Czech Republic security reports

T

TTS energo s.r.o.

ttsenergo.cz

36

TTS energo s.r.o. is a regional energy company based in Třebíč, Czech Republic, specializing in the production and distribution of heat energy primarily from biomass. The company positions itself as a pioneer in biomass heat production within the Czech Republic and emphasizes environmental responsibility and local community support. Their services include heat production, customer benefits, emergency dispatch services, and technology projects. The website reflects a medium-sized enterprise with a professional online presence and clear business focus. Technically, the website is built on WordPress using common libraries such as jQuery, Modernizr, and Google Maps API. SEO is enhanced by the Yoast SEO plugin, and performance optimizations are implemented via WP Rocket. The site is mobile-optimized and uses HTTPS with strong SSL configuration. However, some security best practices like security headers and cookie consent mechanisms are missing or not detected. From a security perspective, the site demonstrates a moderate security posture with HTTPS enforced and anonymized IP tracking in analytics. The presence of a whistleblowing directive and GDPR privacy policy indicates some compliance awareness. The absence of WHOIS data is a concern for domain legitimacy and trust, though the website content and business information appear professional and consistent. Overall, the site is trustworthy and functional with room for improvement in security headers, privacy compliance (cookie consent), and domain registration transparency. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing incident response contacts, and verifying domain WHOIS information to strengthen trust and compliance.

The website sazkovekancelare.cz is currently inaccessible due to a Cloudflare security challenge page employing Turnstile CAPTCHA, which blocks direct access to the site's content. This prevents extraction of any meaningful business, compliance, or contact information. The domain was registered in 2018 with REG-ACTIVE24 and uses Cloudflare nameservers, indicating a standard setup for security and performance. Due to the blocking, no privacy policies, cookie consent mechanisms, or terms of service are detectable. The technical infrastructure relies on Cloudflare's security platform, but no further details on CMS or frameworks are available. The security posture cannot be fully assessed given the lack of accessible content, but the presence of Cloudflare WAF and CAPTCHA indicates a baseline security measure. Overall, the site cannot be fully analyzed, and the risk assessment is limited by the lack of accessible data.

Česká Asociace Univerzitního Sportu (ČAUS) is a Czech non-profit organization dedicated to promoting university sports and organizing academic sports competitions within the Czech Republic. The website serves as the official platform for disseminating information about competitions, events, and representation of Czech students in sports at various levels. The organization has a well-established presence since 2006 and maintains partnerships with national and international sports bodies. The site targets students, university sports participants, and organizers within the academic sports community.

Č

Česká bowlingová asociace

czechbowling.cz

54

Česká bowlingová asociace (ČBA) is the national amateur bowling association in the Czech Republic, representing bowling players of all skill levels and ages. It serves as the official representative of the Czech Republic in European and international bowling federations and organizes national competitions, leagues, and player registrations. The website provides comprehensive information about bowling events, rankings, news, and media content targeted at the Czech bowling community. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates analytics tools such as Matomo and Google Tag Manager. The site is mobile-optimized with good navigation and content quality. Security posture is solid with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable, which slightly impacts trust but the professional content and official partnerships support legitimacy. Overall, the site is a well-maintained digital presence for the Czech bowling community with room for improvement in privacy compliance and security headers.

Č

Česká kuželkářská a bowlingová federace

ckbf.cz

45

Česká kuželkářská a bowlingová federace (ČKBF) is the national governing body for ninepin and tenpin bowling sports in the Czech Republic. It operates as a non-profit sports federation overseeing its two organizational units, the Czech Ninepin Bowling Association (ČKA) and the Czech Bowling Association (ČBA). The federation manages sport governance, competition organization, membership, talent development, and represents the Czech Republic in international bowling organizations such as IBF, WNBA, and ETBF. The website provides comprehensive information about the federation's activities, partners, official documents, and contact details, targeting amateur and professional players, clubs, and sports enthusiasts within the Czech Republic.

W

Wellness Holešky

wellnessholesky.cz

65

Wellness Holešky is a small hospitality business located in Prague, Czech Republic, specializing in wellness and relaxation services including a rustic Finnish sauna, massages, private baths, and wellness stay packages. The website presents a professional and well-structured digital presence with clear navigation, rich content, and compliance with GDPR and cookie consent regulations. The technical infrastructure leverages modern JavaScript libraries and tracking tools, ensuring a good user experience and moderate performance. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers and incident response information suggests room for improvement. The lack of WHOIS data is a notable gap that impacts domain trustworthiness, but the overall website and business information appear legitimate and trustworthy.

A

Absolutum Wellness Hotel

absolutumhotel.cz

56

Absolutum Wellness Hotel is a boutique wellness hotel located in Prague 7, offering modern accommodation, a wellness center, a stylish restaurant, and conference facilities. The hotel targets tourists and business travelers seeking comfort and wellness services in a convenient location near public transport. The website reflects a medium-sized hospitality business with a professional online presence and clear service offerings. Technically, the site employs modern web technologies including Google reCAPTCHA, analytics, and marketing pixels, ensuring a secure and user-friendly experience. Security posture is strong with HTTPS and form protection, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with comprehensive GDPR and cookie policies. Overall, the website is trustworthy and professionally maintained, though WHOIS data is unavailable, likely due to privacy protection.

