Security Directory

Z

Z-WARE s.r.o.

nasejidelna.cz

44

The website nasejidelna.cz represents the iCanteen system, a specialized internet-based food ordering platform primarily serving canteens in the Czech Republic. Developed and maintained by Z-WARE s.r.o., the platform offers comprehensive features such as online meal ordering, account management, notifications, and integration with existing canteen systems. The business targets institutional clients like canteens and their customers, positioning itself as a niche technology provider with a long-standing presence since 2003. Technically, the website employs a Java-based backend with modern front-end technologies including HTML5, CSS3, and JavaScript. The site is moderately optimized for mobile devices and provides a good user experience with clear navigation and relevant content. However, some technical improvements are recommended, such as adding security headers and enhancing SEO and accessibility features. From a security perspective, the site uses HTTPS and employs secure password hashing (BCrypt), but lacks visible security headers and formal security policies. No privacy or cookie policies are published, which is a compliance gap under GDPR. No incident response or vulnerability disclosure information is available, limiting transparency. Overall, the website is legitimate, professionally presented, and serves a clear business purpose. To improve trust and compliance, it should publish privacy and cookie policies, implement security headers, and provide vulnerability disclosure information. These steps will enhance security posture and regulatory compliance, supporting continued business growth and customer trust.

M

Mattoni 1873 a.s.

kmv.cz

54

Mattoni 1873 a.s. is a well-established beverage manufacturer based in the Czech Republic, specializing in premium natural mineral waters and a broad portfolio of internationally recognized beverage brands. Founded in 1873, the company has grown into a market leader in Central Europe, emphasizing sustainability and quality in its operations. The website reflects a professional corporate presence with comprehensive information about the company, its brands, and sustainability initiatives. Technically, the site employs modern web technologies including Google Analytics and Tag Manager, with good mobile optimization and user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. The absence of WHOIS data reduces transparency but does not detract significantly from the site's credibility given the professional content and trust signals. Overall, the site is a reliable digital representation of a mature, large-scale manufacturing business.

V

Vysoká škola uměleckoprůmyslová v Praze

umprum.cz

65

Vysoká škola uměleckoprůmyslová v Praze (UMPRUM) is a reputable educational institution specializing in art and design education. The website serves students, prospective students, alumni, and the general public interested in cultural events and exhibitions. It offers detailed information about departments, study programs, events, and an online learning platform. The institution holds a strong market position in the Czech Republic's education sector, focusing on creative disciplines. Technically, the website is built with modern web standards including HTML5, CSS3, JavaScript, and Bootstrap framework. It uses Matomo for analytics and provides a responsive design optimized for mobile devices. The site is served over HTTPS, ensuring secure communication. However, some security headers are missing, and cookie consent mechanisms are not explicitly implemented, indicating room for improvement in privacy compliance. From a security perspective, the site demonstrates good practices such as secure forms and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data due to privacy protection is typical for such institutions and does not raise immediate concerns. The website lacks explicit incident response or security policy disclosures, which could be enhanced to improve trust and compliance. Overall, UMPRUM's website is professional, content-rich, and trustworthy, with minor gaps in privacy and security policy transparency. Strategic recommendations include implementing comprehensive security headers, explicit cookie consent, and publishing terms of service and security policies to strengthen compliance and user trust.

Z

Zámek Loučeň

zamekloucen.cz

51

Zámek Loučeň is a well-established cultural and hospitality business operating a historic baroque castle in the Czech Republic. It offers a variety of services including guided tours, accommodation in castle apartments and a hotel, gastronomy, event hosting such as weddings and corporate events, and an e-commerce platform for gift vouchers. The website positions itself as the 4th most visited castle in the country, targeting families, children, and adults with a strong focus on tourism and cultural heritage. Technically, the website uses modern web technologies including Google Tag Manager, Facebook Pixel, and a CMS likely based on the Nette framework. It is mobile-optimized, accessible, and SEO-friendly with structured data enhancing search visibility. Security posture is good with HTTPS enforced and no visible critical vulnerabilities, though some security headers could be improved. Privacy compliance is basic with a privacy policy and cookie consent mechanism present, but no explicit security or incident response policies. Overall, the website is professional, trustworthy, and provides a positive user experience with clear contact information and social media integration.

A

ALUKOV a.s.

alukov.cz

70

ALUKOV a.s. is a well-established Czech manufacturer specializing in custom aluminum enclosures for pools, whirlpools, terraces, and solar roofing solutions. With over 30 years of experience and a presence in more than 40 countries, the company emphasizes modern design, safety, and quality. Their business model focuses on bespoke manufacturing, direct customer engagement, and comprehensive after-sales service including warranty and maintenance. The website demonstrates a mature digital infrastructure with modern technologies such as Google Tag Manager, Google Analytics, and reCAPTCHA for form security. Privacy and cookie policies are robust and GDPR compliant, reflecting a strong commitment to user data protection. Security posture is good with HTTPS enforced and consent mechanisms in place, though explicit security headers and incident response information are absent. Overall, the site is professional, user-friendly, and trustworthy, supporting ALUKOV's market position as a leading manufacturer in their sector.

