Security Directory

The Arbeitskreis Forum 13+ website represents an independent working group of experts from German library consortia and related academic institutions focused on open-access licensing and contract negotiations. The site serves as an informational platform for coordination and knowledge exchange among stakeholders in the German academic library sector. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and D3.js, hosted on academic infrastructure (GWDG). However, it lacks a CMS and advanced analytics or marketing tools, reflecting a focused, non-commercial purpose. Security posture is basic, with no explicit HTTPS or security headers information available, and no privacy or cookie policies present. Contact and incident response information are absent, limiting user trust and compliance visibility. Overall, the site is safe, professional, and targeted at a specialized academic audience but would benefit from enhanced security and compliance features.

O

open-access.network

open-access.network

65

open-access.network is a well-established non-profit educational platform focused on providing comprehensive information, training, and networking opportunities related to Open Access publishing primarily for the German-speaking scientific community. The website is supported by reputable academic institutions and public funding agencies, which reinforces its credibility and market position as a central resource for Open Access knowledge and community engagement. The platform offers a variety of services including workshops, helpdesk support, news updates, and event calendars, targeting researchers, librarians, publishers, and science administrators. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and delivering a responsive, accessible, and well-structured user experience. The presence of cookie consent mechanisms and use of Matomo analytics indicate a commitment to privacy compliance. However, some security headers are missing, and there is no visible security.txt or incident response information, suggesting areas for improvement in security transparency. The security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The WHOIS data is limited due to privacy protection and unsupported TLD, but the website's professional presentation and affiliations mitigate concerns. Overall, the site demonstrates a mature digital presence with good privacy and security practices, suitable for its educational and community-oriented mission. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and maintaining transparency to further build trust and compliance.

D

DEAL Konsortium

deal-konsortium.de

57

DEAL Konsortium is a German academic consortium focused on enabling open access publishing through transformative agreements with major scholarly publishers. The website serves librarians, researchers, and administrators by providing information and practical support for the implementation of Projekt DEAL agreements. The consortium is affiliated with prominent German science organizations and led by the German Rectors' Conference, positioning it as a key player in the German academic publishing landscape. Technically, the website is built on Joomla CMS with SP Page Builder and uses modern web technologies including jQuery, Font Awesome, and Awesomplete. It employs Cookiebot for GDPR-compliant cookie consent management and Matomo for privacy-respecting analytics. The site is hosted on infrastructure using domaincontrol.com nameservers, likely GoDaddy, and enforces HTTPS with good SSL configuration. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and consent-based analytics tracking. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly detected and could be improved. No incident response or security policy information is published, which is a gap for transparency and readiness. Overall, the website is professional, well-structured, and compliant with privacy regulations. It lacks explicit contact details and terms of service, which could be enhanced to improve business credibility and user trust. There are no signs of malicious activity or content safety concerns, making it a safe and trustworthy resource for its target audience.

I

International Coalition of Library Consortia (ICOLC)

icolc.net

59

The International Coalition of Library Consortia (ICOLC) operates as an informal global coalition of approximately 200 library consortia, facilitating collaboration and dialogue on library-related issues. The organization targets library consortia and educational institutions worldwide, providing services such as meetings, statements, and reports to support its members. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its audience. Technically, the website is built on Drupal 10 with Bootstrap frameworks, leveraging modern web technologies and responsive design. Hosting and DNS services are provided through Amazon Registrar and AWS Route53, ensuring reliable infrastructure. Google Analytics is used for visitor tracking, although no explicit cookie consent mechanism is present. The site demonstrates good mobile optimization and accessibility features. From a security perspective, the site uses HTTPS and registrar-level domain protections but lacks DNSSEC and security headers, which are recommended for enhanced security. No privacy or cookie policies were found, indicating gaps in compliance with privacy regulations such as GDPR. The absence of a security policy or incident response contact further limits the security posture. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the organization. The overall risk is moderate with recommendations to improve privacy compliance, enable DNSSEC, and implement security best practices. Enhancing transparency and user trust through published policies and consent mechanisms would strengthen the website's credibility and compliance.

H

Haut-Bailly

haut-bailly.com

56

Château Haut-Bailly is a renowned French winery specializing in Grand Cru Classé wines from the Pessac-Léognan appellation. The website showcases a premium brand with a focus on terroir, precision winemaking, and luxury hospitality services including vineyard tours, tastings, guest accommodations, private dining, and event hosting. The digital presence is well-developed with modern technologies such as WordPress CMS, Yoast SEO, and Google Tag Manager, ensuring good performance, SEO, and mobile responsiveness. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies are lacking. The absence of WHOIS registration data is a concern for domain legitimacy but does not detract from the professional presentation and trust signals on the site. Privacy compliance is partial, with cookie consent mechanisms but no clear privacy or cookie policy pages. Overall, the site is a high-quality digital asset for a luxury hospitality and wine business, with room for improvement in transparency and security documentation.

