Security Directory

G

Generaldirektion Wasserstraßen und Schifffahrt

wsv.de

67

The Generaldirektion Wasserstraßen und Schifffahrt (GDWS) is a German federal government agency responsible for the operation, maintenance, and development of federal waterways and shipping infrastructure. The website serves as an official portal providing comprehensive information, news, and services related to waterway management, shipping, environmental considerations, and career opportunities. It targets shipping companies, government officials, professionals, and the general public interested in waterway affairs. The GDWS holds a central position in Germany's transportation sector, ensuring safe and efficient waterborne traffic. Technically, the website is built on the Government Site Builder CMS, featuring modern HTML5, CSS3, and JavaScript components such as the Slick Carousel for dynamic content display. The site is mobile-optimized, accessible, and SEO-friendly, with consistent branding and professional design. Security measures include HTTPS enforcement and standard security headers, though explicit privacy and cookie policies are missing, representing a compliance gap. The security posture is strong with no evident vulnerabilities or exposed sensitive data. However, the absence of published security policies, incident response contacts, and vulnerability disclosure mechanisms limits transparency. The WHOIS data is minimal but consistent with a government subdomain, supporting legitimacy. Social media presence on official platforms enhances trust and outreach. Overall, the site is a reliable and authoritative source for waterway and shipping administration in Germany, with room for improvement in privacy compliance and direct contact information to enhance user trust and regulatory adherence.

K

Kasys

kasys.sk

41

Kasys is a Slovak company specializing in automated logistics systems for storage and archiving, including flexible barriers, marking, and aerosol fire extinguishing systems. The company appears to serve business clients requiring advanced warehouse automation solutions. The website is built on WordPress using the Avada theme and popular slider plugins, indicating a moderate level of digital maturity. While the site is accessible and uses HTTPS with DNSSEC enabled, it lacks visible privacy and cookie policies, security headers, and explicit contact information, which are important for compliance and trust. The domain is well-established since 2004, supporting the legitimacy of the business. Overall, the security posture is moderate but could be improved with better security practices and compliance documentation.

K

K2 atmitec s.r.o.

k2.cz

60

K2 atmitec s.r.o. is a well-established Czech technology company specializing in enterprise software solutions, particularly ERP systems tailored for manufacturing, wholesale, and e-commerce sectors. With over 30 years of experience, K2 serves a broad client base including more than 200 manufacturing firms and 200 e-shops, positioning itself as a significant player in the Czech enterprise software market. Their offerings extend beyond software to include IT services, data center operations, and digital transformation solutions such as robotization. The website reflects a professional and business-focused approach, targeting medium to large enterprises seeking integrated business management solutions. Technically, the website employs modern JavaScript libraries including jQuery and Swiper.js, and integrates advanced analytics and marketing tools such as Google Analytics 4, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with no critical technical issues detected. The presence of cookie consent mechanisms and comprehensive privacy policies indicates a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS data limits domain trust verification, but the website's professional presentation and business information support its legitimacy. Overall, the security posture is solid but could be enhanced by publishing security policies and adding security headers. The overall risk assessment is low, with recommendations focusing on improving transparency around security policies and incident response, enhancing accessibility, and publishing vulnerability disclosure information. The website is safe for general audiences, with no adult or questionable content detected. Strategic improvements in security communication and technical hardening would further strengthen trust and compliance.

G

Geis SK s.r.o.

geis-group.sk

49

Geis SK s.r.o. is a well-established logistics and transportation company operating primarily in Slovakia with a strong international presence through its parent Geis Group. The company offers a comprehensive range of logistics services including pallet transport, full truckload transport, warehousing, air and sea freight, and packaging solutions. The website reflects a mature business with over 75 years of experience, targeting business customers requiring reliable logistics solutions. Technically, the website uses a modern tech stack including jQuery, Google Tag Manager, Hotjar, and a web chat system, hosted on a German hosting provider. The site is mobile optimized and provides good user experience and navigation. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and publicly available incident response or vulnerability disclosure policies. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business. The site is free from adult or questionable content and complies well with GDPR requirements.

J

Jungheinrich

jungheinrich.sk

70

Jungheinrich Slovakia operates as a localized branch of the global Jungheinrich AG, specializing in material handling equipment and intralogistics solutions. The website targets business customers requiring customized logistics and material handling systems, positioning itself as a key player in the transportation and manufacturing sectors. The site demonstrates a professional digital presence with consistent branding and multilingual support, reflecting a mature business infrastructure. Technically, the website employs modern web standards, including HTTPS, cookie consent management via Cookiebot, and Google Tag Manager for analytics, indicating a moderate to advanced digital maturity. Security posture is solid with HTTPS and basic best practices, though explicit security policies and incident response contacts are not evident. Privacy compliance is partially addressed through cookie consent but lacks a visible privacy policy page, which is a notable gap. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced transparency in privacy and security documentation.

A

Ampacet Corporation

ampacet-design-gallery.com

71

Ampacet Corporation is a global leader in manufacturing masterbatch products that enhance the aesthetics, functionality, and sustainability of plastic products. The company serves diversified markets including packaging, infrastructure, and industrial applications, providing innovative color and additive solutions backed by technical support worldwide. Their business model focuses on manufacturing and supplying masterbatch products along with technical services and color management solutions, positioning them as a key player in the plastics manufacturing industry. Technically, the website is built on WordPress using the Divi theme and incorporates modern web technologies such as jQuery, Google Analytics, and CleanTalk anti-spam protection. The site demonstrates good performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. Analytics and marketing tools are used responsibly with privacy considerations. From a security perspective, the site enforces HTTPS and uses anti-spam measures but lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the professional web presence and consistent branding mitigate immediate trust issues. Overall, the website presents a professional, trustworthy, and content-rich platform for Ampacet Corporation, with moderate to good security posture and privacy compliance. Strategic improvements in security headers, incident response transparency, and domain registration clarity are recommended to enhance trust and resilience.

