Security Directory

Tlapnet s.r.o. operates a customer portal primarily serving its telecommunications customers in the Czech Republic. The portal provides login access for customers to manage their services such as internet, television, and VOIP. The website is professionally designed with a clear structure and good mobile optimization, leveraging modern JavaScript libraries and frameworks including jQuery, Bootstrap, Alpine.js, and the Nette Framework. The domain registration and hosting are consistent with the company's Czech location and business profile, indicating legitimacy and stable operation since 2019. From a security perspective, the site uses secure form practices such as POST method and password input types, but lacks visible HTTP security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences. Contact information is clearly provided, enhancing business credibility. Overall, the website demonstrates a moderate to good security posture but would benefit from implementing formal privacy and cookie policies, security headers, and vulnerability disclosure mechanisms to improve compliance and trust. The technical infrastructure is modern but could be enhanced with better accessibility and SEO optimizations. The risk level is moderate with no critical vulnerabilities detected in the visible content.

A

Aqualia

aqualia.com

68

Aqualia is a large, established Spanish company specializing in the integral management of the water cycle, with participation from FCC Group and IFM Investors. The company focuses on sustainable water management services targeting municipalities and citizens, emphasizing social responsibility and environmental sustainability. The website reflects a mature digital presence built on the Liferay CMS platform, integrating modern technologies such as jQuery, Bootstrap, and Google Tag Manager. It features comprehensive content, clear navigation, and multilingual support, indicating a well-maintained corporate site. Security posture is good with HTTPS and cookie consent mechanisms, though improvements in security headers and explicit incident response policies are recommended. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given its professional presentation and trust signals. Overall, the site is suitable for general audiences and aligns well with corporate and regulatory standards.

I

I love Hummus, s.r.o

beavia.com

61

Beavia is a small Czech Republic-based company specializing in the production and sale of fermented salads, spices, hummus, and instant herbal drinks aimed at promoting easy digestion and healthy living. The company operates an e-commerce platform and distributes products through over 300 retail branches across several European countries, including the Czech Republic, Slovakia, Hungary, Austria, and Germany. Their product lines emphasize organic, vegan, gluten-free, and bio-certified foods, targeting health-conscious consumers. The website is professionally designed with a modern React/Next.js tech stack, providing a good user experience and mobile optimization. Social media presence and retail partnerships enhance brand visibility and trust.

Z

ZX2C4

wireguard.com

61

WireGuard is a modern, high-performance VPN protocol and software project focused on simplicity, security, and speed. The project is led by Jason A. Donenfeld and hosted under the ZX2C4 organization, with strong emphasis on cryptographic soundness and minimal attack surface. The website provides comprehensive technical information, installation guides, and community resources, positioning WireGuard as a leading VPN solution in the technology sector. The digital infrastructure uses modern web technologies and analytics tools, delivering a fast and accessible user experience. Security posture is solid with HTTPS and no exposed sensitive data, though improvements are recommended in security headers and privacy compliance documentation. The absence of WHOIS registration data is unusual but does not detract significantly from the overall trustworthiness given the project's transparency and community presence. Strategic recommendations include publishing privacy and cookie policies, enhancing security headers, and adding a security.txt file to improve vulnerability disclosure processes.

Graphene Themes Solutions is a small technology company specializing in the development and support of WordPress themes, notably the Graphene theme family. With over 1.5 million downloads and a strong community presence, they offer both free and premium themes alongside custom website development services. Their market position is that of a reputable and established WordPress theme provider with a loyal user base. Technically, the website is built on WordPress with WooCommerce integration, leveraging modern web technologies and third-party analytics tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, but lacks important security headers and explicit cookie consent mechanisms. The absence of WHOIS registration data for the domain is a notable anomaly that impacts trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy front for its business, but improvements in security headers, privacy compliance, and domain registration transparency are recommended to enhance trust and compliance.

C

City Digital Media s.r.o

citydigital.cz

53

City Digital Media s.r.o operates a network of digital out-of-home (DOOH) advertising panels across shopping centers, fitness centers, healthcare facilities, and gas stations throughout the Czech Republic. The company offers integrated hardware and software solutions, including an intuitive online content management system and device monitoring, aimed at maximizing brand visibility and customer reach. Their website reflects a professional and consistent brand image, showcasing a broad client base and emphasizing GDPR compliance through privacy policies and consent mechanisms. However, the absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy.

