaning, and relocation services. The website reflects a medium-sized business founded in 2019 with consistent branding and good content quality. Technically, the site is built on WordPress using modern frameworks and plugins, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks several security headers and formal policies. The absence of WHOIS data reduces domain registration transparency, though the website and social media presence support legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security practices.

T

Taste of Home

thetasteofhome.com

59

Taste of Home is a Dubai-based catering and food supply company operating as a division of the Transguard Group. The company specializes in providing healthy, affordable meals for workforce catering, events, special occasions, and school meals. Their culinary team is diverse, offering international cuisines including North Indian, South Indian, Pakistani, African, and Filipino dishes. The website is professionally designed using WordPress with modern plugins and SEO tools, providing a good user experience and clear navigation. Contact information is prominently displayed, enhancing business credibility. However, the absence of privacy and cookie policies and missing WHOIS data present compliance and trust challenges. Security posture is adequate with HTTPS and reCAPTCHA usage but lacks advanced security headers and incident response disclosures. Overall, the website is functional and trustworthy but would benefit from improved privacy compliance and domain registration transparency.

T

Transguard Kitchen Maintenance Solutions

tgkms.com

62

Transguard Kitchen Maintenance Solutions is a division of the Transguard Group, specializing in commercial kitchen maintenance and servicing in Dubai, UAE. The company offers a comprehensive range of services including preventive and reactive maintenance, annual maintenance contracts, access to genuine spare parts, and specialist services such as HVAC and IoT consultancy. Positioned as a reliable service provider in the hospitality sector, it targets restaurants, hotels, educational institutions, and healthcare facilities. The website reflects a professional and consistent brand image aligned with its parent company. Technically, the website is built on WordPress using Elementor and several modern plugins like Yoast SEO and Slider Revolution. It employs Google Analytics and Microsoft Clarity for user tracking and performance insights. The site is mobile-optimized with good SEO practices but could improve accessibility features. Hosting is provided by GoDaddy, consistent with the WHOIS data. Security posture is solid with HTTPS enabled and use of reCAPTCHA on forms, but lacks some advanced security headers and explicit security or incident response policies. Privacy and cookie policies are missing, which impacts compliance. The domain registration details are consistent and legitimate, supporting the business credibility. Overall, the website is professional, secure, and trustworthy with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

I

Infor Biznes sp. z o.o.

gazetaprawna.pl

56

GazetaPrawna.pl is a leading Polish online media portal specializing in business, law, taxes, finance, and related news. It serves a professional audience including legal experts, business owners, and government officials. The site offers a broad range of content including articles, podcasts, videos, and subscription-based premium services. It is part of the Infor Biznes group, a reputable media company in Poland. The website demonstrates a mature digital presence with comprehensive content and strong brand consistency. Technically, the site employs modern web technologies such as JavaScript modules, Google Tag Manager, Google Analytics, and service workers enabling PWA capabilities. It uses HTTPS with good SSL configuration and integrates multiple advertising and tracking services with user consent mechanisms. The site is mobile optimized and SEO friendly, though accessibility features could be improved. From a security perspective, GazetaPrawna.pl enforces HTTPS and uses secure login forms. While some advanced security headers are missing, no critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is evident with a comprehensive privacy policy, cookie consent, and GDPR adherence. WHOIS data is privacy protected, which is common and justified for media companies. Overall, GazetaPrawna.pl is a professional, trustworthy, and well-maintained media platform with a strong market position in Poland. It balances content quality, technical sophistication, and privacy compliance effectively, though there is room for enhancing security headers and accessibility. Strategic recommendations include implementing additional security headers, enabling HSTS, conducting regular security audits of third-party scripts, and improving accessibility compliance to further strengthen the site’s security posture and user experience.

