Security Directory

EPONA z.s. is a Czech non-profit organization established in 1999, specializing in hippotherapy and rehabilitation services using horses. The organization serves clients with neurological and orthopedic conditions, offering ambulatory and intensive therapy sessions, educational courses, and social programs such as summer camps. It holds recognized certifications and official status from the Czech Hippotherapy Society, positioning it as a reputable provider in its niche healthcare sector. The website is built on WordPress with a moderate technical infrastructure, including common plugins and sliders, and hosted likely by Wedos, a Czech provider. The site is well-structured, mobile-optimized, and provides comprehensive content in Czech, targeting families with handicapped children and healthcare professionals. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit incident response information. Overall, the site is trustworthy and professionally maintained, though improvements in security headers, contact information clarity, and SEO could enhance its digital maturity.

The domain ckpalava.cz currently hosts only a Webnode placeholder error page indicating the domain is available for registration and website creation. There is no active business content, contact information, or privacy and security policies present. The website is hosted on the Webnode platform with content delivered via Cloudfront CDN. The technical infrastructure is basic and lacks modern security headers or SSL configuration details visible in the content. The absence of business information and compliance documentation indicates the domain is not currently in active commercial use.

M

Modrá pomáhá, z.s.

modrapomaha.cz

42

Modrá pomáhá, z.s. is a Czech non-profit organization dedicated to supporting children with autism through a variety of services including therapies, social skills training, and recreational activities. The organization operates locally with partnerships from regional companies and foundations, positioning itself as a trusted community resource. The website reflects this mission with clear service offerings and partner acknowledgments. Technically, the site is built on WordPress using WPBakery Page Builder, with standard libraries like jQuery and Google Analytics integrated. The site is hosted by REG-ZONER, a Czech hosting provider, and uses HTTPS ensuring secure connections. However, some security best practices such as security headers and cookie consent mechanisms are missing. No direct contact emails or phone numbers are visible, suggesting reliance on contact forms for communication. Overall, the website is professional and trustworthy but could improve privacy compliance and security posture.

P

Premiere Cinemas Praha Hostivař

premierecinemas.cz

46

Premiere Cinemas Praha Hostivař operates as a regional multiplex cinema chain in the Czech Republic, offering movie screenings with advanced audio-visual technology such as Dolby Atmos and 4K projection. The website provides detailed programming schedules, online ticket booking, and loyalty programs, targeting general moviegoers and families. The presence of multiple regional subdomains indicates a medium-sized business with a local market focus. Technically, the website uses modern JavaScript libraries and tracking tools, with a custom CMS platform. Security posture is adequate with HTTPS and consent management but lacks advanced security headers and published policies. The absence of WHOIS data limits domain trust assessment but the website content and branding appear legitimate and professional.

JAKUB Group operates as a medium-sized company in the energy sector, specializing in the distribution and e-commerce of electrical products such as cables, lighting, modular devices, and electrical appliances. The company maintains a strong regional presence across the Czech Republic and Slovakia through multiple subsidiaries and branch offices, serving primarily B2B customers including electricians and contractors. The website reflects a professional business with a clear product catalog and contact mechanisms, although direct contact details like emails and phone numbers are not explicitly provided. Technically, the website employs legacy JavaScript libraries such as jQuery 1.10.2 and fancybox 2.1.5, which may pose security risks. The site uses Google Tag Manager for analytics but lacks a cookie consent mechanism, indicating partial privacy compliance. Mobile optimization and accessibility are basic, and no advanced CMS or hosting details are evident. Security headers are not detected, and the WHOIS data is unavailable, limiting domain legitimacy verification. From a security perspective, the site benefits from HTTPS but suffers from outdated libraries and missing security headers. The absence of WHOIS data and cookie consent reduces trust and compliance scores. No explicit incident response or security policies are found. Overall, the site is functional and professional but requires updates to improve security posture and privacy compliance. The overall risk assessment suggests moderate risk primarily due to technical and compliance gaps. Strategic recommendations include updating JavaScript libraries, implementing security headers, adding cookie consent, and improving transparency with contact and policy information.

JAKUB Group operates a Czech-based business specializing in the distribution and sale of electrical products such as cables, lighting, modular devices, and related accessories. The company maintains a professional website with a product catalog, supplier listings, and a B2B e-commerce platform. It has multiple branch locations across Czechia and Slovakia, indicating a medium-sized enterprise with a regional presence. The website content is primarily in Czech and targets B2B customers in the energy sector. Technically, the website uses legacy JavaScript libraries like jQuery 1.10.2 and integrates Google Analytics and Tag Manager for tracking. While the site is accessible and professionally designed, it lacks modern security headers and cookie consent mechanisms, which are important for compliance and security. The WHOIS data is not publicly available, likely due to privacy protection, which is common for commercial entities but reduces transparency. Overall, the website is functional and credible but would benefit from technical and security updates.

