Security Directory

C

CAZER s.r.o.

cazer.cz

57

CAZER s.r.o. is a Czech Republic-based company specializing in industrial automation, custom machinery, and robotization since 1992. The company positions itself as a leading provider of tailored production technologies and services including design, manufacturing, servicing, and training. Their target audience includes industrial manufacturers seeking automation and precision mechanical solutions. The website reflects a medium-sized enterprise with a professional online presence, clear contact information, and active social media engagement. Technically, the website employs modern web technologies, is mobile optimized, and includes cookie consent mechanisms indicating GDPR awareness. Security posture is good with HTTPS enforced, though security headers could be improved. No WHOIS data was found, which slightly impacts trust but the website content and contact details support legitimacy. Overall, the site is well-structured, professional, and safe for general audiences.

The website www.podlahyalfa.cz operates as a Czech Republic-based e-commerce platform specializing in the sale of flooring materials including vinyl, laminate, PVC, carpets, and related installation services. The site targets both consumers and businesses seeking flooring solutions, positioning itself as a niche retailer within the flooring market. The business model is primarily retail with an added service component for installation, catering to a local or regional audience. The website content is well-organized with detailed product categories and subcategories, supporting a good user experience and navigation clarity. Technically, the website leverages modern web technologies including Google Analytics, Google Tag Manager, and a platform provided by ByznysWeb.cz. The site is served over HTTPS with a good SSL configuration and implements a cookie consent mechanism that blocks scripts until user consent is given, indicating a basic level of privacy compliance. However, the absence of a published privacy policy and terms of service pages represents a compliance gap. The site shows moderate performance and good mobile optimization but could improve accessibility features and security headers. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and consent-based script loading. No critical vulnerabilities or exposed sensitive data were detected. However, the lack of additional security headers and absence of a security.txt or vulnerability disclosure policy suggest room for improvement in security posture. The WHOIS data for the domain is unavailable, likely due to privacy protection, which slightly reduces trust but is common for small e-commerce businesses. Overall, the website presents as a legitimate small business e-commerce site with a good user experience and moderate security posture. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, adding a vulnerability disclosure mechanism, and improving accessibility compliance to strengthen trust and compliance.

A

Altic Point s.r.o.

altic.cz

59

Altic Point s.r.o. is a small Czech manufacturing company specializing in professional shelving and storage systems for industrial, commercial, and service sectors. Their offerings include industrial shelving, archival and office shelving, warehouse mezzanines, and automated pallet storage solutions, complemented by expert installation services. The company targets businesses requiring reliable and customized storage solutions, emphasizing quality, safety, and space optimization. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and responsive design techniques ensuring good performance and accessibility across devices. The presence of cookie consent mechanisms and privacy policies indicates awareness of GDPR compliance. However, the absence of a robust Content-Security-Policy and explicit security or incident response policies suggests areas for improvement in security posture. Security-wise, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. Tracking scripts from Google and Seznam are used responsibly with user consent. The lack of WHOIS data reduces domain trustworthiness slightly, but the website's professional content and contact information support legitimacy. Overall, the site demonstrates a solid security baseline but would benefit from enhanced security headers and published security policies. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include implementing a strict Content-Security-Policy, publishing security and incident response information, and maintaining regular audits of third-party scripts. These steps will enhance trust and security culture, supporting long-term business credibility and compliance.

Z

ZDV Fryšták

zdv.cz

60

ZDV Fryšták is a progressive agricultural cooperative based in the Czech Republic, specializing in agricultural production, repair of heat exchangers and auto aggregates, retail food sales, and fuel station services. The company targets local agricultural businesses and consumers, offering diversified services including employment opportunities in agriculture and mechanics. The website reflects a regional market position with a medium-sized business profile. Technically, the site is built on the Webnode CMS platform, leveraging Cloudfront CDN for content delivery and Google Analytics for user tracking with IP anonymization enabled. The website is accessible, uses HTTPS, but lacks advanced security headers and privacy policies, indicating room for improvement in compliance and security posture. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional with basic mobile optimization and SEO, suitable for its business scope.

V

Vinařství Herůfek

vinarstviherufek.cz

58

Vinařství Herůfek is a modern winery based in Zaječí, Czech Republic, offering a range of services including wine production, an e-shop for direct sales, accommodation, wine tastings, and corporate wine gifts. The website targets wine consumers, tourists, and corporate clients seeking quality wine and hospitality experiences. The business operates in the hospitality and retail sectors with a small company size and a regional market position. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and cookie consent scripts, with a responsive design optimized for mobile devices. Performance is moderate, and SEO practices are good. However, no CMS or hosting provider information was detected. The site enforces HTTPS and includes an age verification modal to comply with alcohol sales regulations. From a security perspective, the site has a good SSL configuration and cookie consent mechanisms but lacks visible security headers and explicit incident response or security policies. No WHOIS data was available, which reduces transparency and trustworthiness. Social media presence and professional design contribute positively to the site's credibility. Overall, the website is functional, professional, and compliant with basic privacy and age verification requirements but would benefit from enhanced security headers, visible contact information, and WHOIS transparency to improve trust and security posture.

I

Train Line – Mezinárodní a vnitrostátní kamionová přeprava

itrain.cz

59

The website itrain.cz represents a newly established Czech transportation service specializing in international and domestic truck freight. The domain was registered in early 2024, consistent with a startup or new business venture. The site is built on WordPress using the Bold Page Builder plugin, indicating a modern but basic technical infrastructure. The website design is professional and mobile-optimized, providing a good user experience with clear navigation. However, the content is relatively basic and lacks comprehensive business and compliance information such as privacy policies or terms of service. Security posture is moderate with HTTPS enabled but missing important security headers and explicit security policies. Contact information is limited to a contact form without direct emails or phone numbers, which may impact user trust and business credibility. Overall, the site is functional and safe but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

O

OSIGENO s.r.o.

profilzadavatele-vz.cz

44

The website profilzadavatele-vz.cz serves as a certified electronic tool for public procurement tenders in the Czech Republic, operated by OSIGENO s.r.o. It provides a platform for public contracting authorities and suppliers to manage and access public tenders, with a focus on compliance with Czech procurement laws. The site targets government entities, suppliers, and the general public interested in public contracts. The business is positioned as a trusted provider of electronic tendering services with official certifications and audit compliance. Technically, the site uses legacy JavaScript libraries such as jQuery and CKEditor, with a custom CMS and basic mobile and accessibility features. Security posture is moderate, with password-protected login forms but lacking advanced security headers and cookie consent mechanisms. No blocking or WAF challenges were detected, and the domain is well established since 2011, consistent with the business history. Overall, the site is functional and trustworthy but could improve in security and privacy compliance aspects.