F

Floriánova huť

florianovahut.com

10

Florianova huť is a Czech-based small retail business specializing in handcrafted glass products with a tradition dating back to 1995. The company offers a variety of premium glassware including vases, petrolejové lampy (kerosene lamps), and decorative glass items through an e-commerce platform built on WordPress and WooCommerce. The website demonstrates a professional and consistent brand presence with comprehensive product listings and structured data to enhance SEO. Technically, the site uses modern web technologies and plugins, including Google Tag Manager and Complianz for GDPR compliance, ensuring a good level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS registration data is a notable concern for domain legitimacy, but the website content and functionality suggest a legitimate business. Overall, the site is well-designed, privacy compliant, and user-friendly, targeting general consumers interested in premium handmade glass products.

B

BESIP

besip.cz

60

BESIP is the primary governmental entity responsible for coordinating road safety efforts in the Czech Republic. It operates as an expert body under the Ministry of Transport, focusing on education, awareness campaigns, and safety strategies for various road users including pedestrians, cyclists, drivers, and motorcyclists. The website serves as a comprehensive resource for road safety information, educational materials, and campaign updates, targeting a broad audience from the general public to professionals in the field. Technically, the website is built on ASP.NET WebForms with integration of modern JavaScript libraries such as jQuery, Bootstrap, and Swiper.js. It employs Kentico CMS for content management and includes features like Google Maps integration and social sharing tools. The site is mobile-optimized and demonstrates good SEO practices, although some legacy technology components remain. From a security perspective, the site enforces HTTPS and includes CSRF protection tokens in forms. It implements a cookie consent mechanism aligned with GDPR requirements. However, no explicit security headers were detected, and no public security or incident response policies are available. The absence of WHOIS data limits domain registration transparency, but the official government domain and consistent branding support legitimacy. Overall, BESIP's website is a well-structured, authoritative platform for road safety in the Czech Republic, with a solid technical foundation and good privacy compliance. Enhancements in security headers and public security policies would further strengthen its posture.

R

Rupa

rupa.cz

9

Rupa is a Czech-based manufacturer specializing in the production and development of cereal bars. The company targets B2B clients and distributors within the food manufacturing and retail sectors. The website is built on WordPress using the Elementor framework, indicating a moderate level of digital maturity. The presence of Google Tag Manager suggests some level of analytics and marketing integration. Security posture is adequate with HTTPS enabled, but lacks important security headers and explicit privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS data limits transparency but is common for privacy-conscious domains. Overall, the website presents a professional image suitable for a medium-sized manufacturing business but would benefit from enhanced security and compliance features.

F

František Serbus alias DJ Kolečko

djkolecko.cz

59

DJ Kolečko is a small Czech Republic-based business operated by the Serbus couple, specializing in DJ services for events and custom textile printing including promotional items. Established in 2016, the company has built a niche in event entertainment and personalized merchandise. The website is built on WordPress with WooCommerce and Elementor, integrating modern marketing and tracking tools such as Facebook Pixel and MailerLite. The site is well-designed, mobile-optimized, and provides clear contact information and customer testimonials, enhancing trust and credibility. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is good with HTTPS and no visible vulnerabilities, but security headers and vulnerability disclosure mechanisms are absent.

P

Pivovar Kytín, s.r.o.

pivovarkytin.cz

9

Pivovar Kytín, s.r.o. operates a brewery and restaurant in Kytín, Czech Republic, specializing in traditional Czech beers and cuisine. The business targets beer enthusiasts and local visitors, offering a combination of beer production, dining, events, and accommodation partnerships. The website reflects a small hospitality business with a focus on authentic Czech culinary experiences and craft beer. Technically, the site uses modern web technologies including Next.js, Bootstrap, Google Analytics, and Facebook Pixel, providing a responsive and visually appealing user experience. However, the site lacks explicit privacy and cookie policies, which may impact GDPR compliance. Security posture is moderate with HTTPS usage but missing security headers and vulnerability disclosures. WHOIS data is unavailable, limiting domain legitimacy verification, but the presence of clear contact information and social media integration supports business credibility. Overall, the website is functional and professional but would benefit from enhanced privacy, security, and compliance measures.

V

VAŠE LIGA z.s.

vaseliga.cz

61

VAŠE LIGA z.s. operates a Czech Republic-based sports league platform offering monthly organized matches across multiple sports including squash, badminton, tennis, ping-pong, beach volleyball, and padel. The platform targets active sports enthusiasts in various Czech cities, providing a structured and community-driven sports experience. The website demonstrates a solid market niche with a medium-sized operation and partnerships with local sponsors and foundations. Technically, the site employs a modern JavaScript stack with frameworks like Svelte and jQuery, integrates Google Maps and social media SDKs, and uses Google Tag Manager for analytics and marketing. The site is mobile-optimized and features a cookie consent mechanism aligned with GDPR requirements. Security posture is good with HTTPS enforced and secure login forms, though it lacks some HTTP security headers and explicit incident response contacts. The absence of WHOIS data reduces domain trustworthiness, but the website content and partner references support legitimacy. Overall, the site is professional, user-friendly, and trustworthy for its target audience.