M

Město Špindlerův Mlýn

mestospindleruvmlyn.cz

52

Město Špindlerův Mlýn operates an official municipal tourism website focused on promoting the mountain town in the Krkonoše region. The site provides comprehensive information about local events, activities such as skiing, hiking, and cycling, as well as accommodation and gastronomy options. It targets tourists and visitors seeking outdoor and family-friendly experiences. The business model centers on tourism promotion and community engagement, positioning itself as a regional hub for visitors. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates analytics and marketing tools such as Google Analytics 4, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized with good SEO practices and a user-friendly design. However, the CMS is custom or unknown, and performance is moderate. From a security perspective, the site enforces HTTPS, uses consent management for cookies, and includes CSRF protection on forms. While no critical vulnerabilities were detected, the absence of security headers and incident response information suggests room for improvement. Privacy compliance is strong with GDPR policies and cookie consent mechanisms in place. Overall, the website is professional, trustworthy, and well-suited for its purpose. The lack of WHOIS data is a concern for domain legitimacy verification but does not detract from the site's operational quality. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information.

Z

Základní škola Komenského, Trutnov

zskomtu.cz

49

Základní škola Komenského, Trutnov operates as a local primary educational institution serving students and the community in the Czech Republic. The website provides comprehensive information about the school's educational offerings, extracurricular activities, and community engagement, targeting parents, students, and local residents. The site integrates with external platforms such as EduPage for school management and sports reservation systems, reflecting a moderate level of digital maturity. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and the Nette Framework, with responsive design and accessibility considerations. The presence of cookie consent mechanisms and GDPR-compliant privacy policies indicates a strong commitment to privacy and regulatory compliance. However, the absence of WHOIS data and some security headers suggests areas for improvement in transparency and security hardening. Security posture is generally good with HTTPS enforced and secure form validation, but the lack of explicit security headers and incident response contact details limits the overall security maturity. No vulnerabilities or malicious content were detected. The website is safe for general audiences and does not contain adult or questionable content. Overall, the website is professional, trustworthy, and well-maintained, though the missing WHOIS data and some security best practices should be addressed to enhance credibility and security assurance.

The website at cdn-zeptoapps.com is currently inaccessible, serving a 403 Forbidden error page indicating restricted access likely enforced by Cloudflare security mechanisms. The domain is relatively new, registered in October 2022 via GoDaddy, and uses Cloudflare DNS servers without DNSSEC enabled. There is no visible business content, contact information, or privacy and cookie policies, which limits the ability to assess the business or compliance posture. The technical infrastructure appears minimal, with basic HTML and CSS and no detected analytics or tracking scripts. Security posture is weak due to missing security headers and lack of DNSSEC, although HTTPS is presumably enabled given Cloudflare usage. Overall, the site appears to be a CDN or resource domain rather than a customer-facing business website.

M

Mathesio

mathesio.cz

51

Mathesio is a Czech technology company specializing in creative IT solutions including web applications, technological solutions, business process optimization, and design. With a team of 15 developers, they serve government ministries, corporate clients, and startups. Their website reflects a professional and consistent brand image, with content primarily in Czech and an English alternate domain available. The company has been operating since 2013, which aligns with the domain registration date, indicating a stable business presence. Technically, the website is built on WordPress and leverages a broad technology stack including JavaScript frameworks (React, AngularJS), PHP frameworks (Nette, CodeIgniter), Java technologies (Spring, Hibernate), and others. The site is mobile optimized and uses modern web standards, though performance is moderate. Analytics and tracking are implemented via Google Analytics and Facebook Pixel, but no cookie consent mechanism is present. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and published security policies. No forms or sensitive data collection points were detected on the homepage. Privacy and cookie policies are missing, which is a compliance gap especially for GDPR. Contact information is minimal, limited to a Facebook page link, reducing direct communication channels. Overall, Mathesio presents as a credible small technology firm with a solid technical foundation but with room for improvement in privacy compliance, security best practices, and transparency of contact and policy information.

L

LogiNet

loginet.hu

60

LogiNet is a Hungarian technology company specializing in e-commerce systems, webshop development, mobile application creation, and custom software development. Positioned as a professional service provider, LogiNet targets businesses requiring tailored e-commerce and digital solutions. The website reflects a mature digital presence with good SEO practices, mobile optimization, and integration of modern marketing and analytics tools such as Google Tag Manager, Hotjar, and Cookiebot for consent management. Security-wise, the site enforces HTTPS and employs reCAPTCHA to mitigate bot traffic, though explicit security headers and policies are not prominently published. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the site demonstrates a solid technical and business foundation with room for enhanced security transparency and contact information clarity.

Jihočeská centrála cestovního ruchu is a government-affiliated regional tourism organization responsible for coordinating and promoting tourism in the South Bohemian region of the Czech Republic. Established in 2003, it serves as the destination management organization, supporting both domestic and inbound tourism through project management, statistical analysis, and marketing activities. The website reflects a professional and consistent brand presence targeting tourists and regional stakeholders. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and jQuery, with integration of Facebook Pixel for marketing analytics. The site is hosted by Active24, a reputable provider, and demonstrates good mobile optimization and SEO practices. However, no CMS or advanced frameworks are explicitly detected. From a security perspective, the site uses HTTPS with excellent SSL configuration and no visible vulnerabilities or exposed sensitive data. Security headers are not explicitly detected, and there is no published security policy or incident response information. Privacy compliance is partially addressed with a GDPR policy page but lacks a cookie consent mechanism. User tracking is moderate due to Facebook Pixel usage. Overall, the website is trustworthy, well-maintained, and aligned with its government role. Strategic improvements include implementing cookie consent, enhancing security headers, publishing security policies, and improving accessibility to strengthen compliance and user trust.