E

Ecedi

ecedi.fr

63

Ecedi is a French digital communication agency founded in 2001, specializing in responsible and ethical web communication services. The agency serves a diverse clientele including non-profits, public sector entities, and private organizations, emphasizing accessibility, social inclusion, and eco-design in its projects. Ecedi is part of the Ctrl-a group, which includes several partner agencies. The website demonstrates a mature digital presence with comprehensive service offerings ranging from strategy and conception to production and maintenance, supported by a modern technology stack including Drupal, WordPress, and various web frameworks. Technically, the website employs modern web technologies and frameworks, with good mobile optimization, accessibility, and SEO practices. The use of FriendlyCaptcha for form protection and Matomo for analytics indicates a focus on privacy and security. However, explicit security headers and cookie consent mechanisms are not evident, suggesting areas for improvement in security posture and privacy compliance. From a security perspective, the site uses HTTPS and anti-bot measures but lacks visible security headers and an incident response policy. The WHOIS data is unavailable, which reduces domain registration trustworthiness, though the website content and business information appear legitimate and professional. Overall, the site scores well on content quality and business credibility but should enhance security and privacy features. Strategically, Ecedi should focus on improving security headers, publishing a security policy, and implementing explicit cookie consent to strengthen compliance and trust. The agency's strong market position in responsible digital communication and its reputable client base provide a solid foundation for growth and enhanced digital maturity.

P

Prodigi Group Ltd

prodigi.com

61

Prodigi Group Ltd operates a leading global print on demand dropshipping platform, offering businesses and individuals access to a vast catalogue of customizable products through an easy-to-use online platform and API. The company integrates with major ecommerce platforms such as Shopify, Etsy, Wix, WooCommerce, and BigCommerce, enabling seamless order automation and fulfillment. Their business model focuses on local printing with global dropshipping, emphasizing eco-friendly practices and sustainability. The website reflects a mature digital presence with comprehensive product offerings, strong branding, and customer testimonials, positioning Prodigi as a trusted player in the print on demand industry. Technically, the website employs modern JavaScript frameworks like Alpine.js, integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, Mixpanel, and Segment, and uses responsive design with Tailwind CSS for excellent mobile optimization. The platform dashboard is hosted on a subdomain, indicating a structured service architecture. Performance is moderate with good SEO and accessibility features, supporting a positive user experience. Security posture is solid with HTTPS enforced and no visible sensitive data exposure. However, the absence of explicit security headers and a public security policy or incident response contact suggests room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Business credibility is supported by verified contact emails, professional content, and trust signals such as Fine Art Trade Guild approval and reputable client logos. Overall, Prodigi presents a professional, secure, and privacy-conscious platform suitable for its target audience. The main risk area is the lack of publicly available WHOIS data, which may be due to privacy protection but warrants monitoring. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing incident response contacts to further strengthen trust and compliance.

L

La Fabrica Bistro

lafabricabistro.cz

55

La Fabrica Bistro is a small hospitality business located in the Czech Republic, offering a refined bistro experience with a focus on breakfast, brunch, and lunch menus featuring local farm and forest ingredients. The website presents a professional and visually appealing design with clear navigation and contact information, primarily targeting local customers and visitors interested in quality dining. The technical infrastructure relies on Webnode CMS and AWS Cloudfront CDN, with Google Tag Manager implemented for analytics. Security posture is moderate with HTTPS enabled but lacks important security headers and privacy compliance documentation. The absence of WHOIS data reduces domain trustworthiness, though the website content appears legitimate and business-focused. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

C

CK Kramolín

ck-kramolin.cz

42

CK Kramolín is a small, local cycling club based in the Czech Republic, focused on organizing cycling events and supporting its members. The website provides event news, photos, and contact information primarily in Czech language, targeting cycling enthusiasts in the region. The domain age and WHOIS data align well with the club's history and activities, indicating a legitimate and stable organization. Technically, the website uses Bootstrap and jQuery with a basic but functional design. However, it lacks modern security features such as HTTPS enforcement and security headers, and does not provide privacy or cookie policies, which are important for GDPR compliance. Overall, the site is functional and informative but requires improvements in security and privacy compliance to enhance trust and protect users.

A

Rekonstrukce koupelen a kuchyní |AVE PROFIS| Plzeň a okolí

avprofis.cz

55

The website www.avprofis.cz is a small-scale business site built on the Wix platform. The site content is minimal and primarily technical, with no visible business descriptions, contact information, or policies. The lack of WHOIS data and domain registration details raises concerns about the domain's legitimacy and transparency. Technically, the site uses standard Wix scripts and polyfills but lacks advanced security headers and privacy compliance features. The security posture is basic with no evident vulnerabilities but also no strong security practices. Overall, the site appears to be either under development or a placeholder with limited business presence and low trust indicators.

A

Automoto klub v AČR Nepomuk - since 1946

amknepomuk.cz

42

The website for Automoto klub v AČR Nepomuk is a minimal, outdated online presence for a local automotive club in the Czech Republic with a claimed history since 1946. The site uses deprecated HTML framesets and lacks substantive content, modern design, or mobile optimization. There are no visible contact details, privacy policies, or terms of service, and no WHOIS data is available for the domain, which raises concerns about legitimacy and trustworthiness. The site includes Google Analytics and Tag Manager scripts but lacks security best practices such as HTTPS enforcement and security headers. Overall, the digital maturity of the site is low, and it does not meet modern standards for security or privacy compliance.

S

Stavby Linka

stavbylinka.cz

39

Stavby Linka is a Czech construction company specializing in new house construction, renovations, and property modifications primarily in the Plzeň region. The company serves both private customers and various known businesses across multiple industries. The website is built on WordPress using Elementor and Yoast SEO, featuring a professional design with good navigation and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks security headers and published security policies. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the website presents a trustworthy small business with room for improvement in privacy and security transparency.