S

STOPNI TO s.r.o.

stopnito.cz

48

STOPNI TO s.r.o. operates the website www.stopnito.cz, providing specialized chip timing and GPS tracking services for various sports events primarily in the Czech Republic. Their offerings include race timing, online results publication, GPS tracking maps, start and finish line equipment, and race registration support. The company targets sports event organizers and participants, positioning itself as a niche service provider with a localized market focus. The website content is professionally presented, with clear navigation and relevant service descriptions, supporting a small business model.

D

D.A.S. právní ochrana

das.cz

70

D.A.S. právní ochrana is a Czech-based legal protection insurance provider with over 20 years of market presence, offering a range of legal insurance products tailored for private individuals, employees, families, and drivers. The company operates under the ERGO Versicherung Aktiengesellschaft pro ČR umbrella, providing comprehensive legal services and insurance packages with clear pricing and accessible customer support. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Alpine.js, Swiper.js, and various analytics and marketing tools. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, the absence of a publicly accessible privacy policy and WHOIS data transparency slightly reduce trust levels. Overall, the site demonstrates a mature digital presence suitable for its industry and audience.

Y

Yedoo

yedoo.eu

56

Yedoo is a European-based company specializing in the design, manufacture, and sale of adult and children's scooters, balance bikes, and children's bicycles. The company targets families and outdoor enthusiasts, offering a range of products with a focus on quality, durability, and design. Their market position is that of a niche manufacturer and retailer with a strong brand presence in the EU, supported by professional customer care and a 5-year frame warranty. Technically, the website employs modern JavaScript libraries such as jQuery, Swiper.js, and Google Tag Manager for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR, but lacks some advanced security headers and explicit incident response contacts. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could improve by adding security.txt and enhancing security headers.

V

Výstaviště Praha

navystavisti.cz

63

Výstaviště Praha operates as the official website for the Prague Exhibition Grounds, providing comprehensive information about events, venue rental, sports, dining, and visitor services. The website targets a broad audience including families, sports enthusiasts, and event attendees, positioning itself as a key local venue with a recognized brand in Prague. The business model focuses on public venue management and event hosting, supported by services such as space rental and an e-shop. Technically, the website employs a modern infrastructure with Google Tag Manager, Google Analytics, Facebook Pixel, Hotjar, and CookieHub for analytics and marketing, hosted by a Czech hosting provider. The site is mobile-optimized with good SEO practices and a cookie consent mechanism ensuring GDPR compliance. Performance is moderate with room for improvement in accessibility. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of explicit security policies and incident response contacts suggests room for maturity. The site uses multiple third-party tracking scripts with user consent, reflecting a balance between analytics needs and privacy compliance. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with no signs of malicious activity or adult content. Strategic recommendations include publishing formal security and incident response policies, enhancing security headers, and considering a vulnerability disclosure policy to further strengthen trust and security posture.

Č

Český svaz koloběhu z. s.

ceskykolobeh.cz

43

Český svaz koloběhu is a Czech non-profit organization dedicated to the promotion and development of scooter sports nationally and internationally. It serves as the governing body for scooter sports in the Czech Republic, organizing events, supporting clubs, and representing Czech interests in international federations such as IKSA. The website provides event calendars, news updates, club information, and registration portals to serve its community of athletes and enthusiasts. Technically, the website is built on WordPress using the GeneratePress theme and several plugins including My Calendar and GP Premium. It uses modern web technologies such as HTTPS, Google Fonts, and jQuery. The site is mobile-optimized and accessible with good SEO practices, though performance is moderate. Hosting is provided by a Czech hosting provider associated with the registrar WEDOS. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers, privacy and cookie policies, and incident response information, indicating room for improvement in compliance and security posture. Analytics are implemented via WP Statistics with moderate user tracking. Overall, the website is professional and trustworthy with consistent branding and active content. The main risks relate to privacy compliance and security best practices. Strategic improvements in these areas would enhance user trust and regulatory adherence.

