Security Directory

A

Alpiro s.r.o.

ssls.cz

57

SSLS.cz is an established Czech online reseller specializing in SSL certificates and digital security products. Operated by Alpiro s.r.o., it holds a strong market position as the largest SSL certificate provider in the Czech Republic, offering a wide range of certificates from multiple trusted certificate authorities. The website provides comprehensive services including SSL certificates by brand and validation type, wildcard and multidomain certificates, digital signatures, code signing, CSR generation, and API integration for automation. The business model focuses on competitive pricing and extensive product selection targeting businesses and individuals seeking web security solutions in the Czech market. Technically, the website employs standard web technologies such as JavaScript and jQuery, with responsive design and good SEO practices. While performance is moderate, mobile optimization is good, and accessibility is basic. The site includes a cookie consent mechanism and secure login options, including certificate-based authentication, indicating a reasonable level of digital maturity. However, the absence of explicit security headers and a formal security policy page suggests room for improvement in security hardening. From a security perspective, the site enforces HTTPS and offers secure user authentication methods. No vulnerabilities or exposed sensitive data were detected in the content. The lack of WHOIS data reduces transparency and slightly impacts trustworthiness, but the overall security posture is solid for an e-commerce platform of this nature. Privacy compliance is supported by a privacy policy and cookie consent, aligning with GDPR requirements. Overall, SSLS.cz presents a professional and trustworthy platform for SSL certificate procurement with a strong local market presence. Strategic enhancements in security headers, incident response transparency, and WHOIS data availability would further strengthen its security and compliance profile.

L

Lidl

lidl.cz

60

Lidl.cz is the Czech Republic online presence of Lidl, a major European discount supermarket chain. The website offers retail grocery and consumer goods services with a focus on promotional offers and online shopping convenience. The site is professionally designed with consistent branding and targets a general audience. Technically, the site employs modern JavaScript libraries, cookie consent management, and integrates third-party services such as YouTube and Google Analytics. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected. Privacy compliance is robust, with a comprehensive privacy policy and GDPR adherence clearly indicated. Overall, the site presents a low risk profile with no signs of blocking or suspicious activity.

C

COVITAR s.r.o.

covitar.cz

51

COVITAR s.r.o. is a Czech-based supplier specializing in natural raw materials such as dried fruits, nuts, additives, and semi-finished fruit products for the food industry. The company emphasizes natural delicacies and organic quality products, catering primarily to food manufacturers and businesses seeking natural ingredient solutions. Their business model includes dropshipping, private label services, and fulfillment, positioning them as a versatile supplier in their niche market. The website reflects a professional and consistent brand image with clear contact channels and EU co-financing trust indicators. Technically, the site uses modern web standards with good mobile optimization and SEO practices, though it lacks advanced frameworks or CMS indications. Security posture is adequate with HTTPS and CAPTCHA-protected forms but lacks security headers and formal privacy or cookie policies, indicating room for compliance improvements. WHOIS data is unavailable, which slightly impacts domain trustworthiness, but overall, the site presents a credible and professional business presence.

B

Blendea

blendea.cz

65

Blendea.cz is a Czech e-commerce website specializing in premium natural dietary supplements and functional foods aimed at supporting overall health, energy, and vitality. The site targets health-conscious consumers in the Czech Republic and offers a broad range of products categorized by health goals and product types. The business model is retail-focused, leveraging an online platform to reach its audience. The website presents a professional and consistent brand image with good content quality and clear navigation.

M

Ministerstvo zemědělství

viscojis.cz

60

The website viscojis.cz is a Czech government-affiliated informational platform focused on food, health, nutrition, and food safety. It serves as an educational resource providing detailed content on nutrients, healthy eating habits, food safety practices, and nutrition-related diseases. The site targets the general public interested in nutrition and food safety, positioning itself as an authoritative source backed by the Ministry of Agriculture of the Czech Republic. Key services include educational articles, food safety guidelines, and health-related nutrition information. Technically, the website is built on WordPress 6.8.3 with standard web technologies such as jQuery and Bootstrap Icons. It demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The site uses HTTPS, ensuring secure communication, but lacks some security headers and privacy compliance features such as privacy and cookie policies. No advertising or tracking technologies were detected, indicating a privacy-conscious approach. From a security perspective, the site benefits from HTTPS and secure form handling but could improve by implementing security headers and publishing vulnerability disclosure information. The absence of privacy and cookie policies represents a compliance gap, especially under GDPR. Contact information is clearly provided, enhancing trust and credibility. WHOIS data confirms the domain's legitimacy and consistency with the government affiliation. Overall, viscojis.cz is a trustworthy, well-structured government resource with good content quality and technical implementation. Strategic improvements in privacy compliance and security headers would enhance its security posture and regulatory adherence.

Č

Česká spořitelna a.s.

tradergo.cz

64

TraderGO is a modern online trading platform operated under the Česká spořitelna brand, offering professional investment services including trading in stocks, commodities, currencies, and other assets. The platform targets retail and professional investors primarily in the Czech Republic, providing a multi-device accessible application and educational resources. The website is well-branded, professionally designed, and integrates secure login and demo account features. Technically, the site uses modern web technologies including JavaScript modules, Google Tag Manager, and ElasticSearch for search functionality, hosted likely on Erste Group infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be further verified. The absence of WHOIS data is a notable gap but does not significantly detract from trust due to the strong brand presence. Overall, the site demonstrates good digital maturity and compliance with privacy regulations.

