Security Directory

C

Centrálnílékárna.cz

centralnilekarna.cz

46

Centrálnílékárna.cz is a Czech Republic-based online pharmacy offering a wide range of pharmaceutical products, cosmetics, health supplements, and veterinary items. The website targets Czech-speaking consumers seeking convenient online access to health and wellness products. The business model is e-commerce retail with a focus on health and beauty sectors. The site demonstrates consistent branding and good content quality, supported by trust indicators such as the SÚKL compliance logo and presence on Heureka.cz and Facebook. Technically, the site uses a custom CMS with legacy JavaScript libraries and integrates common marketing and analytics tools like Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks modern security headers and uses outdated JavaScript libraries, which may pose risks. WHOIS data is unavailable, limiting domain trust assessment. Overall, the site is professional and trustworthy but could improve technical and security aspects.

M

- MojeNákupy.cz

mojenakupy.cz

40

MojeNákupy.cz is a Czech online retail store specializing in a broad assortment of household, garden, and tool products. The website offers shopping without mandatory registration and free shipping for orders exceeding 10,000 CZK. The business targets Czech consumers seeking convenient online access to diverse product categories including cleaning supplies, electronics, and pest control. The market position appears to be a niche local e-commerce retailer with a basic but functional online presence. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, Facebook SDK, and Heureka widgets for social and marketing integration. The site lacks advanced CMS or modern frameworks and shows basic mobile optimization and SEO practices. Security posture is moderate with HTTPS assumed but no visible security headers or advanced protections. Privacy and cookie policies are not found, indicating compliance gaps. WHOIS data is missing, reducing trust and raising concerns about domain legitimacy. Overall, the site is functional for retail but requires improvements in security, privacy compliance, and transparency to enhance business credibility and user trust.

A

ALTER s.r.o.

alter-hk.cz

49

ALTER s.r.o. is a Czech Republic-based company specializing in the wholesale and manufacturing of cleaning, disinfecting, and hygiene products. With over 24 years of market presence, the company serves primarily registered business customers, offering a broad range of products including cleaning agents, packaging materials, and gastro supplies. The website reflects a well-established regional wholesaler with a clear B2B business model and a focus on professional clientele. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and jQuery, but uses an outdated jQuery version which poses security risks. The site is moderately optimized for performance and mobile use, with basic accessibility and good SEO practices. Security posture is moderate; HTTPS is used, and cookie consent mechanisms are implemented, but there is a lack of modern security headers and the use of outdated libraries. WHOIS data is unavailable, which slightly reduces trustworthiness, but the website content and contact information support legitimacy. Overall, the site is functional and professional but would benefit from technical and security updates.

H

Hotel Lions Plzeň

hotellionsplzen.cz

50

Hotel Lions Plzeň is a small family-run hospitality business located near the historic center of Plzeň, Czech Republic. The hotel offers modern accommodation, restaurant services, conference facilities, and parking including electric vehicle charging. The website is professionally designed with good content quality and clear navigation, supporting multiple languages. The technical infrastructure is based on common web technologies including jQuery and Bootstrap, hosted likely by Czechia.com. Security posture is moderate with cookie consent implemented but lacking explicit privacy policies and security headers. WHOIS data is unavailable, which raises concerns about domain registration legitimacy. Overall, the website is functional and trustworthy for users but would benefit from enhanced security and compliance documentation.

P

PT SERVIS

ptservis.cz

43

PT SERVIS operates an e-commerce website focused on sports nutrition, healthy nutrition, bodybuilding, fitness, and aerobic products primarily targeting fitness enthusiasts and health-conscious consumers in the Czech Republic. The website offers a broad catalog of supplements, fitness equipment, and related health products, supported by promotional campaigns and customer engagement tools such as live chat and discount coupons. Technically, the site uses standard web technologies including JavaScript, jQuery, and CSS, with integrations for marketing and tracking services. The site is secured with HTTPS and includes a cookie consent mechanism, but lacks a publicly accessible privacy policy and terms of service pages, which are important for compliance and user trust. The absence of WHOIS data for the domain is a notable concern, limiting the ability to verify domain legitimacy and age. Overall, the website presents a professional and functional e-commerce platform with moderate technical maturity and security posture.