M

Městská část Praha 7

praha7.cz

66

Městská část Praha 7 operates as the official municipal government website for the Prague 7 district, providing a wide range of citizen services including document processing, social services, education, event information, and official notices. The website targets residents and visitors of the district, offering online appointment booking, problem reporting, and up-to-date news. It holds a solid market position as the authoritative source for local government information in Prague 7. Technically, the website is built on WordPress 5.9.3 with Bootstrap and jQuery frameworks, integrating Google Analytics and Google Custom Search for enhanced user experience and analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a moderate to good level of digital maturity. Authentication is handled via the mojeID service, enhancing security for user login. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. However, it lacks visible security headers such as CSP or HSTS, which could be improved. No exposed sensitive data or vulnerabilities were detected in the HTML content. The absence of WHOIS data reduces trust slightly but is mitigated by the official nature and consistent branding of the site. Overall, the website presents a trustworthy and professional digital presence for the municipal government, with good content quality and user experience. Strategic improvements in security headers and transparency around incident response could further enhance its security posture and compliance.

C

CNL Invest

cnlinvest.cz

49

CNL Invest operates the website Zadosti.cz, a Czech Republic-based platform offering a smart application designed to simplify the process of obtaining confirmations about the existence of engineering networks for construction projects. The company targets builders, IT infrastructure managers, and state employees, providing services that reduce administrative burdens and minimize risks related to errors and delays. The business is positioned as a niche service provider within the real estate and construction sector, founded in 2018, with a small company size and a focused market presence. Technically, the website is built on WordPress using the Elementor page builder, hosted on Azure DNS infrastructure. It employs modern web technologies including Google Tag Manager and Google Analytics for tracking and performance monitoring. The site demonstrates good SEO practices, mobile optimization, and basic accessibility features, delivering a moderate performance experience. From a security perspective, the site uses HTTPS with a good SSL configuration and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not evident, and there is no visible security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a professional and trustworthy digital presence with strong privacy compliance and a clear business focus. Strategic improvements in security headers and incident response documentation would enhance its security posture and trustworthiness.

R

Requestor.com s.r.o.

servicedesk.net

49

Requestor.com s.r.o. is a technology company specializing in advanced helpdesk and ticket management solutions for customer service and internal operations. Their offerings include a cloud-based platform and an on-premises server version, both featuring integrated AI to enhance service delivery. The company targets businesses seeking efficient communication consolidation and ticketing systems. Technically, the website is built on WordPress with modern JavaScript libraries and frameworks, providing a responsive and user-friendly experience. Security posture is solid with HTTPS and no exposed sensitive data, though the absence of security headers and explicit privacy policies indicates room for improvement. The lack of WHOIS data for the domain raises concerns about domain registration transparency, impacting trustworthiness. Overall, the website is professional and functional but would benefit from enhanced compliance and security disclosures.

MyCat.cz is a Czech-based company operated by HN Consulting Brno s.r.o., providing a specialized information system designed to simplify administrative tasks for language schools. The platform offers comprehensive management tools including course scheduling, invoicing, library and publication management, translation tracking, and communication via email and SMS. The system targets language school management, teachers, students, and HR personnel, serving over 95 schools across Central Europe. The website is professionally designed, multilingual, and includes client testimonials that reinforce its market credibility. Technically, the website employs modern web technologies such as Google Tag Manager, Google Analytics, Google Fonts, and popular JavaScript libraries like Swiper.js and Owl Carousel. It is mobile-optimized and structured for good SEO performance. However, there is no evidence of a CMS or hosting provider disclosed. The site includes cookie consent mechanisms and GDPR-related pages, indicating a baseline compliance with privacy regulations. From a security perspective, the site uses HTTPS and includes cookie consent but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or malicious content were detected in the analysis. The absence of WHOIS data for the domain is a concern and reduces the overall trust score, though the website content and contact information appear legitimate. Overall, MyCat.cz presents a solid business offering with a professional web presence and moderate technical maturity. To enhance trust and security posture, the company should address the missing WHOIS data, publish security policies, and implement recommended HTTP security headers.

The website asociacejs.cz is currently inaccessible, presenting a 403 Forbidden error page that blocks any meaningful content access. The domain was registered in 2015 and is hosted on SiteGround, with no privacy protection on WHOIS data, indicating a legitimate registration. However, the lack of accessible content, absence of privacy, cookie, and terms of service policies, and no visible contact or business information severely limit the ability to assess the business or security posture. The technical infrastructure appears basic with no modern frameworks or analytics detected. Security posture is weak due to the lack of security headers and the blocking of access, which may be intentional or misconfigured. Overall, the site scores low on content quality, privacy compliance, and business credibility, resulting in a low overall AI score.

