Security Directory

M

Matějovský

matejovsky-povleceni.cz

56

Matějovský is a Czech-based manufacturer and e-commerce retailer specializing in high-quality bedding and home textile products, including licensed and classic designs in various fabrics such as cotton, satin, and flannel. The website targets consumers looking for premium bedding solutions and related home accessories. The digital infrastructure employs modern web technologies including Bootstrap, Font Awesome, and Google Analytics, supporting a multi-language user experience. Security posture is moderate with HTTPS usage and cookie consent implemented, but lacks visible security headers and explicit privacy policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and partner domains suggest a legitimate business. Strategic improvements in security policies, privacy disclosures, and contact transparency are recommended to enhance trust and compliance.

P

PP Soft s.r.o.

pp-soft.cz

47

PP Soft s.r.o. is a Czech-based technology company specializing in the development of professional custom e-shops, bespoke information systems, and energy information systems (EIS) tailored for energy suppliers. Their market position is focused on delivering integrated solutions that connect e-commerce platforms with ERP systems and energy sector workflows, targeting businesses requiring scalable and customizable digital commerce and management tools. The company showcases a portfolio of clients across various industries, emphasizing B2B and B2C capabilities with multi-currency and multi-language support. Technically, the website employs modern web technologies including HTML5, CSS3, Bootstrap, PHP, and JavaScript frameworks, ensuring responsive design and mobile optimization. The site integrates multiple third-party analytics and marketing tools such as Google Analytics, Smartlook, and Smartsupp, indicating a mature digital marketing infrastructure. However, some security best practices like security headers are not explicitly observed, and no direct contact emails or phone numbers are publicly listed, relying instead on contact forms. From a security perspective, the site uses HTTPS and cookie consent mechanisms aligned with GDPR compliance, but lacks visible incident response contacts or explicit security policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the professional web presence and client references mitigate some risk. Overall, the security posture is moderate with room for improvement in headers and incident response readiness. The overall risk assessment suggests a generally trustworthy and professional business website with moderate technical and security maturity. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, and improving transparency around domain registration and contact information to strengthen trust and compliance.

B

Bloomerang

bloomerang.co

67

Bloomerang is a well-established company founded in 2002, specializing in nonprofit fundraising software and CRM solutions. Their platform offers a comprehensive suite of tools including online giving, peer-to-peer campaigns, auctions, and volunteer management, targeting nonprofit organizations and fundraisers. The company positions itself as a total Giving Platform, aiming to empower fundraisers to increase donations and deepen donor relationships. The website reflects a mature digital presence with professional design, clear navigation, and extensive marketing and analytics integrations. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses a variety of third-party marketing and analytics tools, indicating a sophisticated digital marketing strategy. Security posture is generally strong with HTTPS enforced and domain registration secured, though some improvements such as enabling DNSSEC and publishing security policies could enhance trust. Privacy compliance is an area for improvement as no explicit privacy or cookie policies were found in the provided content. Overall, the website is professional, trustworthy, and well-optimized, serving its target audience effectively.

The website kpmk.eu serves as an informational portal for the Library of the Prague Metropolitan Chapter, focusing on cataloging its historical book collection and related ecclesiastical topics. It targets qualified researchers and scholars interested in the history of the Prague Cathedral and its liturgical institute. The site is built on Joomla CMS with standard web technologies such as jQuery and Bootstrap, providing a moderate level of performance and mobile optimization. However, the site lacks modern security practices such as HTTPS enforcement and security headers, and does not provide privacy or cookie policies, which limits its compliance with GDPR and other privacy regulations. No contact or incident response information is available, which reduces trust and business credibility.

A

ASP Group

aspgroup.pl

59

ASP Group is a well-established distributor specializing in ATVs, UTVs, motorcycle parts, and accessories across Central and Eastern Europe. The company boasts a significant market presence with over 14,000 units sold annually and a network of more than 400 authorized dealers. Their business model focuses on distribution and retail support, complemented by an e-commerce platform. The website is professionally designed, multilingual, and provides comprehensive product and brand information, targeting dealers and end customers in the transportation and retail sectors. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses plugins for GDPR compliance and multilingual support. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses cookie consent management but lacks some advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits transparency about domain registration, but the website's professional presentation and consistent branding support its legitimacy. Contact information is clear and includes phone, email, and physical address. Social media presence further enhances trust. Overall, the site demonstrates a strong business and technical foundation with room for improvement in security policy transparency and vulnerability disclosure. Strategic recommendations include enhancing security headers, publishing security and incident response policies, adding a vulnerability disclosure mechanism, and maintaining regular security audits to strengthen trust and compliance.

A

ASP Group s.r.o.

aspgroup.eu

66

ASP Group s.r.o. is a well-established distributor specializing in ATVs, UTVs, motorcycle accessories, and related products, primarily serving Central and Eastern Europe. With over 24 years of market experience, the company maintains a strong dealer network and a significant market presence, selling over 14,000 units annually. Their website reflects a professional and consistent brand image, targeting dealers and consumers interested in four-wheelers and accessories. Technically, the site is built on WordPress with modern frameworks and includes GDPR-compliant cookie management and analytics integration. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and incident response documentation are recommended. Overall, the site is trustworthy, compliant, and well-positioned in its industry.

