Security Directory

R

Rehabilitační pomůcky

rehabilitacnipomucky.cz

57

Rehabilitacnipomucky.cz is a Czech e-commerce platform specializing in the sale of rehabilitation and orthopedic aids from well-known global brands. The website offers a broad product range including orthoses, bandages, compensatory aids, taping products, and exercise equipment, targeting individuals requiring rehabilitation products, healthcare providers, and sports professionals. The platform demonstrates a solid market position supported by a high volume of positive customer reviews and a comprehensive product offering. Technically, the website is built on the Shoptet e-commerce platform, utilizing modern web technologies such as jQuery, Google Tag Manager, and Facebook SDK, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with GDPR-aligned policies and consent management. The absence of WHOIS data limits domain legitimacy verification, but the website's content and business signals indicate a legitimate operation. Overall, the site presents a professional and trustworthy e-commerce presence in the healthcare sector.

D

DrWitt

drwitt.cz

47

DrWitt.cz is a Czech website representing a small retail business specializing in functional mineral water beverages enriched with vitamins and minerals. The company appears to be established since 2018 and targets general consumers interested in health and wellness products. The website is professionally designed with consistent branding and clear messaging about their product offerings. Technically, the site uses modern web technologies including Bootstrap, Font Awesome, Google Fonts, and integrates Google Analytics and advertising tools such as Google Ads and Seznam Sklik. The presence of a comprehensive cookie consent mechanism and privacy policy indicates good GDPR compliance. Security posture is solid with HTTPS enforced and use of Google reCAPTCHA, though explicit security headers could be improved. No critical vulnerabilities or suspicious patterns were detected. Overall, the website presents a trustworthy and professional digital presence for a small Czech beverage company.

The website lotus-hodinky.cz represents Janeba Time, s.r.o., a small retail business specializing in Lotus brand watches and jewelry, part of the Festina Group. The site targets consumers interested in modern and hybrid watches, smartwatches, and jewelry, offering authorized dealer information and service details. The business maintains a consistent brand presence with professional multimedia content and clear product portfolios. Technically, the site is built on Incomedia WebSite X5 Pro CMS, leveraging modern JavaScript libraries and Google Analytics for user tracking. Cookie consent is implemented with a clear mechanism, supporting GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. No direct contact information or terms of service pages were found, which could be enhanced for better user trust and compliance. The domain registration data is consistent with the business profile, indicating legitimacy and stable operation since 2015.

E

EuroAgentur Hotels & Travel, a.s.

euroagentur.com

51

EuroAgentur Hotels & Travel, a.s. is a well-established Czech hospitality company operating a large hotel chain and providing comprehensive travel, catering, wellness, and event services primarily in the Czech Republic and Slovakia. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. The company targets tourists, business travelers, and event organizers with a broad portfolio of services including accommodation, restaurants, catering, wellness centers, congresses, and weddings. The market position is strong as a leading hotel corporation in the region with multiple awards and partnerships with official tourism bodies. Technically, the website uses a mix of legacy and modern JavaScript libraries, Google Analytics, and a CMS platform (Topinfo CMS). Performance and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS and cookie consent but lacks explicit security headers and incident response information. WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency. Overall, the website is trustworthy and professional but would benefit from enhanced security headers and clearer contact information.

Italmec s.r.o. is a Czech-based company specializing in the sale and service of industrial machinery and chemical products, primarily sourced from Italy. With over 25 years of experience, the company targets demanding Czech customers in sectors such as washing lines, packaging machines, sports and civil surfaces, and plastic pipe production equipment. The business model focuses on B2B sales with a strong emphasis on personalized customer service. The website reflects a small-sized, established manufacturing sector player with a niche market position. Technically, the website employs common web technologies including jQuery, Google Analytics, Google Tag Manager, Google Maps API, and Google Fonts. The site is hosted under the REG-ZONER registrar and uses standard web fonts and scripts. Performance and mobile optimization are basic, with room for improvement in accessibility and SEO. No CMS or advanced frameworks are detected. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which are critical for GDPR compliance. HTTPS usage is assumed but not explicitly confirmed in the provided data. The site uses Google Analytics and Tag Manager for tracking, indicating moderate user tracking without explicit consent mechanisms. No forms or input fields are present, reducing immediate risk from input-based vulnerabilities. Overall, the website is functional and provides clear business contact information but lacks modern privacy and security best practices. Strategic improvements in security headers, privacy compliance, and mobile optimization would enhance trust and compliance. The domain WHOIS data supports the legitimacy and longevity of the business, aligning with the website content and business claims.

B

Blažek

blazek.cz

53

Blažek is a well-established Czech brand specializing in men's fashion, offering a wide range of formal and casual clothing and accessories. The company operates an e-commerce platform complemented by physical stores and bespoke tailoring services, positioning itself as a significant player in the Czech retail fashion market. The website reflects a professional and consistent brand image, targeting male customers seeking quality and style. Technically, the site employs modern web technologies and analytics tools, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and secure forms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates a mature digital presence with room for enhanced security transparency.