E

Ecn Studio s.r.o

ecnstudio.cz

46

Ecn Studio s.r.o is a Czech technology company specializing in web design, web hosting, and online tools primarily serving nonprofit organizations and other clients requiring complex web solutions. The company has a legacy dating back to the early 1990s under the Econnect brand and continues to operate with a focus on quality and custom development. Their services include web hosting, web design, account services, network support, and a suite of online tools such as webmail, cloud storage, and a proprietary CMS called ActionApps Toolkit. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site uses modern JavaScript libraries like Swiper and LightGallery, and privacy-conscious analytics via Matomo with cookies disabled. The domain is registered with REG-WEDOS since 2017, consistent with the business history and location in the Czech Republic.

L

Lesy České republiky, s.p.

vracimevodulesu.cz

68

The website 'Vracíme vodu lesu' represents a large-scale governmental forestry and environmental conservation program managed by Lesy České republiky, s.p. It focuses on water retention and revitalization of small watercourses across the Czech Republic, positioning itself as the largest program in the history of Czech forestry. The site targets the general public and stakeholders interested in environmental sustainability and forestry management. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integrations such as Cookiebot for cookie consent, Google Analytics, and Facebook Pixel for analytics and marketing. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with visible cookie consent and a comprehensive privacy policy. Overall, the website demonstrates a mature digital presence with a strong focus on compliance and user trust.

L

Lesy České republiky, s.p.

sazimelesynovegenerace.cz

59

The website 'Sázíme lesy nové generace' represents Lesy České republiky, a government-affiliated forestry management entity in the Czech Republic. It focuses on sustainable forest management, watercourse restoration, and public engagement through educational events such as 'Den lesů nové generace'. The site targets the general public interested in environmental conservation and sustainable wood use. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, and Cookiebot for consent management, ensuring GDPR compliance. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, but the website's branding and social media presence support its legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

The website kubanek.eu represents a small Czech business specializing in the development of B2B and B2C e-commerce platforms, web applications, and corporate intranets with integration to popular Czech ERP systems such as Pohoda, Vario, and Qi. The business offers tailored solutions including online dashboards, reports, and exports to XLS and PDF formats, addressing gaps in standard enterprise information systems. The site content is professional and targeted at businesses requiring custom software integration and e-commerce solutions within the Czech market. Technically, the website is built with basic HTML5 and CSS3, using the Roboto font. There is no evidence of advanced frameworks, CMS, or analytics tools. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No forms or data collection mechanisms are present, indicating minimal user interaction beyond informational content. From a security perspective, the site lacks visible HTTPS confirmation and security headers, which lowers its security posture. No privacy, cookie, or terms of service policies are present, indicating compliance gaps with GDPR and related regulations. The WHOIS data is fully privacy protected by EURid, which is common for .eu domains, and no suspicious patterns were detected. Contact information is limited to a professional email address and company identifiers, supporting legitimacy but limiting direct contact options. Overall, the website is a legitimate small business site with good content quality and business credibility but requires improvements in security, privacy compliance, and technical modernization to enhance trust and protect user data.

H

HUMLNET CREATIVE s.r.o.

hucr.cz

43

HUMLNET CREATIVE s.r.o. is a Czech Republic-based small web development agency specializing in creating custom, modern, and professional websites tailored to client needs. Their market position is that of a regional service provider with a portfolio of local clients including schools, companies, and organizations. The company emphasizes a collaborative and tailored approach to web design and development, offering multilingual and responsive websites. Technically, the website is built on a modern stack including Bootstrap, jQuery, and OctoberCMS, with integration of Facebook SDK and Google Analytics for marketing and analytics purposes. The site is mobile-optimized and features a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and secure form handling, though additional security headers could improve defenses. The absence of WHOIS data reduces transparency but the website content and business information appear legitimate and professional. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, with moderate security maturity.

BYD Trutnov, operated by Autostyl a.s., is an authorized dealership and service center specializing in electric vehicles and plug-in hybrids from the BYD brand. Positioned as the first BYD representative in the Trutnov region of the Czech Republic, the company focuses on delivering modern, eco-friendly mobility solutions to local consumers. The website reflects a professional business presence with clear branding, comprehensive product offerings, and accessible customer contact points. Technically, the website is built on a modern stack including October CMS, Bootstrap, and JavaScript libraries such as Swiper.js and jQuery. It is mobile-optimized and includes SEO best practices like meta tags and Open Graph data. Google Tag Manager is used for analytics and tracking, with a cookie consent mechanism that aligns with GDPR requirements. From a security perspective, the site enforces HTTPS and implements cookie consent controls, but lacks visible security headers which could enhance protection against common web threats. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data raises concerns about domain legitimacy and should be investigated further. Overall, the website presents a trustworthy and professional front for the business, but improvements in security headers and domain registration transparency are recommended to strengthen trust and compliance.

T

Tourist Board Špindlerův Mlýn, z.s.

touristboard.cz

49

Tourist Board Špindlerův Mlýn, z.s. is a non-profit destination management organization dedicated to promoting tourism in the Špindlerův Mlýn area and the broader Krkonoše region. Supported by the city and key tourism operators, it focuses on marketing, tourism projects, and event organization to enhance the visitor experience and regional development. The website is professionally designed, mobile-optimized, and provides clear information about the organization's mission and activities, targeting tourists and local stakeholders.

