Security Directory

Obec Kubova Huť operates as the official municipal government office for the village of Kubova Huť in the Czech Republic. The website serves as a public information portal providing residents and visitors with essential contact details, official documents, local news, and administrative information. The site targets local citizens and tourists interested in the municipality's governance and community updates. The business model is purely governmental, focusing on public service and transparency. Technically, the website employs standard web technologies including HTML, CSS, and JavaScript, with integration of Google Analytics for visitor tracking and CookieScript for cookie consent management. The hosting appears to be provided by a regional service provider, ŠumavaNet.CZ. The site shows basic mobile optimization and accessibility features but lacks advanced modern frameworks or CMS indications. From a security perspective, the site uses cookie consent mechanisms and does not expose sensitive data. However, no security headers or explicit HTTPS enforcement details were found in the provided data. The absence of WHOIS registration data is a concern for domain legitimacy verification, although the website content and official nature suggest it is a legitimate local government site. Overall, the website is functional and serves its purpose as a municipal information portal but would benefit from enhanced security practices, explicit privacy policies, and improved technical modernization to increase trust and compliance.

The website milevsko.cz serves as a regional internet news portal for the town of Milevsko in the Czech Republic, providing local news, cultural event information, and community updates. It targets residents and visitors interested in regional happenings and local institutions. The business model is primarily informational with advertising support, focusing on community engagement and regional promotion. The domain has been registered since 1998, indicating a long-standing presence in the local digital space. Technically, the site is built on basic HTML, CSS, and JavaScript without modern CMS or frameworks. The hosting is provided by a Czech registrar REG-ZONER. The site lacks mobile optimization and advanced SEO or accessibility features, reflecting a modest technical maturity. No analytics or tracking technologies are detected, and the site does not implement modern security headers or visible HTTPS enforcement. From a security perspective, the absence of HTTPS and security headers is a concern, as is the lack of privacy and cookie policies. No incident response or vulnerability disclosure information is present. The site does not expose sensitive data or use vulnerable libraries, but overall security posture is basic and could be improved significantly. Overall, the website is functional and serves its community purpose but requires enhancements in security, privacy compliance, and technical modernization to improve trust and user experience. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving mobile responsiveness, and establishing clear contact and incident response channels.

W

Wizz Air

wizzair.com

74

Wizz Air is a prominent ultra-low-cost European airline offering affordable flights, accommodation, and car rental services. The website reflects a strong market position as Europe's fastest-growing low-cost carrier, targeting budget-conscious travelers across multiple European countries. The digital platform is modern, mobile-optimized, and supports multiple languages, enhancing accessibility and user experience. Technically, the site employs contemporary frameworks such as Vue.js and integrates performance monitoring tools like New Relic, ensuring robust infrastructure and fast loading times. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. Privacy and cookie policies are comprehensive and GDPR compliant, supporting regulatory adherence. Overall, the site demonstrates high professionalism and trustworthiness, though the absence of WHOIS data slightly reduces transparency.

E

Exim

eximtours.cz

54

EXIM tours is a well-established Czech travel agency specializing in worldwide package tours, last minute deals, and specialized travel services for families, couples, and seniors. The company operates under the DER Touristik group, positioning itself as a leading player in the Czech travel market. The website reflects a mature digital presence with modern technologies such as Vue.js, Google Tag Manager, and Usercentrics for privacy compliance. Security measures include HTTPS enforcement and bot protection via Google reCAPTCHA, although explicit security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. The absence of WHOIS data due to privacy protection is typical for such businesses and does not detract from the site's legitimacy. Overall, EXIM tours demonstrates a professional and trustworthy online presence suitable for its market segment.

E

Ecn Studio s.r.o

ecnstudio.cz

46

Ecn Studio s.r.o is a Czech technology company specializing in web design, web hosting, and online tools primarily serving nonprofit organizations and other clients requiring complex web solutions. The company has a legacy dating back to the early 1990s under the Econnect brand and continues to operate with a focus on quality and custom development. Their services include web hosting, web design, account services, network support, and a suite of online tools such as webmail, cloud storage, and a proprietary CMS called ActionApps Toolkit. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site uses modern JavaScript libraries like Swiper and LightGallery, and privacy-conscious analytics via Matomo with cookies disabled. The domain is registered with REG-WEDOS since 2017, consistent with the business history and location in the Czech Republic.

L

Lesy České republiky, s.p.

vracimevodulesu.cz

68

The website 'Vracíme vodu lesu' represents a large-scale governmental forestry and environmental conservation program managed by Lesy České republiky, s.p. It focuses on water retention and revitalization of small watercourses across the Czech Republic, positioning itself as the largest program in the history of Czech forestry. The site targets the general public and stakeholders interested in environmental sustainability and forestry management. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integrations such as Cookiebot for cookie consent, Google Analytics, and Facebook Pixel for analytics and marketing. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with visible cookie consent and a comprehensive privacy policy. Overall, the website demonstrates a mature digital presence with a strong focus on compliance and user trust.

