Security Directory

T

TAH reklamní agentura, s.r.o.

tah.cz

41

TAH reklamní agentura, s.r.o. is a Czech Republic based advertising and communication agency operating since 2007. The company offers a broad range of services including branding, graphic design, web development, online marketing, PR, animation, and virtual tours. It holds Google certifications and maintains an active online presence, positioning itself as a professional and trusted local agency. The website is well-structured, content-rich, and provides clear contact information and service descriptions. Technically, the site uses ASP.NET WebForms with Telerik controls, Leaflet for mapping, and integrates Google Tag Manager and Analytics for tracking. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks advanced security headers and explicit security policies. WHOIS data is unavailable, which limits domain trust verification, but the website content and business details suggest legitimacy. Overall, the site scores well in content quality, technical implementation, and business credibility, with room for improvement in security and privacy compliance.

P

Pivovar Hradecký Klenot

hradeckyklenot.cz

42

Pivovar Hradecký Klenot is a small, regionally focused brewery located in Hradec Králové, Czech Republic, specializing in traditional Czech lagers and specialty beers. The business operates both a physical brewery with hospitality services and an online e-shop for direct sales. The website reflects a professional and consistent brand presence with clear contact information and social media integration. The inclusion of an age verification modal demonstrates compliance with legal requirements for alcohol-related content. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Facebook Pixel, supporting a moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though the absence of security headers and explicit privacy policies indicates room for improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

G

GAPA cz a.s.

gapa-servis.cz

56

GAPA cz a.s. is a Czech-based manufacturing company specializing in concrete batching plants, industrial scales, and metal fabrication. Founded in 1990, it has established itself as a leading provider in its sector with a comprehensive service offering including 24/7 support and project realization. The company targets business customers in construction, industrial weighing, and metal fabrication industries, operating primarily in the Czech Republic. The website reflects a professional business presence with clear service descriptions and contact information. Technically, the site uses a moderate technology stack including jQuery, Google Tag Manager, and EasyWeb CMS, with basic mobile optimization and SEO practices. Security posture is moderate with cookie consent implemented but lacks visible security headers and explicit security policies. WHOIS data is missing, which reduces domain trustworthiness, but the website content and business information appear legitimate. Overall, the site scores well on content quality and business credibility but could improve in security and privacy compliance.

M

Magnalink, a.s.

magnalink.cz

31

Magnalink, a.s. is a Czech regional internet service provider offering high-speed internet, digital television, VOIP telephony, and camera security systems primarily targeting households and businesses in the Hradec Králové region. The website presents a professional and consistent brand image with clear service offerings and customer testimonials, indicating a stable market position within the telecommunications sector. The technical infrastructure includes modern JavaScript libraries and tracking technologies, with a cookie consent mechanism supporting GDPR compliance. Security posture is adequate with HTTPS enabled, but lacks some recommended security headers, suggesting room for improvement. WHOIS data is unavailable due to privacy protection, which is common and justified for this business type. Overall, the website is trustworthy and functional, with moderate risk due to limited security header implementation and missing explicit privacy policy.

S

STYLBAU, s.r.o.

stylbau.cz

57

STYLBAU, s.r.o. is a Czech Republic-based general contractor specializing in construction of residential, industrial, and civic buildings. The company presents itself as a reliable and professional construction firm with a medium-sized operation and a focus on delivering comprehensive building services including design, engineering, and post-construction support. Their website is well-designed, SEO-optimized, and mobile-friendly, reflecting a mature digital presence. The technical infrastructure is based on WordPress with modern plugins and frameworks, ensuring good performance and user experience. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data reduces domain trustworthiness, but the professional content and clear contact information support business credibility. Overall, the website is a strong digital asset for the company, with recommendations to enhance privacy policy visibility and security practices.

FOMA BOHEMIA spol. s r.o. is a well-established Czech manufacturer specializing in black and white photographic materials, radiodiagnostic films, and non-destructive testing (NDT) systems. Founded in 1921, the company has a long tradition and serves a niche market including photography professionals and industrial customers. Their business model includes manufacturing and direct sales through an e-shop partner site. The website reflects a consistent brand image and provides comprehensive product information and company history. Technically, the site is built on the EasyWeb CMS platform, utilizing modern JavaScript libraries and Google Analytics for user tracking. The site is mobile-optimized with good navigation and content quality. Security-wise, the site implements cookie consent mechanisms but lacks visible HTTP security headers and published security policies. The absence of WHOIS data reduces domain trust, though the website content and contact information appear legitimate. Overall, the site scores well on content and business credibility but could improve privacy compliance and security posture.

E

euroAWK s.r.o.

euroawk.cz

67

euroAWK s.r.o. is a medium-sized Czech Republic based company specializing in outdoor advertising, particularly billboards and citylight vitrines. It is part of the Freund group headquartered in Koblenz and is recognized as one of the largest providers of outdoor advertising in Europe. The company offers a portfolio of advertising media including municipal furniture and provides services such as campaign documentation, monitoring, and printing. The website is professionally designed with good content quality and consistent branding, targeting businesses seeking outdoor advertising solutions in the Czech market. Technically, the site uses modern JavaScript libraries and analytics tools, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit incident response policies. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the overall business credibility remains moderate to good. Strategic recommendations include improving security headers, publishing incident response and vulnerability disclosure policies, and enhancing accessibility features.