W

WALMAG MAGNETICS s.r.o.

walmagmagnetics.com

59

WALMAG MAGNETICS s.r.o. is a Czech manufacturer specializing in magnetic clamping and lifting systems with a long-standing tradition dating back to the 1960s. The company offers high-quality products such as lifting magnets, magnetic chucks, and demagnetization equipment, targeting industrial clients in warehouses, workshops, metallurgy, and steel plants. Their business model includes manufacturing, direct sales via an e-commerce platform, and professional service and training offerings. The company maintains a strong market position with a focus on safety, efficiency, and customer satisfaction. Technically, the website employs a modern technology stack including Bootstrap, jQuery, OwlCarousel, Google Maps API, and multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Matomo, and Smartlook. The site is mobile-optimized, well-structured, and includes comprehensive cookie consent mechanisms, reflecting a mature digital presence. From a security perspective, the website enforces HTTPS, implements security headers, and uses anti-forgery tokens in forms. Cookie consent and privacy policies are present and GDPR compliant. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and business information appear professional and trustworthy. Overall, the website presents a low to moderate risk profile with strong business credibility and technical implementation. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and a vulnerability disclosure policy to enhance transparency and trust.

W

WALMAG MAGNETICS s.r.o.

walmag.pl

60

WALMAG MAGNETICS s.r.o. is a Czech manufacturer specializing in magnetic lifting devices and magnetic chucks for industrial applications. With a history dating back to the 1960s and independent operation since 2011, the company serves a broad international market with products designed for metal handling, machining, and demagnetization. Their business model focuses on B2B sales supported by a professional service center and operator training. The website reflects a mature digital presence with multilingual support and an integrated e-commerce platform. Technically, the site employs modern frameworks such as Bootstrap and jQuery, integrates multiple analytics and tracking tools, and uses Google Maps for location display. Security posture is strong with HTTPS, anti-forgery tokens, and cookie consent mechanisms, though no explicit security policy or incident response information is published. WHOIS data is unavailable, likely due to registry privacy policies, but the website content and business information support legitimacy. Overall, the site is professional, secure, and compliant with privacy regulations, targeting industrial clients globally.

D

Deutsche Börse Cash Market

deutsche-boerse-cash-market.com

62

Deutsche Börse Cash Market operates as a key financial market platform under the Deutsche Börse Group umbrella, providing comprehensive trading and listing services for equities, ETFs, bonds, and other financial instruments. The platform supports both primary and secondary market activities, including IPO facilitation, market making, and capital market partnerships. The website reflects a mature digital presence with professional design, clear navigation, and integration with related Deutsche Börse entities. Technically, the site uses modern JavaScript libraries and analytics tools, hosted on a cloud platform, and implements cookie consent mechanisms aligned with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The WHOIS data is missing or unavailable, which is inconsistent with the professional nature of the site but may be due to privacy protection or domain registration issues. Overall, the site is trustworthy and serves a specialized financial audience effectively.

PRAGUE INSTITUTE is an established Czech language school founded in 2000, offering a broad range of language education services including group, corporate, and individual courses, as well as preparation for internationally recognized exams such as TOEFL and Cambridge English. The institute also provides translation and interpreting services, positioning itself as a comprehensive language education provider in the Czech Republic. The website reflects a medium-sized education business with a consistent brand and a strong market presence supported by official certifications and client references. Technically, the website employs a custom CMS with a technology stack including jQuery, Google Analytics, and Zopim Live Chat, but uses outdated JavaScript libraries that pose moderate security risks. The site is GDPR compliant with a clear cookie consent mechanism and privacy policy. Security posture is adequate but could be improved by updating libraries and adding security headers. Overall, the website is professional, trustworthy, and serves its target audience effectively.

D

data-based s.r.o.

data-based.io

55

data-based s.r.o. is a Czech Republic-based technology company specializing in transforming data into actionable business growth for small and medium businesses. Their offerings include data strategy consulting, integration, business intelligence, and smart automation, supported by a certified partnership with Keboola. The company is developing a specialized analytics product for multi-location businesses, indicating growth and innovation focus. The website is professionally designed, mobile-optimized, and provides clear navigation and contact channels, including a contact form with anti-spam measures. Technically, the company leverages modern tools such as Keboola, Power BI, Azure, Python, and SQL, reflecting a mature and capable technology stack. Security posture is moderate with HTTPS implied and some best practices like honeypot fields, but lacks visible security headers and published privacy or cookie policies, which are compliance gaps. WHOIS data is privacy-protected, which is reasonable for this business type, but limits domain age and registrant verification. Overall, the website and business present a trustworthy and professional image with room for improvement in privacy compliance and security transparency.

