Security Directory

P

Perfect System, s.r.o.

cbsystem.cz

52

CBSystem.cz is an established online ticketing platform primarily serving the Czech Republic market, specializing in the pre-sale and reservation of tickets for cultural and entertainment events such as theater, music, festivals, and sports. The company behind the site is Perfect System, s.r.o., founded in 2004, indicating a mature presence in the regional event ticketing industry. The website offers a multilingual interface and integrates with a dedicated ticket sales subdomain, providing a comprehensive event browsing and purchasing experience for general audiences interested in cultural activities. Technically, the website is built on Joomla CMS and leverages a variety of frontend technologies including jQuery, Bootstrap, and several JavaScript libraries for UI components and date handling. It employs Google Analytics, Google Tag Manager, Facebook SDK, and Adform for tracking and marketing purposes. The site is served over HTTPS, ensuring encrypted communication, but lacks some advanced security headers and explicit privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site demonstrates a moderate security posture with HTTPS enabled and no visible sensitive data exposure. However, the absence of security headers, vulnerability disclosure mechanisms, and privacy/cookie policies indicates areas for improvement. The domain registration data is consistent with the business claims, showing a long-standing domain age and no privacy protection, which supports legitimacy. Overall, CBSystem.cz is a functional and professional ticketing platform with good content quality and user experience. To enhance trust and compliance, it should implement comprehensive privacy and cookie policies, improve security headers, and provide clear incident response contacts. These steps will strengthen its security posture and regulatory compliance, benefiting both the business and its customers.

M

Mikroregion Horní Vltava-Boubínsko

hornivltava.cz

58

Mikroregion Horní Vltava-Boubínsko is a regional non-profit interest association focused on the development and cooperation of municipalities located in the Šumava National Park and Protected Landscape Area. The organization supports local development projects, cultural heritage preservation, and tourism promotion within its member municipalities. The website reflects a well-structured regional portal with clear navigation and relevant content for residents and visitors. Technically, the site uses common JavaScript libraries such as jQuery, Flexslider, and Fancybox, providing a moderate level of interactivity and responsiveness. Privacy compliance is well addressed with a detailed cookie consent mechanism and a comprehensive privacy policy. Security posture is moderate, with HTTPS implied but lacking explicit security headers and incident response information. Overall, the site presents a trustworthy and professional image consistent with a small regional government or non-profit entity.

Z

Základní škola a Mateřská škola Jistebnice

zsjistebnice.cz

44

Základní škola a Mateřská škola Jistebnice is a local educational institution providing primary and nursery education services to the community of Jistebnice, Czech Republic. The website serves as an information portal for parents, students, and local stakeholders, offering updates on school activities, contact information, and resources such as school menus and forms. The institution operates as a public organization under the municipality of Jistebnice, focusing on educational and childcare services. Technically, the website is built on the WRS content management system by W Partner s.r.o., utilizing a combination of legacy and modern web technologies including jQuery, Bootstrap, and various slider and gallery plugins. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. The design is consistent and professional, supporting a positive user experience. From a security perspective, the website uses HTTPS but lacks visible advanced security headers and explicit privacy or cookie consent mechanisms. The use of an outdated jQuery version presents a potential security risk. No WHOIS data is available for the domain, which reduces domain trustworthiness, although the website content and contact details appear legitimate and consistent with a public educational institution. Overall, the website is functional and trustworthy for its intended audience but would benefit from improved security practices, updated technology stack, and enhanced privacy compliance to strengthen its digital maturity and risk posture.

W Partner s. r. o. is a Czech small-sized technology company specializing in web editorial systems and sales of computing technology. Their website offers services including a custom web content management system (WRS), IT hardware sales, hardware and software servicing, training, and virtual tours. The company targets small to medium businesses or individuals seeking easy-to-manage web solutions and IT support within the Czech Republic. The website is professionally designed with good content quality and consistent branding, supporting their niche market position. Technically, the website uses a custom CMS and incorporates several JavaScript libraries such as jQuery 1.11.3, Fancybox, Flexslider, and Bootstrap 4 beta. While the site is functional and moderately optimized for mobile and accessibility, some libraries are outdated, posing potential security risks. No advanced frameworks or hosting provider details are evident. SEO and accessibility features are basic but adequate for the target audience. From a security perspective, the site uses HTTPS but lacks visible security headers and employs outdated JavaScript libraries, which could expose vulnerabilities. There is no explicit cookie consent mechanism despite the presence of cookie and privacy policy pages. WHOIS data is missing, which reduces trustworthiness from a domain registration perspective, though the website content and business information appear legitimate and consistent with a small Czech IT company. Overall, the website is safe, professional, and functional but would benefit from technical and security updates, improved privacy compliance, and better domain registration transparency to enhance trust and security posture.

Onlinehosting s.r.o operates the website onlinehosting.cz, providing professional and extremely fast web hosting services primarily targeting demanding projects, businesses, and open source PHP projects. The company offers a range of services including PHP webhosting, large capacity email hosting, corporate cloud storage, and managed server rentals. With over 24 years in the market, the company positions itself as a reliable and technologically current hosting provider in the Czech Republic. The website is well-designed, mobile-optimized, and uses modern frontend technologies such as Bootstrap and Font Awesome, alongside Google Analytics for traffic monitoring. Security posture is adequate with HTTPS enforced and secure login forms, though there is room for improvement in security headers and updated libraries. Privacy and cookie policies are not found, indicating a gap in compliance and transparency. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

