Security Directory

The website www.tschechische-gebirge.de is a well-established online platform operated by eProgress s.r.o., specializing in providing comprehensive accommodation listings in the Czech mountain regions. It offers direct contact between guests and property owners, emphasizing no commission fees, which positions it as a trusted and cost-effective resource for travelers. The platform includes additional services such as weather updates, webcams, and last-minute deals, enhancing user engagement and utility. Technically, the site employs modern web technologies including Tailwind CSS and JavaScript, with integration of Google Analytics and Tag Manager for data insights, all served over HTTPS ensuring secure connections. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned privacy policies. Security posture is solid with SSL enabled and CSRF tokens present, though some security headers could be improved. Overall, the site demonstrates a mature digital presence with good content quality and user experience, suitable for its target audience of tourists and travelers seeking mountain accommodations in the Czech Republic.

Č

Československá obec legionářská, z.s.

csol.cz

44

Československá obec legionářská (ČsOL) is a well-established non-profit organization in the Czech Republic dedicated to supporting war veterans, their supporters, and promoting historical awareness about legions and military conflicts. The organization operates a professional website that provides rich content including news, projects, events, and a searchable database of legionnaires. The site is supported by a strong network of governmental and cultural partners, enhancing its credibility and outreach. Technically, the website is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile responsiveness. Privacy and cookie compliance are well implemented with visible consent mechanisms. However, the absence of WHOIS registration data for the domain introduces some uncertainty regarding domain legitimacy. Security posture is generally good with HTTPS enforced, but the lack of security headers and absence of published security policies or incident response information suggest areas for improvement. Overall, the website is trustworthy, professionally maintained, and serves its target audience effectively.

W

Wargaming.net

worldoftanks.eu

63

World of Tanks EU is the European portal for the popular MMO tank battle game developed by Wargaming.net. The website serves as a gateway for players to access game information, community features, clan wars, and tournaments. It targets gamers interested in mid-20th century armored warfare and offers a free-to-play business model with in-game purchases. The site is well-branded and maintains a consistent professional appearance, reflecting its position as a leading online multiplayer game in Europe. Technically, the site employs a modern JavaScript stack including jQuery, Lodash, and Google Tag Manager, with cookie consent managed by OneTrust, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses CSRF tokens, and implements cookie consent mechanisms, though it lacks explicit security headers and published security policies. Overall, the site is accessible, trustworthy, and professionally maintained, with room for improvement in privacy and security transparency.

C

Citfin – Finanční trhy, a.s.

citfin.cz

56

Citfin – Finanční trhy, a.s. is a Czech financial services company specializing in foreign currency exchange and international payments for corporate clients. The company positions itself as an expert in currency exchange with a focus on personalized service and competitive rates for multiple currencies including Euro and US Dollar. The website reflects a professional and consistent brand image targeting businesses requiring efficient and reliable foreign exchange solutions. Technically, the site is built on WordPress with modern optimizations such as WP Rocket for performance and Yoast SEO for search engine visibility. Cookiebot is used for GDPR-compliant cookie consent management, and Google Tag Manager is implemented for analytics. Security posture is good with HTTPS enforced and security headers present, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the professional presentation and comprehensive contact information. Overall, Citfin demonstrates a mature digital presence suitable for its financial services market segment.

X

XTB Group

xtb.com

68

XTB Group operates a leading European online brokerage platform specializing in FX and CFD trading, offering access to over 2500 financial instruments including stocks, ETFs, commodities, indices, and cryptocurrencies. The company targets retail and professional traders, providing award-winning trading platforms and comprehensive educational resources. The website reflects a mature digital presence with modern technologies and extensive marketing and analytics integrations. Security posture is strong with HTTPS and good practices, though explicit security policies and vulnerability disclosures are not evident. The absence of WHOIS data is a notable anomaly but does not negate the company's legitimacy given its regulatory claims and market presence. Overall, the site is professional, trustworthy, and well-optimized for user experience.

P

Purple Trading

purpletrading.cz

79

Purple Trading is an online Forex and CFD brokerage targeting retail and professional traders primarily in the Czech Republic. The website presents itself as a leading global Forex broker offering premium quality trading services, reliable technology, and a fair approach to clients. The content is professionally structured and localized in Czech, indicating a mature digital presence. The company emphasizes client success and provides extensive cookie consent and privacy mechanisms, reflecting compliance with GDPR requirements. Technically, the site uses modern JavaScript libraries and analytics tools such as Google Tag Manager, Segment, and Smartlook, integrated with a Joomla CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

A

Anycoin

anycoin.cz

69

Anycoin is a Czech-based cryptocurrency exchange platform specializing in fast and secure purchase of various cryptocurrencies including Bitcoin, Ethereum, Litecoin, and Cardano. The company targets both individual and corporate clients, offering a mobile app for iOS and Android to facilitate easy access. With over 110,000 registered users and a wide range of supported cryptocurrencies, Anycoin positions itself as a significant player in the Czech crypto market. The business operates under MP Developers s.r.o., with a professional online presence and certification from the Czech Cryptocurrency Association. Technically, the website employs modern web technologies such as React and Material-UI, integrates Google Tag Manager and Bing Ads for analytics and marketing, and maintains good SEO and mobile optimization standards. The site uses HTTPS with strong security headers, indicating a solid security posture. However, there is no publicly available security policy or incident response information, which could be improved. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, reflecting GDPR adherence. The lack of WHOIS data reduces domain trust signals but is mitigated by the professional website and social media presence. Overall, Anycoin presents a trustworthy and professional cryptocurrency exchange platform with room for improvement in transparency around security policies and incident response. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.