K

KYOCERA Document Solutions

kyoceradocumentsolutions.cz

57

KYOCERA Document Solutions Czech Republic operates a professional website offering document management and business optimization solutions targeted at Czech businesses. The site is well-branded and uses modern technologies such as Adobe Experience Manager and Google reCAPTCHA, indicating a mature digital infrastructure. However, the absence of WHOIS data and lack of visible contact or privacy policies reduce overall trust and compliance posture. Security measures like reCAPTCHA are in place, but security headers and SSL configuration details are not visible, suggesting room for improvement. Overall, the website presents a credible business front but would benefit from enhanced transparency and compliance documentation.

Mikroregion Voticko is a small regional non-profit organization serving local municipalities in the Czech Republic. The website provides community services, social work coordination, educational development, and tourism information targeted at residents, schools, and local governments. The organization maintains a professional online presence with clear contact information and regular news updates, positioning itself as a trusted regional entity. Technically, the site is built on CMS Made Simple with legacy JavaScript libraries and uses Bootstrap and Owl Carousel for UI components. While functional and moderately optimized, the site lacks modern security headers and uses outdated libraries, posing potential security risks. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. The site employs Google Analytics and Tag Manager for user tracking without visible consent mechanisms. Overall, the website is safe, professional, and relevant to its audience but requires improvements in security and privacy compliance to enhance trust and resilience.

M

Městská knihovna Votice

knihovnavotice.cz

47

Městská knihovna Votice is a municipal library serving the local community of Votice, Czech Republic. The website provides information about library services, cultural events, educational programs, and contact details. It is supported by the regional government and targets a broad audience including children, students, and general public. The business model is public service oriented with funding from regional support. Technically, the website uses a vismo CMS platform with standard web technologies including HTML5, CSS3, JavaScript, Google reCAPTCHA, and Google Translate integration. The site is moderately optimized for performance and mobile use, with basic accessibility features. Security posture is good with HTTPS enforced and CAPTCHA protection on forms, but lacks advanced security headers and published security policies. Privacy compliance is strong with clear cookie consent mechanisms and a privacy policy. Overall, the website is professional, trustworthy, and safe for general audiences.

K

Klášter sv. Františka z Assisi

klaster-votice.cz

48

Klášter sv. Františka z Assisi in Votice is a cultural heritage site offering guided tours, exhibitions, and community activities focused on local history and culture. The website serves as an informational portal for visitors, providing event calendars, multimedia content, and practical visitor information. The site targets tourists, families, and local community members interested in cultural and educational experiences. Technically, the website is built on the Vismo CMS platform, uses modern web technologies, and integrates Google Analytics and Google Translate for analytics and multilingual support. The site is mobile optimized and accessible with clear navigation and structured content. Security-wise, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks published security policies, incident response contacts, and vulnerability disclosure information. Overall, the website is trustworthy, professionally maintained, and suitable for its cultural and educational purpose.

The website represents the Sbor dobrovolných hasičů Votice, a volunteer fire brigade organization based in Votice, Czech Republic. It serves the local community by providing firefighting, rescue operations, training, and organizing cultural and community events. The site targets local residents, volunteers, and fire safety enthusiasts, operating as a non-profit entity focused on community safety and engagement. The content is regularly updated with event announcements and news, reflecting active community involvement. Technically, the website is built on the Estranky.cz CMS platform using older versions of jQuery and jQuery UI libraries. The site has basic mobile optimization and accessibility features but lacks modern security headers and advanced SEO optimizations. Performance is moderate, and the site uses external resources hosted on Estranky.cz and jQuery CDN. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site lacks visible HTTPS enforcement details and security headers, which lowers its security posture. No privacy or cookie policies were found, indicating compliance gaps with GDPR and related regulations. The WHOIS data is unavailable, which raises concerns about domain registration legitimacy and trustworthiness. However, the site does not expose sensitive data or use vulnerable libraries visibly. Overall, the website is functional and serves its community purpose but requires improvements in security, privacy compliance, and technical modernization to enhance trust and protect users better.

L

Linka bezpečí, z.s.

linkabezpeci.cz

62

Linka bezpečí is a well-established Czech non-profit organization providing free and anonymous counseling services primarily for children and students up to 26 years old. The website serves as a comprehensive platform offering telephone helpline, online chat, email support, educational resources, and multimedia content focused on mental health and social issues. The organization has a strong market position as a trusted helpline with a long history since 1994 and a domain registered since 1998. Technically, the website is built on the Liferay CMS platform, utilizing modern web technologies and third-party analytics and marketing tools, ensuring good performance, accessibility, and SEO. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with clear contact information and active social media presence.