Pocitové mapy is a Czech-based service specializing in participatory mapping tools that engage citizens in providing feedback on their local environments. The company targets municipalities and urban planners, offering both online and offline data collection methods, GIS data analysis, and visualization services. The website is professionally designed, multilingual, and demonstrates established partnerships with recognized organizations, indicating a solid market presence in the government and non-profit sectors. Technically, the website is built on WordPress with common plugins such as WPML for multilingual support and Contact Form 7 for forms. The site is mobile-optimized and performs moderately well, though some security best practices like security headers are missing. HTTPS is enforced, ensuring secure communication. Security posture is generally good but could be improved by adding security headers and formal privacy and cookie policies. The absence of WHOIS data reduces domain trust slightly, but the professional content and business presence mitigate concerns. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website represents a trustworthy and professional service with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, and clarifying domain registration details to improve trustworthiness.

B

BrandCloud s.r.o.

brandcloud.pro

66

BrandCloud s.r.o. operates a sophisticated SaaS platform designed to streamline brand asset management for businesses globally. The platform offers comprehensive services including file management, content creation, sharing, user and team management, and version control, targeting marketing teams and brand managers. Positioned as a secure and compliant solution, BrandCloud emphasizes security standards suitable for banking and insurance sectors, enhancing its market credibility. Technically, the website leverages modern frameworks such as React and Next.js, delivering a responsive, accessible, and well-structured user experience. Security posture is strong with HTTPS enforcement, two-factor authentication, audit logging, and GDPR compliance, although public incident response and vulnerability disclosure information are absent. Overall, BrandCloud presents a professional, trustworthy, and technically mature digital presence with room for improvement in transparency around incident handling and vulnerability reporting.

D

DigiLabs Software, s.r.o.

digilabs.cz

56

DigiLabs Software, s.r.o. operates DigiLabs.cz, a Czech-based digital agency specializing in the development of modern websites, web applications, and e-commerce solutions. The company emphasizes strategic development and user experience improvements, targeting both companies and individual clients. Their service portfolio includes web design, custom application development, visual identity, content work, analytics, consulting, and maintenance services. The website presents a professional and consistent brand image with detailed contact information and client project showcases, positioning DigiLabs as an innovative and client-focused agency in the technology sector. Technically, the website employs modern JavaScript libraries such as GSAP and LightGallery, uses the Nette PHP framework, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, with secure HTTPS connections and validated contact forms. However, there is a lack of visible security headers and no published privacy or terms of service pages, which are areas for improvement. From a security perspective, the site demonstrates good practices with HTTPS and secure form handling but lacks explicit security policies and incident response information. The absence of WHOIS data limits domain registration trust insights, though the website's business information aligns with a legitimate Czech company. No suspicious or malicious content was detected, and the site is free from adult or questionable content. Overall, DigiLabs.cz is a well-constructed, professional digital agency website with strong business credibility and technical maturity. Strategic enhancements in privacy compliance, security transparency, and WHOIS data availability would further strengthen its trustworthiness and compliance posture.

M

Město Kyjov

mukyjov.cz

50

The website mukyjov.cz serves as a municipal portal for the city of Kyjov, Czech Republic, providing a centralized access point to various city-related services including webmail, cloud services, map servers, employee portals, legal information systems, and cadastral access. The site is modest in design and content, reflecting its role as a government gateway rather than a commercial or content-rich platform. The domain is well-established since 1999, reinforcing its legitimacy as an official municipal resource. From a technical perspective, the site uses basic HTML, CSS, and JavaScript without advanced frameworks or CMS platforms. The hosting is provided by REG-WEBGLOBE, a known registrar and hosting provider. The site includes a seasonal snowflake animation script but lacks modern SEO, accessibility, and mobile optimization features. No analytics or tracking scripts are present, indicating minimal user data collection. Security posture is basic with no detected security headers or explicit HTTPS enforcement visible in the provided data. There are no forms or data collection points, reducing attack surface but also limiting interactivity. The absence of privacy, cookie, and terms of service policies indicates non-compliance with GDPR and related regulations, which is a notable gap for a government site. Overall, the site is low risk in terms of content safety and security vulnerabilities but requires improvements in privacy compliance, security best practices, and user engagement features to enhance trust and regulatory adherence.

M

Martin Winkler

martinwinkler.cz

45

Martin Winkler is a seasoned freelance web developer based in Brno, Czech Republic, offering professional web design, responsive HTML coding, WordPress CMS development, and custom e-shop creation services. With 17 years of experience, the business emphasizes reliability, speed, and clarity in delivering client projects. The website showcases a comprehensive portfolio of completed projects and client references, positioning the company as a trusted local expert in web development services. Technically, the website is built on WordPress with modern web technologies including HTML5, CSS3, JavaScript, and SVG graphics. It integrates Google Analytics for visitor tracking and Google reCAPTCHA for form security. The site is well-optimized for mobile devices, fast loading, and includes a cookie consent mechanism compliant with GDPR principles, although no explicit privacy policy page was found. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements best practices such as automated backups and quarterly manual updates. However, explicit security headers are not detected, and no published security or incident response policies exist. The absence of WHOIS data limits domain registration transparency but does not detract from the professional presentation and trustworthiness of the business. Overall, the website demonstrates a high level of professionalism, technical maturity, and security awareness suitable for a small freelance business. Strategic improvements include publishing privacy and security policies, enhancing security headers, and improving transparency around domain registration to further strengthen trust and compliance.

