Security Directory

S

SPOLEČNĚ, o.p.s.

sochapromendela.cz

41

The website sochapromendela.cz represents a non-profit cultural heritage project dedicated to honoring Gregor Johann Mendel through the creation of a monument named Hrachovina. The project is managed by SPOLEČNĚ, o.p.s., a small non-profit organization based in Brno, Czech Republic. The site provides detailed information about the project, donation opportunities, events, and partners, targeting a general audience interested in science, history, and local culture. The business model focuses on fundraising and public engagement to support the monument's realization and maintenance. Technically, the website is built on WordPress with common plugins such as Yoast SEO and WPML for multilingual support. It uses modern JavaScript libraries like jQuery and Owl Carousel for UI components and integrates Google Analytics and Google Tag Manager for visitor tracking. The site is mobile-optimized and has good SEO practices but lacks some accessibility features and security headers. From a security perspective, the site uses HTTPS with a good SSL configuration but does not implement common security headers, which could improve protection against common web attacks. There is no visible privacy policy or cookie consent mechanism, which is a compliance gap under GDPR. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent with the website's timeline and project claims, indicating legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to reduce risk and improve user trust.

The Mendel festival website represents a well-established non-profit cultural and educational event organizer based in Brno, Czech Republic. The festival celebrates the legacy of Gregor Johann Mendel, the founder of genetics, and offers a diverse program combining science, faith, and entertainment. The website targets a broad audience including families, science enthusiasts, and cultural attendees, providing free access to events and rich content about the festival's history and partners. The organization behind the festival is SPOLEČNĚ, o.p.s., a registered non-profit entity with clear contact details and partner affiliations. Technically, the website is built on WordPress CMS, utilizing popular plugins such as Yoast SEO for search optimization and Gravity Forms for data collection. The site includes modern web technologies like jQuery and Leaflet.js for interactive maps. It is mobile-optimized with good navigation and accessibility features, though some improvements could be made in accessibility compliance. The site employs HTTPS with good SSL configuration and includes a GDPR-compliant cookie consent mechanism, reflecting a mature approach to privacy and user data protection. From a security perspective, the website demonstrates good practices including secure forms with consent checkboxes and no visible vulnerabilities or exposed sensitive data. However, some standard security headers are not explicitly detected and could be implemented to enhance protection. The absence of a published security policy or incident response contacts suggests room for improvement in transparency and readiness. The WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and consistent branding support its legitimacy. Overall, the Mendel festival website is a credible, well-maintained platform supporting a reputable cultural event. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility features to further strengthen trust and compliance.

I

INNOIT

innoit.cz

59

INNOIT is a Czech Republic-based digital agency specializing in comprehensive online and offline digital solutions including custom web development, e-shops, branding, social media management, and virtual tours. The company positions itself as a full-service provider with a strong portfolio and client testimonials, targeting businesses seeking professional digital presence and marketing services. The website is well-structured, professionally designed, and mobile optimized, reflecting a mature digital infrastructure. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and implements cookie consent mechanisms, indicating awareness of privacy compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers are missing and no explicit security policy or incident response contacts are provided. WHOIS data is unavailable, which slightly impacts trust but the website content and contact details support legitimacy. Overall, the site demonstrates a solid digital presence with room for security enhancements and WHOIS transparency improvements.

T

Tom Atom s.r.o.

tomatom.cz

58

Tom Atom s.r.o. is a Czech-based technology service provider specializing in creating intuitive and effective websites, internet marketing, mobile applications, programming, and graphic design. The company targets businesses seeking professional digital solutions to enhance their online presence and sales. The website presents a professional and consistent brand image with clear service offerings and client references, positioning itself as a niche player in the Czech market. Technically, the website uses a moderately modern technology stack including jQuery, Bootstrap, Google Analytics, Google Tag Manager, and Hotjar, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, reCAPTCHA integration, and cookie consent mechanisms, though it lacks some advanced security headers and explicit privacy or security policies. The absence of WHOIS data limits domain legitimacy verification, but the website content and structure suggest a legitimate and professional business. Overall, the site scores well in content quality, technical implementation, and security, with room for improvement in privacy compliance and business credibility transparency.

B

Bitrix Inc

bitrix24.eu

73

An all-in-one free platform to manage your team and run your sales, Bitrix24 is designed to be seamlessly integrated into all your business processes and help you manage them with the highest precision and efficiency.

F

Final Level

onlineradiobox.com

62

OnlineRadioBox.com is a well-established online media platform founded in 2013, offering free internet radio streaming services globally. The platform aggregates a wide variety of radio stations by region, genre, and popularity, providing users with easy access to music and talk radio content. It supports multiple languages and offers mobile applications for Android and iOS, enhancing accessibility and user engagement. The business model is primarily ad-supported, with partnerships evident in the footer section. The website demonstrates consistent branding and good content quality, targeting general internet users interested in online radio.

Pegasystems Inc. is a leading enterprise software company specializing in AI decisioning and workflow automation platforms. Their website positions them as a market leader in enterprise transformation, offering a comprehensive suite of AI-driven products and cloud services targeted at large organizations and enterprises. The company emphasizes innovation in AI agents, generative AI, and predictive AI to help businesses automate and optimize operations. The digital infrastructure is built on modern technologies including Drupal 10 CMS and integrates advanced analytics and consent management tools, reflecting a mature and professional digital presence. Security posture is strong with HTTPS enforcement, security headers, and recognized certifications such as ISO 27001 and SOC 2, although explicit incident response and vulnerability disclosure details are not prominently available. Overall, the website is well-designed, accessible, and trustworthy, supporting a high level of business credibility and compliance with privacy regulations.