S

Správa železnic, státní organizace

szdc.cz

60

Správa železnic is a Czech state organization responsible for managing the national railway infrastructure. The website serves multiple audiences including passengers, suppliers, carriers, and contractors, providing comprehensive information about projects, services, and organizational structure. It holds a significant market position as the primary railway infrastructure manager in the Czech Republic. The site is well-branded and professionally maintained, reflecting its government entity status. Technically, the website is built on the Liferay CMS platform and uses modern JavaScript libraries such as jQuery, Slick Carousel, and Unite Gallery. It integrates analytics tools including Google Analytics and Facebook Pixel for user tracking and marketing purposes. The site is mobile-optimized with good navigation and SEO practices, although accessibility features could be enhanced. From a security perspective, the website enforces HTTPS and includes important security headers. It publicly documents its cybersecurity policies and incident response capabilities, including a CSIRT team. However, the absence of a vulnerability disclosure policy and security.txt file is noted. WHOIS data is unavailable, which limits domain registration trust analysis, but the official domain and content suggest legitimacy. Overall, the website demonstrates a solid security posture and compliance with GDPR, with clear contact and privacy information. The risk level is moderate due to missing WHOIS transparency and minor technical improvements needed. Strategic recommendations include implementing a vulnerability disclosure program, enhancing accessibility, and maintaining updated domain registration information.

L

LDStudio

ringoffury.cz

52

Ring of Fury is a Czech-based combat sports event organizer specializing in celebrity fights across boxing, K1, Muay Thai, and MMA with small gloves. The organization targets combat sports fans and entertainment seekers, offering live events, PPV streaming, and merchandise. The website is professionally designed with good content quality and clear navigation, supported by active social media channels. Technically, it uses modern JavaScript libraries and Google Tag Manager for analytics, but lacks some security headers and formal privacy documentation. The absence of WHOIS data raises some trust concerns, though the visible business presence and partner sponsorships support legitimacy. Overall, the site is functional and engaging but would benefit from enhanced security and compliance documentation.

B

BB media productions s.r.o.

bbproductions.cz

63

BB media productions s.r.o. is a Czech audiovisual production company specializing in comprehensive marketing services including video production, photography, social media, web, and graphic design. The company targets businesses and individuals seeking professional marketing content, offering both large-scale and low-budget production services with licensed drone footage capabilities. Their market position is supported by a portfolio of diverse projects and client logos, indicating a stable presence in the local media production sector. Technically, the website employs a mix of legacy and modern web technologies such as jQuery, Swiper.js, and Typekit fonts, delivering a moderate performance and good mobile optimization. Security posture is moderate with HTTPS usage but lacks visible security headers and updated libraries, and privacy compliance is weak due to missing policies. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy measures.

Mon Alba s.r.o. is a small Czech company specializing in IT services and construction consulting. Their offerings include website and e-shop development, Google Workspace implementation, domain management, and expert consulting on building moisture and structural issues. The company targets local businesses and property owners in Prague and surrounding areas. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a positive user experience. Technically, the site uses modern frameworks such as Bootstrap and integrates Google Analytics and Tag Manager for user tracking. However, the absence of WHOIS data limits domain trust verification, and no cookie consent mechanism was found, which may impact privacy compliance. Security headers are not explicitly detected, suggesting room for improvement in security posture. Overall, the website is functional and professional but could benefit from enhanced security and privacy features.

1

Příslušenství, pouzdra, kryty a obaly pro mobily, domácí potřeby | 1M.cz

1m.cz

61

The website www.1m.cz is an e-commerce platform based in the Czech Republic specializing in mobile phone accessories such as cases, protective covers, screen protectors, batteries, chargers, cables, holders, headphones, speakers, and smart wearables. It also offers a range of household goods and hobby items. The site targets consumers looking for mobile accessories and related products. The business model is retail-focused, leveraging an online storefront with user account management and shopping cart functionality. The market position appears to be that of a specialized retailer with a broad product catalog in its niche. Technically, the website employs modern web technologies including Bootstrap 4, Owl Carousel, Magnific Popup, and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile optimized and includes cookie consent mechanisms, but lacks explicit privacy and terms of service pages in the analyzed content. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities detected, though security headers are not explicitly observed. The absence of WHOIS registrant data limits trust assessment but is likely due to privacy protection or registry policies. Overall, the website presents a professional and functional e-commerce platform with room for improvement in privacy disclosures and security header implementation.

P

On-line dražby nemovitostí v exekuci ::

portal-elektronickych-drazeb.cz

42

The website www.portal-elektronickych-drazeb.cz operates as a specialized portal aggregating electronic auctions of seized real estate and movable assets in the Czech Republic. It serves as a centralized platform providing users with transparent access to voluntary and involuntary auctions conducted by various executor offices. The portal offers key services such as auction listings, valuation tools, and email notifications, targeting Czech residents interested in property auctions. The business model is that of an information aggregator without conducting auctions directly. Technically, the site uses standard web technologies including JavaScript and integrates Google Analytics and Google Tag Manager for tracking. The site is served over HTTPS, ensuring secure communication. However, it lacks modern security headers and cookie consent mechanisms, which are important for compliance with EU privacy regulations. The site’s design and mobile optimization are basic but functional, with good SEO practices evident through meta tags and structured navigation. From a security perspective, the site shows a moderate posture with HTTPS enabled and no visible vulnerabilities or sensitive data exposure. The absence of privacy and cookie policies, as well as lack of a vulnerability disclosure policy, represent compliance and transparency gaps. The WHOIS data for the domain is unavailable, which reduces trustworthiness from a domain registration perspective, although the website content appears legitimate and focused on a niche market. Overall, the site is a functional and relevant resource for its target audience but would benefit from enhanced privacy compliance, improved security headers, and clearer business identity disclosures to strengthen trust and regulatory adherence.