M

m-ARK Marketing a reklama, s.r.o

m-ark.cz

44

m-ARK Marketing a reklama, s.r.o is a Czech Republic based marketing and advertising agency established since 1991. The company offers a range of services including brand marketing, creative design, photo and video production, and publishes travel-related magazines. The website reflects a professional and consistent brand image targeting businesses seeking marketing and creative services. The domain age and WHOIS data confirm a long-standing market presence, supporting business credibility. Technically, the website uses modern web technologies such as Google Fonts, Google reCAPTCHA for form security, and a responsive design with a slider component. However, no CMS or advanced frameworks are explicitly detected. Performance is moderate with basic SEO and accessibility features. The site lacks explicit security headers and privacy/cookie policies, which are important for compliance and user trust. From a security perspective, HTTPS is implied and Google reCAPTCHA is implemented, indicating some security awareness. However, the absence of security headers and privacy policies represents compliance and security gaps. No incident response or vulnerability disclosure information is provided. No WAF or blocking mechanisms are detected, and no suspicious content is found. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced security practices and privacy compliance to improve its security posture and user trust.

O

Orwin s.r.o.

orwin.cz

57

Orwin s.r.o. is a Czech-based technology company specializing in custom web development, including B2C e-commerce shops, B2B portals, and comprehensive web solutions. The company targets businesses requiring tailored online platforms integrated with ERP and CRM systems, emphasizing service guarantees and expert project management. The website reflects a professional and consistent brand image with clear business offerings and client references. Technically, the site uses modern JavaScript libraries such as Swiper.js and Plyr.js, with a custom CMS implied. Hosting is managed via a Czech registrar with stable name servers. Security posture is moderate, with no visible HTTPS or security headers data provided, and no privacy or cookie policies present, indicating compliance gaps. Contact information is clearly displayed, but no social media or analytics tools are detected. Overall, the site is accessible, well-designed, and business credible but would benefit from enhanced privacy and security disclosures.

The website www.jagermeister.com is currently inaccessible due to a Cloudflare security challenge page requiring human verification via Turnstile captcha. This prevents access to any substantive content, metadata, or business information. The domain WHOIS data is unavailable, indicating either the domain is unregistered, privacy protected, or there is a mismatch in the queried domain name. The site appears to be related to the Jägermeister brand, a well-known alcoholic beverage, but no direct content confirms this due to the block. The technical infrastructure relies on Cloudflare for security and performance, but the inability to access the site limits assessment of the technology stack and security posture. Overall, the site’s security posture cannot be fully evaluated, and the lack of accessible business and compliance information reduces trust and transparency.

S

Staropramen

staropramen.cz

63

Staropramen is a well-established Czech brewery brand with a rich history dating back to 1869. The website serves as a digital platform to showcase their beer products, promote events, and share the brewery's story. Owned by Molson Coors, the brand targets beer consumers primarily in the Czech Republic, leveraging event sponsorships and social media engagement to maintain market presence. The site features modern web technologies including Alpine.js and integrates consent management and analytics tools to comply with privacy regulations. Security posture is good with HTTPS and error monitoring in place, though explicit security policies and WHOIS transparency are lacking. Overall, the website is professional and trustworthy, but could improve privacy disclosures and WHOIS transparency to enhance credibility.

M

Městské informační centrum Kolín

kolinzije.cz

49

Kolín žije is an official municipal portal dedicated to tourism, culture, and leisure activities in the city of Kolín, Czech Republic. It provides comprehensive information about local events, gastronomy, accommodation, and practical tips for visitors and residents. The website is operated by the city's information center and serves as a key digital touchpoint for promoting local culture and tourism. The portal maintains a consistent brand identity aligned with the city and integrates social media channels to enhance community engagement. Technically, the site is built on the Vismo CMS platform, leveraging modern web technologies including Google Tag Manager, Google Analytics, and OpenWeatherMap API for weather updates. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a good user experience across devices. Security-wise, the website enforces HTTPS, implements cookie consent mechanisms compliant with GDPR, and avoids exposing sensitive data. However, it lacks a published security policy and incident response contacts, which are recommended for enhanced trust and compliance. Overall, the site demonstrates a solid digital presence with moderate tracking and good privacy practices, suitable for its government and tourism-focused mission.

P

Pěvecký sbor DVOŘÁK Uherský Brod, z. s.

dvorak-ub.cz

55

Pěvecký sbor DVOŘÁK Uherský Brod is a small non-profit choir organization based in the Czech Republic, focused on choral singing and cultural events. The website serves as a portal for choir information, event announcements, and recruitment of new singers. It maintains an active presence on social media platforms such as Facebook, Instagram, and YouTube, supporting community engagement and outreach. The business model centers on cultural promotion and community participation rather than commercial activities. Technically, the website is built on the Webnode CMS platform and hosted via AWS Cloudfront CDN, ensuring reliable delivery and moderate performance. The site uses modern web technologies including JavaScript and CSS, and integrates Google Tag Manager for analytics and tracking. Mobile optimization and responsive design are adequately implemented, providing a good user experience across devices. From a security perspective, the website enforces HTTPS, which is a critical baseline for secure communications. However, it lacks several important security headers that could enhance protection against common web vulnerabilities. No privacy or cookie policies are present, which is a compliance gap especially under GDPR regulations. The absence of WHOIS data due to privacy protection slightly reduces trust but is understandable for a small cultural entity. No forms collecting sensitive data were detected on the homepage, reducing immediate risk. Overall, the website is functional, safe, and serves its community purpose well, but it would benefit from improved security practices and formalized privacy compliance. Strategic recommendations include implementing security headers, publishing privacy and cookie policies with consent mechanisms, and enhancing accessibility features to broaden inclusivity.

S

smsticket - Ticket sales

smsticket.cz

65

The website www.smsticket.cz is an online ticket sales platform primarily serving the Czech Republic market. It offers a wide selection of event tickets, including concerts, theater, and cultural events, with a user-friendly interface and mobile optimization. The platform supports user account management and social login via Facebook, enhancing user convenience. The business model focuses on facilitating event attendance through online ticket purchases, targeting general consumers interested in entertainment and cultural activities. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and templating with Handlebars.js. It uses HTTPS with good SSL configuration and includes security measures such as CSRF tokens in forms. The site is mobile optimized and has a moderate performance profile. However, it lacks some advanced security headers and accessibility features. From a security and compliance perspective, the site demonstrates basic security hygiene but lacks visible privacy, cookie, and terms of service policies, which are critical for GDPR compliance and user trust. The absence of WHOIS data for the domain raises concerns about domain registration transparency and legitimacy, although the site content and HTTPS presence suggest legitimate operations. There is no evidence of incident response or vulnerability disclosure mechanisms. Overall, the site is functional and professionally presented but would benefit from enhanced transparency, privacy compliance, and security best practices to improve trust and regulatory adherence.