H

Heraeus Medevio

heraeus-medevio.com

64

Heraeus Medevio is a specialized contract design, development, and manufacturing company serving the medical device industry, particularly in areas such as cardiac rhythm management, neuromodulation, electrophysiology, and vascular access. The company leverages extensive expertise in materials science and advanced manufacturing technologies to support OEMs in bringing high-quality medical devices to market. The website reflects a mature digital presence with comprehensive content, clear navigation, and a professional design consistent with its healthcare industry focus. Technically, the site employs modern frameworks such as Vue.js and Nuxt.js, managed via Magnolia CMS, and integrates industry-standard analytics and consent management tools. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policy and incident response information are absent. WHOIS data is not publicly available, likely due to privacy protection, but the site’s linkage to the Heraeus Group parent company and professional presentation support its legitimacy. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy and authoritative resource in its sector.

B

Bureau Veritas Latvia

bureauveritas.lv

68

Bureau Veritas Latvia operates as a local branch of the global leader in testing, inspection, and certification services. The company offers a broad portfolio of services including quality, safety, environmental certifications, verification services for emissions and sustainability, inspections, audits, and professional training. Their market position is strong, supported by global brand recognition and multiple accreditations. Technically, the website is built on Drupal 10, integrates modern consent management and analytics tools, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with GDPR, providing a reliable digital presence for the business.

Ž

Žurnāls Santa SIA

manizurnali.lv

38

Žurnāls Santa SIA operates the website manizurnali.lv, a Latvian media platform specializing in magazine subscriptions and e-magazines. The company targets Latvian-speaking readers and offers a broad portfolio of magazine titles. The business model is subscription-based, supported by advertising services. The website reflects an established regional media presence with consistent branding and good content quality. Technically, the site is built on Drupal CMS, integrates modern analytics and consent management tools, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and GDPR-compliant consent mechanisms, though formal security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

The World Lottery Association (WLA) operates a professional website serving as a global industry association for state-authorized lotteries and gaming organizations. The site offers resources including industry standards, knowledge sharing, events, and publications targeted at lottery operators and regulators worldwide. The organization is well-established with a domain registered since 1999 and headquartered in Switzerland. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Cookiebot for cookie consent management, hosted behind Cloudflare DNS services. The site is mobile-optimized with a moderate performance profile and uses Google Analytics and Tag Manager for tracking and marketing purposes. Privacy compliance is well addressed with clear cookie and privacy policies and a consent mechanism. From a security perspective, the website uses HTTPS and enforces domain transfer restrictions. However, DNSSEC is not enabled, and security headers are not explicitly detected in the provided data. No critical vulnerabilities or exposed sensitive data were found. The site demonstrates good security hygiene but could improve by enabling DNSSEC and implementing additional security headers. Overall, the website is trustworthy, professional, and compliant with GDPR requirements. It lacks explicit contact information and terms of service pages in the scanned content, which could be areas for improvement. The content is safe for general audiences with no adult or questionable material detected.

L

LAMAX

lamax.cz

71

LAMAX operates a professional e-commerce website specializing in electric mobility products such as e-quads, e-scooters, and e-dirtbikes, alongside photo and video equipment and audio accessories. The company targets consumers interested in reliable and durable everyday technology, positioning itself as a niche player with a focus on quality and fair pricing. The website is built on the Shopify platform, leveraging modern web technologies and integrations with major analytics and marketing tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, GDPR-compliant cookie consent, and no visible vulnerabilities, although some improvements like DNSSEC and explicit security policies could enhance trust further. Overall, the site presents a trustworthy and professional online presence suitable for its market segment.

B

Butlers.cz

butlers.cz

53

Butlers.cz is a Czech Republic-based e-commerce retailer specializing in design furniture and stylish home accessories. The website targets consumers who enjoy enhancing their homes with timeless furniture, decorative items, and unique gift ideas. The company operates both online and through physical stores in multiple Czech cities, indicating a solid market presence. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, and IntersectionObserver API for user interaction tracking. The hosting and CDN services are provided by i00.eu, ensuring moderate performance and good mobile optimization. Security-wise, the site uses HTTPS and some security best practices, although explicit security headers are not fully evident. Privacy and cookie policies are present with consent mechanisms, reflecting GDPR compliance. However, WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for commercial sites. Overall, Butlers.cz demonstrates a mature digital presence with a good balance of business credibility, technical implementation, and privacy compliance.