L

LAKRO, s.r.o.

lakro.cz

44

LAKRO, s.r.o. is a Czech manufacturing and trading company specializing in the production of models and castings from various types of cast iron and aluminum, established in 1992. The company operates its own machining workshop and has a strategic partnership with the historic UXA foundry, enhancing its manufacturing capabilities. The website presents a professional image with clear business information and structured data, targeting industrial clients in the manufacturing sector. Technically, the site is built on WordPress with Elementor and Yoast SEO, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. WHOIS data is unavailable, which reduces trustworthiness from a domain registration perspective. Overall, the site is functional and professional but would benefit from enhanced compliance and security transparency.

O

Olomoucká Jízdárna s.r.o.

olomouckajizdarna.cz

37

Olomoucká Jízdárna s.r.o. operates a restaurant and event venue located in Olomouc, Czech Republic, specializing in Czech and international cuisine with a focus on quality ingredients and fresh food. The business targets local residents and event organizers, offering services such as dining, birthday celebrations, weddings, and corporate parties. The website is built on WordPress with modern plugins like LayerSlider and Slider Revolution, hosted likely by Webglobe. The site is well-designed, mobile-optimized, and provides clear contact information and social media links, supporting moderate trustworthiness. However, it lacks privacy and cookie policies, which impacts GDPR compliance and privacy posture.

A

ATA GYM

atagym.cz

37

ATA GYM is a small fitness, wellness, and café business based in Černošice, Czech Republic, founded in 2022. The company offers a broad range of services including personal training, group classes, wellness amenities such as sauna and therapy, nutritional counseling, and educational seminars for trainers. The website is professionally designed using WordPress and Elementor, integrating modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The business targets both general fitness enthusiasts and professional athletes, positioning itself as a comprehensive health and performance center with a local market focus. The domain registration is consistent with the business profile and shows no suspicious patterns.

G

Group Mediterra a.s.

vamed-mediterra.cz

49

Group Mediterra a.s. is a Czech healthcare group operating six medical facilities and a secondary medical school, providing comprehensive healthcare services including preventive, acute, and follow-up care. The group serves both domestic and international patients, specializing in complex surgeries and intensive care. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress CMS, jQuery, and Google reCAPTCHA for security. Privacy and cookie policies are implemented with GDPR compliance, and multiple social media channels indicate active engagement. Security posture is good with HTTPS and reCAPTCHA, though additional security headers and policies could enhance protection. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but overall the website and business information appear legitimate and professional.

D

dentum.cz

dentum.cz

48

Dentum.cz is a professional private dental laboratory based in Brno, Czech Republic, specializing in dental prosthetics including ceramic and metal-ceramic works, implant-related prosthetics, and rehabilitation aids. The company has a strong local presence with over 30 years of experience and close collaboration with the Faculty Hospital Brno and Masaryk University. Their website reflects a well-structured business offering with clear contact information and service descriptions. Technically, the site is built on WordPress using modern plugins and frameworks such as Bootstrap and jQuery, with SEO optimizations and Google reCAPTCHA implemented for form security. However, the absence of a visible privacy policy and cookie consent mechanism indicates partial privacy compliance. Security posture is good with HTTPS and spam protection but lacks some HTTP security headers. WHOIS data is unavailable, which slightly reduces domain trustworthiness but the website content and contact details support legitimacy.

S

Salesiánské středisko mládeže – dům dětí a mládeže Brno-Líšeň

salesko.cz

59

Salesko is a Czech non-profit organization dedicated to supporting children and youth primarily from Brno-Líšeň and surrounding areas. The organization offers a variety of youth-oriented activities including sports, music, creative workshops, camps, and cultural events. Their mission focuses on physical, mental, and spiritual development of young people. The website reflects a well-structured community hub with event announcements, registration forms, and news updates, positioning Salesko as a trusted local youth center. Technically, the website is built on WordPress with modern front-end frameworks like Bootstrap and jQuery, supplemented by plugins for forms, calendars, and push notifications. The site is mobile-optimized and uses HTTPS with Google reCAPTCHA to secure forms. Cookie consent is implemented, indicating awareness of privacy compliance, though no dedicated privacy policy page was found. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and form protection but lacks published security policies or incident response contacts. The absence of WHOIS data limits domain trust verification, though the website content and social media presence support its legitimacy. No vulnerabilities or exposed sensitive data were detected. Overall, Salesko presents a credible, community-focused non-profit with a solid digital presence. Enhancements in privacy documentation and security transparency would further strengthen trust and compliance.

S

Salesiánské kluby mládeže, z. s.

skm.cz

52

Salesiánské kluby mládeže (SKM) is a Czech non-profit organization dedicated to youth development through clubs, educational programs, and community activities inspired by the pedagogical principles of Don Bosco. The organization operates multiple regional clubs across the Czech Republic, offering courses for animators, summer camps, and various youth engagement activities. The website reflects a well-structured and content-rich platform supporting their mission with clear contact information and published strategic documents. Technically, the website is built on WordPress with Bootstrap and jQuery, employing modern SEO practices and responsive design. It uses Smart Slider 3 for interactive content and integrates Google Analytics for visitor tracking. The site is served over HTTPS, ensuring encrypted communication, but lacks some advanced security headers and a formal privacy policy page. From a security perspective, the site demonstrates basic good practices such as HTTPS and cookie consent but could improve by implementing additional security headers and providing a vulnerability disclosure mechanism. The absence of WHOIS data reduces domain trustworthiness, though the presence of official registration numbers and consistent branding supports legitimacy. Overall, SKM's website is a credible and professional platform for a medium-sized non-profit organization focused on youth education and community engagement. Strategic improvements in security and privacy documentation would enhance trust and compliance.