JAKUB Group operates the Dabok brand website, serving as a regional distributor and retailer of electrical products primarily in the Czech Republic. The company offers a broad product catalog, supplier listings, and an e-shop platform targeting electrical professionals and businesses. The website is professionally designed with clear navigation and multiple branch locations highlighted, indicating a medium-sized enterprise with a solid market presence in the energy sector. Technically, the website employs legacy JavaScript libraries such as jQuery 1.10.2 and Fancybox 2.1.5, alongside Google Analytics and Google Tag Manager for tracking. While the site is accessible and moderately optimized for performance and mobile use, it lacks modern security headers and cookie consent mechanisms, which are important for compliance and security posture. Security-wise, the site uses HTTPS but does not implement advanced security headers or explicit incident response policies. The absence of WHOIS data raises concerns about domain transparency and legitimacy, although the website content and business network suggest a legitimate operation. No critical vulnerabilities or exposed sensitive data were detected, but updating libraries and enhancing privacy compliance are recommended. Overall, the website scores moderately well in content quality, business credibility, and technical implementation but has room for improvement in security and privacy compliance. Strategic enhancements in these areas will strengthen trust and regulatory adherence.

JAKUB Group operates the e-centrum.cz website, a regional electrical supplies distributor primarily serving Moravia, Silesia, and parts of the Czech Republic and Slovakia. The company offers a broad catalog of electrical products, supplier listings, and an e-shop, supported by multiple branch locations. The website is professionally designed with clear navigation and relevant content targeting electrical professionals and businesses. Technically, the site uses legacy JavaScript libraries such as jQuery 1.10.2 and fancybox, alongside Google Analytics and Tag Manager for tracking. While the site is accessible and functional, it lacks modern security headers and uses outdated libraries, which may expose it to vulnerabilities. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. The WHOIS data is unavailable, reducing domain trustworthiness, though the business presence and partner domains suggest legitimacy. Overall, the site demonstrates moderate digital maturity with room for security and compliance improvements.

JAKUB Group operates the website elkas.cz, serving as a distributor and retailer of electrical materials, lighting, and related products primarily in the Czech Republic and Slovakia. The company has a long-standing presence with multiple branch locations and a professional e-commerce platform. The website content is well-structured, targeting professional electricians and industry customers. Technically, the site uses legacy JavaScript libraries such as jQuery 1.10.2 and includes Google Analytics and Tag Manager for tracking. While the site is accessible and functional, it lacks modern security headers and uses outdated libraries, which pose potential security risks. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms. WHOIS data is unavailable, indicating privacy protection, which reduces transparency but is likely justified for business privacy. Overall, the site demonstrates moderate digital maturity with room for security and privacy improvements.

JAKUB Group is a medium-sized company operating primarily in the electrical supplies sector within the Czech Republic and Slovakia. The company offers a broad range of products including cables, lighting, modular devices, and tools through multiple physical stores and an online e-shop. Their market position is strong regionally, especially in northwestern Czech Republic, supported by a network of partner domains and subsidiaries. The website is professionally designed with good content quality and clear navigation, targeting electrical contractors and retail customers. Technically, the site uses legacy JavaScript libraries such as jQuery 1.10.2 and integrates Google Analytics and Tag Manager for tracking. Mobile optimization and accessibility are basic but functional. Security posture is moderate with HTTPS assumed but lacking visible security headers and using outdated libraries, which presents some risk. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the website is trustworthy and legitimate but could improve security and privacy practices.

Heyduk, Musil & Strnad, operating under HMS Design, is a well-established graphic design studio based in the Czech Republic, with a history dating back to 2000 and a domain registered since 2005. The company specializes in brand development, visual identity, and a broad range of creative services including logos, graphic manuals, annual reports, campaigns, and web design. Their portfolio and award recognition position them as a reputable player in the creative design market. Technically, the website employs modern web technologies such as lazy loading and carousel sliders, ensuring good performance and mobile optimization. However, the site lacks some advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance and security posture. Overall, the website is professional, content-rich, and trustworthy, with clear contact information and social media presence, but could benefit from enhanced security and compliance features.

S

SuperSaaS

supersaas.cz

63

SuperSaaS.cz is a Czech localized version of the SuperSaaS online booking and reservation system, offering a flexible SaaS platform for various service providers and businesses. The website demonstrates a mature market presence with over 205,000 customers worldwide and integrates multiple payment and calendar services to enhance user experience. The platform targets small to medium businesses and individual professionals seeking efficient scheduling solutions. Technically, the site employs modern web technologies, including asynchronous JavaScript, SVG graphics, and Google Analytics, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting good privacy practices. However, WHOIS data is unavailable, limiting domain registration transparency. Overall, the site is professional, trustworthy, and well-optimized, with minor recommendations for enhanced security headers and incident response documentation.

Graphic House s.r.o. is a Czech-based creative agency established in 1999, offering a wide range of services including corporate branding, print design, website development, SEO, marketing strategies, and campaign management. The company targets businesses seeking comprehensive graphic and digital marketing solutions. The website is currently under heavy reconstruction, which is reflected in the basic content and design quality. Technically, the site uses Adobe Muse, jQuery 1.8.3, Google Analytics, and Google Tag Manager, hosted likely by WEDOS. Security posture is moderate but impacted by the use of outdated libraries and lack of visible HTTPS or security headers. Privacy and cookie policies are absent, indicating compliance gaps. Contact information is detailed and professional, supporting business credibility.