P

penShop

penshop.cz

57

penShop.cz is a specialized Czech e-commerce retailer focused on branded writing instruments, drawing, and calligraphy supplies. With approximately 20 years of market presence, it offers a broad product catalog and operates a physical store in Prague, enhancing customer trust and service quality. The website is built on the Shoptet platform, leveraging common web technologies including jQuery, Google Tag Manager, and Facebook SDK for marketing and analytics. The site is well-structured, mobile-optimized, and includes GDPR-compliant privacy and cookie policies. Security posture is generally good with HTTPS enforced and CSRF protections in place, though the use of an outdated jQuery version presents a potential vulnerability. No blocking or WAF challenges were detected, allowing full content accessibility. Overall, penShop.cz demonstrates a professional and trustworthy online presence suitable for its retail business model.

D

Dřevobox.cz

drevobox.cz

54

Dřevobox.cz is a Czech Republic-based e-commerce retailer specializing in wooden products and custom engraving services. The website offers a wide range of wooden goods including boxes, furniture, kitchen utensils, decorations, and fashion accessories, targeting general consumers interested in quality wooden items and personalized gifts. The business model is primarily online retail with a focus on craftsmanship and customization. The site is well-branded and professionally designed, providing clear navigation and a comprehensive product catalog.

D

DronPro

dronpro.cz

73

DronPro is the largest drone specialty retailer in the Czech Republic, established in 2015. The company focuses on selling drones, providing education on drone usage, and offering consultancy on drone legislation. Their market position is strong within the Czech drone community, supported by a high customer rating and a physical store in Prague. Technically, the website uses modern web technologies including jQuery, Google Tag Manager, and Cookiebot for GDPR compliance, hosted behind Cloudflare DNS and CDN services. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

T

Textilshop.at

textilshop.at

59

Textilshop.at is an Austrian-based e-commerce retailer specializing in high-quality textiles including carpets, tablecloths, bedding, and custom-sized textile products. The company positions itself as a regional provider of premium textile goods, targeting general consumers seeking quality home textiles. The website demonstrates a consistent brand presence with active social media channels and a cookie consent mechanism, indicating awareness of privacy regulations. Technically, the site is built on a Laravel framework and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Mailchimp, and Smartsupp Live Chat, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, though the absence of security headers and published privacy policies suggests room for improvement. Overall, the site is functional and professional but would benefit from enhanced transparency and security best practices.

C

Centralplast s.r.o.

centralplast.cz

59

Centralplast s.r.o. is a Czech manufacturing company specializing in custom plastic products, including luxury pools, rainwater tanks, boats, and industrial containers. With over 30 years of tradition, the company serves customers across Europe, positioning itself as a trusted provider of high-quality, tailor-made plastic solutions. The website reflects a professional and consistent brand image, targeting both B2B and B2C audiences interested in bespoke plastic manufacturing. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and popular libraries like Swiper.js for UI components. It integrates Google Tag Manager, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and provides a good user experience with clear navigation and multilingual support. From a security perspective, the site uses HTTPS and includes Google reCAPTCHA in its forms, enhancing protection against automated abuse. However, it lacks several important security headers such as X-Frame-Options and a robust Content-Security-Policy, which are recommended to improve security posture. Privacy compliance is partially addressed with a comprehensive privacy policy and GDPR consent on forms, but no explicit cookie consent mechanism was detected. Overall, Centralplast's website demonstrates a solid business credibility and technical foundation with room for security and privacy improvements. The domain registration data aligns well with the company's history and location, supporting legitimacy. No signs of malicious activity or content safety concerns were found.

E

ELTON hodinářská, a.s.

prim.cz

65

ELTON hodinářská, a.s. operates the PRIM Manufacture 1949 website, representing a well-established Czech watch manufacturer with a heritage dating back to 1949. The company offers a range of mechanical and battery watches, limited editions, accessories, and related services including repairs and customization. Their market position is that of a premium local brand targeting watch enthusiasts, collectors, and corporate clients. The website reflects a medium-sized business with consistent branding and professional content. Technically, the site uses modern marketing and analytics tools such as Google Tag Manager, Google Ads, and Mailkit for newsletter management. The CMS appears custom-built, supporting multilingual content and responsive design. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security policy or incident response information is published. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements.

P

PENTA FUND

pentafund.com

58

Penta Fund presents itself as a well-established investment fund specializing in private equity and real estate, boasting over €5.5 billion in assets and 30 years of investor confidence. The website is professionally designed using WordPress and Elementor, with moderate performance and good mobile optimization. It employs modern analytics tools such as Microsoft Clarity and Google Tag Manager. However, the absence of WHOIS registration data for the domain raises significant concerns about the legitimacy and trustworthiness of the website. Additionally, the lack of explicit privacy, cookie, and terms of service policies, as well as missing contact information, detracts from its compliance and transparency. Security posture is moderate with HTTPS enabled but missing important security headers and incident response information.

