Security Directory

I

IBBY Canada

ibbycongress2026.org

64

IBBY Canada operates the website for the 40th IBBY World Congress 2026, an international event focused on children's literature. The site serves as an information hub and registration portal for attendees, leveraging the Shopify platform for e-commerce functionality. The website is well-structured, visually consistent, and targets professionals and enthusiasts in the children's literature community globally. Technically, the site is built on a modern, secure Shopify infrastructure with good performance and mobile optimization. Security best practices such as HTTPS and security headers are implemented, though privacy compliance could be improved with explicit cookie consent and detailed GDPR-aligned privacy policies. The absence of WHOIS data limits domain registration trust analysis, but the professional presentation and social media presence support legitimacy. Overall, the site is a credible, well-maintained platform for a niche educational event.

S

Spolek milců čaje s.r.o.

tea.cz

40

The website www.tea.cz represents a specialized Czech e-commerce business focused on the sale and direct import of fine teas under the brand Dobrá čajovna, operated by Spolek milců čaje s.r.o. It targets tea enthusiasts and consumers interested in premium tea products, offering a curated selection of teas from various countries. The business model is retail e-commerce with community engagement and franchise opportunities. The site is well-branded and consistent, with clear contact information and social media presence, positioning it as a niche market player in the tea retail sector. Technically, the website is built on the PrestaShop platform, leveraging modern web technologies including jQuery, Bootstrap, Google Tag Manager, and PayPal integration. The site is mobile-optimized with good SEO practices and moderate performance. Security is enforced via HTTPS with secure forms, though some security headers are missing. Privacy compliance is partially addressed with a GDPR policy page, but lacks a visible cookie consent mechanism. Security posture is generally good with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and incident response information suggests room for improvement. The WHOIS data is not publicly available, indicating privacy protection, which is typical for small retail businesses. Overall, the website is professional, trustworthy, and safe for general audiences. Recommendations include implementing cookie consent banners, adding security headers, publishing a security policy and incident response contacts, and improving WHOIS transparency if possible to enhance trust and compliance.

S

SUPER Sport spol. s r.o.

boudamama.cz

57

Bouda Máma is a family-oriented wellness hotel located in the Krkonošský národní park in the Czech Republic, offering a range of accommodation options, wellness services, dining, and recreational activities. The business targets families, tourists, and corporate clients seeking relaxation and active leisure in a scenic mountain environment. The website demonstrates a mature digital presence with multilingual support, online booking capabilities, and active social media engagement. Technically, the site uses modern web technologies including Google Analytics, Facebook Pixel, and jQuery, hosted likely by a Czech hosting provider. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data reduces domain transparency but does not detract from the professional presentation and trust signals on the site. Overall, the site is well-designed, user-friendly, and compliant with GDPR requirements.

C

Contipro a.s.

geloren.cz

54

Geloren.cz is the official e-commerce website for Geloren, a brand of joint health supplements produced by Contipro a.s., a Czech biotechnology company established in 1990. The company specializes in the production of hyaluronic acid and related products for both human and veterinary use. The website offers a range of dietary supplements and veterinary products, targeting consumers seeking joint care solutions. The business model is direct-to-consumer e-commerce, leveraging the Shoptet platform for online sales and marketing. Contipro holds a strong market position as a leading Czech manufacturer and a significant global player in hyaluronic acid production. Technically, the website employs a modern e-commerce stack including jQuery, Google Tag Manager, Facebook SDK, and Slick Carousel, hosted on the Shoptet platform. The site is mobile-optimized, accessible, and SEO-friendly with proper metadata and structured data. Performance is moderate with room for improvement. Security posture is good with HTTPS enforced and CSRF protections on forms, though explicit security headers are missing. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The security posture is solid but could be enhanced by adding security headers and explicit incident response contacts. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness. However, the website content and business information align with a legitimate and established company. Overall, the site is professional, trustworthy, and compliant with relevant regulations, serving its target audience effectively.