I

ISSA CZECH s.r.o.

issa.cz

60

ISSA CZECH s.r.o. is a Czech Republic based technology company established in 1997, specializing in web development, e-commerce solutions, internet marketing, custom information systems, and hosting services. The company operates its own data center and uses a proprietary CMS platform, positioning itself as a full-service IT and digital marketing provider for small to large businesses. The website is professionally designed, mobile-optimized, and includes references to reputable clients, enhancing its market credibility. Technically, the site uses modern web technologies including Google Fonts, jQuery, Lightbox, and Google Tag Manager with consent integration, hosted on their own infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published privacy or security policies. Overall, the site is trustworthy and business-focused with minimal user tracking and no suspicious content.

P

PIXIO, s. r. o.

pixio.cz

58

PIXIO, s. r. o. is a Czech Republic based digital agency specializing in custom web development, mobile applications, CRM systems, and business process automation. Established in 2011, the company has built a solid market position with over 15 years of experience and more than 410 completed projects. Their services target businesses and organizations seeking tailored digital solutions, emphasizing professionalism and client trust. The website reflects a well-structured and content-rich platform with clear service offerings and contact information. Technically, the site uses a mix of legacy and modern technologies including jQuery, OwlCarousel, and Google Analytics, hosted via WEDOS. Security posture is good with HTTPS enforced and cookie consent implemented, though some improvements are recommended such as updating libraries and adding security headers. Privacy compliance is strong with a clear privacy policy and cookie management. Overall, PIXIO presents as a credible and professional digital agency with a trustworthy online presence.

Fastest Solution s.r.o. is a Czech-based technology company specializing in custom software development and IT solutions, primarily targeting businesses in e-commerce, logistics, hospitality, manufacturing, and accounting sectors. With over 16 years of market presence and more than 330 projects completed, they position themselves as a reliable partner for digital transformation and cloud-based IT services. Their offerings include web and mobile application development, cloud solutions primarily on AWS, CRM systems, system integrations, and project rescue services. The company emphasizes efficiency, cost savings, and tailored solutions without reliance on off-the-shelf software. Technically, the website and company demonstrate a mature digital infrastructure leveraging modern frameworks such as Svelte, Angular, React, and Vue, along with cloud platforms like AWS, Azure, and Google Cloud. Their technology stack includes popular languages and tools such as TypeScript, Node.js, and various databases including DynamoDB and PostgreSQL. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a high level of technical competence. From a security perspective, the website employs HTTPS with strong SSL configuration and includes multiple security headers, indicating adherence to best practices. No vulnerabilities or exposed sensitive data were detected. However, the absence of explicit privacy and cookie policies and lack of incident response or vulnerability disclosure information represent compliance gaps that should be addressed to enhance trust and regulatory adherence. Overall, the website and business present a professional, trustworthy, and technically sound profile with minor areas for improvement in privacy compliance and security transparency. The domain WHOIS data is unavailable, likely due to privacy protection, which is common and justified for this business type. The company maintains a strong partner ecosystem and uses standard analytics and marketing tools responsibly.

P

Povodí Moravy, s.p.

batuvkanal.info

54

The website batuvkanal.pmo.cz represents Povodí Moravy, s.p., a Czech government entity responsible for managing waterway infrastructure on the Morava river, specifically the Baťův canal. The site provides detailed information about the canal's locks, ports, navigation restrictions, and related water management facilities. It targets waterway users, tourists, and local authorities, serving as an informational portal rather than a commercial platform. The business model is public sector service provision with a focus on transportation infrastructure management. Technically, the website uses legacy JavaScript libraries such as jQuery 1.5.2 and UI plugins like Fancybox and Maphilight. The site is moderately performant with basic mobile optimization and accessibility features. There is no evidence of a modern CMS or advanced frameworks. The site lacks HTTPS status information and security headers, indicating potential security weaknesses. No analytics or tracking services are detected, suggesting minimal user tracking. From a security perspective, the site lacks critical security headers and uses outdated JavaScript libraries, which may expose it to vulnerabilities. The absence of privacy and cookie policies indicates non-compliance with GDPR and related regulations. Contact information is present and appears legitimate, but no incident response or security policy pages are found. The WHOIS data is missing, which raises concerns about domain registration transparency and trustworthiness. Overall, the website is functional and informative but requires improvements in security posture, privacy compliance, and technical modernization to enhance trust and protect users. Strategic recommendations include implementing HTTPS, updating JavaScript libraries, adding security headers, publishing privacy and cookie policies, and improving WHOIS transparency.

M

MEDIA AGE s.r.o.

mediaage.cz

67

Media Age s.r.o. is a Czech media agency established in 2005, specializing in creating successful media campaigns and strong brand strategies. The company serves a diverse clientele including market leaders, public organizations, and startups, offering services such as campaign analysis, strategy development, creative design, media planning, and execution. Their market position is reinforced by multiple industry awards and a portfolio of reputable clients. Technically, the website is built on modern frameworks like Next.js and uses DatoCMS for content management, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS enabled, but lacks some security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. The absence of WHOIS data reduces transparency but does not detract from the professional presentation and trustworthiness of the business. Overall, Media Age demonstrates a mature digital presence with room for improvement in privacy compliance and security best practices.