K

Kurzy.cz

fin.cz

58

Kurzy.cz is a well-established Czech financial information portal providing comprehensive data on currency exchange rates, stock markets (both domestic and international), commodities, economic indicators, and financial news. The site targets investors, traders, and the general public interested in financial markets and economic news. It offers a variety of financial tools including calculators and market charts, positioning itself as a key resource in the Czech financial media landscape. Technically, the website employs common web technologies such as jQuery, Google Tag Manager, and multiple advertising and analytics services including Gemius and Facebook Pixel. The site is served over HTTPS with a good SSL configuration but lacks some advanced security headers. Privacy compliance is basic with a cookie consent mechanism but no clearly accessible privacy or terms of service pages. No WHOIS data is available from the CZ NIC registry, which is typical for Czech domains but reduces transparency. Overall, the site is professional, content-rich, and trustworthy, though it could improve in privacy disclosures and security hardening.

E

Eccotarp

eccotarp.com

56

Eccotarp is a specialized manufacturer focused on producing foldable containment products designed to manage leakage of hazardous substances. Their product range includes collapsible utility trays, electric fire hose rollers, quarantine containers for electric vehicles, and high-capacity collapsible tanks, targeting industrial clients, emergency responders, and chemical handling facilities. The company maintains a professional online presence with product certifications and active participation in international trade fairs, supporting their niche market position. Technically, the website is built on a modern stack including Bootstrap, jQuery, Lightbox, and OctoberCMS, with Google Tag Manager for analytics. The site is mobile-optimized and well-structured, though performance is moderate. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit vulnerability disclosure mechanisms. The WHOIS data is unavailable, which slightly impacts trust and transparency. However, the professional website, certifications, and social media presence mitigate concerns. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is good with clear policies and GDPR consent mechanisms. Overall, the website and business present a low-risk profile with room for improvement in security headers, direct contact information, and domain registration transparency.

L

Limes Litomyšl s.r.o.

limes.cz

48

Limes Litomyšl s.r.o. is a well-established Czech manufacturer and retailer specializing in garden greenhouses and related accessories. With over 30 years of experience and a domain registered since 2000, the company positions itself as the largest greenhouse producer in Czechia, targeting professional growers, health-conscious consumers, and hobby gardeners. Their product range includes multiple greenhouse variants, cold frames, composters, and garden accessories, supported by a 10-year warranty on rusting and Czech product certification. The website reflects a professional e-commerce platform with clear branding and consistent messaging.

W

WELDPOINT

weldpoint.cz

59

WELDPOINT.cz is a Czech Republic-based e-commerce platform specializing in professional and hobby welding equipment, including welding machines, torches, cutting tools, and protective gear. The website targets both businesses and individual hobbyists, offering a broad product range with exclusive brands and authorized service. The platform is built on the Shoptet CMS, integrating various modern web technologies such as jQuery, Google Analytics, Facebook SDK, and parcel point services, indicating a moderate to advanced digital maturity. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and explicit incident response policies. The absence of WHOIS data reduces transparency but does not detract significantly from the professional presentation and trust signals on the site. Overall, the site is well-structured, GDPR compliant, and provides a good user experience with clear navigation and relevant content.

B

Bazény Kostelec

bazeny-kostelec.cz

55

Bazény Kostelec is a Czech company specializing in the manufacture and installation of plastic swimming pools and related products, operating since 1994. The company offers comprehensive turnkey solutions including pool construction, roofing, filtration systems, and chemical maintenance products. Their market position is that of a well-established local player with a strong focus on quality and customer service. Technically, the website is built on a modern stack including Bootstrap, jQuery, and integrates Google Analytics and reCAPTCHA for security and analytics. The site is mobile-optimized and includes cookie consent mechanisms compliant with GDPR. Security posture is good with HTTPS and secure forms, though there is room for improvement in HTTP security headers and incident response transparency. Overall, the website is professional, trustworthy, and provides clear contact information and customer testimonials, supporting business credibility. However, the absence of WHOIS data for the domain reduces transparency and trust slightly, warranting further verification.

H

HT dveře

htdvere.cz

47

HT dveře is a Czech company specializing in the manufacture and installation of high-quality security doors for apartments and family homes. The website positions the company as a trusted market leader with over 50,000 satisfied customers and 18 years of experience. Their offerings include various door models, installation services, and customer support, targeting residential customers primarily within the Czech Republic. The site features customer testimonials and detailed product information, reinforcing their market credibility. Technically, the website employs modern web technologies including Google Tag Manager, Visual Website Optimizer, and YouTube integration, with responsive design and good SEO practices. Cookie consent and privacy policies are implemented, reflecting GDPR compliance. However, no CMS or hosting provider details are evident, and some security headers are missing, which could be improved. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, but lacks explicit security policies or incident response contacts. The absence of WHOIS data for the domain is a notable concern, impacting domain legitimacy and trustworthiness. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website presents a professional and trustworthy front for the business, but the missing WHOIS information and lack of some security best practices suggest areas for improvement to enhance trust and compliance.

