Security Directory

Z

#zeSPODu – Zajímavosti ze sociálně-právní ochrany dětí – Vítejte na informační webové stránce s novinkami a zajímavostmi ze sociálně-právní ochrany dětí

zespodu.cz

57

The website www.zespodu.cz is an informational platform focused on social and legal protection of children in the Czech Republic. It provides news, articles, and resources related to foster care, legal cases, and social services. The site targets professionals and individuals interested in child welfare and social-legal topics. The business model appears to be non-commercial or supported by public/non-profit entities, with a niche market position in the Czech social services sector. Technically, the site is built on WordPress using the Blocksy theme and common plugins such as Contact Form 7 and WP-Statistics for analytics. The site is mobile-optimized with good design and navigation, though accessibility features are basic. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site uses HTTPS and implements a cookie consent banner, indicating some privacy awareness. However, no advanced security headers were detected, and no privacy policy or terms of service pages were found, which are gaps in compliance and security posture. WHOIS data is unavailable, which reduces domain trustworthiness and raises concerns about registration transparency. Overall, the site is functional, content-rich, and safe for general audiences but would benefit from improved privacy compliance, enhanced security headers, and transparent domain registration information to increase trust and compliance.

M

my coffee story

mycoffeestory.cz

53

My Coffee Story is a small local café business based in Prague, Czech Republic, specializing in freshly prepared coffee, breakfasts, homemade desserts, and community events. The website reflects a modest but well-structured digital presence with clear information about their offerings and contact details. The business targets local customers and coffee enthusiasts, positioning itself as a neighborhood café with a cozy atmosphere and event hosting capabilities. Technically, the website is a simple static site using basic HTML, CSS, and JavaScript with Google Fonts integration, hosted on a Czech hosting provider. The site is mobile-optimized and provides a good user experience but lacks advanced technical frameworks or CMS platforms. Security posture is weak due to missing HTTPS verification, absence of security headers, and lack of privacy and cookie policies, which are critical for GDPR compliance. No forms or analytics scripts are present, reducing data collection risks but also limiting business intelligence capabilities. Overall, the website is functional and trustworthy for its business type but requires improvements in security and compliance to enhance trust and protect user data.

M

Městská část Praha 2

praha2.cz

57

Městská část Praha 2 operates as the official local government authority for the Prague 2 district in the Czech Republic. The website serves as a comprehensive portal for residents and visitors, providing access to municipal services, news, events, and community projects. It maintains a strong market position as a trusted government entity with a focus on public service and community engagement. The site targets local citizens and stakeholders interested in district governance and cultural activities. Technically, the website employs a modern yet straightforward technology stack including HTML5, CSS3, JavaScript, and Google Fonts, managed via the Vismo CMS platform. It demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Hosting and domain registration align with Czech providers, ensuring regional compliance and reliability. From a security perspective, the site uses HTTPS and secure form handling but lacks advanced security headers and explicit incident response contacts. Privacy compliance is addressed with clear privacy and cookie policies, though no active cookie consent mechanism is present. No vulnerabilities or suspicious activities were detected, indicating a solid security posture appropriate for a government website. Overall, the website is professional, trustworthy, and well-maintained, with minor areas for improvement in security headers and incident response transparency. The risk level is low, and the site effectively supports its public service mission.

C

CCS

ccs.cz

75

CCS operates as a prominent provider of fuel card and fleet management services primarily targeting businesses managing vehicle fleets in the Czech Republic and Slovakia. The company offers a comprehensive network of over 2,800 stations, enabling efficient fuel and charging solutions alongside vehicle monitoring. Their market position is strong within the regional energy and transportation sectors, supported by a professional and content-rich website presented in Czech. Technically, the website employs modern web technologies including Cookiebot for consent management, Google Fonts, and Typekit, and is built on the MerlinCMS platform. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and a detailed cookie consent mechanism, but lacks visible advanced security headers and explicit incident response information. The absence of WHOIS data limits domain trust analysis, though the website's compliance with GDPR and use of recognized third-party services indicate legitimacy. Overall, CCS demonstrates a mature digital presence with room for improvement in security transparency and contact information availability.

M

město Písek / Městský úřad Písek

mesto-pisek.cz

46

The website mesto-pisek.cz serves as the official digital presence of the city of Písek, Czech Republic. It provides comprehensive municipal information, including news, e-services, public documents, and contact details for residents and visitors. The site is well-structured and regularly updated, reflecting its role as a trusted government resource. The target audience primarily includes local citizens and stakeholders interested in city governance and services. The business model is public sector focused, delivering essential government services and information online. Technically, the website employs a modern but straightforward technology stack centered around HTML5, CSS3, JavaScript, and the Vismo CMS platform. It integrates Google Analytics for visitor insights and Google reCAPTCHA for form security. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Hosting details are not explicitly stated, but the domain and name servers suggest stable and consistent infrastructure. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to mitigate spam. It implements a cookie consent mechanism compliant with GDPR, allowing users to manage preferences. However, it lacks a publicly available security policy or incident response contacts, which could enhance transparency and preparedness. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data confirms the domain's legitimacy and long-standing registration, consistent with an official municipal website. Overall, the website demonstrates a solid security posture and good privacy compliance, with a professional and trustworthy presentation. Strategic improvements could include publishing formal security policies and incident response information to further strengthen user trust and compliance posture.