W

WPCodeBox

wpcodebin.com

56

WPCodeBin is a niche technology platform offering a free service for sharing WordPress code snippets, targeting WordPress developers and users. The website is built using modern web technologies including React and Next.js, hosted with DNS managed by Cloudflare and domain registered via NameCheap. The platform is relatively new, founded in 2022, and operates under the parent brand WPCodeBox. The site demonstrates good technical infrastructure with responsive design and moderate performance. Security posture is decent with HTTPS enabled and some security headers indicated in code snippets, though DNSSEC is not enabled and no explicit security or privacy policies are published. The absence of privacy and cookie policies represents a compliance gap. No contact information or incident response details are provided, limiting direct communication channels. Overall, the site is professional and trustworthy within its niche but could improve compliance and security transparency.

S

Soflyy

breakdance.com

61

Breakdance.com is the official website for Breakdance, a modern visual website builder for WordPress developed by Soflyy. The company positions itself as a powerful and easy-to-use alternative to popular WordPress builders like Elementor and Divi, targeting WordPress creators, developers, and agencies. The site offers extensive features including WooCommerce integration, form and popup builders, dynamic data handling, and AI-powered content creation. The business model is subscription-based with an unlimited site license offered annually. The website demonstrates a mature digital presence with professional design, comprehensive tutorials, and active social media engagement.

D

DIAsource ImmunoAssays

diasource-diagnostics.com

73

DIAsource ImmunoAssays is a well-established Belgian company specializing in the development, manufacturing, and marketing of clinical diagnostic products focused on immunoassays such as RIA and ELISA, antibodies, and instruments for endocrinology, autoimmunity, and infectious diseases. The company operates as part of the BioVendor Group, enhancing its market position and credibility. Their website reflects a professional and comprehensive digital presence targeting healthcare professionals and clinical laboratories worldwide. Technically, the website uses modern web technologies, is hosted by OVH sas, and includes essential privacy and cookie compliance mechanisms. Security posture is good with HTTPS and CSRF protections, though improvements are possible in DNSSEC and security headers. Overall, the site is trustworthy, well-branded, and provides clear contact and business information.

T

TestLine Clinical Diagnostics s.r.o.

testlinecd.cz

41

TestLine Clinical Diagnostics s.r.o. is a Czech-based company specializing in the development, manufacturing, and distribution of human and veterinary laboratory diagnostic products. It operates as part of the BioVendor Group, a recognized international biotechnology conglomerate. The company targets healthcare and veterinary laboratories, providing innovative in vitro diagnostic solutions and related services. The website reflects a professional and consistent brand presence with multilingual support and comprehensive product information.

P

PragueBest s.r.o.

praguebest.cz

58

PragueBest s.r.o. is a well-established Czech digital agency founded in 2002, specializing in custom website and e-commerce development tailored to client needs. The company serves a diverse client base including retail, transportation, and lifestyle sectors, with a strong portfolio of notable clients and industry awards. Their business model focuses on delivering bespoke digital solutions integrating modern technologies and ERP systems. Technically, the website demonstrates a mature digital infrastructure with modern JavaScript libraries, Google reCAPTCHA v3, and cookie consent management, reflecting a high level of digital maturity and user experience optimization. Security posture is strong with HTTPS enforced and secure form handling, though explicit security headers and policies could be improved. Privacy compliance is robust, with clear GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized, though the lack of WHOIS data slightly impacts domain trust assessment.

M

More.is.More | Engineering Joy

moreismore.cz

56

More.is.More is a small technology-focused design and engineering solutions provider based in the Czech Republic, founded in 2017. The website presents a professional and creative brand image targeting innovators and creatives seeking cutting-edge design. The technical infrastructure is modern, built on the Framer platform and hosted by Czech providers, with moderate performance and good mobile optimization. However, the site lacks critical privacy and security policies, contact information, and security headers, which are essential for compliance and trust. The absence of analytics and tracking indicates minimal user data collection, but also limits business intelligence capabilities. Overall, the security posture is basic and requires improvements to meet industry standards.

F

FG Forrest, a.s.

edee.one

65

Edee.one is a Czech-based advanced headless CMS and e-commerce platform designed for medium to large enterprises, including significant Czech and multinational companies. The platform integrates web content management, e-commerce, intranet, and email marketing into a single modular system. The website demonstrates a professional and modern digital presence with clear navigation, strong branding, and comprehensive content targeting corporate clients. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. WHOIS data is unavailable, likely due to privacy protection, but the website's professional appearance and client references support its legitimacy. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for enhanced security transparency.

M

Muzeum literatury

pamatniknarodnihopisemnictvi.cz

53

The website www.muzeumliteratury.cz represents the Czech Museum of Literature, a government-affiliated cultural institution focused on literature, exhibitions, research, and educational services. The site provides comprehensive information about current and upcoming exhibitions, visitor information, research services, and educational programs, targeting a broad audience including the general public, researchers, and educators. The museum maintains partnerships with ticketing platforms and other cultural portals, enhancing its service offerings and outreach. Technically, the website employs modern JavaScript technologies, integrates Google Tag Manager for analytics, and uses New Relic for performance monitoring. The site is served over HTTPS with appropriate security headers, indicating a good security posture. The design is professional, mobile-optimized, and provides clear navigation, contributing to a positive user experience. Security-wise, the site demonstrates adherence to best practices such as HTTPS enforcement and security headers. However, the absence of publicly available WHOIS data limits domain trust verification. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present with consent mechanisms, reflecting basic GDPR compliance. Overall, the website is a legitimate, well-maintained cultural institution portal with moderate technical sophistication and a solid security foundation. Strategic improvements could include publishing explicit security policies, incident response contacts, and enhancing accessibility features to further strengthen trust and compliance.