B

Biskupství brněnské

biskupstvi.cz

53

The website www.biskupstvi.cz serves as the official online presence of the Brno Diocese, a religious non-profit organization in the Czech Republic. It provides comprehensive information about diocesan activities, events, news, pastoral services, charity, and education. The site targets the Catholic community, clergy, and parishioners in the Brno region, offering resources and contact channels to support their spiritual and community needs. The business model is centered on community service and information dissemination rather than commercial activities. Technically, the website employs modern web technologies including Bootstrap for responsive design, jQuery, Owl Carousel for interactive elements, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. Media assets are hosted on Microsoft Azure Blob Storage, indicating a reliable hosting infrastructure. The site is mobile-optimized with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS, includes multiple security headers, and uses secure forms with validation. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a visible cookie consent mechanism and does not publish security or incident response policies, which are recommended for compliance and transparency. Overall, the website is trustworthy, professionally maintained, and serves its community well. The absence of public WHOIS data is typical for Czech domains managed by CZ NIC and does not detract from the site's legitimacy. Strategic improvements include implementing cookie consent, publishing security policies, and enhancing accessibility to further strengthen compliance and user trust.

C

Centrum pro rodinu a sociální péči

trojlistek.com

10

Centrum pro rodinu a sociální péči operates the Trojlístek service, a non-profit initiative established in 2012 in the Czech Republic. The organization focuses on connecting children, parents, and substitute grandmothers to foster intergenerational relationships. The website reflects a well-structured, family-oriented social service platform with clear contact information and active social media presence. The business model is community and support driven, targeting families and mature women interested in volunteering as substitute grandmothers. The organization maintains a consistent brand and provides comprehensive information about its services and activities.

S

Scaserv

leseni-bedneni.cz

47

Scaserv operates a Czech Republic-based business specializing in the rental of construction equipment including scaffolding, formwork, mobile fencing, stairs, walkways, waste chutes, mobile toilets, and containers. The company targets construction professionals and individuals requiring temporary building structures, offering both short- and long-term rental options with online inquiry capabilities and multiple physical branches in major Czech cities. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, enhancing user experience and trust. Technically, the website employs modern JavaScript libraries such as jQuery, integrates Google Tag Manager and Analytics for tracking, and uses Google reCAPTCHA v3 for bot protection. Cookie consent mechanisms are implemented in compliance with GDPR, and the site uses HTTPS with a presumably strong SSL configuration. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates good practices with encrypted connections and user consent for cookies, but lacks detailed security policies and incident response contacts. The absence of WHOIS data for the domain reduces trust from a domain registration standpoint, though the website content and contact details appear legitimate and professional. Overall, the site presents a solid business presence with good technical implementation and privacy compliance, but would benefit from improved transparency in security policies and domain registration information to enhance trustworthiness and security posture.

S

STUDENT AGENCY TRAVEL k.s.

jazykovepobyty.cz

59

STUDENT AGENCY TRAVEL k.s. operates the website jazykovepobyty.cz, providing language stays abroad primarily targeting children, adults, professionals, and schools. The company is positioned as a large, established player in the Czech education and travel market, offering language courses, school trips, and related travel services. The website is well-branded and integrates with other STUDENT AGENCY services such as RegioJet and Dovolena.cz, indicating a broad service ecosystem. Technically, the site uses legacy jQuery and OpenCms CMS, with modern marketing and tracking tools like Google Tag Manager and OneSignal push notifications. Security posture is moderate with room for improvement, especially in updating libraries and implementing security headers. Privacy compliance is good with clear cookie and privacy policies and GDPR adherence. Overall, the site is professional and trustworthy but would benefit from technical modernization and enhanced security controls.

S

STUDENT AGENCY TRAVEL k.s.

regiojethotels.cz

55

Regiojethotels.cz is a professionally managed hospitality website operated by STUDENT AGENCY TRAVEL k.s., offering a network of hotels, cottages, and pensions primarily in the Czech Republic and Austria. The business targets families, skiers, tourists, and corporate groups seeking self-service lodging with half-board dining options. The website demonstrates a mature digital presence with modern technologies such as React and Next.js, integrated with Google Tag Manager for analytics and marketing. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is trustworthy, user-friendly, and well-positioned in its niche market.

S

STUDENT AGENCY TRAVEL k.s.

dovolena.cz

66

STUDENT AGENCY TRAVEL k.s. operates dovolena.cz, a comprehensive online travel platform offering a wide range of holiday packages, flight tickets, train and bus tickets, travel insurance, and related services primarily targeting Czech and German travelers. The company is well-established, with a domain age dating back to 2000, and maintains a strong market position supported by multiple subsidiaries and partnerships. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content relevant to its audience. Technically, the site leverages modern frameworks such as Next.js and React, integrates Google Tag Manager and reCAPTCHA for analytics and security, and enforces HTTPS with strong security headers. Privacy and cookie policies are comprehensive and GDPR compliant, with an active consent mechanism. Contact information and trust indicators such as certifications and memberships are clearly presented, enhancing business credibility. No critical security issues or content safety concerns were detected.