L

Lékárna Srdcovka

lekarnasrdcovka.cz

45

Lékárna Srdcovka operates as a local and online pharmacy based in Prostějov, Czech Republic, offering a wide range of health-related products including over-the-counter medicines, supplements, and cosmetics. The business targets Czech-speaking customers seeking convenient access to pharmaceutical products both online and in physical stores. The website supports e-commerce transactions and provides services such as e-prescription reservations, positioning itself as a trusted regional healthcare retailer. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and jQuery, with integration of Facebook Pixel for marketing and tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible security headers and explicit incident response or security policies. The absence of WHOIS data for the domain reduces trust from a domain registration standpoint, though the website content and contact information suggest a legitimate business. Overall, the site maintains a moderate security posture with recommendations to improve privacy and security practices. The overall risk assessment is moderate with a score of 74 out of 100, reflecting good content quality and business credibility but some technical and compliance gaps. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and investigating the missing WHOIS data to improve domain trustworthiness.

H

Hawaj.cz • ověřený český e-shop • 17 let s vámi | Hawaj.cz

hawaj.cz

49

Hawaj.cz is a Czech e-commerce retailer specializing in garden furniture, pools, whirlpools, solar showers, toys, pet supplies, and related leisure products. The website positions itself as an established player with 17 years of market presence, targeting Czech consumers seeking home and garden products. The site features a professional design with clear navigation and a broad product catalog. Technically, the site uses modern JavaScript libraries, Bootstrap 4, and integrates multiple marketing and analytics tools such as Facebook Pixel, Google Tag Manager, Hotjar, and Biano Pixel. HTTPS is enforced, and cookie consent mechanisms are in place, indicating a baseline of security and privacy awareness. However, the absence of explicit privacy policy and terms of service pages, as well as missing WHOIS registrant data, reduce overall trust and compliance posture. No WAF or content blocking was detected, and the content is safe for general audiences.

M

Mega levné pneu

megalevnepneu.cz

48

Mega levné pneu is a Czech Republic-based retailer specializing in the sale of tires and wheels for a wide range of vehicles including motorcycles, cars, trucks, and agricultural machinery. The company also offers onsite tire services (pneuservis) near Prague, emphasizing fast service and ecological tire disposal. The website presents a professional and content-rich platform targeting vehicle owners and fleet operators in the region. Technically, the site uses legacy technologies such as windows-1250 charset and jQuery, with moderate performance and basic mobile optimization. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and explicit privacy policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate. Overall, the site is functional and credible but would benefit from enhanced security and compliance transparency.

S

SPEED PRESS Plus a.s.

speed-press.cz

44

SPEED PRESS Plus a.s. is a Czech company specializing in the manufacture and sale of promotional and gift items with custom printing services. Established over 32 years ago, it holds ISO 9001:2015 certification and serves a broad range of corporate clients including major brands such as ŠKODA, Vodafone, and Generali. The company operates an online e-shop for VIP clients and maintains extensive warehousing and production facilities near Prague. The website reflects a mature business with a focus on B2B sales and custom solutions in promotional products. Technically, the website uses established but somewhat dated technologies like jQuery 1.10.1 and Nivo Lightbox, with responsive design and cookie consent mechanisms in place. Security posture is adequate with HTTPS enforced, but lacks modern security headers and uses older JavaScript libraries, which could pose risks. No WHOIS data is available, which reduces domain transparency and trustworthiness, though the business content and certifications support legitimacy. Overall, the site is professional and trustworthy but could improve security and domain registration transparency.

U

Université de Technologie Belfort-Montbéliard

utbm.fr

56

Université de Technologie Belfort-Montbéliard (UTBM) is a recognized French public higher education institution specializing in engineering, master, and doctoral programs. It maintains accreditations such as CTI and the EUR-ACE label, emphasizing quality education and research. The website targets students, researchers, companies, and alumni, offering comprehensive academic and continuing education services. The institution has a solid market position within the French and international education sectors, supported by active social media presence and international partnerships. Technically, the website is built on WordPress with modern plugins and frameworks including Bootstrap, jQuery, and WPBakery. It employs GDPR-compliant cookie consent mechanisms and supports multilingual content via Weglot. Performance and mobile optimization are good, with accessibility features implemented. Analytics are primarily handled via Matomo, with Google Analytics configured but inactive. Security posture is good with HTTPS enforced and no exposed sensitive data. However, the absence of a published security policy and incident response contacts is a gap. The WHOIS data is unavailable, which slightly reduces trustworthiness but is mitigated by the institution's established reputation and accreditation. Overall, UTBM's website is professional, secure, and compliant, serving its educational mission effectively. Strategic improvements include publishing security policies and incident response information to enhance transparency and trust.