J

JASS a. s.

jass.cz

57

JASS a. s. is a Czech joint-stock company specializing in manufacturing electric overhead cranes, crane runways, and related crane components. With over 30 years of experience, the company serves industrial clients requiring material handling and lifting solutions. Their product portfolio includes overhead cranes, portal cranes, slewing column cranes, light crane systems, and special custom manufacturing. The website is professionally designed, providing clear navigation, contact information, and references, indicating a well-established business presence. Technically, the site uses modern JavaScript libraries, Google Analytics, and a cookie consent management system, reflecting a moderate level of digital maturity. Security-wise, the site implements cookie consent and uses HTTPS (assumed), but lacks visible security headers and explicit security policies, suggesting room for improvement. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and contact details appear authentic. Overall, the site presents a credible industrial manufacturing business with moderate technical and security posture.

B

BONVIN, s.r.o.

ubytovani-valtice.cz

49

The website represents a small family-run hospitality business, BONVIN, s.r.o., operating the Penzion Moravský Sommelier in Valtice, Czech Republic. It offers accommodation with a unique wine cellar experience, targeting wine enthusiasts, tourists, and cyclists exploring South Moravia. The site is well-structured, professionally designed, and provides clear contact and business information, enhancing trust and user engagement. Technically, the site employs modern web technologies including Bootstrap, jQuery, Google Analytics, and reCAPTCHA, indicating a moderate level of digital maturity. Security posture is good with HTTPS and anti-bot measures, though additional security headers and policies could improve resilience. The absence of WHOIS data reduces domain trustworthiness, but the website content and business details appear legitimate and consistent with a hospitality service provider. Overall, the site is functional, user-friendly, and compliant with GDPR cookie consent requirements.

V

Vinařství V & M Zborovský, v.o.s.

zborovsky.cz

53

Vinařství V & M Zborovský, v.o.s. is a small Czech winery established in 2001, specializing in quality wine production and sales through both physical vinotéka and an e-commerce platform. The company emphasizes traditional and modern winemaking techniques with a focus on terroir and sustainability. Their market position is strengthened by multiple awards and a loyal regional customer base. Technically, the website uses a custom CMS with common JavaScript libraries and integrates marketing and analytics tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and includes essential compliance features like cookie consent and age verification for alcohol sales. Security posture is adequate with HTTPS enforced but lacks advanced security headers and incident response disclosures. WHOIS data is missing, which slightly reduces trust but the website content and contact information appear legitimate and professional. Overall, the site is well-structured for its business purpose but could improve security and transparency aspects.

O

Odtahové vozy s.r.o

odtahovevozy.eu

58

Odtahové vozy s.r.o is a Czech-based company specializing in professional towing equipment and vehicles. Founded in 2021, it serves towing companies in the Czech Republic and Slovakia as an official representative of several reputable brands. The company offers a broad range of towing vehicles, accessories, and custom products through its website and e-shop, positioning itself as a trusted supplier in the transportation sector. The website is well-structured, professionally designed, and provides clear contact channels, enhancing customer engagement and trust. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Facebook Pixel for analytics and marketing. It features responsive design and basic accessibility, with a moderate performance profile. The site enforces HTTPS and includes a comprehensive cookie consent mechanism aligned with GDPR requirements, reflecting a mature digital presence. From a security perspective, the site demonstrates good practices such as secure forms and user consent management but lacks explicit security headers and detailed security policies. No vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable due to EURid privacy policies, but no suspicious indicators were found, and the domain appears consistent with the business claims. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its security and user trust.

A

ASN Hakr Brno

hakrbrno.cz

54

ASN Hakr Brno is a Czech Republic-based company specializing in automotive accessories such as roof racks, roof boxes, bike and ski carriers. The company operates both online and through physical stores located in Brno, Ostrava, and Prague, positioning itself as a regional leader in this niche retail market. Their business model combines e-commerce with direct retail sales, supported by extended warranties and installation services, enhancing customer trust and satisfaction. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to automotive consumers and businesses. Technically, the website employs the MooTools JavaScript framework alongside modern tracking tools like Google Tag Manager and Seznam tracking scripts. While the site is mobile-optimized and SEO-friendly, it uses somewhat dated JavaScript libraries, which may pose future maintenance challenges. The site implements HTTPS and a comprehensive cookie consent mechanism, demonstrating good privacy compliance. However, the absence of explicit security headers and missing WHOIS domain registration data slightly detract from the overall technical maturity. From a security perspective, the website shows a solid posture with HTTPS enforcement, secure forms, and no visible vulnerabilities or exposed sensitive data. The cookie consent mechanism aligns with GDPR requirements, and certifications such as ISO and DEKRA bolster trust. Nonetheless, the lack of a published security policy or incident response contact channels indicates room for improvement in transparency and preparedness. The missing WHOIS data is a concern for domain legitimacy verification, though the website's content and contact information support its authenticity. Overall, ASN Hakr Brno presents a trustworthy and professional online presence with good business credibility and security practices. Strategic enhancements in security headers, domain transparency, and incident response documentation would further strengthen their digital maturity and customer confidence.

P

PREVENT, S.R.O.

prevent.cz

50

PREVENT, S.R.O. is a well-established Czech company specializing in occupational safety (BOZP), fire protection (PO), and occupational health services (PLS). With over 28 years of market presence and a client base exceeding 5,500 companies, PREVENT offers comprehensive consulting, training, and e-learning solutions tailored to workplace safety and health compliance. Their market position is strong, supported by ISO 9001 and ISO 27001 certifications, and a professional digital presence including multiple subsidiary service platforms.