S

STUDENT AGENCY TRAVEL k.s.

studentagency.cz

65

STUDENT AGENCY is a well-established Czech travel company offering a broad range of travel services including flight tickets, bus tickets, vacations, and language stays. With a market presence spanning over 30 years, it holds a strong position in the transportation sector in the Czech Republic. The website reflects a professional and comprehensive online travel agency platform targeting travelers seeking affordable and convenient travel options. The company operates multiple related domains serving different travel needs, indicating a diversified service portfolio. Technically, the website is built on modern frameworks such as Next.js and React, incorporating Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. Security measures include HTTPS enforcement and standard security headers, contributing to a robust security posture. However, the absence of visible privacy and cookie policies, as well as lack of WHOIS transparency, slightly reduce the overall trust and privacy compliance score. No explicit incident response or vulnerability disclosure information is found, which could be improved to enhance security transparency. Overall, the site is secure, professional, and trustworthy with room for improvement in privacy and compliance documentation. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, enhancing WHOIS data transparency, and establishing clear security incident response and vulnerability disclosure channels to strengthen compliance and trust.

S

STUDENT AGENCY TRAVEL k.s.

sa.cz

66

STUDENT AGENCY TRAVEL k.s. operates a comprehensive online travel platform primarily serving the Czech Republic. The company offers a wide range of travel-related services including flight tickets, bus tickets, holiday packages, language stays, hotel bookings, and travel insurance. With a market presence of over 30 years, it holds a strong position in the regional travel market, targeting travelers, students, and general consumers seeking affordable and convenient travel options. The website reflects a mature business model with multiple related domains and a consistent brand identity. Technically, the website is built on modern frameworks such as Next.js and React, leveraging Google Tag Manager and reCAPTCHA v3 for analytics and security. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing a seamless user experience. Security best practices are observed, including HTTPS enforcement and security headers, although explicit security policies and incident response details are not publicly disclosed. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. Contact information is transparent, enhancing business credibility. However, the absence of WHOIS data and vulnerability disclosure mechanisms slightly reduce trust scores. Overall, the site is professional, secure, and trustworthy, suitable for general audiences without any adult or questionable content.

Z

Zabbix

zabbix.com

77

Zabbix is a globally recognized enterprise-class open-source network and application monitoring solution. The company offers a comprehensive suite of products including on-premise software, a fully managed cloud platform, professional services, and extensive training and certification programs. Their market position is strong, supported by a large deployment base and trusted by Fortune 500 companies and government entities. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site uses modern JavaScript libraries and tracking tools, with good performance and mobile optimization. Security posture is solid with HTTPS enforced and published security policies, though some security headers could be improved and a cookie consent mechanism is missing, which may affect GDPR compliance. Overall, the business credibility is high, supported by case studies, partner programs, and active community engagement. The WHOIS data is unavailable or protected, which is a minor concern but does not detract from the overall trustworthiness given the company's established reputation.

S

Statutární město Hradec Králové

hk800.cz

49

The website hk800.cz is the official digital platform for the 800th anniversary celebrations of the city of Hradec Králové in the Czech Republic. It serves as a comprehensive resource for cultural events, exhibitions, and community engagement activities related to the milestone. The site is operated by the city government, providing authoritative and trustworthy information to residents and visitors. The business model is centered on governmental and cultural event promotion, supported by partnerships with local businesses and media. The website demonstrates a consistent brand identity aligned with the city’s heritage and celebration theme. Technically, the site is built on Joomla CMS with a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience such as carousels and lazy loading. It integrates Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing purposes, all managed with a cookie consent mechanism ensuring GDPR compliance. Hosting and domain registration are consistent with Czech providers, and the site shows good mobile optimization and SEO practices. From a security perspective, the website enforces HTTPS and uses cookie consent banners to comply with privacy regulations. While explicit security headers are not fully visible in the provided data, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website’s purpose and geographic location, indicating legitimacy. However, the site lacks explicit security policies or incident response contacts, which could be improved. Overall, the website is a well-structured, professional, and trustworthy platform for the city’s anniversary celebrations. It balances user experience, privacy compliance, and technical soundness effectively, though there is room for enhancement in security policy transparency and advanced security headers implementation.

K

Královehradecký kraj

kr-kralovehradecky.cz

63

Královehradecký kraj operates an official regional government website providing comprehensive information about the regional administration, public services, news, and community resources. The site targets residents and stakeholders within the Královéhradecký region of the Czech Republic, offering key services such as contact directories, grant information, and cultural portals. The website is built on a modern Drupal 10 CMS platform, utilizing contemporary web technologies including Bootstrap and Google Tag Manager, ensuring a responsive and accessible user experience. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms compliant with GDPR, reflecting a mature privacy posture. However, the absence of security headers and a security.txt file indicates room for improvement in security best practices. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The lack of WHOIS data is unusual but likely due to registry or query limitations rather than malicious intent, given the official nature of the site. Overall, the website demonstrates a solid technical infrastructure and professional presentation consistent with government standards. It maintains good privacy compliance and user trust indicators, including clear contact information and social media engagement. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding a vulnerability disclosure policy to further strengthen security posture.