L

Lesy České Republiky, s. p.

parcour.cz

32

The website www.parcour.cz represents a government-operated shooting range facility located in the Czech Republic, specifically serving the Lesní závod Konopiště region. It provides services related to shooting sports, including training, registration, and hosting of shooting competitions such as the Lovecký brokový parkúr. The site is modest in size and targets a niche audience of hunters and shooting sports enthusiasts. The business model is focused on government service provision rather than commercial enterprise. Technically, the website uses standard web technologies including JavaScript, jQuery, and Google Analytics for tracking. The site is accessible over HTTPS but lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in security and privacy compliance. The WHOIS data is missing, which raises concerns about domain registration transparency but does not necessarily indicate illegitimacy given the government affiliation. Overall, the site is functional with basic content quality and moderate technical implementation.

L

Lesy České republiky, s.p.

sazimelesynovegenerace.cz

59

The website 'Sázíme lesy nové generace' represents Lesy České republiky, a government-affiliated forestry management entity in the Czech Republic. It focuses on sustainable forest management, watercourse restoration, and public engagement through educational events such as 'Den lesů nové generace'. The site targets the general public interested in environmental conservation and sustainable wood use. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, and Cookiebot for consent management, ensuring GDPR compliance. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, but the website's branding and social media presence support its legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

H

HUMLNET CREATIVE s.r.o.

hucr.cz

43

HUMLNET CREATIVE s.r.o. is a Czech Republic-based small web development agency specializing in creating custom, modern, and professional websites tailored to client needs. Their market position is that of a regional service provider with a portfolio of local clients including schools, companies, and organizations. The company emphasizes a collaborative and tailored approach to web design and development, offering multilingual and responsive websites. Technically, the website is built on a modern stack including Bootstrap, jQuery, and OctoberCMS, with integration of Facebook SDK and Google Analytics for marketing and analytics purposes. The site is mobile-optimized and features a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and secure form handling, though additional security headers could improve defenses. The absence of WHOIS data reduces transparency but the website content and business information appear legitimate and professional. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, with moderate security maturity.

R

Rentstyl, s.r.o.

rentstyl.cz

53

Rentstyl, s.r.o. operates a Czech-language website offering operational leasing and car rental services primarily for Škoda and Toyota vehicles. The company targets individuals and businesses seeking flexible vehicle leasing solutions with fixed monthly payments including insurance and servicing. The website is professionally designed with good content quality and clear navigation, optimized for mobile devices. Technically, the site uses a custom MVC-based CMS integrated with BSSHOP e-commerce platform and employs Google Tag Manager for analytics and marketing. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though HTTP security headers are not explicitly detected. The absence of WHOIS data limits domain ownership transparency, which slightly impacts trustworthiness. Overall, the site presents a legitimate and professional business with moderate risk due to incomplete domain registration information.

P

Práce na horách. najděte si brigádu a zažijte zimu snů - Práce na horách

pracenahorach.cz

43

The website pracenahorach.cz is a niche job listing platform focused on seasonal winter employment opportunities in Czech mountain resorts, primarily targeting students and seasonal workers interested in ski instruction and related hospitality roles. The site offers curated job offers, course information, and location details, supported by partner ski schools and mountain activity providers. Technically, the site uses modern web technologies including HTML5, CSS, JavaScript, Google Analytics, Google Tag Manager, reCAPTCHA, and Smartsupp live chat, delivering a responsive and user-friendly experience. Security posture is generally good with HTTPS enforced and anti-bot measures on contact forms, though it lacks some security headers and formal privacy/cookie policies, which are compliance gaps. The absence of WHOIS data limits domain transparency but does not detract from the site's apparent legitimacy. Overall, the site is professionally designed, content-rich, and safe for general audiences.

Yellow Point, spol. s r.o. operates an e-commerce platform specializing in the sale of experience gifts and adventure activities primarily in the Czech Republic. The website offers a variety of products such as gift certificates, adrenaline experiences, and seasonal activities, targeting general consumers seeking unique gift options. The company appears to hold a solid regional market position with a medium-sized business model focused on direct online sales and bookings. Technically, the website is built on the WPJ CMS platform and employs modern JavaScript libraries and tracking tools including Google Analytics 4, Google Tag Manager, Adform, and Seznam retargeting. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Security measures include HTTPS enforcement and Sentry error monitoring, but lack some advanced HTTP security headers and explicit vulnerability disclosure mechanisms. From a security perspective, the site demonstrates a moderate security posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Contact information is transparent, enhancing business credibility. However, WHOIS data is unavailable, likely due to privacy protection, which slightly limits domain trust analysis. Overall, the website is professional, trustworthy, and secure for its business purpose. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its posture. The absence of WHOIS data is mitigated by strong on-site trust signals and compliance features.

T

Tourist Board Špindlerův Mlýn, z.s.

touristboard.cz

49

Tourist Board Špindlerův Mlýn, z.s. is a non-profit destination management organization dedicated to promoting tourism in the Špindlerův Mlýn area and the broader Krkonoše region. Supported by the city and key tourism operators, it focuses on marketing, tourism projects, and event organization to enhance the visitor experience and regional development. The website is professionally designed, mobile-optimized, and provides clear information about the organization's mission and activities, targeting tourists and local stakeholders.

A

ActiveCampaign

activehosted.com

71

ActiveCampaign is a leading marketing automation platform that leverages AI to automate and optimize customer engagement across multiple channels including email, SMS, and WhatsApp. The company positions itself as a provider of autonomous marketing solutions that reduce manual workload and accelerate campaign deployment. Their platform targets businesses seeking to enhance marketing efficiency and customer relationship management through intelligent automation. Technically, the website demonstrates a mature digital infrastructure with modern JavaScript frameworks, responsive design, and integration of advanced analytics and tracking tools such as Google Tag Manager, Hotjar, and Adobe AppMeasurement. Security-wise, the site enforces HTTPS and employs best practices in script management, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the professional web presence and comprehensive privacy compliance. Overall, the website reflects a high level of professionalism, technical sophistication, and business credibility, with room for improvement in transparency around security policies and domain registration details.