Divadlo Semafor is a culturally significant theatre company based in the Czech Republic, offering a variety of theatrical performances and cultural events. The website provides comprehensive information about upcoming shows, ticket purchasing options, and company history, targeting Czech-speaking audiences interested in theatre and culture. The business model centers on live entertainment and ticket sales, supported by an e-shop and newsletter subscription for audience engagement. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, ensuring a responsive and user-friendly experience. However, some areas such as SEO and accessibility could be improved. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published privacy or security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate. Strategic improvements in privacy compliance, security headers, and WHOIS transparency would enhance overall trust and security.

P

Promperú

peru.travel

65

The website www.peru.travel is the official tourism portal for Peru, managed by Promperú, a government entity responsible for promoting tourism and exports. It provides comprehensive travel information, destination guides, and experiences targeting international tourists interested in visiting Peru. The site is professionally designed with consistent branding and uses modern web technologies such as Bootstrap, jQuery, Leaflet maps, and integrates multiple analytics and tracking tools including Google Analytics, Facebook Pixel, Crazy Egg, and Hotjar. The technical infrastructure reflects a moderate level of digital maturity with good mobile optimization and HTTPS security. However, the presence of exposed credentials in client-side JavaScript and the absence of visible privacy and cookie policies indicate gaps in security and privacy compliance. The WHOIS data is unavailable or privacy protected, which is typical for government-related domains to prevent abuse. Overall, the website is trustworthy and authoritative but would benefit from improved security hygiene and privacy transparency.

S

Sonesta Hotel El Olivar

sonestaelolivar.com

9

Sonesta Hotel El Olivar is a premium 5-star hotel located in Lima, Peru, offering luxury accommodation and event hosting services. The website presents a professional and well-structured digital presence built on modern technologies such as Angular and integrates multiple marketing and analytics tools. However, the absence of WHOIS data raises concerns about domain registration legitimacy. Security posture is generally good with HTTPS and modern frameworks, but lacks visible security headers and privacy compliance documentation. Overall, the site is functional and trustworthy from a user perspective but requires improvements in privacy and security transparency.

P

pays.cz s.r.o.

pays.cz

63

Pays.cz s.r.o. operates a payment gateway platform primarily serving merchants and buyers in the Czech Republic. Founded in 2011, the company offers a variety of payment methods including card payments, QR payments, bank transfers, and PayPal, positioning itself as a reliable and flexible payment solution with no monthly fees and transparent pricing. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience of e-commerce merchants and consumers. Technically, the website employs a mature technology stack including jQuery, Bootstrap, and Google reCAPTCHA for security. Hosting appears to be managed by Active24, a known Czech hosting provider. The site is mobile optimized and SEO friendly, though some technologies like jQuery are outdated. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect forms, but lacks explicit security headers and a published security policy. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with cookie and privacy policies present but no explicit consent mechanism. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, Pays.cz demonstrates a solid business and technical foundation with room for improvement in security best practices and privacy compliance. The risk profile is low, but enhancing security headers and formalizing incident response and data protection policies would strengthen trust and resilience.

B

Balíkobot, s.r.o.

balikobot.cz

67

Balíkobot.cz is a Czech-based technology company specializing in shipment automation solutions for businesses. Their platform integrates over 30 carriers and connects with more than 120 ERP, WMS, and e-commerce systems, enabling clients to automate label printing, shipment tracking, and data transfer. The company targets businesses seeking to streamline parcel, pallet, and letter shipping processes, boasting over 5,000 satisfied clients and a strong market presence in the Czech Republic. The website reflects a professional and modern digital infrastructure built on WordPress with Elementor, leveraging common web technologies and marketing tools such as Google Tag Manager and OptiMonk. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though explicit security headers and policies are not published. Privacy compliance is partial, with cookie consent implemented but no clear privacy policy page found. Overall, Balíkobot.cz presents a trustworthy and mature business platform with room for improvement in transparency and security documentation.

D

DPD

dpd.com

72

DPD is a leading international parcel delivery company operating as part of the Geopost group, with a strong presence in over 50 countries and a workforce of 57,000 delivery experts. The company offers parcel delivery services through multiple brands including DPD, Chronopost, SEUR, BRT, Speedy, and Jadlog, serving both business and consumer markets. Their website reflects a mature digital presence with comprehensive service information, interactive tools such as depot finders and shipping cost calculators, and multi-country support.