The Adventist Organizational Directory is a long-established, authoritative online resource maintained by the General Conference Corporation of Seventh-day Adventists. It serves as a comprehensive locator and reference for Adventist churches, schools, and other entities worldwide, targeting members, researchers, and the general public interested in Adventist organizational information. The website provides updated contact information and facilitates change requests, differentiating itself from the Adventist Yearbook by including local entities and more frequent updates. Technically, the website employs a custom-built platform leveraging jQuery, jQuery UI, Google Tag Manager, and TrustArc for cookie consent management. It is hosted behind Cloudflare DNS services but lacks DNSSEC, and some scripts are loaded over HTTP, which may introduce mixed content risks. The site demonstrates moderate performance and basic mobile optimization, with room for improvement in accessibility and SEO. From a security perspective, the site enforces HTTPS and uses Cloudflare DNS, but lacks visible security headers and DNSSEC, which are recommended for enhanced protection. The cookie consent mechanism indicates GDPR compliance efforts, although no explicit security or incident response policies are published. Overall, the security posture is moderate with actionable recommendations to improve DNS security, script delivery, and header implementation. The website is trustworthy and professional, with consistent branding and clear organizational affiliation. It does not contain any adult or questionable content, making it safe for general audiences. The domain registration data supports legitimacy with a long history and consistent organizational identity. Strategic improvements in security and technical modernization would enhance the site's resilience and user trust.

K

KlaukeGear

klaukegear.eu

52

KlaukeGear operates an e-commerce platform specializing in branded merchandise and promotional products, targeting businesses and individuals seeking textile items, giveaways, and accessories under the Klauke brand. The website is built on the Shopware 6 platform, offering a product catalog with shopping cart and user account features. The business appears to be a small retail operation with a consistent brand presentation and moderate market positioning in the promotional merchandise niche. Technically, the site uses modern e-commerce technology but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS and CSRF protections but lacks comprehensive security headers and explicit security policies. Privacy compliance is basic with a privacy policy present but no cookie policy or GDPR explicit indicators. Overall, the site is functional and professional but could improve in security and compliance maturity.

주

주식회사 니온밸리코리아

fightersmarket.co.kr

62

Fightersmarket.co.kr is a Korean e-commerce website specializing in Brazilian Jiu-Jitsu apparel, belts, and accessories, operating both online and with a physical store in Seongsu-dong. The business targets martial arts practitioners seeking premium and diverse brands. The website is built on the Godomall platform, leveraging modern JavaScript libraries and integrates analytics and marketing tools such as Facebook Pixel and Naver Analytics. The site is well-structured with good design and navigation, optimized for mobile devices. Security posture is adequate with HTTPS and CSRF tokens, but lacks explicit security headers and privacy compliance mechanisms. WHOIS data shows transparent registration with no privacy protection, consistent with the business profile and domain age. Overall, the site is credible and functional but could improve privacy and security policies.

S

Scramble Ireland

scrambleireland.com

65

Scramble Ireland operates as a specialized e-commerce retailer focused on Brazilian Jiu-Jitsu and grappling apparel and equipment, serving primarily the Irish market. The company offers a range of products including rashguards, shorts, kimonos, belts, and related accessories. Positioned as Ireland's leading BJJ and grappling store, it leverages the Square Online platform for its digital storefront, integrating payment and shipping functionalities seamlessly. The website demonstrates a professional design with good user experience and mobile optimization, supporting both in-store pickup and shipping options. Technically, the site employs modern web technologies including Vue.js and integrates third-party services such as Cookiebot for cookie consent management, Snowplow for analytics, and Sentry for error monitoring. Hosting is managed via Square's CDN infrastructure, ensuring reliable performance. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response information are absent. From a security and compliance perspective, the site implements GDPR-compliant cookie consent mechanisms but lacks a dedicated privacy policy and terms of service pages, which are critical for full compliance and user trust. The absence of WHOIS registration data raises concerns about domain legitimacy, although the professional site presence and integration with reputable payment partners mitigate some risk. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, Scramble Ireland presents a credible and professionally managed online retail presence with room for improvement in privacy documentation and domain registration transparency. Strategic enhancements in compliance documentation and security disclosures would strengthen trust and regulatory adherence.

S

SCRAMBLE AUSTRALIA

scramblestuff.com.au

63

SCRAMBLE AUSTRALIA operates a professional e-commerce website specializing in high-quality martial arts training apparel, including gis, rashguards, shorts, and casual wear, targeting martial arts practitioners in Australia and New Zealand. The website is built on the Shopify platform, leveraging modern web technologies and providing a responsive, well-structured user experience. The business maintains a consistent brand presence across social media channels and offers clear policies for privacy, refunds, and shipping, indicating a mature e-commerce operation. Technically, the site benefits from Shopify's secure hosting and payment infrastructure, with HTTPS enforced and security headers implemented, contributing to a strong security posture. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the domain registration data is privacy-protected but consistent with a legitimate small business. The website content is safe for general audiences and free from adult or explicit material.