J

Jaroslav Šimek

jardasimek.cz

53

Jarda Simek is a professional UX/UI and 3D designer based in the Czech Republic, operating primarily as an independent or freelance creative. The website serves as a portfolio showcasing a variety of projects including brand design, product design, architectural visualization, mobile app design, and cinematic intros. The business targets digital creatives and clients seeking specialized design services, positioning itself as a niche personal brand with a focus on quality and creativity. The domain age and WHOIS data align well with the business history, indicating a stable and legitimate presence since 2018. Technically, the website employs modern frontend technologies such as Alpine.js and the model-viewer web component for 3D content, along with Google Fonts for typography. The site is hosted likely by Wedos, a Czech hosting provider, and demonstrates good mobile optimization and user experience. However, the site lacks advanced SEO and accessibility features, and no CMS or analytics tools are detected. From a security perspective, the site uses HTTPS but lacks explicit security headers and does not provide privacy or cookie policies, which are important for GDPR compliance. No forms or data collection mechanisms are present, reducing exposure to input-based vulnerabilities. The absence of incident response or vulnerability disclosure information suggests room for improvement in security maturity. Overall, the website is a well-designed, professional portfolio with moderate technical sophistication and business credibility. Key recommendations include implementing privacy and cookie policies, adding security headers, and enhancing compliance and security posture to build greater trust and meet regulatory requirements.

G

Givt

givt.cz

52

Givt.cz is a Czech non-profit platform established in 2015 that enables users to support over 3000 charitable organizations through their regular online shopping without paying extra. The platform integrates with numerous e-shops, displaying the percentage of purchase value donated to the selected charity. The website is professionally designed with good navigation and mobile optimization, reflecting a mature digital presence. Technically, it employs modern web technologies including Google Tag Manager and Analytics, with secure HTTPS hosting by REG-WEDOS. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response policies are not explicitly published. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie consent. Overall, the site is trustworthy and well-positioned in the non-profit e-commerce donation sector.

S

S.A. TROX Belgium/TROX Belgium N.V.

trox.be

70

S.A. TROX Belgium/TROX Belgium N.V. is a medium-sized manufacturing company specializing in air handling and ventilation products, serving primarily B2B clients in Belgium and connected globally through the TROX Group. Their website is professionally designed, multilingual, and provides comprehensive product and service information, including digital tools like the myTROX portal and TROX Academy for customer engagement and training. The technical infrastructure is modern, leveraging Scrivito CMS, jQuery, and Google reCAPTCHA for security and user experience. Security posture is strong with HTTPS, multiple security headers, and spam protection on forms. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanism. Contact information is clearly presented, enhancing business credibility. WHOIS data is restricted, which is typical for privacy reasons, but no suspicious patterns are detected. Overall, the website reflects a mature digital presence aligned with the company's business operations.

D

digital mediate s.r.o.

digitalmediate.cz

36

digital mediate s.r.o. is a small Czech Republic-based digital innovation collective specializing in consulting, branding, product design, software engineering, and marketing services. The company emphasizes multidisciplinary collaboration among managers, entrepreneurs, creators, and engineers to deliver innovative digital solutions that positively impact business and culture. Their market position is niche, targeting startups and businesses seeking growth and digital transformation. The website reflects a professional and consistent brand image with clear contact and company registration information, supporting business credibility. Technically, the website uses modern web standards including HTML5, CSS3, and JavaScript with jQuery and Google Fonts. The site is mobile optimized and has good SEO fundamentals but lacks advanced frameworks or CMS indications. Performance is moderate, and accessibility is basic. No analytics or tracking scripts were detected, indicating minimal user tracking and privacy risk. Security posture is moderate with HTTPS implied but no explicit security headers detected. The absence of privacy, cookie, and terms policies is a compliance gap. No vulnerability disclosure or incident response information is provided. WHOIS data is missing, which reduces trustworthiness and suggests the need for further verification of domain registration status. Overall, the website is professional and safe but would benefit from enhanced security practices, privacy compliance, and transparency regarding domain registration to improve trust and reduce risk.

Č

Česká resuscitační rada z. s.

resuscitace.cz

45

Česká resuscitační rada (ČRR) is a Czech multidisciplinary non-profit organization specializing in cardiopulmonary resuscitation and resuscitation medicine. Founded in 2010, it serves as the national partner of the European Resuscitation Council and organizes certified training courses such as ALS, EPALS, and GIC. The organization collaborates with other Czech medical societies to unify resuscitation practices and publishes official guidelines aligned with European standards. The website reflects a professional and authoritative presence targeting medical professionals and the general public interested in resuscitation education and certification. Technically, the website employs modern web technologies including Google Fonts, Google reCAPTCHA for form security, and Mapy.cz for mapping services. It uses HTTPS with good SSL configuration and includes cookie consent mechanisms compliant with GDPR. The site is mobile optimized with good navigation and content structure, although some accessibility features could be improved. Analytics are implemented via Google Analytics with consent-based loading. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and CAPTCHA usage but lacks explicit security headers and a dedicated security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the content. WHOIS data is unavailable, which reduces transparency but the professional nature of the site and its partnerships support its legitimacy. Overall, the website is a trustworthy and professional resource for resuscitation education in the Czech Republic. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility to further strengthen trust and compliance.