The website zbl.basketball serves as the official online presence for the Czech Women's Basketball League, operated under the Czech Basketball Federation. It provides comprehensive information including news, match schedules, player and team statistics, and multimedia content targeted at basketball enthusiasts, players, coaches, and officials within the Czech Republic. The site is well-branded and consistent with the federation's identity, supporting its role as a key information hub for women's basketball in the region. Technically, the site employs modern web technologies such as HTML5, CSS3, and JavaScript, with integrations of Google Tag Manager and Google Analytics for tracking and marketing purposes. The site is mobile-optimized and features a cookie consent mechanism, indicating a moderate level of digital maturity. Hosting and domain registration are consistent with the official federation, enhancing trust. From a security perspective, the site uses HTTPS with a good SSL configuration, but lacks DNSSEC and some recommended security headers. There is no visible privacy policy or terms of service, which are important for compliance and user trust. No incident response or vulnerability disclosure information is provided, which could be improved to enhance security posture. Overall, the website is professional, trustworthy, and serves its business purpose effectively. However, improvements in privacy compliance documentation and security best practices are recommended to reduce risk and increase user confidence.

The website nbl.basketball serves as the official digital platform for the Czech National Basketball League, operated by the Czech Basketball Federation. It provides comprehensive basketball-related content including news, match schedules, statistics, team profiles, and ticketing information. The site targets basketball enthusiasts, players, coaches, and officials within the Czech Republic, positioning itself as a central hub for national basketball activities. The business model appears to be informational and promotional, supported by the federation and possibly sponsorships. Technically, the website employs modern web technologies such as HTML5, CSS3, and JavaScript, with integrations of Google Tag Manager and Google Analytics for tracking and analytics. The site is hosted by Bombora Technologies Pty Ltd., with a moderate performance profile and good mobile optimization. Accessibility is basic but functional, and SEO practices are adequately implemented through meta tags and structured navigation. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; while a cookie consent mechanism is present, no privacy policy or terms of service pages were found, representing a compliance gap. Contact information and incident response details are not explicitly provided. Overall, the website is trustworthy and professionally maintained, with a strong alignment between domain registration data and website content. Strategic recommendations include implementing comprehensive privacy and security policies, enabling DNSSEC, and adding security headers to improve the security posture and compliance standing.

W

Webland AG

webland.ch

67

Webland AG is a Swiss-based hosting provider established in 1998, offering a comprehensive range of web hosting, email hosting, domain registration, and cloud office services primarily targeting private individuals and businesses in Switzerland. The company emphasizes Swiss quality, security, and data sovereignty by operating all servers within Switzerland and being a BAKOM registered Internet Service Provider. Their market position is that of a trusted, established mid-sized hosting provider with a strong local presence and a broad service portfolio including Windows and Linux hosting platforms. Technically, the website leverages modern web technologies such as Bootstrap, jQuery, FontAwesome, and DotNetNuke CMS. It integrates advanced analytics and marketing tools including Google Analytics, Google Tag Manager, Google Ads, and Intercom for customer engagement. The site is mobile-optimized with good SEO and accessibility features, reflecting a mature digital infrastructure. From a security perspective, the website uses HTTPS with excellent SSL configuration and offers security features like Web Application Firewall and SSL certificates including free Let's Encrypt options. However, there is room for improvement in implementing HTTP security headers and publishing explicit security policies or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, Webland AG presents a low-risk profile with strong business credibility, good privacy compliance, and a professional online presence. Strategic recommendations include enhancing security headers, publishing incident response information, and adding a security.txt file to improve transparency and security posture further.

C

Cartful Solutions, Inc

cartfulsolutions.com

69

Cartful Solutions, Inc operates a specialized SaaS platform delivering AI-powered quizzes tailored for ecommerce brands to enhance customer engagement and increase conversions. The company positions itself as a trusted partner for top brands, offering customizable quiz solutions that integrate seamlessly with brand UX and voice. Their platform supports various quiz types, data connectors, and analytics tools to optimize marketing and product strategies. Technically, Cartful leverages modern web technologies including Webflow CMS, Google Analytics, Google Tag Manager, LinkedIn Insight Tag, and Apollo.io for tracking and marketing automation. The website is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs reCAPTCHA v3, and claims SOC 2 compliance with regular audits. Cookie consent mechanisms and privacy policies are robust, supporting GDPR compliance. However, the absence of WHOIS registration data for the domain introduces some uncertainty regarding domain legitimacy, which should be monitored. Overall, Cartful presents a professional, secure, and privacy-conscious online presence with strong business credibility in the ecommerce technology sector. Strategic recommendations include publishing a terms of service page, providing explicit incident response contacts, and adding a security.txt file to enhance transparency and trust.

A

Arc'teryx Australia

arcteryx.com.au

67

Arc'teryx Australia operates a professional e-commerce website specializing in high-performance outdoor clothing and equipment. The company targets outdoor enthusiasts in Australia, offering premium products with a focus on innovation in climbing, skiing, and alpine technologies. The website is built on the Shopify platform, leveraging modern technologies and multiple third-party marketing and analytics tools to enhance user experience and business intelligence. Security posture is solid with HTTPS enforced and reputable third-party integrations, though there is room for improvement in security headers and incident response transparency. Privacy and cookie policies are present and indicate compliance with GDPR standards. Overall, the website presents a trustworthy and professional online presence suitable for its market segment.

T

Textron Inc.

textron.com

69

Textron Inc. is a large, diversified industrial company with a strong presence in aerospace, defense, and specialized vehicles. Founded in 1923, it operates multiple business segments including Bell, Textron Aviation, and Textron Systems. The company targets investors, customers in transportation and defense sectors, and job seekers. The website reflects a mature digital presence built on Drupal 10, with modern analytics and tracking tools integrated. It features comprehensive corporate, investor, and career information, supported by consistent branding and professional design. From a security perspective, the website enforces HTTPS and includes a Content Security Policy, along with cookie consent mechanisms indicating GDPR compliance. However, additional security headers and a vulnerability disclosure policy are absent, representing areas for improvement. The WHOIS data is unavailable or obscured, which is unusual for a public company domain but does not detract significantly from the overall trustworthiness given the extensive corporate content and social media presence. Overall, the website demonstrates a strong business credibility and technical maturity, with good privacy compliance and a solid security posture. The absence of direct contact emails and phone numbers suggests reliance on contact forms and social media channels for communication. The site is safe for general audiences with no adult or questionable content detected.