4

42 São Paulo

42bh.org.br

62

42 São Paulo is an innovative educational institution focused on providing free software engineering education to a diverse audience. The website presents a professional and modern design, emphasizing accessibility and inclusivity in its educational offerings. The business model centers on offering high-quality, tuition-free programming courses aimed at forming the next generation of software engineers. The institution positions itself as a leader in innovative software engineering education within Brazil.

A

Ajurvédská Univerzita Praha

ayurveda-online.net

47

Ayurveda-online.net is a small, niche educational website sponsored by the Ajurvédská Univerzita Praha, providing free access to classical Ayurvedic and spiritual literature. The site targets students, researchers, and practitioners interested in Ayurveda and related disciplines. It operates as a non-commercial resource with a focus on educational content rather than commercial services. Technically, the website is simple, built with static HTML and CSS, and hosted on a registrar-associated infrastructure with DNS servers in the Czech Republic. The site is mobile responsive but lacks advanced technical features or CMS integration. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. No privacy or cookie policies are present, and no contact information or forms are provided, limiting user engagement and compliance maturity. Overall, the site is trustworthy for its educational purpose but could improve in security and privacy compliance.

R

Roklen Corporate Finance

roklencf.cz

52

Roklen Corporate Finance is a specialized corporate finance advisory firm based in the Czech Republic, focusing on M&A advisory, company valuation, and capital market operations. The company positions itself as a leading specialist in the Czech market with a strong team of experienced professionals and a solid track record of completed projects. Their services include transaction advisory, financing support, and special capital market operations such as takeover bids and auctions. The website reflects a professional and well-structured digital presence with detailed team profiles and client references, supporting their market credibility. Technically, the website uses modern web technologies including HTML5, CSS3, and jQuery, with good mobile optimization and accessibility features. The site is served over HTTPS with secure forms and a cookie consent mechanism, indicating compliance with GDPR requirements. However, there is room for improvement in security headers and publishing explicit security policies or incident response information. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. The lack of WHOIS data due to privacy protection is common for such businesses and does not detract from legitimacy. Overall, the site is trustworthy, professional, and compliant with relevant privacy regulations. Strategically, Roklen Corporate Finance should enhance its security posture by implementing recommended HTTP security headers and publishing a vulnerability disclosure or security.txt file to further build trust. Maintaining GDPR compliance and transparent privacy policies will support ongoing regulatory adherence and client confidence.

N

Nadace ČEZ

nadacecez.cz

62

Nadace ČEZ is a well-established non-profit foundation affiliated with the ČEZ Group, focusing on supporting social, environmental, and community projects across the Czech Republic. The foundation operates various grant programs, including regional support, sports infrastructure, environmental initiatives like tree planting, and employee-driven grants. The website reflects a professional and consistent brand image with comprehensive content and clear navigation, targeting non-profit organizations, regional communities, and the general public interested in social good. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager for analytics, and Cookiebot for consent management. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are missing. The WHOIS data is unavailable, which slightly reduces trustworthiness; however, the website's structured data, social media presence, and content quality support its legitimacy. No critical vulnerabilities or adult content were detected. Overall, the site demonstrates a mature digital presence suitable for its non-profit mission. Recommendations include enhancing security headers, publishing explicit security and incident response policies, and verifying domain registration details to improve trust and compliance.

E

ECN Studio

ecn.cz

48

ECN Studio operates a professional web presence focused on web design, web hosting, and technical support services primarily targeting Czech businesses and users. The company has a long-standing domain registration dating back to 1995, indicating established market presence. The website offers multiple online tools such as webmail, cloud storage, and toolkits, enhancing its service portfolio. The site is well structured with clear navigation and consistent branding, though it lacks formal privacy and cookie policies. Technically, the website uses modern HTML5, CSS3, and JavaScript with responsive design elements, providing a good user experience across devices. However, there is no evidence of advanced frameworks or CMS usage, and performance is moderate. Security posture is adequate with HTTPS implied but lacks explicit security headers and incident response information. No forms or user data collection mechanisms are present on the main page, reducing immediate data protection concerns. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data but would benefit from implementing security headers, publishing privacy and cookie policies, and providing vulnerability disclosure channels. The WHOIS data confirms domain legitimacy and consistency with the business claims, enhancing trustworthiness. Overall, the website is safe, professional, and suitable for general audiences with no adult or questionable content. Strategic recommendations include enhancing privacy compliance, improving security headers, and adding incident response information to strengthen trust and regulatory adherence. The site’s technical and business foundations are solid but could be modernized further for improved performance and security.

S

Svazek obcí Východní Krkonoše

vychodnikrkonose.cz

49

Svazek obcí Východní Krkonoše is a regional association of municipalities in the Eastern Krkonoše area of the Czech Republic, focused on regional development, tourism, and community support. The organization provides services such as meeting room rentals, coworking spaces, and event equipment, and manages multiple projects aimed at enhancing tourism and sustainable regional growth. The website reflects a well-established entity with a domain age since 2004, consistent with its operational history. Technically, the website employs modern web standards including HTML5, CSS3, Bootstrap for responsive design, and Font Awesome for icons. It is hosted by Active24, a known Czech hosting provider, and uses HTTPS with good performance optimizations such as Google PageSpeed. The site is mobile-friendly and has good SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS and implements a cookie consent banner compliant with GDPR. However, no explicit security headers or incident response policies are found, and no vulnerability disclosure or security.txt files are present. No critical vulnerabilities or exposed sensitive data were detected in the content analyzed. Overall, the website is professional, trustworthy, and suitable for its target audience of local municipalities and regional stakeholders. Strategic improvements in security headers and explicit security policies would enhance its security posture and compliance.