W

WBSC Europe

wbsceurope.org

68

WBSC Europe is the official continental governing body for baseball, softball, and Baseball5 in Europe. It operates under the World Baseball Softball Confederation umbrella and provides governance, event organization, rankings, development, and anti-doping services to its member federations and stakeholders. The website is professionally designed with good content quality and clear navigation, targeting sports organizations, athletes, officials, and fans interested in baseball and softball in Europe. Technically, the site uses modern frameworks such as Bootstrap and integrates multiple advertising and tracking services, including Google Tag Manager and Amazon Ads. Security posture is strong with HTTPS and security headers properly configured, though the absence of a privacy policy and terms of service pages indicates room for improvement in privacy compliance. WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and affiliation with a known international sports federation support its legitimacy. Overall, the site is a credible and functional platform for its intended audience.

C

Canada Cup

canadacup.com

62

Canada Cup is a well-established, non-profit organization operating Canada's largest international softball tournament since 1998. The organization focuses on providing elite-level competition and exposure for young female athletes, supported by a strong volunteer base and community engagement. The website reflects a mature digital presence with integrated ticketing, registration, and live streaming services, targeting athletes, volunteers, and spectators. Technically, the site is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and third-party platforms for event management. Security posture is solid with HTTPS and domain locking, though improvements are recommended in DNS security and privacy compliance. Overall, the site is professional, trustworthy, and content-rich, serving its audience effectively.

ZIMNÍ STADION KUŘIM s.r.o. operates a local ice hockey and recreational sports facility in the Czech Republic, targeting youth and recreational players. The website presents a professional and well-structured digital presence with clear information about services such as ice rink rental, public skating, sports equipment sales, hospitality, and accommodation. The company maintains active social media channels and provides a contact phone number for customer engagement. Technically, the website uses modern web technologies including Google Analytics and CookieHub for analytics and cookie consent management. Security posture is adequate with HTTPS enforced, though security headers and incident response information are lacking. Privacy compliance is partially addressed through cookie consent but lacks explicit privacy and terms of service pages. WHOIS data is unavailable, indicating privacy protection, which reduces transparency but does not raise immediate concerns given the professional website content. Overall, the site is safe, well-maintained, and suitable for its target audience.

C

Coqui

coqui.ba

60

Coqui.ba is a Bosnian e-commerce website specializing in the retail of certified footwear products including slippers, sandals, and clogs for women, men, and children. The company positions itself as a regional footwear brand offering comfortable and health-conscious products, supported by third-party laboratory certifications. The website targets a general audience in Bosnia and Herzegovina and surrounding regions, leveraging a modern WordPress and WooCommerce infrastructure with Elementor for design and layout. Marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Microsoft Clarity, and Sendinblue are integrated to support customer engagement and tracking. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, though improvements in security headers and privacy compliance mechanisms are recommended. Overall, the site demonstrates good professionalism, trustworthiness, and business credibility with clear contact information and social media presence.

P

Plugo s.r.o.

plugo.cz

51

Plugo s.r.o. is a Czech-based digital marketing agency specializing in PPC campaigns, SEO, custom e-shop and website development, and content creation. With over 15 years of experience, they serve clients primarily in the Czech Republic and Austria, focusing on delivering tailored digital solutions that enhance online visibility and business growth. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site employs modern web technologies including Google Tag Manager, GSAP, and cookie consent mechanisms, ensuring a good user experience and moderate performance. Security posture is adequate with HTTPS and cookie consent, but lacks explicit security headers and published privacy policies, which are areas for improvement. The absence of WHOIS data limits domain trust assessment, but the presence of detailed contact and company registration information supports business credibility. Overall, the site is safe, professional, and well-structured, though it would benefit from enhanced privacy compliance and security best practices.

C

Contimex spol. s r.o.

contimex.cz

66

Contimex spol. s r.o. is a Czech strategic advertising and digital agency operating since 1993, specializing in marketing strategies, digital marketing, creativity, production, and event organization. The company serves business clients seeking comprehensive marketing solutions and maintains a professional web presence with client testimonials and a clear team structure. Technically, the website uses modern web technologies including Google Tag Manager and CookieHub for cookie consent management, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit privacy policies are absent. The absence of WHOIS data limits domain legitimacy verification, but the website content and contact information suggest a trustworthy and established business. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in privacy compliance and security best practices.

K

Kubíček Balloons

kubicekballoons.cz

55

Kubíček Balloons is a Czech-based manufacturer specializing in hot air balloons, offering innovative and reliable products inspired by pilot needs. The company provides a comprehensive range of services including pilot training, custom balloon design, and sales of stock balloons. Their market position is strong within the ballooning community, supported by decades of experience and a reputation for quality and innovation. The website is professionally designed, mobile-optimized, and rich in content, targeting balloon pilots and enthusiasts globally. Technically, the site employs modern JavaScript frameworks and libraries, with good SEO and accessibility features. Security posture is solid with HTTPS, security headers, and privacy compliance, though it lacks explicit incident response and vulnerability disclosure information. Overall, the site is trustworthy and well-maintained, with a moderate risk profile primarily due to the absence of public WHOIS data and some missing policy pages.