ONF Energie Bois is a French network specializing in the sale and distribution of wood energy products including firewood, wood pellets, and forest wood chips. It is developed and associated with the Office national des forêts (ONF), a reputable public forestry organization in France. The website serves as a portal for consumers and professionals to find distributors, estimate consumption, and learn about sustainable wood energy. Technically, the site is built on WordPress with common plugins for SEO, forms, and marketing integrations such as Google Analytics and Brevo. Security measures include HTTPS and Google reCAPTCHA, with visible user warnings about phishing attempts, indicating a proactive security stance. However, the absence of WHOIS registration data and lack of explicit privacy and cookie policies represent compliance and trust gaps. Overall, the site is professional, content-rich, and well-branded but would benefit from enhanced transparency and security headers.

O

ONF Vegetis

onf-vegetis.fr

52

ONF Vegetis is a French company specializing in sustainable management and maintenance of natural spaces, vegetation control, and wooden furniture for natural and urban environments. The company targets professionals seeking expert services in arboriculture, vegetation management, and infrastructure maintenance. The website reflects a mature digital presence with modern technologies such as Vue.js, jQuery, and GSAP, and integrates analytics tools like Matomo and Google Analytics via Google Tag Manager. Privacy and cookie policies are well implemented with a consent mechanism, demonstrating GDPR compliance. However, the site lacks a dedicated security policy and incident response information, which are recommended for enhanced trust and compliance. Overall, the website is professional, secure with HTTPS, and provides clear navigation and relevant content for its audience.

O

ONF International

onfinternational.org

43

ONF International is a French-based consulting and expertise firm specializing in forestry management, sustainable forest practices, and climate change mitigation projects. Operating globally with subsidiaries in Latin America and Africa, it serves both public and private sector clients. The company is a subsidiary of the Office National des Forêts (ONF), leveraging French forestry expertise internationally. The website is professionally designed, multilingual, and provides comprehensive information about its services and projects. Technically, the website is built on WordPress with modern web technologies including Google Analytics, Tag Manager, and reCAPTCHA for security. It uses HTTPS with a valid SSL certificate and implements a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and has good SEO and accessibility basics, though some security headers are missing. From a security perspective, the site shows good practices such as HTTPS enforcement and bot protection on forms. However, it lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. WHOIS data is unavailable due to privacy protection, but the domain and website content appear legitimate and consistent with the business claims. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security policy transparency and enhanced security headers would further strengthen its posture.

O

ONF-Agir pour la forêt

onf-agirpourlaforet.fr

54

ONF-Agir pour la forêt is a French non-profit organization dedicated to raising funds to support projects of general interest in public forests managed by the Office National des Forêts (ONF) and its partners. The website presents a professional and well-structured platform aimed at individuals and enterprises interested in sustainable forest management and biodiversity preservation. The organization positions itself as a key player in environmental conservation within France, leveraging public engagement and corporate sponsorships to finance its initiatives. Technically, the website employs a modern technology stack including Vue.js, jQuery, GSAP, and integrates analytics tools such as Matomo and Google Tag Manager. It uses a proprietary or custom CMS platform and implements cookie consent mechanisms compliant with GDPR. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and uses cookie consent tools, but lacks explicit security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the organization's profile. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations, making it a reliable source for donors and partners interested in forest conservation efforts in France.

A

AUMOVIO Aftermarket GmbH

cryptontechnology.com

62

Continental Aftermarket, operated by AUMOVIO Aftermarket GmbH, is a prominent player in the automotive aftermarket sector, offering a comprehensive range of products including replacement parts, garage equipment, tyres, and specialized vehicle solutions. The company targets automotive professionals, garages, and distributors primarily in the United Kingdom and internationally. The website reflects a mature B2B business model with strong branding and a broad product portfolio. Technically, the website employs modern tracking and consent management technologies, ensuring GDPR compliance and user privacy. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and includes a Content Security Policy, but could enhance security headers further. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or data retrieval issues, which slightly impacts trustworthiness. Overall, the website demonstrates a solid digital presence aligned with Continental's brand standards.