G

Giant interactive s.r.o.

giant.cz

54

Giant interactive s.r.o. is a Czech digital agency specializing in e-commerce, web, and mobile application development with over 17 years of experience. The company positions itself as a market leader providing comprehensive digital solutions including strategy, web presence, e-commerce platforms, mobile apps, and online marketing services. Their client portfolio includes notable companies and they have received multiple industry awards, indicating strong market presence and credibility. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, React JS, and integrates Google Tag Manager for analytics. The site is well-optimized for mobile devices and offers a professional user experience with clear navigation and multimedia content. Cookie consent mechanisms are implemented, reflecting awareness of privacy regulations. From a security perspective, the site uses HTTPS with good SSL configuration and secure forms with anti-spam features. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no published privacy policy or incident response information is found, which are areas for improvement. Overall, the website is professional and trustworthy, but the absence of WHOIS data and privacy policy reduces the confidence level. It is recommended to verify domain registration details and publish comprehensive privacy and security policies to enhance trust and compliance.

The website id.mysuitu.com is a login portal for the Suitu Identity service, which appears to be an authentication or identity management platform. The site is minimalistic, providing a basic login form with username and password fields, a 'remember me' checkbox, and a CSRF token for security. The lack of additional content, such as privacy policies or contact information, limits the ability to fully assess the business or its market position. Technically, the site uses standard HTML5 and CSS3 with Google Fonts for styling but lacks advanced frameworks or CMS indications. Security-wise, the presence of a CSRF token is positive; however, no security headers or HTTPS status information is available, and no privacy or cookie policies are present, indicating room for improvement in compliance and security posture. The WHOIS lookup for the subdomain failed, which is expected as subdomains are not separately registered, but no WHOIS data for the main domain was provided, limiting trust assessment. Overall, the site is functional but basic, with moderate trustworthiness and a need for enhanced security and compliance features.

M

Metropolitní kapitula u sv. Víta

katedrala.tv

47

Katedrála TV is an official streaming media platform operated by Metropolitní kapitula u sv. Víta, providing live and archived religious services primarily related to St. Vitus Cathedral in Prague. The website serves a general audience interested in religious content, offering scheduled programming and video archives. The business operates as a small non-profit entity within the media and government/non-profit sectors, with a clear focus on religious broadcasting. Technically, the website employs modern web technologies including Google Fonts, Google Analytics with consent, Cookiebot for cookie management, and Cloudflare for DNS and CDN services. The site is mobile optimized with good navigation and SEO practices, though it lacks a detected CMS and some advanced accessibility features. Performance is moderate, supported by CDN usage. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, it lacks DNSSEC, security headers, and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business identity, enhancing trustworthiness. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could improve security posture by enabling DNSSEC, adding security headers, and publishing security policies. Contact information is minimal on the site, which could be enhanced for better user support and trust.

S

SYLVA

bioaerosol.eu

51

SYLVA is a European Union and SERI funded scientific project focused on real-time observation of aeroallergens, providing valuable environmental data and research outputs. The website serves as a portal for stakeholders including researchers and public health officials, offering access to data portals and project information. The technical infrastructure is modern and lightweight, utilizing htmx and Pico CSS for responsive and accessible design. Embedded iframes provide interactive data visualization and mapping services. Security posture is adequate with HTTPS usage but lacks explicit security headers and privacy policies, which are recommended for improvement. The domain WHOIS data is privacy protected by EURid, typical for .eu domains, and the website content aligns with the domain's purpose, supporting legitimacy. Overall, the site is professional and trustworthy but could enhance compliance and security transparency.

S

solidpixels.

solidpixels.cz

65

solidpixels. is a Czech-based technology company offering a proprietary SaaS platform for creating professional websites, landing pages, e-shops, and content hubs. The company targets businesses and professionals seeking high-quality, fast, and functional web solutions, positioning itself as a premium provider trusted by thousands of clients. The website demonstrates a strong market presence with client testimonials, social media engagement, and a comprehensive service offering. Technically, the site uses modern web technologies including responsive design, lazy loading, and integrates Google Analytics and Tag Manager for analytics and marketing. The platform is built on a proprietary CMS, solidpixels, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are not evident. The absence of WHOIS registrant data is a concern for domain legitimacy verification, but the professional content and business presence mitigate this risk. Overall, the website is well-designed, user-friendly, and compliant with GDPR, making it a trustworthy platform for its target audience.

S

S úsměvem pro vás

susmevemprovas.cz

56

S úsměvem pro vás is a small Czech Republic based consortium of companies specializing in advertising, graphic design, photography, publishing, and printing services. The website is built on the Wix platform, leveraging Wix Thunderbolt technology, and presents a professional and consistent brand image targeting local/regional clients. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and privacy compliance features. The absence of WHOIS data reduces transparency but does not indicate direct risk. Overall, the business appears legitimate with room for improvement in privacy and security practices.