VIRTUAL ZOOM s.r.o. is a Czech-based digital agency specializing in professional web design services primarily targeting the hospitality sector and related industries. Their offerings include custom web design, a proprietary CMS platform named ZOOM DRIVER, and various plug-ins to enhance website functionality. The company positions itself as a partner in digital excellence, focusing on modern, responsive, and technically sound web solutions that help clients attract and convert customers. The website content is well-structured, professionally presented, and localized in Czech, with clear contact information and social media presence. Technically, the website employs a modern JavaScript stack including jQuery, AOS for animations, Tippy.js for tooltips, and Google services such as reCAPTCHA and Tag Manager for analytics and security. The site uses HTTPS with good SSL configuration and includes a GDPR-compliant cookie consent mechanism. However, some security headers are missing, and there is no explicit security or incident response policy published. The CMS is custom-built, indicating a tailored approach but also requiring ongoing maintenance to avoid vulnerabilities. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and bot protection via reCAPTCHA. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is evident through cookie management and a privacy policy page. However, the absence of WHOIS registration data for the domain is a significant concern, potentially indicating an unregistered domain or privacy protection that conflicts with the professional business presentation. Overall, the website is professional, functional, and compliant with basic privacy standards, but the missing WHOIS data reduces trustworthiness. Strategic recommendations include improving security headers, publishing terms of service, and verifying domain registration details to enhance credibility and trust.

H

HAVEL & PARTNERS

nextzeny.sk

44

NextŽeny is a project led by the reputable law firm HAVEL & PARTNERS, focusing on the global trend of wealth transfer into the hands of women, supporting female entrepreneurship, investment, and networking in the Czech and Slovak markets. The website provides research, studies, and a magazine to inform and empower women managing wealth. Technically, the site is built on WordPress with modern performance optimizations and multilingual support. Security posture is solid with HTTPS and DNSSEC enabled, though explicit security policies and cookie consent mechanisms are missing. The WHOIS data shows inconsistencies with domain creation dates, which should be verified to ensure trustworthiness. Overall, the site is professional, content-rich, and targeted at a finance-savvy female audience in Slovakia and the Czech Republic.

G

Geis CZ s.r.o.

geis-group.cz

54

Geis CZ s.r.o. is a well-established logistics company operating primarily in the Czech Republic, offering a comprehensive range of transportation and logistics services including pallet transport, full truckload, warehousing, air and sea freight, packaging, and customs services. The company emphasizes sustainability and responsibility through its MissionZero program and has a strong international network supported by numerous branches and partners. The website is professionally designed, content-rich, and targets business clients seeking logistics solutions. Technically, the site uses modern JavaScript libraries and analytics tools, with good mobile optimization and SEO practices. Security posture is generally good with HTTPS and cookie consent mechanisms, though it lacks visible security headers and explicit published security policies. WHOIS data is unavailable, which slightly reduces domain trust but the overall digital footprint and business presence support legitimacy.

E

EPRAVO.CZ, a.s.

epravo.cz

51

EPRAVO.CZ, a.s. operates a well-established Czech legal information portal providing comprehensive legal content including laws, court decisions, articles, and educational resources. The platform targets legal professionals and the general public interested in law, offering subscription-based premium services and an e-shop for courses and publications. The website demonstrates a mature digital infrastructure utilizing modern web technologies such as jQuery, Bootstrap, and various analytics and marketing tools. Security posture is solid with HTTPS enforcement, bot protection via Cloudflare Turnstile, and cookie consent mechanisms, although some security headers could be improved. The absence of WHOIS data reduces domain registration transparency but does not detract from the professional presentation and trust signals evident on the site. Overall, the site is a credible and valuable resource in the Czech legal domain.

M

MMN, a.s.

nemjil.cz

60

MMN, a.s. operates as a regional hospital in Jilemnice, Czech Republic, providing a broad range of healthcare services including emergency care, radiology, blood donation, and pharmacy services. The website positions the hospital as a modern and future-oriented healthcare provider emphasizing quality, safety, specialization, and interdisciplinary cooperation. The target audience includes patients, healthcare professionals, and the general public seeking medical services in the region. The hospital maintains an active online presence with social media channels and an e-shop pharmacy partner.

The website www.janskelazne.cz serves as an official tourism and accommodation information portal for Janské Lázně and the SkiResort Černá hora-PEC, the largest ski resort in the Czech Republic. It offers online booking services with promotional discounts on ski passes and leisure activities, targeting tourists and visitors interested in winter sports and summer leisure in the Krkonoše region. The site demonstrates a consistent brand presence and provides clear contact information, reinforcing its role as a local tourism information center with over two decades of experience. Technically, the website employs a traditional web stack including jQuery, jQuery UI, Google Analytics, Google Tag Manager, and Google Maps API, indicating moderate digital maturity. The site is mobile-optimized with good navigation and content relevance, although some accessibility features could be improved. Performance is moderate, with external dependencies on trusted providers for fonts and analytics. From a security perspective, the site uses HTTPS and standard tracking scripts but lacks explicit security headers and privacy/cookie policies, which are critical for GDPR compliance and user trust. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which should be addressed to enhance trustworthiness. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security practices, and verification of domain registration details to strengthen its security posture and business credibility.

VIRTUAL ZOOM s.r.o. is a Czech Republic-based company specializing in digital solutions for the hospitality sector, including automated mailing systems, loyalty programs, e-commerce platforms, and custom website development. Established since 2003, it positions itself as a leader in smart digital solutions for hotels, restaurants, and related businesses across Europe. The website is professionally designed, content-rich, and targets hospitality businesses seeking to enhance customer engagement and revenue through digital tools. Technically, the site uses modern JavaScript libraries and frameworks, integrates Google Tag Manager and reCAPTCHA for security and analytics, and implements cookie consent mechanisms to comply with privacy regulations. Security posture is good with HTTPS enforced and secure form handling, though some security headers are missing. WHOIS data is unavailable, which slightly impacts trust but the website's professional presentation and client testimonials support its legitimacy. Overall, the site is well-structured, user-friendly, and compliant with GDPR, making it a credible digital presence for its business domain.