Kluzistelesna.cz is a small media website specializing in sports betting analysis, primarily focused on soccer and football. The site publishes regular articles authored by a consistent author, providing betting tips, strategy guides, and insights for sports bettors. The business appears to be newly established in 2024, with domain registration consistent with this timeline. The target audience is sports enthusiasts and bettors seeking analytical content to improve their betting strategies. Technically, the website is built on WordPress, uses Cloudflare DNS services, and includes common web technologies such as jQuery and Font Awesome. The site is mobile optimized and has a good design and navigation structure, though accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy page present but no cookie consent mechanism or GDPR compliance indicators. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the website is functional, professional, and safe for general audiences interested in betting analysis.

R

Rodinný svaz ČR, z.s.

tydenprorodinu.cz

52

Týden pro rodinu is a well-established non-profit initiative organized by Rodinný svaz ČR, z.s., focused on promoting family values and community engagement through annual events across the Czech Republic. The website reflects a mature digital presence with a clear focus on family-oriented content and partnerships with regional governments and organizations. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Maps and social media SDKs to enhance user experience. Security posture is adequate with HTTPS and cookie consent implemented, though improvements in security headers and privacy policy transparency are recommended. The absence of WHOIS data limits domain trust verification, but the overall content and partner ecosystem support legitimacy. Strategic recommendations include enhancing security headers, publishing a privacy policy, and establishing a vulnerability disclosure channel to strengthen compliance and trust.

I

RegioRevue.cz | Zpravodajství Ústeckého kraje

iteplice.cz

38

RegioRevue.cz is a regional news website focused on providing news and information about the Ústecký region in the Czech Republic. The site serves local residents and interested readers with regional news coverage and community updates. The business operates as a small-scale online media outlet with a clear regional focus. Technically, the website is built on WordPress using the Divi theme, leveraging Cloudfront CDN and Google Fonts for performance and styling. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation and relevant content. However, from a security and compliance perspective, the website lacks critical elements such as privacy and cookie policies, security headers, and explicit contact information for incident response or data protection. Analytics usage is present via Google Tag Manager, but privacy compliance is minimal. Overall, the domain registration data is consistent with the website's regional media purpose, and no blocking or WAF challenges were detected, allowing full content access. The site is safe for general audiences with no adult or explicit content detected.

A

Aira Communication, s.r.o.

bydlimekvalitne.cz

58

BydlímeKvalitně.cz is a Czech online magazine focused on modern living, home decoration, and lifestyle inspiration. Operated by Aira Communication, s.r.o., the site provides editorial content, tips, and trends for home and garden enthusiasts. The business model relies primarily on advertising revenue, supported by multiple ad networks and tracking technologies. The website is built on Drupal CMS and integrates various modern web technologies and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and consent management, though some advanced security headers could be added. The absence of WHOIS data is a concern but the site presents clear business identity and contact information, supporting legitimacy. Overall, the site is professional, content-rich, and well-structured for its target audience.

The website lukaspilarik.cz currently serves a security verification page that employs Google reCAPTCHA v3 to prevent automated access. This indicates a protective measure likely to mitigate bot traffic or abuse. The domain is registered since 2016 with a Czech registrar, consistent with the domain's country code and name servers. However, the actual website content is inaccessible due to the security challenge, preventing a full assessment of business operations or services. The page lacks any visible privacy, cookie, or terms of service policies, and no contact or business information is presented. Technically, the site uses Bootstrap 5.3.3 for styling and Google reCAPTCHA for bot protection, but no other frameworks or CMS are detected. Security headers and SSL configuration details are not visible in the provided data, limiting security posture evaluation.

SGS is a leading global company specializing in testing, inspection, and certification services, with a localized website for the Czech Republic market. The website presents professional branding and content focused on business and industrial clients, emphasizing their market leadership and key service offerings. The technical infrastructure leverages modern web technologies including Next.js, React, and Tailwind CSS, with integrated marketing and analytics tools such as Google Tag Manager and LinkedIn Insight. The website is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture shows room for improvement, with no detected security headers and missing visible privacy and cookie policies, which impacts privacy compliance and trust. The WHOIS data for the domain www.sgs.com is not available in the raw WHOIS output, which is unusual for a major enterprise domain and slightly reduces trustworthiness. Overall, the website is functional and professional but would benefit from enhanced security and privacy transparency to improve compliance and user trust.

M

Ministerstvo financí

cityvizor.cz

45

Cityvizor.cz is a Czech Republic government-affiliated web application focused on providing transparent and detailed financial data about municipalities. It targets citizens, municipal officials, and journalists interested in municipal budget visualization and related financial details. The platform is supported by the Ministry of Finance and the partner organization Otevřená města, positioning it as a credible public service tool in the government sector. The website uses modern web technologies including Vue.js and Google Fonts, and is hosted by WEDOS, a Czech hosting provider. The site is well-structured with clear navigation and good mobile optimization, though it lacks explicit privacy and cookie policies, which are important for compliance.