E

Exvalos spol. s r. o.

exvalos.cz

55

Exvalos spol. s r. o. is a Czech Republic based small manufacturing business specializing in the distribution and supply of industrial components such as bearings, hose clamps, linear technology, adhesives, lubricants, and related products. The company maintains partnerships with major industry brands including SKF, NSK, and Schaeffler, positioning itself as a reliable B2B supplier in the manufacturing sector. Their website reflects a professional and consistent brand image with a comprehensive product catalog and clear contact information. Technically, the website employs modern web technologies including Google Fonts, FontAwesome, and Google Analytics, with a responsive design optimized for mobile devices. While the site uses HTTPS and implements cookie consent mechanisms indicating GDPR compliance, it lacks some advanced security headers and explicit security policies, suggesting room for improvement in security posture. From a security perspective, the site shows good practices such as HTTPS enforcement and no visible exposure of sensitive data. However, the absence of WHOIS data raises concerns about domain registration legitimacy, which could impact trust. No critical vulnerabilities or malware indicators were found, but the site would benefit from enhanced security headers and a published vulnerability disclosure policy. Overall, the website is safe, professional, and well-structured, serving its target industrial audience effectively. Strategic recommendations include improving security headers, publishing detailed security and incident response policies, and verifying domain registration details to enhance trust and compliance.

B

BPA sport marketing a.s.

bpa.cz

45

BPA sport marketing a.s. is a well-established Czech marketing agency specializing in sports marketing, sponsorship, and advertising, particularly focused on ice hockey. Operating since 1993, the company holds exclusive marketing partnerships with major Czech hockey leagues such as the Tipsport extraliga and Maxa liga. Their services include marketing, media presentation, event realization, and online projects, targeting sports organizations, fans, and advertisers within the Czech Republic. The website reflects a professional and consistent brand image with clear business information and active engagement in sports marketing projects. Technically, the website employs modern web technologies including Google Fonts, Google reCAPTCHA, and Google Translate for multilingual support. It is built on the Webnia CMS platform and uses HTTPS with valid SSL certificates, ensuring secure communication. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR requirements. However, some security best practices such as security headers and explicit security policies are missing. From a security perspective, the site demonstrates a good posture with HTTPS enforcement and bot protection via reCAPTCHA. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness and suggesting the need for further domain registration verification. No critical vulnerabilities or malicious content were detected. Privacy policies and cookie management are implemented appropriately, supporting compliance with data protection regulations. Overall, BPA sport marketing a.s. presents a credible and professional online presence with solid business and technical foundations. To enhance trust and security, it is recommended to address the missing WHOIS transparency, implement security headers, and publish clear security and incident response policies.

M

MerkurXtip.CZ | Sázková Kancelář Online | Sportovní Výsledky a Kasino

merkurxtip.cz

66

MerkurXtip.cz is an online betting and casino platform targeting Czech-speaking users interested in sports betting and casino games. The website offers a variety of casino games and sports results, positioning itself as a regional player in the Czech Republic's online gambling market. The business model revolves around online gambling services, catering to a mature audience. Technically, the site uses modern web technologies including JavaScript frameworks (likely Vue.js), Google Tag Manager for analytics, and responsive design for mobile users. However, the site lacks visible security headers and privacy policies, which are critical for user trust and regulatory compliance. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trustworthiness but is common in the gambling industry. Overall, the site is functional and professional but could improve in security and privacy transparency.

V

Vodafone

sazkamobil.cz

65

Vodafone.cz is the official website for Vodafone's prepaid SIM service 'Oskarta' in the Czech Republic. The site offers prepaid SIM cards with customizable packages, initial credit, and rewards for top-ups and referrals. Vodafone is a major telecommunications provider with a strong market presence in the region. The website is professionally designed, mobile-optimized, and uses modern web technologies including jQuery, Omniture analytics, and Google reCAPTCHA for security. The site is secured with HTTPS and implements standard security headers, reflecting a good security posture. However, explicit privacy and cookie policies were not found in the provided content, which is a compliance gap. WHOIS data for the domain is unavailable, likely due to registry policies or privacy protection, but this does not detract from the site's legitimacy given Vodafone's brand recognition. Overall, the site is trustworthy and well-maintained, serving a broad consumer audience in the Czech Republic.

A

ambitas.org

ambitas.org

46

ambitas.org is a specialized technology company focused on delivering custom engineering, IoT, and vertical farming solutions. Their business model centers on B2B engagements, providing tailored hardware and software development from concept through completion. The website showcases multiple case studies and client testimonials, positioning the company as an innovative niche player in the vertical farming and IoT sectors. Technically, the site leverages modern frontend technologies such as React and FontAwesome Pro, with integration of Google Analytics and Tag Manager for user tracking. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is moderate; HTTPS is implied but no explicit security headers or vulnerability disclosures are present. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for small tech firms. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

V

Vereinigung Schweizerischer Assetmanagement- und Vermögensverwaltungsbanken (VAV - ABG)

vav-abg.ch

47

The Vereinigung Schweizerischer Assetmanagement- und Vermögensverwaltungsbanken (VAV - ABG) is a Swiss financial industry association representing asset management and wealth management banks. The website serves as an information and advocacy platform, providing publications, event information, and industry insights primarily in German with multilingual support. The organization positions itself as a key stakeholder in shaping regulatory and market conditions for Swiss financial institutions. Technically, the website employs modern web technologies including JavaScript libraries and Google Analytics for tracking, with a responsive design optimized for mobile devices. Security posture is solid with HTTPS enforced and email obfuscation implemented, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with a clear cookie consent mechanism and a comprehensive privacy policy. Overall, the website is professional, trustworthy, and well-aligned with its business purpose.