H

Hydro

hydro.com

75

Hydro is a global leader in aluminium production and renewable energy, operating in over 40 countries with a workforce of 32,000 employees. The company focuses on sustainable business practices, offering low-carbon and recycled aluminium products alongside renewable energy solutions. Their website reflects a mature digital presence with comprehensive global office information and professional branding. Technically, the site employs modern JavaScript frameworks, telemetry via Microsoft Application Insights, and cookie consent management through Cookiebot, indicating a commitment to user privacy and performance monitoring. Security posture is strong with HTTPS enforced and telemetry for error tracking, though explicit security policies and vulnerability disclosures are absent. The WHOIS data for the domain www.hydro.com is missing, which is unusual for a corporate domain and slightly reduces trustworthiness. Overall, the website is professional, secure, and compliant with privacy norms, but could improve transparency around security policies and domain registration details.

B

BIMobject

bimobject.com

73

BIMobject is a leading technology platform specializing in providing free BIM (Building Information Modeling) objects and content for architects, engineers, and construction professionals. The website offers a comprehensive catalog of BIM objects from over 2,000 manufacturers, supporting multiple design software platforms such as Revit, SketchUp, and ArchiCAD. The platform also enables manufacturers to publish their products, positioning BIMobject as a key player in the digital construction ecosystem. Technically, the website is built on a modern Angular framework with integrations for Google Tag Manager and OneTrust for privacy compliance, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high professionalism, good privacy compliance, and a trustworthy user experience, though the absence of WHOIS registration data slightly reduces transparency. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure mechanisms, and providing direct contact channels for security and business inquiries.

P

Trouvez un paysagiste qualifié près de chez vous. Devis gratuit

paysagistes.pro

50

The website www.paysagistes.pro appears to be a professional service site related to landscaping, primarily targeting a French-speaking audience. The site is built on WordPress and utilizes common web technologies such as Font Awesome and Google Maps API for icons and location services. However, the content provided is minimal and mostly technical resources, with no visible business descriptions, contact information, or privacy policies. The WHOIS data is unavailable or protected, which limits the ability to fully verify the domain's legitimacy and ownership details. The site is accessible without any WAF or security challenge blocking access.

A

Adis Transition

adis-transition.com

49

Adis Transition is a small French consulting business specializing in management de transition and operational leadership within high technology and industrial sectors. The company leverages nearly 30 years of experience to support business leaders in transforming and optimizing industrial performance. Their services include general management, operational diagnostics, R&D direction, and industrial transformation. The website is professionally designed using WordPress, featuring modern technologies such as Google reCAPTCHA v3 for form protection. While the site is well-structured and content-rich, it lacks explicit privacy and terms of service pages, and no WHOIS registration data is available, which raises some legitimacy concerns. Security posture is moderate with HTTPS enabled but missing key security headers. Overall, the site is safe, business-focused, and trustworthy, but improvements in transparency and security practices are recommended.

J

Julie Fuchs

juliefuchs.fr

51

Julie Fuchs is a professional artist photographer, accredited trainer in mental health first aid (PSSM), and facilitator in collective intelligence. The business focuses on supporting organizations with relational and mental health challenges at work, combining photography with consulting and facilitation services. The website is built on the Wix platform, leveraging modern web technologies and analytics tools, but lacks comprehensive privacy and cookie policies. Security posture is good with HTTPS and some security hardening scripts, though explicit security headers are missing. WHOIS data is unavailable, which limits domain trust verification. Overall, the site presents a professional image but could improve transparency and compliance aspects.