F

Food Is Good

foodisgood.cz

43

Food Is Good is a small hospitality business specializing in catering services for weddings, celebrations, and corporate events primarily in South Bohemia, Czech Republic. The website presents a professional and consistent brand image with clear contact information and social media presence. The business model focuses on providing customized catering menus and event support, positioning itself as a local trusted catering provider. Technically, the website is built on WordPress using the Divi theme, leveraging modern web technologies including Google Fonts and Google Analytics. The site is mobile-optimized and implements standard SEO best practices. Security posture is solid with HTTPS enforced and appropriate security headers present, though explicit security policies and vulnerability disclosure mechanisms are absent. Privacy compliance is well addressed with comprehensive cookie and privacy policies and a consent mechanism. The lack of WHOIS data limits domain trust assessment but the website content and contact details support legitimacy. Overall, the site is well-constructed, secure, and compliant for its business scope.

J

Jan Vašek - Markeťák zblázněný do Facebooku

jan-vasek.cz

61

The website www.jan-vasek.cz represents a personal brand focused on online marketing education and consulting, particularly specializing in Facebook and Instagram advertising. The business claims to have been active since 2011, targeting Czech-speaking clients interested in social media marketing training. The site is built on the Wix platform, leveraging Wix's Thunderbolt framework and modern JavaScript polyfills to ensure compatibility and performance. The technical infrastructure is typical for a small personal brand website, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. WHOIS data is unavailable due to privacy protection, which is common for personal websites but reduces transparency. Overall, the site is professional and trustworthy but could improve in privacy compliance and security transparency.

W

Watsu for Health, z. s.

watsu4health.cz

54

Watsu for Health, z. s. is a Czech non-profit association specializing in aquatic therapy, particularly Watsu® and related water-based therapies. The organization offers therapy services, educational workshops, and certified courses aimed at promoting the healing effects of water for a diverse audience including people with physical disabilities, caregivers, and seniors. Their market position is that of a specialized aquatic therapy provider and the sole certified Watsu® training organization in the Czech Republic. The website is built on WordPress with WooCommerce integration, supporting e-commerce and event bookings. The technical infrastructure is modern and well-maintained, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and security headers implemented, though cookie consent mechanisms and explicit security policies are lacking. Overall, the website is professional, trustworthy, and compliant with GDPR in terms of privacy policy presence, but could improve in cookie compliance and incident response transparency.

Æ

æthero

aethero.cz

50

æthero is a small Czech Republic-based e-commerce and digital agency specializing in Shopify platform development, custom app creation, e-commerce optimization, design, and marketing services. The company positions itself as a Shopify partner with a focus on building scalable e-shops and providing complementary applications such as eSyncer for product data synchronization. The website demonstrates a professional and consistent brand image with client references and clear service offerings. Technically, the site uses modern JavaScript libraries, Google Analytics, and a proprietary CMS (Solidpixels). HTTPS is enforced, but security headers are missing, and privacy-related policies are not clearly presented. WHOIS data is unavailable, which slightly impacts trust but does not detract from the professional presentation. Overall, æthero shows a good digital maturity level with room for improvement in privacy compliance and security best practices.

P

PŮJČOVNA LODÍ NAPALUBU S.R.O.

napalubu.eu

49

PŮJČOVNA LODÍ NAPALUBU S.R.O. operates a professional boat rental and captain training service primarily focused on the Vltava, Slapy, and Orlík regions in the Czech Republic. The company offers modern and sport boats for rent, catering to customers both with and without boating licenses. The website reflects a well-established local business with a clear market position and a small company size. Technically, the site is built on WordPress with WooCommerce and uses common plugins for SEO, marketing, and user interaction, including Google Tag Manager and Facebook Pixel. Security posture is adequate with HTTPS enforced and reCAPTCHA on forms, though some security headers could be improved. Privacy compliance is strong with GDPR and cookie policies clearly presented and an opt-in consent mechanism. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

R

Rentsafe z.s.

boatsafe.cz

51

Boatsafe.cz is an online insurance provider specializing in comprehensive insurance products tailored for recreational and professional sailors in the Czech Republic. The company offers a variety of insurance products including deposit insurance, skipper liability insurance, travel insurance, cancellation insurance, regatta insurance, and sea assistance services. The website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and extensive content including FAQs, customer testimonials, and partner endorsements. Technically, the site uses modern frameworks such as Yii and Bootstrap, integrates Google Tag Manager and analytics tools, and enforces HTTPS with CSRF protection. However, no WHOIS data was found for the domain, which raises concerns about domain registration transparency. Privacy and cookie policies are well implemented with GDPR compliance and user consent mechanisms. Overall, the site demonstrates a strong business presence and digital maturity but would benefit from enhanced security headers and public WHOIS information to improve trustworthiness.

F

Freedive Praha

freedivepraha.cz

54

Freedive Praha is a specialized small business based in the Czech Republic offering freediving courses, training sessions, expeditions, and equipment sales. The website is professionally designed using the Shoptet e-commerce platform, featuring rich content, customer reviews, and clear navigation optimized for desktop and mobile users. The technical infrastructure includes modern tracking and marketing tools such as Google Analytics, Facebook SDK, and Google Tag Manager, supporting moderate user tracking with GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced and no exposed sensitive data, though the absence of security headers and public WHOIS data suggests areas for improvement. Overall, the website presents a trustworthy and professional online presence for a niche sports education and recreational business.