H

HERHSIANG Information Co., LTD.

tgb.com.tw

8

The website tgb.com.tw/webmail serves as a corporate webmail login portal primarily targeting employees or users associated with the tgb.com.tw domain. The business behind the site is HERHSIANG Information Co., LTD., a Taiwanese company providing webmail services. The site is minimalistic, focusing on secure user authentication with features such as XSRF tokens and two-step verification code mechanisms. However, it lacks publicly visible privacy, cookie, or terms of service policies, and no contact information is provided on the page. From a technical perspective, the site uses standard web technologies including HTML, CSS, JavaScript, jQuery, and jQuery UI. The performance and mobile optimization are basic, with no advanced frameworks or CMS detected. Security best practices are partially implemented, but the absence of visible HTTPS enforcement and security headers reduces the overall security posture. No analytics or advertising scripts are present, indicating a focus on internal use rather than marketing. Security-wise, the site shows some good practices such as hidden XSRF tokens and password input protections, but the lack of explicit HTTPS enforcement and security headers is a concern. There is no evidence of vulnerability disclosure or incident response policies. The domain registration data is consistent and legitimate, registered through TWNIC with no suspicious patterns. Overall, the website is functional for its intended purpose but would benefit from enhanced security measures, privacy compliance, and improved user trust signals. Strategic recommendations include implementing HTTPS with HSTS, adding security headers, publishing privacy and cookie policies, and providing clear contact information to improve credibility and compliance.

P

Pacific Northwest Trail Association

pnt.org

53

The Pacific Northwest Trail Association (PNTA) is a dedicated non-profit organization focused on the stewardship, construction, and maintenance of the Pacific Northwest Trail, a 1,200-mile National Scenic Trail. The website serves as a comprehensive resource for hikers, volunteers, donors, and conservationists, offering maps, trip planning tools, and updates on trail conditions and organizational activities. The PNTA maintains an active digital presence with regular blog posts, newsletters, and social media engagement, positioning itself as the authoritative steward of the trail. Technically, the website is built on WordPress with a robust set of plugins including WooCommerce for e-commerce, Events Manager for event handling, and WP FullCalendar for calendar displays. The site uses modern web technologies such as jQuery, Google Maps API, and FontAwesome icons, delivering a responsive and user-friendly experience. SEO and accessibility are adequately addressed, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses secure external scripts. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no visible security or incident response policies are published. The WHOIS data is incomplete, which slightly impacts trustworthiness, but the professional presentation and active content mitigate concerns. Overall, the PNTA website is a well-maintained, content-rich platform serving a niche outdoor and conservation community. Strategic improvements in privacy policy visibility, security header implementation, and WHOIS transparency would enhance trust and compliance.

S

SkiResort ČERNÁ HORA – PEC

skiresort.cz

50

SkiResort ČERNÁ HORA – PEC operates as the largest ski resort in the Czech Republic, offering extensive skiing terrain across six interconnected ski areas. The business targets winter sports enthusiasts, families, and tourists, providing services such as ski pass sales, ski schools, equipment rental, and accommodation. The website demonstrates a mature digital presence with modern technologies, interactive booking forms, and comprehensive content. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are lacking. The absence of WHOIS data limits domain trust verification but does not detract significantly from the overall legitimacy given the professional branding and partner affiliations. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and improving transparency around data protection officers and incident response.

S

SEDIGAS. Asociación Española del Gas

sedigas.es

48

SEDIGAS is a well-established Spanish non-profit association representing the gas industry, founded in 1970. The organization focuses on promoting the gas sector, ecological transition, renewable gases, training, certification, and communication within Spain. The website reflects a professional and comprehensive digital presence with rich content, including sector data, press releases, and educational resources. The target audience includes industry professionals, companies, and the general public interested in energy and gas topics. Technically, the website uses a modern tech stack including Bootstrap, jQuery, FontAwesome, and Google reCAPTCHA, ensuring a responsive and user-friendly experience. The site is well-optimized for SEO and mobile devices, with good accessibility features. Performance is moderate, with multimedia content such as videos and sliders enhancing engagement. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks visible security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear cookie and privacy policies and consent mechanisms aligned with GDPR requirements. Overall, the website presents a low-risk profile with strong business credibility and digital maturity. The main limitation is the lack of publicly accessible WHOIS data due to registry restrictions, which slightly reduces domain trust analysis completeness. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further improve trust and security posture.

S

Střední průmyslová škola Třebíč

spst.cz

50

Střední průmyslová škola Třebíč is a well-established regional technical secondary school in the Czech Republic, offering a variety of vocational and technical education programs including energy, IT, mechanical engineering, and artistic metalworking. The school maintains strong industry partnerships and has received multiple certifications and awards, positioning it as a reputable educational institution in its region. The website is built on Drupal 10, leveraging modern web technologies and providing a good user experience with clear navigation and mobile optimization. However, the absence of explicit privacy and cookie policies and missing WHOIS data present compliance and trust challenges. Security posture is moderate with HTTPS implied but lacking visible security headers and incident response information. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

S

Správa železnic, státní organizace

zeleznicenaletiste.cz

57

Správa železnic, státní organizace, operates the official website zeleznicenaletiste.cz to provide information about the modernization and construction of railway infrastructure connecting Prague, Václav Havel Airport, and Kladno. The website serves as a communication platform for residents, commuters, and travelers, offering project updates, news, and detailed descriptions of the railway sections. The organization holds a strong market position as a government entity responsible for transportation infrastructure in the Czech Republic. Technically, the website is built on the Liferay CMS platform, utilizing modern JavaScript libraries such as jQuery, Slick Carousel, and Unite Gallery. It integrates analytics and marketing tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized with good navigation and accessibility features, although some improvements in accessibility could be made. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, explicit security headers and a public security policy or vulnerability disclosure program are absent. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the organization's profile. Overall, the website demonstrates a solid security posture and good privacy compliance, with room for enhancements in security policy transparency and accessibility. The site is trustworthy, professionally maintained, and serves its public sector mission effectively.