D

DR. THEISS CZ s.r.o.

drtheiss.cz

55

DR. THEISS CZ s.r.o. operates a professional website focused on healthcare, dietary supplements, and cosmetic products, targeting general consumers and pharmacies primarily in the Czech Republic and German markets. The company claims a strong market position as the third largest personal care brand in German pharmacies, emphasizing quality ingredients and natural science integration. The website is built on the Webflow platform, utilizing modern web technologies and standard marketing tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and secure forms, but lacks advanced security headers and explicit privacy or security policies. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for commercial entities. Overall, the website is trustworthy and professionally maintained, with room for improvement in privacy compliance and security best practices.

U

Usušil & syn

ususil.cz

52

Usušil & syn operates a professional e-commerce website specializing in 100% natural jerky meat products made without additives. The company targets consumers seeking high-protein, natural snacks and maintains a niche market position within the Czech Republic. The website is built on the Shoptet e-commerce platform, leveraging modern technologies such as jQuery, Google Analytics, Facebook SDK, and Amazon Cloudfront CDN for content delivery and tracking. Privacy and cookie consent mechanisms are implemented, reflecting GDPR compliance. However, the absence of WHOIS registration data reduces domain trustworthiness from a registration perspective. Security posture is generally good with HTTPS enforced and CSRF protections in place, but explicit security headers could be improved. Overall, the site presents a trustworthy and professional front for its business, though contact information is limited in the visible content.

K

Kudrna s.r.o.

kudrna.cz

55

The website www.kudrna.cz represents Kudrna s.r.o., a Czech travel agency specializing in active and outdoor vacations including hiking, cycling, water sports, skiing, and expeditions. Founded in 1979, the company offers a wide range of travel packages primarily targeting Czech and Slovak customers interested in adventure and cultural travel experiences. The site features detailed trip listings, articles, and event information, supported by a modern and user-friendly design with good SEO and mobile optimization. Technically, the site uses ASP.NET WebForms with various JavaScript libraries such as jQuery, Fancybox, and noUiSlider, and integrates Google Tag Manager for analytics. However, the absence of WHOIS data and missing privacy and cookie policies indicate areas for improvement in transparency and compliance. Security posture is moderate with HTTPS implied but lacking visible security headers. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

S

SPORTISIMO s. r. o.

loap.cz

63

LOAP.CZ is a Czech Republic based e-commerce retailer specializing in outdoor and sportswear products. The company positions itself as a pioneer in the Czech outdoor fashion and equipment market with over 25 years of experience. The website offers a broad range of products including clothing, footwear, camping gear, and accessories targeting outdoor enthusiasts. The business model is direct-to-consumer retail with a focus on quality and affordability. The website is professionally designed, mobile optimized, and provides clear navigation and relevant content for its target audience.

S

Spain Tourism Official Website

spain.info

45

The website www.spain.info is the official tourism portal for Spain, operated under government auspices to provide comprehensive travel information, destination guides, and booking resources for tourists. It targets a global audience with multilingual support and extensive content on culture, nature, gastronomy, and practical travel tips. The site employs a modern technical infrastructure including Bootstrap, jQuery, Leaflet maps, and integrates Google Analytics and Facebook SDK for marketing and analytics purposes. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. WHOIS data is not publicly available, likely due to privacy protection, but the domain's legitimacy is supported by consistent branding and government association. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity.

S

SportAccord

sustainability.sport

48

The Sustainability.sport portal is a specialized online platform developed by SportAccord and in collaboration with the IOC, dedicated to aggregating and disseminating resources related to sustainability initiatives in sport. It serves a niche audience interested in environmental and social sustainability within the sports sector, offering news, case studies, guidelines, and event information. The platform is positioned as a trusted resource with a clear focus and professional presentation. Technically, the website is built on WordPress with modern frontend technologies including Bootstrap and jQuery, and integrates Google Analytics for user tracking. The site is mobile-optimized and demonstrates good SEO practices, though some accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks DNSSEC, security headers, and a cookie consent mechanism, which are areas for improvement. No incident response or security policy information is provided, which could be enhanced to improve trust and compliance. Privacy policy exists but is basic and does not explicitly confirm GDPR compliance. Overall, the website is credible and professionally maintained, with a moderate security posture and some compliance gaps. Strategic improvements in security headers, DNSSEC, privacy compliance, and incident response transparency would strengthen the platform's trustworthiness and regulatory adherence.