U

Uniroyal

uniroyal-tyres.com

67

Uniroyal is a tire brand specializing in wet weather driving safety, offering products for cars and trucks. The website positions Uniroyal as a brand under Continental with a long history dating back to 1868. The site provides product information, dealer locators, and brand values, targeting both individual consumers and commercial transport businesses. Technically, the website is built on Adobe Experience Manager, uses Google Tag Manager for analytics, and implements consent management for GDPR compliance. The site is well-structured, mobile-optimized, and professionally designed. Security posture is good with HTTPS enforced and consent mechanisms in place, though explicit security headers are not evident. WHOIS data for the domain is unavailable, which reduces trustworthiness and requires further verification. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its audience effectively.

S

Semperit

semperit.com

64

Semperit is a well-established Austrian tyre brand operating under the Continental group, offering a wide range of tyres for cars, SUVs, vans, trucks, and buses suitable for all weather and road conditions globally. The website demonstrates a professional and consistent brand presence with comprehensive product information, multimedia content, and legal documentation, reflecting a mature digital presence. Technically, the site leverages Adobe Experience Manager CMS, integrates dynamic media, and employs modern tracking and consent management tools, indicating a robust digital infrastructure. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and a public security policy suggests room for improvement. The missing WHOIS data for the domain is a notable anomaly that slightly impacts trust but does not detract from the overall legitimacy given the brand's reputation and content quality. Overall, the site is well-designed, user-friendly, and compliant with privacy regulations, making it a trustworthy platform for its target audience.

A

AUMOVIO Aftermarket GmbH

galfer-aftermarket.com

66

GALFER is a well-established brand specializing in premium aftermarket brake products, primarily brake pads, targeting automotive and motorcycle markets internationally. The company operates a professional website with multiple language options and country-specific partner sites, reflecting a mature international presence. The business model focuses on manufacturing and distributing high-performance brake components through a dealer network. Technically, the website employs modern tools such as Google Tag Manager and reCAPTCHA Enterprise, and is built on a CMS platform (likely Umbraco), ensuring a stable and maintainable infrastructure. The site demonstrates good mobile optimization and SEO practices, though accessibility could be improved. Security posture is moderate with HTTPS usage, CSRF protection, and cookie consent mechanisms, but lacks explicit security headers and published security policies. Privacy compliance is strong with GDPR-aligned cookie consent and a comprehensive privacy policy. Overall, the website is professional, trustworthy, and safe for general audiences.

ATE is a globally recognized brand specializing in automotive brake technology and aftermarket products. The company offers a wide range of braking components including disc brakes, drum brakes, brake fluids, hydraulic parts, and related services such as partner finder and certified brake centers. The website reflects a mature business with a consistent brand presence and a focus on both B2B and B2C markets. Technically, the website employs modern web technologies including Google Tag Manager, reCAPTCHA Enterprise, and ConsentManager for cookie compliance, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and bot protection in place, though there is room for improvement in security headers and published security policies. Overall, the site is professional, well-structured, and compliant with GDPR requirements, supporting a trustworthy online presence.

T

Téčko, příspěvková organizace

vratnice.com

63

The website www.vratnice.com represents Téčko, příspěvková organizace, a cultural organization operating the Vrátnice Art & Music Club and Café & Bar in Rožnov pod Radhoštěm, Czech Republic. The business focuses on providing cultural events, music performances, café services, and venue rental, targeting a general audience interested in arts and culture. The website is professionally designed with clear navigation and good mobile optimization, supporting the organization's community engagement and event promotion efforts. Technically, the site uses common JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel, with a cookie consent mechanism ensuring GDPR compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and business information appear consistent and trustworthy. Security posture is moderate with HTTPS enabled but lacks advanced security headers and incident response information. Overall, the site is functional, compliant, and serves its business purpose well, but improvements in security and domain registration transparency are recommended.

F

Fresh Services, s.r.o.

freshservices.cz

53

Fresh Services, s.r.o. is a Czech digital marketing agency established in 2007, specializing in digital marketing and web development services. The company maintains a professional online presence with active social media profiles and a website optimized for SEO and user experience. Their business model focuses on providing marketing and web solutions to businesses primarily in the Czech Republic. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Cookiebot for compliance and analytics. The site is mobile-optimized and uses Google Tag Manager for marketing and tracking purposes. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though additional security headers could improve protection. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

G

Global Assistance a.s.

na1220.cz

56

The website www.na1220.cz represents the Klub nebeských andělů, a project initiated in 2010 by Global Assistance a.s., Aeroklub ČR, and Letecká amatérská asociace ČR. The project focuses on integrating sport pilots into a voluntary traffic reporting network, enhancing public perception of amateur pilots, and coordinating safety in air and ground operations. The site targets the Czech aviation community and provides news, event information, and contact details for engagement. Technically, the site uses a modern CMS (Solidpixels), employs HTTPS with valid SSL, and includes cookie consent mechanisms aligned with GDPR. However, WHOIS data for the domain is unavailable, which impacts domain trustworthiness. Security headers are missing, and no explicit security or incident response policies are published on the site. Overall, the site is well-structured, content-rich, and professionally presented, but could improve in transparency and security best practices.