Fantova budova is a culturally significant Secessionist building in Prague, managed by Správa železnic, the Czech state railway organization. The website serves as an informational and promotional platform for the ongoing restoration project and event space rental. The site is well-structured, professionally designed, and provides relevant content primarily in Czech with English alternatives. Technically, it is built on the Liferay CMS platform and uses modern JavaScript libraries and tracking tools. Security posture is good with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and published security policies. Overall, the site is trustworthy and serves its purpose effectively.

S

Správa železnic, státní organizace

vrtky.cz

59

The website vrtky.cz serves as an official public information portal for the Czech Republic's high-speed rail infrastructure project, managed by Správa železnic, a state organization. It provides comprehensive information about the development, planning, and updates of high-speed rail lines (VRT) aimed at improving transportation efficiency and regional mobility. The site targets Czech residents, transport professionals, and government stakeholders, offering news, maps, and project details. Technically, the site is built on the Liferay CMS platform and employs modern web technologies including jQuery, Slick Carousel, and Google Tag Manager. It integrates analytics and marketing tools such as Google Analytics and Facebook Pixel, and implements cookie consent mechanisms in compliance with GDPR. The site is mobile-optimized and features a professional design with clear navigation. From a security perspective, the website uses HTTPS with good SSL configuration and basic security best practices. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and there is no published security policy or incident response contact information. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, vrtky.cz is a trustworthy and professionally maintained government-related website with a strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further improve security posture and transparency.

K

Kangaroo group, a.s.

kangaroo.cz

46

Kangaroo group, a.s. is a well-established Czech advertising agency and polygraphic production company founded in 2004. The company offers a broad range of services including advertising campaigns, printing (digital, offset, large format), vehicle and public transport advertising, online marketing, event organization, packaging design, and interior design. Their client base includes reputable companies and government institutions, positioning them as a trusted regional player with a comprehensive service offering. Technically, the website uses legacy JavaScript libraries such as jQuery 1.11.1 and common web technologies like Font Awesome and Lightbox, hosted via Active24. The site is mobile-optimized and SEO-friendly but could benefit from modernizing its tech stack and improving accessibility. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks visible security headers and uses outdated libraries, which may expose it to vulnerabilities. No explicit security policies or incident response contacts are publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR, with room for technical and security improvements.

Č

Česká barmanská asociace, z.s.

cbanet.cz

54

Česká barmanská asociace, z.s. is a Czech non-profit organization dedicated to uniting bartenders, baristas, teatenders, beer specialists, and beverage gastronomy enthusiasts across the Czech Republic. The website serves as the official portal for the association, providing information on competitions, educational courses, events, and member services. It holds official membership in the International Bartenders Association, positioning it as a recognized authority in the hospitality sector within the region. The site features rich content including news, event calendars, partner information, and specialized sections for different beverage disciplines. Technically, the website employs a mix of legacy and modern web technologies including AngularJS and jQuery, along with FontAwesome for icons and Google Analytics for visitor tracking. While the site is mobile-optimized and well-structured for user navigation, some outdated libraries (notably jQuery 1.9.1) present potential security risks. The site implements GDPR-compliant cookie consent mechanisms and maintains a basic privacy policy, reflecting awareness of data protection requirements. From a security perspective, the site uses HTTPS and has secure login forms, but lacks visible security headers and uses outdated JavaScript libraries, which could expose it to vulnerabilities. The absence of WHOIS registration data limits domain trust assessment, though the professional presentation and partner affiliations support legitimacy. Overall, the site demonstrates a moderate security posture with room for improvement in modernizing its tech stack and enhancing security controls. The overall risk assessment indicates a trustworthy and professionally managed site with minor technical and security concerns. Strategic recommendations include updating legacy libraries, implementing comprehensive security headers, and conducting regular security audits to maintain compliance and protect user data.

Penzion Fiala is a small hospitality business located in Kubova Huť, Czech Republic, offering affordable accommodation in the Šumava region. The website provides detailed information about the lodging options, amenities such as sauna and parking, and nearby tourist attractions. The business targets general tourists seeking relaxation and outdoor activities in the region. The domain is well-established since 2011, consistent with the business age. Technically, the website uses common JavaScript libraries including jQuery, Flexslider, and Fancybox, with Google Fonts and Font Awesome for styling. Hosting is provided by ŠumavaNet.CZ. The site is moderately optimized for mobile and SEO, with a clear navigation structure and good content quality. However, it lacks a CMS indication and advanced accessibility features. From a security perspective, HTTPS usage is implied but not explicitly confirmed in the HTML content. No security headers such as CSP or HSTS are detected, and there is no privacy or cookie policy present, indicating compliance gaps with GDPR. The site uses Google Analytics and Google Tag Manager for tracking, with moderate user tracking levels but no cookie consent mechanism. Overall, the website is functional and professional for a small hospitality business but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