Z

Přeprava balíků rychle a spolehlivě | Zasilkovna.cz

zasilkovna.cz

63

Zasilkovna.cz is a Czech Republic-based parcel delivery service offering fast and reliable package transportation. The website presents a professional and modern design using Bootstrap and Google Fonts, optimized for mobile devices with good navigation clarity. However, the absence of WHOIS registrant data limits the ability to fully verify domain legitimacy. The site lacks visible privacy, cookie, and terms of service policies, which impacts privacy compliance and trustworthiness. Security posture is moderate with no detected security headers or incident response information. Overall, the website serves its business purpose well but would benefit from enhanced transparency and security practices.

B

Bohemiasoft s.r.o.

webareal.cz

52

Webareal.cz is a Czech-based e-commerce platform provider offering rental solutions for creating and managing online stores. With over 17 years of experience and more than 6500 users, the company provides a comprehensive SaaS model that supports multiple sales channels, payment methods, and a rich ecosystem of over 260 add-ons. The platform targets small to medium businesses and entrepreneurs seeking an easy and scalable e-commerce solution. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and various analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Smartlook, with a strong emphasis on GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though the absence of explicit security headers and a public security policy suggests room for improvement. The lack of WHOIS data is a notable concern for domain legitimacy, but the professional presentation, detailed contact information, and transparent privacy policies support business credibility. Overall, Webareal.cz presents a mature and trustworthy e-commerce platform with moderate technical sophistication and good privacy compliance.

B

Bohemiasoft s.r.o.

bohemiasoft.com

52

Webareal.cz is a Czech-based e-commerce platform operated by Bohemiasoft s.r.o., offering SaaS solutions for creating and renting online shops. The company has been in operation since 2008 and serves a medium-sized market segment with over 6500 users. Their services include e-shop creation, dropshipping, fulfillment, API integrations, and multilingual support, positioning them as a comprehensive e-commerce solution provider in the Czech and European markets. The website is professionally designed, mobile-optimized, and rich in content, supporting a strong business presence. Technically, the website employs modern web technologies including Bootstrap, jQuery, and various marketing and analytics tools such as Google Analytics, Hotjar, and Facebook Pixel. The site is well-optimized for SEO and accessibility, with a responsive design ensuring good user experience across devices. Cookie consent and GDPR compliance mechanisms are implemented effectively, demonstrating attention to privacy regulations. From a security perspective, the site enforces HTTPS and uses consent-based tracking scripts. However, no explicit security headers or incident response policies are found, and WHOIS data is unavailable, which slightly reduces trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security posture is good but could be improved with additional headers and published security policies. The domain WHOIS data is missing, which is unusual and may indicate privacy protection or data unavailability from the CZ NIC registry. Despite this, the website content and business information support legitimacy. The site is free from adult or questionable content and maintains high professionalism and trustworthiness. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts.

A

Akční ceny, aktuální letáky a zajímavé slevy | AkcniCeny.cz

akcniceny.cz

10

AkcniCeny.cz is a Czech Republic-based online platform specializing in aggregating retail flyers, promotional offers, and discounts from various major retail chains. The website serves as a centralized hub for consumers to access current sales, discounted products, and store information, enhancing their shopping experience by providing easy access to promotional content. Operated by MAFRA, a.s., a reputable media company, the platform holds a strong market position within the Czech retail advertising sector. Technically, the website employs modern web technologies including Bootstrap for responsive design, multiple analytics and tracking services such as Google Analytics, Facebook Pixel, and Gemius, and a consent management platform (Didomi) to comply with GDPR regulations. The site is well-optimized for mobile devices and offers a user-friendly navigation structure. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, though it could improve by implementing additional security headers. No WHOIS data was found, which slightly impacts trust assessment but does not detract from the site's legitimacy given its association with MAFRA. Overall, the website demonstrates a mature digital presence with good content quality, technical implementation, and privacy compliance, making it a reliable resource for Czech consumers seeking retail promotions.

J

J&T BANKA

jtbanka.sk

11

J&T BANKA is a well-established Slovak private bank specializing in investment and wealth management services for affluent clients and corporate customers. The website presents a comprehensive portfolio of financial products including investment deposits, bonds, funds, and financing solutions. The company positions itself as a trusted expert in investments with a strong brand presence in Slovakia and a history dating back to 1993. Technically, the website uses modern web technologies such as jQuery, Bootstrap, and Google Tag Manager, and is built on the WebJET CMS platform. It demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though some security headers and explicit security policies are not publicly visible. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with clear contact channels and social media presence. No critical vulnerabilities or suspicious content were detected.

P

POPAI CENTRAL EUROPE

popai.cz

54

POPAI CENTRAL EUROPE is a well-established organization founded in 2001, specializing in retail marketing and in-store communication across Central Europe. The website serves as a hub for members, providing information on events such as POPAI DAY, competitions, educational resources, and networking opportunities. The organization targets retail professionals and marketing specialists, positioning itself as a key player in the retail marketing sector in the Czech Republic and surrounding regions. The business model revolves around membership services, events, and industry collaboration.