A

Agency Vista LLC

agencyvista.com

67

Agency Vista LLC operates a leading online platform that connects brands with over 50,000 verified digital marketing agencies. Founded in 2019 and based in the United States, the company provides an all-in-one solution for marketing agencies to claim profiles and for businesses to find suitable marketing partners. The website is built on a modern React and Gatsby stack, leveraging AWS DNS and integrated with Google Analytics and HubSpot for marketing and analytics. The platform demonstrates strong digital maturity with excellent design, mobile optimization, and SEO practices. Security posture is solid with HTTPS enforcement, domain locking, and cookie consent mechanisms, though DNSSEC is not enabled and explicit security policies are absent. Overall, the site is professional, trustworthy, and well-positioned in the marketing technology sector.

A

AS Balticom

balticom.lv

55

AS Balticom is a well-established telecommunications provider based in Latvia, offering high-speed internet, digital and analog television, and telephony services primarily in Riga. As the third largest internet and TV provider in the region, Balticom focuses on delivering quality services to both residential and business customers. The website reflects a professional and consistent brand image with clear service offerings and customer engagement channels. Technically, the site employs modern JavaScript libraries and tracking tools, ensuring a responsive and user-friendly experience across devices. Security measures such as HTTPS and reCAPTCHA are implemented, though there is room for improvement in security policy transparency and HTTP security headers. Overall, the site demonstrates a mature digital presence with moderate to high security posture and compliance with privacy regulations.

D

Delska

deac.lv

79

Delska operates as a sustainable data center provider in Northern Europe, particularly focusing on the Baltic region. The company emphasizes green energy usage, GDPR compliance, and robust security, positioning itself as a leading medium-sized player with over 25 years of experience. Their business model centers on providing environmentally friendly data center services to enterprises requiring secure and compliant hosting solutions. The website content is professionally presented with consistent branding and clear messaging targeting enterprise customers interested in sustainable IT infrastructure. Technically, the website employs modern web technologies including Bootstrap, Material Design Icons, and Google Fonts, hosted behind Cloudflare DNS services. It integrates multiple third-party analytics and marketing tools such as Google Analytics, Meta Pixel, Twitter Pixel, Reddit Pixel, and Hotjar, managed through Google Tag Manager. Cookie consent is managed comprehensively via Cookiebot, ensuring GDPR compliance. The site is mobile-optimized and performs moderately well, though accessibility features are basic. From a security perspective, the site enforces HTTPS, uses domain transfer locks, and implements CSRF protection cookies. However, DNSSEC is not enabled, and explicit security policies or incident response contacts are not published. No critical vulnerabilities or exposed sensitive data were detected. The domain is newly registered but consistent with the business's claims, suggesting a recent domain acquisition or rebranding. Overall, the website presents a trustworthy and professional front with good privacy compliance and security posture. Strategic improvements include enabling DNSSEC, publishing detailed security and incident response policies, adding terms of service, and enhancing accessibility. These steps would further strengthen the company's digital maturity and trustworthiness.

W

Wellness Kuřim s.r.o.

halakurim.cz

53

Sportovní hala Kuřim is a local sports facility operated by Wellness Kuřim s.r.o., providing a variety of sports venues and services including a sports hall, inflatable summer hall, beach volleyball courts, athletic area, aquapark, fitness center, and football fields. The website targets local sports enthusiasts and community members, offering reservation systems and event information. The business operates in the hospitality sector with a small company size and a clear focus on community sports engagement. Technically, the website employs common web technologies such as Google Analytics, Facebook SDK, and Google Maps API, with a moderate performance and good mobile optimization. The site uses HTTPS and secure form submissions but lacks advanced security headers and published privacy or terms of service documents, indicating room for improvement in security and compliance maturity. Security posture is adequate with HTTPS and secure forms but missing security headers and privacy policy reduce overall security confidence. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is a concern for domain legitimacy and trustworthiness, although the website content and contact information appear professional and consistent. Overall, the website is functional and professional but would benefit from enhanced security practices, published privacy and terms policies, and improved transparency regarding data protection to increase trust and compliance.

A

as4u.cz, s.r.o.

mladoboleslavsko.eu

64

The website www.mladoboleslavsko.eu serves as the official regional tourism portal for the Mladá Boleslav area in the Czech Republic. It provides comprehensive information on tourist regions, nature, history, culture, sports, accommodation, events, and local attractions. The site targets tourists and visitors interested in exploring this region, offering services such as event calendars, photo galleries, a mobile app, and an e-shop. The business behind the site appears to be a small regional tourism promotion entity, operated by as4u.cz, s.r.o., a Czech company specializing in publishing and editorial systems.