N

Nationalpark Thayatal

np-thayatal.at

52

Nationalpark Thayatal is a government-managed national park in Austria focused on preserving one of the last natural valley landscapes in Central Europe. The website provides comprehensive information about the park's biodiversity, educational programs, visitor services, and events. The digital infrastructure uses modern web technologies and privacy-conscious analytics (Matomo with cookies disabled). However, the absence of WHOIS data limits domain trust verification. The site lacks explicit cookie consent mechanisms and security policy disclosures, which could be improved to enhance compliance and user trust.

K

Kreativní Praha, z. ú.

poznejvltavu.cz

52

Poznej Vltavu is a cultural festival organized by Kreativní Praha, a non-profit entity focused on celebrating the Vltava river through family-friendly events, workshops, and entertainment in Prague. The website serves as an information hub for the festival, providing event details, maps, partner information, and updates. The organization has established partnerships with local government and cultural institutions, enhancing its credibility and community reach. The website is well-branded, consistent, and targets a broad audience including families and cultural enthusiasts. Technically, the website uses modern JavaScript libraries such as Leaflet for interactive maps and Swiper for carousels, hosted on WEDOS servers. It employs Google Tag Manager for analytics with a privacy-conscious default denying tracking until consent is given. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and explicit security policies. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Cookie consent mechanisms and GDPR policy pages indicate good privacy compliance. However, there is no explicit incident response or security policy documentation, which could be enhanced. Overall, the site is trustworthy, safe, and professionally maintained. The risk assessment is low, with recommendations focusing on improving security headers, adding incident response contacts, and enhancing accessibility. The domain is newly registered but consistent with the event timeline, and WHOIS data aligns with the website's claims, supporting legitimacy.

M

Moudrá Sovička z.s.

moudrasovicka.cz

40

Moudrá Sovička z.s. is a small Czech non-profit organization focused on providing assistance with the initial setup of computers, tablets, and phones. The website serves as an informational and service platform targeting individuals who need help with technology setup. The organization maintains a modest but professional online presence, including a Facebook page and clear contact information. The business model revolves around educational and technical support services, positioning itself as a niche local service provider in the Czech Republic. Technically, the website is built on WordPress using the Radiate theme and employs standard web technologies such as PHP, JavaScript, and CSS. It includes a cookie consent mechanism compliant with GDPR, indicating a reasonable level of digital maturity and privacy awareness. Performance and mobile optimization are adequate, with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and includes common security headers, contributing to a good security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a security.txt file and explicit incident response contacts suggests room for improvement in security transparency and incident readiness. Overall, the website presents a low-risk profile with a solid foundation for a small non-profit. The lack of WHOIS data reduces trust slightly but does not outweigh the positive indicators from the website content and technical setup. Strategic recommendations include enhancing security disclosures, maintaining up-to-date software, and improving transparency around incident response.

M

Městská knihovna Poděbrady

knihovna-pdy.cz

57

Městská knihovna Poděbrady is a municipal public library serving the community of Poděbrady, Czech Republic. The website provides comprehensive information about library services including book lending, e-books, audiobooks, events, and community engagement activities. It targets a broad audience including children, seniors, and local residents, positioning itself as a key educational and cultural institution in the region. The business model is non-profit and focused on public service and education. Technically, the website is built on the Vismo CMS platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, and Vue.js. It integrates Google services including reCAPTCHA v3 for form security, Google Translate for multilingual support, and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and performs moderately well, with good SEO and navigation clarity. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and there is no published security policy or incident response information. No vulnerabilities or exposed sensitive data were found in the content. Privacy and cookie policies are present and indicate GDPR compliance, with a consent mechanism implemented. Overall, the website is trustworthy, professional, and safe for general audiences. The main limitation is the absence of WHOIS data, which restricts domain registration transparency and trust analysis. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to improve security posture and trustworthiness.

H

Heidelberg Materials

heidelbergcement.com

77

Heidelberg Materials is a global leader in the building materials industry, specializing in cement, aggregates, ready-mixed concrete, and asphalt. The company operates in approximately 50 countries and emphasizes sustainability, digital innovation, and business transformation to maintain its market leadership. The website reflects a mature digital presence with comprehensive corporate, investor, sustainability, and career information. Technically, the site is built on Drupal 11 with modern frontend technologies and includes analytics and cookie consent mechanisms. Security posture is strong with HTTPS and bot management cookies, though explicit security headers and incident response contacts are not clearly published. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional site content and branding. Overall, the site is well-designed, accessible, and trustworthy, targeting industry professionals, investors, and job seekers.

W

World Standards Day

worldstandardsday.org

54

World Standards Day is an annual global event promoting awareness of the importance of international standardization to foster sustainable development and global partnerships. The website serves as an informational and advocacy platform supported by major standards organizations IEC, ISO, and ITU. It provides resources, event details, and community engagement opportunities to a broad international audience interested in standards and sustainable development goals. Technically, the site uses modern web technologies including a CMS (Jahia), Google Fonts, Usercentrics for cookie consent, and Vimeo for video content, ensuring a responsive and accessible user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response contacts are missing. Overall, the site is trustworthy, professionally maintained, and aligned with its mission, though WHOIS data is privacy protected and unavailable for detailed domain registration analysis.