D

Dreamind s.r.o.

dreamind.cz

44

Dreamind s.r.o. is a Czech-based digital marketing consulting company established in 2020. The company targets businesses seeking to enhance their digital presence by offering consulting services and marketing strategies. Their website showcases client logos and offers a free initial consultation, indicating a client-focused approach. The business operates primarily in the technology sector within the Czech Republic and maintains a small company size. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, uses Google Fonts and Typekit for typography, and leverages Cloudflare for DNS and CDN services. The site is mobile-optimized with a moderate performance profile. However, SEO and accessibility features are basic, and no CMS or backend platform is explicitly detected. From a security perspective, the website uses HTTPS (implied by Cloudflare usage) but lacks explicit security headers and published security policies. There is no privacy or cookie policy, which is a compliance gap, especially under GDPR. The contact form collects personal data but lacks visible anti-spam or security controls. No incident response or vulnerability disclosure information is provided, limiting transparency in security matters. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, improved security headers, and published policies to strengthen its security posture and regulatory adherence.

G

Golemos s.r.o.

eshop-rychle.cz

57

Eshop-rychle.cz is a Czech-based e-commerce platform operated by Golemos s.r.o., offering entrepreneurs and businesses an easy-to-use SaaS solution to create and manage online stores. The platform emphasizes speed, professional features, modern design, and comprehensive support, targeting small to medium-sized enterprises and individual entrepreneurs seeking to start or enhance their online sales presence. With over 7,000 e-shops relying on their services and a significant annual transaction volume, the company holds a strong market position in the Czech e-commerce sector. Technically, the website employs modern web technologies including JavaScript, jQuery, Bootstrap, and integrates marketing and analytics tools such as Google Tag Manager, Microsoft Clarity, and Exponea. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Cookie consent mechanisms and privacy policies are well implemented, reflecting GDPR compliance. From a security perspective, the site uses HTTPS with good SSL configuration and secure form handling. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No critical vulnerabilities or exposed sensitive data were found. Incident response and security policy information are not publicly detailed. Overall, the website is trustworthy and professional, though the absence of WHOIS data reduces transparency slightly. Strategic recommendations include enhancing security headers, publishing incident response contacts, and maintaining regular audits of third-party scripts to sustain security posture.

D

Destinační management turistické oblasti Beskydy-Valašsko, o.p.s.

beskydycard.cz

35

The Beskydy Valašsko Card website serves as a regional tourism portal promoting a visitor card that offers discounts and benefits across accommodation, attractions, sports, and leisure activities in the Beskydy and Valašsko regions of the Czech Republic. The business operates as a small, regionally focused entity under the organization Destinační management turistické oblasti Beskydy-Valašsko, o.p.s., targeting tourists and visitors seeking enhanced experiences in this area. The website is professionally designed with good content quality, multilingual support, and interactive features such as maps and detailed listings of partners and attractions. Technically, the site employs a modern tech stack including jQuery, Bootstrap, Leaflet.js for mapping, and integrates analytics tools like Google Analytics and Microsoft Clarity. Cookie consent is implemented via CookieHub, ensuring user control over tracking. The site uses HTTPS with a strong SSL configuration but lacks some security headers that could improve its security posture. No WHOIS data is available, which slightly impacts trust but the website content and business information appear legitimate and consistent with a regional tourism service. Security-wise, the site demonstrates good practices such as encrypted connections and cookie consent but could enhance security by adding HTTP security headers and publishing a privacy policy and terms of service. User tracking is moderate with multiple analytics and marketing tools in use, balanced by a clear cookie consent mechanism. Overall, the site is safe, professional, and trustworthy for general audiences. Strategically, the business should focus on improving transparency and compliance by publishing privacy and terms documents, enhancing security headers, and clarifying WHOIS registration details to strengthen trust and regulatory adherence.

H

HRASPO spol. s r.o.

hraspo.cz

57

HRASPO spol. s r.o. is a Czech family-owned company established in 1992 specializing in professional gastronomic equipment and comprehensive services including consulting, design, sales, installation, and certified servicing. The company targets hospitality businesses and healthcare food service providers, positioning itself as a trusted regional player with certified partnerships such as the RATIONAL Premium Partner. The website reflects a professional and consistent brand image with clear business information and multiple service offerings. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, Google Tag Manager, and tracking pixels from Google, Facebook, and Seznam, hosted likely by Active24. The site is mobile optimized and performs moderately well with good SEO practices. Security posture is solid with HTTPS enforced and secure forms, but lacks visible security headers and explicit cookie consent mechanisms. No incident response or vulnerability disclosure policies are published. Overall, the site is trustworthy, safe, and compliant with GDPR basics, though improvements in privacy transparency and security headers are recommended.