The website www.wolfleder.cz represents Agro Trnava s.r.o., a small manufacturing business specializing in agricultural machinery, specifically luční brány (meadow harrows) branded Wölfleder. The company emphasizes Austrian quality and innovative construction for improving meadows and pastures. The site targets farmers and agricultural professionals seeking reliable equipment. Technically, the site uses modern frameworks such as Bootstrap and jQuery, integrates Google Tag Manager and Cloudflare Zaraz for analytics and performance, and is hosted behind Cloudflare. The site is mobile optimized and well structured, providing a good user experience. Security posture is solid with HTTPS enforced and form validation, but lacks explicit security headers and privacy/cookie policies, indicating room for compliance improvement. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and business information appear legitimate and professional. Overall, the site scores well on business credibility and technical implementation but needs enhancements in privacy compliance and security headers.

Fintokei is a proprietary trading platform focused on providing traders access to funded accounts on the cTrader platform, allowing users to trade with capital and withdraw up to 95% of profits. The company targets active traders seeking to elevate their trading skills and benefit from regular payouts. The website demonstrates a professional and consistent brand presence with active social media channels and a clear business proposition in the finance sector. Technically, the site is built on WordPress with modern JavaScript libraries and tracking tools, including Google Tag Manager, Smartlook, and Bloomreach Exponea, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR consent banner. However, the absence of WHOIS registration data raises questions about domain legitimacy and trustworthiness, warranting further verification. Overall, the site is functional, secure, and business-focused but could enhance transparency and contact availability.

S

sportmap.cz

sportmap.cz

51

Sportmap.cz is a Czech sports information platform providing a comprehensive calendar of sports events and a directory of sports clubs primarily focused on the Czech Republic. The website targets sports fans and local communities, offering free event submission and detailed listings of amateur and professional sports activities. It maintains partnerships with major Czech sports associations, enhancing its credibility and market position. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Google Analytics, and Mapy.cz API, although it currently employs a deprecated version of the Mapy.cz JavaScript SDK which should be updated. The website is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks publicly available security policies or incident response information. Privacy compliance is strong with GDPR-aligned cookie consent mechanisms and a comprehensive privacy policy. The absence of WHOIS data is a transparency concern but does not detract significantly from the overall legitimacy given the site's content and partnerships. Strategic recommendations include updating deprecated libraries, enhancing security headers, and publishing security and incident response policies to improve trust and compliance.

T

TRAVEL FAMILY s.r.o.

travelfamily.cz

53

Travel Family s.r.o. operates a comprehensive travel agency website specializing in family vacations primarily to Croatia and surrounding Adriatic destinations. The company holds a strong market position in the Czech Republic as a leading provider of holiday packages, last minute deals, and travel-related services including flights, bus, and train transport. The website is professionally designed with good content quality, clear navigation, and mobile optimization, supporting a positive user experience for its target audience of families and general travelers. Technically, the site is built on ASP.NET WebForms with integration of modern JavaScript libraries and marketing tools such as Google Tag Manager, Facebook Pixel, and Smartsupp chat. While the site uses HTTPS and some security best practices, there is room for improvement in security headers and publishing formal security policies. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Security posture is solid but could be enhanced by adding explicit security headers and incident response information. The absence of WHOIS data limits domain trust assessment, but the presence of industry certifications and clear contact information supports legitimacy. Overall, the website presents a trustworthy and professional digital presence for a medium-sized travel agency. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, updating legacy JavaScript libraries, and maintaining transparency in privacy and data protection practices to further strengthen trust and compliance.

S

statutární město Třinec

fajnytrinec.cz

55

The website fajnytrinec.cz serves as the official digital presence of the statutory city of Třinec in the Czech Republic. It provides residents and visitors with information about city projects, citizen proposals, participatory budgeting, and local priorities. The site is designed to engage the community in shaping the city's future and offers interactive features such as maps and project listings. Technically, the site employs modern web technologies including HTTPS, Cloudflare DNS/CDN, Google Tag Manager, Google Analytics, and Mapbox for mapping services. The design is professional and mobile-optimized, providing a good user experience. Security posture is solid with HTTPS and Cloudflare integration, though explicit security headers and policies are not confirmed. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy and credible as a government entity but would benefit from enhanced privacy and security disclosures.

A

Aluna

aluna.eu

59

Aluna is a Polish-based manufacturer specializing in telescopic pool enclosures and related products, positioning itself as a European leader in this niche. The company emphasizes product quality, environmental sustainability, and innovation, holding the AFNOR +A1 certification which underscores its commitment to standards. The website is professionally designed using WordPress and Elementor, integrating modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel, with appropriate privacy and cookie consent mechanisms in place. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. Overall, the digital infrastructure supports a medium-sized manufacturing business with a clear market focus in Poland and Europe.

Filix d.o.o. is a Croatian-based manufacturer specializing in innovative LED lighting solutions for architectural, underwater, and urban applications. With over 35 years of industry experience and a presence in 50 countries, the company offers durable, energy-efficient products supported by comprehensive customer services including warranty and technical tools. The website reflects a professional business with clear branding, detailed product showcases, and customer testimonials, positioning Filix as a reputable player in the energy-efficient lighting sector. Technically, the site employs modern web technologies such as PHP, Bootstrap, and integrates Google Analytics and Tag Manager for data insights. The site is mobile-optimized and accessible, with a cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS, session management, and CSRF protection, though improvements could be made by enabling DNSSEC and adding security headers. Overall, the domain registration is consistent with the business profile, enhancing trustworthiness.