Inforlex is a well-established Polish legal and business information platform providing extensive access to legal acts, court rulings, official interpretations, forms, financial indicators, calculators, training, and commentaries. The platform targets legal professionals, accountants, public administration, and businesses requiring comprehensive and up-to-date legal information. The website demonstrates a professional design with clear navigation and categorized content, supporting a freemium business model with subscription options. Technically, the site employs modern analytics and marketing technologies including Google Tag Manager, Google Analytics, Facebook Pixel, Gemius, and SalesManago. It uses HTTPS with good SSL configuration and asynchronous loading of scripts, contributing to moderate performance and good mobile optimization. However, accessibility features are basic, and some security best practices such as security headers are not visibly implemented. From a security perspective, the site enforces HTTPS and uses multiple tracking and marketing scripts, indicating extensive user tracking. No critical vulnerabilities or exposed sensitive data were detected, but the absence of security headers and a security.txt file suggests room for improvement. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy policy or terms of service found in the analyzed content. Overall, the website is legitimate and professional but would benefit from enhanced transparency in privacy and security policies, improved accessibility, and better security header implementation. The lack of WHOIS data for the domain reduces trust slightly but does not negate the site's apparent legitimacy based on content and external partnerships.

D

Dziennik.pl

dziennik.pl

51

Dziennik.pl is a prominent Polish news portal offering a wide range of content including national and international news, economic updates, lifestyle, automotive, and entertainment. It operates under the INFOR group umbrella, which manages several sister sites, indicating a strong market presence in the Polish media sector. The website targets a general audience interested in current affairs and lifestyle content, monetizing primarily through advertising and marketing partnerships. Technically, the site employs modern web technologies such as service workers, asynchronous script loading, and integrates multiple analytics and advertising platforms, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses standard security headers, but lacks explicit public security policies or incident response contacts, which could be improved. Overall, the site is professionally maintained, trustworthy, and safe for general audiences.

PBV Directory operates as a specialized online legal directory providing listings of law firms, partners, and fees earners across multiple jurisdictions globally. The platform targets legal professionals and clients seeking legal services, positioning itself as a niche directory with a focus on comprehensive jurisdictional coverage. Founded in 2020 and registered in Italy, the business maintains a small-scale operation with a straightforward online presence. Technically, the website employs a mix of modern web technologies including Bootstrap, FusionCharts for interactive maps, and integrates Google Analytics and Tag Manager for user tracking. Hosting leverages Amazon Cloudfront CDN for content delivery, contributing to moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, the absence of DNSSEC and security headers indicates room for improvement. Privacy compliance is basic, with a privacy policy linked on a partner domain but lacking explicit GDPR compliance indicators. Contact information is limited to a contact form without direct emails or phone numbers, which may impact user trust and business credibility. Overall, the domain registration details align well with the business claims, supporting legitimacy. Strategic enhancements in security policies, contact transparency, and privacy compliance would strengthen the platform's trustworthiness and operational resilience.

I

IZON s.r.o.

izon.cz

56

IZON s.r.o. is a Czech-based internet agency specializing in custom web development, e-commerce solutions, and business-oriented online applications. The company positions itself as a professional service provider with a focus on transforming good ideas into better digital products. Their client portfolio includes reputable organizations, and they emphasize tailored solutions for diverse audiences. Technically, the website employs modern web standards, including HTML5, CSS3, JavaScript, and integrates Google Analytics and Tag Manager for performance and user behavior tracking. The site is well-designed, mobile-optimized, and provides clear navigation and contact information. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks advanced security headers and explicit privacy or cookie policies, which are recommended for compliance and trust. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy of the business. Strategic recommendations include enhancing privacy compliance, adding security headers, and publishing incident response information to strengthen security posture and user trust.

R

Rocket Club, s.r.o.

rocketclub.cz

59

Rocket Club, s.r.o. is a small Czech technology company specializing in company digitization and web design services. The company positions itself as an experienced digital agency with over 14 years in the market and a portfolio of more than 200 projects and 25 clients. Their business model focuses on providing smart digital solutions that improve business efficiency and profitability. The website is professionally designed, targeting businesses seeking digital transformation and web presence enhancement. Technically, the site uses a proprietary CMS (Solidpixels), integrates modern web fonts, and employs analytics tools such as Google Analytics and Hotjar. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks security headers and published privacy or terms policies. WHOIS data is missing, which raises concerns about domain legitimacy and registration transparency. Overall, the site is trustworthy and professional but would benefit from improved transparency and security practices.