P

Pathmonk | Web Assistant

pathmonk.com

59

Pathmonk is a technology company specializing in AI-driven marketing personalization and conversion optimization solutions. Founded in 2018, it offers a SaaS platform that helps businesses such as marketing agencies, e-commerce, professional services, SaaS, financial services, and manufacturing companies increase leads, sales, and customer engagement through real-time personalization and analytics. The company positions itself as a trusted provider with over 2500 customers and industry-leading partners. Technically, the website is built on WordPress with Elementor and integrates multiple modern marketing and analytics tools including Google Analytics, Facebook Pixel, TikTok Pixel, and others. The hosting infrastructure appears to be on AWS, ensuring reliable performance and scalability. Security posture is good with HTTPS enabled and 2FA plugin usage, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic with no explicit privacy or cookie policies detected in the provided content. Overall, the website is professional, well-branded, and technically mature, but could enhance transparency and compliance documentation.

Z

Zynex AG

zynex.ch

71

Zynex AG is a Swiss technology company specializing in modular internet solutions tailored for online shops, clubs, and newsletters. Their offerings include a CMS, Vereinsverwaltung (club management software), and integrated e-commerce solutions with ERP connectivity, all hosted securely on Swiss infrastructure. The company targets businesses and organizations in Switzerland seeking scalable, efficient digital solutions. Their market position is that of a niche provider emphasizing quality, data privacy, and local hosting. Technically, the website is built using modern frameworks such as Next.js and React, with a focus on performance, mobile optimization, and accessibility. The use of Matomo analytics reflects a privacy-conscious approach to user tracking. Hosting appears to be Swiss-based, aligning with their data sovereignty claims. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms. While explicit security policies and incident response contacts are not published, the overall posture is solid with no visible vulnerabilities or exposed sensitive data. The absence of a security.txt or vulnerability disclosure page is noted as an area for improvement. Overall, the website is professional, trustworthy, and well-aligned with Swiss data protection standards. The risk level is low, but strategic enhancements in transparency around security policies and incident response would further strengthen their security posture.

K

Kopiti.am

kopiti.am

67

Kopiti.am operates as a niche Mastodon instance providing a decentralized social networking platform primarily for Singaporean users. The platform leverages the open source Mastodon software (version 4.2.17) and offers features such as user profiles, content exploration, and community engagement. The website is professionally designed with consistent branding and good content quality, targeting a small but active user base. Technically, the site employs modern web technologies including React and FontAwesome, is hosted behind Cloudflare, and demonstrates good performance and mobile optimization. Security measures include HTTPS enforcement, security headers, and script integrity checks, contributing to a solid security posture. However, the site lacks visible cookie consent mechanisms, terms of service, and explicit security or incident response policies, which are areas for improvement. Overall, the domain registration is consistent and legitimate, supporting the trustworthiness of the platform.

Z

ZM SERVIS MORAVIA, s.r.o.

zmservis-moravia.cz

66

ZM SERVIS MORAVIA, s.r.o. is a Czech-based medium-sized company specializing in the design, manufacture, and servicing of industrial burner systems, gas devices, compressors, and related technical equipment. With over 30 years of experience, the company positions itself as a leading global supplier in its sector, serving industrial clients worldwide. Their business model focuses on B2B manufacturing and engineering services, complemented by sales of spare parts and software solutions. The website reflects a professional and comprehensive digital presence, supporting their market position with clear service offerings and contact channels. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Analytics and Google Tag Manager, ensuring good performance and mobile optimization. Security measures include HTTPS enforcement and a Content Security Policy, although additional security headers could enhance protection. The site implements GDPR-compliant cookie consent mechanisms and provides a detailed privacy policy, reflecting a mature approach to privacy and compliance. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy. Despite this, the website's content quality, business information, and social media presence support the company's credibility. Overall, the site is trustworthy, well-maintained, and aligned with industry best practices. Strategic recommendations include enhancing security headers, publishing a formal security policy, and verifying domain registration details to strengthen trust. These steps will improve the company's digital security posture and compliance readiness, supporting continued growth and customer confidence.

Šroubárna Kyjov, spol. s r.o. is a well-established Czech manufacturing company specializing in the production of fastening materials such as screws, nuts, and forgings primarily for the automotive and railway industries. Founded in 1950, the company has grown to become the largest European manufacturer of railway screws and maintains a strong export presence across multiple countries. The website reflects a professional corporate presence with clear product offerings and export markets. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Owl Carousel, and implements a comprehensive cookie consent mechanism compliant with GDPR standards. Security posture is moderate with HTTPS implied and cookie consent in place, but lacks explicit security headers and incident response contact information. Overall, the website is well-structured, mobile-optimized, and trustworthy, supporting the company's market position and business credibility.

V

VUHŽ

vuhz.cz

46

VUHŽ is an established Czech manufacturing company specializing in equipment for continuous casting machines, single purpose machines, hot-rolled special profiles, centrifugal casts, tools manufacturing, advanced coatings, and material testing. The company targets industrial clients in the steel and metal processing sectors, offering specialized B2B manufacturing solutions. The website reflects a medium-sized enterprise with a consistent brand presence and a professional digital footprint. Technically, the site is built on Joomla CMS with a moderate tech stack including jQuery, Bootstrap, and analytics tools like Google Analytics and Matomo. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements cookie consent mechanisms but lacks explicit security headers and a vulnerability disclosure policy. No direct contact emails or phone numbers are visible, but multiple contact forms are available. The domain is long-standing and registered with a reputable registrar, supporting the legitimacy of the business.