S

Sailing Centrum

sailingcentrum.cz

55

Sailingcentrum.cz is a specialized Czech Republic-based e-commerce retailer focused on sailing and outdoor equipment, offering both sales and rental services. The website presents a professional and well-structured platform with detailed product listings, clear navigation, and comprehensive policies including privacy and cookie usage compliant with GDPR. The technical infrastructure leverages modern web technologies such as AngularJS, jQuery, and integrates multiple analytics and marketing tools, hosted on Azure Blob Storage with a custom e-commerce platform. Security posture is generally good with HTTPS enforced and cookie consent implemented, though improvements in security headers are recommended. The absence of WHOIS data limits domain trust assessment but the website's content and contact information suggest a legitimate business. Overall, the site is well-positioned in its niche with a solid digital presence.

KOBODAS INDUSTRY s.r.o. is a small Czech company specializing in the sale of construction materials, targeting local customers and construction professionals. The website is currently a 'coming soon' placeholder with basic contact information, business hours, and company representatives listed. The technical infrastructure is based on WordPress with common plugins such as SeedProd for coming soon pages, jQuery, Tailwind CSS, and FontAwesome. The site is mobile responsive but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and privacy policies. No WHOIS data was available, which limits domain legitimacy verification. Overall, the site presents a basic but functional online presence for a small local business.

D

DRAGON solutions s.r.o.

mindtreat.art

47

mindtreat.art is a Czech Republic based small healthcare service provider specializing in psychotherapy, coaching, seminars, and mindful dance activities. The business operates under DRAGON solutions s.r.o. and targets individuals seeking personal development and mental health support in Olomouc. The website is built on WordPress using the Divi theme and includes modern SEO and performance optimization plugins. Security posture is good with HTTPS and anonymized Google Analytics, but lacks DNSSEC and formal privacy policies. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional and trustworthy with room for compliance improvements.

The Medizinische Schule Brandenburg is a specialized educational institution affiliated with the Universitätsklinikum Brandenburg an der Havel GmbH, providing professional training in nursing, physiotherapy, and related medical fields. It serves a regional audience in Germany with a focus on high-quality theoretical and practical education. The website reflects a well-structured, content-rich platform that supports prospective students and stakeholders with comprehensive information and multimedia resources. Technically, the site employs modern web technologies including Bootstrap, jQuery, and a consent management platform, ensuring a responsive and accessible user experience. Security posture is solid with HTTPS enforcement, consent management, and form protection via reCAPTCHA, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the domain and website present a trustworthy and professional digital presence aligned with the healthcare education sector.

E

EPIDERMA®

epiderma.cz

56

EPIDERMA® is a Czech-based company specializing in dermocosmetics and dietary supplements designed for sensitive and problematic skin conditions such as acne, eczema, and psoriasis. The company operates an e-commerce platform primarily targeting consumers seeking specialized skincare solutions with patented compositions. The website is professionally designed, multilingual, and leverages a known Czech e-commerce CMS (Shoptet) to deliver its products online. The business model focuses on direct online sales with complete care programs and product lines tailored to specific skin issues. Technically, the website employs a modern technology stack including Google Analytics 4, Facebook Pixel, TikTok Pixel, and other marketing and tracking tools. It uses HTTPS with good SSL configuration and includes cookie consent mechanisms to comply with GDPR. The site is mobile-optimized and provides a good user experience with clear navigation and product categorization. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, but lacks explicit security headers and published security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the professional presentation and e-commerce setup suggest a legitimate business. Overall, the website presents a moderate risk profile with good technical and content quality but could improve transparency in security policies and domain registration information to enhance trustworthiness.

C

CLITIA a.s.

clitia.cz

47

CLITIA a.s. is a Czech holding company established in 1992, operating primarily in the energy, real estate, and hospitality sectors. The company manages a portfolio of subsidiaries engaged in electromontage, energy services, property rental and sales, and hospitality including hotels and wellness spas. The website presents a professional image with clear business information and contact details, targeting business clients and customers interested in these sectors. Technically, the site uses modern JavaScript libraries and a CMS platform, providing a good user experience with mobile optimization and clear navigation. However, the absence of WHOIS data and privacy policies reduces trust and compliance posture. Security headers are not detected, and no incident response or vulnerability disclosure information is provided, indicating room for improvement in security maturity. Overall, the website is functional and business-appropriate but would benefit from enhanced security and privacy compliance measures.

E

ELEKTRO-COMP spol. s r.o.

elektrocomp.cz

41

ELEKTRO-COMP spol. s r.o. is a Czech-based small enterprise specializing in electrical engineering services including manufacturing of fittings for low and high voltage poles, public lighting installation, high voltage work, surveying, and electrical project activities. The company has a long-standing presence since 1999, serving primarily local or regional clients in the energy sector. The website reflects a basic digital presence built on Joomla CMS with dated technology and limited modern features. Security posture is minimal with no visible HTTPS enforcement or security headers, and privacy compliance is basic with a privacy policy page but no cookie consent or GDPR explicit statements. Contact information is not clearly presented on the main page, limiting direct communication channels. Overall, the site is functional but lacks advanced technical and security maturity.

O

Obec Lipová-lázně

lipova-lazne.cz

55

Obec Lipová-lázně operates an official municipal website providing comprehensive information and services to residents and visitors. The site offers local government details, news updates, tourism information, and community resources. It targets local citizens and tourists interested in the region's natural and cultural offerings. The website is built on the VismoWeb5 CMS platform and integrates Google services such as reCAPTCHA and Translate for enhanced usability and security. While the site maintains a good security posture with HTTPS and spam protection, it lacks explicit security and incident response policies. Contact information is clearly presented, supporting trust and transparency. Overall, the site is a reliable digital presence for the municipality, though improvements in mobile optimization and security headers could enhance its robustness.