B

Brain Behind Ltd

brain-behind.com

53

Brain Behind Ltd is a UK-based medium-sized company founded in 2005, specializing in high-volume loyalty and mission-critical loyalty solutions integrated with existing payment terminals. The company serves a diverse B2B audience including financial institutions, retailers, tourism operators, and urban mobility planners. Their product suite includes enterprise vouchers, loyalty programs for banks, tourism solutions, and contract farming administration systems. The website reflects a mature business with a consistent brand and strong partner ecosystem. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Maps API, hosted on UKFast infrastructure. Security posture is moderate with room for improvement in DNSSEC and HTTP security headers. Privacy compliance is strong with comprehensive policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-structured, supporting the company's market position as a reliable provider of payment and loyalty solutions.

K

Krajci plus Polska Sp. z o.o.

krajciplus.pl

9

Krajci plus Polska Sp. z o.o. is a Polish trading and manufacturing company specializing in traditional potato chips and salty snacks. Founded in 2025 as a subsidiary of the Czech family company Krajči plus, it leverages over 20 years of production experience from its parent. The company operates its own production, logistics, and distribution channels, serving markets in Poland and Central Europe. The website reflects a professional business with clear product offerings and philanthropic engagement. Technically, the site is built on WordPress with a modern theme and includes Google Analytics with opt-out capabilities. However, it lacks privacy and cookie policies, and no WHOIS data is available for the domain, which raises some trust concerns. Security headers are missing, though HTTPS is enforced.

К

Крайчи БГ ООД

krajci.bg

10

Крайчи БГ ООД is a small family-owned Bulgarian company established in 2023 as a franchise partner of the Czech company Krajči plus s. r. o., which has been producing traditional crispy fried potato chips since 1995. The company focuses on manufacturing and distributing traditional potato chips and related snack products using local high-quality raw materials. The website is built on WordPress with the Avada theme and includes modern web technologies and Google Analytics for tracking. Contact information is clearly provided, but the site lacks privacy and cookie policies, which impacts compliance. Security posture is good with HTTPS and some best practices, but additional security headers and policies would improve it. Overall, the site is professional, trustworthy, and well-structured, serving its target audience effectively.

K

Krajči plus SK s.r.o.

krajciplus.sk

10

Krajči plus SK s.r.o. is a Slovak family-owned manufacturing company specializing in traditional potato chips, onion rings, crackers, bakery sticks, and dried fruits. Founded in 2015 as a subsidiary of the Czech company Krajči plus (established 1995), it operates production and distribution primarily in Slovakia and the Czech Republic. The company emphasizes traditional recipes combined with modern production technology, ensuring product freshness and quality. Their market position is that of a well-established regional player with a decade-long presence in Slovakia and over 20 years of production experience. The website provides comprehensive business and product information, contact details, and social media links, supporting a professional and trustworthy brand image.

domainsite.com is a legacy domain registrar website that has merged with Name.com, Inc. The site serves primarily as an informational placeholder directing users to Name.com for domain management and registration services. The business operates in the domain registration sector, targeting domain owners and registrants. The merger consolidates services under the Name.com brand, maintaining user credentials and domain products without disruption. Technically, the website uses Bootstrap 3 and basic JavaScript, hosted likely on AWS infrastructure, with minimal SEO and accessibility features. Security posture is moderate with domain status locks in place but lacks DNSSEC and security headers. No privacy or cookie consent mechanisms are present, and no direct contact or incident response information is provided on this page. Overall, the domain registration and business information are consistent and legitimate, reflecting a stable and established registrar entity.

N

NaKoncerty.cz

nakoncerty.cz

29

NaKoncerty.cz is a Czech language media portal dedicated to providing news, updates, and information about concerts, festivals, and the music scene in the Czech Republic. The website offers a variety of articles covering upcoming events, festival news, and concert reviews, targeting music enthusiasts and festival goers primarily in the Czech region. The business model revolves around content publication and advertising revenue, leveraging Google AdSense and Jetpack analytics for monetization and user insights. Technically, the website is built on the WordPress CMS platform, utilizing common web technologies such as jQuery, Slick Carousel, and FontAwesome for UI enhancements. The site is served over HTTPS with a good SSL configuration, ensuring secure data transmission. However, it lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. The website is mobile optimized with a responsive design and moderate performance. From a security perspective, the site demonstrates basic good practices such as HTTPS usage but misses critical security headers and formalized privacy compliance mechanisms. No vulnerabilities or exposed sensitive data were detected in the analysis. The WHOIS data is not publicly available, indicating privacy protection or registry restrictions, but the website content and structure suggest a legitimate and professional media portal. Overall, NaKoncerty.cz presents a well-structured and content-rich platform for music event information in the Czech Republic. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and providing clear contact information to improve trust and compliance. These steps will strengthen the site's security posture and business credibility while maintaining its role as a valuable resource for its audience.

