High-risk security reports

Z

Zdravé město Znojmo

znojmo-zdravemesto.cz

47

The website 'Znojmo zdravé město' serves as the official online presence for the Healthy City initiative in Znojmo, Czech Republic. It provides residents and stakeholders with information about health, environmental projects, community events, and participatory budgeting efforts. The site is clearly targeted at local citizens and community members interested in municipal health and sustainability programs. The business model is that of a government/community initiative, focusing on engagement and information dissemination rather than commercial activities. The website is well-branded with consistent use of official city logos and links to the main city website, reinforcing its legitimacy and trustworthiness. Technically, the site is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and Google Fonts. It includes embedded YouTube videos and social media links to official city accounts. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured navigation. Performance is moderate, with no major technical issues detected. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, explicit security headers are not detected, and there is no visible security or incident response policy. Privacy compliance is basic, with cookie and privacy policies present but lacking a consent mechanism. Contact information is clearly provided, including emails and phone numbers of project coordinators and city officials. Overall, the website presents a low-risk profile with a strong community focus and good business credibility. Strategic recommendations include enhancing security headers, implementing a cookie consent mechanism, and publishing a dedicated security policy to improve compliance and trust.

P

Pojizeří a Polabí - turistická oblast

pojizeriapolabi.cz

41

The website www.pojizeriapolabi.cz serves as an informational portal for the Pojizeří and Polabí tourist regions in the Czech Republic, highlighting attractions, accommodations, and cultural sites. The site targets tourists and visitors interested in exploring these areas. The technical infrastructure includes modern web technologies such as jQuery, GLightbox, Google Fonts, Font Awesome 6 Pro, and Google Analytics for visitor tracking. The site appears to be mobile-optimized with good design quality and navigation clarity. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership. Security posture is moderate, with HTTPS implied but lacking explicit security headers and policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site provides useful regional tourism information but would benefit from enhanced security and compliance measures.

M

Město Poděbrady

reusepodebrady.cz

44

The website represents the Reuse Centrum of the city of Poděbrady, Czech Republic, providing municipal services focused on sustainability and reuse of items. It serves local residents with information, contact details, and operational hours. The site is professionally designed with clear navigation and multilingual support via Google Translate. Technically, it uses a CMS platform (Vismo), modern web technologies, and integrates Google Analytics with a privacy-conscious default consent setting. Security posture is adequate with HTTPS enforced and cookie consent mechanisms, but lacks explicit security headers and published security policies. WHOIS data is unavailable, limiting domain registration trust analysis, but the official municipal content and domain usage support legitimacy. Overall, the site is functional, trustworthy, and compliant with GDPR, serving its public service role effectively.

E

Eternal s.r.o.

eternal.cz

42

Eternal s.r.o. is a Czech technology company specializing in the development of mobile applications and web portals, with over 10 years of experience. The company serves a diverse clientele including municipalities, universities, and insurance companies, offering services such as mobile app development, interior navigation solutions, and data analysis. Their website reflects a professional and consistent brand image, targeting businesses and organizations seeking custom software solutions. Technically, the site is built on WordPress with Bootstrap and integrates modern tools like Google Analytics and reCAPTCHA, indicating a moderate level of digital maturity. Security measures include HTTPS enforcement and spam protection, though the absence of security headers and privacy policies suggests room for improvement. The missing WHOIS data introduces some uncertainty regarding domain legitimacy, but the overall business presentation and contact transparency support a credible profile. Strategic recommendations include enhancing compliance documentation, improving security headers, and verifying domain registration details to strengthen trust and security posture.