D

Direct Investments

directinvestments.cz

66

Direct Investments is a Czech investment group specializing in building and managing a portfolio of companies primarily in the insurance, mobility, finance, and technology sectors. The group emphasizes Czech ownership and control, aiming to create trustworthy and sustainable businesses. Their market position is strong with over one million clients and a significant annual turnover. The website presents a professional image with clear information about subsidiaries and investment opportunities. Technically, the website is built using modern frameworks such as React and Next.js, ensuring good performance and mobile optimization. The presence of Google Tag Manager and cookie consent mechanisms indicates a moderate level of digital maturity and privacy awareness. However, some improvements could be made in accessibility and security headers. From a security perspective, the site uses HTTPS and has basic privacy mechanisms, but lacks visible security policies, incident response contacts, and vulnerability disclosure information. The absence of WHOIS data reduces transparency and trustworthiness from a domain registration standpoint. Overall, the website is professional and trustworthy in content and design but would benefit from enhanced security disclosures and domain registration transparency to improve its risk profile and compliance posture.

H

Hive Helsinki

hive.fi

56

Hive Helsinki operates as a tuition-free coding school based in Finland, focusing on project-based and peer learning methodologies to equip individuals with coding skills for future-proof careers. The institution targets learners with no prior experience, emphasizing accessibility and practical skill development. The website reflects a well-structured, professionally designed platform with clear branding and consistent messaging aligned with its educational mission. Technically, the site is built on WordPress, leveraging modern SEO tools like Yoast SEO, and integrates analytics and consent management via Google Analytics, Google Tag Manager, and Cookiebot, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly available. Overall, the domain registration data aligns with the website's claims, supporting legitimacy and trustworthiness. Strategic recommendations include publishing detailed security and incident response policies and enhancing transparency around data protection roles.

S

Stanice O, a.s.

ocko.tv

65

OCKO.TV is the first Czech music television channel offering a comprehensive digital platform with live streaming, music videos, news, contests, and interactive charts. The website targets Czech and Slovak music fans and operates under the company Stanice O, a.s., established in 2003. The platform leverages a variety of modern web technologies and third-party services to deliver content and advertising effectively. The business model is primarily advertising-driven with additional engagement through contests and music charts. The company maintains a consistent brand presence and a good market position in the Czech media landscape. Technically, the website uses multiple JavaScript libraries, ad networks, and analytics tools, supported by a consent management platform to comply with GDPR requirements. The site is moderately optimized for mobile and performance, with room for improvement in accessibility and security headers. Security posture is solid with HTTPS and no visible vulnerabilities, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is well addressed with clear privacy and cookie policies and active consent mechanisms. Contact information and company registration details are transparent, enhancing business credibility. Overall, the website is professional, content-rich, and trustworthy, with no adult or explicit content detected.

C

Captcha4WP

captcha4wp.com

59

Captcha4WP is a specialized WordPress plugin provider focused on delivering anti-spam CAPTCHA solutions for WordPress websites and e-commerce stores. The company offers integration with multiple CAPTCHA providers including Google reCAPTCHA, hCaptcha, and Cloudflare Turnstile, targeting WordPress site owners and administrators seeking to reduce spam and fake registrations. The business has a solid market presence with over 100,000 active installs and has been acquired by WPKube, indicating growth and strategic backing. The website is professionally designed with clear navigation and good content relevance, supporting a positive user experience.

T

TradingView

tradingview.com

75

TradingView is a leading global financial technology platform that provides advanced charting tools, market data, and a social network for traders and investors. It serves a large user base with a freemium business model offering both free and subscription-based premium services. The platform integrates real-time market data, news, and trading capabilities, positioning itself as a comprehensive hub for market analysis and trading collaboration. Technically, TradingView employs modern web technologies including React, WebSocket communications, and advanced analytics tools, ensuring a fast, responsive, and mobile-optimized user experience. Security-wise, the site enforces HTTPS, uses multiple security headers, and integrates CAPTCHA protections, reflecting a mature security posture. However, the absence of publicly available WHOIS registration data and explicit security policies suggests areas for transparency improvement. Overall, TradingView presents a professional, trustworthy, and technically robust platform with minor gaps in public security disclosures.

R

Roklen Corporate Finance

roklencf.cz

52

Roklen Corporate Finance is a specialized corporate finance advisory firm based in the Czech Republic, focusing on M&A advisory, company valuation, and capital market operations. The company positions itself as a leading specialist in the Czech market with a strong team of experienced professionals and a solid track record of completed projects. Their services include transaction advisory, financing support, and special capital market operations such as takeover bids and auctions. The website reflects a professional and well-structured digital presence with detailed team profiles and client references, supporting their market credibility. Technically, the website uses modern web technologies including HTML5, CSS3, and jQuery, with good mobile optimization and accessibility features. The site is served over HTTPS with secure forms and a cookie consent mechanism, indicating compliance with GDPR requirements. However, there is room for improvement in security headers and publishing explicit security policies or incident response information. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. The lack of WHOIS data due to privacy protection is common for such businesses and does not detract from legitimacy. Overall, the site is trustworthy, professional, and compliant with relevant privacy regulations. Strategically, Roklen Corporate Finance should enhance its security posture by implementing recommended HTTP security headers and publishing a vulnerability disclosure or security.txt file to further build trust. Maintaining GDPR compliance and transparent privacy policies will support ongoing regulatory adherence and client confidence.