M

Město Nepomuk

nepomuk.cz

44

The website www.nepomuk.cz is the official online presence of the town of Nepomuk in the Czech Republic, providing municipal news, events, and citizen services. It serves as a local government portal targeting residents and visitors, offering information about the town, upcoming events, contact details, and a citizen portal. The site is professionally designed with consistent branding and good content quality, supporting multiple languages including Czech, English, and German. Technically, it employs modern web technologies such as Google Analytics, Google reCAPTCHA, jQuery, and smart app banners, ensuring a moderate performance and good mobile optimization. Security-wise, the site uses HTTPS and reCAPTCHA for form protection but lacks visible security headers and comprehensive privacy or cookie policies, which are areas for improvement. The WHOIS data for the domain is unavailable, which is unusual but may be due to registry policies. Overall, the site is trustworthy and serves its purpose well but could enhance its security posture and privacy compliance.

T

Techmania Science Center

techmania.cz

63

Techmania Science Center is a well-established interactive science and educational center located in the Czech Republic, founded in 2006. The website presents a professional and comprehensive digital presence showcasing their interactive exhibits, 3D planetarium, science shows, and educational workshops. The business targets families, schools, and science enthusiasts, positioning itself as a regional leader in science education and entertainment. Technically, the website employs modern web technologies including JavaScript, Bootstrap, Google reCAPTCHA, and Cookiebot for consent management, ensuring a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS and session management cookies, though some security headers could be improved. Privacy compliance is strong with a clear GDPR-compliant privacy and cookie policy and active consent mechanisms. Overall, the website is trustworthy, well-maintained, and suitable for its audience.

A

Autoslužba TAXI Plzeň

autosluzba-taxi.cz

60

Autoslužba TAXI Plzeň is a small, established taxi service provider operating since 1990 in Plzeň and across the Czech Republic. The company offers a variety of transport services including 24/7 taxi rides, drink service for safe transport after alcohol consumption, courier deliveries, event transportation, minibus services, and car towing. The website presents clear contact information, including phone numbers and an email address, and emphasizes reliability and local presence. The business model focuses on direct customer engagement via phone orders and partnerships with local hotels and businesses. Technically, the website uses common web technologies such as jQuery and Google Tag Manager, and implements a cookie consent banner to comply with basic privacy requirements. However, no dedicated privacy policy or terms of service pages were found, which limits full GDPR compliance. Security posture is moderate with HTTPS enabled but lacking security headers and incident response information. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact details appear consistent and professional. Overall, the site is well designed, mobile-optimized, and trustworthy for its target audience.

Š

ŠMT a.s.

cz-smt.cz

54

ŠMT a.s. is a well-established Czech manufacturer specializing in heavy horizontal boring, milling machines, and lathes, serving a global industrial market with over 100 years of experience. The company offers a broad range of heavy machining equipment and related services including modernization and repairs, targeting industrial manufacturers and engineering firms worldwide. Their market position is strong with customers in over 40 countries and partnerships with major industrial brands. Technically, the website is built on Joomla CMS with Gantry 5 framework, employing modern frontend technologies and providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data limits domain trust verification, but the website content and business information appear professional and credible. Overall, the site demonstrates a mature digital presence aligned with the company's industrial manufacturing business.

A

Autodoprava OMstavby

autodoprava-omstavby.cz

45

Autodoprava OMstavby is a small Czech transportation and construction logistics company based in Plzeň, offering services such as earthworks, demolition, domestic freight transport, vehicle rental with drivers, and material removal. The company emphasizes reliability and has been operating for over two decades, supported by customer testimonials and a clear local presence. The website is built on WordPress using the Divi theme, with standard technologies like jQuery and Google Analytics integrated. It features a GDPR-compliant contact form and cookie consent banner, reflecting basic privacy awareness. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with HTTPS enabled but lacks advanced security headers and incident response information. Overall, the site is functional, professional, and suitable for its target audience but would benefit from enhanced security and transparency measures.

The website www.rybsvaz.cz appears to be a portal titled 'RIS Portál' with minimal visible content in the provided HTML. The lack of WHOIS data and absence of registrant information limit the ability to verify domain legitimacy and business identity. The technical infrastructure shows use of modern CSS frameworks such as Tailwind CSS and PrimeVue, indicating some level of digital maturity. However, the absence of privacy policies, contact information, and security headers suggests a low security posture and limited compliance with privacy regulations. Overall, the website presents a low trust profile with minimal business credibility signals.

S

Stone Gallery

stonegallery.cz

53

Stone Gallery is a Czech Republic-based specialist retailer and installer of stone, brick, ceramic, plaster, and concrete cladding and flooring materials. With over 20 years of experience, the company offers a broad product range including custom stone products and construction chemicals, targeting both professional builders and end consumers. The website reflects a mature e-commerce platform with a physical store presence in Prague, supported by certifications such as dTest and Heureka, enhancing customer trust. Technically, the site uses modern JavaScript libraries and tracking tools like Google Tag Manager, Facebook Pixel, and Hotjar, with a CMS likely based on the Nette Framework. Security posture is good with HTTPS enforced and secure forms, though some improvements like security headers and cookie consent mechanisms are recommended. The absence of WHOIS data reduces domain trustworthiness, but the overall business and website professionalism remain high.