T

Textilní zkušební ústav, s.p.

tzu.cz

54

Textilní zkušební ústav, s.p. is a leading Czech company specializing in textile testing, certification, research, and education. The website presents a professional and comprehensive overview of their services, certifications, and industry partnerships, positioning them as a trusted authority in textile quality assurance. Their target audience includes businesses and organizations requiring textile product and system certification, as well as research collaborations. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Slick Slider, with integration of Google Analytics and Facebook Pixel for analytics and marketing. The site is mobile-optimized and well-structured, though some accessibility features could be enhanced. Security posture is solid with HTTPS enforced, but lacks some advanced security headers and explicit privacy/security policies. The absence of WHOIS data limits domain trust verification, but the website's content quality, certifications, and contact transparency support its legitimacy. No WAF or blocking mechanisms were detected, allowing full content access. Privacy compliance is moderate, with cookie consent implemented but no clear privacy policy page. Overall, the site is a credible and professional digital presence for a medium-sized manufacturing service provider in the textile sector, with room for improvement in privacy transparency and security hardening.

Č

ČTPT - Česká technologická platforma pro textil, z.s.

ctpt.cz

43

ČTPT - Česká technologická platforma pro textil, z.s. is a Czech non-profit technology platform focused on advancing the textile industry through research, innovation, and collaboration. Established in 2009, it serves as a hub for textile professionals, researchers, and stakeholders primarily within the Czech Republic. The website provides event announcements, industry news, and resources relevant to the textile sector. Technically, the site uses a traditional web stack including HTML5, CSS, JavaScript with jQuery and Bootstrap frameworks, hosted on Forpsi servers. It integrates Cookiebot for GDPR-compliant cookie consent and Google Tag Manager for analytics, indicating a moderate level of digital maturity. Security posture is basic with HTTPS usage and consent management but lacks explicit security headers and detailed policies. Overall, the site is professional and trustworthy but could improve in privacy transparency and security hardening.

R

RIX, s.r.o.

madambusiness.cz

48

MadamBusiness.cz is a Czech media portal focused on businesswomen and successful women, providing daily news, interviews, and lifestyle content. It complements the print edition of Prosperity Madam Business and offers advertising, newsletters, and PDF editions. The site uses Joomla CMS with a modern tech stack including Google Analytics and advertising integrations. Security posture is good with HTTPS and cookie consent, but lacks published security policies and incident response contacts. WHOIS data is unavailable, which slightly reduces trustworthiness. Overall, the site is professional, content-rich, and well-optimized for users.

A

AGENTURA HELAS, s.r.o.

hnec.cz

39

AGENTURA HELAS, s.r.o. operates a Czech entrepreneurial platform focused on connecting business personalities, supporting business development, and fostering networking among Czech companies. The platform offers membership programs, events, webinars, and verified business contacts, positioning itself as a trusted network for Czech entrepreneurs since 1997. The website is professionally designed, mobile-optimized, and provides comprehensive privacy and cookie policies with user consent mechanisms. Technically, it employs modern web technologies including Bootstrap, jQuery, and Google Analytics, ensuring a moderate performance and good user experience. Security posture is adequate with HTTPS enforced and secure login, though security headers and explicit incident response policies are absent. WHOIS data is unavailable, limiting domain trust verification, but the website content and business information appear legitimate and consistent with a medium-sized Czech business platform.

E

EPRAVO.CZ, a.s.

epravo.cz

51

EPRAVO.CZ, a.s. operates a well-established Czech legal information portal providing comprehensive legal content including laws, court decisions, articles, and educational resources. The platform targets legal professionals and the general public interested in law, offering subscription-based premium services and an e-shop for courses and publications. The website demonstrates a mature digital infrastructure utilizing modern web technologies such as jQuery, Bootstrap, and various analytics and marketing tools. Security posture is solid with HTTPS enforcement, bot protection via Cloudflare Turnstile, and cookie consent mechanisms, although some security headers could be improved. The absence of WHOIS data reduces domain registration transparency but does not detract from the professional presentation and trust signals evident on the site. Overall, the site is a credible and valuable resource in the Czech legal domain.

Vinařství Maláník-Osička s.r.o. is a small family-owned winery based in Mikulčice, Czech Republic, specializing in the cultivation of grapevines and production of quality wines. The business leverages a long-standing family tradition and offers products through an e-shop, wine tastings, and accommodation services. The website is well-structured, mobile-optimized, and provides clear contact information and legal compliance pages such as GDPR and terms of service. The presence of an age verification modal aligns with the nature of the business selling alcoholic beverages. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and Lightbox2, with integration of Google Analytics and Seznam retargeting scripts for marketing and analytics purposes. The site performance is moderate with good mobile responsiveness and basic accessibility features. SEO practices are evident with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS but lacks explicit security headers such as Content-Security-Policy and HSTS, which are recommended to enhance protection. No vulnerability disclosure or incident response contacts are provided, which could be improved. The site does not expose sensitive data and implements an age verification modal, but some hidden SEO spam links to suspicious replica product domains were detected, which could impact trust. Overall, the website presents a legitimate and professional business with moderate security posture and privacy compliance. Strategic improvements in security headers, transparency on security policies, and removal of suspicious hidden links would enhance trust and security posture.