R

Ready for Boarding

readyforboarding.cz

10

Ready for Boarding is a travel-focused website offering content and e-commerce services related to travel, primarily targeting Czech and Polish speaking audiences. The site provides travel guides, tips, and sells travel-related products through WooCommerce. It maintains a professional online presence with multilingual support and integrates multiple marketing and analytics tools such as Google Analytics, Meta Pixel, and PixelYourSite. The technical infrastructure is based on WordPress CMS with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data suggests privacy protection, which is common for small businesses. Overall, the website is legitimate, well-maintained, and compliant with GDPR requirements.

The website gabfirethemes.com is currently inaccessible, returning a 403 Forbidden error page. This prevents any meaningful extraction of business, technical, or security information. The site lacks visible content, metadata, contact information, or policies, which severely limits the ability to assess its business model, market position, or compliance posture. Technically, no scripts, frameworks, or hosting details are detectable due to the access restriction. Security posture cannot be evaluated as no headers or SSL details are available. Overall, the site is effectively blocked from analysis, resulting in a low trust and quality score.

B

Bwin Casino Oostende

casinooostende.be

40

Bwin Casino Oostende operates as a casino and entertainment venue in Belgium, offering casino gaming, events, jackpots, and restaurant services. The website is professionally designed using WordPress and Elementor, with modern web technologies and a cookie consent mechanism in place. Security posture is good with HTTPS and bot protection via Google reCAPTCHA, though explicit security headers and privacy policies are missing. The domain WHOIS data is restricted, which is common for privacy but reduces transparency. Overall, the site targets adult casino customers and maintains a moderate trust level.

V

videezy

videezy.com

59

Videezy is an online platform providing free and premium stock video footage, 4K videos, and After Effects templates targeted at videographers and content creators. The site operates a freemium business model, offering a community-driven resource for video content. The platform is well-branded and professionally designed, with a consistent user experience and clear navigation. Technically, the website employs modern JavaScript libraries, analytics tools, and monitoring services, indicating a mature digital infrastructure. However, some technical aspects such as security headers and privacy policies are lacking or not detected in the provided content. The security posture is moderate with HTTPS enforced and CSRF protections, but missing some best practices and incident response information. Overall, the website is safe for general audiences and maintains a moderate trust level, though the absence of WHOIS registration data reduces domain transparency and trustworthiness.

The website at run.app is currently inaccessible, serving only a standard 404 Not Found error page with no business or security related content. There is no metadata, structured data, or contact information available to analyze. The lack of accessible content prevents any meaningful assessment of the company's business model, services, or market position. Technically, the site does not present any detectable technologies, scripts, or security headers, and no evidence of WAF or security blocking mechanisms was found. The security posture cannot be evaluated due to the absence of content and configuration data. Overall, the site appears inactive or misconfigured, resulting in a very low trust and credibility score.

P

PYMAC

pymac.fr

56

PYMAC is a French web agency based in Aix-en-Provence, specializing in web development, e-commerce site creation, graphic design, web marketing, and hosting services. Established in 1998, the agency positions itself as a reliable partner for businesses seeking to enhance their online presence and digital communication. The website reflects a professional image with clear service descriptions and client references, targeting local and regional businesses. Technically, the site is built on WordPress with Elementor and Gravity Forms, indicating a modern and flexible infrastructure. The presence of GDPR-compliant contact forms and cookie consent mechanisms demonstrates awareness of privacy regulations. Security posture is good with HTTPS enabled, though some security headers could be improved. Overall, PYMAC presents a trustworthy and competent digital agency profile with a solid technical foundation and compliance awareness.