The website www.chudenice.eu is a local community informational portal focused on the town of Chudenice and its surroundings in the Czech Republic. It provides historical, cultural, tourism, and event information relevant to residents and visitors. The site is modest in scale, targeting a general audience interested in local heritage and tourism. The business model appears to be informational and community service oriented, with no direct commercial transactions evident. Technically, the site uses legacy web technologies including HTML with windows-1250 charset and IE8 compatibility, along with JavaScript libraries such as jQuery and integrations with Facebook SDK and Google Analytics for social and tracking purposes. However, the site lacks modern security practices such as HTTPS enforcement and security headers, and does not provide privacy or cookie policies, which impacts its privacy compliance and security posture. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. The domain WHOIS data is not publicly available due to EURid privacy protection, which is common for .eu domains and does not raise immediate legitimacy concerns. Overall, the site is functional for its purpose but requires improvements in security, privacy compliance, and technical modernization.

O

Obecní úřad Rybník

obec-rybnik.cz

46

The website represents the official municipal portal for Obec Rybník, a small local government entity in the Czech Republic. It provides essential information for residents and tourists, including municipal office details, local history, tourism spots, event calendars, and contact information. The site is positioned as a trusted local government resource with a clear focus on community engagement and regional promotion. Technically, the website employs standard web technologies such as jQuery, Flexslider for image sliders, Font Awesome for icons, and integrates Google Analytics and Facebook SDK for analytics and social media presence. The site is moderately optimized for performance and mobile devices, with basic accessibility features and SEO metadata. However, it lacks modern security headers and explicit privacy or terms of service pages. From a security perspective, the site uses HTTPS (assumed from external scripts loaded via HTTPS), includes a cookie consent mechanism, and avoids exposing sensitive data in the HTML. The absence of WHOIS data and domain registration details is a concern, reducing trustworthiness from a domain legitimacy standpoint. No forms or data collection points are present on the main page, minimizing attack surface. Overall, the security posture is moderate but could be improved with enhanced headers, documented policies, and vulnerability disclosure mechanisms. The overall risk is low given the nature of the site as a local government informational portal, but the missing WHOIS data and lack of explicit privacy policies suggest areas for improvement. Strategic recommendations include verifying domain registration status, implementing security headers, publishing privacy and security policies, and maintaining regular security audits.

O

Obecní úřad Svéradice

obecsveradice.cz

47

The website represents the official municipal government of Svéradice, Czech Republic, providing essential information and services to local citizens and tourists. It offers comprehensive local government content including office contacts, event calendars, public notices, and community resources. The site is positioned as a trusted local government portal with clear target audience focus and good content relevance. Technically, the site uses a combination of jQuery, Flexslider, Font Awesome, and Google services such as Analytics and Custom Search Engine, indicating a moderate level of digital maturity. The website is served over HTTPS with cookie consent mechanisms, but lacks advanced security headers and a published privacy policy, which are areas for improvement. Overall, the security posture is adequate for a municipal site but could benefit from enhanced compliance and security transparency. The domain registration data aligns well with the municipal nature of the site, supporting its legitimacy and trustworthiness.

Obecní úřad Petrovice operates as the local municipal government office for Petrovice u Sušice, providing administrative and public services to residents and visitors. The website serves as an information portal offering contact details, official documents, public notices, and community updates. The target audience is primarily local citizens and stakeholders interested in municipal affairs. The business model is that of a government entity focused on local administration and public service delivery. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and integrates Google Analytics for visitor tracking alongside a cookie consent management system to comply with privacy regulations. The site demonstrates basic mobile optimization and accessibility features but lacks advanced frameworks or CMS identification. Performance is moderate with room for improvement in responsiveness and SEO. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers such as CSP or HSTS. The contact form includes anti-spam honeypot fields, indicating some attention to security. However, the absence of WHOIS data and security policy pages suggests areas for enhancement in transparency and trust. No critical vulnerabilities or adult content were detected, and privacy compliance appears adequate. Overall, the website is functional and serves its purpose as a municipal information portal but would benefit from improved security practices, enhanced technical modernization, and clearer domain registration transparency to strengthen trust and compliance.