P

Pigeon Mountain Industries, Inc.

itrsonline.org

55

The International Technical Rescue Symposium (ITRS) website represents a professional event platform focused on technical rescue disciplines, co-hosted by PMI and CMC. It targets rescue professionals and volunteers, offering event registration, ticket sales, and presentation proposal submissions. The site is well-branded and consistent with its niche market positioning, serving a specialized audience in the rescue and emergency response sector. The domain is well-established since 2008, registered to Pigeon Mountain Industries, Inc., a US-based entity consistent with the event location and sponsors. Technically, the website is built on the Tilda CMS platform, integrating modern tools such as Google Analytics, Google Tag Manager, and Ticket Tailor for ticketing. It uses HTTPS with Cloudflare DNS but lacks DNSSEC and some security headers, indicating room for security enhancements. The site is mobile-optimized with good navigation and content relevance, though accessibility and SEO optimizations are basic. Security posture is moderate with HTTPS enforced and domain transfer protection enabled, but missing DNSSEC and security headers reduce the overall security score. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanisms. Business credibility is strong with clear contact information, event details, and trusted partner links. Overall, the website is a credible and professional event platform with moderate technical maturity and security posture. Strategic improvements in privacy compliance and security hardening would enhance trust and regulatory adherence.

ARVA Canada operates a professional e-commerce platform specializing in avalanche safety equipment including transceivers, airbags, backpacks, shovels, and probes. The company targets backcountry skiers, snowboarders, and mountain rescue professionals, positioning itself as a niche leader in Canadian outdoor safety retail. The website is built on Shopify, leveraging modern e-commerce technologies and integrations such as Google Analytics, Klaviyo, and Langshop for marketing and analytics. The site demonstrates good digital maturity with fast performance, mobile optimization, and clear navigation. Security posture is strong with HTTPS enforced and secure payment options, though explicit security headers and incident response information could be improved. Privacy and cookie policies are present and GDPR compliant, supporting user trust. Overall, the business presents a credible and professional online presence with room for enhanced security transparency and vulnerability disclosure.

T

Testy-Pneumatik.sk

testy-pneumatik.sk

52

Testy-Pneumatik.sk is a Slovak online portal specializing in tire reviews and expert test aggregations, targeting motorists seeking detailed information on summer, winter, and all-season tires. The site offers extensive user-generated reviews, official test summaries from ADAC and AutoBild, and search functionalities by vehicle, tire size, and manufacturer. Technically, the site employs standard web technologies including JavaScript, jQuery, Google Tag Manager, and Facebook SDK, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks advanced security headers and explicit incident response policies. Privacy compliance is basic, with a cookie policy present but no active consent mechanism. Overall, the site is trustworthy and professionally maintained, serving a niche automotive audience effectively.

2

2NP production s.r.o.

oktagonmma.com

67

OKTAGON MMA is a prominent European mixed martial arts organization founded in 2016, operating primarily in the Czech Republic and surrounding regions. The company organizes MMA events, promotes fighters, sells tickets, and distributes media content through its official website and streaming platform OKTAGON.tv. It has established partnerships with major brands and broadcasters, enhancing its market presence. The website reflects a mature digital infrastructure built on modern web technologies such as React and Next.js, optimized for performance and mobile responsiveness. Privacy and cookie compliance are well implemented, with clear consent mechanisms and a comprehensive privacy policy. Security posture is strong with HTTPS enforcement and security headers, though DNSSEC is not enabled. No critical vulnerabilities or suspicious indicators were found. However, the site lacks visible contact emails, phone numbers, terms of service, and explicit security or incident response policies, which could be improved to enhance trust and compliance. Overall, OKTAGON MMA presents a professional and trustworthy online presence aligned with its business objectives.

C

Centum

centum-rt.com

49

Centum is a Spanish technology company specializing in the design, development, and commercialization of aeronautical mission systems for emergency, security, defense, and aerospace sectors. With over 15 years of experience, Centum offers advanced mobile communications technology that supports critical operations such as search and rescue, maritime surveillance, and emergency communications. The company positions itself as a trusted provider of mission-critical connectivity solutions, serving government and defense markets with a medium-sized, professional team. The website infrastructure is built on WordPress with modern plugins and technologies, including WPBakery Page Builder and WPML for multilingual support. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though improvements could be made by enabling DNSSEC and adding security headers. No security blocking or WAF challenges were detected, allowing full content access and analysis. The site includes clear contact information, privacy and cookie policies, and legal notices, reflecting compliance with GDPR and related regulations. Social media presence on major platforms enhances trust and outreach. Overall, Centum's digital presence reflects a mature, credible business with a strong focus on technology and mission-critical solutions. Security and privacy practices are good but could be enhanced to further strengthen trust and resilience against threats.