N

NATUR-PACK, a.s.

naturpack.sk

58

NATUR-PACK, a.s. is a leading Slovak organization specializing in recycling and waste management services, particularly focusing on packaging waste, electrical equipment, batteries, and non-packaging products. The company serves manufacturers, municipalities, and the general public, providing consultation, education, and compliance support within the framework of extended producer responsibility (OZV). Their market position is strong, being the largest OZV in Slovakia with a broad client base and extensive regional presence. Technically, the website employs modern web technologies including JavaScript, jQuery, Owl Carousel, and integrates Google Tag Manager and analytics tools such as Google Analytics and Fathom Analytics. The site is well-optimized for mobile devices, has good accessibility features, and demonstrates solid SEO practices. The cookie consent mechanism is comprehensive and GDPR-compliant, reflecting a mature approach to privacy. From a security perspective, the site enforces HTTPS and uses cookie consent to manage tracking scripts responsibly. However, some standard security headers like Content-Security-Policy and X-Frame-Options are not detected, representing an area for improvement. No vulnerabilities or exposed sensitive data were found. Incident response and explicit security policies are not publicly detailed, which could be enhanced. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission. The domain registration data is consistent with the business claims, supporting legitimacy. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include enhancing security headers, publishing security policies, and improving incident response transparency.

I

Investitionsbank Schleswig-Holstein (IB.SH)

ibsh-unternehmerinnenpreis.de

66

The website www.ibsh-unternehmerinnenpreis.de represents the IB.SH-Unternehmerinnenpreis, an entrepreneurship award initiative by the Investitionsbank Schleswig-Holstein (IB.SH) aimed at recognizing and promoting female entrepreneurs in Schleswig-Holstein, Germany. The site serves as an informational and promotional platform for the award, showcasing winners, jury members, and providing downloadable resources such as FAQs, press releases, and social media kits. The business model is non-profit and government-affiliated, focusing on fostering female entrepreneurship and economic diversity in the region. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and uses Matomo for analytics, reflecting a privacy-conscious approach. The site is mobile-optimized, accessible, and SEO-friendly with proper meta tags and structured content. However, some security headers are missing, which could be improved to enhance security posture. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. Contact information is clearly provided with multiple dedicated contacts, enhancing trust and transparency. The absence of explicit security or incident response policies is noted but not uncommon for this type of site. Overall, the website is professional, trustworthy, and well-aligned with its mission. It effectively supports the IB.SH's goal of empowering female entrepreneurs in Schleswig-Holstein. Strategic improvements in security headers and publishing security policies could further strengthen its security posture and user trust.

C

casavi

mycasavi.com

66

Casavi operates a specialized service portal platform for real estate management, primarily targeting property managers and tenants in Germany. The platform offers user account management, ticketing, document handling, and communication tools tailored for the real estate sector. The company has an established market presence since its domain registration in 2015 and hosts its services on Amazon AWS infrastructure, leveraging modern web technologies including React and Sentry for error tracking. Technically, the website demonstrates a mature digital infrastructure with secure login forms incorporating CSRF protection and input validation. The use of HTTPS and AWS hosting ensures a reliable and secure environment. However, the absence of DNSSEC and explicit security headers such as Content-Security-Policy indicates areas for security enhancement. The website is mobile-optimized with good design quality and clear navigation, supporting a positive user experience. From a security perspective, the site maintains a good posture with encrypted connections and secure form handling but lacks publicly available security policies and incident response contacts, which are important for transparency and trust. Privacy compliance is partially met with comprehensive privacy and terms of service pages, though the lack of a cookie consent mechanism may pose GDPR compliance risks. Overall, Casavi presents a trustworthy and professional online presence with room for improvement in security transparency and privacy compliance. Strategic enhancements in security headers, cookie consent, and incident response disclosures would strengthen its security posture and regulatory adherence.

A

AVIV Germany GmbH

immowelt.de

65

Immowelt.de is a leading German real estate portal operated by AVIV Germany GmbH, offering a comprehensive platform for property search, rental, purchase, and related services such as financing and moving assistance. The website targets private individuals and real estate professionals seeking residential and commercial properties across Germany. It holds a strong market position, evidenced by multiple awards and partnerships with reputable service providers like SCHUFA and Interhyp. Technically, the website employs modern web technologies including React and integrates a consent management platform (Usercentrics) for GDPR compliance. Hosting is managed via Amazon AWS, ensuring reliable performance and scalability. The site is well-optimized for mobile devices and accessibility, with a clean, professional design and clear navigation. From a security perspective, immowelt.de enforces HTTPS, implements key security headers, and avoids exposing sensitive data in its HTML content. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Privacy compliance is partially addressed through the use of a consent management platform, but the absence of a clearly accessible privacy policy and terms of service reduces overall compliance confidence. Overall, immowelt.de presents a trustworthy and professional online presence with strong business credibility and technical maturity. Strategic enhancements in privacy transparency and security documentation would further strengthen its risk posture and user trust.