C

Chata Šumava

chatasumava.cz

45

Chata Šumava is a small hospitality business offering accommodation in the Šumava region of the Czech Republic, specifically in Hojsova Stráž near Železná Ruda. The website presents family-friendly lodging options with amenities such as garden space, children's corner, and parking. It targets general tourists and families seeking affordable stays in a scenic mountain area. The business leverages local partnerships and maintains a presence on social media and review platforms like Hotel.cz, which awards it a quality certificate. Technically, the website uses a traditional web stack with jQuery, Flexslider, Fancybox, and Google Fonts. It integrates Google Analytics, Google Tag Manager, and Facebook SDK for tracking and marketing purposes. The site is moderately optimized for mobile and SEO, with a clear navigation structure and professional design. Hosting appears to be provided by a local Czech provider, ŠumavaNet.CZ. From a security perspective, the site uses HTTPS for external resources but lacks explicit security headers and cookie consent mechanisms, which are important for GDPR compliance. The contact form includes validation, and no sensitive data is exposed in the HTML. However, the absence of WHOIS data for the domain reduces trust and raises questions about domain registration legitimacy. Overall, the website is functional and professional for a small hospitality business but would benefit from improved security practices, explicit cookie consent, and transparency in domain registration to enhance trust and compliance.

Z

Zemědělská akciová společnost Koloveč

zaskolovec.cz

48

Zemědělská akciová společnost Koloveč is a medium-sized regional agricultural company based in the Czech Republic, specializing in agricultural production and manufacturing, including the production and sale of traffic signs. The company operates an e-shop for traffic signs and provides additional services such as machinery sales, road transport, earthworks, and maintenance. The website reflects a professional and consistent brand image with clear contact information and a social media presence on Facebook. Technically, the site uses modern JavaScript libraries and includes cookie consent mechanisms, indicating a moderate level of digital maturity. However, the absence of a privacy policy and visible security headers suggests areas for compliance and security improvement. The WHOIS data is not publicly available, likely due to privacy protection, but the website content and contact details support the legitimacy of the business. Overall, the site is well-structured, mobile-optimized, and provides relevant content for its target audience.

Dobrovolný svazek obcí Ostružná is a voluntary association of municipalities in the Czech Republic, serving as a cooperative body for local government entities including Velhartice, Kolinec, Mokrosuky, Chlistov, Hlavňovice, and Číhaň. The website provides basic information about the association, its member municipalities, and contact details. The site is modest in design and functionality, focusing on informational content rather than interactive features. Technically, the site uses legacy JavaScript libraries such as jQuery and includes Google Analytics for visitor tracking, but lacks modern security features such as HTTPS enforcement and security headers. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. The WHOIS data for the domain is unavailable, which limits the ability to verify domain registration legitimacy and age. Overall, the site serves its purpose as a local government information portal but requires improvements in security, privacy compliance, and technical modernization.

P

People in Need

peopleinneed.net

76

People in Need is a Czech-based non-governmental, non-profit organization with over 20 years of experience providing humanitarian aid and emergency assistance worldwide. The website serves as a platform to engage donors, volunteers, and the general public with information about their mission and activities. The organization maintains a consistent brand presence and targets a global audience interested in humanitarian causes. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, reCAPTCHA v3, and Microsoft Clarity for analytics, reflecting a moderate level of digital maturity. Security measures such as HTTPS, CAPTCHA for forms, and cookie consent mechanisms are implemented, although some security headers and explicit policies are missing. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be further investigated. Overall, the website is professional, secure, and privacy-conscious but could improve transparency by publishing privacy and security policies and providing direct contact information.

K

Komora samostatných likvidátorů pojistných událostí

kslpu.cz

39

Komora samostatných likvidátorů pojistných událostí (KSLPU) is a professional association based in the Czech Republic, founded in 2004. It serves as a chamber for independent insurance claims adjusters, damage assessors, and technical experts, aiming to support their professionalism, prestige, and education. The organization fosters collaboration among its members and with insurance companies both nationally and across Europe, including affiliation with the European Federation of Loss Adjusting Experts (FUEDI). The website provides information about membership, educational events, news, and contact details, targeting professionals in the insurance claims and risk assessment sectors. Technically, the website uses a custom CMS with common web technologies such as jQuery, Google Analytics, and responsive design elements. It is hosted likely via Forpsi (based on nameservers) and registered through REG-INTERNET-CZ since 2004, indicating a stable and established online presence. The site is moderately optimized for performance and mobile devices, with good SEO practices and clear navigation. From a security perspective, the site uses HTTPS and includes standard analytics scripts but lacks explicit security headers and cookie consent mechanisms. No security policies or incident response contacts are published, which could be improved. There are no visible vulnerabilities or exposed sensitive data. GDPR compliance is indicated by a dedicated privacy page, but cookie consent is not evident. Overall, the website is professional, trustworthy, and serves its niche audience well. Strategic improvements in security headers, cookie consent, and published security policies would enhance its security posture and compliance maturity.

A

AOM CZ s.r.o.

aom.cz

43

AOM CZ s.r.o. operates an e-commerce platform specializing in industrial coatings, paints, lacquers, adhesives, and spraying technology primarily targeting professional and industrial customers in the Czech Republic. The website presents a professional catalog of products with clear navigation and customer account features, supporting both B2B and B2C sales models. The company maintains a consistent brand presence with comprehensive legal and privacy documentation in Czech language, indicating compliance with GDPR regulations. Technically, the site is built on Prestashop 1.7.6.1 with modern modules and includes a cookie consent mechanism and live chat support, reflecting a moderate level of digital maturity.

Č

Člověk v tísni

clovekvtisni.cz

76

Člověk v tísni is a well-established Czech non-profit organization providing immediate humanitarian aid and support to help people become self-sufficient both domestically and internationally. The website reflects a professional and consistent brand presence with clear messaging about their mission and services. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, reCAPTCHA v3, and Cookiebot for consent management, indicating a mature digital infrastructure. Security measures such as HTTPS and bot protection are in place, though some security headers and explicit policies are not visible in the provided data. Privacy compliance is supported by a detailed cookie consent mechanism, but a dedicated privacy policy page was not found in the analyzed content. Overall, the site demonstrates a strong security posture and business credibility consistent with a reputable humanitarian organization.