M

M2C

m2c.eu

46

M2C is an established international group specializing in integrated facility management, security services, and digital innovation for building management. Operating in 13 European countries and the USA, M2C offers comprehensive services including maintenance, cleaning, security, and advanced technology solutions to optimize building operations. The company also invests in software development through its subsidiary Good Sailors, which emphasizes social responsibility by employing disabled developers. M2C recently entered the Prague Stock Exchange, signaling growth and investor interest. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Hotjar. The site is well-structured, mobile-optimized, and uses multiple languages to serve a broad audience. Security practices include HTTPS and asynchronous loading of tracking scripts, though some security headers could be improved. The security posture is solid with no evident vulnerabilities or exposed sensitive data. However, the absence of a visible privacy policy and terms of service reduces privacy compliance scores. The WHOIS data is privacy protected, which is common but limits transparency. Overall, the site reflects a professional and trustworthy business with room for improvement in privacy disclosures. Strategically, M2C should enhance its privacy and legal policy visibility, strengthen security headers, and maintain rigorous audits of third-party scripts to uphold trust and compliance in a competitive market.

G

Good Sailors, s.r.o.

goodsailors.cz

42

Good Sailors, s.r.o. is a Czech-based social enterprise founded in 2013 that provides digital services including application development and hardware/software supply. The company emphasizes meaningful employment for handicapped individuals and operates several socially impactful projects such as GSail and Dobrá spisovka. Their market position is strengthened by numerous awards recognizing innovation, social responsibility, and business success. Technically, the website employs modern analytics and spam protection tools, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and reCAPTCHA usage, though lacking some advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its social mission.

R

Reed Exhibitions

globalgamingexpo.com

70

Global Gaming Expo is a professional event platform dedicated to convening the global gaming industry. It operates as a trade show and networking event organizer, primarily targeting gaming industry professionals, exhibitors, and attendees. The website is associated with Reed Exhibitions, a recognized event organizer, indicating a strong market position within the media and events sector. The platform offers exhibitor directories, industry sessions, and networking opportunities, supporting its role as a key industry convenor. Technically, the website employs modern web technologies including React, Adobe Experience Manager CMS, and integrates multiple analytics and marketing tools such as Google Tag Manager, Mixpanel, and Adobe Launch. The site is mobile optimized and demonstrates good SEO practices, although performance is moderate. Security is robust with HTTPS enforced and multiple security headers present, alongside OAuth2 PKCE authentication mechanisms. However, the WHOIS data for the domain globalgamingexpo.com is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy despite the professional appearance and association with Reed Exhibitions. Privacy compliance is basic with a cookie consent mechanism present but no explicit privacy policy or terms of service pages found. Contact information is not readily available on the main page, limiting direct communication channels. Overall, the website presents a professional and secure platform for the gaming industry but should address domain registration transparency, enhance privacy disclosures, and provide clear contact information to improve trust and compliance.

A

Agenda d.o.o.

agenda.si

65

Agenda d.o.o. is a well-established Slovenian IT company specializing in open and standard business information solutions and IT services aimed at digital transformation. The company offers a comprehensive portfolio including consulting, implementation, maintenance, web development, education, and digital marketing, targeting businesses and organizations seeking to modernize their IT infrastructure. Their market position is strong in Slovenia with a history dating back to 1992, supported by certifications and a professional online presence. Technically, the website is built on TYPO3 CMS with integrations for analytics and security features like Google reCAPTCHA and cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, no visible vulnerabilities, and privacy compliance through GDPR-aligned cookie management, although explicit security policies and incident response information are not publicly disclosed. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

S

Setanta Sports

setantasports.com

62

Setanta Sports operates as a media platform specializing in live sports streaming, sports news, and game results. The website targets sports fans and online viewers seeking real-time sports content. The business is positioned as a sports streaming and news provider with a medium-sized digital presence, founded in 2005. The platform leverages WordPress CMS with popular plugins such as Yoast SEO and Elementor, supported by Cloudflare DNS and monitored via New Relic. The technical infrastructure is modern and supports good performance and mobile optimization. Security posture is solid with HTTPS and Cloudflare DNS, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partially implemented with cookie consent but lacks explicit privacy and terms of service documentation. Overall, the website is professional, trustworthy, and safe for general audiences.

P

Pitbull

pitbull.eu

64

Pitbull.eu is an e-commerce website specializing in retailing branded clothing and accessories for men, women, and kids. The site leverages Shopify as its platform, integrating modern technologies such as Sanity CMS for content management and Mux for video streaming. The business targets customers interested in sportswear and casual apparel, positioning itself as a niche brand with a consistent and professional online presence. The website is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content.

T

Tipsport

tipsportgamechanger.com

63

Tipsport Gamechanger is a European MMA tournament project organized by Tipsport in partnership with OKTAGON MMA. The website serves as a platform to promote the tournament featuring 16 middleweight fighters competing for a prize of one million euros. The site targets MMA fans primarily in Europe and the Czech Republic. Technically, the website is built using modern web technologies including Next.js and Material UI, hosted with Cloudflare DNS and CDN services, and integrates Google Analytics and Tag Manager for tracking. The security posture is good with HTTPS enforced and no exposed sensitive data, though some security headers and policies could be improved. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

I

Info TV Brno

infotvbrno.cz

54

Info TV Brno is a regional media company providing news and video content focused on the Brno and South Moravia region in the Czech Republic. The website serves as a digital platform for broadcasting regional news, cultural events, and sports updates, targeting local residents and community members. The business operates under TP Pohoda s.r.o., with a domain registered since 2018, indicating a stable presence in the regional media market. The company leverages social media channels extensively to engage its audience and expand its reach. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Facebook SDK integrated for marketing and tracking purposes. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Hosting is provided by Active24, a reputable provider, and the site uses HTTPS with a good SSL configuration. From a security perspective, the website employs HTTPS and cookie consent mechanisms compliant with GDPR. While some security headers are not explicitly detected, the overall security posture is solid with no visible vulnerabilities or exposed sensitive data. The WHOIS data aligns well with the website content and business information, supporting the legitimacy of the domain and its operations. Overall, Info TV Brno presents a professional and trustworthy regional media platform with a good balance of content quality, technical implementation, and privacy compliance. Strategic improvements in security headers and continuous monitoring of third-party scripts would further enhance its security posture.