Р

Регіональна Газова Компанія

rgc.ua

57

Регіональна Газова Компанія (РГК) є провідним українським підприємством у сфері газорозподілу, виробництва газового обладнання та інжинірингових послуг. Компанія обслуговує значну частину газової інфраструктури України, пропонуючи інноваційні рішення, включаючи проекти з чистої енергії, такі як водень та біометан. РГК має сильну позицію на ринку, підтримує кілька дочірніх сервісних доменів і активно комунікує через соціальні мережі. Технічно сайт використовує сучасні веб-технології, включаючи Google Analytics та Tag Manager, має адаптивний дизайн і базові SEO та доступності. З точки зору безпеки, сайт використовує HTTPS, але не має розширених захисних заголовків або публічних політик безпеки. Відсутні контактні дані для інцидентів безпеки. Загалом, сайт є професійним, безпечним і орієнтованим на бізнес аудиторію.

The website www.psgaz.pl is currently inaccessible to direct content analysis due to a Cloudflare Turnstile CAPTCHA challenge page that blocks automated and direct access. No meaningful business content, contact information, or policies are publicly visible. The WHOIS data for the domain is unavailable, indicating privacy protection or lack of public registration data. This limits the ability to verify the legitimacy or business details of the domain. Technically, the site uses Cloudflare services for security and performance but lacks visible security headers or metadata. Overall, the site appears to be either under protection, newly registered, or inactive with minimal public presence.

The website www.nationalgas.com is currently inaccessible due to a Cloudflare Turnstile security challenge page, which blocks access to any meaningful content or business information. The domain WHOIS data is unavailable or the domain appears unregistered, raising significant legitimacy concerns. Without access to the actual website content, no business description, contact information, or security policies can be analyzed. The technical infrastructure relies on Cloudflare for security and bot mitigation, but no further technology stack or CMS details are discernible. The security posture cannot be properly assessed due to the lack of accessible content and headers. Overall, the site is effectively blocked from analysis, resulting in a low trust and security score.

The website tsoua.com is currently inaccessible due to a Cloudflare Turnstile human verification challenge page that blocks direct access to any business content. The domain was registered in 2019 via PublicDomainRegistry.com without privacy protection, indicating some transparency in ownership, but no registrant details are publicly available. Due to the WAF challenge, no privacy policies, contact information, or business descriptions are accessible, preventing a full assessment of the company's operations or market position. The technical infrastructure relies on Cloudflare for security and performance, but no further technology stack details are available. Security posture cannot be fully evaluated given the lack of accessible content and headers. Overall, the site appears to be in a protective mode, possibly to mitigate automated threats or abuse, but this limits external analysis and trust evaluation.

S

SPORTISIMO s. r. o.

loap.cz

63

LOAP.CZ is a Czech Republic based e-commerce retailer specializing in outdoor and sportswear products. The company positions itself as a pioneer in the Czech outdoor fashion and equipment market with over 25 years of experience. The website offers a broad range of products including clothing, footwear, camping gear, and accessories targeting outdoor enthusiasts. The business model is direct-to-consumer retail with a focus on quality and affordability. The website is professionally designed, mobile optimized, and provides clear navigation and relevant content for its target audience.

C

CEFAS.CZ – Česká Fotovoltaická Asociace z.s.

cefas.cz

10

CEFAS.CZ – Česká Fotovoltaická Asociace z.s. is the largest and oldest photovoltaic association in the Czech Republic, founded in 2009. The organization focuses on certification, education, advocacy, and industry support for photovoltaic and electromobility sectors. The website serves as a hub for news, certification information, membership, and partner collaboration. Technically, the site is built on WordPress with a moderate performance profile and good mobile optimization. Structured data and SEO practices are well implemented, enhancing visibility and trust. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and incident response information are lacking. Overall, the site presents a professional and trustworthy image consistent with its business claims and domain age.

S

Strom - shop

stromshop.cz

71

Stromshop.cz is an established e-commerce platform specializing in the sale of John Deere branded products in the Czech Republic. Founded in 2013, it serves as the official John Deere online shop offering a wide range of products including garden machinery, clothing, toys, and accessories. The website demonstrates a consistent brand presence and targets consumers interested in John Deere merchandise. Technically, the site uses ASP.NET WebForms with Kentico CMS, integrates Google Tag Manager and reCAPTCHA for tracking and security, and shows moderate performance with good mobile optimization. Security practices include HTTPS and CSRF protection, though some security headers are not explicitly confirmed. Privacy and cookie policies are present, indicating basic GDPR compliance, but no explicit security policy or incident response information is found. Overall, the site is professional, trustworthy, and safe for general audiences.

The website stockphotos.com is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge page that blocks direct access to its content. As a result, no business-specific content, contact information, or policies are available for analysis. The domain is long-established, created in 1995, and registered with RegistryGate GmbH, showing legitimacy and consistency with the domain name. The site uses Cloudflare for security and performance, but DNSSEC is not enabled. Due to the blocking mechanism, technical, security, and privacy compliance assessments cannot be performed accurately. The content safety rating is safe as no adult or explicit content is detected on the challenge page.