D

Direct Group, s.r.o.

directgroup.eu

64

Direct Group, s.r.o. is a large Czech financial and technology group operating multiple subsidiaries in insurance, payment services, and investments. The company serves both individual and business clients, emphasizing simplicity, speed, reliability, and friendliness in its offerings. The website reflects a mature and professional digital presence with a modern tech stack based on Next.js and React, and uses third-party services such as CookiePro for cookie consent and Google Tag Manager for analytics. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit security policies. Privacy compliance is basic, with cookie consent implemented but no clear privacy or terms of service pages found. Overall, the site is well-branded, consistent, and trustworthy, though improvements in transparency and security documentation are recommended.

H

HotellerieSuisse

hotelleriesuisse.ch

62

HotellerieSuisse is a prominent Swiss hospitality industry association providing a wide range of services including legal advice, classification, marketing, and education support to its members. The website is professionally designed, mobile-optimized, and built on TYPO3 CMS, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and privacy compliance evident through a comprehensive privacy policy and cookie consent mechanism. No critical vulnerabilities or security issues were detected. However, explicit contact information such as emails or phone numbers is not directly visible in the HTML content, which could be improved for better user engagement and trust. Overall, the site demonstrates a high level of professionalism and trustworthiness suitable for its target audience.

P

Promaledobrodruhy.cz

promaledobrodruhy.cz

63

Promaledobrodruhy.cz is a specialized Czech retailer focused on providing high-quality outdoor clothing and equipment primarily for children and families. The business operates both an e-commerce platform and a physical store located in Prague, offering a wide range of products including exclusive brands like WeeDo. Their services extend to a loyalty program, a second-hand bazaar for used outdoor gear, and a blog providing advice and community engagement. The company targets families with children who enjoy outdoor activities, positioning itself as a trusted specialist in this niche market. Technically, the website employs a custom CMS with modern JavaScript libraries, integrates multiple analytics and marketing tools, and maintains good mobile responsiveness and SEO practices. Security-wise, the site uses HTTPS and error monitoring but lacks explicit security policies and vulnerability disclosure mechanisms. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable, which slightly impacts domain trust assessment.

Algida.cz is the Czech Republic localized website for Algida, a globally recognized ice cream brand under the Unilever umbrella. The site offers a comprehensive portfolio of ice cream products and accessories, targeting general consumers interested in frozen desserts. The website is professionally designed using Adobe Experience Manager, ensuring a modern and responsive user experience. It features multiple international partner domains linked through hreflang tags, indicating a well-integrated global brand presence. Security-wise, the site employs HTTPS and cookie consent mechanisms but lacks explicit privacy and terms of service pages, which are important for compliance and user trust. WHOIS data is unavailable, likely due to privacy protection, which is common for large brands but reduces transparency. Overall, the site is secure, well-branded, and user-friendly but could improve privacy disclosures and contact transparency.

N

Nadace ČEZ

nadacecez.cz

62

Nadace ČEZ is a well-established non-profit foundation affiliated with the ČEZ Group, focusing on supporting social, environmental, and community projects across the Czech Republic. The foundation operates various grant programs, including regional support, sports infrastructure, environmental initiatives like tree planting, and employee-driven grants. The website reflects a professional and consistent brand image with comprehensive content and clear navigation, targeting non-profit organizations, regional communities, and the general public interested in social good. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager for analytics, and Cookiebot for consent management. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are missing. The WHOIS data is unavailable, which slightly reduces trustworthiness; however, the website's structured data, social media presence, and content quality support its legitimacy. No critical vulnerabilities or adult content were detected. Overall, the site demonstrates a mature digital presence suitable for its non-profit mission. Recommendations include enhancing security headers, publishing explicit security and incident response policies, and verifying domain registration details to improve trust and compliance.

F

FTV Prima spol. s r.o.

prima.cz

59

FTV Prima spol. s r.o. operates the website www.iprima.cz, a leading Czech media streaming platform offering films, TV series, live broadcasts, and premium subscription services. The site targets a general audience with family-friendly content and provides access across multiple devices including computers, tablets, mobiles, and TVs. The business model combines advertising and subscription revenue streams, positioning it as a major player in the Czech media market. Technically, the website is built on modern web technologies including Vue.js with Nuxt.js framework, leveraging Amazon Cloudfront CDN for fast content delivery. It integrates advanced analytics and consent management tools such as Gemius, Smartlook, Google Tag Manager, and Didomi, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing an excellent user experience. From a security perspective, the site enforces HTTPS and uses consent mechanisms for cookies, but lacks explicit security headers like Content-Security-Policy and Strict-Transport-Security in the provided HTML. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic with cookie consent present but no explicit privacy policy or terms of service found in the analyzed content. WHOIS data is unavailable due to privacy protection, which is typical for commercial media sites and does not raise immediate concerns. Overall, www.iprima.cz demonstrates a strong security posture and professional digital presence with room for improvement in transparency around privacy policies and security headers. The risk level is low, but enhancing compliance documentation and security headers would further strengthen trust and regulatory adherence.