N

Nadace CERGE-EI

nadacecerge-ei.cz

57

Nadace CERGE-EI is a Czech non-profit foundation focused on supporting economic education, research, and teaching through scholarships, grants, and events. The website is professionally designed using the Squarespace platform, featuring clear navigation and relevant content for students, educators, and donors. Privacy and cookie policies are implemented with GDPR compliance, though explicit contact information and security policies are not prominently available. The technical infrastructure is modern but could benefit from enhanced security headers and explicit incident response details. The absence of WHOIS data limits domain trust assessment, but the website's content and structure indicate a legitimate organization.

C

CERGE-EI Foundation

cerge-ei-foundation.org

64

The CERGE-EI Foundation is a U.S.-based non-profit organization dedicated to supporting modern economics education in post-transition and transition economies, particularly in Central and Eastern Europe, Central Asia, and the Southern Caucasus. The foundation offers programs such as faculty development, teaching fellowships, distance learning, and study abroad opportunities, positioning itself as a niche educational supporter in its regional market. The website is professionally designed using the Wix platform, featuring structured data for local business information and basic SEO optimizations. Technically, the site employs modern JavaScript polyfills and Wix's Thunderbolt framework, with moderate performance and good mobile optimization. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published privacy or terms of service pages. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profits but reduces domain trust verification. Overall, the site is safe, professional, and trustworthy, with room for improvement in privacy disclosures and security hardening.

S

Středisko společných činností AV ČR, v. v. i.

hotelyspribehem.cz

46

The website hotelyspribehem.cz represents a hospitality business operated under the auspices of the Academy of Sciences of the Czech Republic (Akademie věd ČR). It offers a portfolio of historical and stylistic hotels, conference and event spaces, gastronomic experiences, and wedding services. The business targets tourists, corporate clients, and event organizers seeking unique, historically rich accommodations combined with modern comfort. The domain is relatively new, registered in 2022, consistent with the business launch timeline. Technically, the website is built on the OpenCms platform, utilizing modern JavaScript libraries such as jQuery and Slick Carousel for UI components, and integrates analytics tools including Google Analytics and Plausible Analytics. The site is hosted on servers managed by Gransy, as indicated by the nameservers. The website demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML. However, it lacks important security headers like Content-Security-Policy and X-Frame-Options, and does not provide a cookie consent mechanism, which is a GDPR compliance gap. No explicit security or incident response policies are published. The WHOIS data is transparent and consistent with the business identity, supporting legitimacy. Overall, the website is professional, trustworthy, and well-positioned in its niche market. Strategic improvements in privacy compliance and security headers would enhance its security posture and regulatory adherence.

PAPUNDEKL ARCHITEKTI s.r.o. is a Czech architectural studio established in 2016, offering comprehensive architectural design services including project conception, administrative approvals, and construction supervision. The website showcases a broad portfolio of architectural projects, targeting clients seeking professional architectural solutions. The company positions itself as a specialized small business within the real estate sector in the Czech Republic. Technically, the website is built on WordPress, leveraging common libraries such as jQuery and AOS for animations, and employs lazy loading for performance optimization. The site is hosted likely by Active24, consistent with the registrar information. Security-wise, the website uses HTTPS with valid SSL certificates, but lacks visible security headers and privacy compliance documents, which are areas for improvement. No forms or direct contact emails/phone numbers are present on the main page, though a physical address is clearly provided. Overall, the site is professional and trustworthy but could enhance privacy and security posture.

G

GardenBros

garden-brothers.cz

57

GardenBros is a small Czech Republic-based business specializing in garden maintenance, design, and realization services. The company emphasizes quality, attention to detail, and fair pricing, targeting homeowners and garden owners seeking professional care. Their website reflects a local service provider with a focus on customer satisfaction and collaboration with other professionals in related fields. Technically, the website is built on the Webnode platform, hosted via AWS Cloudfront CDN, and uses modern web technologies including HTTPS and JavaScript. The site is mobile-optimized and includes basic SEO and accessibility features. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks visible security headers and explicit incident response contacts. WHOIS data is unavailable, which impacts trust and transparency. Overall, the website is functional and professional but could improve in security and compliance transparency.