D

Dobroděj

myslimesrdcem.cz

55

Dobroděj is a Czech Republic based CSR-focused media project promoting companies and individuals who engage in socially responsible activities. The website serves as a platform to highlight and publicize these efforts through partnerships with local media outlets such as Rádio Čas and TV Relax. The project is relatively young, with domain registration dating back to 2021, and operates primarily as a non-profit initiative to foster positive societal impact. Technically, the site is built on WordPress with Elementor and uses modern web technologies, including Google Tag Manager and cookie consent scripts, ensuring a good user experience and basic compliance with privacy norms. Security posture is adequate with HTTPS and some best practices, though explicit security policies and headers could be improved. Contact information is clearly presented, facilitating partner engagement. Overall, the site is professional, trustworthy, and well-positioned within its niche.

T

TP Pohoda s.r.o.

televizerelax.cz

56

Televize Relax is a Czech television broadcaster operated by TP Pohoda s.r.o., providing a variety of entertainment programming including series, crime shows, quizzes, cooking, and news content. The website serves as a digital platform to showcase their programming and engage viewers with a clean, well-structured design and clear navigation. The company targets a general audience seeking relaxing and entertaining TV content within the Czech Republic. The domain has been registered since 2013, consistent with the company's operational timeline. Technically, the website is built on WordPress CMS, leveraging modern SEO tools like Rank Math and performance optimizations such as WP Rocket. It integrates Google Tag Manager and Facebook SDK for analytics and marketing purposes. The site is mobile-optimized and includes accessibility features, though some areas could be enhanced. Hosting is provided by Active24, a reputable Czech hosting provider. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no public security policy or incident response contacts are provided. No vulnerabilities or suspicious activities were detected in the analyzed content. Overall, Televize Relax presents a professional and trustworthy online presence with good privacy compliance and moderate security posture. Strategic improvements in security headers and incident response transparency would further strengthen their security and trustworthiness.

D

Digital Broadcasting s.r.o.

tvrebel.cz

56

TV Rebel is a Czech rock music television channel operated by Digital Broadcasting s.r.o., established in 2013. The website serves as a digital platform for broadcasting rock music content, promoting shows, events, and providing news related to the rock music scene. It targets Czech-speaking rock music fans and maintains a niche position in the media industry. The company provides clear contact information and maintains active social media channels to engage its audience. Technically, the website is built on WordPress with modern SEO and performance optimizations, including caching and lazy loading. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and policies could enhance protection. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

F

FRONTYCORE s.r.o.

casrock.cz

53

Radio Čas Rock is a Czech regional rock radio station operated by FRONTYCORE s.r.o., established in 2010. The website serves as a digital platform for streaming rock music, promoting events, and selling merchandise. It targets rock music enthusiasts primarily in the Czech Republic. The business model combines traditional radio broadcasting with online streaming and e-commerce for branded products. The station maintains a consistent brand identity and engages audiences via social media channels like Facebook and Instagram. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities. It employs modern web technologies including jQuery, Google Tag Manager, Facebook Pixel, and Google reCAPTCHA for security and analytics. The site is hosted likely by Active24, consistent with the domain registrar information. Performance and mobile optimization are adequate, though accessibility features are basic. From a security perspective, the site uses HTTPS and includes cookie consent mechanisms compliant with GDPR. However, it lacks a published privacy policy, terms of service, and explicit security or incident response policies. No security.txt or vulnerability disclosure information is present. The site uses third-party tracking and advertising tools, which may impact user privacy. Overall, the website is functional and professional but could improve transparency and security posture by publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact information. These improvements would strengthen trust and compliance with data protection regulations.

W

WDF s.r.o.

omnetic.com

73

Omnetic, operated by WDF s.r.o., offers a comprehensive digital dealership management system tailored for automotive dealers and garages. The platform provides a wide range of services including new and used car sales tools, vehicle pricing, sourcing, insurance, CRM, workshop management, and more. With over 30 years of experience and more than 1,500 customers, Omnetic positions itself as a mature player in the automotive SaaS market. The website is professionally designed, mobile-optimized, and integrates multiple third-party services to enhance functionality and user experience. Technically, the site employs modern JavaScript frameworks, Google Tag Manager for analytics, and a robust cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of a published security policy and incident response details suggests room for improvement. The WHOIS data for the domain is missing, which raises concerns about domain legitimacy and registration transparency. Overall, the website is trustworthy and professional but would benefit from enhanced transparency regarding domain registration and security policies.