H

Hotel Rajská Zahrada

hotelrajskazahrada.cz

42

Hotel Rajská Zahrada is a spa and wellness hotel located in Nové Město nad Metují, Czech Republic, offering stylish accommodation, wellness services, a restaurant, fitness facilities, and event hosting. The hotel targets tourists, families, and wellness seekers, positioning itself as a regional hospitality provider with a focus on relaxation and active holidays. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and APIs, including Google Maps and reCAPTCHA, ensuring a secure and user-friendly experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site demonstrates high trustworthiness and compliance with GDPR, supporting the legitimacy of the business. Recommendations include enhancing accessibility, publishing security and incident response policies, and continuous monitoring of third-party components.

B

BushcraftPortal.cz | Rady, tipy, návody, recenze produktů pro život v přírodě.

bushcraftportal.cz

38

BushcraftPortal.cz is a Czech language website dedicated to providing advice, tips, tutorials, and product reviews for outdoor bushcraft and survival enthusiasts. Established in 2012, it serves a niche audience interested in nature and survival skills, supported by a small but consistent content publishing model. The site integrates multimedia content including a YouTube channel and links to a partner e-commerce site, bushcraftshop.cz. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses common SEO and social sharing plugins, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies, which is a notable gap given the use of tracking technologies like Facebook Pixel. Overall, the website is functional, professionally designed, and trustworthy within its niche, but would benefit from enhanced privacy and security transparency.

L

Lagardère Travel Retail

lagardere-tr.cz

67

Lagardère Travel Retail Czech Republic operates as a major player in the travel retail sector, managing hundreds of retail outlets across airports, train stations, and metro stations. The company is part of the global Lagardère group, which is a recognized leader in travel retail worldwide. Their business model focuses on providing tailored retail and dining experiences to travelers, covering segments such as Travel Essentials, Duty Free & Fashion, and Foodservice. The website reflects a professional corporate presence with consistent branding and multilingual support for international visitors. Technically, the website is built on Drupal CMS and leverages modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for UI and cookie consent management. The site is mobile optimized and includes privacy-conscious analytics via Matomo. The cookie consent mechanism is robust, supporting GDPR compliance with high privacy settings. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for form protection. However, explicit security headers are not visible in the provided data, and no dedicated security or incident response pages are found. The WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and linkage to the parent Lagardère group support its legitimacy. Overall, the website presents a secure, privacy-aware, and professional digital presence suitable for a large multinational retail operator. Recommendations include enhancing security headers, publishing incident response contacts, and adding terms of service to improve transparency and compliance.

V

Via Delicia

viadelicia.cz

55

Via Delicia is a small family-run Czech company specializing in the production and online retail of preserved food products made from fresh local ingredients. Their business model focuses on traditional food preservation methods and also includes selling preserving jars. The website positions them as a trusted local manufacturer with a clear focus on quality and regional authenticity. Technically, the site is built on the Shoptet e-commerce platform, leveraging modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Facebook SDK. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and includes secure login forms with CSRF protection, but lacks explicit security policies and incident response information. Privacy compliance is well addressed with visible cookie consent and privacy policies. The absence of WHOIS data reduces domain transparency and slightly impacts trust, but overall the website and business appear legitimate and professional.

R

Royal Spa, a.s.

diana-losiny.cz

48

The website www.diana-losiny.cz represents Wellness hotel DIANA Velké Losiny, a medium-sized hospitality business operating in the Czech Republic's Jeseníky region. It offers accommodation, wellness services, therapeutic procedures, sports facilities, and family-friendly amenities. The hotel is part of the Royal Spa group, a recognized spa and wellness operator in the Czech market. The site is professionally designed with good content quality, clear navigation, and mobile optimization, targeting tourists and wellness seekers. The business model focuses on hospitality and wellness services with additional conference facilities and gourmet cuisine offerings. Technically, the website uses a custom CMS platform with common JavaScript libraries such as jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is served over HTTPS with good SSL configuration, though security headers are not explicitly detected. Cookie consent mechanisms and privacy policies are implemented, indicating a good level of privacy compliance. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site shows good practices such as HTTPS enforcement and cookie consent but lacks explicit security policies and incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces domain registration trustworthiness, but the strong brand association with Royal Spa and consistent business information support legitimacy. Overall, the site presents a low risk but would benefit from enhanced security headers and domain registration transparency. Strategic recommendations include implementing security headers, publishing a security policy and vulnerability disclosure, and verifying domain registration details to improve trust and compliance.

C

Cakir's Burger

cakirs.cz

41

Cakir's Burger is a small local burger restaurant based in Šumperk, Czech Republic, offering a variety of burgers and related menu items through an online e-shop and mobile application. The business focuses on providing diverse burger options including single, double, and triple burgers, along with sides and drinks, targeting general consumers seeking convenient food delivery and takeaway services. The website is professionally designed with good content quality and clear navigation, supporting online ordering and customer engagement features such as order tracking and bonus systems. Technically, the site employs modern web technologies including service workers and integrates external APIs like OpenStreetMap for geolocation services. However, the absence of WHOIS data and lack of visible security headers or explicit privacy and cookie policies indicate areas for improvement in transparency and compliance. The security posture is moderate with room for enhancement in SSL configuration and security best practices. Overall, the website presents a functional and user-friendly platform for its business model but should address privacy and security gaps to strengthen trust and regulatory compliance.