I

IAG

iagparts.com

57

The website www.iagparts.com serves as a multilingual country selection landing page for an automotive parts e-commerce platform, redirecting users to localized subdomains tailored for various European countries. The business model focuses on localized e-commerce shops targeting automotive parts customers in Central and Eastern Europe. The site content is minimal, primarily providing navigation to country-specific shops without direct business or contact information on the main domain. Technically, the site uses basic HTML, CSS, and JavaScript with a simple client-side language detection and redirect mechanism. There is no evidence of advanced frameworks, CMS, or analytics tools. The site disables caching via HTTP headers but lacks comprehensive security headers and privacy or cookie policies. Mobile optimization appears adequate given the responsive design elements. From a security perspective, the site lacks visible HTTPS confirmation in the provided data and does not implement common security headers beyond cache control. No forms or data collection mechanisms are present, reducing attack surface but also limiting user engagement. The absence of WHOIS data for the domain is a significant concern, as it impairs trust and transparency. No privacy, cookie, or terms of service policies were found, indicating poor compliance posture. Overall, the site presents a low-complexity e-commerce gateway with moderate technical implementation but weak security and privacy practices. The lack of registrant information and domain registration data reduces trustworthiness. Strategic improvements in security headers, privacy compliance, and transparency are recommended to enhance credibility and user trust.

P

Parco Avventura Lao

parcoavventuralao.com

64

Parco Avventura Lao is a small regional adventure park located in Santa Domenica Talao, Calabria, Italy, offering outdoor recreational activities and entertainment primarily targeting families and tourists. The website is built on the Italiaonline CMS platform, utilizing modern web technologies including JavaScript, Google Tag Manager, and Cookiebot for GDPR-compliant cookie management. The site is accessible, mobile-optimized, and provides essential business information including contact phone and physical address embedded in structured data. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are absent. WHOIS data is missing or unavailable, raising concerns about domain registration legitimacy, which should be further investigated. Overall, the website presents a professional and trustworthy front for a local hospitality business but would benefit from enhanced security policies and clearer domain registration transparency.

L

Nejlepší křížovkářský slovník online | Lustilek.cz

lustilek.cz

52

Lustilek.cz is a Czech language online crossword dictionary offering a comprehensive collection of over 150,000 hints and words for crossword puzzles, scrabble, and other word games. The website targets Czech-speaking puzzle enthusiasts and provides free access to its resources, monetized primarily through Google Adsense advertising. The site is relatively new, established in 2021, and positions itself as a niche resource within the Czech puzzle community. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript, with integrations of Google Analytics and Adsense for tracking and monetization. The site is hosted likely by Wedos, a Czech hosting provider, consistent with the domain registration data. Security posture is adequate with HTTPS enabled and secure form inputs, but lacks advanced security headers and formal privacy or terms of service documentation. Cookie consent is implemented, indicating some level of privacy compliance. Overall, the website is functional, well-structured, and provides relevant content for its audience.

M

Miroslav Macko

bagr-pardubice.cz

57

Miroslav Macko operates a small local business specializing in earthworks and excavation services primarily in the Pardubice, Chrudim, and Hradec Králové regions of the Czech Republic. The company offers services such as digging pits and trenches, soil relocation using specialized equipment like the JCB 3CX tractor excavator and Barford SX6000 dumper, foundation trenching, and minor crane work. The website reflects a focused service provider with a long history dating back to 1994, targeting local construction and property clients. Technically, the website is built on the Webnode CMS platform and leverages Amazon Cloudfront CDN for content delivery. It uses standard web technologies including HTML5, CSS3, and JavaScript, with integration of Facebook SDK and Google Tag Manager for social and analytics purposes. The site is mobile optimized and has good SEO practices but lacks some advanced accessibility features and security headers. From a security perspective, the site enforces HTTPS and implements a cookie consent banner with advanced user controls, indicating some attention to privacy compliance. However, the absence of a privacy policy, terms of service, and security headers reduces the overall security posture. No WHOIS data is available, which limits domain trust assessment and raises concerns about domain registration transparency. Overall, the website is functional and professional for a small local business but would benefit from enhanced security practices, formal privacy documentation, and improved domain registration transparency to strengthen trust and compliance.

The website cyrrus.cz is currently inaccessible due to a Cloudflare Turnstile security challenge that requires human verification before access. This prevents any meaningful content analysis or extraction of business, contact, or policy information. The domain is registered since 1998 with a Czech registrar, indicating a potentially established entity. However, the lack of accessible content and absence of visible contact or compliance information limits the ability to assess the business model, services, or security posture comprehensively. The technical infrastructure includes Cloudflare protection with Turnstile captcha, indicating a focus on mitigating automated threats but also restricting automated analysis. Overall, the site’s security posture is strong in terms of WAF protection, but the lack of accessible content and policies results in a low overall assessment score.

Energetická bilance a poradenství s.r.o. is a Czech energy consulting company specializing in new energy solutions and subsidy consulting with 18 years of experience. Their website targets municipalities, companies, and private homeowners, offering tailored energy advisory services. The company presents itself professionally with clear contact information and a consistent brand image. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, Google reCAPTCHA, and a cookie consent mechanism, indicating a moderate level of digital maturity. However, the absence of WHOIS data and security headers limits the ability to fully verify domain legitimacy and security posture. The site is accessible without WAF or blocking mechanisms, and content is safe and appropriate for general audiences.