M

Město Benešov

benesov-zdravemesto.cz

47

The website benesov-zdravemesto.cz serves as the official online presence for the city of Benešov's Healthy City initiative, focusing on sustainable development, public participation, and social services. It targets local residents and stakeholders interested in community health and governance. The site is positioned as a government/public service platform with a medium-sized municipal scope, founded in 2016. The content is well-structured, professionally presented, and consistent with official city branding, including ISO 9001 certification as a trust indicator. Technically, the site uses the Vismo CMS platform with standard web technologies including HTML5, CSS3, JavaScript, Google Translate, and Google reCAPTCHA for accessibility and security. Performance and mobile optimization are moderate, with room for improvement in accessibility and SEO. Security posture is adequate with HTTPS and reCAPTCHA but lacks important security headers and explicit incident response information. Overall, the security posture is solid but could be enhanced by implementing security headers, a vulnerability disclosure policy, and improved cookie consent mechanisms. Privacy compliance is basic but present, with a privacy policy and cookie policy available. Business credibility is high due to clear contact information, official domain use, and certifications. The risk assessment indicates a trustworthy municipal website with no critical security issues or suspicious content. Strategic recommendations include enhancing security headers, formalizing incident response contacts, and improving privacy consent mechanisms to align with GDPR best practices.

S

Smart4City

smart4city.cz

59

Smart4City operates a mobile application platform enabling cashless parking payments across multiple Czech cities. The service targets drivers seeking convenient, paperless parking solutions, leveraging modern payment methods such as Apple Pay and Google Pay. The company has established a solid regional presence since its domain registration in 2016, reflecting a mature and stable business model focused on transportation technology. Technically, the website is built on a modern stack including Next.js and React, with integration of Google Maps API for location services, hosted and secured via Cloudflare. The site demonstrates good performance, mobile optimization, and accessibility standards. Security posture is strong with HTTPS enforcement and appropriate security headers, though there is room for improvement in privacy compliance with the addition of cookie consent mechanisms and published security policies. Overall, the website and business exhibit high professionalism and trustworthiness, with clear service offerings and user-friendly design.

M

Město Benešov

benesov-projekty.cz

47

The website benesov-projekty.cz serves as the official municipal portal for the city of Benešov, Czech Republic, providing comprehensive information about the city's investment projects including planned, ongoing, and completed initiatives. The site targets local citizens and stakeholders interested in urban development and public infrastructure. It is positioned as a transparent government resource with clear navigation and relevant content. Technically, the site uses a custom CMS (vismo), standard web technologies, and integrates Google Translate for multilingual support. The design is professional and mobile-optimized, with good accessibility features. Security posture is moderate with HTTPS usage but lacks explicit security headers and incident response information. Privacy compliance is basic with cookie and privacy statements but no active consent mechanism. Overall, the domain registration aligns well with the municipal nature of the site, indicating legitimacy and trustworthiness.

U

Mapa uzavírek v Benešově – Uzavírky, havárie,…

uzavirky-city.cz

53

The website www.uzavirky-city.cz serves as a local informational platform focused on providing real-time and planned road closure and traffic incident data for the city of Benešov, Czech Republic. It targets residents and visitors who need up-to-date traffic information to navigate the city effectively. The site leverages Google Maps API to deliver an interactive map experience, enhancing usability and engagement. The business model appears to be a public or municipal service, offering essential transportation-related updates without commercial intent. From a technical perspective, the site is built on WordPress with custom theming and uses modern web technologies including JavaScript and CSS. The integration of Google Maps API is a key feature, though no advanced frameworks or analytics tools are detected. The site performs moderately well with good mobile optimization and basic accessibility features, but lacks comprehensive SEO and privacy compliance elements. Security posture is adequate with HTTPS enabled, but the absence of security headers and privacy policies indicates room for improvement. No critical vulnerabilities or exposed sensitive data were found, but the lack of WHOIS data and registrant information reduces domain trustworthiness. The site does not display contact information or incident response details, which could impact user trust and compliance with data protection regulations. Overall, the website is a functional and useful local service with a safe content profile. However, it would benefit from enhanced privacy compliance, improved security headers, and clearer business and contact information to strengthen trust and regulatory adherence.

M

Město Benešov

benesov-bezpecnemesto.cz

49

The website 'Benešov - Bezpečné město' serves as an official municipal portal focused on public safety initiatives in Benešov, Czech Republic. It supports a regional project aimed at improving citizen safety and trust in local and national police forces. The site provides news, contact information, and links to related government and safety organizations, positioning itself as a trusted community resource. The business model is public sector oriented, with a medium-sized municipal entity operating the site since 2016. Technically, the site is built on the Vismo CMS platform, utilizing standard web technologies including HTML5, CSS, JavaScript, Google reCAPTCHA for form security, and Google Translate for accessibility. The site is served over HTTPS with a good SSL configuration but lacks some advanced security headers. Performance and mobile optimization are moderate, with room for improvement in accessibility and SEO. From a security perspective, the site demonstrates basic best practices such as HTTPS and CAPTCHA protection on forms but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is partially met with linked privacy and cookie policies, though no active cookie consent mechanism is present. Contact information is clearly provided, enhancing business credibility. Overall, the website is safe, professional, and trustworthy, with no adult or questionable content. Recommendations include enhancing security headers, implementing cookie consent, and adding dedicated security and incident response information to improve compliance and user trust.