G

Greenval Insurance DAC

greenval-insurance.com

71

Greenval Insurance DAC is a specialized non-life insurance company focusing on fleet motor insurance, operating as a subsidiary of BNP Paribas. The company targets businesses requiring motor fleet insurance and offers services including third party liability claims management and partnerships with carefully selected providers. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site is built on Drupal 10, employs Google Tag Manager for analytics, and uses OneTrust for cookie consent, indicating a modern and compliant digital infrastructure. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place; however, the absence of explicit security headers and published security policies suggests room for improvement. The missing WHOIS domain registration data raises concerns about domain legitimacy, though the website content and affiliation with BNP Paribas lend credibility. Overall, the site is trustworthy but would benefit from enhanced transparency in security and domain registration details.

E

Element Fleet Management

elementfleet.com

78

Element Fleet Management is a leading global fleet management company specializing in intelligent mobility solutions and comprehensive fleet services. The company serves a broad range of industries with a focus on optimizing fleet costs, safety, and productivity. With over 1.5 million vehicles under management and thousands of clients, Element holds a strong market position in North America and Australia/New Zealand. Their business model centers on providing end-to-end fleet lifecycle services including acquisition, management, optimization, and remarketing. Technically, the website demonstrates a mature digital infrastructure utilizing modern JavaScript libraries, analytics tools, and video platforms. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a high level of digital maturity. The use of multiple tracking and marketing tools indicates extensive user engagement monitoring, balanced with privacy compliance through clear policies and consent mechanisms. From a security perspective, the site enforces HTTPS and employs reCAPTCHA for form security. However, it lacks visible security headers and a public incident response or vulnerability disclosure policy, which are recommended for enhanced security posture. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration trust verification but does not detract from the overall legitimacy indicated by the website content and branding. Overall, Element Fleet Management presents a professional, trustworthy, and well-structured online presence suitable for its enterprise clientele. Strategic improvements in security transparency and WHOIS data availability would further strengthen trust and compliance.

T

Tenis portál - tenisové zprávy, výsledky, statistiky, ATP, WTA

tenisportal.cz

52

Tenisportal.cz is a Czech-language tennis news and live results portal offering comprehensive coverage of ATP and WTA tennis events, including news articles, live scores, rankings, statistics, and betting tips. The website targets tennis fans and sports bettors primarily in the Czech Republic. Technically, the site uses modern web technologies including JavaScript, Google Tag Manager, and OneTrust for cookie consent, with a responsive design optimized for mobile devices. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit privacy or terms of service pages. The absence of WHOIS data limits domain trust verification, though the website content and structure indicate a legitimate business. Overall, the site provides a professional user experience with good content relevance and navigation clarity.

E

EITB

eitb.eus

63

EITB is the Basque public radio and television broadcaster providing a wide range of news, sports, cultural, and entertainment content primarily in the Basque language. The website serves as a comprehensive digital platform for live streaming, multimedia content, and regional news, targeting the Basque-speaking population and those interested in Basque culture. The site is professionally designed with consistent branding and rich content, reflecting its position as a leading regional public media entity. Technically, the website employs modern JavaScript frameworks, video players, and integrates multiple advertising and analytics services, demonstrating a mature digital infrastructure. Security-wise, the site uses HTTPS, privacy management tools, and consent mechanisms, though it could improve by adding more security headers and publishing a vulnerability disclosure policy. The WHOIS data is privacy protected, which is typical for such organizations, and no suspicious patterns were detected. Overall, the website is trustworthy, well-maintained, and compliant with GDPR regulations.

B

Biuro Rekordów

biurorekordow.pl

54

Biuro Rekordów is a specialized Polish company focused on certifying national records and providing consulting services for Guinness World Records. Established in 2014, it serves individuals and organizations aiming to set or verify records, offering official certification and advisory services. The website reflects a niche market position with a clear business model centered on record certification and event consulting. Technically, the site is built on WordPress with modern plugins and tracking tools, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy compliance documentation. The domain registration is consistent and mature, supporting the legitimacy of the business. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency.

N

Nextbike Polska S.A.

zielonogorskirowermiejski.pl

62

Zielonogórski Rower Miejski is a bike-sharing service operated under Nextbike Polska S.A., providing urban mobility solutions in Zielona Góra, Poland. The service offers bike rentals via a mobile app, supporting multiple languages and providing clear user guidance. The website is professionally designed with good content quality and clear navigation, targeting residents and visitors seeking alternative transportation. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for user tracking. Security posture is adequate with HTTPS enforced but lacks advanced security headers and published security policies. Privacy compliance is basic with visible privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and functional with room for security and compliance enhancements.

S

Středisko volného času Rosice - RUBIKO

svcrubiko.cz

58

Středisko volného času Rosice - RUBIKO is a local leisure and educational center based in Rosice, Czech Republic, providing a variety of programs such as courses, camps, workshops, and community events primarily targeting children, youth, and families. The organization operates as a non-profit entity focused on youth education and leisure activities within the local community. The website reflects this mission with clear navigation and relevant content about their services and upcoming events. Technically, the site uses a combination of legacy and modern web technologies including jQuery, Google Maps API, and Google Analytics, with a moderate performance profile and good mobile optimization. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism aligned with GDPR requirements, although it lacks advanced security headers and explicit security policies. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, but the website content and contact information support its legitimacy. Overall, the site is professional, user-friendly, and compliant with privacy regulations, serving its community effectively.