K

Knihovna Bakov

knihovnabakov.cz

52

Knihovna Bakov is a local public library and museum located in Bakov nad Jizerou, Czech Republic. The institution offers a variety of cultural and educational services including book lending, audiobooks, internet access, copying services, and organizes events and exhibitions. The website is well-structured, providing detailed information about the library and museum, upcoming events, and recent news posts. The target audience primarily consists of local residents, visitors interested in regional history, and readers. The business model aligns with a public or non-profit cultural institution serving the community. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Contact Form 7. It uses Google Analytics and Google Tag Manager for visitor tracking. The site is mobile-optimized and has good SEO practices. However, there is a lack of visible security headers and no explicit privacy or cookie policies, which are areas for improvement. HTTPS is properly implemented, ensuring secure communication. From a security perspective, the site shows a moderate security posture with no evident vulnerabilities in the HTML content. The absence of WHOIS data for the domain is a concern, reducing trustworthiness from a domain registration perspective. The site does not expose sensitive data and uses standard security practices but would benefit from enhanced security headers and compliance documentation. Overall, the website is a credible and professional representation of a local cultural institution but should address privacy compliance and domain registration transparency to improve trust and security posture.

M

město Židlochovice

koupalistezidlochovice.cz

60

Koupaliště města Židlochovice is a municipal swimming pool facility providing recreational services including multiple pools, playgrounds, and refreshment areas. The website is hosted on the Webnode platform as a subdomain, which explains the absence of WHOIS data for the subdomain. The site targets local residents and visitors, offering family-friendly leisure activities. Technically, the site uses modern web standards, is mobile optimized, and employs Google Tag Manager for analytics. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy policies. Overall, the site is functional and trustworthy but could improve compliance and security practices.

J

JRWN

jerewan.cz

42

JRWN is a small, flexible web design and development agency based in Brno, Czech Republic, specializing in custom websites, e-shops, and graphic design. They emphasize a full-service approach including design, development, hosting, and automation using their own CMS platform. The website is professionally designed with clear navigation and good mobile optimization, targeting a broad client base from small to large businesses across various industries. Technically, the site uses modern web technologies including Google Tag Manager and Google Fonts, but lacks visible security headers and explicit privacy or terms of service pages. The security posture is moderate with cookie consent implemented but missing other key security policies and disclosures. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and contact information appear legitimate and professional. Overall, the site scores well on content quality and business credibility but should improve privacy compliance and security practices.

R

RegioJet a.s.

regiojet.cz

69

RegioJet a.s. is a well-established transportation company founded in 2009, operating primarily in the Czech Republic and across Europe. The company offers train and bus ticketing services with a strong focus on customer service and convenience. Their website reflects a mature digital presence with multilingual support, comprehensive travel options, and integration with partner services such as hotel bookings and language stays. The company holds a strong market position as a leading private transport operator in Central Europe. Technically, the website is built on modern frameworks such as Next.js and React, leveraging Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile-optimized, fast, and accessible, with good SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the security posture is robust, though the site lacks a dedicated security policy and incident response contact information. No critical vulnerabilities or suspicious activities were detected. The domain registration data aligns well with the business history, supporting legitimacy and trustworthiness. The risk assessment is low, with recommendations focusing on enhancing transparency around security policies and incident response. The company demonstrates a professional and trustworthy online presence suitable for its business sector.

O

OPPORTUNITY, spol. s r.o.

alpinecentrumbrno.cz

58

OPPORTUNITY, spol. s r.o. operates the Alpine Store Brno, a specialized automotive dealership focusing on Alpine sports cars, with a modern showroom in Brno, Czech Republic. The company has a long history in automotive sales and racing, positioning itself as a key player in the regional luxury sports car market. The website is professionally designed, mobile-optimized, and provides clear contact information and business details. Technically, it uses modern JavaScript libraries and integrates multiple marketing and analytics tools with appropriate cookie consent mechanisms. Security posture is good with HTTPS and obfuscated emails, though some security headers could be improved. The domain is newly registered, which aligns with a new brand initiative rather than the company's founding date. Overall, the site is trustworthy and well-maintained.

D

dacia

dacia.cz

68

The website www.dacia.cz serves as the official Czech Republic portal for the Dacia automobile brand, providing comprehensive information on new and used vehicles, financing options, insurance, and after-sales services. It targets consumers in the Czech market interested in affordable and hybrid/electric vehicles. The site demonstrates a mature digital presence with modern technologies such as React, optimized images, and integration with Google Analytics and Tag Manager for marketing and analytics purposes. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks explicit privacy policy and security headers, which are recommended for enhanced compliance and protection. The absence of WHOIS data reduces domain trustworthiness, but the branding and content strongly indicate legitimacy as an official brand site. Strategic recommendations include publishing clear privacy and terms policies, adding security headers, and providing contact information for security incidents and data protection officers.

SAKO Brno, a.s. operates a waste collection yard in Brno, Czech Republic, targeting businesses, entrepreneurs, tradesmen, and citizens. The company offers a wide range of waste acceptance services including sorted waste, construction debris, hazardous waste, bio waste, electronic waste, and functional appliances. The website supports online appointment booking to streamline customer service. Technically, the website uses modern JavaScript libraries such as jQuery and integrates Google Tag Manager and CookieHub for analytics and cookie consent management. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, HTTPS is used and cookie consent is implemented, but explicit security headers and incident response information are lacking. WHOIS data is unavailable, limiting domain trust analysis. Overall, the website is functional, professional, and compliant with GDPR cookie requirements, but could improve security posture and transparency.