O

Obecní úřad Tužice

tuzice.cz

46

The website www.tuzice.cz serves as the official municipal portal for the village of Tužice in the Czech Republic, providing local government information, public notices, tourism details, and community services. It targets local citizens and tourists with relevant content such as event calendars, municipal office details, and regional links. The site is well-structured with clear navigation and consistent branding, reflecting a small government entity's digital presence. Technically, the site employs common web technologies including jQuery, Flexslider, Fancybox, and Google Analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and includes accessibility features, though no CMS or hosting provider details are evident. Performance is moderate, with room for improvement in modernizing the tech stack and enhancing SEO. From a security perspective, the site uses HTTPS and includes a cookie consent mechanism denying ad and analytics storage by default, demonstrating basic privacy awareness. However, the absence of security headers and a published privacy policy or incident response information indicates gaps in security posture and compliance. The WHOIS data is missing, which reduces domain trustworthiness and raises questions about domain registration status. Overall, the site is functional and trustworthy as a local government resource but would benefit from enhanced security practices, clearer privacy documentation, and WHOIS transparency to improve compliance and user trust.

P

První obalová

prvni-obalova.cz

47

První obalová is a Czech Republic-based manufacturing company specializing in custom and standard packaging solutions. Established since 1998, the company offers comprehensive packaging services including development, construction, testing, export packaging, and sales of packaging materials. The website reflects a professional business presence with clear service offerings and partnerships with leading European packaging firms such as Jiffy Packaging. The technical infrastructure is based on Joomla CMS with UIkit framework, incorporating modern analytics tools like Google Analytics and Google Tag Manager. The website is mobile-optimized and well-structured, providing a good user experience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy or cookie policies. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency. Overall, the domain age and WHOIS data support the legitimacy of the business, with no suspicious patterns detected.

A

AL INVEST Břidličná, a. s.

alinvest.cz

50

AL INVEST Břidličná, a. s. is a significant European and the largest domestic manufacturer of aluminum products with a history spanning over 90 years. The company operates as part of the MTX Group and offers a portfolio including flexible packaging, aluminum foils, sheets, strips, and plates. Their target audience primarily consists of industrial clients and manufacturers requiring high-quality aluminum products. The website reflects a professional and consistent brand image, supporting their market position with clear business information and social media presence. Technically, the site employs modern JavaScript frameworks, Google Tag Manager, and Google Analytics, with a cookie consent mechanism ensuring privacy compliance. Security posture is good with HTTPS enforced, though some security headers and policies could be improved. Overall, the website is well-structured, mobile-optimized, and trustworthy, with no signs of blocking or suspicious activity.

P

PEBAL s.r.o.

pebal.cz

55

PEBAL s.r.o. is a Czech Republic-based manufacturer specializing in polyethylene packaging materials, including films, bags, and flexographic printing services. Established in 1995 and part of the PEBAL GROUP, the company holds a strong market position as a key supplier in the packaging industry within the Czech Republic. Their product portfolio includes extruded polyethylene films, multi-color flexographic printing, lamination, and bag production, targeting primarily business customers in manufacturing and packaging sectors. The website is professionally designed, content-rich, and provides comprehensive contact information and social media presence, supporting business credibility. Technically, the website runs on Joomla CMS with the Gantry5 framework, utilizing modern JavaScript libraries such as jQuery and Bootstrap. It integrates Google Analytics and Google reCAPTCHA v3 for analytics and security. The site is mobile-optimized with good SEO practices, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, but lacks some recommended security headers and published security policies. The WHOIS data is unavailable, which raises concerns about domain registration transparency and trustworthiness. Despite this, the website content and contact details appear legitimate and professional. Cookie consent mechanisms are implemented with detailed user controls, indicating awareness of privacy compliance, although a dedicated privacy policy page is missing. Overall, the website presents a trustworthy and professional business front with room for improvement in security best practices and privacy transparency. Verification of domain registration and addition of privacy and security policies would enhance trust and compliance.

C

Colognia press, a.s.

cologniapress.com

55

Colognia press, a.s. is a well-established printing company based in the Czech Republic, specializing in self-adhesive labels, flexible packaging, laminate printing, and other specialized printing services. With over 27 years of experience, it holds a strong market position in Central Europe, serving a broad B2B customer base. The website reflects a professional and modern digital presence with multilingual support and detailed product and service information. Technically, the site uses modern JavaScript frameworks and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The absence of WHOIS data raises some concerns about domain registration transparency, but the overall business credibility and content quality are high.