O

Oblastní muzeum v Lounech

archeoskanzenbrezno.cz

57

Archeoskanzen Březno is an archaeological open-air museum affiliated with the regional museum in Louny, Czech Republic. It offers educational programs, prehistoric-themed events, and summer camps aimed at students and adults interested in archaeology and cultural heritage. The website provides detailed event calendars and program descriptions, targeting a general audience with an interest in education and culture. Technically, the site is built on the Webnode CMS platform, hosted via AWS Cloudfront CDN, and employs Google Tag Manager for analytics. The site is mobile-optimized and presents a clear navigation structure with good content quality. Security-wise, the site uses HTTPS with a good SSL configuration but lacks important security headers and privacy/cookie policies, which impacts compliance and security posture. WHOIS data is unavailable, likely due to privacy protection, which is common for small cultural institutions. Overall, the site is legitimate and trustworthy but would benefit from enhanced security and privacy compliance measures.

B

BIKA

bika.cz

59

BIKA is a Czech-based wholesale distributor specializing in office supplies, cleaning products, and refreshments, targeting primarily business customers within the Czech Republic. The company positions itself as a reliable supplier with a focus on B2B sales and delivery under substitute fulfillment regimes. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the site leverages modern frontend technologies such as React and Ant Design, ensuring a responsive and user-friendly experience. The presence of privacy and cookie policies indicates attention to regulatory compliance, particularly GDPR. Security-wise, the site enforces HTTPS and includes essential security headers, though it lacks a dedicated security policy or vulnerability disclosure page. The absence of WHOIS data due to privacy protection slightly impacts trust but does not overshadow the overall legitimacy suggested by the website content and structure. Strategic recommendations include enhancing transparency around security policies and incident response, improving accessibility features, and maintaining vigilance on third-party scripts to mitigate vulnerabilities.

S

SOLLAU CZ s.r.o.

sollau-cz.cz

54

SOLLAU CZ s.r.o. is a Czech company specializing in supplying materials and products for the plastics industry, including plastic shredders, magnetic separators, and recycling technologies. The company positions itself as a trusted partner with 15 years of experience, offering comprehensive services from material supply to testing and equipment servicing. Their market focus is primarily on the Czech Republic and surrounding regions, targeting plastic processors and manufacturers. Technically, the website is well-structured, mobile-optimized, and uses modern web technologies such as jQuery and Google Tag Manager for analytics. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are absent. The lack of WHOIS data reduces domain trust but the website content and business information appear professional and credible. Overall, the site scores well on content quality, privacy compliance, and business credibility, with room for improvement in security transparency and domain registration verification.

Plainlanguage.gov is an official U.S. government website managed by the Plain Language Action and Information Network (PLAIN), a community of federal employees promoting clear and accessible government communications. The site provides comprehensive resources including guidelines, training, examples, and events to support the use of plain language across federal agencies. It is affiliated with the U.S. General Services Administration (GSA), reinforcing its authoritative position in the government sector. Technically, the website leverages modern web standards and the U.S. Web Design System (USWDS) to ensure accessibility, mobile optimization, and fast performance. It integrates Google Analytics and DigitalGov analytics for user tracking and measurement, while maintaining a clean and professional design with clear navigation and structured content. From a security perspective, the site enforces HTTPS and follows good practices by not exposing sensitive data. However, it lacks some advanced security headers and a formal security policy or incident response contact, which could be areas for improvement. Privacy compliance is moderate, with a clear privacy policy but no cookie consent mechanism detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and usability, making it a reliable resource for its target audience. The domain's WHOIS data is limited due to .gov domain policies but the affiliation with GSA and consistent branding strongly support legitimacy and trust.

F

Fandi mámám z.s.

fandimat.cz

48

FandiMat is a Czech non-profit project operated by Fandi mámám z.s., focused on facilitating material aid between people in need and donors including individuals and companies. The platform offers a web and mobile app interface, enabling users to request or offer material goods such as clothing, food, and household items. The project also includes physical exchange points called FandiMatPOINTs. The website is professionally designed, content-rich, and well-structured, targeting socially vulnerable groups and charitable organizations in the Czech Republic. Technically, the site is built on WordPress with modern plugins and SEO tools, supported by Google Analytics and Tag Manager for analytics and marketing. Security posture is good with HTTPS and cookie consent mechanisms, though security headers could be improved. The domain registration is consistent and legitimate, supporting the trustworthiness of the project.

S

Středočeské inovační centrum

s-ic.cz

46

Středočeské inovační centrum is a regional innovation hub based in the Czech Republic, focused on supporting startups, SMEs, and corporations in the Central Bohemian region. The organization provides key services such as startup development, financial sourcing, consultations, and networking within an innovation ecosystem. The website reflects a mature digital presence with multilingual support, event management, and active content updates. Technically, the site is built on WordPress with modern plugins and tracking tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and incident response transparency are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting a medium-sized business with a decade of operation.

M

Mediatex s.r.o.

mediatex.sk

56

Mediatex s.r.o. is a Slovak telecommunications service provider specializing in premium tariff services with direct contractual and technical connections to all major operators and integrators of mobile and fixed networks in Slovakia. Their key offerings include audiotex, premium SMS, SMS micro-payments, and SMS marketing services tailored to business customers and partners. The company has been established since 2007, indicating a stable presence in the telecommunications market. The website reflects a professional and consistent brand image with good content quality and clear service descriptions. Technically, the website is built on WordPress using popular plugins such as Yoast SEO and Slider Revolution, with integration of Google Analytics and Google Tag Manager for tracking. The site is mobile optimized and demonstrates good SEO practices. Hosting details are not explicitly disclosed but DNS points to Microsoft Online servers. Performance is moderate with basic accessibility features. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms. No security headers were detected in the provided data. Privacy compliance is basic with cookie consent implemented but no detailed GDPR statements or data protection officer contact found. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the website and domain registration data indicate a legitimate and credible business with a good market position in Slovakia's telecommunications sector. Strategic recommendations include enhancing security transparency, publishing privacy and incident response policies, and improving accessibility and GDPR compliance to strengthen trust and compliance posture.