M

Městské kulturní centrum Poděbrady, p. o.

ipodebrady.cz

45

Městské kulturní centrum Poděbrady is a municipal cultural institution serving the town of Poděbrady, Czech Republic. The website provides comprehensive information about cultural events including theater, cinema, concerts, and community activities. It acts as an official portal for local cultural programming and event promotion, targeting residents and visitors interested in cultural and social events. The business model is public service-oriented, focusing on community engagement and cultural enrichment. The institution is well-established, with the domain registered since 2003, reflecting a stable presence in the local cultural landscape. Technically, the website uses a custom CMS platform (vismoWeb5) with modern web technologies such as HTML5, CSS3, JavaScript, and Google Fonts. It includes accessibility features and mobile optimization, providing a good user experience. External integrations include Google Translate for multilingual support and Seznam retargeting for marketing purposes. Hosting and domain registration are managed by Wedos, a reputable Czech provider. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. While explicit security headers like CSP or X-Frame-Options are not detected, no critical vulnerabilities or exposed sensitive data were found. The site lacks a published security policy or incident response contact, which could be improved to enhance trust and compliance. Overall, the security posture is solid for a municipal cultural website. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party scripts. The website demonstrates good business credibility, technical implementation, and privacy compliance, making it a trustworthy and professional digital presence for the cultural center.

A

Asociace muzeí a galerií České republiky, z. s.

cz-museums.cz

48

Asociace muzeí a galerií České republiky (AMG) is a prominent non-profit professional association dedicated to museums and galleries in the Czech Republic. It serves as the largest professional body in the museology sector, providing services such as promotion, education, event organization, and publishing. The website reflects a well-maintained digital presence with clear navigation and regularly updated content, targeting museum professionals and cultural institutions. Technically, the site employs modern JavaScript libraries and frameworks including jQuery, Bootstrap, and JSF, ensuring a responsive and user-friendly experience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms but lacks explicit security headers and privacy policies, which are recommended for enhanced compliance and protection. Overall, the website is trustworthy and professional, though improvements in privacy disclosures and security hardening would strengthen its posture.

S

Sbírka Viléma Trmala

trmal.cz

34

The website www.trmal.cz is dedicated to the legacy and collection of Vilém Trmal, a Czech lawyer and antiquarian who co-founded the Český antikvariát ATA. It serves as a cultural and historical repository showcasing auctions, exhibitions, and publications related to Czech art and bibliofilia, particularly focusing on artists like Josef Váchal. The site targets collectors, art historians, and enthusiasts of Czech cultural heritage. Technically, the site uses standard web technologies including jQuery and Google Analytics, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage but lacks advanced security headers and visible privacy compliance measures. The absence of WHOIS data reduces domain trustworthiness, though the site content and presentation are professional and consistent with a legitimate cultural institution. Overall, the site is a valuable resource for its niche audience but would benefit from improved privacy and security transparency.

S

Správa Národního parku Podyjí

nppodyji.cz

49

Správa Národního parku Podyjí operates as the official administration for the Podyjí National Park in the Czech Republic, providing comprehensive information about the park's natural environment, visitor services, and conservation efforts. The website serves a broad audience including visitors, schools, and environmental stakeholders, positioning itself as a trusted governmental entity with recognized certifications such as the European Diploma of Protected Areas and membership in the EUROPARC Federation. Technically, the site is built on the QCM portal solution and utilizes a mix of JavaScript libraries including Prototype.js and jQuery, delivering a moderately performant and mobile-optimized experience. Security-wise, the site enforces HTTPS and cookie consent mechanisms but could improve by updating JavaScript libraries and implementing additional security headers. Overall, the website is professional, trustworthy, and compliant with GDPR, though it lacks explicit terms of service and incident response policies.

F

FlexiSystems s.r.o.

flexisite.cz

41

FlexiSystems s.r.o. operates the website flexisite.cz, specializing in delivering modern, custom web projects and portals primarily targeting businesses requiring demanding web solutions with tailored design. The company positions itself as a niche provider focusing on quality and bespoke web development services. The website is built on an ASP.NET framework with modern JavaScript libraries such as jQuery and Slick Carousel, indicating a moderate level of digital maturity and technical infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS usage and no visible sensitive data exposure; however, the absence of security headers and privacy/cookie policies indicates room for improvement in compliance and security best practices. The WHOIS data is unavailable, which raises concerns about domain registration transparency, though the website content and contact information appear legitimate. Overall, the site scores well on business credibility and technical implementation but needs enhancements in privacy compliance and security policies to strengthen trust and regulatory adherence.