Kulturní a informační centrum Benešov s.r.o. operates as a local cultural and information center serving Benešov and surrounding areas in the Czech Republic. The organization focuses on delivering a wide range of cultural events including concerts, theater performances, city celebrations, balls, dance courses, and children's shows. It manages several venues such as Kulturní centrum Na Karlově, Městské divadlo Benešov, and Přírodní divadlo na Konopišti, positioning itself as a key community cultural hub. The website reflects a professional and community-oriented business model with clear service offerings and active event promotion. Technically, the website is built on WordPress using modern plugins and libraries such as jQuery, GSAP, Tiny Slider, and Koko Analytics. It employs a GDPR-compliant cookie consent mechanism and integrates social media channels for broader engagement. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some security headers are missing which could be improved. From a security perspective, the site uses HTTPS with a valid SSL certificate and implements cookie consent controls, indicating a good baseline for privacy compliance. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of WHOIS data limits the ability to fully verify domain registration legitimacy, which slightly impacts trust assessment. Overall, the website presents a trustworthy, well-maintained digital presence for a small government/non-profit cultural entity. Strategic recommendations include enhancing security headers, maintaining plugin updates, and adding a security.txt file for vulnerability disclosure to further strengthen security posture and trust.

STUDIO ERIGO, s.r.o. is a small Czech advertising agency based in Brno specializing in branding, marketing, graphic design, web design, and advertising services. The company targets businesses and organizations seeking comprehensive branding solutions both online and offline. Their website demonstrates a professional presence with a portfolio of clients and projects, indicating an established market position in the regional advertising sector. Technically, the website runs on TYPO3 CMS version 6.1, uses jQuery, Google Tag Manager, and Google Maps API, reflecting a moderately modern digital infrastructure. The site is accessible, mobile responsive to a basic degree, and includes cookie consent and privacy policy mechanisms, showing awareness of privacy compliance requirements. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. WHOIS data is not publicly available, likely due to privacy protection, which is common for small businesses. Overall, the website is professional, trustworthy, and compliant with GDPR, but could improve technical and security aspects.

S

SPA Studio

spa-studiocz.com

62

SPA Studio is a medium-sized retail business specializing in luxury family hot tubs, swim spas, wellness, and sauna products, primarily serving the Czech and Slovak markets. The company operates multiple physical showrooms and provides expert advice, service, and maintenance, positioning itself as the exclusive dealer for Canadian Spa International® products in the region. The website is professionally designed, content-rich, and optimized for user experience and mobile devices. Technically, it leverages WordPress CMS with modern JavaScript libraries and integrates analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Smartlook for user behavior tracking. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear consent mechanism implemented. However, the WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy. Security posture is generally good with HTTPS enforced and privacy plugins in use, but lacks explicit security headers and published incident response or vulnerability disclosure policies. Overall, the website is trustworthy and professional but would benefit from enhanced transparency on domain registration and security policies.

C

Canadian Spa International®

canadian-spa.com

41

Canadian Spa International® is a medium-sized company based in the Czech Republic specializing in the manufacturing and distribution of home and commercial spas, whirlpools, swim spas, and heat pumps. The company emphasizes innovation and quality, offering unique patented technologies and extended warranties. Their market position is that of a premium and innovative spa manufacturer targeting consumers and commercial clients interested in wellness products. The website is built on WordPress with modern JavaScript libraries and tracking tools, providing a good user experience and mobile optimization. However, the absence of privacy and cookie policies indicates compliance gaps, and no security headers were detected, which could be improved to enhance security posture. The WHOIS data for the domain is missing, which raises concerns about domain legitimacy and trustworthiness, although the website content and business information appear professional and consistent. Overall, the website scores well in content quality and business credibility but needs improvements in privacy compliance and security best practices.

Z

Zdravotní klaun

zdravotniklaun.cz

58

Zdravotní klaun is a Czech non-profit organization dedicated to bringing joy and laughter to children in hospitals and geriatric patients in senior homes since 2001. The website reflects a mature digital presence with a professional design and consistent branding. It leverages TYPO3 CMS and integrates multiple modern frontend libraries and accessibility tools to enhance user experience. The organization uses comprehensive cookie consent mechanisms and integrates major analytics and marketing platforms such as Google Analytics, Facebook Pixel, and Microsoft telemetry to monitor and optimize its outreach and engagement. However, the absence of WHOIS data and explicit privacy policy pages introduces some concerns regarding domain legitimacy and full privacy compliance. Overall, the website demonstrates a good security posture with HTTPS enforcement and standard security practices, but could improve by adding more security headers and explicit privacy documentation.

D

De Heus a.s.

energys.cz

49

Energys.cz is a Czech website representing the Energys brand, a producer of horse feed and nutritional products. The brand is part of the international company De Heus a.s., a well-established player in the animal feed industry since 2009. The website targets horse owners, breeders, and equestrian professionals, offering a range of feed products tailored to different horse needs, including premium, base, and nature lines. The site also provides tools such as a feed configurator and maintains active customer engagement through newsletters and social media channels. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Analytics, and Facebook Pixel, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. The WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, Energys.cz presents a professional, trustworthy, and well-maintained online presence in the equine nutrition sector.