C

Centre for Youth (C4Y)

antiragging.in

9

The website antiragging.in serves as the official national anti-ragging monitoring portal for India, operated by the Centre for Youth (C4Y) in association with the Ministry of Education and the University Grants Commission (UGC). It provides critical services such as anti-ragging undertaking registration, complaint filing and tracking, compliance submissions by educational institutions, and awareness materials to combat ragging in higher education. The portal is positioned as a government-supported non-profit platform targeting students, parents, and educational institutions nationwide. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, AOS animations, and other popular libraries, delivering a responsive and user-friendly experience. However, no CMS or backend platform is explicitly detected. Performance is moderate with good mobile optimization but basic accessibility and SEO features. Security posture is average; HTTPS is used but lacks visible security headers and advanced protections. Privacy and cookie policies are absent, representing compliance gaps. Overall, the site demonstrates a strong business credibility with official government backing and trust signals but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence. No adult or questionable content is present, making it safe for general audiences.

The website www.onlineshop.cz is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge, which prevents direct content access and analysis. No business information, metadata, or contact details are available on the page. The domain WHOIS query returned no registration data, indicating privacy protection or unregistered status, which further limits trust and legitimacy verification. Technically, the site uses Cloudflare's security services but no other detectable frameworks or CMS. The security posture cannot be fully assessed due to the blocking mechanism. Overall, the site appears to be protected by a strong WAF, but this also hinders transparency and analysis.

R

Remembership

remembership.cz

57

Remembership is a Czech-based design studio specializing in product design, UX, and customer experience services. The company targets business leaders such as CEOs, Heads of Product, and internal teams, offering tailored design and facilitation services to improve digital products and services. Their client portfolio includes notable companies in fintech, insurtech, and SaaS sectors, indicating a strong market position within the Czech technology industry. The website is professionally designed, mobile-optimized, and uses modern web technologies such as Webflow CMS and Splide.js for interactive elements. Security posture is good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and privacy/cookie policies suggests room for improvement. The lack of WHOIS data reduces domain trustworthiness, but the website content and client testimonials provide strong legitimacy signals. Overall, the site demonstrates a mature digital presence with minor compliance gaps.

Amalthea z. s. is a Czech non-profit organization dedicated to supporting families and children through social, educational, and therapeutic services primarily in the Pardubice region. The organization focuses on preventing child placement outside of families, supporting substitute families, and providing education to both professionals and the public. The website reflects a well-structured and content-rich platform targeting families, social workers, and educators. Technically, the site uses common web technologies including Google Analytics and jQuery, but some components like jQuery are outdated, and security headers are missing, indicating room for improvement in security posture. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, showing awareness of GDPR requirements. However, the absence of WHOIS data and lack of explicit contact information on the site slightly reduce trustworthiness. Overall, the site is professional and trustworthy but would benefit from enhanced security measures and clearer business contact details.

S

Salinger, z.s.

salinger.cz

46

Salinger, z.s. is a Czech non-profit organization dedicated to supporting families, children, and youth through various social programs since 1997. Their website presents a professional and consistent brand image, highlighting key activities such as substitute family care, youth support, and mental health assistance. The organization maintains partnerships with multiple reputable entities, enhancing its credibility and outreach. Technically, the website employs standard modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates Google Analytics and reCAPTCHA for analytics and security. The site is mobile-optimized with good navigation and content relevance, although some accessibility features could be improved. The absence of a CMS or hosting provider information limits deeper infrastructure insights. From a security perspective, the site uses HTTPS and includes reCAPTCHA on forms, but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. WHOIS data is unavailable, which slightly reduces trustworthiness but does not negate the legitimacy suggested by the website content and contact details. Overall, the website is well-structured and serves its non-profit mission effectively, but could benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

S

Slezská diakonie

slezskadiakonie.cz

50

Slezská diakonie is a well-established Czech non-profit organization dedicated to providing social services and support to individuals and communities in need. The website reflects a mature digital presence with comprehensive content about their services, volunteer opportunities, and donation projects. The organization maintains a strong market position in the social services sector with a large employee base and active community engagement. Technically, the site uses modern web technologies including Google Analytics 4 and retargeting scripts, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and published policies. The absence of WHOIS data is likely due to privacy protection, which is justified for this type of organization. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

The European Parliamentary Financial Services Forum (EPFSF) is a well-established non-profit organization founded in 2002, dedicated to facilitating effective dialogue between the financial industry and Members of the European Parliament. The website reflects a professional and consistent brand presence, targeting financial professionals and policymakers within the European Union. It offers key services such as educational seminars, workshops, and membership opportunities, supported by a broad network of financial industry members and observers. Technically, the website employs modern web technologies including Google Analytics and Tag Manager, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and published security policies. Overall, the site is trustworthy, compliant with GDPR, and free from suspicious or malicious content.

B

bété s.r.o.

bete-studio.cz

52

bété s.r.o. is a Czech design studio specializing in product and transport design, offering end-to-end project management from initial sketches to production and marketing. The company serves notable automotive clients such as BMW, Ford, Škoda Auto, and Kofola, positioning itself as a reputable player in the design and marketing consulting sector. The website reflects a professional business presence with clear service descriptions and contact information, though it lacks formal privacy and cookie policies. Technically, the site uses standard web technologies with moderate performance and good mobile optimization but lacks visible advanced security headers or compliance indicators. The absence of WHOIS data limits domain registration transparency, but the business credibility is supported by client references and professional presentation. Overall, the site is safe, business-focused, and trustworthy, though improvements in security posture and privacy compliance are recommended.