K

Koso Architekti s. r. o

koso.archi

60

Koso Architekti s. r. o is a small architectural firm founded in 2025, operating primarily in Prague and Basel. The company specializes in residential architecture, including design, realization, and reconstruction of buildings and interiors. Their website presents a professional image with detailed team bios and project portfolios, targeting individual clients, institutions, and municipalities. Technically, the website is built on Webflow with modern technologies and good performance, optimized for mobile and accessibility. Security posture is solid with HTTPS and no exposed sensitive data, but lacks advanced security headers and formal privacy/cookie policies, indicating room for compliance improvement. Overall, the business appears legitimate and professionally managed, though WHOIS data is unavailable, limiting domain trust verification.

S

Správa železnic, státní organizace

zeleznicenaletiste.cz

57

Správa železnic, státní organizace, operates the official website zeleznicenaletiste.cz to provide information about the modernization and construction of railway infrastructure connecting Prague, Václav Havel Airport, and Kladno. The website serves as a communication platform for residents, commuters, and travelers, offering project updates, news, and detailed descriptions of the railway sections. The organization holds a strong market position as a government entity responsible for transportation infrastructure in the Czech Republic. Technically, the website is built on the Liferay CMS platform, utilizing modern JavaScript libraries such as jQuery, Slick Carousel, and Unite Gallery. It integrates analytics and marketing tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized with good navigation and accessibility features, although some improvements in accessibility could be made. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, explicit security headers and a public security policy or vulnerability disclosure program are absent. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the organization's profile. Overall, the website demonstrates a solid security posture and good privacy compliance, with room for enhancements in security policy transparency and accessibility. The site is trustworthy, professionally maintained, and serves its public sector mission effectively.

Fantova budova is a culturally significant Secessionist building in Prague, managed by Správa železnic, the Czech state railway organization. The website serves as an informational and promotional platform for the ongoing restoration project and event space rental. The site is well-structured, professionally designed, and provides relevant content primarily in Czech with English alternatives. Technically, it is built on the Liferay CMS platform and uses modern JavaScript libraries and tracking tools. Security posture is good with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and published security policies. Overall, the site is trustworthy and serves its purpose effectively.

S

Správa železnic, státní organizace

vrtky.cz

59

The website vrtky.cz serves as an official public information portal for the Czech Republic's high-speed rail infrastructure project, managed by Správa železnic, a state organization. It provides comprehensive information about the development, planning, and updates of high-speed rail lines (VRT) aimed at improving transportation efficiency and regional mobility. The site targets Czech residents, transport professionals, and government stakeholders, offering news, maps, and project details. Technically, the site is built on the Liferay CMS platform and employs modern web technologies including jQuery, Slick Carousel, and Google Tag Manager. It integrates analytics and marketing tools such as Google Analytics and Facebook Pixel, and implements cookie consent mechanisms in compliance with GDPR. The site is mobile-optimized and features a professional design with clear navigation. From a security perspective, the website uses HTTPS with good SSL configuration and basic security best practices. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and there is no published security policy or incident response contact information. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, vrtky.cz is a trustworthy and professionally maintained government-related website with a strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further improve security posture and transparency.

S

SCAN4BIM s.r.o.

scan4bim.cz

53

SCAN4BIM s.r.o. is a small Czech Republic-based company specializing in 3D laser scanning and building documentation services, primarily targeting construction professionals and property owners needing accurate digital data for reconstruction and project planning. The website is built using the Wix platform, indicating a moderate level of digital maturity with basic mobile optimization and standard web technologies. The site content is focused and relevant to its niche service offering but lacks comprehensive business and privacy information. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but the absence of security headers and privacy policies indicates room for improvement. The missing WHOIS data reduces trust in domain legitimacy, though the website itself appears professional and functional. Overall, the site presents a basic but legitimate online presence for a specialized service provider.