H

Helas Health & Beauty s.r.o.

eternalbyhelena.cz

50

Eternal by Helena is a Czech-based retail company specializing in artistic and holistic lifestyle products, including jewelry, original artworks, therapeutic coloring books, perfumes, and health drinks. The company operates an e-commerce platform offering a diverse product range and workshops, targeting consumers interested in unique handcrafted and wellness-related items. The website demonstrates a consistent brand presence with clear navigation and professional design. Technically, the website employs modern web technologies such as jQuery, Bootstrap, and various UI libraries, ensuring good mobile responsiveness and user experience. The site uses HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, no explicit security headers or security.txt files were detected, indicating room for improvement in security posture. From a security perspective, the site shows good practices like encrypted connections and cookie consent but lacks advanced security policies and incident response information. The absence of WHOIS data limits domain trust assessment, although the website content and contact details appear legitimate. Tracking via Facebook Pixel is present, indicating moderate user tracking. Overall, the website is professionally built and functional with good privacy compliance but would benefit from enhanced security headers, transparency in domain registration, and formalized security policies to strengthen trust and resilience.

A

Agentura Helas, s.r.o.

helas.org

51

Agentura Helas is a Czech-based event management and business networking agency established in 1997. The company specializes in organizing unique social business meetings, connecting prominent Czech business personalities, and providing services such as online expert advice, marketing, media visibility, event organization, and venue rental. The website reflects a professional and consistent brand image targeting Czech entrepreneurs and business owners. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Analytics, and reCAPTCHA, ensuring a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS and CAPTCHA protections, though it lacks some security headers and explicit security policies. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. The absence of WHOIS data transparency slightly reduces trust but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility.

egta Tech Hub is a specialized online portal designed to assist TV and radio companies, along with their sales houses, in discovering and selecting appropriate ad tech solutions and providers. The platform serves as a comprehensive search engine and directory, facilitating better connections between media companies and technology vendors. The website is professionally designed, leveraging WordPress and modern web technologies, and includes privacy and cookie policies compliant with GDPR. However, the absence of WHOIS data for the domain raises some concerns about domain registration legitimacy. The site employs HTTPS and basic security practices but lacks advanced security headers and explicit incident response information.

M

MMN, a.s.

nemjil.cz

60

MMN, a.s. operates as a regional hospital in Jilemnice, Czech Republic, providing a broad range of healthcare services including emergency care, radiology, blood donation, and pharmacy services. The website positions the hospital as a modern and future-oriented healthcare provider emphasizing quality, safety, specialization, and interdisciplinary cooperation. The target audience includes patients, healthcare professionals, and the general public seeking medical services in the region. The hospital maintains an active online presence with social media channels and an e-shop pharmacy partner.

D

Dlabka Distillery

dlabka.cz

50

Dlabka Distillery operates a professional e-commerce website specializing in the sale of distilled spirits such as gin, whisky, and liqueurs. The business targets adult consumers primarily in the Czech Republic, offering a curated selection of products with clear pricing and stock information. The website demonstrates a mature digital presence with modern technologies including Google Analytics 4 and Facebook Pixel for marketing and analytics purposes. The platform is built on the Upgates e-commerce system and uses the Nette framework for form validation and other backend functionalities. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, although HTTP security headers are not visibly configured. The absence of WHOIS data limits domain trust assessment, but the overall site professionalism and content quality suggest a legitimate and trustworthy business. Strategic improvements include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to strengthen trust and compliance.

GASTRO PRODUCTION s.r.o. is a Czech-based manufacturing company specializing in stainless steel catering equipment and custom project solutions for the hospitality industry. With over 35 years of experience and a strong presence in the EU market, the company offers a broad portfolio including cooling, heating, and neutral equipment. Their business model focuses on delivering tailored solutions with a commitment to quality and customer satisfaction. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting business clients in hospitality and catering sectors. Technically, the site is built on WordPress using modern libraries and frameworks such as Bootstrap and jQuery, providing a moderate performance and good mobile optimization. However, there is room for improvement in accessibility and SEO optimization. Security posture is basic with HTTPS enabled but lacking important security headers and cookie consent mechanisms, which may affect compliance with privacy regulations. No incident response or security policy information is provided, indicating potential gaps in security governance. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the company.

1

1188

1188.cz

59

1188.cz is a Czech Republic-based telecommunications service provider specializing in 24/7 telephone directory assistance and information services. The company offers a nonstop hotline (1188) that helps users find phone numbers, business hours, traffic updates, and service providers. The website is built on Drupal 11 and employs modern web technologies to deliver a responsive and user-friendly experience. While the site is professionally designed and content-rich, it lacks explicit privacy and cookie policies, as well as security incident response information. The domain is well-established since 2006, indicating a stable business presence. Security posture is moderate with HTTPS usage but missing security headers and vulnerability disclosures.