P

Pires s.r.o.

pires.cz

58

Pires s.r.o. is a Czech Republic-based company specializing in the supply, installation, repair, and servicing of industrial gas burner systems, industrial furnaces, and related gas technology equipment. With over 35 years of industry experience and ISO 9001:2015 certification, the company targets industrial clients requiring high-quality gas systems and maintenance services. Their business model focuses on B2B technical services and sales of spare parts from reputable brands. The website is professionally designed, multilingual, and provides comprehensive information about their services and projects. Technically, the website uses a custom CMS with a technology stack including jQuery, Google Tag Manager, Facebook SDK, and cookie consent scripts. The site is mobile-optimized and moderately performant, with good SEO practices. Security-wise, HTTPS is enforced, and cookie consent is implemented, but the absence of security headers and a security.txt file indicates room for improvement. The security posture is solid but could be enhanced by adding security headers and formalizing incident response disclosures. The lack of WHOIS data is a concern for domain legitimacy verification, although the website content and certifications support trustworthiness. Overall, the site presents a professional and credible business presence with moderate technical maturity and good privacy compliance. Strategically, the company should focus on improving domain registration transparency, enhancing security headers, and publishing security policies to strengthen trust and compliance.

S

Strojírny a stavby Třinec, a.s.

sas-trinec.cz

37

Strojírny a stavby Třinec, a.s. is a Czech manufacturing and construction company established in 2013, specializing in the supply of engineering products and construction services. The company targets industrial clients and businesses requiring reliable engineering and construction solutions. The website reflects a medium-sized enterprise with a focus on regional market presence. Technically, the website is built on WordPress using Elementor and RevSlider, with moderate performance and basic mobile optimization. Security posture is limited with no advanced security headers or policies detected, and privacy compliance is minimal due to the absence of privacy and cookie policies. Overall, the domain registration is consistent with the business profile, indicating legitimacy and trustworthiness.

H

HŽP a.s.

hzp.cz

57

HŽP a.s. is a well-established Czech manufacturing company specializing in the production of springs for the railway and automotive industries. As a member of the Třinecké železárny - Moravia Steel group, it holds a leading position in the European market with a strong export focus and a history dating back over 60 years. The company offers a range of products including screw springs, trapezoidal leaf springs, and parabolic leaf springs, targeting industrial clients in transportation and automotive sectors. The website reflects a professional corporate presence with clear navigation and multilingual support.

P

Polanský s.r.o.

polansky-sro.cz

48

Polanský s.r.o. is a Czech construction company specializing in demolition, earthworks, height work, transport, and recycling services. The company emphasizes high quality, flexibility, and comprehensive delivery, supported by ISO certifications and recognized as the Construction Company of the Year 2020. Their website is professionally designed, multilingual, and provides detailed service descriptions and project references, targeting industrial and construction sector clients. Technically, the site runs on WordPress with standard plugins and Google Analytics for tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. WHOIS data is missing, which limits full legitimacy verification. Overall, the company presents a credible business with room for improvement in privacy compliance and security best practices.

E

eSports.cz, s.r.o.

sportovniaukce.cz

43

SportovniAukce.cz is an online auction platform specializing in original worn hockey jerseys and other collectible sports artifacts, primarily targeting sports fans and memorabilia collectors in the Czech Republic. The business operates under eSports.cz, s.r.o., a small-sized company founded in 2014, offering a niche marketplace with direct cooperation with sports clubs. The website provides a professional and user-friendly interface with clear auction rules, privacy policies, and cookie consent mechanisms, supporting a trustworthy user experience. Technically, the site leverages modern JavaScript libraries and frameworks such as jQuery, Nette Framework, and integrates Google Analytics and advertising services, ensuring moderate performance and good mobile optimization. However, the absence of WHOIS data and lack of visible security headers indicate areas for improvement in domain transparency and security posture. Overall, the platform demonstrates a solid business model with a focus on compliance and user engagement but would benefit from enhanced security practices and domain registration clarity.

M

Mountfield HK, a.s.

hchk100.cz

42

The website www.hchk100.cz serves as the official platform commemorating the 100th anniversary of hockey in Hradec Králové, operated by Mountfield HK, a.s. It provides rich historical content, event information, collectible merchandise, and community engagement opportunities targeted primarily at hockey fans and local sports enthusiasts. The site is well-structured with multimedia elements and modern front-end technologies, delivering a good user experience and mobile responsiveness. However, the absence of privacy and cookie policies, lack of contact information, and missing WHOIS data reduce its overall trustworthiness and compliance posture. Security measures such as security headers are not evident, and while HTTPS is implied, explicit SSL configuration details are unavailable. The site uses Google Analytics for user tracking but lacks visible consent mechanisms, indicating privacy compliance gaps. Overall, the website is professional and content-rich but requires improvements in security, privacy, and transparency to enhance trust and compliance.

JAKUB Group is a well-established company specializing in the distribution and retail of electrical materials, serving primarily the Czech Republic and Slovakia. With a network of 55 physical stores and a comprehensive e-shop, the company targets electrical professionals and retail customers. The website reflects a mature business with a consistent brand presence and a broad product catalog. Technically, the site uses legacy JavaScript libraries and standard tracking tools like Google Analytics, indicating moderate digital maturity. Security posture is adequate but could be improved by updating outdated libraries and implementing stronger security headers. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms. Overall, the website is professional and trustworthy, though domain registration data is missing, which slightly impacts trust verification.