K

Klinker Centrum s.r.o.

klinkercentrum.cz

64

Klinker Centrum s.r.o. is a well-established Czech company specializing in the supply and realization of clay brick facades, including facing bricks, brick cladding, paving bricks, and fired roofing tiles. With over 25 years of experience, the company positions itself as a market leader in the Czech Republic, offering comprehensive services from product supply to facade realization. The website reflects a mature digital presence with professional design, clear navigation, and active content updates including news and a magazine section. Technically, the site employs modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Google Tag Manager, alongside security measures like Google reCAPTCHA and cookie consent mechanisms. However, the absence of WHOIS data and lack of visible HTTP security headers suggest areas for improvement in domain transparency and security hardening. Overall, the site is safe, GDPR compliant, and provides multiple contact channels, supporting both B2B and B2C customer engagement.

H

Hinton, a.s.

hinton.cz

46

Hinton, a.s. is a Czech construction company specializing in general contracting, foundations, aluminum facades, and monolithic concrete structures. The company emphasizes quality workmanship and a personal approach to investors, positioning itself as a reliable partner in the Czech construction market. The website showcases a professional portfolio of projects and references, supported by active social media channels and comprehensive contact information. Technically, the site uses modern web technologies including Mapbox GL JS and Google Fonts, with a custom or Nette-based CMS platform. The site is mobile-optimized and SEO-friendly, though some improvements in accessibility and security headers are recommended. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks published security policies and incident response information. WHOIS data is unavailable, limiting domain legitimacy verification, but the overall business credibility and website professionalism remain high. Strategic recommendations include enhancing security headers, publishing security policies, and implementing a vulnerability disclosure mechanism.

C

Cegra

cegra.cz

55

Cegra is a Czech Republic-based technology company specializing in supporting computer graphics and BIM (Building Information Modeling) technologies. The company offers a range of services including software sales, hardware for Archicad, training courses, consulting, and technical support. Positioned as a regional leader in BIM support, Cegra targets architects, BIM professionals, students, and educators. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress with a modern tech stack including Gravity Forms, Yoast SEO, Google Tag Manager, and various analytics tools such as Microsoft Clarity and Smartlook. The site is mobile-optimized and performs moderately well. Privacy compliance is well addressed with comprehensive cookie and privacy policies and consent mechanisms. From a security perspective, the site uses HTTPS and implements reCAPTCHA on forms, but lacks visible security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's business claims, indicating legitimacy. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security headers and incident response transparency would enhance the security posture further.

A

ASKO

asko.com

67

ASKO is a globally recognized brand specializing in the manufacture and retail of high-quality domestic and professional kitchen and laundry appliances. The company emphasizes Scandinavian design principles, durability, and user-friendly features, targeting both consumers and professional markets. Their product range includes kitchen appliances and laundry machines designed to harmonize with modern homes and professional environments. The website reflects a mature digital presence with multiple localized markets and languages, indicating a broad international footprint. Technically, the website is built on a modern Angular framework integrated with SAP Commerce Cloud, leveraging CDNs and third-party services such as Usercentrics for consent management and Google Tag Manager for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, explicit security policies and incident response information are not publicly available, which could be improved to enhance trust. The WHOIS data is privacy protected, a common practice for global brands, and no suspicious patterns were detected. Overall, ASKO's website presents a professional, secure, and compliant digital front that supports its market position as a premium appliance manufacturer. Strategic improvements in transparency around security policies and contact information could further strengthen user trust and compliance posture.

A

Aluprof SA

aluprof.eu

53

Aluprof SA is a leading manufacturer of aluminum systems for windows, doors, facades, and sun protection solutions, serving a broad international market with a strong presence in Europe and the USA. The company emphasizes innovation, energy efficiency, and sustainable development, supported by a comprehensive portfolio of certified products and a professional digital presence. The website demonstrates a mature technical infrastructure using modern web technologies and tracking tools, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, CSRF protection, and no exposed sensitive data, though improvements can be made in cookie consent and security policy transparency. Overall, Aluprof presents a trustworthy and professional business with a well-structured online presence.