NEVA Group s.r.o. is an established authorized dealer and service provider specializing in DAF and TATRA commercial vehicles in the Czech Republic. The company offers a comprehensive range of services including new and used truck sales, vehicle servicing, driver training, financing, and spare parts supply. With a domain age dating back to 2008 and certifications such as ISO 9001 and ISO 14001, NEVA Group demonstrates a solid market presence and commitment to quality and environmental standards. The target audience primarily consists of commercial vehicle operators and transport companies seeking reliable vehicle solutions and support. Technically, the website employs a traditional tech stack featuring jQuery 1.9.1, Bootstrap, and Google Analytics, with a moderate performance profile and basic mobile optimization. While the site includes cookie consent mechanisms and integrates marketing tools like Google Tag Manager and Google Ads, it lacks modern security headers and uses outdated JavaScript libraries, which may expose it to vulnerabilities. Privacy compliance is partial, with no explicit privacy policy page detected, though cookie consent is implemented. From a security perspective, the site benefits from HTTPS but lacks visible security headers and explicit security policies. The use of outdated libraries and absence of a vulnerability disclosure or incident response contact reduce its security maturity. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, NEVA Group's website is professional and functional, with good business credibility and moderate technical and security posture. Improvements in privacy policy transparency, security header implementation, and updating legacy scripts would enhance its compliance and security standing.

A

ABADIA a.s.

abadia.cz

50

ABADIA a.s. is a Czech manufacturing and trading company specializing in steel constructions, locksmith elements, suspended balconies, and technological equipment. Established in 2006, the company has a medium-sized team and a strong market presence in the Czech Republic and neighboring countries. Their website reflects a professional business with clear service offerings and client testimonials. Technically, the site is built on Drupal CMS, uses modern JavaScript libraries, and integrates Google Analytics and other tracking tools with a compliant cookie consent mechanism. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the website is well-structured, mobile-optimized, and trustworthy, supporting the company's credibility and business goals.

B

Bydlení v Dobřanech

byty-dobrany.cz

53

The website www.byty-dobrany.cz represents a small real estate business focused on selling residential apartments in Dobřany, Czech Republic. The business targets young adults seeking starter apartments and seniors looking for comfortable housing. The site is professionally designed using the Wix platform and provides clear information about the property offerings, including apartment sizes and location benefits. However, the absence of WHOIS data limits the ability to fully verify domain ownership and legitimacy. Technically, the site uses modern web technologies and includes Google Analytics and Tag Manager for tracking, but lacks advanced security headers and privacy compliance features. The security posture is moderate with HTTPS enabled but missing key headers and policies. Overall, the site is functional and trustworthy for its business purpose but would benefit from enhanced privacy and security measures.

P

PRIMA STRAKONICE akciová společnost

prima-strakonice.cz

59

PRIMA STRAKONICE is a Czech construction company operating since 1993, specializing in general contracting and real estate development in the South Bohemia region. The company offers a wide range of services including construction, carpentry, locksmithing, electrical installations, equipment rental, and transportation. Their website reflects a medium-sized regional business with a professional online presence built on WordPress and Elementor. The site is well-structured, mobile-optimized, and includes essential contact information and cookie consent mechanisms, indicating GDPR compliance. However, the absence of WHOIS domain registration data limits the ability to fully verify the domain's legitimacy and age. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and explicit security policies. Overall, the website presents a trustworthy and professional image suitable for its target audience.

V

VV&J s.r.o.

vvaj.cz

43

VV&J s.r.o. is a Czech-based medium-sized company with over 30 years of experience specializing in photovoltaics, telecommunications, electrical installations, and construction services. The company operates primarily in the energy and telecommunications sectors, serving business clients across multiple European countries. Their business model focuses on supplier-engineering and assembly services for investment construction projects, supported by a strong track record and ISO 9001 certification. Technically, the website employs a modern frontend stack including Bootstrap 4.3.1, jQuery, and Popper.js, delivering a responsive and well-structured user experience. The site is moderately optimized for performance and SEO, with clear navigation and multi-language support. However, no CMS or advanced analytics tools are detected, indicating a straightforward technical infrastructure. From a security perspective, the website uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and published security policies such as privacy or cookie policies. There is no incident response or vulnerability disclosure information available, which suggests room for improvement in security transparency and compliance. Overall, the website presents a professional and trustworthy business presence with solid credibility but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

Staročeský Catering s.r.o is a small Czech hospitality company specializing in catering services including rauty, corporate events, bankets, and stand sales for small and large events. The company operates multiple venues in the Plzeň region and offers equipment rental for events. The website is built on WordPress and uses common web technologies such as jQuery, bxSlider, and Google Fonts. While the site provides clear contact information and event references, it lacks privacy and cookie policies, which is a compliance concern. The technical infrastructure is moderately modern but uses outdated WordPress and jQuery versions, which may expose security vulnerabilities. Security headers are not detected, and no incident response or security policies are visible. Overall, the site is functional and professional but requires updates and compliance improvements to enhance security and privacy posture.