S

STS Education

sts-education.be

64

STS Education is an established education service provider based in Belgium, specializing in facilitating secondary education programs for international students seeking study opportunities in countries such as the United States, United Kingdom, and Ireland. The company positions itself as a trusted facilitator for students aiming to experience international schooling adventures. The website reflects a professional and consistent brand image, targeting international secondary students with clear program offerings and support services. Technically, the website is built on WordPress with modern frameworks like Bootstrap and employs SEO best practices through Yoast SEO. It integrates multiple analytics and advertising pixels, indicating a mature digital marketing approach. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms compliant with GDPR, and includes standard security headers, though it lacks a publicly visible security policy or incident response contact. The WHOIS data is restricted due to registry policy, but no suspicious indicators were found. Overall, the site demonstrates a good security posture and digital maturity appropriate for its business domain.

D

Darkmay s.r.o.

cestovnisystem.cz

56

Darkmay s.r.o. operates the CeSYS platform, a comprehensive SaaS solution for travel agencies primarily in the Czech Republic and neighboring countries. The platform offers multiple products including search engines, web design, sales management, and marketing tools tailored for travel agencies. With over 16 years of market presence and partnerships with major travel industry players, CeSYS holds a strong position in its niche. The website demonstrates a mature technical infrastructure leveraging modern web technologies and analytics tools with user consent mechanisms. Security posture is generally good with HTTPS and consent-based tracking, though explicit privacy and security policies are lacking. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

U

UNIWEB s.r.o.

regionplzen.cz

51

REGIONPLZEN.CZ is a well-established regional news and information portal serving the Plzeňský kraj region in the Czech Republic. Operated by UNIWEB s.r.o., the portal offers daily news, a business directory, event calendars, job listings, and regional advertising services. The website targets local residents and businesses, providing relevant and timely regional content. The portal has a consistent brand presence and is supported by a parent media group, REGION24.CZ.

R

Region24

region24.cz

53

Region24 is a Czech regional media group operating a network of regional online news portals and thematic websites, reaching over one million users annually. The business model focuses on regional news publishing, online advertising, and SEO services. The website is professionally designed with consistent branding and clear navigation, targeting a general audience interested in regional news across multiple Czech regions. Technically, the site uses modern front-end technologies including Bootstrap and jQuery, hosted by Active24, with moderate performance and good mobile optimization. Security posture is moderate with HTTPS assumed and no visible exposed sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and legitimate, supporting the business credibility. Strategic improvements in privacy compliance and security practices are recommended to enhance trust and compliance.

R

RRAS o.p.s.

bilastopa.cz

32

Bílá stopa is a Czech regional website dedicated to providing comprehensive information about cross-country skiing trails in the Šumava region. It offers current trail conditions, maps, webcams, and financing details, targeting skiing enthusiasts and tourists interested in outdoor winter activities. The website is supported by regional partners including local government and tourism organizations, enhancing its credibility and community focus. Technically, the site is built on WordPress with a modern tech stack including jQuery, Bootstrap, and several plugins for content management and GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS and implements a cookie consent mechanism, but lacks visible HTTP security headers and formal security policies. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable security posture. Overall, the site is trustworthy and serves its niche audience effectively, though improvements in privacy policy transparency and security headers are recommended.

H

HUMLNET CREATIVE s.r.o.

hucr.cz

43

HUMLNET CREATIVE s.r.o. is a Czech Republic-based small web development agency specializing in creating custom, modern, and professional websites tailored to client needs. Their market position is that of a regional service provider with a portfolio of local clients including schools, companies, and organizations. The company emphasizes a collaborative and tailored approach to web design and development, offering multilingual and responsive websites. Technically, the website is built on a modern stack including Bootstrap, jQuery, and OctoberCMS, with integration of Facebook SDK and Google Analytics for marketing and analytics purposes. The site is mobile-optimized and features a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and secure form handling, though additional security headers could improve defenses. The absence of WHOIS data reduces transparency but the website content and business information appear legitimate and professional. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, with moderate security maturity.

BYD Trutnov, operated by Autostyl a.s., is an authorized dealership and service center specializing in electric vehicles and plug-in hybrids from the BYD brand. Positioned as the first BYD representative in the Trutnov region of the Czech Republic, the company focuses on delivering modern, eco-friendly mobility solutions to local consumers. The website reflects a professional business presence with clear branding, comprehensive product offerings, and accessible customer contact points. Technically, the website is built on a modern stack including October CMS, Bootstrap, and JavaScript libraries such as Swiper.js and jQuery. It is mobile-optimized and includes SEO best practices like meta tags and Open Graph data. Google Tag Manager is used for analytics and tracking, with a cookie consent mechanism that aligns with GDPR requirements. From a security perspective, the site enforces HTTPS and implements cookie consent controls, but lacks visible security headers which could enhance protection against common web threats. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data raises concerns about domain legitimacy and should be investigated further. Overall, the website presents a trustworthy and professional front for the business, but improvements in security headers and domain registration transparency are recommended to strengthen trust and compliance.

4

42 Barcelona

42barcelona.com

53

42 Barcelona is a pioneering educational campus focused on programming and digital skills, offering a fully subsidized, peer-to-peer, gamified learning experience without traditional professors. Supported by Fundación Telefónica and local government entities, it targets individuals over 18 years old seeking flexible, innovative education to enter the labor market. The website reflects a mature digital presence with modern technologies, comprehensive privacy and cookie policies, and strong partner affiliations. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though additional security headers and formal incident response policies could enhance trust. WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and partnerships support legitimacy.