C

CorCo Systems a.s.

corrency.cz

59

Corrency.cz is a Czech Republic-based platform operated by CorCo Systems a.s. that focuses on revitalizing local economies through municipal projects supporting residents, children, seniors, and cultural activities. The platform collaborates with government bodies and financial institutions, positioning itself as a niche solution for regional economic development. The website demonstrates a good level of digital maturity with modern technologies such as Google Analytics, Microsoft Clarity, and Bootstrap frameworks, alongside a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS and nonce usage, though improvements in security headers and incident response transparency are recommended. The absence of WHOIS data limits domain trust verification, but the presence of credible partnerships and testimonials supports legitimacy. Overall, the site is professional, user-friendly, and trustworthy with moderate technical performance and good privacy compliance.

L

Lex Aš

lexas.cz

52

Lex Aš is a regional development initiative focused on revitalizing the Aš area in the Czech Republic through the establishment of a special economic zone and regulatory sandboxes. The website presents a clear business model aimed at supporting local businesses and improving quality of life in a structurally challenged region. Technically, the site uses modern web technologies including Mapbox GL JS for interactive maps and Google Tag Manager for analytics, though the analytics ID is not set. Security posture is moderate with HTTPS enabled but lacks explicit security headers and cookie consent mechanisms. The domain registration is recent but consistent with the project's timeline and shows no suspicious patterns. Overall, the website is professional and trustworthy but could improve privacy compliance and security best practices.

I

iAšsko.cz (implied editorial team)

iassko.cz

58

iassko.cz is a Czech regional news portal primarily serving the Aš region and Karlovy Vary area. It provides localized news, event calendars, cultural updates, and community information. The site targets local residents and stakeholders, operating on an advertising-supported model with premium content and newsletter subscriptions. The website is professionally designed with consistent branding and good content quality, reflecting a small but credible media outlet. Technically, the site uses modern web technologies including Bootstrap, jQuery, OwlCarousel, and Google Analytics, ensuring mobile responsiveness and moderate performance. Security posture is adequate with HTTPS, CSRF protection, and cookie consent mechanisms, though security headers and explicit incident response policies are absent. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the site is trustworthy, safe, and well-positioned as a local news source.

M

Městská policie Aš

mestskapolicieas.cz

47

Městská policie Aš is the official municipal police service for the city of Aš in the Czech Republic. The website serves as a public information portal providing details about police activities, crime prevention, public safety, and contact information. The organization focuses on maintaining public order, enforcing local laws, and community engagement. The site is positioned as a trusted local government service with clear communication channels and relevant updates for residents and visitors. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile-optimized and includes structured data for SEO benefits. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and incident response information could be improved. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site reflects a professional and trustworthy municipal service with room for enhanced security and transparency features.

M

Město Aš

info-as.cz

52

The website www.info-as.cz serves as an official tourism and local information portal for the city of Aš in the Czech Republic. It provides comprehensive details about local activities, events, cultural sites, accommodation, and gastronomy, targeting tourists, families, and local visitors. The site is well-structured with clear navigation and offers multilingual support. It integrates modern JavaScript libraries and tracking tools such as Google Analytics and Tag Manager, with a cookie consent mechanism ensuring GDPR compliance. However, the absence of WHOIS data limits transparency regarding domain ownership, which slightly impacts trustworthiness. Technically, the website employs a modern tech stack including jQuery, Swiper.js, and LightGallery, delivering a moderate performance with good mobile optimization. Security posture is adequate with HTTPS enforced and consent management in place, but lacks explicit security headers and dedicated security or incident response policies. Contact information is available via a GDPR-compliant form, though no direct company emails or phone numbers are explicitly listed. Social media presence on Instagram and Facebook enhances engagement and trust. Overall, the site is professional, content-rich, and user-friendly, suitable for its purpose as a local tourism hub. The main risk lies in the lack of domain registration transparency and missing formal security policies. Strategic improvements in security headers, terms of service, and WHOIS transparency would enhance credibility and security posture.