A

APASON

apason.cz

52

APASON is a Czech Republic-based group of companies specializing in construction, property management, real estate development, office space rental, and design and marketing services. The website presents a professional and business-focused image targeting clients seeking these services in the region. The technical infrastructure is modern with use of JavaScript libraries and responsive design, though some SEO and accessibility improvements are possible. Security posture is moderate with basic protections like email obfuscation but lacks visible security headers and published policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact details appear legitimate. Overall, the site is functional and professional but would benefit from enhanced security and compliance transparency.

M

Mgr. František Válek

frantisekvalek.cz

45

Mgr. František Válek operates a professional web design and digital marketing business based in the Olomouc region of the Czech Republic. The website showcases a comprehensive portfolio of services including custom WordPress website development, SEO optimization, PPC campaign management, graphic design, copywriting, and web hosting. The business targets small to medium enterprises and individual entrepreneurs seeking effective online presence and marketing solutions. The domain age and WHOIS data confirm a stable and consistent business presence since 2011. Technically, the website is built on a modern WordPress CMS platform using standard web technologies such as HTML5, CSS3, PHP, JavaScript, and jQuery. It is hosted by Webglobe and demonstrates good mobile responsiveness and SEO practices. However, there is room for improvement in security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. No critical vulnerabilities or malicious indicators were found. The absence of explicit security policies and incident response information suggests an opportunity to strengthen trust and preparedness. Overall, the website presents a secure and professional digital footprint suitable for its business scope. The overall risk is low with minor recommendations to improve privacy compliance and security best practices. Strategic enhancements in these areas will further solidify the company's credibility and user trust.

Adventure Centrum operates as an exclusive importer and retailer of portable 12V evaporative air coolers under the Transcool brand, targeting outdoor enthusiasts, caravan users, and eco-conscious consumers primarily in the Czech Republic and Slovakia. The company emphasizes eco-friendly, energy-efficient cooling solutions suitable for caravans, tents, offices, and vehicles. Their market position is strengthened by exclusive distribution rights and a focused product portfolio. The website reflects a small business with a clear niche and a professional online presence supported by social media channels and partner e-commerce platforms. Technically, the website is built on WordPress with Bootstrap and FontAwesome, leveraging Google Analytics and Tag Manager for user tracking. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Hosting and domain registration are consistent with the business location and history, with no blocking or WAF interference detected. Security posture is moderate with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and lack of privacy and cookie policies indicate compliance gaps and areas for improvement. No incident response or vulnerability disclosure mechanisms are present, which could be enhanced to improve trust and security readiness. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and security best practices to align with GDPR and modern security standards. Strategic enhancements in these areas will strengthen the company's digital maturity and customer trust.

T

TechnoArt

technoart.cz

57

TechnoArt is a Czech Republic-based manufacturing company specializing in custom atypical products made from ceramic tiles, glass panels, and technical stone. Their website presents a professional image with detailed descriptions of their product range and manufacturing technologies, targeting both B2B and B2C customers seeking bespoke solutions. The company emphasizes modern production techniques and personalized customer service. Technically, the website employs standard modern web technologies including Google Analytics and Facebook Pixel for tracking, with a cookie consent mechanism ensuring GDPR compliance. The site is well-structured, mobile-optimized, and secured with HTTPS, although it lacks some advanced security headers and explicit privacy and security policy pages. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is not uncommon for small manufacturing businesses. Overall, the website is professional, secure, and compliant with basic privacy regulations, supporting a positive business credibility profile.

J

Jakub Turský

jakubtursky.sk

49

Jakub Turský operates as a freelance front-end developer and Shoptet template coder based in Slovakia, with a specialized focus on the Apollo Shoptet template used by over 500 e-shops. The website serves as a professional portfolio showcasing his skills, services, and client references, targeting e-commerce businesses seeking customized front-end solutions. The business model is that of a small-scale freelancer with a niche market position supported by a strong partnership with Shoptet. Technically, the website employs modern front-end technologies including HTML5, CSS3, Sass, Bootstrap, JavaScript, and Vue.js, hosted on Exohosting servers. The site is well-optimized for mobile devices and demonstrates good performance and SEO practices. Security posture is solid with HTTPS enabled and secure form inputs, though it lacks some advanced security headers and formal security policies. Privacy compliance is limited due to the absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

D

Debant s.r.o.

vakantiesinkroatie.nl

49

VakantiesinKroatie.nl is a well-established online platform specializing in private accommodation listings across Croatia, primarily targeting European tourists seeking direct contact with property owners. The website offers extensive regional coverage, multi-language support, and a user-friendly search interface, positioning itself as a leading catalog in its niche. The business operates under Debant s.r.o., a Czech company with a history dating back to 2002, indicating a mature market presence. Technically, the site employs standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with integrations for Google Fonts, Analytics, and Adsense, reflecting a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

D

Debant s.r.o.

horvatorszagielszallasolas.hu

51

The website www.horvatorszagielszallasolas.hu operates as a comprehensive Croatian accommodation catalog primarily targeting Hungarian and Central European tourists. It offers a large database of private apartments, last minute deals, weather forecasts, maps, and video presentations, facilitating direct contact between travelers and property owners. The business is operated by Debant s.r.o., a Czech company established in 2002, indicating a mature and stable market presence. The platform enjoys a moderate to high market position within its niche, supported by partnerships and a multilingual approach.