4

42 Heilbronn gGmbH

42heilbronn.de

59

42 Heilbronn gGmbH operates a tuition-free, full-time coding school in Heilbronn, Germany, offering an innovative peer-to-peer learning model without traditional teachers. The school targets aspiring coders aged 18 and above, providing a unique educational experience supported by a strong network of partners and scholarships. The website reflects a professional and modern digital presence, built on Contao CMS with Bootstrap and jQuery, and integrates consent management and analytics tools to ensure GDPR compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though additional security headers and incident response information could enhance trust. Overall, the site is well-structured, accessible, and trustworthy, supporting the organization's mission to empower future coders.

4

42 Málaga Fundación Telefónica

42malaga.com

55

42 Málaga is a non-profit educational institution focused on providing free, peer-to-peer programming education to individuals over 18 years old. Supported by Fundación Telefónica and local government entities, it offers a unique gamified and flexible learning environment open 24/7. The website reflects a professional and consistent brand image aligned with its mission and partners. Technically, the site is built on WordPress with modern libraries and includes security features such as HTTPS and Google reCAPTCHA. Privacy and cookie policies are comprehensive and GDPR compliant, with clear user consent mechanisms. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy. Overall, the site demonstrates a strong security posture and good digital maturity, serving its educational audience effectively.

F

Fundación Telefónica

42madrid.com

53

42 Madrid is a free, innovative programming campus located in Madrid, Spain, supported by Fundación Telefónica. It offers a peer-to-peer, gamified learning experience accessible 24/7, targeting individuals over 18 years old with no prior programming knowledge required. The institution positions itself as a disruptive educational model focused on digital skills demanded by the labor market. Technically, the website is built on WordPress with modern libraries and includes security features such as HTTPS and Google reCAPTCHA. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. However, WHOIS data is unavailable, which slightly reduces transparency. Overall, the site is professional, trustworthy, and well-optimized for users.

Jižní Čechy is a regional tourism website dedicated to promoting the South Bohemia region of the Czech Republic. The site offers comprehensive information about local destinations, events, and activities such as cycling, hiking, and cultural festivals. It targets tourists and visitors interested in exploring the natural and cultural heritage of South Bohemia. The business model focuses on providing informational content and promoting regional tourism attractions. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Fonts, and various analytics and marketing tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and Sentry for error tracking. The site is mobile optimized and features a cookie consent mechanism, indicating some level of privacy compliance. However, explicit privacy and terms of service pages are not found. From a security perspective, the site uses HTTPS and includes no visible sensitive data exposure. However, no security headers were detected in the HTML source, which is a potential area for improvement. The lack of WHOIS data and registrant information reduces the domain trustworthiness, although the website content and technical setup appear professional and legitimate for a tourism portal. Overall, the site presents a moderate risk profile with good content quality and technical implementation but with gaps in privacy compliance and domain registration transparency. Strategic recommendations include adding explicit privacy and terms pages, implementing security headers, and improving contact information visibility to enhance trust and compliance.

The Global TV Group is an international coalition of broadcasters and sales houses trade bodies across multiple continents, focused on promoting television as an effective advertising and media platform. The website serves as an informational and advocacy platform, hosting webinars, industry news, and member information. The technical infrastructure is based on WordPress with a modern plugin ecosystem including Slider Revolution and Contact Form 7, providing a responsive and professional user experience. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though security headers and policies could be improved. The absence of WHOIS data for the domain is a notable concern, reducing trust in domain legitimacy despite the professional presentation. Privacy and cookie policies are missing, which impacts compliance and user trust. Overall, the site is functional and credible within its niche but would benefit from enhanced transparency and compliance documentation.

A

A WP Life

awplife.com

64

A WP Life is a small technology company specializing in the development and sale of premium WordPress themes and plugins, as well as offering website development services. Established in 2015, the company targets WordPress users and developers seeking professional, responsive, and SEO-friendly digital products. Their market position is that of a niche provider with a focus on quality and customization. The website demonstrates a good level of digital maturity, leveraging WordPress CMS with modern plugins and frameworks such as Elementor, Bootstrap, and CookieYes for privacy compliance. The site is well-structured, mobile-optimized, and regularly updated with blog content, supporting a positive user experience. From a security perspective, the website employs HTTPS with good SSL configuration and uses cookie consent mechanisms aligned with GDPR requirements. While no explicit security policy or incident response information is published, the presence of Wordfence-related scripts suggests some level of security monitoring. There are no detected vulnerabilities or exposed sensitive data. However, improvements could be made by implementing security headers and publishing formal security policies. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It effectively supports its business model of selling WordPress digital products and services. The risk profile is low, with no critical security or compliance issues detected. Strategic recommendations include enhancing security headers, publishing incident response contacts, and enabling DNSSEC for domain security.