Fleetcor Poland sp. z o. o. operates as an authorized distributor of fuel cards and telematics solutions, primarily serving businesses with vehicle fleets across Poland and Europe. Their offerings include Shell and MOL fuel cards, telematics via Carnet, and additional services like videotolling, providing clients with centralized and digital fleet expense management. The company leverages a broad network of over 26,000 fuel stations in Europe, positioning itself as a comprehensive mobility partner for various business sizes. Technically, the website is built on modern frameworks such as Next.js and React, integrating multiple marketing and analytics tools including Google Tag Manager, Microsoft Clarity, Hotjar, and Marketo. The site is mobile-optimized and employs cookie consent management via Cookiebot, reflecting a mature digital infrastructure. Hosting details are not explicit, but domain registration is managed by GoDaddy, a reputable registrar. From a security perspective, the site enforces HTTPS, uses security headers, and integrates Google reCAPTCHA v3 to protect forms. However, explicit security policies, incident response details, and vulnerability disclosure mechanisms are absent, representing areas for improvement. No vulnerabilities or suspicious content were detected, and privacy compliance is supported by clear privacy and cookie policies. Overall, the website presents a professional and trustworthy digital presence aligned with its business objectives. Strategic recommendations include publishing detailed security and incident response policies, implementing a vulnerability disclosure program, and enhancing accessibility features to further strengthen compliance and user trust.

Fleetcor Deutschland GmbH operates a professional website offering modern fleet management solutions tailored for German and European companies. The company provides a range of services including fuel cards, charging cards, telematics, and digital fleet management tools. The website positions Fleetcor as an authorized Shell partner with extensive acceptance networks across Europe, targeting businesses of all sizes. The technical infrastructure is modern, leveraging Next.js and React frameworks, and integrates multiple marketing and analytics tools with a cookie consent mechanism to comply with privacy regulations. Security posture is solid with HTTPS and bot protection, though some security headers could be enhanced. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

F

FLEETCOR Czech republic s.r.o.

fleetcor.cz

65

FLEETCOR Czech republic s.r.o. operates as a leading provider of international fuel card solutions, including the Shell Card, targeting business clients requiring fleet management and fuel payment services. The company is part of the global FLEETCOR Technologies group, listed on NYSE, with a strong market position in energy and transportation sectors. The website reflects a professional and business-focused approach, offering tailored solutions for corporate clients. Technically, the site is built on Drupal 8, leveraging modern web technologies such as Google Tag Manager and Cookiebot for consent management, ensuring compliance with GDPR and cookie regulations. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and uses cookie consent mechanisms but lacks explicit security policies or incident response contacts. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable security posture. Overall, the website is trustworthy, compliant, and professionally maintained, supporting the company's business credibility and digital maturity.

A

Arval

myarval.com

65

My Arval is a corporate login portal associated with Arval, a major player in vehicle leasing and fleet management services, part of the BNP Paribas group. The website serves existing customers across multiple countries, providing access to contract management and related services. The branding and content align with a professional transportation services business model targeting B2B and B2C clients. The platform is built using the OutSystems low-code framework, integrating common web technologies such as jQuery and Google Analytics for tracking and performance monitoring. Technically, the site demonstrates moderate digital maturity with HTTPS enforced and basic mobile optimization. However, it lacks visible security headers and comprehensive privacy or terms of service documentation, which are important for compliance and user trust. The absence of WHOIS registration data is a notable anomaly, potentially indicating privacy protection or technical issues with domain registration visibility. From a security perspective, the site uses secure forms with validation and cookie consent mechanisms, but it does not expose detailed security policies or incident response contacts. No vulnerabilities or malicious content were detected in the provided data. Overall, the security posture is moderate but could be improved by adding security headers, publishing privacy and terms policies, and providing clear contact information for security incidents. The overall risk is moderate due to the lack of WHOIS transparency and incomplete privacy documentation. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, adding vulnerability disclosure information, and improving accessibility and contact transparency to strengthen trust and compliance.

A

Arval BNP Paribas

arval.com

73

Arval BNP Paribas is a leading global provider of full-service vehicle leasing and innovative mobility solutions, operating as part of the BNP Paribas Group. The company targets businesses and fleet managers seeking sustainable and efficient vehicle leasing options, emphasizing corporate social responsibility and sustainable mobility. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with its corporate identity. Technically, the site is built on Drupal 10, integrates Google Tag Manager for analytics, and uses OneTrust for cookie consent management, indicating a modern and privacy-aware infrastructure. Security posture is strong with HTTPS enforcement, Content Security Policy with nonce, and cookie consent mechanisms, although explicit security policies and incident response contacts are not prominently published. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's legitimacy given the strong corporate signals and external references. Overall, the site is professional, secure, and compliant with privacy regulations, serving its business audience effectively.