The website ifortuna.cz is operated by FORTUNA GAME a.s., a Czech Republic based gambling company established in 2005. The site currently displays a geoblock page powered by Cloudflare, restricting access to users outside permitted regions. This limits the ability to analyze the full content and services offered. The company appears to provide online betting and gaming services targeting adult customers in the Czech Republic. The domain registration data is consistent with the business claims and shows a long operational history. Technically, the site uses Cloudflare for DNS and CDN services, providing good SSL configuration and basic security. However, no privacy, cookie, or terms of service policies are accessible, and no contact or incident response information is found on the geoblock page. Overall, the site’s security posture is moderate due to HTTPS and Cloudflare protection, but privacy compliance and content quality cannot be verified due to access restrictions.

M

markohoza

markohoza.com

57

Markohoza.com is a Slovak-based web development service provider specializing in WordPress and e-commerce solutions. The website serves as a professional portfolio showcasing multiple client projects primarily in Slovakia, targeting businesses seeking custom web and e-commerce development. The business appears to be a small, specialized entity founded around 2018, with a consistent brand presence and a clear focus on technology services. Technically, the site is built on WordPress with modern web technologies including WooCommerce, Stripe, and various JavaScript libraries. Hosting is provided by a Slovak hosting provider, Websupport, with HTTPS enabled and domain transfer protections in place. However, DNSSEC is not enabled, and security headers are missing, indicating room for security improvements. Privacy and cookie policies are absent, representing compliance gaps under GDPR. Contact information is limited to an email address, with no phone or physical address provided. Overall, the site is professional and functional but would benefit from enhanced privacy compliance and security hardening.

F

Farmi

farmi.com

70

Farmi is a French e-commerce platform specializing in agricultural products and services, catering primarily to farmers and agricultural professionals. The website presents a professional and well-structured online marketplace, offering a range of products and services tailored to the agricultural sector. The platform leverages modern web technologies such as Vue.js and Nuxt.js, ensuring a responsive and user-friendly experience across devices. Privacy and cookie policies are clearly stated and comply with GDPR requirements, enhancing user trust. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which impacts overall business credibility. Security measures such as HTTPS and security headers are properly implemented, but the lack of a published security policy and incident response information suggests room for improvement in transparency and preparedness. Overall, Farmi demonstrates a solid digital presence with good technical foundations but should address domain registration transparency and enhance security communication to strengthen trust and compliance.

The website webarchitect.cz is currently a parked domain with minimal content indicating it may be for sale. There is no active business presence or description of services. The domain is expired and uses parkingcrew.net nameservers, which is typical for domains not actively maintained. The site contains advertising scripts and tracking pixels but lacks any privacy, cookie, or terms of service policies. No contact information or social media links are provided, limiting trust and credibility. Technically, the site uses basic HTML, CSS, and JavaScript but lacks HTTPS and security headers, exposing it to potential security risks. Overall, the site is not suitable for business or user engagement in its current state.

W

WEBNIA s.r.o.

webnia.cz

60

WEBNIA s.r.o. is a Czech-based technology service provider specializing in custom web development, e-commerce solutions, graphic design, and printing services. The company positions itself as a quality-focused partner for businesses seeking tailored digital solutions, emphasizing functionality, design, and client collaboration. Their market presence is supported by a diverse portfolio of clients and positive Google reviews, indicating a strong regional reputation. Technically, the website employs modern web technologies including Google Fonts, FontAwesome, Google Maps API, and multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Smartlook. The site is well-optimized for mobile devices, features clear navigation, and includes comprehensive cookie consent mechanisms, reflecting a mature digital infrastructure. From a security perspective, the site uses HTTPS and implements cookie consent with granular controls. However, no explicit HTTP security headers were detected, and there is no published security policy or incident response information. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and business presentation are professional and trustworthy. Overall, the website demonstrates a high level of professionalism and digital maturity, with moderate security posture and good privacy compliance. The main risk lies in the lack of WHOIS transparency and missing security headers, which should be addressed to enhance trust and security.

P

Pivovar Cvikov

pivoonline.cz

41

The website pivoonline.cz serves as an age verification landing page for an e-commerce platform selling brewery products under the brand Pivovar Cvikov. The site is minimalistic with limited content, primarily focused on confirming the visitor is 18 years or older before entering the main e-shop. The lack of metadata, privacy policies, contact information, and WHOIS data limits the ability to fully assess the business's legitimacy and compliance posture. Technically, the site uses basic HTML and CSS without detectable modern frameworks or analytics tools, indicating a low digital maturity level. Security posture is weak due to missing security headers and unknown SSL configuration. Overall, the site presents a low trust profile with significant gaps in compliance and transparency.

D

DEVINBAND

devin.band

61

DEVINBAND is a collective of independent communication and technology companies specializing in marketing, advertising, consulting, and software development. The group operates globally with a footprint in 36 countries and employs over 120 professionals. Their portfolio includes award-winning agencies and innovative SaaS products, positioning them as a significant player in the marketing technology sector. The website reflects a professional and consistent brand image, highlighting their integrated approach to strategy, creativity, consulting, and technology innovation. Technically, the website employs modern web technologies including Google Analytics for tracking and Photoswipe for image galleries. The site is mobile-optimized and demonstrates good SEO practices. However, some technical improvements such as enhanced security headers and a visible privacy policy could strengthen their digital maturity. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating awareness of privacy compliance. The absence of visible security headers and lack of explicit privacy and terms of service pages are areas for improvement. WHOIS data is privacy protected, which is reasonable for this business type but limits transparency. Overall, DEVINBAND presents a trustworthy and professional online presence with moderate technical and security posture. Strategic enhancements in privacy disclosures and security configurations are recommended to elevate compliance and trustworthiness.