S

Slant - Branding collective

slant.cz

60

Slant - Branding collective is a small branding agency based in Brno, Czech Republic, specializing in web design, brand creation, and graphic brand growth. The company emphasizes a thorough analysis of client needs to deliver design solutions that attract and retain the right customers. The website is built on WordPress using the Elementor page builder and integrates multiple analytics and marketing tools including Google Analytics, Google Tag Manager, Facebook Pixel, and Matomo. The technical infrastructure is modern and supports good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and IP anonymization in analytics, but lacks security headers and formal security policies. Privacy compliance is minimal with no visible privacy or cookie policies or consent mechanisms. Business credibility is supported by consistent WHOIS data and professional website content. Overall, the website is functional and professional but would benefit from enhanced privacy and security practices.

P

Penzion pod Drátníkem

poddratnikem.cz

58

Penzion pod Drátníkem is a small family-run hospitality business located in the Vysočina region of the Czech Republic. The website presents a well-structured and content-rich platform promoting their lodging services, including amenities such as a private sauna, indoor pool, and child-friendly facilities. The business targets families, tourists, and outdoor enthusiasts seeking a peaceful vacation in the protected landscape area of Žďárské vrchy. Technically, the website is built on the Webnode CMS platform, leveraging Amazon Cloudfront CDN for content delivery and integrates Google Analytics and Tag Manager for visitor tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS with a valid SSL certificate but lacks advanced security headers and explicit privacy and terms of service pages. Cookie consent is implemented with granular user options, indicating some level of privacy compliance. The absence of public WHOIS data suggests domain privacy protection, which is typical for small businesses. Overall, the website is legitimate, functional, and suitable for its business purpose but could improve in security and compliance documentation.

S

SurGal Clinic s.r.o.

surgalclinic.cz

59

SurGal Clinic s.r.o. is a private healthcare provider based in Brno, Czech Republic, specializing in surgery, orthopedics, gastroenterology, plastic surgery, rehabilitation, and intensive care among other medical services. The clinic targets both local and foreign patients, offering standard healthcare services covered by health insurance as well as premium paid services under the GRAND CLASS brand. The website reflects a professional healthcare institution with comprehensive patient information, contact details, and certifications, positioning it as a reputable medium-sized healthcare provider in the region. Technically, the website employs modern JavaScript libraries such as jQuery, Slick Carousel, and AOS, and uses the Foundation framework for responsive design. Google Analytics and Tag Manager are used for visitor tracking, with a clear cookie consent mechanism in place, indicating good privacy compliance. Security posture is moderate; while HTTPS is implied, explicit security headers are not detected in the provided data, and no incident response or vulnerability disclosure information is present. The WHOIS data is unavailable, likely due to privacy protection, which is common and justified for this business type. Overall, the website is well-structured, user-friendly, and trustworthy, with room for improvement in security headers and explicit security policies.

K

KRÁLOVO POLE CRANES, a.s.

kpc.cz

41

KRÁLOVO POLE CRANES, a.s. is a Czech engineering and manufacturing company specializing in the design and supply of specialized lifting devices and cranes. Founded in 1994, the company leverages a long tradition in crane manufacturing within the Czech Republic, serving industrial clients requiring custom and high-capacity lifting solutions. Their website reflects a professional and consistent brand presence, targeting industrial and manufacturing sectors with detailed product categories and services. The company holds ISO certification, enhancing its credibility in the market. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and CSS, hosted likely by REG-ZONER. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features are basic. Performance is moderate, with no detected blocking or WAF interference, allowing full content access. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, indicating awareness of privacy compliance. However, it lacks a published privacy policy, terms of service, security headers, and vulnerability disclosure mechanisms, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected, but enhancing security posture would benefit the company’s risk management. Overall, the website is trustworthy and professional with a solid business foundation. Strategic improvements in privacy and security documentation, along with technical hardening, would elevate compliance and user trust.

A

Acare, s.r.o.

acare.eu

58

Acare, s.r.o. is a Czech Republic based company specializing in customized air conditioning, cooling, and ventilation solutions. Established since 1993 and headquartered in Brno, the company serves clients primarily within the Czech market, offering comprehensive services including design, installation, and maintenance of HVAC systems. The website reflects a stable local business with ISO 9001 certification, indicating a commitment to quality standards. The target audience includes both business and individual customers seeking tailored climate control solutions. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. The presence of a cookie consent mechanism demonstrates awareness of privacy compliance, although explicit privacy and terms of service pages are not found. Security posture is adequate with HTTPS enforced but lacks advanced security headers and published security policies. WHOIS data is unavailable due to privacy protection typical for .eu domains, but no suspicious patterns were detected. Overall, the website is professional, trustworthy, and well-positioned within its niche.

A

Agro Trnava

agrotrnava.cz

60

Agro Trnava is a Czech-based family-owned business specializing in the manufacture and distribution of agricultural and construction machinery, with a strong focus on silage compactors and related equipment. The company has a longstanding tradition dating back to 1999 and serves a regional market including the Czech and Slovak Republics. Their website reflects a professional and consistent brand image, showcasing key products, partner brands, and customer engagement through news and social media. Technically, the website employs modern web technologies such as Bootstrap, Google Tag Manager, and Cloudflare services, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in explicit security headers and incident response disclosures. The absence of WHOIS data is a notable concern, impacting domain trustworthiness, but the overall business credibility remains high based on website content and contact transparency.