S

Sencito

chytrejsiobec.cz

49

Sencito is a technology company specializing in smart IoT solutions for municipalities, offering a range of sensors, modules, and a mobile application to enable smarter community management. Their market position is focused on small to medium municipalities primarily in the Czech Republic and surrounding regions, providing affordable and easy-to-deploy IoT infrastructure. The website is professionally designed, multilingual, and provides detailed information about their products and services, targeting both municipal authorities and citizens. Technically, the website uses modern JavaScript libraries such as jQuery, Blueimp Gallery, Owl Carousel, and AOS for animations, alongside Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized and includes cookie consent mechanisms, indicating a moderate level of digital maturity. However, no CMS or hosting provider details were identified. From a security perspective, the site enforces HTTPS and uses encrypted connections. Cookie consent and spam protection on forms are implemented. However, no explicit security headers were detected, and there is no published security policy or incident response information, which are areas for improvement. The absence of WHOIS data reduces transparency but does not indicate malicious intent. Overall, the website presents a trustworthy and professional front for a niche IoT technology provider, with moderate security posture and good privacy compliance. Strategic improvements in security policy transparency and technical security headers would enhance trust and compliance.

D

DSO Pokocábí

pokocabi.cz

52

DSO Pokocábí is a voluntary association of municipalities in the Czech Republic focused on addressing water management infrastructure challenges, particularly potable water shortages in the region between the Brdy ridges and the Vltava river. The website serves as an official informational portal for the association, providing updates, contact information, and links to member municipalities. The business model is non-profit and government-oriented, targeting local municipalities and residents. Technically, the site uses a combination of jQuery, Bootstrap, Swiper.js, and other JavaScript libraries, likely built on a proprietary CMS platform provided by Galileo Corporation. The site is mobile-optimized and has a clear navigation structure but lacks some advanced SEO and accessibility features. Security posture is moderate with HTTPS usage and cookie consent implemented, but missing security headers and absence of explicit privacy and security policies are notable gaps. WHOIS data is unavailable, limiting domain trust verification, but the site content and contact details appear legitimate. Overall, the site is functional and professional but could improve in security and compliance documentation.

A

Asociación de Hoteles de Cancún, Puerto Morelos e Isla Mujeres

ahcancun.com

62

The Asociación de Hoteles de Cancún, Puerto Morelos e Isla Mujeres is a well-established hospitality association founded in 1977, representing over 120 hotels and more than 50 allied members in the Cancun region. The website serves as an information hub for the association's activities, events, sustainability initiatives, and training programs. The digital presence is built on Squarespace, leveraging modern web technologies and multilingual support via Weglot. Security posture is strong with HTTPS and HSTS enabled, and forms protected by Google reCAPTCHA. However, the absence of explicit privacy and cookie policies, as well as missing WHOIS registrant data, present compliance and trust challenges. Overall, the site is professional and functional but would benefit from enhanced transparency and compliance documentation.

William H. Coleman, Inc. operates a member login portal primarily serving its clients, likely in the energy sector. The website provides essential member services such as login, sign-up, password recovery, and contact options. The company has an established presence since 2012, supported by a domain registration consistent with its business age and sector. The site is built on ASP.NET Web Forms technology with Bootstrap for styling and includes basic client-side validation and CAPTCHA to enhance security. The technical infrastructure suggests hosting on Microsoft Azure DNS with GoDaddy as the registrar. Security posture is moderate with HTTPS enforced and CAPTCHA implemented, but lacks modern security headers and uses an outdated Google Analytics script. Privacy compliance is basic with a privacy policy and terms of service linked but no cookie consent mechanism. Overall, the website is functional and professional but could benefit from security and privacy enhancements.

4

4Shop.cz - Zbyněk Velecký

4shop.cz

51

4Shop.cz is a well-established Czech e-commerce platform provider offering customizable and scalable online store solutions since 2004. The company targets small to medium-sized businesses seeking professional e-shop creation, rental, and marketing services. Their platform includes AI-powered features, extensive modules, and integrations with popular payment gateways and marketplaces. Technically, the website uses modern JavaScript libraries like jQuery and integrates third-party marketing and analytics tools with proper cookie consent mechanisms. The site is mobile-optimized and SEO-friendly, reflecting a mature digital presence. Security posture is good with HTTPS and cookie consent, though explicit security policies and incident response contacts are not published. Overall, the platform demonstrates high business credibility and technical maturity with room for improvement in formal security disclosures.