A

ARVAL CZ s.r.o.

arvalauto.cz

54

ARVAL CZ s.r.o. operates a professional vehicle leasing and sales platform in the Czech Republic, specializing in operational leasing of new and used vehicles. The company targets both individual and business customers, offering a wide range of vehicle brands and flexible leasing options. The website is well-structured, with clear navigation and comprehensive content supporting the business model. Technically, the site employs modern JavaScript libraries and tracking tools, including Google Tag Manager and Adform, alongside a robust cookie consent mechanism ensuring GDPR compliance. Security posture is generally strong with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers suggests room for improvement. The lack of publicly available WHOIS data for the domain slightly reduces trust but is likely due to registry policies rather than malicious intent. Overall, the site presents a credible and professional digital presence for a medium-sized transportation leasing business.

C

COOLCZ s.r.o.

mpclick.cz

57

MPclick, operated by COOLCZ s.r.o., is a Czech Republic-based internet service provider offering broadband internet tariffs and IPTV services primarily targeting residential and business customers. The company has been established since 2003, indicating a mature presence in the local telecommunications market. Their business model emphasizes reliable internet service with no long-term contracts, appealing to customers seeking flexibility and dependable connectivity. The website content is professionally presented, with clear navigation and relevant service information.

H

Hispavista

hispavista.com

62

Hispavista is a digital marketing agency based in San Sebastián, Spain, specializing in comprehensive 360º marketing solutions that emphasize creativity and innovation to elevate brand presence. The company positions itself as 'Digital Makers' with expertise in delivering measurable results. The website reflects a professional and consistent brand image, targeting businesses seeking digital marketing services. Technically, the site is built on WordPress using Elementor and Yoast SEO, integrating modern analytics and consent management tools such as Piwik PRO and Cookiebot. The infrastructure is supported by a reputable registrar and hosting provider, with HTTPS enabled and basic security practices in place. Security posture is solid but could be improved by enabling DNSSEC and adding more HTTP security headers. Privacy compliance is good with a clear cookie consent mechanism, though no explicit privacy policy or terms of service pages were detected in the provided content. Overall, the website is safe, professional, and trustworthy, with no adult or questionable content detected.

C

Czech Video Center, a. s.

mall.tv

62

Fameplay.ai is a specialized company leveraging generative AI to empower audiovisual and sound production with storytelling capabilities. They combine traditional film production expertise with advanced AI technologies to offer services such as AI avatars, imaging, localization, and voice cloning. Their market position is strengthened by notable achievements including the first Emmy award for Czechia and partnerships with recognized clients like Microsoft and Universal Music Group. Technically, the website is built on a modern Webflow platform with integration of Google Fonts and Google Tag Manager, providing a good user experience and mobile optimization. However, the site lacks visible privacy and cookie policies, and security headers are not detected, indicating areas for improvement in security posture. The WHOIS data is unavailable or malformed, which reduces domain trustworthiness, but the professional content and client references partially mitigate this concern. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security measures.

Bprog is a Polish technology company specializing in creating custom internet solutions including websites, web portals, e-commerce stores, IT systems, and mobile applications. Founded in 2010, it serves businesses and organizations primarily in Poland, focusing on bespoke software development using modern frameworks such as Laravel. The company positions itself as a partner for digital transformation and IT optimization. Technically, the website employs common web technologies including jQuery, Bootstrap, Google Analytics, Google Tag Manager, and Google reCAPTCHA for form security. The site is mobile-optimized and includes GDPR-compliant cookie consent and privacy policy documentation. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but lacks advanced security headers and explicit security policies. No incident response or vulnerability disclosure information is provided. Overall, the website is professional, trustworthy, and well-structured, with room for security enhancements and more transparent business information.

Q

QCM s.r.o.

ezak.cz

60

QCM s.r.o. operates the E-ZAK platform, a certified electronic tool designed for the management and administration of public procurement processes in the Czech Republic. The platform complies with relevant legislation (law no. 134/2016 Sb.) and serves a broad audience including public contracting authorities, suppliers, and the professional public. With a significant user base and numerous installations, E-ZAK holds a strong market position in the government sector for procurement software solutions. The business model includes both licensing and rental options, with hosting services provided in a certified environment to ensure compliance and operational reliability. Technically, the website employs modern web technologies including Google Tag Manager, Google reCAPTCHA, and modular JavaScript and CSS. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Hosting appears to be managed by QCM's own certified hosting center, ensuring control over the operational environment. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and avoids exposing sensitive data. However, it lacks explicit security headers and a published security policy or incident response contact. Privacy compliance is well addressed with a GDPR policy and cookie consent mechanism. The WHOIS data confirms domain legitimacy with consistent registration details and an appropriate domain age. Overall, the website and business demonstrate a mature and trustworthy presence with strong compliance and security postures. Recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen trust and resilience.

H

HotLava.us, LLC

hotlava.us

64

HotLava.us, LLC is a newly established business insight platform launched in 2024, providing trending articles, expert advice, and downloadable resources across key industries such as technology, healthcare, finance, marketing, and retail. The website targets business professionals and decision-makers seeking actionable knowledge to empower growth. The business model centers on content publishing combined with lead generation through newsletter subscriptions and resource downloads. Technically, the site is built on the HubSpot CMS platform, leveraging modern marketing and analytics tools including Google Analytics, Google Tag Manager, and Facebook Pixel. The website demonstrates good mobile optimization, SEO practices, and a professional design. Security posture is adequate with HTTPS enforced and domain transfer protections in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is addressed with clear privacy and cookie policies and a consent mechanism. However, no explicit security policies or incident response contacts are published. Overall, the site is trustworthy and safe, with no adult or questionable content detected.