P

PC HELP, a.s.

koala.cz

47

Koala Elektronik, operated by PC HELP, a.s., is a Czech-based wholesale distributor specializing in electronic components such as power supplies, converters, displays, cables, and connectors. The website targets B2B customers in the electronics and industrial sectors, offering a broad catalog of products and custom solutions. The company positions itself as an established player in the Czech electronics wholesale market, providing comprehensive product offerings and customer support. Technically, the website employs modern web technologies including jQuery, Bootstrap, and various UI libraries, alongside Google Analytics and Tag Manager for tracking and Smartsupp for live chat support. The site is mobile-optimized with good navigation and professional design. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks some advanced security headers like CSP and X-Frame-Options. No WHOIS data was retrievable, which raises some concerns about domain registration transparency, though the website content and structure appear legitimate and professional. Overall, the site demonstrates moderate digital maturity with room for security enhancements and improved transparency in domain registration data.

Nadace Lenky a Romana Šmidberských is a Czech non-profit foundation established in 2015, focused on supporting individuals, organizations, cultural initiatives, and charitable events. The foundation actively engages with the community through recurring events such as the Metrostav Handy Cyklo Maraton and supports handicapped children and cultural projects. Their target audience includes donors, charitable organizations, and the Czech-speaking community interested in philanthropy and cultural support. Technically, the website uses a modern JavaScript stack including jQuery, Foundation framework, and popular UI libraries, hosted under a Czech registrar and nameservers consistent with the domain's origin. The site is mobile optimized and provides a good user experience with clear navigation and multimedia content. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism but lacks explicit security headers and published security policies. No forms collecting sensitive data were detected, reducing immediate risk. Overall, the domain registration data aligns well with the website content, supporting legitimacy. The site uses Google Analytics and Tag Manager for visitor tracking with moderate privacy compliance. The absence of a privacy policy and terms of service pages is a notable compliance gap. The website content is safe for general audiences with no adult or questionable content.

O

OLOMOUCKÁ DOPRAVNÍ s.r.o.

olomouckadopravni.cz

57

OLOMOUCKÁ DOPRAVNÍ s.r.o. is a Czech transportation and logistics company specializing in road and rail freight, vehicle servicing, and sale of aggregates. Established since 2006, it serves primarily construction and business clients in the Olomouc region with a modern fleet and experienced staff. The website reflects a mature digital presence built on Webflow, featuring professional design, responsive layout, and integrated analytics and security tools such as Cloudflare Turnstile CAPTCHA. Security posture is strong with HTTPS and secure form handling, though explicit security headers and incident response information are absent. The lack of WHOIS data is a notable gap in domain trust assessment, but the overall business credibility is supported by comprehensive contact details, privacy compliance, and clear service offerings. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and improving domain registration transparency.

A

Ayvens

ayvens.cz

73

Ayvens is a leading provider of operational leasing services for personal and light commercial vehicles in the Czech Republic, serving businesses, entrepreneurs, and private individuals. The company manages a fleet of over 27,000 vehicles and is part of the strong Société Générale financial group, with international operations across 42 countries. Their offerings include full-service leasing, fleet management, electric vehicles, and related mobility solutions. The website is professionally designed, mobile-optimized, and provides comprehensive information about products, services, and company identity in Czech language. Technically, the site uses modern web technologies including React, Datadog RUM for monitoring, Google Tag Manager for analytics, and Microsoft MSAL for authentication. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be further verified. WHOIS data is unavailable, which slightly reduces trust but the strong branding and business presence mitigate concerns. Overall, the site reflects a mature digital presence aligned with a large enterprise in the transportation leasing sector.

E

Event Service, s.r.o.

eventservice.cz

40

Event Service, s.r.o. is a Czech Republic-based sports marketing agency providing a broad range of services including strategic consulting, online communication, event organization, and digital marketing. They also operate Týmuj.cz, a popular online platform for sports team management used by thousands in Czechia and Slovakia. The company targets sports teams, athletes, and businesses seeking sports marketing solutions, positioning itself as a regional player with a professional online presence. Technically, the website uses standard web technologies such as jQuery and Google Analytics, with moderate performance and good mobile optimization. However, the absence of WHOIS data and lack of visible security headers present concerns regarding domain legitimacy and security posture. Privacy compliance is weak due to missing privacy and cookie policies, and no explicit GDPR indicators are present. Overall, the site is professional and content-rich but requires improvements in security and compliance to enhance trust and reduce risk.

O

osatka.cz

osatka.cz

53

Ošatka.cz is a Czech Republic-based e-commerce retailer specializing in healthy, natural, organic, and gluten-free food products, natural cosmetics, and dietary supplements. The company positions itself as a specialist in lyophilized fruit and nut creams, targeting health-conscious consumers seeking quality natural products. The website is professionally designed with clear navigation and a comprehensive product catalog, supporting a positive user experience and strong market presence in its niche. Technically, the site leverages modern web technologies including Google Tag Manager, Microsoft Clarity, and Smartsupp chat, running on the NXCMS platform with responsive design and good SEO practices. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is basic, lacking explicit privacy and cookie policies, which should be addressed to enhance trust and regulatory adherence. The absence of WHOIS data is a concern for domain transparency but does not detract significantly from the overall legitimacy based on website content and business information. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and improving accessibility features to strengthen compliance and user trust.