S

SumavaNet.CZ

toposumavi.cz

47

The website www.toposumavi.cz is a regional tourism portal dedicated to promoting the Pošumaví area in the Czech Republic. It provides comprehensive information for tourists including tips for trips, photo and video galleries, event calendars, accommodation listings, and regional product promotions. The site targets general tourists and families interested in cultural, natural, and recreational activities in the region. The business model is focused on regional tourism support and information dissemination, positioning itself as a key local resource for visitors. Technically, the website uses a traditional web stack with jQuery, Flexslider, and Font Awesome for UI components, along with Google Fonts for typography. It integrates Google Analytics and Facebook Pixel for tracking and marketing purposes. The site is served over HTTPS, ensuring encrypted communication, and includes a cookie consent mechanism compliant with GDPR principles. However, it lacks advanced security headers and visible privacy or terms of service pages, which are areas for improvement. From a security perspective, the site shows moderate maturity. HTTPS is enforced, and no sensitive data is exposed in the HTML. The cookie consent banner indicates awareness of privacy regulations. However, the absence of security headers and WHOIS data raises concerns about domain legitimacy and security posture. No forms or personal data collection mechanisms were detected on the main page, reducing immediate risk. Overall, the site is functional and reasonably secure but would benefit from enhanced security policies and transparency. The domain WHOIS data is missing, which is unusual and could indicate registration issues or a technical problem with the WHOIS server. This lack of data impacts trust and legitimacy assessments. The website content and external partner links suggest a legitimate regional tourism initiative, but the missing WHOIS information warrants caution. Strategic recommendations include adding privacy and terms policies, implementing security headers, verifying domain registration, and maintaining up-to-date third-party libraries to improve security and compliance.

U

United Guides Holding Kft.

czechsuperbrands.com

41

Czech Superbrands, operated by United Guides Holding Kft., is a recognized media and branding platform focused on promoting leading brands within the Czech Republic. The website serves as a hub for brand awards, tribute events, yearbooks, and branding masterclasses, targeting both businesses and consumers interested in brand excellence. The platform has been active since 2012, demonstrating a stable market presence and consistent branding efforts. Technically, the website employs a combination of jQuery, Bootstrap, and various tracking technologies including Google Analytics and Adform, reflecting a moderate level of digital maturity. The site is accessible, mobile-optimized at a basic level, and features clear navigation and professional design.

Zájmové sdružení právnických osob Střední Pošumaví is a regional non-profit association located in the Plzeň region of the Czech Republic, serving municipalities between Klatovy and Sušice. The organization focuses on regional cooperation, tourism promotion, and administrative support for its member municipalities. The website reflects a community-oriented approach with detailed information about member municipalities, tourist attractions, and regional projects. The site is professionally designed with clear navigation and a focus on local audiences and tourists. Technically, the website employs common web technologies including jQuery, Flexslider, Font Awesome, and integrates Google Analytics and Facebook SDK for analytics and social media engagement. A cookie consent mechanism is implemented, indicating attention to privacy compliance. However, the absence of WHOIS data and lack of explicit contact emails or phone numbers on the site slightly reduce the overall trustworthiness from a domain registration perspective. Security best practices such as HTTPS enforcement and security headers are not verifiable from the provided data, suggesting room for improvement in security posture. Overall, the website is functional, informative, and serves its intended audience well, but could benefit from enhanced transparency and security measures.

Z

Základní škola a mateřská škola Vrhaveč, příspěvková organizace

skolavrhavec.cz

52

ZŠ a MŠ Vrhaveč is a small public educational institution in the Czech Republic providing basic and preschool education with a focus on a safe, friendly, and modern learning environment. The website reflects a local school with clear communication channels and community engagement. Technically, the site uses a custom ASP-based CMS with common web technologies such as jQuery, Flexslider, and Font Awesome, hosted by REG-ZONER. The site is mobile responsive and includes cookie consent mechanisms and analytics integration. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and published security policies. Overall, the site is trustworthy and professionally maintained, suitable for its educational purpose.

Š

ŠumavaNet.CZ

lipno.pro

47

The website www.lipno.pro/lipno/ is a regional tourism information portal focused on the Lipno and Šumava areas in the Czech Republic. It provides accommodation listings, tourist tips, photo galleries, and webcams, targeting general audiences interested in travel and leisure in this region. The business behind the site appears to be ŠumavaNet.CZ, a small-sized entity specializing in hospitality and tourism information services. The site is well-branded and consistent with a clear focus on local tourism. Technically, the website uses a variety of modern web technologies including jQuery, Flexslider, Font Awesome, Google Fonts, Google Analytics, and Facebook SDK. It is served over HTTPS with good SSL configuration but lacks some recommended security headers. The site is moderately optimized for performance and mobile devices, with good SEO practices evident in meta tags and structured navigation. From a security perspective, the site has a basic posture with HTTPS enabled and no visible sensitive data exposure. However, it lacks privacy and cookie policies, security headers, and incident response information, which are important for compliance and trust. The WHOIS data is unavailable or malformed, which reduces domain registration transparency and trustworthiness, though the website content and contact information appear legitimate. Overall, the website is a functional and informative tourism portal with good content quality and technical implementation but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

M

MVM Next Energiakereskedelmi Zrt.

mvmbiztositas.hu

10

MVM Biztosítás is an online insurance service platform operated under the MVM group umbrella, specifically by MVM Next Energiakereskedelmi Zrt. The website offers a broad portfolio of insurance products including assistance, vehicle, pet, health, accident, and travel insurance, targeting primarily Hungarian energy customers. The business model integrates insurance billing with energy service invoices, providing convenience and streamlined customer experience. The site is professionally designed, mobile-optimized, and provides clear navigation and product information, supported by customer testimonials and social media presence, establishing a trustworthy market position in Hungary.