F

Fanshop HC Olomouc

fanshopolomouc.cz

57

Fanshop HC Olomouc operates an official e-commerce platform dedicated to selling fan merchandise and souvenirs for the HC Olomouc hockey team. The website offers a variety of products including official jerseys, scarves, and accessories, targeting passionate hockey fans primarily in the Czech Republic. The business model is retail-focused, leveraging the Shoptet platform for online sales and customer engagement. The site demonstrates consistent branding and provides clear contact information, enhancing trust and customer confidence. Technically, the website uses a mature but somewhat dated technology stack including jQuery and the Shoptet e-commerce platform. It is mobile-optimized and includes standard SEO and accessibility features. Performance is moderate, with room for improvement in modernizing libraries and enhancing security headers. Privacy compliance is addressed with cookie consent and privacy policies, though GDPR compliance could be further strengthened with more detailed disclosures. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, indicating a good baseline security posture. However, the absence of advanced security headers and a public security policy or incident response contact reduces the overall security maturity. No vulnerabilities or exposed sensitive data were detected. The lack of WHOIS data limits domain trust assessment but the official club affiliation and professional presentation support legitimacy. Overall, Fanshop HC Olomouc presents a trustworthy and functional online retail presence for hockey fans, with recommendations to enhance security practices and transparency to further improve trust and compliance.

G

Galerie Šantovka, a. s.

galeriesantovka.cz

46

Galerie Šantovka is a large retail shopping center located in Olomouc, Czech Republic, recognized as one of the largest in the region and among the top ten in the country. The website showcases a broad range of retail shops, entertainment options such as cinemas and bowling, and various customer services including parking and gift vouchers. The site targets general consumers and local visitors, providing event information and promotional activities to engage its audience. Technically, the website employs modern JavaScript libraries like jQuery and uses Google Tag Manager for analytics, indicating a mature digital infrastructure. The site is mobile optimized and includes structured data for SEO benefits. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, though it lacks some advanced security headers and explicit vulnerability disclosure information. Overall, the website is professionally maintained, trustworthy, and compliant with GDPR requirements, but could improve its security posture by adding security headers and incident response details.

S

SELM MORAVA, S.R.O.

selm-morava.cz

56

SELM MORAVA, S.R.O. is a Czech-based company specializing in wholesale and retail sales of sanitary equipment and related installation materials, with a business tradition dating back to 1996. The company targets both B2B and B2C customers within the Czech Republic, positioning itself as an established regional player in the retail sector. The website reflects this business focus with clear descriptions of services and product offerings, including a dedicated e-shop link for online sales. Technically, the website is built on a custom CMS platform using modern JavaScript libraries such as jQuery and Swiper.js, and integrates Google Maps API for location services. The site demonstrates moderate performance and good mobile optimization, though SEO and accessibility features are basic. The presence of cookie consent mechanisms and privacy policy pages indicates some level of privacy compliance, albeit at a basic level. From a security perspective, the website employs HTTPS and has implemented cookie consent, but lacks explicit security headers and published security or incident response policies. No vulnerability disclosure or security.txt files are present, and contact information is limited to a web form without direct email or phone contacts. These gaps suggest room for improvement in security posture and transparency. Overall, the website is professional and trustworthy with a moderate security and privacy compliance level. Strategic enhancements in security policies, contact transparency, and technical security controls would strengthen the company's digital maturity and risk management posture.

K

Kitty Care

kittycare.cz

45

Kitty Care is a Czech-based e-commerce business specializing in premium cat care products including 100% meat-based cat food, probiotic dry food, wet food, and premium cat litter. The website targets cat owners seeking high-quality, natural, and locally produced pet products. The company emphasizes health, sustainability, and local sourcing in its product offerings. Technically, the website uses modern frontend frameworks such as Bootstrap and integrates multiple analytics and marketing tools including Google Tag Manager, Microsoft Clarity, Facebook Pixel, and Smartlook. Hosting appears to leverage Microsoft Azure Blob Storage for media assets. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and formal privacy/cookie policies. WHOIS data is unavailable, which limits domain trust assessment but the website content and contact information appear professional and consistent with a legitimate retail business. Overall, the site provides a good user experience with clear navigation and product information but should improve privacy compliance and security headers to enhance trust and compliance.

N

Nadační fond Kometa

nadacnifondkometa.cz

42

Nadační fond Kometa is a Czech non-profit foundation established in 2015, focused on charitable activities including support for children with autism and community events. The foundation operates an e-shop for fundraising and maintains partnerships with local organizations such as HC Kometa Brno. The website is built on WordPress and uses common web technologies including jQuery, Google Analytics, and WPBakery Page Builder. The site is well-branded and provides relevant content for its audience, though it lacks explicit privacy and cookie policies. Security posture is moderate with HTTPS enabled but missing security headers and incident response contacts. Overall, the website is functional and trustworthy but could improve compliance and security transparency.