M

Medicon Hospitals s.r.o.

nasledna-pece.cz

48

The website www.nasledna-pece.cz represents Medicon Hospitals s.r.o., a healthcare provider specializing in follow-up and home healthcare services in the Czech Republic. The site targets clients of all age groups requiring professional medical care in their homes or in specialized clinics. The business model focuses on delivering comprehensive healthcare services including long-term care (LDN) and home care, supported by a professional and compassionate medical staff. The company maintains a medium-sized presence with a consistent brand image and positive client testimonials enhancing trustworthiness. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Google Fonts, Google Tag Manager, and Hotjar for analytics and user experience enhancement. The site is mobile optimized with good SEO practices and moderate performance. Privacy and cookie consent mechanisms are implemented effectively, reflecting a good level of digital maturity. From a security perspective, the website enforces HTTPS and uses consent management for tracking scripts, but lacks explicit security headers and a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the professional content and business information support a positive security posture. Overall, the website is well-structured, professional, and trustworthy with room for improvement in security header implementation and transparency around security policies. The domain's missing WHOIS data is a concern that should be addressed to enhance trust and compliance.

M

Medicon a.s.

incare.cz

55

INCARE is a premium healthcare service provider operating under the Medicon a.s. group, offering a wide range of specialized medical services including annual care, preventive packages, physiotherapy, and psychotherapy. The website targets both individual clients and corporate customers seeking high-quality healthcare with minimal waiting times. The company positions itself strongly in the Czech healthcare market with over 40 specializations and a large team of medical experts. Technically, the website is built on a custom CMS (Tom Atom) and employs a modern technology stack including Bootstrap, jQuery, Google Analytics, and Hotjar for analytics and user experience enhancement. The site is mobile-optimized and provides clear navigation and professional design. Security-wise, the site uses HTTPS and implements cookie consent and reCAPTCHA, but lacks explicit security headers and published security policies. WHOIS data is unavailable, which reduces transparency and trust slightly. Overall, the website is professional, secure, and compliant with privacy regulations, but could improve in security policy transparency and WHOIS data availability.

P

PRONATAL

pronatal.cz

60

PRONATAL is a Czech healthcare provider specializing in assisted reproduction and fertility treatments, operating since 1999. The website presents comprehensive information about their services, targeting couples facing infertility. The business is positioned as a medium-sized, established clinic with a focus on personalized care and modern medical technology. The site uses modern digital tools including Google Tag Manager, Cookiebot for GDPR compliance, Hotjar for user behavior analytics, and Google Analytics for traffic analysis. The technical infrastructure is solid with HTTPS enforced and integration of reCAPTCHA for security. However, explicit security policies and incident response contacts are not found, representing an area for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with no signs of blocking or WAF interference.

C

CLINICUM a.s.

jednodenni-chirurgie.cz

52

Centrum jednodenní chirurgie Poliklinika Vysočany, operated by CLINICUM a.s. and part of the MEDICON group, provides specialized day surgery and gynecological services in Prague. The center emphasizes modern medical techniques allowing patients to avoid long hospital stays, offering a range of laparoscopic, classic surgical, and ambulatory procedures. The website reflects a professional healthcare provider with clear operational hours, contact details, and patient-focused information. Technically, the site uses modern frameworks like Bootstrap and integrates Google Analytics, Tag Manager, and Hotjar for user insights, while maintaining GDPR compliance through explicit privacy and cookie policies. Security posture is solid with HTTPS and cookie consent, though security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, which is common and justified in healthcare contexts. Overall, the site is trustworthy, well-structured, and serves its target audience effectively.

M

MEDICON a.s.

mammacentrum.cz

56

Mammacentrum.cz is a well-established healthcare provider specializing in mammography and breast cancer screening services in the Czech Republic. Operating since 1994 and accredited since 2002, it offers a comprehensive range of preventive and diagnostic breast health services across multiple centers. The website reflects a mature business with clear contact information, multiple physical locations, and professional content tailored to women seeking breast health services. The parent company MEDICON a.s. is prominently referenced, reinforcing corporate legitimacy. Technically, the website is built on ASP.NET WebForms with legacy jQuery and integrates Google Tag Manager for analytics. The site is mobile-optimized with good navigation and content quality. Security posture is adequate with HTTPS enforced and form validation, but could be improved by updating libraries, enabling security headers, and activating anti-bot protections like reCAPTCHA. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism in place, aligned with GDPR requirements. However, no explicit security policy or incident response information is found. Overall, the site is trustworthy and professional, serving a critical healthcare niche with a focus on preventive screening. Strategic recommendations include modernizing the technical stack, enhancing security headers and bot protections, and publishing clear security and incident response policies to further build trust and compliance.

M

MEDICON Pharm s.r.o.

pharmacentrum.cz

52

Pharmacentrum.cz is a Czech Republic-based retail pharmacy chain operated by MEDICON Pharm s.r.o., offering pharmaceutical products, healthcare supplies, and professional advice. The company operates multiple pharmacy locations in Prague and provides online services such as medicine availability checking and reservation, supported by a loyalty program called Klub Pharmacentrum. The website is professionally designed with clear navigation and content relevant to its target audience of patients and healthcare consumers in Prague. Technically, the site uses modern web technologies including React, Google Tag Manager, Google Analytics, and Facebook Pixel, with proper cookie consent mechanisms in place. Security posture is good with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie policy. However, WHOIS data is unavailable, which slightly reduces trustworthiness but does not detract significantly from the overall legitimacy of the business. The site is free from adult or NSFW content and is fully accessible without WAF or blocking mechanisms.