D

Dobrá Energie

dobra-energie.eu

64

Dobrá Energie is a Czech energy supplier providing electricity and gas services primarily to households and businesses within the Czech Republic. The company positions itself as a stable and fair provider with a strong backing from its parent company epet, part of the EPH group. Their business model focuses on offering competitive energy prices without long-term commitments, supported by a modern customer portal and online contract management. The website reflects a professional and user-friendly digital presence with clear navigation and relevant content for its target audience. Technically, the site employs modern analytics and cookie consent management tools, ensuring compliance with GDPR and providing transparency about data collection. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The lack of publicly available WHOIS data is consistent with privacy protection practices common in commercial domains. Overall, the website and business appear legitimate and trustworthy with a solid market position in the Czech energy sector.

E

ENERGETICKÝ A PRŮMYSLOVÝ HOLDING, a.s.

epholding.cz

48

ENERGETICKÝ A PRŮMYSLOVÝ HOLDING, a.s. (EPH) is a leading Central European vertically integrated energy holding company managing approximately 70 subsidiaries across multiple European countries including the Czech Republic, Slovakia, Germany, Italy, the UK, Ireland, France, and Switzerland. The company focuses on electricity generation, gas and electricity distribution, gas storage, renewable energy production, gas transit, and district heating services. The website presents comprehensive corporate, investor, and sustainability information, reflecting a mature enterprise with a strong market position in the energy sector. The business model centers on managing a diversified portfolio of energy assets and infrastructure to ensure energy security and support energy transition goals.

Z

Zserver s.r.o.

zserver.cz

49

Zserver s.r.o. is a Czech-based small business specializing in webhosting, managed server administration, and web development services, particularly for popular CMS and e-commerce platforms such as WordPress, PrestaShop, and ZenCart. The company has been operating since 2001 and positions itself as a trusted provider for small to medium-sized businesses seeking optimized hosting solutions and related IT services. Their website reflects a professional and consistent brand image with clear service offerings and customer references. Technically, the website is built on WordPress with common plugins like Yoast SEO and Complianz GDPR for privacy compliance. It uses jQuery and Cufon for font rendering and includes Google Analytics and Facebook SDK for tracking and marketing purposes. The site is moderately optimized for performance and mobile use, with good SEO practices but basic accessibility features. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, no advanced security headers were detected, and there is no publicly available security or incident response policy. The WHOIS data for the domain is unavailable, likely due to privacy protection, but the website content and contact information suggest legitimacy. Overall, the security posture is adequate but could be improved with additional headers and published policies. The overall risk assessment indicates a trustworthy and professional small business website with moderate technical maturity and good privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party scripts to maintain a strong security posture.

Levné weby is a small Czech-based web development company specializing in affordable web presentations, e-shops, and SEO consulting services. The company targets small and medium businesses or individuals primarily in the Czech Republic, offering comprehensive web solutions including domain and hosting management, graphic design, content management systems, and ongoing support. The website is professionally designed using WordPress with the Sydney theme and includes GDPR-compliant privacy and cookie policies, reflecting a moderate level of digital maturity. Technically, the site employs standard web technologies such as PHP, jQuery, Bootstrap, and WooCommerce, with cookie consent managed by the Complianz GDPR plugin. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though additional security headers and incident response documentation could enhance protection. Overall, the site is trustworthy and functional, though the absence of direct contact information and WHOIS data limits full business transparency.

E

Reboots – Masážní nohavice pro úlevu a regeneraci nohou ❤️

e-reboots.cz

45

The website e-reboots.cz is an e-commerce platform specializing in massage pants designed to aid in leg recovery and muscle regeneration. The business targets athletes and individuals seeking enhanced physical recovery, positioning itself as a niche player in the wellness and sports retail sector within the Czech Republic. The site features product listings, video content, and endorsements from sports professionals, enhancing its market credibility. Technically, the site is built on WordPress with WooCommerce, leveraging common web technologies such as jQuery and various plugins for UI and marketing integrations. The site is mobile optimized and SEO friendly, with structured data implemented via Yoast SEO. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks advanced security headers and formal incident response information. Privacy compliance is weak due to missing privacy and cookie policies, which poses a risk for GDPR adherence. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security practices.