A

Autopůjčovna Taggart

taggart.cz

53

Autopůjčovna Taggart is a well-established car rental company based in Prague, Czech Republic, operating since 2010. It offers a wide range of rental vehicles including short-term, long-term, flexible monthly rentals, and specialized vehicles such as minibuses and luxury cars. The company positions itself as one of the largest and most trusted car rental providers in the region, supported by numerous positive customer reviews and multiple awards. Their business model focuses on customer convenience, transparent pricing, and comprehensive service including insurance and roadside assistance. Technically, the website is built on modern frameworks like Bootstrap and uses popular analytics and marketing tools such as Google Tag Manager, Smartlook, and Microsoft UET. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data is a concern but does not outweigh the strong trust signals from the website content and customer feedback. Overall, the company demonstrates a mature digital presence with room for minor security enhancements.

J

JPJ Forest, s.r.o.

jpjforest.cz

48

JPJ Forest, s.r.o. is a Czech company specializing in the import, manufacture, and sale of professional forestry, agricultural, and municipal machinery since 2009. The company offers a wide range of high-quality products including forestry trailers, hydraulic cranes, wood splitting machines, and hydraulic components. It serves a diverse clientele including private forest owners, agricultural businesses, and municipal service providers primarily in the Czech Republic and Slovakia. The website reflects a mature digital presence with comprehensive product information, customer references, and support services including financing and subsidies. Technically, the site is built on WordPress with modern web technologies and integrates analytics and marketing tools such as Google Analytics, Hotjar, and Google Tag Manager. Security posture is solid with HTTPS enforced and GDPR-compliant privacy and cookie policies, although some security headers and explicit incident response information are missing. The absence of WHOIS data limits domain trust verification, but the overall business credibility and professional web presence suggest legitimacy. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving accessibility compliance.

U

Ušetřeno.cz s.r.o.

usetreno.cz

67

Ušetřeno.cz s.r.o. operates a well-established Czech online platform specializing in comparison and brokerage services across energy, finance, insurance, and telecommunications sectors. The company offers consumers tools to compare prices and services such as energy suppliers, loans, mortgages, insurance policies, and mobile tariffs, aiming to help users save money efficiently. As part of the ČSOB group, Ušetřeno.cz benefits from strong market positioning and credibility within the Czech Republic. The website features a professional design, clear navigation, and interactive calculators that enhance user engagement and experience. Technically, the website leverages modern web technologies including Vue.js for frontend interactivity, Google Tag Manager for analytics, and Cookiebot for cookie consent management, reflecting a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, although some accessibility features could be improved. Security-wise, HTTPS is enforced, and cookie consent mechanisms are in place; however, the absence of explicit security headers and a security.txt file indicates room for enhancement in security posture and incident response readiness. The WHOIS data for the domain is unavailable, which raises concerns about transparency and domain registration legitimacy. Despite this, the website's content quality, business information, and affiliation with a reputable financial group mitigate some trust concerns. Overall, the platform demonstrates a solid business and technical foundation with moderate security maturity, suitable for its consumer-facing financial services role. Strategic recommendations include implementing comprehensive security headers, publishing a vulnerability disclosure policy, enhancing accessibility compliance, and improving transparency around domain registration and incident response contacts to strengthen trust and security culture.

T

Test-Pneumatik.cz

test-pneumatik.cz

58

Test-Pneumatik.cz is a specialized Czech online portal dedicated to aggregating thousands of tire reviews and expert test results, primarily from ADAC and AutoBild. It serves as a comprehensive resource for drivers seeking detailed information on summer, winter, and all-season tires, including user-generated reviews and ratings. The site targets Czech-speaking vehicle owners and enthusiasts, providing search capabilities by vehicle, tire size, and manufacturer. The business model appears to be content-driven with monetization likely through advertising and affiliate partnerships. The website demonstrates consistent branding and a good level of content quality, supported by structured data and social media presence. Technically, the site employs a modern JavaScript stack including jQuery, Facebook SDK, Google Tag Manager, Microsoft Clarity, and Smartlook for analytics and user behavior tracking. The site is mobile-optimized with good SEO practices and moderate performance. However, there is room for improvement in accessibility and security headers implementation. HTTPS is enforced, ensuring secure communication. From a security perspective, the site shows a solid posture with no visible vulnerabilities or exposed sensitive data. The use of multiple tracking and advertising scripts indicates extensive user data collection, but privacy compliance is basic with a cookie policy present but lacking explicit consent mechanisms. No terms of service or security policy pages were found, and no direct contact information is provided, which may impact user trust. WHOIS data is unavailable, likely due to privacy protection, but the site’s content and external signals suggest legitimacy. Overall, Test-Pneumatik.cz is a credible and useful resource within its niche, with a good balance of content and technical implementation. Strategic improvements in privacy compliance, security headers, and transparency of business contact information would enhance trust and security posture.

K

Klik Pojištění

klik.cz

69

Klik.cz is an online comparison platform primarily serving the Czech Republic market, focusing on insurance products such as car and home insurance, as well as electricity price comparisons. The website offers users a consolidated view of various offers to save time and money. The platform appears to be a medium-sized business with a consistent brand presence and a clear target audience of Czech consumers seeking competitive insurance and energy prices. Technically, the website employs modern JavaScript libraries, integrates with multiple analytics and marketing tools, and implements a cookie consent mechanism to comply with privacy regulations. Security-wise, the site uses HTTPS and a Content Security Policy, but lacks some additional security headers and explicit security or incident response policies. The absence of WHOIS data limits the ability to fully verify domain legitimacy, although the website content and infrastructure suggest a professional operation. Overall, Klik.cz demonstrates a solid digital presence with room for improvement in transparency and security practices.