D

DREAM PROperty s.r.o.

kolejjinak.cz

44

Kolej Jinak is a small hospitality business providing student and group accommodation in Ústí nad Labem, Czech Republic. The company operates seven newly renovated apartments located near the UJEP university campus and city center, targeting students and individuals seeking convenient housing. The business is owned by DREAM PROperty s.r.o., which is disclosed in the website content and EU funding project information. The website is professionally designed with clear navigation, mobile optimization, and relevant content focused on accommodation services. Technically, the website uses a modern but somewhat dated tech stack including jQuery 1.11.1, Slick Carousel, and Magnific Popup, integrated with Google Tag Manager and Google Analytics for marketing and analytics. The site is served over HTTPS with cookie consent mechanisms implemented, indicating good privacy compliance. However, some security best practices such as security headers and incident response information are missing. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, though the website content and business information appear trustworthy. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, Kolej Jinak presents a credible and professional online presence for its accommodation services, with room for improvement in security policies and domain registration transparency. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and verifying domain registration details to improve trustworthiness.

S

Úvod - Sklípek na masaryčce

sklipeknamasarycce.cz

45

The website www.sklipeknamasarycce.cz represents a small hospitality business offering a unique wine cellar rental experience in the city center of Ústí nad Labem, Czech Republic. The business targets individuals and companies seeking venue space for private celebrations, corporate events, and wine tastings. The site provides detailed information about rental options, pricing, catering, and additional services such as accommodation. The presence of an age verification popup indicates compliance with legal requirements for alcohol-related content. Technically, the website employs a modern JavaScript stack including jQuery, Slick Carousel, Magnific Popup, and Google Tag Manager for analytics and marketing. The site is mobile responsive with a cookie consent mechanism, although it lacks explicit privacy and terms of service pages. Security posture is moderate with HTTPS enforced and some privacy controls, but missing HTTP security headers and formal policies reduce overall security maturity. From a security and compliance perspective, the site shows good practices such as age verification and cookie consent but lacks documented privacy policies and incident response contacts. The absence of WHOIS data limits domain legitimacy verification, though the website content and contact details appear professional and consistent with a legitimate small business. Overall, the site is functional and professionally presented with moderate technical and security maturity. Strategic improvements in privacy documentation, security headers, and WHOIS transparency would enhance trust and compliance.

D

Dream PRO, s.r.o.

dreamvanlife.cz

44

Dream PRO, s.r.o. operates the website www.dreamvanlife.cz, offering camper van rental services focused on Volkswagen Grand California 600 vehicles. The business targets travelers seeking flexible and comfortable travel experiences in the Czech Republic, providing insurance and camping equipment as part of the rental. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the site uses common JavaScript libraries and Google services for analytics and marketing, with cookie consent mechanisms implemented to comply with GDPR. Security posture is adequate with HTTPS enforced, but could be improved by updating libraries and adding security headers. The absence of WHOIS data reduces domain transparency and trust slightly, but the business information and social media presence support legitimacy. Overall, the site is a reliable platform for camper van rentals with room for technical and security enhancements.

T

TOROLA racing s.r.o.

ktm-fm.cz

57

TOROLA racing s.r.o. operates an authorized dealership website for KTM and GASGAS motorcycles and electric bikes, targeting customers primarily in Northern Moravia, Czech Republic. The site offers a comprehensive e-commerce platform featuring new models, accessories, and rental services, supported by warranty and post-warranty servicing. The business positions itself as a premium retailer with a strong focus on customer service and product authenticity. Technically, the website employs a custom MVC UI framework with modern JavaScript and CSS, integrates Google Analytics and Tag Manager for tracking, and maintains good mobile responsiveness and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response policies. The absence of WHOIS data due to privacy protection limits domain transparency but does not detract from the overall legitimacy of the business. The website is safe for general audiences, free from adult or questionable content, and demonstrates good privacy compliance aligned with GDPR requirements.

V

Vitadio

vitadio.cz

63

Vitadio is a pioneering digital therapeutics company specializing in prescription digital therapy for type 2 diabetes, uniquely positioned as the first such therapy covered by all statutory health insurers in Germany. The website reflects a focused healthcare business model targeting patients requiring digital therapeutic interventions. The company appears to be relatively young, founded around 2018, and operates within the healthcare sector with a clear market niche. Technically, the website employs modern web technologies including Laravel as the backend framework, Google Tag Manager for analytics, and Cookiebot for cookie consent management, indicating a moderate to advanced digital maturity. The site is mobile optimized and uses standard SEO practices such as Open Graph and Twitter meta tags to enhance social media sharing and search engine visibility. From a security perspective, the site uses HTTPS with a valid SSL certificate and implements CSRF tokens for form security. However, there is room for improvement in security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partially addressed through cookie consent mechanisms, but the absence of a visible privacy policy or terms of service page is a gap. Overall, the website is professional and trustworthy with moderate risk. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and security policies, and enhancing security headers to improve the security posture and compliance. These steps will strengthen user trust and regulatory adherence.

A

AUMANTI design s.r.o.

aumanti.cz

43

AUMANTI design s.r.o. operates a professional e-commerce website specializing in the custom manufacturing and sale of wedding and engagement rings, as well as gemstone jewelry. Established in 2015, the company targets customers seeking bespoke and ready-made jewelry in the Czech Republic market. The website presents a clear business model combining direct retail and custom craftsmanship, supported by a consistent brand presence and social media integration. Technically, the site is built on WordPress with WooCommerce, leveraging common plugins and libraries to provide a functional and user-friendly shopping experience. The site is mobile optimized and includes SEO best practices such as structured data and meta tags. Security posture is solid with HTTPS enforced and spam protection via Google reCAPTCHA, though there is room for improvement in security headers and formal security policies. Privacy compliance is well addressed with a cookie consent mechanism and GDPR-aligned policies. Overall, the website demonstrates a mature digital presence with good business credibility and moderate technical sophistication.