AGRICO s.r.o. is a well-established Czech company specializing in manufacturing and supplying stable technologies and agricultural equipment, including products for pig, poultry, cattle, and horse breeding, as well as fishery supplies and grain storage solutions. The company positions itself as a traditional and trusted supplier with over 35 years of experience, supported by multiple ISO certifications and quality awards. Their business model includes direct sales through an online catalog and e-shop, targeting farmers and agricultural enterprises primarily in the Czech Republic. Technically, the website employs modern frontend technologies such as Bootstrap 5, jQuery, and PhotoSwipe, with responsive design and good SEO practices. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks advanced security headers and explicit incident response information. WHOIS data is missing, which reduces domain trustworthiness, but the website content and certifications support legitimacy. Overall, the site is professional, user-friendly, and trustworthy with room for security improvements.

The website solarnisystemy-ceskebudejovice.cz is currently inaccessible, displaying only a minimal placeholder message 'site not found'. There is no visible business content, metadata, or contact information to analyze. The domain is registered since 2011 with the registrar REG-KRAXNET and uses the name server ns.kraxnet.com, indicating a legitimate registration but no active website presence. The lack of content and security features such as HTTPS and security headers indicates a very low digital maturity and security posture. No privacy or cookie policies are present, and no business or contact details are available, which severely limits trust and credibility. Overall, the site appears offline or abandoned, posing a high risk for users seeking information or services from this domain.

A

ACOND a.s.

acond.cz

61

ACOND a.s. is a leading Czech manufacturer specializing in heat pumps, air conditioning, and floor heating solutions. With over 12,000 installations, the company serves residential and commercial customers primarily in the Czech Republic and abroad. Their business model focuses on manufacturing, direct sales, installation, and servicing, supported by a strong partner network and comprehensive customer support. The website reflects a professional and trustworthy brand with clear communication of product offerings, warranties, and customer testimonials. Technically, the website is built on the Webflow platform, leveraging modern JavaScript libraries and analytics tools such as Google Analytics, Microsoft Clarity, and Adform. It employs a consent management platform (Usercentrics) to ensure GDPR compliance. The site is mobile-optimized, fast-loading, and well-structured, providing an excellent user experience. From a security perspective, the site uses HTTPS and integrates consent mechanisms for privacy compliance. However, it lacks visible security headers and does not publish an incident response or vulnerability disclosure policy, which are areas for improvement. The absence of WHOIS data limits domain legitimacy verification, but the overall digital footprint and business information suggest a legitimate and established entity. Overall, the website demonstrates a mature digital presence with strong content quality and privacy compliance, though it would benefit from enhanced security practices and transparent domain registration information.

C

Czechocar CZ, spol. s.r.o.

czechocar.cz

46

Czechocar CZ, spol. s.r.o. operates a professional car rental and carsharing service in the Czech Republic, offering a wide range of vehicles from economy to luxury models. The company is an independent franchisee of Enterprise Rent-a-Car, which strengthens its market position and trustworthiness. The website is well designed, mobile optimized, and provides clear navigation and relevant business information including multiple physical office locations and a phone contact. Privacy and cookie compliance are well implemented with a dedicated GDPR policy document and cookie consent mechanism. Technically, the site uses modern frontend technologies such as Svelte and Bootstrap, and integrates Google Analytics via Google Tag Manager for user behavior insights. Security posture is good with HTTPS enforced and secure forms, though there is room for improvement by adding explicit security policies and incident response contacts. Overall, the website reflects a mature business with a solid digital presence and trustworthy operations.

D

Docker and WordPress

jhmd.cz

56

The website uzkokolejky.cz serves as an informational and e-commerce platform dedicated to the Jindřichohradecké narrow-gauge railways in the Czech Republic. It targets railway enthusiasts and tourists interested in this niche transportation sector. The site uses WordPress with WooCommerce and Amelia Booking plugins, indicating a moderate level of digital maturity with integrated booking and sales capabilities. The technical infrastructure is solid, leveraging modern CMS and SEO tools, hosted likely with Microsoft Online DNS services. Security posture is adequate with HTTPS enabled and GDPR cookie consent implemented, though it lacks published privacy and terms of service policies. Overall, the site is professional and trustworthy but could improve compliance and transparency aspects.

L

LepsiPrace.cz

lepsiprace.cz

44

LepsiPrace.cz is an online job portal primarily targeting job seekers and employers in the Czech Republic. The platform offers job listings and candidate services, leveraging WordPress CMS with specialized job board plugins. The website demonstrates a good level of content quality and user experience, with a professional design and clear navigation. However, the absence of publicly available WHOIS data limits the ability to verify domain legitimacy and registrant details, which impacts overall trust. Technically, the site uses modern web technologies and performance optimization plugins but lacks visible security headers and comprehensive privacy or terms of service documentation. The cookie consent mechanism is present, indicating some level of privacy compliance. Security posture is moderate but could be improved by implementing standard security headers and incident response information. Overall, the site is functional and relevant for its target audience but would benefit from enhanced transparency and security practices.

S

Spirit Radar - The next generation platform for rum and whisky collectors

spiritradar.com

66

Spirit Radar is a specialized online platform catering to rum and whisky collectors, providing comprehensive tools for tracking bottle prices, availability, auction data, and collection valuation. The platform targets collectors, investors, e-shops, bottlers, insurers, and brand representatives, positioning itself as a niche market leader with a substantial database and active user testimonials. Technically, the website is built on WordPress with modern JavaScript libraries and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity. The site demonstrates good mobile optimization and SEO practices but lacks some advanced accessibility features. Security-wise, the site enforces HTTPS and uses anti-spam measures and cookie consent mechanisms; however, it lacks explicit security headers and a vulnerability disclosure policy. The absence of WHOIS domain registration data raises concerns about domain legitimacy, although the website content and professional presentation suggest a legitimate business. Overall, the site scores well on content quality and business credibility but should improve transparency and security practices.

L

LYNT services s.r.o.

lynt.cz

49

LYNT services s.r.o. operates as a premium PPC agency specializing in performance marketing with a monthly budget management exceeding 60 million CZK. Established in 2012, the company holds a prestigious Google Premier Partner status and boasts 15 years of experience. Their service portfolio includes PPC campaign management, business reporting, auditing, and international campaign expansion across more than 100 countries. The website reflects a mature digital presence with modern technologies such as WordPress, Bricks builder, and Cloudflare integration, ensuring fast performance and mobile optimization. Security measures are robust, including HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not published. Overall, the company demonstrates high business credibility and compliance with GDPR and cookie regulations.

R

Roman Kreuziger Cycling Academy z.s.

rkca.cz

44

Roman Kreuziger Cycling Academy z.s. is a Czech non-profit organization focused on cycling training and team management. The website serves as a platform to showcase the cycling academy's activities, sponsors, and equipment, targeting cycling enthusiasts and sports professionals. The business operates in the transportation sector with a niche focus on sports cycling. Technically, the website is built on WordPress using Elementor and several plugins for SEO, social media integration, and marketing. The site is hosted by Wedos, a Czech hosting provider, and uses HTTPS with Google Analytics for traffic monitoring. Security posture is moderate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact options are limited to a newsletter subscription form, with no direct emails or phone numbers provided. Overall, the website is professional, well-branded, and trustworthy but could improve compliance and security transparency.

K

K2N way s.r.o.

kubota.cz

62

Kubota.cz represents the Czech Republic branch of Kubota Corporation, a globally recognized manufacturer of agricultural and industrial machinery. The website showcases a comprehensive product range including tractors, lawn mowers, and accessories, targeting agricultural professionals and municipal service providers. The company emphasizes sustainability and environmental responsibility, supported by a long corporate history and recent acquisitions such as Kverneland and Great Plains. Technically, the website employs modern frameworks like Bootstrap and jQuery, with integrated analytics and cookie consent mechanisms, reflecting moderate digital maturity. Security posture is adequate with cookie consent and no visible vulnerabilities, though security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting Kubota's strong market position in the manufacturing sector.

A

AZS 98, s.r.o.

azs98.cz

57

AZS 98, s.r.o. is a Czech Republic-based company specializing in construction waste recycling, demolition, concrete production, and real estate leasing and sales. The company operates multiple subsidiaries and maintains a professional online presence with comprehensive service offerings targeting construction and industrial clients. Their website demonstrates a solid digital infrastructure built on WordPress with Elementor, enhanced by SEO and GDPR compliance plugins. The company actively engages customers through multiple contact channels and social media platforms. Security posture is generally good with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data is a notable gap in domain legitimacy verification but does not detract significantly from the overall business credibility. Strategic recommendations include enhancing security policies, publishing incident response contacts, and implementing security.txt for vulnerability disclosures.

Ú

Údolí Svratky a.s.

udolisvratky.cz

51

Údolí Svratky a.s. operates as a regional tourism promoter focused on the Vysočina region of the Czech Republic, offering a broad range of services including accommodation, dining, sports activities, cultural events, and e-commerce for local edible souvenirs. The company targets tourists and visitors interested in nature, culture, and active leisure in this region. The website is professionally designed with good content quality and clear navigation, supporting the business model effectively. Technically, the site uses modern web technologies including Google Fonts, YouTube API, and Google Maps API, hosted likely by a Czech hosting provider. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks explicit security headers and published security policies. WHOIS data is unavailable, which reduces domain trustworthiness and warrants further verification. Overall, the website presents a trustworthy and professional front for the company with room for security and compliance improvements.

A

Avanzado Group s.r.o.

avanzadogroup.cz

43

Avanzado Group s.r.o. is a small Czech company specializing in comprehensive security and detective services, shooting courses, and construction of turnkey family houses. The website presents a professional image with clear service offerings and active social media presence, targeting general audiences including businesses and organizations. Technically, the site is built on WordPress 4.9.8 with common plugins and libraries such as jQuery and Bootstrap, but uses outdated versions that pose security risks. The site employs HTTPS and Google reCAPTCHA for form security but lacks modern security headers and up-to-date software versions. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR. WHOIS data is unavailable, which reduces transparency and trustworthiness. Overall, the site is functional and professional but requires technical and compliance improvements to enhance security and trust.

E

EKV Project s.r.o.

ekvproject.cz

39

EKV Project s.r.o. is a specialized company focused on photovoltaic power plants, providing solar energy solutions primarily in the Czech Republic. The website presents a professional image with clear business focus on renewable energy services. The technical infrastructure is based on WordPress CMS with Elementor page builder and Yoast SEO plugin, indicating a modern and maintainable platform. Google Tag Manager and reCAPTCHA are implemented, supporting analytics and security needs. However, the absence of WHOIS data and lack of visible privacy and cookie policies reduce transparency and compliance confidence. Security headers are not detected, suggesting room for improvement in security hardening. Overall, the website is functional and informative but would benefit from enhanced privacy compliance and security practices.

V

Volteq s.r.o.

volteq.cz

44

Volteq s.r.o. is a small Czech company specializing in electrical installation and construction services, including strong and weak current electrical systems, reconstruction of residential units, and installation of HVAC systems as an official Gree partner. The company primarily serves the Plzeň region but can operate across the Czech Republic. Their website is professionally designed with clear navigation and good content quality, targeting local residential and commercial customers. Technically, the site uses modern HTML5, CSS3, and JavaScript with the Foundation framework, and is mobile optimized with moderate performance. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security best practices. Overall, the domain registration is recent but consistent with a legitimate small business website launch. The site contains no adult or questionable content and maintains a professional and trustworthy online presence.

D

Decathlon

decathlon.cz

62

Decathlon.cz is the Czech Republic localized e-commerce and retail website of Decathlon, a major international sporting goods retailer. The site offers a wide range of sports equipment, apparel, and accessories for over 70 sports, targeting general consumers interested in sports and fitness. The business model includes direct sales, marketplace partner sales, product rental, buy-back programs, and a loyalty program, positioning Decathlon as a large player in the retail sports sector in the Czech market. Technically, the website is built on a custom platform with modern JavaScript frameworks and integrates multiple third-party services for privacy management, analytics, and payment processing. The site is well optimized for desktop and mobile, with good SEO and accessibility features. The use of HTTPS and security headers indicates a strong security posture, although explicit security policies and incident response information are not publicly detailed. Security-wise, the site demonstrates good practices including secure payment options and cookie consent mechanisms. No vulnerabilities or exposed sensitive data were detected in the analysis. However, the absence of WHOIS data limits domain registration transparency, though this is likely due to registry privacy policies rather than malicious intent. Overall, Decathlon.cz presents a professional, secure, and user-friendly online presence consistent with a large retail brand. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure information, and enhancing visible contact channels for security matters to further strengthen trust and compliance.

T

Továrna Vír

tovarnavir.cz

53

Továrna Vír is a project focused on the revitalization of the former Rotter factory area in Vír, Czech Republic. The website presents a multifaceted business model combining real estate redevelopment, hospitality, cultural and sporting activities, and sustainable farming. The project targets visitors, local community members, investors, and businesses seeking unique event spaces and coworking facilities. The site is professionally designed with clear navigation and good mobile optimization, reflecting a medium-sized enterprise with a strong local presence. Technically, the website employs modern web technologies including jQuery, Google Fonts, and Google Analytics, hosted likely on a Czech hosting provider with a CMS platform inferred as WebSynergy. Performance and SEO are moderate to good, with room for improvement in accessibility and security headers. The site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent but lacks advanced security headers and explicit incident response or security policy documentation. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain trustworthiness, though the website content and social media presence support legitimacy. Overall, the website scores well in content quality, technical implementation, and privacy compliance but should improve transparency in domain registration and security policies to enhance trust and compliance.

A

APB - PLZEŇ a.s.

apb-plzen.cz

58

APB - PLZEŇ a.s. is a Czech company specializing in earthworks, demolition, construction, transport, and crane services, operating since 1991. The company positions itself as a leading regional provider with a strong portfolio of projects and a focus on technological capabilities. The website is professionally designed, primarily targeting business clients in the construction and transportation sectors within the Czech Republic. Technically, the site uses a custom CMS by BARTON STUDIO, with legacy JavaScript libraries and integration of Google services such as Analytics and reCAPTCHA. Security posture is moderate with HTTPS enabled and cookie consent implemented, but outdated libraries and missing security headers present areas for improvement. The absence of WHOIS data reduces domain trust, though the website content and business information appear legitimate and comprehensive. Contact details and certifications are clearly presented, supporting business credibility.

I

Impel AI

impel.io

65

Impel AI is a leading enterprise-grade AI Operating System designed specifically for the automotive industry, enabling dealerships and OEMs to unify and automate the entire customer lifecycle. The platform offers modular AI services including Sales AI, Chat AI, Service AI, Marketing AI, and Merchandising AI, aimed at improving operational efficiency, customer experience, and sales conversions. With a strong market position supported by OEM partnerships and a global customer base, Impel AI targets automotive retailers seeking to leverage AI for competitive advantage. Technically, the website is built on WordPress and integrates a modern tech stack including Google Tag Manager, Google Analytics, Hotjar, Facebook Pixel, and Auth0 for authentication. Hosting is inferred to be on AWS, with DNS managed via AWS Route 53. The site demonstrates excellent performance, mobile optimization, and SEO practices, supported by comprehensive metadata and structured data. From a security perspective, the site enforces HTTPS, employs multiple security headers, and uses enterprise-grade authentication services. However, DNSSEC is not enabled, and no explicit vulnerability disclosure or incident response contacts are published. Privacy and cookie policies are present with consent mechanisms, indicating good privacy compliance. Overall, the website presents a professional, trustworthy, and technically mature digital presence with strong business credibility. Strategic recommendations include enabling DNSSEC, publishing a vulnerability disclosure policy, and providing explicit incident response contacts to further enhance security posture and trust.

B

Bike-Arena

bikearena.cz

44

Bike-Arena is a specialized retail business based in Příbram, Czech Republic, focusing on the sale and servicing of bicycles, electric bikes, and cycling accessories. The company operates both an e-commerce platform and a physical store, offering additional services such as bike rental, maintenance, and test rides. Their market position is that of a regional expert catering to recreational, sport, and competitive cyclists. The website is well-structured, professionally designed, and provides comprehensive product and service information targeted at cycling enthusiasts. Technically, the website employs modern JavaScript libraries including jQuery, jQuery UI, and Select2, alongside Google Tag Manager and analytics tools. It is mobile-optimized with responsive design and includes cookie consent mechanisms aligned with GDPR requirements. The site uses HTTPS, ensuring encrypted communications, but lacks some recommended HTTP security headers which could enhance protection. From a security perspective, the site demonstrates good practices such as secure login forms and consent management but does not publish explicit security policies or incident response contacts. The absence of WHOIS data reduces transparency slightly but is mitigated by clear business contact information and a physical address. No critical vulnerabilities or exposed sensitive data were detected. Overall, Bike-Arena presents a trustworthy and professional online presence with moderate technical maturity and a solid security posture. Strategic improvements in security headers and transparency around security policies would further strengthen their risk profile.

M

Městys Čachrov

cachrov.info

55

Městys Čachrov operates as a small municipal government entity providing administrative and public services to its local citizens and entrepreneurs. The website serves as an official portal for information dissemination, including contact details, official notices, and local governance documentation. The site positions itself as a trusted local authority within the Czech Republic, focusing on transparency and community engagement. Technically, the website employs a mix of legacy and modern web technologies, including jQuery, Google Analytics, and a cookie consent management system. The site is hosted by ŠumavaNet.CZ and demonstrates moderate performance with good mobile optimization and accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy policies, which are areas for improvement. The cookie consent mechanism is robust, indicating awareness of privacy compliance, though GDPR-specific documentation is absent. The WHOIS data is incomplete, limiting domain trust evaluation, but the website content and contact information suggest legitimacy. Overall, the website is functional and professional for its purpose but would benefit from enhanced security practices, clearer privacy documentation, and improved domain registration transparency to strengthen trust and compliance.

Hořákov CZ is a small-scale community website dedicated to the history and current affairs of the village Hořákov in the Czech Republic. The site provides archival materials, historical documents, and local information primarily targeted at residents, natives, and enthusiasts of the region. The website is built on WordPress, utilizing common plugins and a well-known theme, delivering a moderate performance and good mobile responsiveness. The content is rich in historical data, including downloadable PDFs and genealogical information, but lacks modern privacy and security compliance features such as privacy policies and cookie consent mechanisms. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the site is trustworthy and serves its niche audience well but should enhance compliance and security practices to align with best practices.

J

JAVI solutions s. r. o.

javi.sk

42

JAVI solutions s. r. o. is a Slovakia-based technology company specializing in comprehensive information system solutions including business intelligence, internet solutions, software development, and ongoing support. The company targets businesses seeking integrated and customized IT solutions to optimize their internal processes and customer reach. Their market position is that of a niche provider with a focus on tailored software and system integration services. Technically, the website is built on a modern stack including Debian, MySQL, PHP, Java, and front-end technologies like Bootstrap and jQuery. The site uses a custom CMS (BiS/WEB 1.0.2 rc) and integrates Google Analytics and Tag Manager for tracking. Mobile optimization and SEO practices are well implemented, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA v2 to protect forms. However, it lacks explicit security headers and does not publish a security policy or incident response contacts. Cookie consent is implemented, but privacy policy and terms of service are missing, which impacts compliance and user trust. Overall, the website is professional and trustworthy with a good security baseline but would benefit from enhanced privacy and security disclosures. The domain registration data aligns well with the company identity, supporting legitimacy. Strategic improvements in security headers, privacy documentation, and incident response readiness are recommended to strengthen the security posture and compliance.

S

Smartim, s.r.o.

smartim.cz

46

Smartim, s.r.o. is a Czech Republic-based small business specializing in comprehensive online marketing services including SEO, PPC, web design, social media marketing, and analytics. With over 14 years of experience, they serve businesses seeking to improve their online presence and marketing effectiveness. The website is professionally designed, content-rich, and well-structured, targeting primarily Czech businesses. Technically, the site uses modern JavaScript libraries such as jQuery and AOS for animations, and integrates Google Tag Manager and LinkedIn Insight for marketing analytics. Security posture is good with HTTPS enforced and secure forms, but lacks some security headers and explicit incident response policies. Privacy compliance is strong with GDPR-aligned privacy and cookie policies and consent mechanisms. The absence of WHOIS data reduces domain trustworthiness, but the professional presentation and detailed contact information support legitimacy. Overall, the site is a credible and effective marketing platform with room for security enhancements.

W

DOLLY4D : Situs Slot Dolly4D Maxwin Mudah Dengan Pola Spin Gacor Harian

worldtbook.com

52

The website worldtbook.com operates as an online slot gambling platform branded as DOLLY4D, targeting an Indonesian audience interested in online slot games with high RTP and popular providers. The business model centers on online gambling services, but lacks clear company information, contact details, and compliance documentation. Technically, the site uses modern JavaScript frameworks such as React and Next.js, hosted behind Cloudflare DNS and utilizing DigitalOcean Spaces CDN. However, security best practices are not fully implemented, with no DNSSEC, no visible security headers, and unclear SSL status. The WHOIS data is suspicious due to a future domain creation date and minimal registrant information, which raises concerns about legitimacy and trustworthiness. Overall, the site presents moderate technical maturity but poor security and compliance posture, with significant risks related to business credibility and regulatory adherence.