E

Equiservis.cz

equiservis.cz

67

Equiservis.cz is a well-established Czech retailer specializing in equestrian products for horses and riders. Operating since 1993, it combines a robust online e-commerce platform with multiple physical stores across the Czech Republic. The company offers a wide range of products including riding apparel, horse feed, stable equipment, and accessories, supported by services such as saddle fitting and a loyalty cashback program. The website demonstrates a professional design with good navigation and mobile responsiveness, targeting horse owners and equestrian enthusiasts primarily in the Czech market. Technically, the website employs modern web technologies including JavaScript frameworks, Google Analytics, and Swiper.js for interactive elements. The site is served over HTTPS with some security best practices observed, such as nonce usage in scripts, but could benefit from additional security headers to enhance protection. Privacy and cookie policies are present and indicate GDPR compliance, reflecting attention to data protection regulations. Security posture is solid but not exemplary; no critical vulnerabilities were detected in the HTML content, and no WHOIS data was available due to privacy or registry restrictions, which slightly reduces trust but is common for retail businesses. Overall, the site is safe, professional, and trustworthy with no adult or questionable content. Strategic recommendations include enhancing security headers, improving accessibility, and maintaining privacy compliance. This analysis concludes that Equiservis.cz is a credible and mature e-commerce business with a good digital presence and moderate security maturity, suitable for its target audience and market segment.

Penzion v Jízdárně is a small hospitality business operating a guesthouse in Olomouc, Czech Republic, with a focus on providing accommodation services including rooms and an apartment. The business targets tourists, visitors to Olomouc, and equine sports enthusiasts, offering pet-friendly lodging and proximity to a partner restaurant. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the site uses modern web technologies such as ES modules, Swiper.js, and Google Fonts, with indications of a SPA framework like Vue.js, though no CMS is explicitly detected. Performance and mobile optimization are good, but accessibility and SEO could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks security headers and published security policies. Privacy compliance is limited, with no cookie policy or consent mechanism detected, and only basic terms and conditions available. Contact information is clearly presented, enhancing business credibility. Overall, the website is trustworthy and functional but could benefit from enhanced privacy and security practices.

I

IQS nano s.r.o.

iqsnano.com

56

IQS nano s.r.o. is a Czech Republic-based technology company specializing in ultra-precise 3D printing systems using two-photon polymerization technology. Founded in 2019 and part of the IQS Group, the company offers advanced hardware and specialized photoresins targeting industries such as biomedicine, photonics, and advanced materials manufacturing. Their flagship product, the IQnano3D printer, supports high-throughput fabrication of complex micro- and nanostructures with extreme precision. The website reflects a professional and technically mature digital presence, leveraging WordPress with Elementor and integrating GDPR-compliant cookie consent mechanisms and Google Analytics with IP anonymization.

D

Drugagency, a. s.

drugagency.cz

61

Drugagency, a. s. operates a professional website focused on providing electronic systems for drug interaction control and certified educational courses related to medication management. The company targets healthcare professionals and institutions primarily in the Czech Republic. The website is built on the Wix platform, demonstrating moderate technical maturity with good mobile optimization and basic SEO. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and privacy compliance documentation. No WHOIS data is available, likely due to privacy protection, which is common for small businesses. Overall, the site presents a legitimate healthcare software provider with room for improvement in privacy and security practices.

DataCentrum systems & consulting, a.s. is a Czech Republic based company specializing in outsourcing payroll and HR services, supported by proprietary software solutions for payroll, personnel information systems, and attendance management. The company targets business clients requiring comprehensive HR and payroll management solutions, positioning itself as a specialized service provider in the Czech market. The website reflects a professional and consistent brand image with clear contact information and recent updates, indicating active business operations. Technically, the website is built on WordPress with common plugins such as LayerSlider and Revolution Slider, using jQuery and Google Fonts. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. Security-wise, HTTPS is enabled, but there is a lack of security headers and privacy/cookie policies, which are areas for improvement. The absence of WHOIS data raises concerns about domain registration legitimacy, though the website content and contact details appear credible. Overall, the security posture is moderate with room for enhancements in compliance and security best practices. The site does not exhibit any adult or questionable content and is safe for general audiences. Strategic recommendations include adding privacy and cookie policies, implementing security headers, verifying domain registration status, and maintaining up-to-date software to mitigate vulnerabilities.

T

TUTORIE

tutorie.cz

61

TUTORIE is an educational content provider based in the Czech Republic, offering knowledge sharing and educational services primarily targeting a general audience interested in learning. The website is built on WordPress using the Divi theme and incorporates SEO best practices via the Yoast SEO plugin. Social media presence on Facebook and Instagram supports community engagement. Technically, the site is moderately optimized with good mobile responsiveness and basic accessibility features. Security posture is moderate, with cookie consent mechanisms in place but lacking visible security headers and explicit security policies. WHOIS data is unavailable, which impacts domain trustworthiness and legitimacy assessment. Overall, the site presents a professional educational platform but would benefit from enhanced security and transparency measures.