Nové umění s.r.o. operates a website promoting classical music concerts in Prague, specifically featuring the Prague Classical Orchestra and events at the Obecní dům venue. The business model centers on cultural event promotion and e-ticket sales through their NUstore platform. The website content is primarily in Czech with an English language option, targeting classical music enthusiasts and concert attendees. The site uses legacy JavaScript libraries such as Prototype.js and Scriptaculous, along with Google Analytics for visitor tracking. Technical infrastructure appears basic with moderate performance and limited mobile optimization. Security posture is weak due to lack of HTTPS verification in the provided data, absence of security headers, and no visible privacy or cookie policies, indicating compliance gaps with GDPR and other regulations. No contact information or incident response details are provided, reducing transparency and trust. Overall, the website is functional but lacks modern security and privacy best practices, and the missing WHOIS data raises concerns about domain registration transparency.

P

Praguemusic.cz

praguemusic.cz

58

Praguemusic.cz is a small-scale cultural event organizer specializing in classical music concerts held at the Municipal House in Prague. The website showcases upcoming concerts featuring renowned classical composers and offers online ticket sales. The business targets classical music enthusiasts and tourists seeking unique cultural experiences in Prague. Technically, the website employs a modern tech stack including jQuery, Google Analytics, Facebook Pixel, and Typekit fonts, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and trust indicators support its legitimacy. Overall, the site is well-designed and functional, though improvements in privacy compliance and security headers are recommended.

Lex Mundi operates as a premier global network of independent law firms, providing expert cross-border legal advice and business support services. Established in 2000, it has positioned itself as a leader in the legal services industry by carefully selecting one member firm per jurisdiction, ensuring high-quality local expertise. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeted at legal professionals and corporate clients seeking international legal solutions. Technically, the site leverages modern analytics and marketing tools, including Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Hotjar, integrated via Google Tag Manager, and is hosted with DNS services through Cloudflare. The CMS appears to be Umbraco, supporting a robust content management framework. Security posture is solid with HTTPS enforced and domain transfer protection enabled, though DNSSEC is not implemented, representing a minor security gap. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced trust and compliance. Overall, Lex Mundi's website demonstrates a strong professional and secure online presence suitable for its business model and audience.

W

W&R obuv

wrobuv.cz

54

W&R obuv operates a professional e-commerce and retail business specializing in footwear and fashion accessories, with a strong focus on the Tamaris brand in the Czech Republic. The company claims a market-leading position with 35 physical stores and a comprehensive online presence. The website is well-structured, with good content quality, clear navigation, and a consistent brand presentation. Technically, the site uses modern JavaScript libraries, tracking tools, and a custom e-commerce platform, providing a moderate performance and good mobile optimization. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though lacks explicit security policy and incident response information. Privacy compliance is basic but present, with GDPR-related consent and privacy policy pages. The absence of WHOIS data reduces domain trustworthiness, but the website's business signals and customer reviews support legitimacy. Overall, the site is a trustworthy retail platform with room for improvement in transparency and security disclosures.

JK Obuv operates as a Czech-based e-commerce retailer specializing in footwear for women, men, and children. The website offers a broad selection of branded shoes and accessories, targeting general consumers in the Czech Republic. The business model is focused on online retail with customer account management and newsletter marketing as key services. The site is built on the eWinShop CMS platform and integrates common marketing and analytics tools such as Google Analytics and Google Tag Manager. Privacy and cookie policies are implemented with consent mechanisms, reflecting basic GDPR compliance. However, the absence of WHOIS data and lack of explicit security headers indicate areas for improvement in transparency and security posture. Overall, the website presents a professional and functional online retail experience with moderate technical maturity and security awareness.

B

Beny.cz

beny.cz

60

Beny.cz is a luxury retail company specializing in high-end watches and exclusive jewelry, operating both an e-commerce platform and physical boutiques primarily in Prague, Czech Republic. The website showcases a broad catalog of luxury brands and offers authorized watch servicing and custom jewelry manufacturing. The business targets affluent customers seeking premium timepieces and fine jewelry. Technically, the website employs modern JavaScript libraries, integrates multiple analytics and tracking tools, and implements a cookie consent mechanism aligned with privacy regulations. Security posture is solid with HTTPS and secure forms, though explicit privacy and terms of service pages are missing, which is a compliance gap. The absence of WHOIS data reduces domain trustworthiness, but the professional presentation and business details support legitimacy. Overall, the site is well-designed, user-friendly, and trustworthy for luxury retail customers.