N

NET4GAS, s.r.o.

net4gas.cz

67

NET4GAS, s.r.o. operates as the exclusive operator of the natural gas transmission system in the Czech Republic, managing over 4,000 km of pipeline infrastructure. The company provides reliable, safe, and economically efficient gas transportation services year-round, playing a key role in integrating Central European energy markets and supporting the transition to a low-carbon economy. The website reflects a professional and business-focused presence with comprehensive information for customers, investors, and partners. Technically, the site uses established web technologies such as jQuery and Bootstrap, hosted on a CMS platform (WebJET CMS), and is mobile optimized with good navigation and content quality. Security-wise, the site implements cookie consent mechanisms and GDPR compliance but lacks visible advanced security headers or explicit security policies. The absence of WHOIS data limits full domain legitimacy verification, though the website content and contact details support a credible business identity. Overall, the site is well-structured and trustworthy for its intended audience but could improve transparency and security posture.

C

Coweo Technologies s.r.o.

jenfirmy.cz

62

Coweo Technologies s.r.o. operates JenFirmy.cz, the second largest job and company review portal in the Czech Republic, specializing in employee reviews, job listings, and recruitment advertising services. The company has been active since 2007 and targets job seekers and employers within the Czech market. The website demonstrates a professional and consistent brand presence with comprehensive content and strong social media integration. Technically, the website employs modern web technologies including React, Google Tag Manager, and Sentry for error tracking, hosted likely behind Cloudflare infrastructure. The site is mobile-optimized, fast-loading, and accessible, with good SEO practices and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and uses security headers effectively. However, it lacks a publicly available security policy and incident response contact details, which are recommended for enhanced transparency and trust. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is safe, professional, and trustworthy for general audiences. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the site's operational legitimacy. Strategic improvements include publishing security policies and incident response information to strengthen security posture and user confidence.

Svazek obcí mikroregionu Zábřežsko is a local government association focused on supporting the development of municipal self-governance and enhancing the economic, social, and cultural life of the Zábřežsko microregion in the Czech Republic. The website serves as an information portal for residents and local officials, providing access to documents, event announcements, and contact information. The organization positions itself as a community-centric entity facilitating regional cooperation and development. Technically, the website employs basic web technologies including HTML, CSS, JavaScript, and an older version of jQuery (1.3.2). Google Analytics is integrated for visitor tracking. The site shows moderate performance and basic mobile optimization but lacks modern frameworks or CMS indications. Accessibility and SEO optimizations are basic, with room for improvement. From a security perspective, the site uses HTTPS (implied by external scripts loaded over HTTPS), but no security headers were detected in the provided data. The use of an outdated jQuery version presents a potential vulnerability. There is no visible privacy or cookie policy, which raises compliance concerns, especially under GDPR. WHOIS data is missing, which limits domain legitimacy verification and reduces trustworthiness. Overall, the website is functional and serves its purpose for the local government audience but requires improvements in security, privacy compliance, and technical modernization to enhance trust and resilience against threats.

Q

QCM s.r.o.

vhodne-uverejneni.cz

55

Portál pro vhodné uveřejnění is a certified electronic tool operated by QCM s.r.o., serving as the largest public procurement portal in the Czech Republic. It provides a comprehensive platform for publishing and managing public contracts, targeting both contracting authorities and suppliers. The portal supports legal compliance with Czech procurement laws and offers additional services such as electronic forms and training. The website demonstrates a professional and consistent brand presence with clear contact information and active content updates.

M

Ministerstvo práce a sociálních věcí

esfcr.cz

68

The website www.esfcr.cz is the official portal for the European Social Fund (ESF) in the Czech Republic, managed by the Ministry of Labour and Social Affairs. It provides comprehensive information about the Operational Program Employment Plus (OPZ+) and related EU-funded social and employment initiatives. The portal serves a broad audience including public sector entities, applicants, recipients, and the general public interested in social development programs. The site is well-structured with clear navigation, multi-level menus, and a search function, offering access to program documents, calls for proposals, news, and evaluation reports. Technically, the site is built on the Liferay CMS platform, utilizing JavaScript libraries such as jQuery, Highcharts, and Bootstrap for UI and data visualization. It employs HTTPS with good SSL configuration but lacks visible security headers, which is a potential area for improvement. Google Analytics and Google Tag Manager are used for analytics with conditional user ID tracking for logged-in users. The site is mobile-optimized and has basic accessibility features. From a security and compliance perspective, the site does not display a cookie consent mechanism, which is a compliance gap under EU regulations. Privacy policy information is present and appears GDPR compliant. No WHOIS data was available, which limits domain legitimacy verification and slightly reduces trust. No contact emails or phone numbers were explicitly found on the homepage, and no vulnerability disclosure or incident response information is provided. Overall, the website is a professional and authoritative government portal with good content quality and business credibility. However, improvements in security headers, cookie consent, and transparency in contact and security policies would enhance its security posture and compliance standing.

K

KS

ks.no

66

KS is a prominent Norwegian membership organization representing all municipalities and county municipalities in Norway. It focuses on advocating for an efficient and independent municipal sector that meets the needs of residents. The website reflects a well-established organization with a clear market position as the leading voice for the Norwegian municipal sector, offering services such as legal advice, research, statistics, training, and digital tools. The target audience primarily includes municipal officials and public sector stakeholders in Norway. Technically, the website employs a modern technology stack including various analytics and tracking tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Azure Application Insights. The site is well-structured, mobile-optimized, and accessible, with good SEO practices and professional design. However, it lacks some privacy compliance features such as a cookie consent mechanism and visible security policies. From a security perspective, the site uses HTTPS with excellent SSL configuration and no visible vulnerabilities or exposed sensitive data. The absence of security headers and incident response information are areas for improvement. The WHOIS data is not publicly available, likely due to privacy protection, but the website content and contact information strongly support legitimacy and trustworthiness. Overall, KS's website demonstrates a strong business and technical foundation with minor gaps in privacy compliance and security transparency. Strategic improvements in these areas would enhance trust and regulatory adherence.