F

FARMASYRY.CZ

farmasyry.cz

50

FARMASYRY.CZ is a Czech-based online retailer specializing in cheeses, dairy products, meats, beverages, and gourmet food items. The website targets consumers interested in specialty food products within the Czech Republic, operating on the Shoptet e-commerce platform. The business model focuses on direct online sales with clear product categorization and a user-friendly shopping experience. The market position is that of a niche regional retailer with a small business size profile. Technically, the website employs a modern albeit somewhat dated technology stack including jQuery and the Shoptet platform. The site is mobile optimized and includes basic SEO and accessibility features. Performance is moderate with room for improvement. Security measures include HTTPS and CSRF protection on forms, but lack of security headers and absence of privacy and cookie policies indicate compliance and security gaps. The security posture is moderate with no critical vulnerabilities detected in the provided data. However, the absence of WHOIS data and privacy policies reduces trust and compliance standing. Contact information is clearly presented, enhancing business credibility. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and verification of domain registration details to strengthen trust and regulatory adherence.

Amici Pizza & Burgers, operated by Fusion Collective s.r.o., is a well-established food delivery and bistro service based in Brno, Czech Republic. The company specializes in pizza, burgers, and related food delivery services, complemented by franchising and catering options. The website reflects a mature digital presence with comprehensive menus, loyalty programs, and customer engagement features. Technically, the site employs modern web technologies including Google Tag Manager, Facebook Pixel, and Google Maps API, ensuring a robust and interactive user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. The absence of WHOIS data is a concern but does not detract significantly from the overall legitimacy given the professional presentation and clear business information. Overall, the site is safe, user-friendly, and compliant with GDPR requirements.

H

H+M Breakrstorm, s.r.o.

chatacervenohorskesedlo.cz

40

Chata Červenohorské Sedlo is a small hospitality business offering affordable mountain accommodation and related services in the Jeseníky region of the Czech Republic. The website highlights lodging options, restaurant services, parking, sports activities including skiing and cycling, group event hosting, and wellness facilities. The business targets tourists and visitors seeking budget-friendly stays above 1000 meters altitude with access to mountain activities. Technically, the website is built on WordPress using Elementor and supports multilingual content via TranslatePress. It employs Google Analytics and Tag Manager for visitor tracking but lacks visible privacy and cookie policies, which may impact compliance. Security posture is moderate with HTTPS enabled and use of reCAPTCHA on forms, but missing security headers and absence of WHOIS data reduce trust. Overall, the site is functional, well-structured, and provides clear contact information, but could improve privacy compliance and security transparency.

H

Hospůdka U Bosé nohy

ubosenohy.cz

37

Hospůdka U Bosé nohy is a small hospitality business operating a pub and restaurant in Brno Veveří, Czech Republic. The establishment offers traditional Czech pub food, daily lunch menus, and a selection of beers including Březňák from the Velké Březno brewery. The website presents clear business information, including contact phone number and physical address, and emphasizes quality beer service with a certification from Liga garantované kvality. The target audience is local residents and visitors seeking a traditional pub experience. Technically, the website uses legacy JavaScript libraries such as jQuery and related plugins for slideshows and lightbox functionality. The site has a moderate performance profile with basic mobile optimization and accessibility features. SEO is basic but sufficient for a small local business. No modern CMS or hosting provider information is detected. The site lacks privacy and cookie policies and does not implement user tracking or analytics, indicating minimal data collection. From a security perspective, the site does not present advanced security headers or policies, and no forms are present to collect sensitive data, reducing attack surface. However, the absence of HTTPS verification and security headers is a concern. The WHOIS data is missing, which reduces trustworthiness and raises questions about domain legitimacy. No WAF or blocking mechanisms are detected, and the site content is fully accessible. Overall, the website is functional and suitable for its business purpose but would benefit from improved security practices, privacy compliance, and domain registration transparency to enhance trust and compliance.

T

The Roses Co. s.r.o.

theroses.cz

53

The Roses Co. s.r.o. operates a specialty coffee roasting business with an e-commerce platform, barista training center, and coffee catering services primarily targeting coffee enthusiasts and businesses in the Czech Republic. The company maintains a professional online presence with detailed product offerings, training schedules, and multiple contact channels. Technically, the website leverages modern analytics and marketing tools such as Google Analytics 4, Facebook Pixel, Hotjar, and ElfSight widgets, built on the Upgates e-commerce platform with Nette framework components. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although no explicit security policy or incident response information is published. Privacy compliance is well addressed with clear GDPR and cookie policies and consent mechanisms. The lack of WHOIS data due to privacy protection slightly reduces transparency but is typical for small to medium e-commerce businesses. Overall, the website is professional, secure, and trustworthy with a high-quality user experience.

P

Pivo Zlosin

pivozlosin.cz

50

Pivovar Zlosin is a small family-owned craft brewery based in Velké Losiny, Czech Republic, established in 2016. The company leverages a rich brewing tradition dating back over 100 years and focuses on producing high-quality, locally sourced, and ecologically sustainable beers. Their business model centers on direct-to-consumer e-commerce sales of bottled beers and branded merchandise, targeting mature customers who appreciate artisanal products from the Jeseníky region. The website is professionally designed, mobile-optimized, and provides clear navigation and product information, supporting a positive user experience. Technically, the site is built on the Shoptet e-commerce platform, utilizing jQuery, Google Analytics 4, Google Tag Manager, and Facebook SDK for marketing and analytics. The site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. However, the absence of security headers and outdated jQuery version present potential security risks. The WHOIS data for the domain is unavailable, which reduces trust in domain legitimacy, though the website content and business information appear credible. Security posture is moderate with good SSL configuration and secure form handling, but lacks explicit security policies and incident response contacts. Privacy compliance is basic but present, with privacy and cookie policies accessible. Overall, the site is safe for mature audiences, with an age verification prompt due to alcohol sales. Strategic improvements in security headers, updated libraries, and domain registration transparency are recommended to enhance trust and compliance.