M

Marsbahis

mars-giris3.com

55

Marsbahis is an online gambling and betting platform offering a variety of services including sports betting, live casino games, and slot games. The platform targets adult users interested in online gambling, primarily Turkish-speaking audiences. It emphasizes user security and privacy in its messaging but lacks published privacy and cookie policies. Technically, the website uses AMP technology for fast mobile performance and is hosted behind Cloudflare DNS, with a domain registered recently in 2024. Security posture is moderate with HTTPS enabled but lacks security headers and incident response contacts. Overall, the site is functional and professional but needs improvements in privacy compliance and security transparency.

S

Stella Tech BV

marsbahis.com

46

Marsbahis is an established online gambling platform licensed in Curacao, offering a broad range of betting and casino games primarily targeting Turkish-speaking users. The website provides comprehensive information about its services, bonuses, and operational procedures, supported by trust signals such as a Curacao gaming license and DMCA protection. Technically, the site uses modern web technologies including Google Tag Manager and AMP links, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and some trust badges, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy linked externally but no cookie consent mechanism detected. Overall, the site is professional and functional but could improve transparency and compliance aspects.

N

Nadační fond Eduzměna

cpv-kh.cz

55

The website cpv-kh.cz represents the Nadační fond Eduzměna, a regional educational support center focused on the Kutnohorsko region in the Czech Republic. It provides information about the Eduzměna project, aiming to enhance educational opportunities and wellbeing for children, parents, teachers, and school leadership. The site offers resources such as workshops, mental health initiatives, and community support, positioning itself as a key regional educational partner. Technically, the site is built on WordPress using Elementor, with modern libraries like Bootstrap and FontAwesome, and integrates marketing and analytics tools including Google Analytics and Facebook Pixel. The site is hosted likely by WEDOS, a Czech hosting provider, and uses HTTPS with a good SSL configuration. Security posture is solid with no visible vulnerabilities, though explicit security headers and policies are not fully implemented. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Contact information includes a clear phone number and social media links, but no verified company email was found. Overall, the site is professional, well-branded, and trustworthy, serving a non-profit educational mission. Strategic improvements include publishing privacy and security policies, adding incident response contacts, and enhancing security headers to strengthen trust and compliance.

B

BICZ a.s.

bicz.cz

64

BICZ a.s. is a Czech Republic based real estate investment company specializing in residential housing projects, property reconstruction, and rental services. The company positions itself as a leading specialist in its sector, targeting investors and clients interested in responsible real estate investment. The website reflects a professional business model focused on property development and management within the Czech market. Technically, the website is built on WordPress with modern plugins and analytics tools such as Google Analytics and Cookiebot for GDPR compliance. The site is mobile optimized and presents good SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit privacy and terms of service documentation. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, though the website content and technical setup appear professional and trustworthy. Overall, the site is safe for general audiences and does not contain any adult or questionable content.

V

vaClavinek s.r.o.

imrvere.com

43

Imrvére is a small hospitality business based in Frýdlant nad Ostravicí, Czech Republic, offering restaurant dining, catering, and food delivery services. The company operates a professionally designed WordPress website using the Divi theme and WooCommerce for e-commerce capabilities. The site is well-structured with good SEO practices and mobile optimization, targeting a general audience interested in unique gastronomic experiences. Technically, the website leverages modern web technologies and integrates Google Analytics for user tracking. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though it lacks some security headers and published security policies. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or registration issues, which slightly impacts trustworthiness. Overall, the website presents a credible and professional business presence with room for improvement in privacy compliance and security transparency.

The website smartwings.com is currently inaccessible due to a Cloudflare Turnstile human verification challenge page that blocks direct access to the site's content. This prevents extraction of business, contact, or policy information from the site. The domain is registered since 2003 with a reputable registrar and uses Cloudflare for DNS and security services. However, no privacy, cookie, or terms of service policies are visible, nor are there any contact details or business descriptions accessible. The technical infrastructure relies on Cloudflare's security and CDN services, but the lack of accessible content limits the ability to assess digital maturity or user experience. Security posture is partially observable through the use of Cloudflare's WAF and Turnstile challenge, but no additional security headers or policies are evident. Overall, the site appears legitimate based on domain age and registration data, but the blocking mechanism significantly limits analysis and lowers the trust and quality scores.