Č

České povlečení

ceskepovleceni.cz

45

Českepovleceni.cz is a Czech Republic-based e-commerce retailer specializing in high-quality bedding, bed linens, and home textile products primarily sourced from Czech manufacturers. The website targets domestic customers seeking quality local products with options for custom sizes and a physical store presence in Hořice. The business model focuses on direct online sales complemented by a brick-and-mortar store, emphasizing trust and customer service. The site is professionally designed with clear navigation and product categorization, supporting a positive user experience.

A

Armik.cz: Armyshop a outdoor

armik.cz

47

Armik.cz is a Czech Republic based e-commerce retailer specializing in military, outdoor, survival, and sporting goods. The website offers a wide range of products including clothing, tactical gear, and accessories, targeting outdoor enthusiasts and military gear consumers. The business has been operating since 2008, indicating a stable market presence. Technically, the site uses a proprietary e-commerce platform with modern JavaScript integrations including Google Tag Manager and Google Analytics, supporting marketing and analytics efforts. The site is mobile optimized and provides a good user experience with clear navigation and product categorization. Security posture is adequate with HTTPS enabled and asynchronous script loading, but lacks visible security headers and explicit privacy or cookie policies, which are compliance gaps. No direct contact emails or phone numbers were found in the analyzed content, limiting direct customer support visibility. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

T

Toman Motors

tomanmotors.com

65

Toman Motors is a Czech Republic-based specialist in American and sports cars, offering import, sales, and servicing with a focus on exclusive brands such as Hennessey. The company positions itself as a premium provider with over a decade of market presence and a comprehensive portfolio of vehicles and automotive services. The website is professionally designed, mobile-optimized, and integrates modern analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS and cookie consent mechanisms, though the absence of explicit security policies and incident response information suggests room for improvement. A notable concern is the lack of WHOIS domain registration data, which impacts trust and legitimacy assessments. Overall, the site presents a credible business front but would benefit from enhanced transparency and security disclosures.

MinUC.se is a Swedish finance-focused website operated by UC AB, offering credit information and identity protection services to private individuals. The site provides multiple subscription and pay-per-use services such as Kreditkollen, Min Upplysning, Mitt Kreditbetyg, and ID-Skydd, positioning itself as a trusted resource for personal financial management and fraud prevention in Sweden. The website demonstrates a professional design with clear navigation and relevant content tailored to its target audience. Technically, the site uses modern JavaScript frameworks like Vue.js, integrates Google Tag Manager with consent mode, and employs a cookie consent mechanism, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers suggests room for improvement. The WHOIS data for the domain is missing, which is inconsistent with the active website and lowers trust slightly, but the overall branding and content align with the reputable UC AB company. Privacy compliance is strong, with comprehensive policies and GDPR adherence. Overall, MinUC.se presents a reliable and professional online presence with minor technical and transparency improvements recommended.

E

Ebbot

ebbot.com

71

Ebbot is a technology company specializing in Agentic AI for customer service automation. Their platform offers AI agents that automate repetitive support tasks, live chat solutions with AI assistance, and an API for integrating AI into existing workflows. The company targets multiple industries including telecom, e-commerce, financial services, energy, public sector, travel, housing, and education. The website is professionally designed, mobile-optimized, and uses modern web technologies such as Webflow, GSAP, and Lottie animations. Security posture is strong, evidenced by HTTPS enforcement and ISO 27001 certification, although explicit privacy and cookie policies are not found on the main site. WHOIS data is unavailable, which reduces domain trust but the overall business presence and security certifications support legitimacy.

C

CZ.BASKETBALL

cbf.cz

50

CZ.BASKETBALL is a well-established Czech basketball portal founded in 2009, serving as a central hub for basketball news, videos, competitions, and community engagement in the Czech Republic. The website targets basketball fans, players, coaches, and officials, providing comprehensive coverage of national teams, leagues, and events. It maintains strong partnerships with official basketball organizations and sponsors, enhancing its market position as a leading basketball information source in the region. Technically, the site uses modern web technologies including Google Tag Manager and Google Analytics, with good mobile optimization and a custom CMS platform. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are lacking. Privacy compliance is basic, with no clear privacy policy or terms of service pages found. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve transparency and security documentation.

B

Brunswick Bowling

brunswickbowling.com

57

Brunswick Bowling is a well-established company specializing in high-performance bowling equipment and supplies, targeting bowlers of all skill levels. The company positions itself as a leading supplier in the retail bowling industry, offering a wide range of products including bowling balls, bags, shoes, and apparel. The website reflects a professional retail business model with a focus on e-commerce and brand consistency. Technically, the site is built on Craft CMS, hosted on DigitalOcean infrastructure, and employs modern web technologies such as Google Tag Manager, Facebook Pixel, and Cookiebot for tracking and consent management. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the website uses HTTPS, implements CSRF tokens, and has a cookie consent mechanism, but lacks explicit security policies and some security headers. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site is trustworthy and professionally maintained but would benefit from publishing clear privacy and terms of service pages and providing explicit contact information to enhance compliance and user trust.

L

LaserMaxx74

lasermaxx74.fr

57

LaserMaxx74 is a small local entertainment business based in Annecy, France, specializing in laser game and quiz boxing activities. The company targets a broad audience including families and children aged 8 and above, offering event hosting for birthdays, corporate events, and bachelor/bachelorette parties. The website is professionally designed using modern web technologies and integrates booking services through a partner platform. The digital infrastructure includes analytics and marketing tools with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced, though some security headers could be improved. The absence of WHOIS data suggests privacy protection, which is typical and justified for this business type. Overall, the website presents a trustworthy and professional image suitable for its market niche.