C

Cykloserver.cz

cykloserver.cz

39

Cykloserver.cz is a well-established Czech cycling news and community platform founded in 2000, serving hobby cyclists and enthusiasts primarily in the Czech Republic and Slovakia. The site offers a variety of content including cycling news, event calendars, trip tips, and an online cycling atlas, supported by partnerships with relevant cycling organizations. The business model appears to be content-driven with advertising and partner promotions. Technically, the website uses standard web technologies with HTTPS and Google Analytics integration, hosted by a Czech hosting provider. While the site is functional and content-rich, it lacks formal privacy and cookie policies and does not implement advanced security headers, which are areas for improvement. The security posture is moderate with secure forms and HTTPS but missing some best practices. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

F

Fyzikální ústav Akademie věd České republiky

fzu.cz

60

Fyzikální ústav Akademie věd České republiky (FZU) is a prominent Czech research institute specializing in physics, affiliated with the Czech Academy of Sciences. The website showcases extensive scientific research, publications, events, and public outreach activities, targeting researchers, students, companies, and the general public interested in physics. The institute operates under a government and grant-funded model, emphasizing education and scientific advancement. The site is professionally designed with consistent branding and a strong social media presence, reinforcing its position as a leading academic institution in the Czech Republic. Technically, the website is built on Drupal 10, integrating modern analytics tools such as Matomo, Facebook Pixel, and Microsoft Clarity, alongside a cookie consent management system (CookieHub). The site is mobile-optimized, accessible, and performs moderately well. Security practices include HTTPS enforcement, CAPTCHA on forms, and cookie consent, though explicit security headers and incident response contacts are not clearly visible. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies in Czech language, aligned with GDPR requirements. However, the absence of WHOIS data for the domain reduces trust slightly, though the institutional affiliation and content quality support legitimacy. No adult or questionable content is present, making the site safe for general audiences. Overall, the website reflects a mature digital presence for a reputable scientific institution, with room for improvement in security transparency and domain registration visibility.

S

Outlook

starezsport.cz

61

The website is a login portal for Microsoft Outlook Web Access (OWA) customized for the domain starezsport.cz. It provides a user interface for email access but lacks any business descriptive content, contact information, or privacy and cookie policies. The domain is registered since 2006 and hosted on Czech servers, indicating a stable presence. The technical infrastructure relies on legacy Microsoft technologies including ActiveX controls, which may pose security risks in modern environments. The page is minimalistic with basic design and limited mobile optimization. Security posture is moderate with HTTPS implied but lacking modern security headers and privacy compliance disclosures. No analytics or advertising scripts are present, reducing tracking concerns but also limiting marketing insights. Overall, the site serves a functional purpose but lacks comprehensive business and compliance information.

M

Miroslav Matyska

puzzle-puzzle.cz

59

Puzzle-puzzle.cz is a Czech Republic-based specialized e-commerce retailer focused on selling a wide variety of puzzles and related accessories for both children and adults. The website offers a broad assortment including 3D and 4D puzzles, baby puzzles, foam puzzle mats, and puzzle accessories. The business appears to have been established around 2011, as indicated by copyright metadata, and targets puzzle enthusiasts and families. The site is professionally designed with clear navigation and mobile optimization, providing a good user experience. However, the WHOIS data for the domain is unavailable, which raises concerns about domain registration legitimacy and trustworthiness. The website uses HTTPS and standard tracking technologies such as Google Analytics and Google Tag Manager, and it implements a cookie consent mechanism with granular user controls, indicating some level of privacy compliance. No explicit privacy policy or terms of service pages were found, and no direct contact information such as emails or phone numbers are provided on the main page, which limits transparency and user trust. Security headers are not detected, suggesting room for improvement in security posture. Overall, the website is safe, family-friendly, and functional but would benefit from enhanced transparency and security practices.

W

wflow.com

wflow.cz

67

wflow.com is a technology company specializing in digital accounting automation and corporate expense management. The platform leverages AI to extract data from invoices and receipts, automates approval workflows, and integrates with popular ERP and banking systems. It targets a broad audience including startups, SMEs, large enterprises, and accounting firms primarily in the Czech Republic and Slovakia. The company positions itself as a modern alternative to traditional accounting software, emphasizing time and cost savings for its clients. The website is professionally designed, multilingual, and rich in content including case studies and client testimonials, reflecting a mature digital presence. Technically, the website is built on Webflow CMS with modern JavaScript libraries for UI components and sliders. It uses Google Fonts and CDN hosting for performance optimization. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured data. Security posture is strong with HTTPS enforced, ISO 27001 certification, and mention of penetration testing and two-factor authentication. However, explicit security headers are not detected, and no public incident response or vulnerability disclosure policies are found. Overall, the security and privacy compliance are well addressed with GDPR adherence and clear privacy and cookie policies. Contact information is transparent, including emails, phone numbers, and social media channels. The absence of WHOIS data is a concern for domain legitimacy but does not detract from the professional appearance and trust signals on the website. Strategically, wflow.com is well positioned in the accounting technology market with a comprehensive SaaS offering. The company should enhance transparency around security incident response and vulnerability disclosure to further build trust. Adding explicit security headers and publishing data retention policies would improve security posture and compliance visibility.

A

Asociace soukromého zemědělství ČR

asz.cz

47

The website www.asz.cz represents the Asociace soukromého zemědělství ČR, a Czech association dedicated to private farming and family farms. It serves as an information hub providing news, events, advocacy, and educational resources for farmers and agricultural stakeholders in the Czech Republic. The site is professionally designed with a clear navigation structure and regularly updated content, targeting a medium-sized audience within the agricultural sector. Technically, the website employs modern web technologies including Google Tag Manager for analytics, Leaflet.js for mapping, and a consent management platform to comply with cookie regulations. The site is mobile-optimized and performs moderately well, though some accessibility features could be enhanced. Security posture is good with HTTPS enforced, but lacks advanced security headers and explicit security policies. From a security and compliance perspective, the site does not expose sensitive data and uses a consent mechanism for cookies, but lacks visible privacy policy and terms of service pages, which could be improved for better GDPR compliance. No WHOIS data is available, likely due to privacy protection, but the website content and structure indicate a legitimate and established organization. Overall, the website is a trustworthy and professional platform for its target audience, with recommendations to enhance security headers, publish clear privacy and security policies, and provide incident response contacts to strengthen its security posture and compliance.

S

Státní pozemkový úřad

spucr.cz

71

Státní pozemkový úřad is a Czech government agency responsible for land management, land adjustments, and rural development initiatives. The website serves as an official portal providing information on land restitution, public tenders, geoportal services, and various government programs. It targets Czech citizens, landowners, agricultural professionals, and government entities, positioning itself as a key national authority in land administration. Technically, the website employs standard web technologies including jQuery and SVG graphics, with a moderate performance profile and good mobile optimization. The site includes accessibility features and SEO best practices, contributing to a positive user experience. Cookie consent and GDPR compliance mechanisms are implemented, reflecting attention to privacy regulations. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible advanced security headers. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data is notable but does not detract significantly from the site's legitimacy given its government affiliation and comprehensive contact information. Overall, the website presents a professional and trustworthy front for the agency, with strong content quality and compliance posture. Strategic recommendations include enhancing security headers, auditing third-party libraries, and ensuring robust form protections to further strengthen security and trust.