G

GTO Solutions s.r.o.

motorsportzive.cz

50

MotorsportZive.cz is a Czech-language online media portal specializing in motorsport news, including Formula 1, MotoGP, rally, and other racing events. It provides timely updates, live streaming information, betting office reviews, and event calendars, targeting motorsport enthusiasts and the betting community primarily in the Czech Republic and Central Europe. The site is operated by GTO Solutions s.r.o., a company with a portfolio of related sports and betting websites, indicating a focused business model leveraging affiliate marketing partnerships with betting operators. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Google Analytics, with a responsive design optimized for mobile users. The site uses HTTPS and has implemented cookie consent mechanisms, reflecting good privacy compliance practices. However, no explicit security or incident response policies are published, and WHOIS data for the domain is unavailable, which slightly reduces trustworthiness from a domain registration perspective. Overall, the website presents a professional and content-rich experience with moderate technical and security maturity.

I

Institut pro regulaci hazardních her z.s.

zodpovednehrani.cz

53

The website www.zodpovednehrani.cz represents the Institut pro regulaci hazardních her z.s., a Czech non-profit organization dedicated to promoting responsible gambling through education, support services, and regulatory advocacy. The site offers resources such as a 24/7 helpline, information on gaming limits, exclusion registries, and educational videos and podcasts targeting gambling players, their families, and legal operators. The organization positions itself as a key national resource in the Czech Republic for gambling-related social support and prevention. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and responsive design elements to ensure accessibility and user engagement. The site is well-structured with clear navigation and a professional design, optimized for mobile devices. Privacy compliance is robust, featuring a comprehensive privacy policy and a cookie consent mechanism aligned with GDPR requirements. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks visible security headers such as Content-Security-Policy or X-Frame-Options, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness, warranting further investigation. Overall, the website demonstrates a solid commitment to content quality, privacy, and user support, but improvements in domain transparency and security header implementation would strengthen its security posture and trust profile.

P

Prošikulky.cz

prosikulky.cz

45

Prošikulky.cz is a Czech-based small business specializing in sewing, knitting, and crocheting tutorials combined with e-commerce sales of original sewing patterns primarily for children's and women's clothing. The website is well-established since 2014 and maintains a strong presence on multiple social media platforms, enhancing its reach within the crafting community. The business model integrates content marketing with direct digital product sales, targeting hobbyists and sewing enthusiasts in the Czech Republic and Slovakia. Technically, the website employs modern web technologies including Google Tag Manager, Facebook Pixel, and cookie consent management, hosted by Active24. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and a published security policy or incident response contacts. Overall, the site is trustworthy, safe, and compliant with basic privacy regulations, though it could improve transparency by publishing a privacy policy and security documentation.

I

Slovník cizích slov online infoz.cz

infoz.cz

44

The website infoz.cz operates as an online Czech dictionary specializing in foreign words and some less common Czech terms. It provides users with search capabilities, browsing by letters, and categorization by subject areas, targeting Czech-speaking individuals seeking word meanings. The business model appears to be free access supported by advertising and partner links, positioning it as a niche educational resource within the Czech market. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates Google services such as Analytics, Tag Manager, and Adsense. The site is mobile optimized with good SEO practices but lacks advanced accessibility features. Security posture is moderate with HTTPS enforced and cookie consent implemented; however, it lacks security headers and explicit incident response or security policies. WHOIS data is unavailable, which reduces trustworthiness and raises concerns about domain registration transparency. Overall, the site is functional and serves its educational purpose but would benefit from improved security practices and clearer business information.

V

Vladimír Večeřa

vladimir-vecera.cz

47

Vladimír Večeřa operates as a freelance web developer specializing in custom website creation and related IT services since 2002, primarily serving clients in the Zlín and Luhačovice regions. The business offers a range of services including project planning, graphic design coordination, dropshipping e-shops, meteorological stations, and web camera setups. The website demonstrates a solid technical foundation using PHP, mySQL, Bootstrap, and custom CMS solutions, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and secure form validation, though improvements are recommended in security headers and cookie consent mechanisms. The absence of WHOIS data reduces transparency but is partially offset by visible business registration and active social media presence. Overall, the website is professional, trustworthy, and well-suited for its target audience.

S

SIESTA SOLUTION s.r.o.

siestasolution.com

68

Siesta Labs is a Czech Republic-based innovation lab and startup studio founded in 2020, specializing in software development and startup incubation services. Their offerings include AI, web and mobile applications, system architecture, and business consulting. The company targets businesses and startups seeking expert digital product engineering and growth support. The website reflects a professional and consistent brand with clear navigation and relevant content for their audience. Technically, the site uses modern web technologies including Bootstrap, jQuery, and integrates multiple analytics and tracking tools such as Google Analytics, Microsoft Application Insights, and Facebook Pixel. Hosting appears to be managed via Vas-hosting, with domain registration consistent with company history. Security posture is adequate with HTTPS enforced but lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. No explicit security or incident response policies are published, representing an area for improvement. Overall, the website is trustworthy, well-maintained, and serves its business purpose effectively.