D

Databox s.r.o.

zivefirmy.cz

62

Živéfirmy.cz is a prominent independent online business directory focused on Czech companies, operated by Databox s.r.o. The platform offers comprehensive listings across multiple sectors including real estate, hospitality, retail, finance, education, and government. It targets marketing professionals, sales representatives, students, and the general public seeking reliable company data. The business model centers on free listings supplemented by premium promotion packages and value-added services such as insolvency monitoring. The website enjoys a strong market position as one of the largest Czech business catalogs with over 375,000 companies listed. Technically, the site employs a modern web stack including Bootstrap, jQuery, FontAwesome, and Google Fonts, with integration of Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, HTTPS is enforced and cookie consent mechanisms are robust, though HTTP security headers and formal security policies are absent. Login functionality supports OAuth providers and secure form inputs. The security posture is solid but could be improved by adding security headers, publishing incident response and vulnerability disclosure information, and performing regular audits of third-party scripts. The absence of WHOIS data limits domain trust assessment, but the website content and business presence indicate legitimacy. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations. Strategically, Živéfirmy.cz should focus on enhancing transparency around security policies and domain registration details to strengthen trust. Technical modernization and accessibility improvements would further improve user experience and security resilience.

C

Cech kachliarov

cechkachliarov.sk

61

Cech kachliarov is a Slovak professional association dedicated to supporting and representing stove and fireplace professionals. The organization provides consumer guidance, educational resources, and a platform to find qualified professionals, ensuring quality and safety in the industry. Their website reflects a well-structured, professional presence with clear branding and relevant content targeted at Slovak residents seeking expert services in this niche. Technically, the site is built on Contao CMS and uses modern web technologies including Google Analytics, Facebook Pixel, and Google Tag Manager for analytics and marketing. The site is mobile optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though it lacks explicit security headers and a cookie consent mechanism, which are areas for improvement. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website is trustworthy, professional, and functional, serving its target audience effectively.

S

SilesNet Polska Sp. z o. o.

silesnet.pl

59

SilesNet Polska Sp. z o. o. is a small regional telecommunications provider based in Poland, specializing in high-quality fiber-optic and wireless internet services for residential and business customers. With over 21 years of market presence, the company emphasizes reliability, professional customer support, and tailored internet solutions. Their website reflects a professional and consistent brand image, targeting Polish-speaking customers primarily in the Cieszyn region. Technically, the website uses modern JavaScript libraries such as Swiper.js for UI elements and integrates Google Tag Manager and Google Analytics for tracking and marketing purposes. The site is mobile-optimized and provides clear navigation and contact information, though it lacks explicit privacy and terms of service pages. Security posture is moderate, with HTTPS usage and cookie consent implemented, but missing DNSSEC and security headers reduce the overall security maturity. No signs of WAF or content blocking were detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website is professional and trustworthy but could improve in privacy transparency and security best practices.

S

SilesNet s.r.o.

silesnet.cz

57

SilesNet s.r.o. is a regional telecommunications provider based in the Czech Republic, operating since 1998. The company specializes in delivering high-speed internet services via fiber optic and wireless technologies, targeting residential customers, businesses, and organizations. Their offerings include internet for apartments, houses, and enterprises, complemented by television services and dedicated technical support. The website reflects a stable market position with a focus on personalized customer service and regional expertise. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and popular libraries such as Swiper.js for UI components. Google Tag Manager and Google Analytics are used for tracking and analytics. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Hosting appears to be provided by rails.cz, indicating a reliable infrastructure. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, demonstrating awareness of privacy regulations. However, explicit security headers are missing, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data confirms domain legitimacy with consistent registration details and a long operational history. Overall, the website presents a professional and trustworthy digital presence with room for improvement in privacy policy transparency and security header implementation. Strategic enhancements in these areas would strengthen compliance and security posture, supporting continued business growth and customer trust.

R

Railsformers s.r.o.

rails.cz

70

Railsformers s.r.o. is a Czech-based IT service provider specializing in custom web and mobile application development, online marketing, SEO, e-commerce solutions, and cybersecurity services. Established in 2009, the company has a solid market presence with over 300 clients and 700 projects completed, supported by four international awards. Their website reflects a professional and consistent brand image, targeting businesses seeking comprehensive IT solutions. Technically, the site employs modern web technologies, including Google Tag Manager and cookie consent mechanisms, hosted under a reputable registrar. Security posture is good with HTTPS enabled and basic security best practices observed, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is partial, with cookie consent present but no clear privacy or terms of service pages. Overall, the domain registration data aligns well with the website content, supporting the company's legitimacy.

WebPal Cloud Server, operated by Palomino System Innovations Inc., is a mature and established cloud-based content management and collaboration platform serving over 400,000 users worldwide. The company offers integrated solutions for website building, document management, file sharing, and business process applications, targeting enterprises and small businesses. The platform emphasizes secure, private hosting in selected top-tier data centers with dedicated support based in Toronto, Canada. The website presents a professional and consistent brand image with clear service offerings and client testimonials, reinforcing its market position as a trusted content management solution provider. Technically, the website uses a modern tech stack including HTML5, CSS3, JavaScript libraries such as jQuery and Bootstrap, and integrates Google Analytics and Google Ads for marketing and tracking. The site is moderately optimized for performance and mobile responsiveness, though accessibility features are basic. The hosting infrastructure allows clients to choose server locations across multiple global data centers, enhancing data sovereignty and reliability. From a security perspective, the domain is well-established with no privacy protection, indicating transparency. However, DNSSEC is not enabled, and no HTTP security headers were detected in the HTML content, which are areas for improvement. The site lacks a published security policy, incident response contacts, and cookie consent mechanisms, which are important for compliance and trust. The use of Google tracking scripts indicates moderate user tracking, but privacy compliance appears basic. Overall, WebPal.net is a credible and professional business website with a solid foundation but could enhance its security posture and privacy compliance to better align with modern standards and regulations.