S

SYNOT TIP, a.s.

synottip.sk

66

SYNOT TIP, a.s. operates a professional online sports betting and gaming platform primarily targeting Slovak customers. The website offers a variety of betting options including live bets, virtual games, and promotions, positioning itself as a leading player in the Slovak market. The company branding is consistent and the site content is relevant and professionally presented. Technically, the site uses a modern tech stack including ASP.NET, jQuery, and integrates third-party services such as Google Analytics, Hotjar, Zendesk, and Cookiebot for analytics, customer support, and privacy compliance. Security posture is solid with HTTPS enforced, anti-CSRF protections, and bot detection mechanisms in place. However, explicit security policies and incident response contacts are not published, and no terms of service page was found. Overall, the site is trustworthy and compliant with GDPR, with a comprehensive cookie consent mechanism. The domain WHOIS data aligns well with the business claims, reinforcing legitimacy.

K

Kingsbet

kingsbet.cz

64

Kingsbet is an online gambling and sports betting platform targeting the Czech market, offering online casino games, live casino, and sports betting services with promotional bonuses. The website is professionally designed with consistent branding and good content quality tailored for adult users interested in gambling. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Tag Manager, Microsoft Clarity, and Cookiebot for cookie consent management. The site is accessible without any WAF or blocking mechanisms, indicating good availability. However, the absence of WHOIS data and lack of visible privacy policy or terms of service pages reduce transparency and trustworthiness. Security posture is moderate with HTTPS enforced but missing security headers and no explicit security or incident response policies disclosed.

S

Sazka

sazkabet.cz

55

Sazka.cz is a leading Czech online gambling and lottery operator offering a wide range of sports betting and lottery products. The website provides extensive betting markets including live betting, supported by modern web technologies and integrations with analytics and telemetry services. The company targets adult sports bettors primarily in the Czech Republic, offering attractive bonuses and a mobile app to enhance user engagement. The website demonstrates a high level of digital maturity with professional design, clear navigation, and GDPR-compliant privacy and cookie policies. Security posture is strong with HTTPS, secure third-party integrations, and cookie consent mechanisms, although some HTTP security headers could be improved. The absence of public WHOIS data suggests privacy protection typical for gambling businesses, which does not detract from the site's legitimacy. Overall, Sazka.cz presents a trustworthy and professional online gambling platform with a solid technical foundation.

U

UITP Summit

uitpsummit.org

63

UITP Summit is a prominent event organizer specializing in public transport sector events, with the 2026 summit scheduled in Dubai. The website serves as a comprehensive platform for event information, including exhibition, congress, networking, sponsorship, and exhibitor opportunities. The site targets professionals and stakeholders in the public transport industry, offering a well-structured and professionally designed user experience. Technically, the website is built on WordPress with modern SEO and analytics tools integrated, including Yoast SEO, Google Analytics, and CookieYes for consent management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates a mature digital presence aligned with its business goals.

The website www.noveotazky.cz serves as an educational platform focused on providing new test questions and traffic situation scenarios for driver license applicants in the Czech Republic. It is supported by reputable organizations including the Czech Insurers' Bureau and various government and road safety partners, positioning it as a niche but trusted resource in the transportation education sector. The site targets individuals preparing for driving tests and aims to enhance road safety awareness through interactive content such as hazard perception video sequences. From a technical perspective, the site employs modern JavaScript frameworks, likely Vue.js, and is built on a Laravel backend, as indicated by route and sanctum references. It integrates Google Tag Manager for analytics and uses libraries like SweetAlert2 and NProgress for UI enhancements. The site is mobile-optimized with good design quality and navigation clarity, though accessibility features are basic. Performance is moderate, with room for improvement in SEO and accessibility. Security-wise, the site enforces HTTPS and includes CSRF tokens, but lacks visible security headers and explicit privacy or cookie policies. No vulnerability disclosures or incident response contacts are provided, which could be improved to enhance trust and compliance. The absence of WHOIS data limits domain legitimacy verification, though the presence of partner logos and contact email supports credibility. Overall, the website is a well-designed, functional educational resource with a solid business foundation but could benefit from enhanced privacy compliance, security best practices, and transparency to improve trust and regulatory adherence.

S

Start Driving

startdriving.cz

54

Start Driving is a Czech Republic-based educational project focused on enhancing the knowledge, responsibility, and driving skills of novice drivers. Supported by the Association of Driving Schools of the Czech Republic and other partners including government bodies, the project offers free advanced driver training and educational activities for young drivers, driving instructors, and responsible parents. The website reflects a well-structured initiative with strong institutional backing and a clear mission to improve road safety through education. Technically, the website is built on WordPress and integrates modern tools such as Google Tag Manager, Google Analytics, and YouTube embeds. It implements a cookie consent mechanism compliant with GDPR requirements, although a dedicated privacy policy page is not clearly found. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some security headers are missing, and the Google Maps API key is exposed in the source code, which should be reviewed for restrictions. From a security perspective, the site uses HTTPS and has no visible critical vulnerabilities or exposed sensitive data. The cookie consent mechanism and partner trust signals enhance its compliance posture. The absence of WHOIS registrant data limits domain trust assessment but does not detract significantly from the overall legitimacy given the project's nature and partnerships. Overall, Start Driving presents a credible, well-supported educational platform with moderate technical maturity and good security practices. Strategic improvements in privacy policy transparency and security header implementation are recommended to enhance compliance and trust further.