E

ECN Studio

ecn.cz

48

ECN Studio operates a professional web presence focused on web design, web hosting, and technical support services primarily targeting Czech businesses and users. The company has a long-standing domain registration dating back to 1995, indicating established market presence. The website offers multiple online tools such as webmail, cloud storage, and toolkits, enhancing its service portfolio. The site is well structured with clear navigation and consistent branding, though it lacks formal privacy and cookie policies. Technically, the website uses modern HTML5, CSS3, and JavaScript with responsive design elements, providing a good user experience across devices. However, there is no evidence of advanced frameworks or CMS usage, and performance is moderate. Security posture is adequate with HTTPS implied but lacks explicit security headers and incident response information. No forms or user data collection mechanisms are present on the main page, reducing immediate data protection concerns. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data but would benefit from implementing security headers, publishing privacy and cookie policies, and providing vulnerability disclosure channels. The WHOIS data confirms domain legitimacy and consistency with the business claims, enhancing trustworthiness. Overall, the website is safe, professional, and suitable for general audiences with no adult or questionable content. Strategic recommendations include enhancing privacy compliance, improving security headers, and adding incident response information to strengthen trust and regulatory adherence. The site’s technical and business foundations are solid but could be modernized further for improved performance and security.

B

Bookolo system s.r.o.

bookolosystem.com

67

Bookolo system s.r.o. operates a comprehensive hotel management platform offering a suite of products including booking engine, channel manager, voucher shop, wellness & spa management, online check-in, CRM modules, payment gateway integration, and digital marketing services. The company targets hotels and accommodation providers primarily in the Czech Republic and surrounding regions, positioning itself as a trusted partner to increase direct bookings and optimize hotel operations. The website demonstrates a mature digital presence with rich content, client testimonials, and partner integrations. Technically, the site employs modern JavaScript frameworks, integrates multiple analytics and marketing tools, and enforces HTTPS with reCAPTCHA protections on forms. Privacy and cookie policies are comprehensive and GDPR compliant, with user consent mechanisms in place. However, the absence of WHOIS registration data raises concerns about domain legitimacy, though the business content and contact details strongly indicate a legitimate operation. Security posture is good but could be improved by adding explicit security policies, incident response contacts, and HTTP security headers.

S

Seznam.cz

szn.cz

60

Seznam.cz is the leading Czech internet portal offering a wide range of services including search engine, email, news, weather, maps, video streaming, and podcasts. It serves a broad Czech audience with a comprehensive digital ecosystem. The website demonstrates a mature and professional digital presence with consistent branding and high-quality content. Technically, it employs modern web technologies, uses HTTPS with strong security headers, and leverages CDN hosting for performance. However, explicit privacy and cookie policies are not directly found in the main HTML content, which is a compliance gap. The WHOIS data is unavailable from the CZ.NIC registry query, which is unusual but may be due to registry policies. Overall, the site is secure, performant, and trustworthy, but could improve transparency on privacy and security contact information.

M

Místní akční skupina Krkonoše, z. s.

maskrkonose.cz

51

Místní akční skupina Krkonoše, z. s. is a Czech non-profit organization dedicated to the sustainable development of the Krkonoše rural region. The organization supports local municipalities, non-profits, and entrepreneurs by facilitating project funding, promoting local craftsmanship, and certifying authentic regional products under the brand 'Krkonoše Originální Produkt'. Their approach leverages the LEADER method to foster community-driven growth and improve quality of life in the region. The website reflects a well-structured, content-rich platform with clear navigation and up-to-date news, targeting local stakeholders and residents. Technically, the website uses the Estofan CMS platform with JavaScript libraries including jQuery and Nivo Slider for UI elements. Google Analytics and Google Tag Manager are employed for visitor tracking, with a cookie consent mechanism that denies tracking by default, indicating a basic level of privacy compliance. The site is mobile-optimized and presents a professional design, although accessibility features are basic. Performance is moderate with room for improvement. From a security perspective, the site lacks visible HTTP security headers and detailed security or incident response policies. SSL/TLS configuration details are not provided, and WHOIS data is unavailable, which reduces transparency. However, no critical vulnerabilities or suspicious content were detected. The organization’s non-profit nature justifies privacy protection in domain registration. Overall, the security posture is moderate but could be enhanced by implementing standard security headers and publishing comprehensive privacy and security policies. The overall risk assessment is low to moderate, with recommendations focusing on improving security headers, enhancing privacy disclosures, and increasing transparency in domain registration. The website is trustworthy and professional, serving its community development mission effectively.

S

Svazek obcí Východní Krkonoše

vychodnikrkonose.cz

49

Svazek obcí Východní Krkonoše is a regional association of municipalities in the Eastern Krkonoše area of the Czech Republic, focused on regional development, tourism, and community support. The organization provides services such as meeting room rentals, coworking spaces, and event equipment, and manages multiple projects aimed at enhancing tourism and sustainable regional growth. The website reflects a well-established entity with a domain age since 2004, consistent with its operational history. Technically, the website employs modern web standards including HTML5, CSS3, Bootstrap for responsive design, and Font Awesome for icons. It is hosted by Active24, a known Czech hosting provider, and uses HTTPS with good performance optimizations such as Google PageSpeed. The site is mobile-friendly and has good SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS and implements a cookie consent banner compliant with GDPR. However, no explicit security headers or incident response policies are found, and no vulnerability disclosure or security.txt files are present. No critical vulnerabilities or exposed sensitive data were detected in the content analyzed. Overall, the website is professional, trustworthy, and suitable for its target audience of local municipalities and regional stakeholders. Strategic improvements in security headers and explicit security policies would enhance its security posture and compliance.