D

DEEP VISION s.r.o.

sferapardubice.eu

58

SFÉRA Pardubice is a community-focused educational organization based in Pardubice, Czech Republic, operated by DEEP VISION s.r.o. The organization provides innovative educational programs, workshops, and events aimed at children, students, educators, and the general public. Their offerings include science laboratories, creative workshops, and thematic events that promote interdisciplinary learning and community engagement. The website reflects a well-structured and content-rich platform that supports their mission of educating for the future. Technically, the site uses modern web technologies including Google Tag Manager for analytics and implements a cookie consent mechanism, although it lacks explicit privacy and terms of service pages. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and formal policies. Overall, the domain is privacy protected via EURid, which is typical for EU domains, and the website content aligns with a legitimate educational entity. The site is accessible, professionally designed, and trustworthy, with clear contact information and social media presence.

C

Cech mechanických zámkových systémů ČR

cmzs.cz

51

The website cmzs.cz represents the Cech mechanických zámkových systémů ČR (CMZS), a Czech organization uniting professionals in the field of mechanical lock systems, key manufacturing, and lock installations. The site serves both industry experts and the general public, offering services such as a product catalog, security projects, and a member search feature. The business is positioned as a trusted entity within the Czech Republic's security and locksmith sector, founded in 2007, with a small organizational size and a clear focus on mechanical lock systems. Technically, the website employs modern web technologies including JavaScript, SVG graphics, and Google Tag Manager for analytics. It is hosted under the registrar REG-GRANSY, with a domain age consistent with the organization's history. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, it lacks some advanced security headers and explicit privacy and cookie policies, which are important for compliance and user trust. From a security perspective, the site uses HTTPS and asynchronous script loading, which are positive indicators. No visible vulnerabilities or exposed sensitive data were detected. The absence of published security policies, incident response contacts, and vulnerability disclosure mechanisms represents an area for improvement. Analytics usage is moderate, primarily via Google Tag Manager, but privacy compliance is weak due to missing policies. Overall, the website is safe, professional, and trustworthy, with a solid business foundation. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and providing clear incident response and vulnerability disclosure information to improve compliance and security posture.

V

Default page

vrtapka.cz

47

The website vrtapka.cz currently serves as a default placeholder page hosted by Hostinger, indicating readiness for website file upload but lacking any substantive business content or branding. The site does not provide any privacy, cookie, or terms of service policies, nor does it offer contact information or forms for user interaction. Technically, the site uses basic HTML5, CSS3, Google Fonts, and SVG graphics with a fast loading performance and good mobile responsiveness. However, there is no evidence of HTTPS or security headers, which significantly impacts the security posture. The WHOIS data is inconsistent, showing a domain creation date in the future (2025), which undermines trust and legitimacy. Overall, the site is not currently operational as a business website and lacks essential security and compliance features.

Ghorban Global is a German-based company specializing in the supply and export of premium gourmet foods, including fresh meat, fish, and shellfish. With over a decade of experience since its domain registration in 2009, the company positions itself as a passionate provider of high-quality fresh food products, targeting both business clients and discerning consumers. The website reflects a professional and consistent brand image with clear contact channels and social media presence, supporting its market credibility. Technically, the website employs modern front-end technologies such as Swiper.js for sliders, AOS for animations, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and performs moderately well, though no explicit CMS or backend platform is detected. Hosting and domain registration are consistent with the business location in Germany. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and important security headers like CSP and HSTS. There is no visible security or incident response policy, and no cookie consent mechanism is implemented, which may pose compliance risks under GDPR. The WHOIS data aligns well with the website content, indicating legitimacy and trustworthiness. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced security headers, privacy compliance improvements, and explicit security policies to strengthen its security posture and regulatory adherence.

The website procivis.com is currently a domain parking page offered for sale via Sedo, with no active business content or services presented. The page is primarily in Finnish and contains advertising scripts from Google Ads and Sedo, with no direct company information or contact details. The domain was registered in 2009 with a Korean registrar, but the website content does not reflect an active business, indicating the domain is likely held for resale. Technically, the site uses basic HTML, CSS, and JavaScript with embedded advertising iframes and lacks modern security features such as DNSSEC or visible HTTPS configuration. Privacy and cookie policies are minimal and provided by the Sedo parking service, with no GDPR compliance indicators or security policies present. Overall, the site has low trustworthiness and poor content quality, serving only as a placeholder for domain sale.

P

Pixelfield

pixelfield.co.uk

50

Pixelfield is a London-based digital product development agency specializing in mobile and web applications, game development, UI/UX design, and emerging technologies such as blockchain, AI, AR, and VR. The company targets startups and businesses seeking innovative digital solutions, positioning itself as a reliable and experienced partner with a strong European client base. The website reflects a professional and modern digital presence with clear navigation and comprehensive service offerings. Technically, the site employs modern web technologies and integrates multiple analytics and marketing tools, though it lacks visible privacy and cookie policies, which impacts compliance. Security posture is generally good with HTTPS and no exposed sensitive data, but could be improved by adding security headers and incident response information. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.