The Encyklopedie dějin Brna website is a specialized educational platform dedicated to the history of Brno, offering a rich repository of historical data, biographies, events, and cultural heritage. It is supported by reputable academic and museum institutions, which enhances its credibility and trustworthiness. The site targets researchers, students, and the general public interested in regional history, operating as a non-commercial cultural resource. Technically, the website employs modern web technologies including Bootstrap, Google Fonts, and Google Analytics, ensuring a responsive and user-friendly experience across devices. The site is well-structured with clear navigation and relevant content, though it lacks some advanced accessibility features.

R

Regionální muzeum K. A. Polánka

muzeumzatec.cz

50

Regionální muzeum K. A. Polánka Žatec is a regional cultural institution based in Žatec, Czech Republic, providing museum exhibitions, cultural events, and educational programs. The website showcases current and upcoming exhibitions such as Žatecký poklad and Krutá léta, targeting local visitors and cultural enthusiasts. The institution operates multiple physical locations including the main building, Křížova vila, and Stará papírna. The business model is non-profit, focusing on cultural preservation and public education. Technically, the website is built on the CMS Animato platform and utilizes common web technologies including jQuery, Google Tag Manager, Google Analytics, and Facebook SDK. The site is served over HTTPS with a cookie consent mechanism that complies with GDPR requirements. Performance and mobile optimization are moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and provides cookie consent with granular user options. However, no explicit security headers or incident response policies are visible, and WHOIS data is unavailable, limiting domain trust verification. The site does not expose sensitive data and uses standard third-party analytics and social media integrations. Overall, the security posture is adequate but could benefit from enhanced header policies and documented incident response. The overall risk assessment is moderate with no critical vulnerabilities detected. Strategic recommendations include implementing security headers, publishing incident response contacts, improving mobile and accessibility features, and maintaining regular audits of third-party scripts. The website is trustworthy and professional, serving its cultural mission effectively.

G

General Services Administration

section508.gov

69

Section508.gov is an official U.S. government website managed by the General Services Administration (GSA) that provides authoritative resources, guidance, and tools to ensure compliance with Section 508 of the Rehabilitation Act. The site targets federal agencies, vendors, and stakeholders involved in creating accessible information and communication technology (ICT) for individuals with disabilities. It holds a strong market position as the primary federal resource for digital accessibility compliance, offering comprehensive training, policy information, and accessibility tools such as the Accessibility Requirements Tool (ART). Technically, the website employs modern web technologies including jQuery, the U.S. Web Design System (USWDS), and integrates analytics via Google Tag Manager and the Digital Analytics Program. The site is mobile-optimized, accessible, and well-structured, reflecting a mature digital infrastructure consistent with government standards. Performance is moderate with good SEO and accessibility features. From a security perspective, the site enforces HTTPS with secure external script loading but lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. No vulnerabilities or sensitive data exposures were detected. WHOIS data is unavailable, likely due to privacy restrictions typical for .gov domains, but the domain's legitimacy is strongly supported by its official branding and content. Overall, Section508.gov demonstrates a high level of professionalism, trustworthiness, and compliance with accessibility standards. Strategic recommendations include implementing explicit security headers, adding cookie consent for privacy compliance, and publishing a formal security policy and incident response contact information to further strengthen its security posture and user trust.

D

Diligent Corporation

boarddocs.com

74

Diligent Corporation operates as a leading provider of governance, risk, and compliance software solutions, including its flagship BoardDocs product. The company targets corporate boards and governance professionals, offering secure collaboration and board management tools. The website reflects an enterprise-grade SaaS business model with a professional and consistent brand presence. Technically, the site leverages modern web technologies such as Next.js, Google Tag Manager, and various analytics and marketing platforms, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism, though explicit security headers and incident response information are not publicly evident. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable, slightly reducing transparency.

S

San Joaquin Delta College

deltacollege.edu

66

San Joaquin Delta College is a well-established public community college serving the San Joaquin Valley and Mother Lode regions. The institution offers over 200 degrees and certificates, focusing on trade skills, academic transfer, and workforce development. The website reflects a strong regional presence with comprehensive educational services and student support. The target audience includes prospective and current students, faculty, staff, and the local community. The college positions itself as an affordable and flexible educational option with a broad range of academic and personal growth programs. Technically, the website is built on Drupal 7 with a mature technology stack including jQuery, Flexslider, and Font Awesome. It integrates marketing and analytics tools such as Google Tag Manager and LiveChat for user engagement and tracking. The site is mobile optimized and accessible, with good SEO practices and clear navigation. Performance is moderate, typical for a content-rich educational site. From a security perspective, the site enforces HTTPS and uses some security best practices, but lacks explicit security headers and a vulnerability disclosure policy. No incident response contacts or security policies are publicly available. The domain WHOIS data is consistent with the institution's identity, showing no privacy protection and a legitimate registration period. Overall, the security posture is solid but could be improved with enhanced headers and transparency. The website is safe for general audiences, with no adult or questionable content. Social media presence is strong and official. Privacy compliance is basic, with a privacy and cookie policy present but no explicit consent mechanism. Business credibility is high, supported by accreditation and clear contact information. Strategic recommendations include improving security headers, publishing incident response contacts, implementing cookie consent, and maintaining up-to-date software to enhance security and compliance.