S

svetzbrani.cz

svetzbrani.cz

58

Svetzbrani.cz is a Czech Republic based e-commerce retailer specializing in firearms, airsoft equipment, self-defense products, and pyrotechnics. Established since 2013, the company offers a wide range of products from well-known brands such as Umarex, Walther, and Beretta, targeting consumers interested in these categories. The website is professionally designed with clear navigation and multiple language and currency options, supporting a medium-sized business model focused on retail sales. Technically, the site is built on the Shoptet platform, utilizing common web technologies including jQuery, Google Analytics, Facebook SDK, and Hotjar for analytics and marketing purposes. Mobile optimization and SEO practices are good, though accessibility is basic. Security posture is adequate with HTTPS enforced but lacks comprehensive security headers and published security policies. The absence of WHOIS data limits domain trust assessment, though the website content and business presence appear legitimate. Cookie consent mechanisms are implemented, but privacy and terms of service pages are missing, indicating room for compliance improvements.

B

Brainmedia, s.r.o.

naum.studio

65

Naum Studio is a Slovakia-based multi-disciplinary design studio specializing in branding, UI/UX, and product development for startups, fintech, health, and web3 sectors. The company positions itself as a creative partner solving complex challenges with simple solutions, targeting innovative and technology-driven clients. Their business model revolves around providing comprehensive design and development services, supported by a professional portfolio and client testimonials that enhance their market credibility. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, GSAP, and various analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Hotjar. The site is mobile-optimized with good SEO practices and uses HTTPS with reCAPTCHA for security. However, some security headers and DNSSEC are missing, indicating room for improvement in security hardening. From a security perspective, the site demonstrates a moderate security posture with HTTPS and anti-bot measures in place but lacks explicit security policies and incident response contacts. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanism. The domain registration data is consistent and supports the legitimacy of the business. Overall, the website is professional, trustworthy, and well-structured, with minor technical and security enhancements recommended to elevate its security posture and compliance maturity.

D

Drivalia Lease Czech Republic s.r.o.

drivalia.cz

64

Drivalia Lease Czech Republic s.r.o. operates a professional website offering operativní leasing (operational leasing) and fleet management services primarily targeting businesses and drivers in the Czech Republic. The company positions itself as a world leader in car-as-a-service with over 50 years of experience across 30 countries, providing tailored leasing products, fleet solutions, and digital assistance services. The website is well-structured, multilingual, and integrates modern web technologies including Google Tag Manager and analytics, ensuring a professional digital presence. Social media channels and sustainability initiatives further enhance brand trust. Technically, the site is well-optimized for performance, mobile responsiveness, and accessibility, with comprehensive privacy and cookie policies indicating GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and a security.txt file added. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but the overall business legitimacy is supported by the website content and external references. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure info, and improving incident response transparency.

S

Sixt Leasing

sixtleasing.cz

47

Sixtleasing.cz is a professional website offering premium operational leasing and fleet management services primarily targeting corporate clients in the Czech Republic. The company is part of the larger Sixt group, a well-known international vehicle rental and leasing brand. The website provides comprehensive information about leasing products, services, and customer support, with clear navigation and a modern design. Technically, the site uses common JavaScript libraries such as jQuery and Slick Carousel, integrates Google Analytics and LinkedIn tracking, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and published security policies could enhance trust. The absence of WHOIS data reduces domain transparency but does not significantly impact the overall credibility given the strong brand presence and professional content. Overall, the site is well-structured, compliant, and trustworthy for its business purpose.

B

BNP Paribas Cardif Česká republika

cardif.cz

63

BNP Paribas Cardif Česká republika is a well-established insurance company founded in 2001, offering a broad range of personal and property insurance products including loan repayment insurance, everyday risk insurance, extended warranty insurance, household and liability insurance, travel insurance, and accident insurance. The company positions itself as a trusted insurer with a strong market presence in the Czech Republic, supported by multiple awards and positive client testimonials. The website reflects a mature digital presence built on WordPress with modern SEO and user experience practices, including mobile optimization and accessibility features. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

Raiffeisen - Leasing, s.r.o. operates a professional website focused on providing comprehensive financial services including leasing and financing of vehicles, machinery, technology, and commercial real estate primarily targeting businesses in the Czech Republic. The company positions itself as a reliable partner offering tailored financial solutions with a strong emphasis on customer service and operational leasing. The website content is well-structured, professionally designed, and includes clear contact information and compliance mechanisms such as cookie consent and privacy policy, indicating a mature digital presence. Technically, the website leverages modern web technologies including Kentico CMS, Bootstrap components, RequireJS, and Google Tag Manager for analytics and marketing. The site is mobile optimized, accessible, and SEO friendly, with moderate performance. Security posture is good with HTTPS enforced and no visible sensitive data exposure; however, the absence of explicit security headers and published security policies suggests room for improvement. The WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency and trustworthiness. Despite this, the website's professional presentation and business alignment with the Raiffeisen Group's known financial entities support its legitimacy. No signs of malicious content or adult material were found, and privacy compliance appears robust. Overall, the website demonstrates a solid business and technical foundation with minor security and transparency gaps. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to strengthen trust and compliance.