C

CENTROPOL ENERGY, a.s.

centropol.cz

56

CENTROPOL ENERGY, a.s. operates as a reliable energy supplier in the Czech Republic, providing gas and electricity to households and businesses for over two decades. The company emphasizes fair pricing and additional customer benefits, positioning itself as a trusted player in the energy sector. The website reflects a professional digital presence with clear branding and relevant content tailored to its target audience. Technically, the site is built on WordPress with a modern technology stack including Google Tag Manager, Cookiebot for consent management, and reCAPTCHA for bot protection. While the site is mobile-optimized and SEO-friendly, there is room for improvement in accessibility and security headers implementation. Security posture is solid with HTTPS enforced and consent mechanisms in place, but lacks explicit security policies and incident response information. The absence of WHOIS data raises concerns about domain registration transparency, which slightly impacts overall trust. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and verifying domain registration details to improve credibility and compliance.

S

STEILMANN PRAHA spol. s r.o.

steilmann.cz

45

Steilmann Praha spol. s r.o. is a well-established fashion retail company operating since 1999, offering a portfolio of recognized fashion brands for men and women. The company operates both physical stores and an e-commerce platform, targeting fashion-conscious consumers primarily in the Czech Republic. The website reflects a professional and consistent brand image with clear navigation and relevant content about their products, loyalty programs, and corporate offerings. Technically, the site uses a combination of jQuery, Skel framework, and other JavaScript libraries to deliver a responsive and user-friendly experience, although the CMS is custom or not explicitly identified. Security posture is moderate with HTTPS usage and cookie consent mechanisms in place, but lacks advanced security headers and published security policies. Privacy compliance is partial due to absence of a privacy policy and terms of service pages. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

N

NH HOTEL GROUP, S.A.

nh-collection.com

77

NH Collection Hotels, operated by NH HOTEL GROUP, S.A., is a large international hospitality brand offering premium hotel accommodations across more than 100 hotels in 24 countries. The website targets travelers and business customers seeking quality lodging in major cities such as Madrid, Milan, and Barcelona. The business model focuses on direct online bookings, reservation management, and customer loyalty programs. The brand maintains consistent and professional digital presence with multilingual support and clear navigation.

Protecton HOLDING, a.s. is a well-established Czech security services company founded in 2017, offering a broad range of security-related services including personal protection, monitoring, technical solutions, and event security. The company operates with a large workforce and manages multiple subsidiaries, positioning itself as a significant player in the Czech security market. The website reflects a professional and consistent brand image targeting businesses and individuals seeking reliable security solutions. Technically, the website employs modern JavaScript frameworks such as Alpine.js and Livewire, integrates Google Tag Manager for analytics, and is hosted likely with WEDOS, a Czech hosting provider. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No critical vulnerabilities or suspicious content were detected, and WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website demonstrates a solid digital presence with room for improvement in security transparency and incident response readiness.

V

Vinofol, s.r.o.

vinofol.cz

52

Vinofol, s.r.o. is a well-established family winery based in the Czech Republic, operating since 1992. The company specializes in producing and selling high-quality wines from the Mikulov and Novosedly regions, leveraging modern technology and traditional winemaking methods. Their market position is strong within the Czech wine retail sector, supported by a broad product range, including award-winning wines, and a multi-channel sales approach via e-shop and physical vinoték stores. The website reflects a mature digital presence with integrated marketing and analytics tools, providing a professional user experience and clear business information. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data is a notable gap in domain transparency but does not detract significantly from the overall legitimacy based on website content. The site targets adult consumers, implementing age verification due to alcohol sales regulations.

F

FOTBALservis.cz

fotbalservis.cz

54

FOTBALservis.cz is a Czech Republic-based e-commerce retailer specializing in football equipment including balls, boots, clothing, and accessories. The website targets football players, teams, referees, and coaches, offering a comprehensive product catalog and club-specific e-shop services. The business operates on the Shoptet platform, leveraging modern web technologies and marketing tools such as Facebook Pixel and Google Tag Manager. The site demonstrates good content quality, clear navigation, and GDPR-compliant privacy and cookie policies. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trustworthiness. Technically, the site uses HTTPS and secure login forms but lacks explicit security headers and a published security policy or vulnerability disclosure mechanism.