K

Králický Sněžník, z.ú.

kralickysneznik.net

43

Králický Sněžník, z.ú. operates a comprehensive tourism promotion website for the Králický Sněžník region in the Czech Republic. The site provides detailed information on local attractions, accommodation options, events, and live weather and webcam feeds, targeting tourists and visitors interested in outdoor activities and regional culture. The business model focuses on destination marketing and supporting local hospitality services. Technically, the website employs modern JavaScript libraries such as jQuery, Leaflet.js for interactive maps, and Google Tag Manager for analytics and tracking, indicating a moderate level of digital maturity. The site is mobile-optimized and features a cookie consent mechanism aligned with GDPR requirements. Security-wise, the website uses HTTPS with good SSL configuration and implements cookie consent, but lacks explicit security headers and incident response contact details, which are areas for improvement. The absence of WHOIS registrant data introduces some uncertainty regarding domain registration legitimacy, though the website content and contact information suggest a legitimate regional tourism entity. Overall, the website presents a professional and trustworthy front for regional tourism promotion with moderate technical and security maturity.

Z

ZŠ a MŠ Červená Voda

cvvoda.cz

47

The website www.cvvoda.cz serves as the official online presence for Základní a mateřská škola Červená Voda, an elementary and kindergarten school located in the Czech Republic. It provides essential information and resources for students, parents, and staff, including access to school portals such as Bakaláři and Office 365, school news, calendar events, and cafeteria ordering. The site targets the local community and is designed to facilitate communication and engagement with the school environment. Technically, the website employs a traditional web stack with jQuery, jQuery UI, and several UI enhancement libraries like Colorbox and Malihu custom scrollbar. The site is served over HTTPS, ensuring encrypted communication, and is moderately optimized for mobile devices with responsive design elements. However, it lacks modern security headers and advanced accessibility features, indicating room for technical improvement. From a security perspective, the site demonstrates basic good practices such as HTTPS usage and no visible exposure of sensitive data. Nonetheless, the absence of privacy and cookie policies, security.txt files, and vulnerability disclosure mechanisms highlight compliance and security posture gaps. The WHOIS data for the domain is unavailable, which limits the ability to fully verify domain legitimacy, though the website content and official links strongly suggest a legitimate educational institution. Overall, the website is functional and professional for its intended educational purpose but would benefit from enhanced privacy compliance, security hardening, and transparency measures to improve trust and regulatory adherence.

S

Služby obce Červená Voda, s.r.o.

socv.cz

40

Služby obce Červená Voda, s.r.o. is a small municipal services company serving the village of Červená Voda in the Czech Republic. The website provides information about local services such as water supply, sewage, technical services, waste collection, and local taxi services. The company appears to be a local government-related entity focused on providing essential community services. The website is built using CMS Bakery and employs several JavaScript libraries including jQuery, jQuery UI, Colorbox, Select2, and Swiper.js for UI enhancements. The site is mobile optimized and has a consistent branding approach, though it lacks comprehensive contact details and legal policies.

M

Město Jeseník

jesenik.org

45

Město Jeseník operates an official municipal website providing comprehensive information about the city, its services, cultural events, and public announcements. The site targets residents, visitors, and tourists, offering a centralized platform for city-related information and engagement. The website is well-established, with a domain registered since 1998, reflecting a mature digital presence. Technically, the site employs modern web technologies including jQuery, YouTube and Vimeo APIs, and Font Awesome icons, hosted via REG-WEBGLOBE. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and a published privacy policy. The site integrates Google Analytics for minimal user tracking and maintains active social media channels to engage its audience. Overall, the website is professional, trustworthy, and serves its public service role effectively.

The website www.trebonpenzion.cz represents a small family-run pension offering accommodation near Třeboň in the Czech Republic. It targets families, cyclists, fishermen, and tourists interested in the natural and historical attractions of the Třeboň region. The site provides detailed information about the pension's amenities, location, and nearby points of interest, supporting a local hospitality business model. Technically, the site uses legacy JavaScript frameworks like Dojo and integrates Google Analytics and Tag Manager for user tracking. The site is accessible and contains a cookie consent mechanism indicating GDPR awareness. However, no WHOIS data is available for the domain, which reduces trustworthiness and raises questions about domain registration transparency. Security headers are not detected, and SSL configuration details are unknown, suggesting room for improvement in security posture. Overall, the site is functional and informative but would benefit from enhanced security practices and clearer contact information.

Penzion Mlýnský Dvůr is a small family-run hospitality business located near Třeboň in the Czech Republic, offering accommodation in farm-style apartments and rooms with additional services such as horse riding, fishing, and event hosting. The website presents a well-structured and content-rich platform targeting families, cyclists, and groups seeking a nature-oriented vacation experience. Technically, the site uses standard web technologies including Google Fonts and Font Awesome, but lacks advanced frameworks or CMS identification. Security posture is moderate with HTTPS assumed but no visible security headers or incident response information. Privacy policies exist but lack active consent mechanisms. The absence of WHOIS data is a concern for domain legitimacy and trust, requiring further verification. Overall, the website is professional and trustworthy from a content perspective but would benefit from enhanced security and compliance measures.