P

Prima Obchod s.r.o.

prima-obchod.cz

9

Prima Obchod s.r.o. operates an e-commerce website specializing in textile haberdashery, fashion and clothing accessories, and crafting supplies primarily targeting consumers in the Czech Republic. The website presents a professional and well-structured online retail platform with a broad product catalog and clear navigation. The business appears to be a medium-sized retail entity with a strong local market presence and positive customer trust indicators such as a high recommendation rate. Technically, the website employs modern tracking and marketing technologies including Google Tag Manager, Facebook Pixel, and Bing UET, alongside consent management mechanisms to comply with privacy regulations. The site is mobile-optimized and SEO-friendly, offering a good user experience. Security-wise, the site enforces HTTPS and uses cookie consent scripts but lacks advanced security headers and explicit security policies or incident response information, which could be improved. The absence of WHOIS data for the domain is a notable concern, reducing the trust score for domain legitimacy. Overall, the website is functional, professional, and safe for general audiences, but would benefit from enhanced transparency in domain registration and security practices.

Č

ČSB - Český svaz biatlonu

biatlon.cz

10

The website www.biatlon.cz serves as the official online presence of the Czech Biathlon Federation (ČSB - Český svaz biatlonu). It provides comprehensive information about the sport of biathlon in the Czech Republic, including news, event schedules, results, organizational details, and multimedia galleries. The site targets biathlon enthusiasts, athletes, coaches, and the broader sports community within the country. It operates as a non-profit federation platform, positioning itself as the authoritative source for Czech biathlon information. Technically, the website is built on the WordPress CMS platform, utilizing popular libraries and frameworks such as jQuery, Bootstrap, Owl Carousel, LightGallery, and SwiperJS. SEO is enhanced through the Yoast SEO plugin, and the site includes structured data (JSON-LD) for improved search engine understanding. The site is mobile-optimized with responsive design elements and provides a cookie consent mechanism compliant with GDPR regulations. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent banners. However, no explicit security headers were detected, and no security.txt or vulnerability disclosure information is present. The absence of visible contact emails or phone numbers and the lack of WHOIS data transparency slightly reduce the overall trustworthiness. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the site demonstrates a solid digital presence with good content quality and technical implementation. Strategic improvements in security headers, contact transparency, and WHOIS data availability would enhance trust and compliance. The site is safe for general audiences and does not contain any adult or explicit content.

Picabo.cz, a.s. is a Czech Republic based company established in 2000, providing technical support services as indicated by their 24-hour hotline. The website is minimalistic, focusing on basic company contact and registration information without detailed service descriptions or interactive features. The technical infrastructure is simple, using basic HTML and CSS without advanced frameworks or CMS detected. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and missing privacy and cookie policies. No analytics or tracking technologies are present, indicating minimal user data collection. Overall, the website is functional but lacks modern security and privacy compliance features, which could impact user trust and regulatory adherence.

T

Trinity Hotels & Resorts

trinityhotels.sk

10

Trinity Hotels & Resorts is a Slovak hospitality group operating multiple family-friendly hotels and resorts, offering comprehensive vacation experiences including animation programs, wellness, gastronomy, and corporate event hosting. The website is professionally designed with clear multilingual support and strong branding consistency. Technically, it uses a modern stack including Bootstrap and Vue.js, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though some security headers could be improved. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the site reflects a credible and trustworthy business with active social media engagement and partner ecosystem.

L

Los Kachlos s.r.o.

loskachlos.cz

49

Los Kachlos s.r.o. is a well-established Czech company specializing in the import and retail of premium design tiles and coverings from Spain and Italy since 1996. The company operates multiple physical showrooms across Czech Republic and Slovakia and offers a comprehensive product range including retro, vintage, large format, and technical tiles for various interior and exterior applications. Their business model combines retail, wholesale, e-commerce, and design consultancy services, positioning them as a market leader in their niche. Technically, the website is built on a mature platform (iCard.cz) using Bootstrap and Vue.js, with modern analytics and marketing integrations. The site is mobile optimized and provides a good user experience with clear navigation and rich content. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and policies are missing. The absence of WHOIS data limits domain trust analysis, but the website content and business information appear professional and credible. Privacy policy and terms of service pages are not found, indicating room for compliance improvement.