M

Multi Digital

multidigital.ch

62

Multi Digital is a Swiss-based digital agency specializing in the development, programming, and implementation of web and software solutions tailored to regional, national, and international clients. The company emphasizes user-friendly, personalized digital experiences that support client strategies. As part of the Galledia Group, Multi Digital benefits from a strong regional presence and professional backing. The website reflects a modern, professional design with clear navigation and comprehensive service offerings including software development, e-commerce, marketing, and web design. Technically, the site uses modern frameworks like Bootstrap, integrates Google Tag Manager and Metricool for analytics and marketing, and employs a robust cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the domain registration aligns well with the business claims, supporting legitimacy and trustworthiness.

M

Město Pardubice

pardubice.eu

57

Pardubice.eu is the official web portal for the city of Pardubice, Czech Republic, serving tourists, citizens, entrepreneurs, and local government stakeholders. It provides comprehensive information on tourism, events, city news, public services, and contact resources. The website is well-positioned as a trusted government portal with consistent branding and a clear focus on serving its community. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager, Facebook Pixel, and Microsoft Clarity for analytics and user experience enhancement. The site is hosted by a reputable Czech provider and demonstrates good mobile optimization and accessibility. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR, though it lacks explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its audience.

G

Giant interactive s.r.o.

giant.cz

54

Giant interactive s.r.o. is a Czech digital agency specializing in e-commerce, web, and mobile application development with over 17 years of experience. The company positions itself as a market leader providing comprehensive digital solutions including strategy, web presence, e-commerce platforms, mobile apps, and online marketing services. Their client portfolio includes notable companies and they have received multiple industry awards, indicating strong market presence and credibility. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, React JS, and integrates Google Tag Manager for analytics. The site is well-optimized for mobile devices and offers a professional user experience with clear navigation and multimedia content. Cookie consent mechanisms are implemented, reflecting awareness of privacy regulations. From a security perspective, the site uses HTTPS with good SSL configuration and secure forms with anti-spam features. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no published privacy policy or incident response information is found, which are areas for improvement. Overall, the website is professional and trustworthy, but the absence of WHOIS data and privacy policy reduces the confidence level. It is recommended to verify domain registration details and publish comprehensive privacy and security policies to enhance trust and compliance.

N

Non Gamstop Casinos - OXON AA

oxonaa.org.uk

53

The website oxonaa.org.uk operates as an affiliate and informational platform specializing in non Gamstop casinos targeted at UK players seeking alternatives to UKGC-regulated gambling sites. It provides curated casino reviews, bonus information, and payment guidance, positioning itself as a niche player in the UK gambling affiliate market. The site leverages WordPress CMS with modern SEO and performance optimizations, including WP Rocket and Google Analytics integration. Security posture is adequate with HTTPS enforced but lacks visible security headers and formal privacy or cookie policies, representing compliance gaps. The WHOIS data presents an anomaly with a future domain creation date, which raises questions about registration data accuracy but does not directly undermine the site's apparent legitimacy. Overall, the site is professional and functional but should improve privacy compliance and security transparency to enhance trust and regulatory adherence.

A

ARISE

ariseglobalnetwork.org

67

ARISE is a UN Office for Disaster Risk Reduction (UNDRR) established network that connects private sector entities globally to promote disaster risk reduction and resilience. The platform serves as a hub for knowledge sharing, innovation, and collaboration among businesses, investors, insurers, and infrastructure stakeholders. It aligns its mission with major global frameworks such as the Sendai Framework, Sustainable Development Goals, and the Paris Climate Agreement. The website demonstrates a mature digital presence built on Drupal 10, with good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and Cloudflare protections, though explicit security policies and vulnerability disclosures are absent. WHOIS data is unavailable, which slightly reduces domain trust but is mitigated by the UN affiliation and professional content. Overall, the site is a credible and authoritative resource for private sector disaster resilience initiatives.

D

Domains By Proxy, LLC

esm.sh

56

esm.sh is a specialized open source CDN service focused on delivering modern JavaScript and TypeScript modules (ESM) globally with no build steps required. It targets web developers and Deno users by providing fast, smart, and global CDN capabilities with support for import maps, on-the-fly transformation of TSX, Vue, and Svelte files, and compatibility with Deno's module system. The project is hosted on GitHub and powered by Cloudflare, indicating a modern and scalable technical infrastructure. The website is well-structured with comprehensive documentation and usage examples, supporting a developer-centric audience. However, it lacks formal privacy, cookie, and terms of service policies, which are important for compliance and user trust.

M

Materasso Hotels

materasso-hotels.com

56

Materasso Hotels is a specialized supplier of hotel beds, mattresses, and furniture, targeting the hospitality industry with a focus on quality sleep solutions. The company offers a range of product classes from Economy to Luxury, serving over 200 hotels, primarily in Central Europe. Their website is professionally designed, multilingual, and optimized for user experience and SEO, reflecting a mature digital presence. Technically, the site leverages WordPress with modern JavaScript libraries, Google Analytics, and Tag Manager for marketing and analytics purposes. Security measures include HTTPS enforcement and cookie consent mechanisms, though some advanced security policies and incident response information are not publicly available. The absence of WHOIS registration data for the domain is a notable concern, suggesting a need for verification of domain legitimacy. Overall, the business appears credible and well-positioned in its market segment, with recommendations to improve transparency around security policies and domain registration.