M

Modio.cz - vyhledávač módy a sportovního vybavení | Módní inspirace, novinky i slevy na jednom místě

modio.cz

46

Modio.cz operates as a Czech language online aggregator platform specializing in fashion and sports equipment. It aggregates products from hundreds of e-shops, providing users with a centralized search and browsing experience for clothing, shoes, accessories, and sports gear. The platform targets consumers interested in fashion and sports products, offering inspiration, news, and discount information. The website demonstrates a consistent brand presence with a professional design and clear navigation structure, supporting a medium-sized retail e-commerce business model focused on aggregation rather than direct sales. Technically, the website employs a traditional web stack including jQuery, jQuery UI, and various third-party analytics and advertising scripts such as Google Analytics and Facebook Pixel. The site uses HTTPS and lazy loading for images, contributing to moderate performance and good mobile optimization. However, the use of an outdated jQuery version and absence of explicit security headers indicate areas for technical improvement. SEO practices appear solid with proper meta tags and Open Graph data. From a security perspective, the site benefits from HTTPS encryption and standard tracking protections but lacks visible security headers and explicit privacy or cookie policies. No contact or incident response information is provided, which limits transparency and user trust. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the site itself appears operational and professional. Overall, Modio.cz presents a functional and user-friendly platform with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and domain registration transparency would enhance trust and compliance. The business is well positioned in the Czech retail e-commerce aggregation market but should address technical and compliance gaps to reduce risk and improve user confidence.

N

NEWTON Media, a.s.

anopress.cz

58

NEWTON Media, a.s. operates the Anopress service, a sophisticated media monitoring platform focused on Czech media channels including print, TV, radio, internet, and social media. The company offers a cloud-based, real-time monitoring solution with a comprehensive historical archive dating back to 1996. Their client base spans businesses, PR agencies, government bodies, municipalities, and educational institutions, positioning them as a leading media intelligence provider in the Czech Republic. The website reflects a professional and consistent brand image with clear contact information and client references. Technically, the website employs modern JavaScript libraries such as jQuery, anime.js, and slick carousel, alongside Google Analytics and Intercom for analytics and customer engagement. The site is mobile responsive and well-structured, though some accessibility and SEO optimizations could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and cookie consent mechanisms required for full GDPR compliance. Overall, the security posture is good with no critical vulnerabilities detected. The absence of a cookie consent banner and security headers are notable gaps. WHOIS data confirms the legitimacy and consistency of the business registration, reinforcing trustworthiness. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing security policies, and improving accessibility and SEO to strengthen compliance and user trust.

G

Generali penzijní společnost, a.s.

pfcp.cz

52

Generali penzijní společnost, a.s. is a leading Czech pension company offering state-supported pension savings and investment products. The website targets adults, children, and pensioners, providing comprehensive pension plans, investment funds, and employer contribution options. It holds a strong market position with nearly one million clients and is part of the larger Generali Group. The site is professionally designed with clear navigation and rich content focused on pension savings benefits and state support. Technically, the website employs modern JavaScript libraries, tracking tools, and cookie consent mechanisms, ensuring a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent, though some security headers could be improved. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website is trustworthy, compliant, and well-positioned in the finance sector.

Mobiliti is a Hungarian company specializing in electric and gas mobility services, positioning itself as the market leader in Hungary. The company offers a range of services including e-mobility charging, gas mobility (CNG), and additional services such as electronic vignettes and parking solutions. The website reflects a professional and consistent brand image aligned with the MVM Group, a major energy sector player in Hungary. The target audience includes Hungarian consumers and businesses interested in sustainable mobility solutions. The business model focuses on providing infrastructure and services for electric and gas-powered vehicles, supporting Hungary's transition to cleaner transportation.

MVM NUKA Nukleáris Karbantartó Zrt. is a Hungarian company specializing in nuclear maintenance services as part of the larger MVM Group, a key player in the energy sector. The company provides high-quality electrical, control technology, and mechanical maintenance services primarily for the MVM Paksi Atomerőmű Zrt. and affiliated group companies. The website reflects a professional corporate presence with clear contact information and compliance with GDPR through comprehensive privacy and cookie policies. The site is primarily in Hungarian and targets industry stakeholders and partners within the energy sector. Technically, the website employs a modern technology stack including jQuery, Bootstrap, FontAwesome, and Google Charts, built on the Sitecore CMS platform. The site is mobile optimized with moderate performance and basic accessibility features. Analytics are implemented via Google Analytics with a cookie consent mechanism ensuring user privacy compliance. No blocking or WAF challenges were detected, allowing full content access. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent mechanisms. However, it lacks explicit published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found in the HTML content. The domain registration details align well with the business profile, indicating a legitimate and trustworthy entity. Overall, the website demonstrates a solid business credibility and technical maturity with room for improvement in security transparency and accessibility. The risk level is low, with recommendations to enhance security policy visibility and incident response readiness to further strengthen trust and compliance.

MVM OVIT Zrt. is a well-established Hungarian energy sector company, operating as a wholly owned subsidiary of MVM Energetika Zrt. With over 70 years of experience, it specializes in manufacturing steel structures, power plant machinery, heavy transportation, and electricity supply system operations across Hungary. The company is positioned as a key player within the MVM Group, serving the national energy infrastructure market. The website reflects a professional corporate presence with clear branding and comprehensive information about its services and group affiliations. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, and is likely powered by the Sitecore CMS platform. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, it lacks a dedicated security policy page and explicit incident response contacts, which could be improved to enhance trust and compliance. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy entity.