W

Weblium

weblium.com

73

Weblium is a technology company providing an intuitive website builder platform that enables users to create professional websites effortlessly. Founded in 2016, it targets individuals and businesses seeking easy-to-use web development tools. The platform offers professional templates and advanced features, positioning itself as a competitive SaaS solution in the website building market. Technically, the website employs modern JavaScript frameworks such as React and utilizes service workers to enhance performance and user experience. The domain is well-registered and consistent with the company's age and business claims, indicating legitimacy. However, the website lacks visible privacy and cookie policies, consent mechanisms, and security headers, which are important for compliance and security best practices. The presence of marketing and tracking scripts without explicit consent mechanisms suggests moderate user tracking. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security hardening.

Cryosoft.cz is a Czech-based internet advertising agency specializing in custom web development and multimedia projects. The company offers comprehensive internet projects including web presentations, CRM systems, e-shops, and online catalogs, supported by their proprietary CryoADMIN administration interface. Additionally, they provide multimedia services such as corporate identity creation, promotional videos, and original music production. The business targets clients seeking tailored digital solutions primarily within the Czech market. The website content is professional and well-structured, reflecting a small but specialized agency with a focus on quality and client references. Technically, the website employs standard web technologies including jQuery, CSS, and JavaScript, with a responsive design and good SEO practices. HTTPS is enforced, and cookie consent mechanisms are implemented to comply with GDPR requirements. However, no explicit privacy policy page was found, and no contact emails or phone numbers are directly visible on the homepage, which could impact user trust and compliance. From a security perspective, the site benefits from HTTPS and basic security best practices but lacks advanced security headers and published security policies or incident response contacts. The absence of WHOIS data reduces domain trustworthiness, although the website content and business information appear legitimate and consistent with a long-standing operation since 2006. Overall, the security posture is moderate with room for improvement in transparency and policy publication. The overall risk assessment is low to moderate, with recommendations to enhance security headers, publish privacy and security policies, and provide clear contact information to improve trust and compliance. The website is accessible without WAF or blocking mechanisms, enabling full content analysis.

S

sitour Česká republika

sitour.cz

51

sitour Česká republika is a specialized company integrating advertising, information, and communication systems in mountain and tourist regions for over 20 years. They provide innovative multimedia and digital signage solutions tailored for ski resorts and outdoor tourism, positioning themselves as a leading network in the digital out-of-home advertising sector within the mountain resort industry. The website demonstrates a mature digital infrastructure using modern frameworks like Astro and integrates Google Analytics with a strong privacy consent mechanism. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and vulnerability disclosure mechanisms are absent. The absence of WHOIS data is a notable risk factor, but the professional presentation, international partnerships, and clear contact information support the legitimacy of the business. Overall, the site is well-designed, user-friendly, and compliant with GDPR requirements.

K

K2

k2snow.com

10

K2 is a well-established American ski and snowboard brand with a strong market presence since 1962. The website serves as an e-commerce platform targeting winter sports enthusiasts, offering skis, snowboards, and related equipment. The technical infrastructure leverages modern JavaScript frameworks, third-party payment and review integrations, and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain transfer protections, but lacks some advanced security headers and explicit security policies. Privacy compliance is partially addressed with cookie consent but lacks a visible privacy policy and terms of service. Overall, the website is professional and trustworthy but could improve transparency and security practices.

A

ALPINE PRO

alpinepro.cz

10

ALPINE PRO operates an e-commerce platform specializing in outdoor clothing and accessories, primarily targeting customers in the Czech Republic. The website presents a professional and consistent brand image with a clear focus on retail sales of outdoor apparel. The technical infrastructure leverages modern web technologies including JavaScript modules, Google Tag Manager, Facebook Pixel, and Cookiebot for consent management, indicating a mature digital presence. The site is mobile optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the website enforces HTTPS and includes standard security headers, contributing to a solid security posture. The presence of a comprehensive cookie consent mechanism aligns with GDPR compliance efforts, although explicit privacy policy and terms of service pages were not detected in the provided content. No critical vulnerabilities or exposed sensitive data were found, but the absence of a security.txt or vulnerability disclosure page suggests room for improvement in incident response transparency. Overall, the website is safe, trustworthy, and professionally maintained, with extensive user tracking and marketing integrations. The lack of WHOIS data limits domain ownership verification, but the website content and technical indicators support legitimacy. Strategic recommendations include publishing clear privacy and terms policies, providing direct company contact information, and establishing a formal vulnerability disclosure process to enhance trust and compliance.

I

innogy Česká republika a.s.

innogy.cz

10

Innogy Česká republika a.s. is a prominent energy supplier in the Czech Republic, offering natural gas and electricity services to households, businesses, and large firms. The company provides a comprehensive digital experience including online price calculators, a customer portal named 'innosvět' for energy consumption monitoring, and additional services such as home assistance and insurance. The website is well-branded, professionally designed, and targets a broad audience of energy consumers in the region. Technically, the site employs modern JavaScript frameworks, Google Tag Manager for analytics, and Cookiebot for privacy compliance, ensuring a good level of digital maturity. Security posture is strong with HTTPS enforced and CAPTCHA protections on forms, though explicit security headers and a public security policy are absent. Overall, the site is trustworthy and compliant with GDPR, with clear contact information and social media presence. The lack of WHOIS data is likely due to privacy protection, which is justified for this business type.