H

HERHSIANG Information Co., LTD.

tgb.com.tw

8

The website tgb.com.tw/webmail serves as a corporate webmail login portal primarily targeting employees or users associated with the tgb.com.tw domain. The business behind the site is HERHSIANG Information Co., LTD., a Taiwanese company providing webmail services. The site is minimalistic, focusing on secure user authentication with features such as XSRF tokens and two-step verification code mechanisms. However, it lacks publicly visible privacy, cookie, or terms of service policies, and no contact information is provided on the page. From a technical perspective, the site uses standard web technologies including HTML, CSS, JavaScript, jQuery, and jQuery UI. The performance and mobile optimization are basic, with no advanced frameworks or CMS detected. Security best practices are partially implemented, but the absence of visible HTTPS enforcement and security headers reduces the overall security posture. No analytics or advertising scripts are present, indicating a focus on internal use rather than marketing. Security-wise, the site shows some good practices such as hidden XSRF tokens and password input protections, but the lack of explicit HTTPS enforcement and security headers is a concern. There is no evidence of vulnerability disclosure or incident response policies. The domain registration data is consistent and legitimate, registered through TWNIC with no suspicious patterns. Overall, the website is functional for its intended purpose but would benefit from enhanced security measures, privacy compliance, and improved user trust signals. Strategic recommendations include implementing HTTPS with HSTS, adding security headers, publishing privacy and cookie policies, and providing clear contact information to improve credibility and compliance.

A

ASP Group s.r.o.

aspgroup.cz

61

ASP Group s.r.o. is a well-established distributor specializing in branded ATVs, motorcycles, and related accessories across Central and Eastern Europe. With over 24 years of market experience, the company holds a strong position as one of the largest distributors in its sector. The website reflects a professional and comprehensive digital presence, offering detailed product categories, brand partnerships, and dealer support services. The multilingual approach and dedicated e-commerce platforms further enhance its market reach. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates essential marketing and analytics tools such as Google Tag Manager and Google Analytics. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure. Cookie consent and privacy policies are implemented in compliance with GDPR, reflecting a commitment to privacy and regulatory adherence. From a security perspective, the site uses HTTPS and cookie consent management but lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data slightly reduces domain trustworthiness, but the overall professional presentation and contact transparency mitigate concerns. Overall, ASP Group's website demonstrates a solid business and technical foundation with good security hygiene and privacy compliance. Strategic improvements in security headers and transparency around incident response would further strengthen its posture.

M

Metropolitní kapitula u sv. Víta v Praze

varhannifestival.cz

10

The website www.varhannifestival.cz represents the 14th International Organ Festival held at the St. Vitus Cathedral in Prague, organized by the Metropolitan Chapter of St. Vitus in Prague. It targets classical music enthusiasts and cultural tourists, providing detailed event information, artist lineups, and ticket purchasing options. The festival is well-established and supported by notable figures such as the Archbishop of Prague and the President of the Czech Republic, indicating strong cultural significance and trust. Technically, the website is built on the Solidpixels CMS platform, utilizing modern web technologies including Google Tag Manager and Google Fonts. It features responsive design, good accessibility, and SEO optimization. Performance is moderate with asynchronous script loading enhancing user experience. However, no hosting provider or domain age information is available due to missing WHOIS data. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. Yet, it lacks important security headers and published policies such as privacy, cookie, and terms of service, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, representing an area for improvement. Overall, the website is professional, content-rich, and trustworthy in terms of business credibility but requires enhancements in privacy compliance and security documentation. The absence of WHOIS data is a notable concern that should be addressed to improve domain legitimacy and trustworthiness.

T

The metropolitan chapter of St. Vitus in Prague

kapitula.cz

55

The Metropolitan Chapter of St. Vitus in Prague is a historic religious and cultural institution established in 973, making it the oldest legal entity with continuous activity in the Czech lands. The organization manages the St. Vitus Cathedral and other historic monuments, organizes cultural events such as organ festivals and choirs, and maintains a significant library and archive. The website reflects a professional and well-maintained digital presence, leveraging modern web technologies and a specialized CMS platform. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate areas for improvement in transparency and compliance. Security posture is generally strong with HTTPS and modern libraries, but could benefit from enhanced security headers and incident response information. Overall, the site serves as a credible and authoritative source for cultural and religious information related to the chapter.

Ú

Úrad verejného zdravotníctva Slovenskej republiky

uvzsr.sk

10

The website https://uvzsr.sk/ represents the official portal of the Úrad verejného zdravotníctva Slovenskej republiky (Public Health Authority of the Slovak Republic). It serves as a comprehensive information hub for public health topics, regional offices, and services relevant to citizens, businesses, and professionals in Slovakia. The site is positioned as a key government entity providing authoritative public health information and services. The business model is that of a government-funded public health organization, with no commercial intent. The website content is well-structured, targeting a broad audience including the general public and specialized professionals.