A

Adam Trnka

adamtrnka.com

59

Adam Trnka's website serves as a personal portfolio showcasing his expertise as a technology enthusiast, product manager, consultant, creative professional, and cameraman. The site highlights his experience in digitalizing business needs, video production, and technology development. The business model is service-oriented, targeting clients seeking IT consulting, product management, and multimedia services. The website is well-branded with consistent design and clear contact information, supporting a moderate level of business credibility. Technically, the site uses a modern frontend stack including Bootstrap, jQuery, and Google Fonts, ensuring good mobile responsiveness and user experience. However, no CMS or hosting provider information is discernible. Performance is moderate with no advanced analytics or tracking scripts detected, indicating a privacy-conscious approach but also limited marketing insights. From a security perspective, the site lacks visible security headers and privacy/cookie policies, which lowers its compliance posture. The absence of WHOIS data reduces transparency but is likely due to privacy protection, which is reasonable for a personal brand. No forms or sensitive data collection points reduce attack surface, but improvements in SSL configuration and security headers are recommended. Overall, the website is safe, professional, and suitable for general audiences. The main risks relate to privacy compliance and security best practices, which can be addressed to enhance trust and regulatory adherence.

PNEUMATICO International, spol. s r. o. operates an e-commerce platform specializing in the sale of tires and wheels for various vehicle types including passenger cars, utility vehicles, trucks, and motorcycles. The company also provides complementary tire services such as mounting, balancing, repairs, and seasonal storage. The business targets vehicle owners primarily in the Czech Republic and maintains a regional presence with a focus on quality service and product offerings. The website is professionally designed, mobile-optimized, and integrates modern web technologies including Google reCAPTCHA for form security. However, the absence of WHOIS data limits transparency and trust assessment. Security posture is generally good with HTTPS enforced, but could be improved by adding security headers and explicit cookie consent mechanisms. Overall, the website presents a credible and professional business front with room for enhanced privacy and security compliance.

Volvo Cars Czech Republic s.r.o. operates a professional and well-branded website targeting consumers in the Czech Republic interested in Volvo vehicles. The site offers vehicle browsing and customization services, reflecting Volvo's position as a premium automotive manufacturer. The website is built on modern technologies including React and Next.js, with integration of Google Tag Manager and OneTrust for privacy compliance. The technical infrastructure supports fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not published. The absence of WHOIS data is noted but does not detract from the site's legitimacy given the brand and content quality. Overall, the website demonstrates a mature digital presence with good privacy compliance and user experience.

V

Volvista.cz

volvista.cz

56

Volvista.cz is a professional automotive dealership specializing in Volvo vehicles, offering new, used, and demonstration cars, as well as operational leasing and vehicle buyback services in the Czech Republic. The website is well-designed, mobile-optimized, and provides a comprehensive user experience with advanced search and filtering capabilities. Technically, the site uses modern JavaScript libraries and frameworks including Vue.js, jQuery, and Laravel Livewire, supported by analytics and tracking tools such as Google Tag Manager and Microsoft Clarity. Security posture is solid with HTTPS enforced and CSRF protections in place, though some security headers are missing and no explicit security or incident response policies are published. The absence of WHOIS data reduces transparency and trustworthiness, but the professional presentation and business focus suggest legitimacy. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism.

C

CAMEA

cameatechnology.com

59

CAMEA is a specialized technology company focused on intelligent transportation and industrial monitoring solutions, operating since 1995. Their offerings include Weigh-In-Motion systems, traffic counters, speed enforcement technologies, and web inspection systems. The company targets government agencies, transportation authorities, and industrial clients, positioning itself as a trusted provider with ISO 9001 certification and type-approved enforcement solutions. The website demonstrates a professional digital presence with good content quality, clear navigation, and GDPR-compliant contact mechanisms. Technically, the site employs modern analytics and marketing tools such as Google Analytics, Tag Manager, and Hotjar, alongside security measures like HTTPS and reCAPTCHA. However, the absence of WHOIS registration data raises concerns about domain legitimacy, warranting further investigation. Security posture is generally strong but could be improved by adding explicit security policies and incident response contacts. Overall, the site is trustworthy and well-structured but should address domain registration transparency to enhance credibility.

U

University of Delaware Athletics

bluehens.com

59

The University of Delaware Athletics official website serves as the primary digital platform for the university's sports teams, providing comprehensive information including schedules, rosters, news, and ticketing. It targets students, alumni, and sports enthusiasts, positioning itself as a trusted source for athletics-related content. The site leverages modern web technologies such as Vue.js and Nuxt.js frameworks, hosted on AWS infrastructure with CDN support, ensuring a responsive and performant user experience. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting compliance with GDPR and other regulations. Security posture is solid with HTTPS enforcement and domain registration transparency, though DNSSEC is not enabled. The site integrates multiple marketing and analytics tools including Google Analytics, Facebook Pixel, and Eloqua, balanced with user privacy considerations. Overall, the website is professional, trustworthy, and well-maintained, supporting the university's athletics branding and engagement goals.

B

Barnes Foundation

barnesfoundation.org

62

The Barnes Foundation is a well-established non-profit art institution based in Philadelphia, specializing in impressionist, post-Impressionist, and modern art. It offers a rich collection, educational programs, tours, and events targeting art enthusiasts, educators, and the general public. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding. Technically, it leverages modern analytics and marketing tools, hosted on AWS infrastructure, and built on Craft CMS. Security posture is good with HTTPS and CSRF protections, though improvements in DNSSEC and security headers are recommended. Privacy policies and terms are present and GDPR compliant, supporting trust and compliance. Overall, the site is professional, trustworthy, and serves its audience effectively.