L

LED MULTIMEDIA s.r.o.

ledmultimedia.cz

47

LED MULTIMEDIA s.r.o. operates the largest independent network of large-format LED screens in the Czech Republic, specializing in digital outdoor advertising. The company focuses on leveraging modern LED technology to provide high-visibility advertising solutions adaptable to various weather conditions and client needs. Their business model centers on owning and managing LED advertising spaces, offering clients flexible campaign options and comprehensive service support. The website reflects a professional and consistent brand image, targeting business clients and advertisers within the Czech market. Technically, the site employs modern web technologies including JavaScript libraries, Google Fonts, and tracking via Google Analytics, hosted on VAS Hosting infrastructure. While the site is mobile-optimized and well-structured, it lacks a dedicated privacy policy and explicit security headers, which are areas for improvement. Security posture is moderate with HTTPS usage and cookie consent implemented, but no published security or incident response policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

M

MEDIA MARKETING SERVICES a.s.

hitradiocity.cz

54

Hitrádio City 93,7 FM is a well-established regional radio station based in Prague, Czech Republic, operating since 2005. The website offers multiple live internet radio streams, podcasts, program schedules, contests, and a listener club, targeting a broad audience in the Prague region. The business model centers on media broadcasting and advertising, supported by a professional online presence and active social media channels. The company behind the site is MEDIA MARKETING SERVICES a.s., indicating a medium-sized media entity with a stable market position. Technically, the website employs modern web technologies including Google Tag Manager, Facebook Pixel, jQuery, and CSS frameworks like Foundation. The site is mobile-optimized with good SEO and accessibility features, though some improvements in accessibility could be made. Hosting is managed via Dial Telecom, with secure HTTPS enforced and CSRF protection tokens present, indicating a mature digital infrastructure. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly configured, representing an area for enhancement. No vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are comprehensive and accessible, supporting regulatory compliance. Overall, the website is professional, trustworthy, and safe for general audiences, with no adult or explicit content. The domain registration data aligns well with the business history and operations, reinforcing legitimacy. Strategic recommendations include enhancing security headers, improving accessibility, and publishing a formal security policy and incident response information to further strengthen trust and compliance.

F

Fotbalová asociace České republiky

gol.cz

56

The website www.fotbal.cz is the official online presence of the Football Association of the Czech Republic (Fotbalová asociace České republiky). It serves as a comprehensive platform for football-related news, official publications such as the Časopis Gól magazine, match calendars, and information about clubs and competitions. The site targets football fans, players, clubs, and stakeholders within the Czech football ecosystem, positioning itself as the authoritative source for football governance and media in the country. The business model is non-profit and government-affiliated, focusing on sports governance and media dissemination. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, Facebook Pixel, Smartlook, and various JavaScript libraries for UI and cookie consent management. The site is well-optimized for mobile devices, has good accessibility features, and demonstrates solid SEO practices. Performance is moderate, with asynchronous loading of analytics and tracking scripts. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms. Cookie consent mechanisms are implemented, indicating awareness of privacy regulations. However, the site lacks a publicly accessible privacy policy and terms of service pages, which are important for full GDPR compliance and user trust. No security incident response or vulnerability disclosure information is published, which could be improved. Overall, the website is professional, trustworthy, and content-rich, with strong branding and partner endorsements. The absence of WHOIS data is consistent with CZ NIC policies and does not detract from the site's legitimacy. Strategic recommendations include publishing privacy and terms policies, enhancing security headers, and formalizing incident response disclosures to improve compliance and security posture.

Můj první gól is a Czech grassroots football project focused on supporting young beginner football players and clubs, operated under the Football Association of the Czech Republic (FAČR) and 2Score, s.r.o. The project offers recruitment events, training videos, school physical activity programs, and nutrition education, positioning itself as a recognized leader in youth football development in the Czech Republic, evidenced by its UEFA award. The website is professionally designed with consistent branding and clear navigation, targeting young athletes, their parents, and football clubs. Technically, the site uses modern JavaScript libraries and the Nette framework, hosted by Active24, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and cookie consent mechanisms, though security headers could be improved. No blocking or WAF interference was detected, allowing full content access. Overall, the site demonstrates a mature digital presence with good privacy compliance and trustworthy business information.