Phasieland.com is a niche website offering original children's fairy tales in multiple languages, distributed as PDFs and audio MP3s. The site targets parents and children interested in educational and imaginative content. The business model includes direct content distribution, affiliate marketing through Amazon, and merchandise sales via Zazzle. The website has a consistent brand presence with multilingual support and social media engagement, positioning it as a small but established player in the children's literature niche. Technically, the website uses standard HTML5, CSS3, and JavaScript, with integrations for Yandex Metrika analytics and Gumroad for digital sales. Hosting is provided by HostGator, and the domain is registered with Launchpad.com Inc. The site shows moderate performance and basic mobile optimization but lacks advanced CMS or frameworks. SEO and accessibility are basic but functional. From a security perspective, the site lacks critical security headers and DNSSEC is not enabled, which are areas for improvement. No HTTPS status was explicitly detected in the HTML content, but the domain uses reputable hosting. No forms or user input fields reduce attack surface, but privacy and cookie policies are missing, indicating compliance gaps. No incident response or security policies are published. Overall, the website is safe and suitable for general audiences, with no adult or questionable content. The main risks relate to privacy compliance and security hardening. Strategic improvements in security headers, privacy disclosures, and HTTPS enforcement would enhance trust and compliance.

The website www.kacr.cz represents the Komora Auditorů České Republiky, a professional self-regulatory organization established by Czech law to oversee the auditing profession. It serves auditors, accounting professionals, and members of the auditing community in the Czech Republic by providing services such as auditor registries, professional education, publications, conferences, and quality control. The site is well-branded and consistent with its government and professional positioning. Technically, the website employs modern JavaScript libraries including jQuery, jQuery UI, and Slick Carousel, and integrates Google Tag Manager and Google Analytics with a privacy-conscious default denial of tracking until consent is given. The site is mobile responsive, accessible, and SEO optimized, though it lacks some advanced security headers and a published privacy policy. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but does not expose security policies or incident response contacts. No vulnerabilities or sensitive data exposures were detected. The absence of WHOIS data limits domain trust assessment, but the professional presentation and clear contact details support legitimacy. Overall, the site is a credible and professional resource for the auditing community in the Czech Republic, with moderate technical maturity and good security posture. Recommendations include publishing a privacy policy, adding security headers, and clarifying domain registration details to enhance trust and compliance.

P

PKS okna

pksokna.cz

44

PKS okna is a traditional Czech manufacturer specializing in the production of plastic, wooden, wood-aluminum, and aluminum windows and doors. With over 34 years of experience, the company positions itself as a reliable and quality-focused supplier serving customers primarily in the Czech Republic. The business operates as part of the larger PKS group, which includes several subsidiaries and partner companies, enhancing its market presence and operational capabilities. The website reflects a professional and consistent brand image, providing comprehensive product information, customer service contacts, and showcases completed projects to build trust. Technically, the website employs modern JavaScript libraries such as jQuery, Slick Carousel, and PhotoSwipe, alongside Google Tag Manager and Analytics for tracking and marketing purposes. The site is mobile-optimized with good SEO practices and basic accessibility features. Privacy and cookie policies are implemented with consent management, reflecting awareness of GDPR requirements. However, no explicit security policies or incident response information is publicly available. From a security perspective, the site uses HTTPS with a good SSL configuration, but lacks visible security headers and formal vulnerability disclosure mechanisms. No WHOIS data is available for the domain, which raises concerns about domain registration transparency and slightly impacts trustworthiness. Overall, the security posture is moderate with room for improvement in policy transparency and technical hardening. The overall risk assessment is moderate-low, with the primary concern being the absence of WHOIS data and limited security policy disclosures. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration details to improve trust and compliance.