L

LightWidget

lightwidget.com

61

LightWidget is a specialized technology company offering responsive Instagram widgets for embedding Instagram feeds on websites, blogs, and online stores. Founded in 2016, it serves a niche market of website owners and businesses seeking customizable Instagram feed solutions. The company operates a SaaS business model with free and paid add-ons, maintaining a strong market position supported by positive user ratings and a clean, ad-free product offering. Technically, the website is well-built using modern web standards, hosted via Cloudflare CDN, and optimized for performance and mobile responsiveness. The use of the official Instagram Graph API enhances service reliability and trust. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though improvements such as enabling DNSSEC and publishing security policies could enhance trust further. Privacy compliance is good with clear privacy and cookie policies, though no explicit consent mechanism for cookies is present. Overall, the website is professional, trustworthy, and well-maintained, with a high AI score reflecting strong content quality, technical implementation, and business credibility.

The website at https://mgaru.dev/lander is minimalistic and primarily serves as a placeholder or landing page with no substantive business content, contact information, or policies. It uses modern JavaScript technologies such as React and is hosted behind Cloudflare, with Google Adsense and Cloudflare Insights scripts included. The lack of privacy, cookie, or terms of service policies, combined with no visible contact or business information, results in a low trust and credibility profile. Security posture is basic with no detected security headers or advanced protections visible in the provided data. Overall, the site appears to be either under development or a parked domain with limited business activity or user engagement.

E

European Unified ID

euid.eu

63

European Unified ID (EUID) is an open-source identity solution designed for the European digital advertising ecosystem. It leverages encrypted email and phone number data to provide a privacy-conscious, secure, and accurate identity standard. The website positions itself as a key player enabling personalization, targeting, and measurement for advertisers, publishers, DSPs, and data providers. The presence of major partners such as Adobe, Google, and Salesforce underscores its industry relevance and collaborative approach. Technically, the site is built using modern frameworks like Docusaurus and integrates tools such as Algolia for search and Google Tag Manager for analytics, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security policies or incident response information, which could be improved to enhance trust and compliance. Overall, the website is professional and well-structured, though it would benefit from publishing comprehensive privacy and terms of service documents to strengthen privacy compliance and user trust.

P

Page Builder s.r.o.

pobo.cz

51

Pobo.cz is a Czech-based SaaS company, Page Builder s.r.o., offering an advanced drag & drop page builder tool integrated with AI and A/B testing capabilities aimed at e-commerce businesses. The platform enables rapid creation of product descriptions, category pages, and blog content optimized for SEO and sales conversion. With over 1200 active e-shops using their service and strong client testimonials, Pobo holds a solid position in the Czech e-commerce technology market. Technically, the website employs modern JavaScript frameworks and integrates Google Tag Manager, Google Optimize, and Freshchat for analytics and customer engagement. Hosting is provided by VasHosting.cz, and the site is well-optimized for mobile devices with good SEO practices. However, some security best practices such as security headers and cookie consent mechanisms are missing. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of WHOIS data limits domain trust assessment, though the website content and business information appear professional and credible. Overall, Pobo.cz presents a trustworthy and professional e-commerce tool provider with room for improvement in security transparency and privacy compliance. Strategic enhancements in these areas would strengthen their market credibility and user trust.

Č

Česká spořitelna, a.s.

investicnicentrum.cz

66

The website 'Investiční centrum' is operated by Česká spořitelna, a.s., a leading Czech bank, providing comprehensive investment information, market data, and financial products. It serves investors and clients seeking detailed insights into stocks, bonds, funds, ETFs, and market trends. The site is well-branded, professionally designed, and offers extensive educational and research content, positioning it as a trusted financial resource in the Czech Republic. Technically, the site uses modern web technologies including GEM CMS, JavaScript frameworks, and integrates Google Tag Manager and Evergage for analytics and marketing. It is optimized for desktop and mobile with good performance and accessibility features. Security is robust with HTTPS enforced and standard security headers present, though explicit security policies and incident response details are not published. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Contact information is transparent with official company emails and phone numbers. The lack of WHOIS data is likely due to privacy protection but does not detract from the site's legitimacy given the strong brand and content. Overall, the site presents a low-risk profile with high trustworthiness and professionalism, suitable for its financial services audience.

F

Foxentry

foxentry.cz

61

Foxentry is a Czech-based technology company specializing in intelligent data validation and correction services aimed primarily at e-commerce businesses, CRM systems, and logistics providers. Their platform offers a suite of services including address autocompletion, email and phone number validation, company data enrichment, and AI-driven data cleansing. The company positions itself as a market leader in the Czech Republic with a strong client base including reputable brands. The website is professionally designed, mobile-optimized, and integrates modern analytics and marketing tools, facilitating easy deployment via Google Tag Manager and popular e-commerce platforms.

R

RybaNaTalíř.cz

rybanatalir.cz

50

RybaNaTalíř.cz is a Czech content website dedicated to promoting freshwater fish consumption through recipes, health articles, and a finder for local fishermen. The site targets Czech-speaking consumers interested in cooking and nutrition. Technically, it uses modern web technologies including JavaScript libraries like Slick Carousel and CookieYes for cookie consent management, and is hosted by REG-ZONER. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit privacy policies, terms of service, and security headers, which are areas for improvement. No contact information or incident response details are provided, limiting direct communication channels. Overall, the site is legitimate and consistent with its domain registration data, but could enhance trust and compliance by adding missing policies and security best practices.