V

Vak - Vodovody a kanalizace Jesenicka, a. s.

vakjes.cz

43

Vak - Vodovody a kanalizace Jesenicka, a. s. is a regional utility company based in Jeseník, Czech Republic, providing essential water supply and sewage management services. The company operates a customer service center and regularly communicates with its customers through news updates and public announcements. The website reflects a stable regional utility provider with a history dating back to 2003, indicating a mature market presence. Technically, the website is built on the Noteo Engine CMS platform, utilizing standard web technologies such as HTML5, CSS, JavaScript, and jQuery, with embedded multimedia content from YouTube and Vimeo. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and includes a cookie consent mechanism denying ad and analytics storage by default, but lacks published security policies or incident response contacts. Overall, the site is safe, professional, and trustworthy, though it would benefit from enhanced privacy and security disclosures.

G

Gmina Baborów

baborow.pl

58

Gmina Baborów operates an official municipal website serving the local community in Poland, providing public announcements, event information, and access to government services. The site is well-structured, uses modern web technologies including Bootstrap and jQuery, and integrates Google Analytics for visitor insights. The website demonstrates good digital maturity with mobile optimization and accessibility features. Security posture is adequate with HTTPS and CSRF protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is limited by the absence of a dedicated privacy policy page, but cookie consent is implemented. Overall, the domain registration data aligns well with the website's official nature, indicating high legitimacy and trustworthiness.

M

Mesto Liptovský Hrádok

liptovskyhradok.sk

55

The website www.liptovskyhradok.sk serves as the official digital presence of the city of Liptovský Hrádok, Slovakia. It provides comprehensive information about the city's administration, cultural and sporting events, public services, and official announcements. The site targets residents, visitors, and local businesses, positioning itself as a trusted source for municipal information. The business model is that of a government entity providing public information and services. The website is professionally maintained by WEBY GROUP s.r.o., a Slovak web agency, ensuring technical reliability and compliance with local regulations such as GDPR. The content is well-structured, relevant, and updated, reflecting a medium-sized municipal operation with a focus on community engagement.

Z

Zmizelé domy | Hradec nad Moravicí

zmizeledomy.cz

40

The website zmizeledomy.cz is an informational platform dedicated to documenting the history of vanished houses in Hradec nad Moravicí, Czech Republic. It provides historical descriptions, images, and an interactive map to educate the general public about local cultural heritage. The site is relatively new, established in 2023, and targets history enthusiasts and local residents interested in the town's architectural past. Technically, the site uses modern front-end libraries such as Bootstrap, jQuery, Font Awesome, and integrates the Mapy.cz API for mapping features. The design is professional and mobile-optimized, offering a good user experience with clear navigation. However, the site lacks critical privacy and security policies, including privacy, cookie, and terms of service documents, as well as contact information for business or security inquiries. Security headers and incident response mechanisms are absent, which lowers the security posture. No analytics or advertising scripts were detected, indicating minimal user tracking. Overall, the domain registration is consistent with the website's purpose and shows no suspicious patterns. Strategic improvements in privacy compliance and security practices are recommended to enhance trust and compliance.

C

Centrum pre umelú inteligenciu (CUI)

slovak.ai

46

AIslovakIA is a Slovak national platform dedicated to the development and promotion of artificial intelligence. It operates as a neutral, independent, and non-profit entity, connecting academia, industry, government, and international institutions to foster AI excellence in Slovakia. The platform is managed by the Center for Artificial Intelligence (CUI) and has founding members including the American Chamber of Commerce in Slovakia, IT Association of Slovakia, and the Slovak University of Technology in Bratislava. The website provides information about AI dialogue, infrastructure, education, and think tank activities, targeting professionals and stakeholders in the AI ecosystem. Technically, the website is built on WordPress with Elementor, using modern web technologies such as Bootstrap and jQuery. It is hosted likely by WebSupport, a Slovak hosting provider, and is optimized for mobile devices with good SEO practices. However, some technical improvements could be made, such as enabling DNSSEC and adding security headers to enhance security posture. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers. The Google Analytics plugin is installed but not configured, indicating minimal user tracking currently. No privacy or cookie policies are present, which is a compliance gap under GDPR. Contact information is clearly provided, including an email and physical address, enhancing business credibility. Overall, the website is professional, trustworthy, and serves its purpose as a national AI platform. The main risks relate to privacy compliance and security hardening. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and properly configuring analytics to balance data collection with user privacy.

G

GNSS Centre of Excellence

gnss-centre.cz

43

GNSS Centre of Excellence is a Czech national center coordinating GNSS activities, focusing on applications in aviation, railways, roads, and public administration. The organization partners with key governmental and commercial entities such as the Ministry of Transport and Prague Airport, positioning itself as a critical hub for GNSS technology development and validation in the Czech Republic. The website reflects a professional and consistent brand image, targeting government institutions and commercial sectors involved in satellite navigation and communication technologies. Technically, the site is built on WordPress with multilingual support and gallery plugins, hosted by WEDOS, a Czech hosting provider. Performance and mobile optimization are moderate, with room for improvement in accessibility and SEO. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures.