Security Directory

S

Skupina Compag

compag.cz

59

Skupina Compag is a Czech-based company specializing in a broad range of municipal and communal services, including waste management, road infrastructure maintenance, facility cleaning, and biogas station operations. The company operates multiple subsidiaries across different regions, positioning itself as a regional leader in communal services. Their business model focuses on providing essential municipal services leveraging modern technology and equipment to serve public and municipal clients effectively. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and several plugins for SEO, contact forms, and cookie compliance. The site is mobile-optimized and demonstrates good SEO practices with structured data and meta tags. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements GDPR-compliant cookie consent mechanisms. However, it lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the business profile, enhancing trustworthiness. Overall, the website presents a professional and trustworthy digital presence for Skupina Compag, with good content quality and compliance. Strategic improvements in security headers and public security policies could further enhance their security posture and trust.

Technické služby Votice s.r.o. is a small municipal utility company based in the Czech Republic, founded in 2023. The company provides essential water supply and sewage services to the town of Votice. The website serves as a basic informational portal with limited content, primarily displaying company name, address, and service description. The site was created using Web4u s.r.o.'s page editor, indicating a simple technical infrastructure with no advanced CMS or frameworks detected. From a technical perspective, the website uses basic HTML and CSS without modern frameworks or CMS platforms. There is no evidence of HTTPS or security headers, which poses a security risk. The site lacks privacy, cookie, and terms of service policies, indicating low privacy compliance. No analytics or tracking technologies are present, suggesting minimal user tracking. Security posture is weak due to missing HTTPS and security headers, absence of incident response contacts, and no vulnerability disclosure mechanisms. The domain registration is consistent with the business founding date, lending legitimacy to the site. However, the lack of contact emails and phone numbers reduces business credibility and user trust. Overall, the website is functional but minimalistic, with significant room for improvement in security, privacy compliance, and user engagement. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, providing clear contact information, and enhancing technical SEO and accessibility.

W

WEBHOUSE, s.r.o.

mkcvotice.cz

45

The website mkcvotice.cz serves as the official municipal information center for the town of Votice in the Czech Republic. It provides residents and tourists with comprehensive information about local culture, events, accommodation, and news. The site is well-structured, professionally designed, and targets a local audience seeking municipal and tourist information. The business model is public service-oriented, focusing on community engagement and information dissemination. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It incorporates Google reCAPTCHA for form security and Google Maps for location embedding. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some modern security headers are missing. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, indicating a reasonable security posture. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which could be improved to enhance trust and compliance. No vulnerabilities or suspicious activities were detected. Overall, mkcvotice.cz is a trustworthy, well-maintained municipal website with a solid foundation in content quality and technical implementation. Strategic improvements in security policies and headers would further strengthen its security posture and compliance standing.

F

FairCasinos

fair-casinos.com

65

FairCasinos is a specialized online platform dedicated to providing comprehensive reviews and ratings of online casinos targeting Canadian players. Established in 2024, the site offers detailed insights into casino bonuses, game variety, licensing, and payment methods, positioning itself as a trusted affiliate and review resource in the Canadian gambling market. The platform leverages WordPress with modern SEO and user experience optimizations to deliver content effectively across devices. Security posture is solid with HTTPS and domain transfer protections, though improvements in DNS security and published policies are recommended. Overall, the site presents a professional and trustworthy front for users seeking reliable casino information.

N

National Breast Cancer Foundation, Inc.

nbcf.org

77

National Breast Cancer Foundation, Inc. is a well-established non-profit organization dedicated to providing help and hope to those affected by breast cancer through early detection, education, and support services. The organization has a strong market position supported by recognized certifications such as Four Star Charity and Platinum Transparency awards. Their website reflects a professional and trustworthy presence with comprehensive content targeting individuals affected by breast cancer and supporters. Technically, the website is built on WordPress with modern technologies and optimized for performance, mobile, and SEO. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although formal security policies and incident response information are not publicly available. Overall, the website demonstrates high credibility and trustworthiness, with a moderate risk due to lack of WHOIS transparency but justified by privacy protection for a non-profit entity.

W

WAREMA Renkhoff SE

warema-group.com

61

WAREMA Renkhoff SE operates as a leading manufacturer specializing in innovative sun protection and plastic engineering solutions. The company holds a strong market position in its sectors, offering a broad portfolio that includes sun and weather protection products as well as precision plastic components for automotive, medical, and sun protection industries. Their business model emphasizes innovation, partnership, and quality, targeting both B2B and end consumers. The website reflects a professional corporate presence with consistent branding and comprehensive content in German, supported by multiple subsidiary brands and active social media channels. Technically, the website employs modern web technologies including Google Tag Manager and a Usercentrics consent management platform, ensuring GDPR compliance and user privacy controls. The site is mobile-optimized with good SEO practices and moderate performance. However, some security best practices such as explicit security headers are not evident from the provided data. The absence of WHOIS registration details raises concerns about domain legitimacy, though the professional presentation and contact information mitigate some risk. From a security perspective, HTTPS is enforced and privacy policies are comprehensive, but the lack of visible security headers and incident response information suggests room for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates a solid security posture but would benefit from enhanced transparency and security policy disclosures. Strategically, it is recommended to verify domain registration status, implement additional security headers, publish clear incident response contacts, and maintain rigorous privacy compliance to strengthen trust and resilience. The company’s digital maturity is good, supporting its market leadership and customer engagement effectively.

Price-check.cz is a professional online price monitoring and comparison tool operated by E-solutions, s.r.o., targeting e-commerce businesses including B2C and B2B sellers and suppliers. The platform offers real-time data monitoring with frequent updates, alerting, reporting, and comprehensive analytics to support pricing strategies. The website is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Technically, it leverages modern web technologies including Google Tag Manager, Google Analytics, and Vue.js components, ensuring a moderate to good performance level. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and published privacy or security policies. The absence of WHOIS data limits domain trust verification, but the presence of multiple reputable brand references and professional presentation supports legitimacy. Overall, the site is a credible resource for price monitoring in the Czech and European markets.

V

VIDIA-DESIGN s.r.o.

hogofogo.cz

45

Hogofogo.cz is a Czech-language website representing a cultural or performance-related entity, likely managed by VIDIA-DESIGN s.r.o. The site provides information about performance programs and events, targeting Czech-speaking audiences interested in cultural activities. The website uses standard web technologies such as jQuery, LESS CSS, and Bootstrap Grid, with moderate performance and good mobile optimization. However, the site lacks critical privacy and cookie policies, contact information, and security headers, which impacts its overall security posture and privacy compliance. The absence of WHOIS data raises concerns about domain registration transparency, although the website content appears professional and safe. Overall, the site demonstrates moderate digital maturity but requires improvements in security and compliance to enhance trustworthiness.

P

Příbram Média s.r.o.

pribram.cz

51

Příbram Média s.r.o. operates www.pribram.cz, the largest local news portal serving the Příbram region in the Czech Republic. The website provides comprehensive local news coverage, traffic updates, event information, and advertising services targeted at residents and visitors of the region. The business model centers on media content delivery combined with advertising revenue. The company maintains a professional online presence with consistent branding and integration of social media channels such as Facebook, Instagram, YouTube, and Twitter. The content is primarily in Czech and focuses on community news and events, making it highly relevant to its target audience. Technically, the website uses a custom CMS with a technology stack that includes jQuery, jQuery UI, Google Fonts, and lazy loading for images. It integrates Google Analytics and Facebook Pixel for analytics and tracking, alongside Seznam Sklik for advertising. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and technical modernization. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, indicating awareness of privacy regulations such as GDPR. However, it lacks explicit security headers and a published security policy or incident response contact, which are areas for enhancement. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data confirms the legitimacy of the domain registration, matching the company information and location. Overall, www.pribram.cz is a trustworthy and professionally managed local news portal with a solid business foundation and adequate technical infrastructure. Strategic improvements in security policies and technical modernization could further strengthen its security posture and user trust.

A

Autopůjčovna NONSTOP

attackerci6.cz

38

Autopůjčovna NONSTOP is a Czech car rental service specializing in providing a wide range of vehicles including SUVs, luxury cars, and electric vehicles with nonstop availability in Prague, including airport and city center locations. The business operates primarily through an online reservation system, targeting both tourists and local customers seeking flexible and reliable car rental options. The website is built on WordPress CMS, utilizing common plugins such as Yoast SEO for search optimization and Smartsupp for live chat support, indicating a moderate level of digital maturity. The technical infrastructure is supported by the Czech registrar REG-WEDOS, with SSL encryption ensuring secure communications. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and published security policies, which could be improved to enhance trust and compliance. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected, potentially exposing the business to GDPR compliance risks. Overall, the website presents a professional and trustworthy image with clear contact information and detailed vehicle listings, but could benefit from enhanced security and privacy practices to strengthen its risk profile.

M

MEDIA MARKETING SERVICES a.s.

rockovyradio.cz

56

Rockovyradio.cz is a Czech online rock radio station operated by MEDIA MARKETING SERVICES a.s., established in 2008. The website offers multiple specialized rock music streams, podcasts, and programs targeting Czech-speaking rock music enthusiasts. It maintains a professional digital presence with a consistent brand and active social media channels. The business model revolves around media broadcasting, online streaming, and merchandise sales via an e-shop. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery, Foundation, and Slick Carousel, hosted by Active24, ensuring moderate performance and good mobile optimization. Security-wise, the site uses HTTPS, includes CSRF tokens, and implements cookie consent mechanisms, but lacks explicit security headers and public security policies. Overall, the site is compliant with GDPR and provides clear contact information, enhancing trust and credibility.

Poznej Příbram is the official tourism portal for the city of Příbram, Czech Republic, providing comprehensive information on local attractions, cultural events, restaurants, accommodations, and outdoor activities. The website targets tourists, families, and culture enthusiasts, positioning itself as a key regional resource supported by the municipal government. Technically, the site employs modern JavaScript libraries such as jQuery, Flatpickr, and Google Maps API to deliver interactive features including a trip planner and event calendar. The site is mobile-optimized with good navigation and content relevance, though some accessibility features could be enhanced. Security-wise, the website enforces HTTPS and includes a cookie consent mechanism, but lacks advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture for a government tourism site. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements, though it could benefit from improved security headers and clearer contact information.

N

Nej.cz

pb.cz

74

Nej.cz is a Czech telecommunications provider offering internet, digital television, and telephone services primarily targeting personal and business customers within the Czech Republic. The company operates as part of the O2 group, leveraging its infrastructure and service platforms. The website presents a professional and consistent brand image with clear service offerings and customer support channels. Technically, Nej.cz employs modern web technologies including Google Tag Manager, Google Analytics, Cookiebot for consent management, Hotjar for user behavior analytics, and reCAPTCHA for form security. The site is well-optimized for mobile devices and includes comprehensive cookie consent mechanisms aligned with GDPR requirements. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response contacts are not published. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the business context and content quality. Overall, Nej.cz demonstrates a mature digital presence with good security and privacy compliance, suitable for its telecommunications market segment.

Č

Česká kuželkářská asociace

kuzelky.cz

57

The website www.kuzelky.cz serves as the official information portal for the Česká kuželkářská asociace, the Czech Nine-Pin Bowling Association. It provides comprehensive news, event updates, competition results, and documentation related to the sport of kuželky in the Czech Republic. The site targets players, clubs, fans, and stakeholders within the national sports community, positioning itself as a key resource and governing body information hub. The business model is non-profit and focused on sport governance and community engagement. Technically, the website employs a traditional web stack including jQuery, Bootstrap Icons, Jssor Slider, and Flowplayer for media content. It uses HTTPS and integrates Google Analytics for visitor tracking. Cookie consent is implemented via TermsFeed scripts, indicating awareness of privacy regulations. However, some technical aspects such as outdated jQuery and missing security headers suggest room for modernization and enhanced security hardening. From a security perspective, the site benefits from HTTPS and cookie consent mechanisms but lacks explicit privacy policy and terms of service pages, which are important for GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain registration trust analysis, but the presence of official partner logos and consistent branding supports legitimacy. Overall, the website is professionally designed with good content quality and user experience. It is safe for general audiences with no adult or questionable content. Strategic recommendations include adding comprehensive privacy and security policies, updating technical libraries, and implementing security headers to improve security posture and compliance.

P

Pivovar Podlesí

pivovarpodlesi.cz

60

Pivovar Podlesí is a small local microbrewery and hospitality business located in the Czech Republic, specializing in brewing beer, hosting events such as weddings, and providing restaurant and pension services. The website is professionally designed using the Wix platform, presenting clear business information and contact details. The technical infrastructure relies on Wix's proprietary frameworks and hosting, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms. The absence of WHOIS data limits domain trust assessment, but the website content and presentation support legitimacy. Overall, the business appears credible with room for improvement in privacy and security practices.

S

SPŠ a VOŠ Příbram

spspb.cz

44

SPŠ a VOŠ Příbram is a regional educational institution in the Czech Republic providing secondary technical and higher vocational education. The website targets prospective students, current students, parents, and the general public, offering detailed information about study programs, school events, and virtual tours. The institution maintains an active social media presence and complies with GDPR regulations, including a comprehensive privacy policy and cookie consent mechanism. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery. It uses several plugins for video playback, galleries, and cookie management. The site is mobile-optimized and features good SEO practices with structured data and meta tags. Performance is moderate, with room for improvement in accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks some security headers and a security.txt file for vulnerability disclosure. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, likely due to privacy protection, but the website's content and technical setup indicate legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving its educational mission effectively.

Č

Čachrov CZ

cachrov.cz

42

Čachrov CZ is a local community informational website serving the Čachrov region in the Czech Republic. It provides news, historical content, current events, and resources for residents and enthusiasts. The site is built on WordPress with a variety of plugins enhancing multimedia and social media integration. It maintains an active content publishing schedule and engages with users via social media platforms such as Facebook, Twitter, and YouTube. The website's technical infrastructure is modern and includes HTTPS encryption, Google Analytics, and Google Maps integration. However, it lacks visible privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS but could be improved by adding security headers and formal incident response information. The absence of WHOIS data limits domain trust assessment, but the website content and structure indicate a legitimate community portal. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, and publishing a security.txt file to improve transparency and compliance.

K

KOVOHUTY SK, s.r.o.

kovohutysk.sk

37

KOVOHUTY SK, s.r.o. is a Slovak subsidiary company specializing in the purchase, processing, and recycling of waste containing precious metals. The company leverages its strategic location and logistics to connect with its parent company Kovohutě Příbram nástupnická, a. s., providing services including waste collection, refining, and sale of related products such as ammunition and metal sheets. The website presents a professional business image with clear contact information and a focus on environmental and manufacturing sectors. Technically, the website uses a combination of established technologies such as jQuery, Bootstrap 3.2, and Google Analytics, managed via a custom CMS developed by JAVI solutions s. r. o. The site is moderately optimized for mobile and SEO, with good content quality and navigation. However, some technical modernization and enhanced accessibility could improve user experience. From a security perspective, the site benefits from HTTPS and lacks visible vulnerabilities or exposed sensitive data. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is present, indicating room for improvement in security transparency. Overall, the website is functional and trustworthy but would benefit from enhanced privacy compliance, security best practices, and technical updates to strengthen its security posture and user trust.

V

Velkotržnice Lipence

vt.cz

47

Velkotržnice Lipence operates as a retail and wholesale market located in Prague, Czechia, offering a diverse range of products including food, flowers, decorations, and fresh produce. Established in 1999, the company has a longstanding presence in the regional retail sector. The website reflects a professional and consistent brand image, targeting general consumers and businesses seeking quality market offerings. Technically, the site is built on WordPress with modern tools such as Google Tag Manager and Facebook Pixel, hosted by WEDOS, ensuring a stable and moderately performant digital infrastructure. Security measures are well implemented with HTTPS and security headers, although explicit privacy and terms of service policies are absent, representing a compliance gap. Overall, the site is trustworthy and safe, with no adult or questionable content detected.

Actu 77 s.r.o. is a Czech Republic based small technology service provider specializing in Joomla CMS programming, IT consulting, and hosting management. The company has been operating since 2003 and offers a range of services including custom software development, hosting configuration, Windows OS consulting, and graphic design. The website reflects a professional business with clear contact information and a portfolio of partner sites, positioning it as a niche player in the Joomla CMS support market. Technically, the website uses modern frontend technologies such as Bootstrap 5, jQuery, Video.js, and Redactor editor, and integrates Google Analytics for user tracking. The site is mobile optimized with moderate performance and basic SEO and accessibility features. Security posture is moderate with HTTPS enabled but lacking security headers and explicit privacy or cookie policies. WHOIS data confirms domain legitimacy and consistency with the business information presented on the site.

B

Bike-Arena

bike-arena.cz

44

Bike-Arena is a specialized retailer and service provider for bicycles and e-bikes located in Příbram, Czech Republic. The company offers a broad range of products including bicycles from brands like Trek, Giant, and Maxbike, alongside accessories, rentals, and maintenance services. Their business model combines e-commerce with a physical storefront, targeting cycling enthusiasts and local customers. The website is well-structured, providing clear navigation, product categories, and informative blog content to engage visitors. Technically, the website employs modern JavaScript libraries such as jQuery, jQuery UI, and Select2, and integrates Google Tag Manager and Google Analytics for marketing and analytics purposes. The site is mobile-optimized and uses HTTPS with good SSL configuration, ensuring secure data transmission. Cookie consent mechanisms are implemented, reflecting GDPR compliance. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates good practices including secure login forms and consent management. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain trust assessment, but the professional presentation and contact transparency support legitimacy. No signs of WAF or content blocking were found, allowing full content access. Overall, Bike-Arena presents a trustworthy and professional online presence with solid technical and privacy compliance foundations. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would further enhance their security posture and trustworthiness.

P

PBtisk a.s.

pbtisk.cz

60

PBtisk a.s. is a specialized book production and printing company established in 1990, currently recognized as one of the leading producers in Central Europe. The company serves a professional clientele including publishers, galleries, and museums, offering complete book production services, climate-neutral printing, and custom book models starting from single pieces. The website reflects a mature digital presence built on WordPress with Elementor, featuring good design quality, clear navigation, and GDPR-compliant privacy and cookie policies. Security measures include HTTPS, Google reCAPTCHA, and cookie consent management, though some security headers could be improved. Overall, the site demonstrates a solid security posture with no critical vulnerabilities detected.

W

WSM – Czech Republic s.r.o.

wsm.cz

51

WSM – Czech Republic s.r.o. is a Czech manufacturing company specializing in mobile hall systems and modular containers for various business applications such as receptions, office spaces, and sales rooms. The company targets business and industrial clients primarily within the Czech Republic. The website is built on WordPress and uses common web technologies including Gravity Forms and Font Awesome. The digital infrastructure appears basic but functional, with moderate performance and good mobile optimization. Security posture is limited with no visible security headers or advanced protections, and WHOIS data is unavailable, likely due to privacy protection. There is a lack of privacy and cookie policies, as well as contact information, which impacts trust and compliance. Overall, the website serves as a basic informational platform for a small manufacturing business but would benefit from enhanced security, compliance, and transparency measures.

L

Le Mode

lemode.net

57

LeMode.net is an e-commerce retailer specializing in fashion accessories including watches, jewelry, cosmetics, and related gift items. The website targets primarily Czech and Slovak customers, offering a broad catalog of branded products with a focus on exclusivity and new market introductions. The site is professionally designed with clear navigation and multi-language support, enhancing user experience and accessibility. Technically, the platform leverages the Shoptet CMS, integrates Google Analytics and Facebook SDK for marketing and analytics, and uses modern JavaScript libraries for UI components. Security posture is adequate with HTTPS enforced and cookie consent mechanisms implemented, though some security headers are missing and no vulnerability disclosure policy is present. The absence of WHOIS registration data for the domain is a notable concern, suggesting either privacy protection or registration issues, which slightly impacts trustworthiness. Overall, the site presents a professional and trustworthy front for online retail but should address domain registration transparency and enhance security headers to improve its security posture.

L

LAMA PB s.r.o.

lamapb.com

61

LAMA PB s.r.o. is a Czech-based small business specializing in a broad range of construction and related services including height works, painting, locksmith services, arborist and risky tree felling, and equipment rental. The company has a diversified service portfolio and operates primarily in the Příbram, Prague, and Central Bohemia regions. Their website is built on WordPress with common plugins and demonstrates good content quality and user experience. The technical infrastructure is modern with HTTPS and cookie consent mechanisms in place, but lacks some security headers and a visible privacy policy page. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, although the website content and business information appear legitimate. Overall, the site is professional and trustworthy but could improve in privacy and security compliance areas.

P

PRO-DOMA

pro-doma.cz

62

PRO-DOMA is a traditional Czech family-owned business specializing in the retail and wholesale of building materials, roofing, and metal products. It operates the largest network of building material stores and rental services in the Czech Republic, targeting construction professionals and retail customers. The website reflects a professional and consistent brand presence with clear contact information and a broad product catalog. Technically, the site uses modern web technologies and integrates multiple analytics and marketing tools, including Google Tag Manager, Microsoft Clarity, Smartlook, and Facebook Pixel. Security posture is solid with HTTPS enforced and a Content-Security-Policy header present, though additional security headers could enhance protection. Privacy compliance is weak due to the absence of visible privacy and cookie policies, which is a notable gap given the extensive tracking scripts in use. WHOIS data is unavailable, which raises concerns about domain registration legitimacy and should be investigated further. Overall, the website is functional, professional, and secure but would benefit from improved privacy transparency and WHOIS data clarity.

O

Obec Podlesí

obecpodlesi.cz

51

Obec Podlesí operates an official municipal website serving the local community of Podlesí in the Czech Republic. The site provides comprehensive information about local government, community events, official documents, and contact details. It targets residents and visitors seeking municipal services and updates. The website is well-structured with clear navigation and mobile optimization, reflecting a good level of digital maturity for a small government entity. Technically, it employs common JavaScript libraries such as jQuery, Bootstrap, and Swiper.js to enhance user experience. Security posture is moderate; HTTPS is used, and a cookie consent mechanism is implemented, but security headers and explicit privacy policies are lacking. The absence of WHOIS data reduces trust slightly, though the official nature and content quality support legitimacy. Overall, the website is functional and trustworthy but would benefit from enhanced security and privacy transparency.

D

Dolák s.r.o.

toyotadolak.cz

44

Toyota Dolák is a large, authorized Toyota dealership and service provider operating in the Czech Republic. It holds the position as the largest Toyota sales and service partner in the country, offering a comprehensive range of services including new and used vehicle sales, vehicle buyback, leasing, rental, and authorized servicing. The company operates multiple branches across key Czech cities, enhancing accessibility and customer reach. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to consumers and businesses interested in Toyota vehicles and related services. From a technical perspective, the website is built on WordPress with a modern technology stack including jQuery, Google Tag Manager, and various UI libraries. It is mobile-optimized and SEO-friendly, with good performance and accessibility standards. The presence of cookie consent mechanisms and GDPR-compliant privacy policies indicates a mature approach to privacy and regulatory compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and a security.txt file suggests room for improvement in security best practices. The lack of WHOIS data reduces domain trustworthiness somewhat, but the professional presentation and detailed business information mitigate concerns. Overall, Toyota Dolák presents a trustworthy and professional online presence with strong business credibility and good technical implementation. Strategic improvements in security policies and domain transparency would further enhance trust and compliance.

Město Příbram operates an official municipal website serving residents and visitors of the city of Příbram in the Czech Republic. The site provides comprehensive information about city governance, public services, events, and citizen portals. It targets local citizens and tourists, offering services such as public tenders, event calendars, and contact information. The business model is that of a government entity providing transparent and accessible information to its community. The website maintains consistent branding and trust indicators including official contact details and social media presence. Technically, the website uses established JavaScript libraries such as jQuery, MasterSlider, and Lightbox to enhance user experience. The site is moderately performant with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. However, no CMS or hosting provider details were detected. The site enforces HTTPS and includes a cookie consent mechanism, reflecting good privacy compliance. From a security perspective, the website shows a solid posture with HTTPS enabled and no exposed sensitive data. However, no explicit security policies or incident response information are published. Security headers are not evident in the provided data, and there is no vulnerability disclosure or security.txt file. The site does not use advertising or tracking services, minimizing privacy risks. Overall, the security score is good but could be improved by adding formal security documentation and headers. The overall risk assessment is low given the official nature of the site and its compliance with privacy regulations. Strategic recommendations include publishing a security policy, implementing security headers, and enhancing accessibility. These steps would strengthen trust and security culture while maintaining the site’s role as a reliable municipal information portal.

L

Luboš Toman

lubostoman.com

52

Luboš Toman operates a professional photography website focused on sports, cultural, and reportage photography primarily targeting Czech-speaking audiences. The site showcases galleries, blog content, and provides clear contact information, positioning itself as a niche local photography service. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Bootstrap framework, and Google reCAPTCHA for form security. While HTTPS is enforced and basic security practices are in place, the absence of HTTP security headers and a cookie consent mechanism indicates room for improvement in security and privacy compliance. The WHOIS data is notably missing, which raises questions about domain registration legitimacy despite the active and professional website presence. Overall, the site scores well in content quality and business credibility but should address security and compliance gaps to enhance trust and resilience.

C

CH&T Pardubice

cht-pce.cz

58

CH&T Pardubice is a well-established construction company specializing in a broad range of building and infrastructure projects, including transportation infrastructure, civil engineering, and steel structure manufacturing. With over 30 years of experience and a stable annual turnover exceeding 4.5 billion CZK, the company holds a strong market position in the Czech Republic. Their services cater primarily to business and public sector clients requiring comprehensive construction solutions. Technically, the website employs modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and a cookie consent mechanism compliant with GDPR. The site is well-designed, mobile-optimized, and provides clear navigation and professional content. However, there is a lack of visible security headers and no WHOIS data available, which slightly diminishes the transparency and security posture. Security-wise, the site uses HTTPS (assumed from external scripts loaded via HTTPS), but no explicit security headers were detected in the HTML source. The cookie consent banner and privacy policy indicate a commitment to privacy compliance. No forms or input fields were found on the homepage, reducing attack surface but also limiting direct user data collection. Overall, the website is professional and trustworthy from a business perspective but would benefit from improved security header implementation and domain registration transparency. The absence of WHOIS data is a notable gap that should be addressed to enhance trust and legitimacy.

R

Royal Dobříš

spadobris.cz

47

Royal Dobříš operates a luxury wellness and apartment accommodation business located in Dobříš, Czech Republic, targeting tourists and visitors seeking premium wellness experiences near Prague. The website showcases private wellness facilities, premium apartments with private whirlpools and saunas, and a bistro offering European cuisine. The business positions itself as a premium local hospitality provider with a focus on privacy, quality, and customer experience. Technically, the website is built on WordPress with WooCommerce and Elementor, integrating modern marketing and tracking tools such as Google Analytics, Facebook Pixel, and Ecomail. The site is mobile optimized and performs moderately well. Security posture is adequate with HTTPS enforced but lacks some security headers and formal privacy and terms policies, indicating room for compliance improvement. Overall, the domain registration is consistent and legitimate, supporting the business credibility. Strategic improvements in privacy compliance and security headers would enhance trust and regulatory adherence.

B

BESPO | Výrobce sportovního oblečení a vlastních kolekcí

bespo.cz

57

The website www.bespo.cz is a small business site hosted on the Wix platform, with limited visible content and no accessible WHOIS registration data. The site uses HTTPS and standard Wix hosting technologies but lacks critical business and security information such as privacy policies, terms of service, and contact details. The absence of WHOIS data reduces trustworthiness and makes it difficult to verify the legitimacy of the domain ownership. Technically, the site is built with modern web standards but shows only basic content quality and SEO optimization. Security posture is moderate due to HTTPS usage but lacks advanced security headers and policies. Overall, the site appears functional but minimalistic, with room for improvement in transparency and compliance.

S

Status301

status301.net

62

Status301.net operates as the root site of the Permanently Moving Network, specializing in WordPress-related development services and plugin offerings. The business targets WordPress users and developers, providing both free and premium plugins alongside internet services such as VPS management and e-commerce site building. The website is built on WordPress CMS, hosted on o2switch.net, and uses modern web technologies including jQuery and LiteSpeed caching for performance optimization. The site demonstrates good mobile optimization and SEO practices, though accessibility is basic. From a security perspective, the website benefits from HTTPS encryption and domain transfer protection but lacks DNSSEC and security headers, which are recommended for enhanced protection. No explicit privacy policy or terms of service are published, though a cookie consent mechanism compliant with EU regulations is present. Contact is available via a dedicated contact page with a form, but no direct emails or phone numbers are listed. The domain is well aged and registered consistently, supporting the legitimacy of the business. Overall, the website presents a moderate security posture with room for improvement in privacy compliance and security best practices. The business model is clear and niche-focused, with a consistent brand and good content quality. Strategic recommendations include publishing comprehensive privacy and security policies, enabling DNSSEC, and implementing security headers to strengthen the security posture.

Chetan Gole's website is a personal professional blog focused on software engineering topics, primarily Java, AWS, and automation. The site serves as a platform for sharing technical knowledge and experiences, targeting software developers and technology enthusiasts. The business model is personal branding and knowledge sharing, with no commercial transactions or services directly offered on the site. The domain is mature, registered since 2009, indicating a stable online presence. Technically, the website is built using the Hugo static site generator with the PaperMod theme, delivering fast performance and good mobile optimization. The site uses modern web standards with valid HTML and CSS, and includes SEO-friendly metadata and social media integration. Hosting details are not explicit, but the domain is registered with Dynadot Inc. No analytics or advertising scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and has domain transfer protection enabled. However, DNSSEC is not enabled, and no security headers were detected in the HTML content, which could be improved. There are no forms collecting user data, reducing attack surface. Privacy and cookie policies are absent, which is a compliance gap. No vulnerability disclosure or incident response information is provided. Overall, the website is trustworthy, professional, and safe for general audiences. The main risks relate to privacy compliance and security hardening. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and publishing vulnerability disclosure information to enhance trust and compliance.

A

Asociace podniků topenářské techniky

aptt.cz

42

The Asociace podniků topenářské techniky (APTT) is a Czech industry association established in 1992 that represents manufacturers and sellers in the heating technology sector, including boilers, fireplaces, and heating regulation technology. The association provides legislative advocacy, professional training, and industry collaboration primarily within the Czech Republic. The website reflects a professional and consistent brand image targeting industry professionals and stakeholders. Technically, the website uses legacy JavaScript libraries such as jQuery 1.9.1 and includes Google Analytics and Tag Manager for tracking. However, it lacks modern security practices such as HTTPS enforcement and security headers, which lowers its security posture. No privacy or cookie policies are present, indicating poor privacy compliance. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content itself appears legitimate and professional.

R

Realman s.r.o.

realman.cz

58

Realman s.r.o. is a Czech Republic-based company specializing in real estate software solutions, offering a comprehensive system for real estate agencies since 2004. Their platform provides CRM, online property listings, client communication tools, and GDPR compliance features, targeting primarily established real estate companies within the Czech market. The company positions itself as a reliable and innovative provider with a significant user base and multiple active licenses. Technically, the website employs a modern yet somewhat dated technology stack including Bootstrap and jQuery 1.11.0, with integrations for Google Analytics and Tag Manager. The site is mobile-optimized and features a custom CMS tailored to their software solution. Performance is moderate, with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. However, it lacks explicit security headers and uses an outdated jQuery version, which could pose vulnerabilities. No explicit security or incident response policies are published, which could be improved to enhance trust. Overall, the website is professional, content-rich, and trustworthy from a business perspective, but the absence of WHOIS data and some security best practices slightly reduce the overall trust score. Strategic improvements in security headers, technology updates, and transparency in security policies are recommended to strengthen their security posture and compliance.

The website www.pribramskypulmaraton.cz serves as the official online presence for the Příbramský půlmaraton, a local half marathon event in Příbram, Czech Republic. It provides comprehensive information about the event, including registration, race categories, results, news articles, photo galleries, and partner acknowledgments. The business is positioned as a small, community-focused sports event organizer, supported by local sponsors and the city administration. The target audience primarily consists of runners and sports enthusiasts interested in participating or following the event. Technically, the website employs a traditional web stack with jQuery and Lightbox for UI interactions and Google Fonts for typography. The site is moderately optimized for performance and mobile use but lacks modern frameworks or CMS indications. SEO and accessibility are basic but functional. No advanced analytics or tracking tools are detected, indicating a minimal data collection approach. From a security perspective, the site uses HTTPS as implied by URLs but lacks visible security headers and formal privacy or cookie policies, which are important for GDPR compliance. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and contact details appear authentic and consistent with a local event organizer. No forms or sensitive data collection points are present on the main page, reducing immediate risk exposure. Overall, the website is functional and serves its purpose well but would benefit from enhanced security practices, formal privacy documentation, and verification of domain registration details to improve trustworthiness and compliance.

A

AccuWeather

accuweather.com

62

AccuWeather is a leading global provider of weather forecasting services, offering local, national, and international weather information through its website and digital platforms. The company leverages advanced weather forecasting technology to deliver accurate and timely weather reports and alerts to a broad audience. Their business model is primarily advertising-supported, integrating multiple ad networks and analytics tools to monetize their content effectively. The website demonstrates a mature digital infrastructure with extensive use of modern technologies such as Prebid.js for header bidding, Google Publisher Tags for ad serving, and advanced analytics platforms like Parsely and Gamera. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a strong commitment to user privacy. Security posture is robust with HTTPS enforcement and multiple security headers, although explicit incident response and vulnerability disclosure mechanisms are not publicly visible. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the brand recognition and content quality. Strategic recommendations include enhancing contact information visibility, publishing a security.txt file, and continuous auditing of third-party scripts to maintain security integrity.

B

BK Instal

bkinstal.cz

38

BK Instal is a small Czech Republic-based company specializing in photovoltaic power plant servicing, installation, and comprehensive energy-saving solutions. The website presents a professional and modern approach to its business, targeting owners and operators of photovoltaic systems seeking efficient energy solutions. The company positions itself as a niche player in the energy sector with a focus on modern technology and cost savings. Technically, the website is built on WordPress with Elementor and WooCommerce, integrating modern tracking and security tools such as Google Tag Manager, Facebook Pixel, and Google reCAPTCHA v3. The site is mobile-optimized and performs moderately well, with good SEO practices in place. Security posture is solid with HTTPS enabled and use of security best practices, though some security headers are missing and no explicit incident response or vulnerability disclosure information is provided. The absence of WHOIS data and privacy/cookie policies reduces transparency and compliance confidence. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and domain registration transparency.

C

Columbus

columbusenergy.sk

43

Columbus Energy Slovensko s.r.o. operates as a major supplier and installer of photovoltaic systems, heat pumps, and electric vehicle chargers primarily targeting households and businesses in Slovakia. The company is part of the larger Columbus Group and positions itself as a leading European provider of renewable energy solutions with a strong emphasis on customer service, financing options, and subsidy processing. The website is professionally designed, multilingual, and provides comprehensive information about products and services, supported by a robust contact form and clear legal notices. Technically, the site is built on WordPress, leveraging modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Salesmanago, with GDPR-compliant cookie consent mechanisms in place. Security posture is strong with HTTPS and DNSSEC enabled, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site reflects a mature digital presence aligned with the company's business objectives and market position.

C

Columbus Energy S.A.

columbusenergy.com

57

Columbus Energy S.A. is a well-established European leader in modern renewable energy solutions, specializing in integrated products such as photovoltaic panels, heat pumps, energy storage, and electric vehicle charging stations. The company serves a broad audience including homeowners, businesses, farmers, and institutions, with a strong presence in Poland and expanding across Europe. Their business model focuses on providing comprehensive energy ecosystems that promote cost savings, energy independence, and environmental sustainability. The website reflects a mature digital presence with consistent branding and professional content, supporting their market position as a trusted energy provider. Technically, the website is built on WordPress and leverages modern JavaScript libraries and tools such as jQuery, Tiny Slider, and Google Tag Manager. Hosting and DNS services are managed via Cloudflare, ensuring reliable performance and security. The site is mobile-optimized and includes cookie consent mechanisms compliant with GDPR, indicating a good level of digital maturity and privacy awareness. From a security perspective, the site enforces HTTPS and uses domain transfer protection. However, it lacks DNSSEC and explicit security headers, which are recommended to enhance protection. No security policy or incident response information is publicly available, which could be improved to increase transparency and trust. Overall, the security posture is solid but could benefit from additional hardening and disclosure. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing security policies, and continuous monitoring of third-party scripts. These steps will strengthen the security posture and compliance, supporting the company’s reputation and customer trust.

C

Columbus Energy S.A.

columbusenergy.pl

53

Columbus Energy S.A. is a well-established Polish company specializing in renewable energy solutions for residential and business customers. Their offerings include photovoltaic installations, energy storage systems, heat pumps, intelligent energy management (Columbus Intelligence), and related services such as thermal modernization and electric vehicle charging stations. The company positions itself as a leading provider in Poland with a strong focus on eco-friendly and cost-saving technologies. The website is professionally designed, multilingual, and provides comprehensive information tailored to various customer segments including homeowners, businesses, farmers, and public institutions. Technically, the website is built on WordPress with modern frameworks and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, LinkedIn Insight, TikTok Pixel, Microsoft Clarity, and SalesManago. It employs a cookie consent mechanism compliant with GDPR and provides detailed privacy policies. The site is mobile-optimized, SEO-friendly, and performs moderately well. From a security perspective, the site uses HTTPS and implements best practices such as asynchronous loading of scripts and cookie consent. However, DNSSEC is not enabled, and there is no visible security policy or vulnerability disclosure page. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing a domain registered since 2014, supporting the company's legitimacy. Overall, Columbus Energy's website demonstrates a mature digital presence with strong business credibility and good security posture. Recommendations include enabling DNSSEC, publishing a security policy, and adding a vulnerability disclosure mechanism to further enhance trust and security.

M

Matthews Book Company

matthewsbooks.com

56

Matthews Book Company is a longstanding distributor specializing in medical books, CD-ROMs, and journals serving health sciences professionals including students, physicians, researchers, and libraries. Established in 1889 and employee-owned, the company positions itself as a trusted supplier with a focus on online ordering and subscription services for new publications. The website reflects a B2B business model targeting specialized educational and medical sectors. Technically, the site is built on legacy ASP.NET WebForms technology with outdated JavaScript libraries, indicating moderate digital maturity. The site is accessible, but mobile optimization and modern technical practices are basic. Security posture is moderate with HTTPS enabled but lacking modern security headers and using outdated libraries, which may expose vulnerabilities. Privacy compliance is partial with a privacy policy and terms of use present but no cookie consent mechanism. WHOIS data is missing, raising concerns about domain legitimacy, though the website content and business information appear professional and consistent with a reputable company. Overall, the site is functional but would benefit from modernization and enhanced security and privacy practices.

I

Ingram Content Group

ingramcontent.com

71

Ingram Content Group is a leading enterprise in the book industry, providing comprehensive solutions and services to publishers, authors, retailers, and libraries worldwide. Their business model focuses on B2B content distribution and publishing tools, supported by a network of subsidiary platforms such as CoreSource, Ingram iD, and Lightning Source. The website reflects a mature digital presence with professional design, clear navigation, and extensive content relevant to their target audience. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including Google Fonts, jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. Hosting is via a CDN (Amazon CloudFront), ensuring moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though accessibility could be improved. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating compliance with privacy regulations such as GDPR. However, no explicit security policy or incident response information is published, and security headers are not explicitly detected. The absence of WHOIS registration data is a concern but does not currently undermine the site's legitimacy given the professional presentation and ecosystem. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include publishing a dedicated security policy, adding a security.txt file, enhancing accessibility, and implementing additional HTTP security headers to further strengthen security posture.

P

Pavel Hilšer - studio R3D

r3d.cz

47

R3D.cz is a small, established web design studio based in Olomouc, Czech Republic, led by Pavel Hilšer. The company offers custom web design, SEO, and online marketing services with over 25 years of experience. The website presents a professional image with clear service offerings and client references, targeting small to medium businesses in the Czech market. Technically, the site uses a custom CMS and common JavaScript libraries, delivering a moderate performance and good mobile optimization. Security posture is adequate with GDPR compliance and secure form practices, but lacks advanced security headers and incident response information. WHOIS data is missing, which impacts domain trustworthiness, but the business information on the site is consistent and credible. Overall, the site is functional, professional, and trustworthy with room for security improvements.

4

4networks SK&CZ (C) 2015-2023

beremese.cz

64

Beremese.cz is a leading Czech wedding portal operated by 4networks SK&CZ, s.r.o., offering a comprehensive platform for future brides, married women, and grooms. The site provides a rich mix of content including wedding magazines, forums, photo blogs, bazaars, and professional listings, positioning itself as the largest wedding portal in the Czech Republic. The business model revolves around advertising, professional service listings, and community engagement. Technically, the site leverages modern web technologies such as Django, StimulusJS, Turbo (Hotwire), and integrates analytics and advertising platforms like Google Tag Manager, Gemius, and InMobi. The website is mobile-optimized with good SEO and basic accessibility features. Security posture is moderate with HTTPS usage and GDPR-compliant consent management, though security headers are not visibly present. The absence of WHOIS data limits domain trust verification but the site branding and content suggest legitimacy. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a professional and trustworthy media portal.

L

Loyal

loyalhealth.com

62

Loyal is a mature healthcare technology company founded in 2015, offering an end-to-end digital healthcare platform focused on patient engagement and data management. The company targets healthcare organizations and health systems, providing modular solutions such as provider data management, digital engagement, CRM, reputation management, and scheduling. The website is professionally designed using WordPress and Elementor, hosted on Azure DNS infrastructure, and integrates analytics tools like Google Analytics and MonsterInsights. Security posture is strong with HIPAA and SOC 2 Type 2 compliance claims, HTTPS enforcement, and domain registration protections. However, the site lacks visible privacy and cookie policies, as well as explicit incident response or vulnerability disclosure information, which are areas for improvement. Overall, the website is trustworthy, content-rich, and well-positioned in the healthcare technology market.

C

Carelli

carelli.sk

53

Carelli is a well-established furniture retail company operating primarily in the Czech Republic, with a history dating back to 1994. The company specializes in offering high-quality, designer furniture and interior solutions, targeting consumers who value premium and custom-made home furnishings. Their business model includes showroom sales, online catalog browsing, and delivery and installation services, positioning them as a reputable player in the retail furniture sector. The website reflects a professional and consistent brand image with clear navigation and relevant content for their target audience. Technically, the website employs modern web technologies including Bootstrap for responsive design, jQuery for interactivity, and advanced tracking tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements cookie consent for privacy compliance. However, it lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns well with the business claims, indicating legitimacy and consistency. Overall, Carelli's website demonstrates a solid digital presence with good privacy compliance and a trustworthy business profile. Strategic improvements in security headers and transparency around security policies could further enhance their security posture and customer trust.

J

Jakob Schlaepfer

jakob-schlaepfer.ch

51

Jakob Schlaepfer is a Swiss-based manufacturer specializing in innovative textiles for fashion and interior decoration, targeting professionals in the textile and design industries. The company positions itself as a niche provider focusing on high-quality, creative, and design-driven textile products. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the site is built on WordPress and uses common JavaScript libraries such as jQuery and Modernizr, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is moderate with HTTPS usage but lacks advanced security headers and vulnerability disclosure mechanisms. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Overall, the site is trustworthy and legitimate, with domain registration data consistent with the business claims.