I

Instituto Português do Mar e da Atmosfera

ipma.pt

53

The Instituto Português do Mar e da Atmosfera (IPMA) is a Portuguese government entity specializing in meteorology, oceanography, climate monitoring, and seismic activity. The website serves as the national authoritative source for weather forecasts, marine conditions, seismic alerts, and climate data, targeting the general public, researchers, and governmental sectors. It provides comprehensive scientific and public service information, including interactive maps and detailed forecasts. The site is well-branded and consistent with its government affiliation, offering a professional and trustworthy user experience. Technically, the website is built on the OpenCms content management system and utilizes JavaScript libraries such as Leaflet for mapping and jQuery for interactivity. It integrates Google Analytics for user tracking but lacks explicit cookie consent mechanisms. The site performs moderately well with basic mobile optimization and accessibility features. However, some technologies like jQuery are outdated, and security headers are not visibly implemented, which could be improved. From a security perspective, the site uses HTTPS and does not expose sensitive data. There are no detected vulnerabilities or WAF challenges, indicating a stable security posture. However, the absence of privacy and cookie policies, as well as incident response information, suggests gaps in compliance and transparency. The WHOIS data confirms the domain's legitimacy as a government entity, reinforcing trust. Overall, the IPMA website is a credible and authoritative source for meteorological and oceanographic information in Portugal, with room for improvement in privacy compliance, security best practices, and modernization of technical components.

S

SYLVA

bioaerosol.eu

51

SYLVA is a European Union and SERI funded scientific project focused on real-time observation of aeroallergens, providing valuable environmental data and research outputs. The website serves as a portal for stakeholders including researchers and public health officials, offering access to data portals and project information. The technical infrastructure is modern and lightweight, utilizing htmx and Pico CSS for responsive and accessible design. Embedded iframes provide interactive data visualization and mapping services. Security posture is adequate with HTTPS usage but lacks explicit security headers and privacy policies, which are recommended for improvement. The domain WHOIS data is privacy protected by EURid, typical for .eu domains, and the website content aligns with the domain's purpose, supporting legitimacy. Overall, the site is professional and trustworthy but could enhance compliance and security transparency.

S

solidpixels.

solidpixels.cz

65

solidpixels. is a Czech-based technology company offering a proprietary SaaS platform for creating professional websites, landing pages, e-shops, and content hubs. The company targets businesses and professionals seeking high-quality, fast, and functional web solutions, positioning itself as a premium provider trusted by thousands of clients. The website demonstrates a strong market presence with client testimonials, social media engagement, and a comprehensive service offering. Technically, the site uses modern web technologies including responsive design, lazy loading, and integrates Google Analytics and Tag Manager for analytics and marketing. The platform is built on a proprietary CMS, solidpixels, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are not evident. The absence of WHOIS registrant data is a concern for domain legitimacy verification, but the professional content and business presence mitigate this risk. Overall, the website is well-designed, user-friendly, and compliant with GDPR, making it a trustworthy platform for its target audience.

T

TAKTIQ COMMUNICATIONS s.r.o.

taktiq.com

46

Taktiq Communications s.r.o. is a Czech-based communication agency specializing in media relations, creative projects, content creation, and communication training. The company targets businesses and organizations seeking professional communication and PR services. Their website reflects a professional and consistent brand image, showcasing key services and client testimonials. Technically, the site uses modern technologies including Blazor and Google Fonts, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage but lacks visible security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website presence.

C

Chrudimka.cz

chrudimka.cz

51

Chrudimka.cz is a Czech regional online media portal delivering daily news focused on culture, sports, and leisure activities, primarily targeting a younger audience. The website presents a professional and consistent brand image with regularly updated content and multiple categories including culture, sport, free time, competitions, and local news about Chrudim. The business model revolves around content publishing and advertising partnerships with book publishers and local event promoters. Technically, the site is built on WordPress CMS with common performance and analytics plugins, featuring lazy loading and responsive design for mobile users. Security posture is adequate with HTTPS enabled and cookie consent implemented, though security headers are missing and no explicit incident response or security policies are found. WHOIS data is unavailable, which slightly impacts trust but the site content and structure indicate a legitimate local media presence. Overall, the site is well-maintained with good content quality and user experience, suitable for its target audience and business scope.

S

S úsměvem pro vás

susmevemprovas.cz

56

S úsměvem pro vás is a small Czech Republic based consortium of companies specializing in advertising, graphic design, photography, publishing, and printing services. The website is built on the Wix platform, leveraging Wix Thunderbolt technology, and presents a professional and consistent brand image targeting local/regional clients. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and privacy compliance features. The absence of WHOIS data reduces transparency but does not indicate direct risk. Overall, the business appears legitimate with room for improvement in privacy and security practices.

A

Autoservis Dubina Pardubice

autoservisdubina.cz

41

Autoservis Dubina Pardubice is a small automotive service provider based in the Czech Republic, specializing in comprehensive car servicing, repairs, diagnostics, and spare parts sales. The company targets local vehicle owners and offers a broad range of services including chiptuning, tire service, air conditioning, and technical inspections. The website is built on Joomla CMS and uses common JavaScript libraries, presenting a professional and consistent brand image. However, the site lacks privacy and cookie policies, which impacts compliance with GDPR regulations. Security posture is moderate with no visible HTTPS verification or security headers, indicating room for improvement. Overall, the website is functional and trustworthy but would benefit from enhanced security and privacy measures.