E

ENVItech Bohemia s.r.o.

envitech-bohemia.cz

65

ENVItech Bohemia s.r.o. is a Czech-based company specializing in environmental monitoring services and products, particularly air quality monitoring. Established in 1992, the company offers a comprehensive portfolio including monitoring systems, meteorological equipment, emission measurement, calibration, detection systems, and related software solutions. The company holds multiple certifications such as ISO 9001 and ISO 14001, reinforcing its credibility and compliance with industry standards. Their market position is solid within the environmental technology sector in the Czech Republic and broader EU region, supported by a network of subsidiaries and partner institutions. Technically, the website is built on the ByznysWeb.cz CMS platform, utilizing modern web technologies including Google Analytics for user tracking and consent management compliant with GDPR. The site is well-structured, mobile-optimized, and provides clear navigation and relevant content. However, there is room for improvement in security headers and explicit incident response information. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating a good baseline security posture. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a notable concern, potentially impacting trustworthiness and domain legitimacy verification. Overall, the website presents a professional and trustworthy front for ENVItech Bohemia s.r.o., with strong compliance and business credibility indicators. Strategic improvements in domain registration transparency and enhanced security headers would further strengthen their security posture and trust signals.

Městská knihovna Litovel operates as a public library serving the Litovel community in the Czech Republic. The website provides comprehensive information about library services, including lending for children and adults, electronic books, internet access, regional functions, and cultural events. The target audience primarily consists of local readers and visitors interested in library resources and activities. The business model is that of a public institution focused on education and cultural enrichment. Technically, the website is built on the Public4u CMS platform and utilizes jQuery and JavaScript for interactive features. While the site is functional and moderately optimized, mobile responsiveness and accessibility could be improved. The site enforces HTTPS and includes cookie consent mechanisms, indicating a baseline of privacy compliance. From a security perspective, the site lacks advanced security headers and does not expose sensitive data or vulnerable libraries. No security incidents or policies are publicly documented. The absence of WHOIS data limits domain trust assessment, but the website content and external links suggest legitimacy. Overall, the site maintains a good security posture for a small public institution but could benefit from enhanced security best practices. The overall risk is low given the nature of the business and content, but improvements in technical implementation and security hardening are recommended to maintain trust and compliance.

F

Freelo

freelo.io

56

Freelo is a SaaS project and task management platform designed primarily for independent professionals and small teams seeking efficient collaboration and control over their projects. The website demonstrates a strong market position with numerous client case studies and testimonials, indicating trust and adoption by thousands of teams. The platform offers a comprehensive suite of features including task management, Kanban boards, Gantt timelines, mind maps, and mobile/desktop applications, catering to a broad range of project management needs. Technically, the website employs modern web technologies such as JavaScript, Google Tag Manager, Sentry for error monitoring, and integrates advertising and tracking tools like Bing Ads and Google Analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. However, explicit CMS or hosting provider details are not evident from the content. From a security perspective, the site uses HTTPS and integrates monitoring tools but lacks visible security headers and a published security policy or incident response contacts. Privacy compliance is partially addressed with a cookie consent mechanism, but no explicit privacy policy or terms of service pages were detected in the provided content. WHOIS data is unavailable due to privacy protection, but the domain and website content indicate legitimacy. Overall, Freelo presents a professional, trustworthy, and well-structured online presence with minor gaps in explicit privacy and security disclosures. Strategic improvements in publishing comprehensive privacy and security policies and enhancing security headers would strengthen its security posture and compliance.

Č

Český horolezecký svaz

horosvaz.cz

55

The Český horolezecký svaz (Czech Mountaineering Association) operates as a national non-profit organization dedicated to supporting climbers, mountaineers, and skialpinists in the Czech Republic. The website serves as an information hub offering membership services, insurance products, event organization, educational resources, and maintenance of climbing areas. It holds a strong market position as the official governing body for climbing sports in the country, supported by partnerships with recognized brands and international federations. Technically, the website is built on a modern CMS platform (Vizus CMS) with standard web technologies and includes integrations such as Google Tag Manager and EmbedSocial for social media content. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though it lacks some advanced security headers and explicit privacy and terms of service documentation. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy given the organization's public presence and affiliations. Overall, the website is professional, trustworthy, and serves its community effectively.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) displaying the offline dinosaur game. There is no actual website content, business information, or commercial presence. The page is a built-in browser feature for offline scenarios and does not represent a legitimate external website. Consequently, no privacy, cookie, or terms of service policies are present, and no contact or security policies are available. The technical infrastructure is limited to Chromium's internal JavaScript and canvas-based game implementation, with no external hosting or CMS involved. Security posture cannot be fully assessed due to the internal nature of the page, but no vulnerabilities or sensitive data exposure are evident. Overall, this is not a real website but a browser internal page, and thus it lacks any business credibility or compliance features.

S

Schweizer Alpen-Club SAC

sac-cas.ch

55

The Schweizer Alpen-Club SAC is Switzerland's leading alpine sports association with approximately 180,000 members. The organization focuses on promoting mountain sports, providing safety and training, and managing memberships and events. Their market position as the foremost alpine club in Switzerland is well established, supported by a comprehensive digital presence. The website is built on TYPO3 CMS, integrating modern technologies such as Cookiebot for consent management, Stripe for payment processing, and analytics tools like Google Analytics and Facebook Pixel. The technical infrastructure reflects a mature digital setup with good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not publicly detailed. Privacy compliance is robust, with clear cookie and privacy policies and GDPR-aligned consent mechanisms. Overall, the website demonstrates a high level of professionalism and trustworthiness, suitable for a large non-profit organization. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure information, and enhancing accessibility features to further improve compliance and user trust.

Z

Zucchetti Hospitality s.r.l.

ovosodo.net

37

Ovosodo is a digital agency specializing in UI/UX, web design, and development services, operating as a business unit of Zucchetti Hospitality s.r.l., part of the larger Zucchetti Group. The company targets businesses seeking comprehensive digital solutions, emphasizing equal attention to code and design. Their market position is that of a specialized subsidiary within a reputable technology and hospitality group, founded in 2003. The website reflects a professional and consistent brand image with clear service offerings and recent project showcases. Technically, the website employs modern web technologies including jQuery, Vimeo Player integration, and Iubenda for cookie consent management, alongside Google Analytics and Tag Manager for tracking. The site is mobile optimized with good SEO and basic accessibility features. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, ensuring GDPR compliance. However, it lacks explicit security policies and incident response contacts, and no advanced security headers were detected. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, although the website content and business information are credible and professionally presented. Overall, the website presents a low risk with good privacy compliance and business credibility, but the missing WHOIS data and lack of explicit security policies suggest areas for improvement to enhance trust and security posture.