C

Car Talk Store

shamelesscommerce.com

59

The Car Talk Store is an official e-commerce platform offering merchandise related to the popular NPR show Car Talk. The website is currently password protected and undergoing maintenance, with a simple email notification form for interested customers. The business operates on the Shopify platform, leveraging its e-commerce and analytics infrastructure. The site demonstrates basic content quality and branding consistency but lacks comprehensive privacy and cookie policies. Security posture is moderate with HTTPS enforced but missing advanced security headers and DNSSEC. The domain is well aged and registered consistently, supporting business legitimacy. Overall, the site is functional but would benefit from enhanced privacy compliance and security hardening.

F

Find Your News

findyournews.org

59

Find Your News is a nonprofit platform dedicated to connecting users with nonprofit newsrooms across various topics and geographic locations. It operates under the umbrella of the Institute for Nonprofit News (INN), which supports hundreds of independent, nonpartisan news organizations. The website offers a user-friendly interface with search and filtering capabilities to match users with relevant nonprofit journalism sources. Technically, the site is built on WordPress, leveraging modern web technologies such as jQuery and autocomplete.js, and integrates Google Analytics and StackAdapt for analytics and advertising. The site demonstrates good SEO practices and mobile optimization but lacks explicit privacy and cookie policies, which are critical for compliance and user trust. Security-wise, the site uses HTTPS and domain status protections but does not enable DNSSEC or implement security headers, representing areas for improvement. Overall, the website is professional, trustworthy, and serves a clear nonprofit media mission, though it should enhance privacy compliance and security posture to align with best practices.

S

Science Friday Store

sciencefridaystore.com

63

Science Friday Store is an e-commerce website selling branded merchandise related to the Science Friday public radio program. The site offers a variety of products including apparel, drinkware, and limited edition items targeting curious and science-interested consumers. The business operates on the Shopify platform, leveraging its infrastructure and tools for online retail. The website is professionally designed with consistent branding and good user experience, optimized for mobile devices and featuring clear navigation. Technically, the site uses modern web technologies including jQuery, Google Fonts, and Facebook Pixel for marketing analytics. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are not explicitly published. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency but the Shopify hosting and brand association lend credibility. Overall, the site is a trustworthy small e-commerce business with room for improvement in privacy and security disclosures.

W

WNYC

thegreenespace.org

69

WNYC operates as a leading public radio station in the United States, offering a broad range of media services including live radio broadcasting, podcast production, and hosting live events at The Greene Space. The organization maintains a strong market position with multiple subsidiary media outlets and a well-recognized brand. The website reflects a mature digital presence with modern technologies and extensive multimedia content, targeting a general audience interested in news, culture, and public radio programming. Technically, the site uses Ember.js framework, integrates with major analytics and advertising platforms, and demonstrates good performance and accessibility standards. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though improvements could be made by implementing security headers and publishing clear privacy and security policies. The absence of WHOIS data limits domain trust assessment, but the overall digital footprint and branding indicate a legitimate and professional entity. Strategic recommendations include enhancing privacy compliance, adding explicit security and incident response information, and maintaining vigilance on third-party scripts to mitigate vulnerabilities.

N

New York Public Radio

newsounds.org

67

New York Public Radio operates the WNYC website and its associated shows such as New Sounds, providing public radio content, podcasts, and music discovery services. The organization is a large, established media entity with a strong presence in New York City and a broad audience interested in independent journalism and music. The website demonstrates a mature technical infrastructure using modern JavaScript frameworks and integrates multiple analytics and marketing tools to optimize user engagement and content delivery. Security posture is strong with HTTPS enforced and some security headers implied, though explicit headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well aligned with the organization's mission.

W

WQXR

wqxr.org

66

WQXR is a prominent classical music radio station based in New York, operated under the umbrella of New York Public Radio. It offers a rich array of classical music programming, live streaming, podcasts, and cultural content targeting classical music enthusiasts and the New York metropolitan audience. The station is well integrated within a network of related media entities, enhancing its market presence and content diversity. Technically, the website leverages modern web technologies including Ember.js, Google Analytics, and various marketing and tracking tools, providing a responsive and user-friendly experience. Security-wise, the site employs HTTPS and Content Security Policy, indicating a good security posture, though explicit privacy and cookie policies are not evident in the provided content. The absence of WHOIS data limits domain trust verification but the overall branding and content quality suggest legitimacy. Strategic recommendations include enhancing privacy compliance transparency, publishing security policies, and improving contact information visibility to strengthen trust and compliance.

W

WNYC | New York Public Radio

njpublicradio.org

68

New Jersey Public Radio, under the umbrella of WNYC | New York Public Radio, is a well-established media organization providing award-winning journalism and public affairs coverage focused on New Jersey. The website offers a rich array of news stories, podcasts, and live streaming radio services targeting a general audience interested in regional news and culture. The brand is consistent and trusted, with multiple affiliated stations and partner sites enhancing its reach. Technically, the site leverages modern web technologies including Ember.js, Google Analytics, Facebook SDK, Hotjar, and Google Tag Manager, indicating a mature digital infrastructure. The site is mobile-optimized and provides good SEO and accessibility features, though some accessibility aspects could be improved. From a security perspective, the site enforces HTTPS and uses asynchronous loading of analytics and tracking scripts, but lacks explicit security headers and visible privacy or cookie policies, which are areas for improvement. No critical vulnerabilities or WAF blocking were detected, and the domain WHOIS data is privacy protected, which is typical for media entities. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic enhancements in privacy compliance, security headers, and contact transparency would further strengthen its security posture and user trust.