T

Turistické informační centrum Český Těšín

ic-tesin.cz

47

Turistické informační centrum Český Těšín operates as a local government-affiliated tourist information center serving visitors to Český Těšín and the surrounding Moravian-Silesian region. The website provides comprehensive information on tourism, cultural events, accommodation, and local businesses, positioning itself as the official source for regional visitor information. The target audience primarily includes tourists and local visitors seeking event calendars, historical insights, and practical travel information. The business model is public service funded by regional government budgets, emphasizing accessibility and community engagement. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google Translate for multilingual support, enhancing accessibility for non-Czech speakers. The site demonstrates moderate performance and basic mobile optimization, with a clear navigation structure and consistent branding. However, there is room for improvement in accessibility and SEO optimization to better serve diverse user needs. From a security perspective, the website uses HTTPS, ensuring encrypted communication, but lacks visible advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected, indicating a reasonable security posture for a public information site. Privacy compliance is basic, with privacy and cookie policies present but no active consent mechanism. Contact information is clearly displayed, enhancing trust and transparency. Overall, the website is a trustworthy and professional digital presence for a local government tourist center. Strategic recommendations include enhancing security headers, implementing cookie consent mechanisms, and improving accessibility and SEO to elevate user experience and compliance. These steps will strengthen the site's security posture and regulatory adherence while maintaining its role as a reliable regional information hub.

K

Kooperationsprogramm Freistaat Sachsen – Tschechische Republik

sn-cz2020.eu

55

The website www.sn-cz2020.eu serves as an informational portal for the EU-funded cooperation program between the Free State of Saxony and the Czech Republic for the 2014-2020 funding period. It primarily targets public sector entities and project partners involved in cross-border collaboration. The site provides program details, project listings, and links to successor programs. Technically, the site uses standard JavaScript libraries including Piwik for analytics and Modernizr for feature detection, with a custom or unknown CMS. The site is moderately optimized for performance and accessibility but lacks advanced mobile responsiveness and SEO features. Security posture is moderate with no explicit HTTPS or security headers detected in the provided data, and no cookie consent mechanism is present, indicating room for improvement in privacy compliance. The domain registration aligns well with the program's governmental nature and regional focus, supporting high legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy features.

The website www.mssf.cz serves as an official government portal for the Czech Republic's Ministry of Regional Development, providing monitoring and administrative systems for European structural funds across multiple programming periods (2007-2013, 2014-2020, and 2021-2027). It targets applicants, project managers, and government officials involved in the management and evaluation of EU-funded projects. The platform offers various portals for application submission, project administration, and data analysis, reflecting a comprehensive service model for structural fund management. Technically, the website is built with standard HTML, CSS, and JavaScript, featuring a clean and consistent design optimized for desktop and mobile devices. The site links to multiple subdomains hosting specialized portals but does not reveal use of advanced frameworks or CMS platforms in the provided content. Performance and accessibility are moderate to good, though SEO and technical metadata could be improved. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS (implied by domain and typical government standards), but no explicit security headers or policies were found in the provided data. The absence of privacy and cookie policies suggests room for improvement in compliance with GDPR and related regulations. WHOIS data is unavailable, likely due to privacy protection or registry policies, but the domain and content strongly indicate legitimacy as a government entity. Contact information is provided with official addresses and phone numbers, but no email contacts or incident response details are present. Overall, the website is a trustworthy government resource with good content quality and business credibility but would benefit from enhanced security headers, privacy compliance documentation, and WHOIS transparency to improve trust and compliance posture.

A

Amt der Niederösterreichischen Landesregierung

at-cz.eu

57

Interreg AT-CZ is an official cross-border cooperation program between Austria and the Czech Republic, managed by the Amt der Niederösterreichischen Landesregierung. The program supports projects in research, innovation, environment, education, culture, tourism, and cross-border governance. The website is professionally designed with good content quality and clear navigation, targeting public institutions, SMEs, and research organizations in the border regions. Technically, the site uses modern web standards with JavaScript and CSS, including a slider library, and enforces HTTPS with basic form validation. Security posture is solid but could be improved by adding security headers and explicit incident response policies. Privacy compliance is well addressed with GDPR and cookie consent mechanisms. The domain WHOIS data is privacy protected, typical for .eu domains, and the website content strongly supports legitimacy. Overall, the site is trustworthy, professional, and serves its governmental and non-profit mission effectively.

The website www.cz-pl.eu serves as the official portal for the Interreg Czechia – Poland cross-border cooperation program, facilitating project funding, information dissemination, and stakeholder engagement between Czech and Polish border regions. The program focuses on environmental protection, transportation development, SME growth, and strengthening cross-border community ties. The site is professionally designed with consistent branding and clear navigation, targeting applicants, project recipients, and governmental/non-profit entities involved in regional cooperation. Technically, the website employs modern web technologies including JavaScript, CSS, Google Fonts, and Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well, though accessibility features could be improved. No CMS or hosting provider details are explicitly detected. Security posture is good with HTTPS enabled and no exposed sensitive data, but lacks visible security headers and formal privacy/cookie policies. Security-wise, the site shows no signs of vulnerabilities or malicious content. However, the absence of privacy and cookie policies, as well as lack of incident response or vulnerability disclosure information, indicates room for compliance and transparency improvements. WHOIS data is unavailable due to EURid privacy restrictions, but the domain and content appear legitimate and consistent with an official government-backed program. Overall, the website is trustworthy, professional, and serves its informational and administrative purpose well. Strategic improvements in privacy compliance, security headers, and accessibility would enhance its security posture and user trust.