Č

ČSOB Leasing, a.s.

csobleasing.cz

66

ČSOB Leasing, a.s. is a leading financial services company in the Czech Republic specializing in vehicle and equipment leasing, operational leasing, and fleet management. The company benefits from a strong market position supported by the ČSOB Group, offering a wide range of financing products to both business clients and individuals. Their website reflects a professional and well-structured digital presence with clear service offerings and client support features. Technically, the website employs modern web technologies including Vue.js, Bootstrap, and jQuery, integrated with advanced marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Adobe DTM. The site is mobile-optimized and includes cookie consent mechanisms, indicating a mature digital infrastructure with attention to privacy compliance. From a security perspective, the site enforces HTTPS and uses secure external scripts, but lacks visible security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces the trust score slightly, but the overall security posture is solid with room for improvement in transparency and header implementation. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic recommendations include enhancing security header implementation, publishing a security policy and incident response information, and verifying domain registration details to improve trust and compliance.

A

AB MOTORS CZ s.r.o.

mgmotor-czech.cz

54

AB MOTORS CZ s.r.o. operates the official MG Motor Czech Republic website, serving as the authorized importer and dealer network for MG automobiles in the Czech market. The website offers comprehensive information on new and used MG vehicles, including petrol, hybrid, plug-in hybrid, and electric models, along with pricing, configurators, test drives, financing, and authorized service locations. The target audience is Czech consumers interested in MG vehicles, with a medium-sized business presence and consistent branding. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Tag Manager, Google Analytics, and Google Maps API. It is mobile-optimized with good SEO and accessibility basics. The site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers could be improved. No public security policy or incident response contacts are disclosed. Privacy compliance is strong with clear privacy and cookie policies and consent management. Business credibility is high with detailed contact information, authorized dealer listings, and professional content. Overall, the website is trustworthy and professionally maintained, though WHOIS data is unavailable, likely due to privacy protection. Recommendations include enhancing security headers, publishing a security policy, and continuous monitoring of third-party libraries for vulnerabilities.

MPI TECH CZ s.r.o. operates a professional e-commerce website specializing in electrical materials and installation services primarily targeting electrical contractors and retail customers in the Czech Republic. The company offers a broad product catalog including switches, sockets, frames, communication technology, circuit breakers, distribution boards, and smart home solutions. The website is built on the Shoptet platform and integrates standard web technologies such as jQuery and Google Analytics, with a focus on user privacy and GDPR compliance through cookie consent mechanisms and a privacy policy page. Despite the absence of WHOIS registration data, the website presents a professional and trustworthy front with secure HTTPS connections and appropriate security headers. However, the lack of direct contact emails or phone numbers in the visible content and missing WHOIS data slightly reduce the overall trustworthiness. The site is free from adult or questionable content and provides a good user experience with clear navigation and relevant content.

Horimex Cars, s.r.o. is a medium-sized automotive dealership and authorized service provider based in the Czech Republic, specializing in Hyundai and MG vehicle sales and servicing, with additional expertise in BMW servicing. The company holds a strong market position as the sole authorized Hyundai dealer and service center in Olomouc, offering a comprehensive range of services including vehicle sales, servicing, spare parts, and tire services. Their target audience primarily consists of car buyers and vehicle owners in the Olomouc region and surrounding areas. The website reflects a professional and consistent brand image with good content quality and customer trust signals such as positive reviews and partnerships with financial and insurance institutions. Technically, the website is built on WordPress 6.6.2 using Bootstrap and jQuery, integrating Google Analytics and Tag Manager for tracking, and employing a cookie consent mechanism compliant with GDPR. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but could be improved by adding security headers and explicit security policies. The absence of WHOIS data limits domain trust assessment, but the website content and business information appear legitimate and professional. Overall, the site presents a trustworthy and functional digital presence for Horimex Cars, supporting their business operations effectively. Strategic improvements in security headers, transparency of domain registration, and formal security policies would enhance their security posture and compliance further.

S

SUPERKOMÍNY s.r.o.

superkominy.cz

56

SUPERKOMÍNY s.r.o. operates the website superkominy.cz, specializing in the sale and installation of chimney systems, fireplaces, stoves, and related components primarily for customers in the Czech Republic. The company positions itself as a specialist retailer offering quality products with delivery and turnkey installation services. The website is professionally designed, featuring clear navigation, product categories, and a cookie consent mechanism compliant with GDPR. Technically, the site uses the Shoptet e-commerce platform with modern JavaScript libraries and integrates Google Analytics and Facebook SDK for marketing and analytics purposes. Security posture is good with HTTPS enforced and secure login forms, though some security headers could be improved. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate and professional. No WAF or blocking mechanisms were detected, allowing full content accessibility.

B

Bärige

barige.sk

56

Bärige is a Slovakian e-commerce retailer specializing in high-quality mattresses, pillows, beds, and sleep accessories. The company operates a website offering a wide range of products aimed at improving sleep quality, targeting consumers in Slovakia. The business maintains a physical showroom in Bratislava and provides customer support via phone. The website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and third-party services such as Cloudflare, Google Tag Manager, Facebook Pixel, and Hotjar for performance, marketing, and analytics. While the site is well-structured and professionally designed, it lacks explicit privacy and security policies, which are critical for compliance and trust. The domain registration is consistent with the business claims, and no blocking or WAF challenges were detected, indicating good accessibility.