T

TRIMA NEWS, s.r.o.

drbna.cz

49

Drbna.cz is a Czech regional news portal operated by TRIMA NEWS, s.r.o., delivering authentic local news and stories across multiple regional sub-portals. The website targets Czech-speaking audiences interested in regional news, offering a mix of news articles, blogs, weather updates, and premium ad-free subscriptions. The platform holds a strong market position in regional media within the Czech Republic. Technically, the site employs modern JavaScript libraries, Google Tag Manager, Microsoft Clarity, and multiple advertising networks, ensuring a moderate to good performance and mobile optimization. Security-wise, the site enforces HTTPS and uses consent management for cookies, but lacks explicit security.txt and incident response contacts. Privacy policies and terms of service are present and indicate GDPR compliance. Overall, the site is professional, content-rich, and trustworthy, though WHOIS data is unavailable, which slightly impacts domain trust assessment.

N

Nilfisk

nilfisk.com

74

Nilfisk is a globally recognized leader in the manufacturing and provision of premium cleaning machines, products, solutions, and services catering to both professional and consumer markets. The company maintains a strong market position with a comprehensive product portfolio and a global footprint, supported by a professional and well-structured website that reflects its brand and business model effectively. The website targets professional cleaning service providers and consumers seeking high-quality cleaning solutions. Technically, the site leverages modern web technologies such as React and Next.js, ensuring good performance, mobile optimization, and accessibility. Security measures are robust, with HTTPS enforcement and appropriate security headers, although there is room for improvement in public vulnerability disclosure and incident response transparency. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Nilfisk's digital presence is professional, secure, and trustworthy, supporting its business credibility and customer engagement.

Č

Český hydrometeorologický ústav

chmi.cz

61

The Český hydrometeorologický ústav (ČHMÚ) is the Czech Republic's national meteorological and environmental authority, providing comprehensive weather forecasts, hydrological data, and air quality monitoring. The website serves a broad audience including the general public, government bodies, media, and business partners, offering detailed environmental data, news, and specialized services such as mobile applications. The organization holds ISO 9001 certification, reinforcing its credibility and commitment to quality. Technically, the website employs traditional web technologies including jQuery and JavaScript, with a moderate performance profile and basic mobile optimization. The site implements a robust cookie consent mechanism aligned with GDPR requirements, denying marketing and analytics cookies by default. While HTTPS is used, explicit security headers are not detected in the provided data, suggesting room for improvement in security hardening. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of detailed incident response contacts and security headers indicates potential gaps. Privacy compliance is strong, supported by comprehensive privacy and cookie policies. The domain WHOIS data is unavailable due to CZ.NIC policies, but the domain usage and content strongly indicate legitimacy as a government entity. Overall, the website is professional, trustworthy, and content-rich, with recommendations to enhance security headers, mobile responsiveness, and incident response transparency to further strengthen its security and user trust.

P

PERI, spol. s r.o.

peri.cz

33

PERI, spol. s r.o. is a leading Czech supplier of construction equipment specializing in formwork, scaffolding, and engineering services. With over 50 years of experience, the company offers innovative and efficient solutions tailored to meet diverse project requirements. The website reflects a mature digital presence with comprehensive product portfolios, customer portals, and active communication channels. Technically, the site employs modern web technologies, including JavaScript frameworks, SVG icons, and consent management tools, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be further confirmed. The absence of WHOIS data is likely due to privacy protection, common for enterprises of this scale. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

S

Swix

swix.cz

70

Swix.cz is a specialized e-commerce retailer focused on sports equipment, particularly for winter sports such as skiing and cross-country skiing, offering products from the Swix brand. The website targets Czech-speaking customers primarily in the Czech Republic and provides a professional online shopping experience with clear navigation, product categories, and a blog for customer engagement. The business model centers on direct online sales supported by a physical sales network. Technically, the site employs modern JavaScript frameworks, integrates multiple analytics and marketing tools including Google Tag Manager, Facebook Pixel, Microsoft Clarity, and Snowplow Analytics, and uses CDN services for performance optimization. The site is mobile-optimized and includes accessibility features, although these could be enhanced further. Security-wise, the site enforces HTTPS, uses Sentry for error monitoring, and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, the absence of WHOIS data for the domain reduces the overall trust score, though the website content and contact details suggest a legitimate business. Overall, the site presents a secure, compliant, and user-friendly platform for sports equipment retail.

S

Svaz lyžařů České republiky

czech-ski.com

17

Svaz lyžařů České republiky operates as the official national skiing association for the Czech Republic, providing comprehensive information on skiing disciplines, membership services, event updates, and partner promotions. The website targets the Czech skiing community including athletes, members, and fans, positioning itself as a trusted source for skiing-related activities and organizational information. The business model is non-profit and focused on community engagement and sport promotion. Technically, the website employs modern JavaScript libraries such as Swiper.js for UI components, integrates social media SDKs, and uses Google Analytics for visitor tracking. The site is mobile-optimized with good SEO practices, though accessibility features are basic. The hosting provider and CMS are not explicitly identified. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published privacy or terms of service pages. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which reduces trustworthiness but the site content and business information appear legitimate. Overall, the website presents a professional and trustworthy front for the Czech skiing association, though improvements in privacy disclosures, security headers, and WHOIS transparency are recommended to enhance compliance and trust.

G

Generali Investments CEE, investiční společnost, a.s.

generali-investments.cz

43

Generali Investments CEE is a prominent investment company operating primarily in the Czech Republic and Central Europe, offering a wide range of investment funds and programs in multiple currencies including CZK and EUR. The company is part of the larger Generali Group, a well-known global insurance and financial services provider. Their website demonstrates a mature digital presence with comprehensive product information, client services, and multilingual support. Technically, the site uses modern web technologies such as Bootstrap and JavaScript libraries, and implements HTTPS with good security practices, although some security headers could be improved. Privacy compliance is well addressed with clear cookie consent mechanisms and detailed privacy policies, reflecting adherence to GDPR standards. The absence of WHOIS data is a limitation but does not detract significantly from the overall legitimacy given the strong brand presence and professional content. Overall, the site is secure, user-friendly, and trustworthy, serving a large client base in the financial sector.