Č

Česká komora architektů

ceskacenazaarchitekturu.cz

44

The website ceskacenazaarchitekturu.cz serves as the official portal for the Czech Architecture Award 2025, organized by the Czech Chamber of Architects. It showcases the best architectural realizations built in the Czech Republic over the last five years, providing information about the competition, timelines, nominees, and public voting. The site targets architects, industry professionals, and the general public interested in architecture within the Czech Republic. The business model is non-profit and focused on promoting architectural excellence and public engagement through exhibitions and awards. Technically, the website is built using modern JavaScript frameworks such as Vue.js and Nuxt.js, hosted on DigitalOcean, and integrates Google Analytics and Google Tag Manager for visitor tracking. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with preloading of scripts and responsive design elements. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, no explicit security headers were detected, and there is a lack of visible privacy and cookie policies, which are important for GDPR compliance. No vulnerability disclosures or incident response contacts are provided, indicating room for improvement in security transparency and user trust. Overall, the website is professional and trustworthy, with consistent branding and relevant content. The domain registration data aligns well with the business purpose and history, supporting legitimacy. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, enhancing accessibility, and publishing vulnerability disclosure and incident response information to strengthen security posture and compliance.

S

S Pro Alfa

sproalfa.cz

55

S Pro Alfa is a Czech Republic based media services company specializing in video editing, audio processing, dubbing, subtitling, and related post-production services. Established since 1994, the company has a strong market presence supported by a long-standing domain registration since 1997 and a professional team. Their client portfolio includes reputable media and advertising companies, indicating a solid market position. The website reflects their expertise with multimedia content such as showreels and virtual tours, targeting media professionals and broadcasters. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript with jQuery 1.9.1, and GSAP for animations. Hosting appears to be with Forpsi based on nameservers. The site has moderate performance and basic mobile optimization but lacks advanced accessibility and SEO features. No CMS or advanced frameworks are detected. From a security perspective, the site lacks visible security headers and uses an outdated jQuery version, which may pose vulnerabilities. There is no evidence of HTTPS enforcement or privacy and cookie policies, indicating compliance gaps. No forms or data collection mechanisms are present, reducing risk exposure. The WHOIS data is consistent with the business claims, showing a legitimate and established domain. Overall, the website is professional and trustworthy but requires improvements in security posture and privacy compliance to meet modern standards. Strategic enhancements in updating libraries, implementing security headers, and publishing privacy policies are recommended to strengthen trust and compliance.

G

GLS

gls-group.com

69

GLS is a well-established parcel delivery and logistics company operating primarily in Europe with an international presence. The website reflects a professional and consistent brand image, targeting both general consumers and businesses requiring parcel shipping services. The technical infrastructure includes modern JavaScript usage and cookie consent mechanisms, hosted likely by Deutsche Telekom AG, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is strong with GDPR-aligned cookie consent and privacy policy. Overall, the website is trustworthy and professionally maintained, though improvements in security transparency and DNS security are recommended.

V

Vítězslav Válka

vitavalka.cz

37

Vítězslav Válka is a seasoned UI/UX designer and web developer based in the Czech Republic, offering specialized design services including corporate applications, web design, and consulting with over 20 years of experience. The website positions him as a reliable and professional service provider with a strong portfolio and client testimonials, targeting businesses and professionals seeking high-quality design solutions. Technically, the site is built on WordPress, uses modern web technologies, and is hosted by Wedos, with good performance and mobile optimization. Security posture is adequate with HTTPS enabled and secure form handling, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the domain registration is consistent with the business claims, and no suspicious patterns were detected, indicating a trustworthy online presence.

S

Slab

quilljs.com

59

Quill is a mature, open source rich text editor project founded in 2014 and maintained by Slab. It targets developers and businesses needing a customizable WYSIWYG editor with a modular architecture and expressive API. The website demonstrates a professional and modern design, leveraging Next.js and various JavaScript libraries to deliver a fast, accessible, and mobile-optimized experience. The project enjoys strong market presence and trust, evidenced by its large GitHub community and adoption by major companies such as LinkedIn, Figma, and Calendly. Security posture is solid with HTTPS and domain transfer protections, though it lacks explicit security policies and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Overall, the site is trustworthy and technically sound but could improve transparency and compliance documentation.

The website www.novehute.cz represents a small regional ski resort called Lyžařský Areál Nové Hutě located in the Czech Republic's Šumava region. It offers family-friendly skiing services including ski lifts, ski school, rental, and cross-country skiing trails. The site is integrated with partner ski areas such as Zadov, enhancing its market position within the regional winter sports tourism sector. The business model focuses on seasonal tourism and recreational services targeting families, beginners, and intermediate skiers. Technically, the website uses legacy HTML with CSS and JavaScript libraries such as jQuery, VisualLightBox, and FancyBox. It includes Google Analytics and Tag Manager for user tracking and a cookie consent mechanism, indicating some level of privacy awareness. However, the site shows signs of outdated technology (IE8 compatibility mode) and lacks modern security headers or HTTPS enforcement visible in the HTML content, which may impact user trust and security. From a security perspective, the absence of WHOIS data raises concerns about domain registration transparency. No privacy policy or terms of service are present, and security headers are missing. While cookie consent is implemented, GDPR compliance is not clearly documented. The site does not appear to be blocked by any WAF or security challenge, and no critical vulnerabilities were detected in the content. Overall, the security posture is moderate but could be significantly improved with modern best practices. The overall risk assessment suggests the site is operational and legitimate but would benefit from enhanced security measures, transparent privacy documentation, and updated technical infrastructure to improve trust and compliance. Strategic recommendations include implementing HTTPS with HSTS, adding security headers, publishing privacy and security policies, and modernizing the website technology stack.