MVM CEEnergy Zrt. is Hungary's largest natural gas trader, serving as a key partner to the national universal gas service provider to ensure reliable gas supply to residential consumers. The company operates as part of the MVM Group, a large energy conglomerate with numerous subsidiaries across production, storage, distribution, retail, and services sectors. The website reflects a professional corporate presence with comprehensive information about the company, its subsidiaries, and services. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, and is built on a Sitecore CMS platform. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policy or incident response contacts are provided. Overall, the site is well-structured, compliant with GDPR, and trustworthy.

MVM Otthon Plusz Zrt. is a Hungarian energy sector company, fully owned by MVM Zrt., focusing on energy efficiency services and insurance product brokerage for residential customers. The website reflects a professional corporate presence with clear business descriptions and links to partner insurance and energy efficiency sites. The technical infrastructure is based on ASP.NET WebForms and Sense/Net ECM CMS, with modern JavaScript libraries and frameworks ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are absent. Overall, the site is trustworthy and well-aligned with its business objectives.

Ú

Ústav zemědělské ekonomiky a informací

nutridatabaze.cz

45

NutriDatabaze.cz is an official Czech Republic food composition database managed by the Center for Food Composition Database within the Institute of Agricultural Economics and Information (ÚZEI). It provides detailed nutritional data for over 1100 food items, supported by the Ministry of Agriculture. The website targets researchers, nutrition professionals, and registered users seeking reliable food composition data. The business model is primarily informational with free registration and controlled data export access. The site holds a strong market position as a government-backed authoritative source for Czech food data. Technically, the website uses a custom CMS with common JavaScript libraries such as jQuery and Google Analytics for visitor tracking with IP anonymization. Hosting is provided by a Czech hosting company. The site demonstrates moderate performance and basic mobile optimization. SEO and accessibility are adequately addressed, though improvements are possible. From a security perspective, HTTPS is implied but no explicit security headers were detected. The site includes secure login forms with user experience features like CAPS LOCK warnings. Privacy policies and cookie usage are declared, but no explicit consent mechanism is implemented. No incident response or vulnerability disclosure information is published, indicating room for maturity improvement. Overall, the website is professional, trustworthy, and content-rich, but the absence of WHOIS data and some security best practices slightly reduce its trust score. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and verifying domain registration details to improve credibility and compliance.

I

Informační server ŠumavaNet.CZ

stachy.net

53

The website www.stachy.net/stachy/ serves as a regional information and tourism portal for the town of Stachy and its surroundings in the Czech Republic. It provides visitors with comprehensive information on local attractions, events, accommodation, webcams, and cultural activities. The site is developed and hosted by SumavaNet.CZ in cooperation with the local municipal office, indicating a community-focused information service. The target audience is general public interested in tourism and local culture. Technically, the site uses standard web technologies including jQuery, Flexslider, and Google Analytics, with a cookie consent mechanism compliant with GDPR principles. The website is accessible, mobile-friendly, and well-structured with good SEO practices. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the active and consistent content suggests legitimate use. Security posture is moderate with HTTPS enabled but lacking advanced security headers. No contact emails or phone numbers are visible, which may affect user trust and business credibility.

P

Prácheňsko zájmové sdružení právnických osob

prachensko.org

50

Prácheňsko is a regional association of legal entities based in Horažďovice, Czech Republic, focused on promoting and developing the Prácheňsko region, including cultural heritage, tourism, and community activities. The website serves as an information portal for local municipalities and visitors, offering details on regional attractions, activities, and administrative matters. The organization operates as a non-profit entity with a clear local focus and a stable presence since 2009. Technically, the website employs a modern JavaScript stack including jQuery, Flexslider, and CookieScript for consent management, hosted by a reputable registrar and hosting provider. Security posture is good with HTTPS enabled and cookie consent implemented, though some security headers could be improved. Privacy compliance is well addressed with a clear cookie policy and GDPR-aligned consent mechanisms. Contact information is transparent and easily accessible, enhancing business credibility. Overall, the site is professional, trustworthy, and well-suited for its target audience.

A

Apartmány Šumava

apartmanysumava.info

46

Apartmány Šumava is a small hospitality business offering apartment accommodations in the Šumava region of the Czech Republic, specifically in Hojsova Stráž near Železná Ruda. The website presents a professional and user-friendly interface with clear navigation, detailed accommodation offers, and family-friendly services such as garden and children's play areas. The business holds a Hotel.cz quality certificate and maintains an active Facebook presence, indicating a moderate level of market trust and customer engagement. Technically, the website uses modern JavaScript libraries and tracking tools, hosted by ŠumavaNet.CZ, with responsive design suitable for mobile users. However, some security best practices such as security headers and cookie consent mechanisms are missing, and WHOIS data is unavailable, which slightly reduces trustworthiness. Overall, the site is functional and credible for its business scope.

A

Apartmány U Lípy

apartmanyulipy.eu

43

Apartmány U Lípy is a small hospitality business offering stylish apartment accommodations in the Šumava region of the Czech Republic. The website presents a well-maintained historic building with modern amenities including wellness facilities, electric vehicle charging, and a summer kitchen. The business targets tourists seeking nature, relaxation, and outdoor activities such as hiking and cycling. The website is professionally designed with clear navigation and booking functionality, supporting the business model of direct apartment rentals. Technically, the site uses common JavaScript libraries and responsive design but lacks some advanced security headers and privacy policies. Security posture is moderate with HTTPS enabled but missing some best practices. Overall, the domain is privacy protected, which is typical for small businesses, and no suspicious WHOIS data is available. The site is safe for general audiences and does not contain adult or questionable content.