M

Ministerstvo financí ČR

norskefondy.cz

73

The website www.eeagrants.cz is an official portal managed by the Ministry of Finance of the Czech Republic, dedicated to the administration and dissemination of information regarding the EEA and Norway Grants. It serves as a governmental platform providing structured information about funding programs, calls for proposals, and bilateral cooperation. The site targets stakeholders within the Czech Republic involved in grant applications and management, reflecting a strong governmental presence and trustworthiness. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with integrations for Google Analytics and Matomo for visitor tracking and analytics. Cookiebot is used for comprehensive cookie consent management, ensuring compliance with privacy regulations. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some modern security headers are not detected. From a security perspective, the site enforces HTTPS and uses a robust cookie consent mechanism, but lacks visible security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS data is noted but likely due to registry policies rather than malicious intent. Overall, the website presents a professional, secure, and privacy-conscious platform appropriate for its governmental function. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and providing clearer contact information to improve transparency and user trust.

B

Barber's Wife

barberswife.cz

50

Barber's Wife is a professional barbershop and hairdressing service provider based in the Czech Republic, offering specialized services for men and women including haircuts, beard grooming, and styling. The website is well designed with clear navigation and supports Czech and English languages, targeting a general audience seeking grooming services. The business operates primarily in the hospitality sector with a small-sized local market presence. Technically, the website employs modern analytics tools such as Google Analytics, Smartlook, and Microsoft Clarity, integrated with a cookie consent mechanism to comply with privacy regulations. The use of Cloudflare Turnstile captcha enhances bot protection. Security posture is good with HTTPS enforced, but lacks some security headers and formal privacy and terms policies. WHOIS data is unavailable, which reduces domain trustworthiness but the website content and structure suggest a legitimate business. Overall, the site is functional, professional, and moderately secure but would benefit from enhanced transparency and security best practices.

T

Tereza Kostková

terezakostkova.com

51

The website www.terezakostkova.com serves as the official online presence of Czech actress Tereza Kostková. It provides biographical information, a detailed calendar of her theater and media appearances, collaborations with brands, and contact details for professional inquiries. The site targets fans, media professionals, and event organizers interested in her work. Technically, the site is built on Joomla CMS with Bootstrap and jQuery, featuring Google Fonts and Google Analytics for tracking. The design is professional and mobile-optimized, offering a good user experience with clear navigation. However, the site lacks privacy and cookie policies, which is a compliance gap under GDPR regulations. Security headers are not evident, and the WHOIS data for the domain is missing, raising concerns about domain registration legitimacy. Overall, the site is functional and professional but requires improvements in privacy compliance and security practices.

V

Vojtěch Kulhánek s.r.o.

vseprositi.cz

45

Vojtěch Kulhánek s.r.o. operates the website vseprositi.cz, a specialized e-commerce platform focused on selling sewing machines, textiles, and related accessories. Established in 1991, the company has a long-standing presence in the Czech retail market, offering both online and physical store services including product sales, servicing, and installment payment options. The website is well-structured, professionally designed, and targets hobbyists and professionals interested in sewing and textile crafts. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and Google Tag Manager, with a good level of mobile optimization and SEO. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though it lacks some advanced HTTP security headers and published security policies. The absence of WHOIS data for the domain is a notable gap, slightly reducing trustworthiness, but the overall business credibility remains high due to transparent contact information and customer trust signals. Recommendations include enhancing security headers, publishing incident response information, and adding a security.txt file to improve transparency and security readiness.

V

Vojtěch Kulhánek s.r.o.

vseprokolo.cz

49

Vseprokolo.cz is an established Czech retail business specializing in the sale and servicing of bicycles, e-bikes, and cycling accessories. Operating since 1991 with an online presence since 2005, the company offers a wide range of products from well-known brands and provides additional services such as bicycle maintenance and installment payment options. The website is professionally designed with good navigation and content relevance, targeting cycling enthusiasts, families, and children. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager, ensuring a responsive and user-friendly experience. Security posture is moderate with HTTPS enabled and a cookie consent mechanism in place, but lacks visible security headers and a published privacy policy, which are areas for improvement. WHOIS data is unavailable, which impacts domain trustworthiness, but the business information on the site appears consistent and credible. Overall, the site is safe for general audiences and demonstrates a solid e-commerce retail presence in the cycling sector.