Z

Sport Šumava | Půjčovna, servis, biková škola

zadov.cz

57

The website www.sportsumava.cz appears to be a sports or outdoor activity related site hosted on the Wix platform. The site uses Wix's Thunderbolt framework and includes third-party tracking scripts such as Facebook Pixel and Smartlook for analytics and user behavior tracking. However, the site lacks visible business information, contact details, and privacy or cookie policies, which limits its transparency and trustworthiness. The WHOIS data is unavailable, suggesting privacy protection or domain registration issues, which further impacts the legitimacy assessment. Technically, the site is moderately optimized for mobile devices but lacks important security headers and comprehensive privacy compliance features. Overall, the site presents a basic digital presence with significant room for improvement in security, privacy, and business credibility.

C

CZECH NEWS CENTER a.s.

mimibazar.cz

48

Mimibazar.cz is a Czech online marketplace and community platform primarily targeting mothers and families. Operated by CZECH NEWS CENTER a.s., it offers a broad range of services including classifieds for new and used goods, product testing, contests, recipes, discussion forums, and blog content. The platform is well-established in the Czech market and serves as a trusted hub for buying, selling, and community engagement among its target audience. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and consent management tools to ensure a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and consent mechanisms in place, though some security headers could be enhanced and broken image links fixed. The absence of WHOIS data suggests privacy protection, which is common for commercial sites, but the presence of multiple trust indicators and a reputable parent company supports legitimacy. Overall, Mimibazar.cz demonstrates a mature digital presence with good content quality, privacy compliance, and business credibility.

Č

Český olympijský tým

olympijskytym.cz

54

The website 'Český olympijský tým' serves as the official online presence for the Czech Olympic team, providing comprehensive information about Olympic games history, athlete profiles, educational projects, and related sports initiatives. It targets Czech sports enthusiasts, athletes, educators, and youth, positioning itself as an authoritative source for Olympic-related content in the Czech Republic. The site offers key services including news updates, educational materials, video content, and promotion of Olympic values and events. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and integrates popular analytics and tracking tools including Google Analytics, Facebook Pixel, and Hotjar. It demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. The site uses asynchronous script loading and font loading optimizations to enhance performance. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes essential security headers like Content-Security-Policy and Strict-Transport-Security. No vulnerabilities or exposed sensitive data were detected in the analyzed content. However, the absence of visible privacy and cookie policies, as well as lack of explicit contact information for security incidents, indicates areas for improvement in compliance and transparency. Overall, the website presents a low-risk profile with strong branding and professional content. Strategic recommendations include implementing clear privacy and cookie policies, publishing vulnerability disclosure information, and providing explicit contact channels for security and privacy concerns to enhance trust and compliance.

R

RENOMIA EUROPEAN PARTNERS

renomiaeuropeanpartners.com

57

RENOMIA EUROPEAN PARTNERS is a large, professional network specializing in risk management and insurance brokerage services across 29 countries, primarily in Central and Eastern Europe, Central Asia, and Caucasia. The company offers comprehensive insurance solutions including property & casualty, employee benefits, and reinsurance, supported by a multilingual team of 2800 professionals and 81 offices. Their market position is strong as an independent broker network with extensive regional coverage and international program expertise. Technically, the website is built on a modern CMS platform (Solidpixels), uses Google Fonts, Google Tag Manager, and CookieScript for consent management. The site is mobile-optimized, accessible, and SEO-friendly with good performance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not evident. The WHOIS data is missing or unavailable, which reduces domain trustworthiness and warrants further verification. However, the website content, contact information, and social media presence indicate a legitimate and professional business. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the website presents a trustworthy and professional front for RENOMIA EUROPEAN PARTNERS, but the lack of WHOIS transparency and explicit security policies suggest areas for improvement in trust and compliance documentation.

C

Client Zone

client-zone.eu

63

Client Zone is a technology platform providing a secure login portal for its users, leveraging the Keycloak authentication framework and styled with the PatternFly CSS library. The website is designed primarily for client access and authentication, with minimal public-facing content. The technical infrastructure indicates a modern approach to user authentication but lacks visible security headers and privacy policies on the login page. The absence of WHOIS data due to EURid privacy restrictions limits domain trust analysis, but the domain appears legitimate and consistent with a business portal. Security posture is moderate with room for improvement in headers and compliance documentation. Overall, the site is functional but basic in content and security transparency.

S

SINGLE QUEEN s.r.o.

kinotip2.cz

58

KINOTIP2.cz is a Czech-language online media portal specializing in news and updates from the world of films and television series. Operated by SINGLE QUEEN s.r.o., the site targets Czech-speaking audiences interested in entertainment news, celebrity updates, quizzes, and streaming service information. The business model primarily relies on advertising revenue, leveraging multiple ad networks and tracking technologies. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and ad platforms to deliver content and monetize traffic. The site is accessible over HTTPS with no detected WAF or blocking mechanisms, indicating good availability and basic security hygiene. However, the absence of WHOIS data and lack of explicit privacy and cookie policies represent compliance and trust gaps. No direct company contact details or security incident response information are provided, which could impact user trust and regulatory compliance. Overall, the site presents professional content and a consistent brand but would benefit from enhanced transparency and security practices.