T

Tylex Letovice s.r.o.

tylex.cz

47

Tylex Letovice s.r.o. is a traditional Czech textile manufacturer with a history dating back to 1832. The company specializes in producing custom-made curtains, jacquard curtains, voiles, bed linen, and 3D knits, serving both retail consumers and B2B customers. Their market position is that of a well-established, quality-focused textile producer emphasizing Czech origin and craftsmanship. The website reflects a professional business with clear product offerings and a user-friendly interface. Technically, the website employs common web technologies such as jQuery and Google Analytics, with proper HTTPS encryption and consent management for tracking. The site is moderately optimized for performance and mobile devices, though some SEO and accessibility improvements are possible. No CMS or hosting provider details were identified. From a security perspective, the site uses HTTPS and secure login forms but lacks visible security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic but present, with privacy and cookie policies accessible. The absence of WHOIS data for the domain reduces trust in domain legitimacy, though the website content and business information appear credible. Overall, the website is safe, professional, and trustworthy for its intended audience, but domain registration transparency should be verified. Strategic improvements in security headers, incident response documentation, and enhanced privacy compliance would strengthen the security posture and trustworthiness.

D

DIRECT ALPINE s.r.o.

directalpine.cz

48

DIRECT ALPINE s.r.o. is a Czech Republic-based small retail company specializing in high-quality outdoor clothing and accessories. The company positions itself as a niche European brand focusing on durable, functional apparel tested by professional climbers and outdoor experts. Their business model centers on e-commerce sales with additional B2B offerings and comprehensive warranty services. The website is professionally designed, mobile-optimized, and provides a rich catalog of products with detailed descriptions and multiple language options. Technically, the site employs modern web technologies, including Google Tag Manager, Facebook SDK, and a cookie consent management system, ensuring compliance with privacy regulations. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly available. Overall, the site is trustworthy, well-maintained, and compliant with GDPR, though WHOIS data is unavailable, likely due to privacy protection. Strategic recommendations include publishing explicit security and incident response policies and enhancing transparency around data protection officers and vulnerability disclosures.

P

P&F Company s.r.o.

pfcompany.cz

46

P&F Company s.r.o. is a Czech-based professional services company specializing in outsourcing solutions related to event management, car fleet management, and human resources resourcing. The company positions itself as a trusted partner offering senior expertise to improve business operations, targeting corporate clients requiring reliable outsourcing services. The website reflects a mature digital presence with a professional design, responsive layout, and clear navigation, supporting a positive user experience. Technically, the website employs modern JavaScript libraries such as jQuery, Slick Carousel, and PhotoSwipe, alongside Google Analytics for visitor tracking. The site is served over HTTPS with good SSL configuration, although explicit security headers are not detected. Cookie consent mechanisms are implemented, indicating awareness of privacy compliance, but a dedicated privacy policy page is missing. From a security perspective, the company demonstrates strong information security management through certifications like ISO 27001 and TISAX. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. No critical vulnerabilities or exposed sensitive data were identified in the website content. Overall, the security posture is good but could be improved with enhanced security headers and published incident response contacts. The overall risk assessment suggests a generally trustworthy and professional business website with minor gaps in privacy documentation and domain registration transparency. Strategic recommendations include publishing a privacy policy, adding security headers, and providing clear contact information to enhance trust and compliance.

S

STAVOSPOL s. r. o.

stavospol.cz

47

STAVOSPOL s. r. o. is a Czech Republic-based company established in 1991 specializing in the retail and distribution of building materials and related services. The company operates a network of four stores in key Moravian cities, offering a comprehensive range of construction supplies and tools. Their website reflects a regional retail business with a focus on construction materials and customer service. Technically, the website employs modern JavaScript libraries such as jQuery and Slick Carousel, uses HTTPS, and includes basic SEO and accessibility features. However, the absence of WHOIS data and explicit security headers suggests areas for improvement in transparency and security. The site includes privacy and cookie policies with consent mechanisms, indicating compliance with GDPR requirements. Overall, the business presents a professional online presence with clear contact information and social media engagement, but would benefit from enhanced security practices and domain registration transparency.

H

Habitat, a.s.

habitat-cz.cz

44

Habitat, a.s. is a Czech Republic-based retailer specializing in home textiles, flooring, garden furniture, and related products. The company operates both an online store and a physical retail location in Náměšť nad Oslavou, targeting general consumers seeking quality home decor and furnishings. Their product range includes carpets, beds, mattresses, and garden accessories, supported by a wholesale business segment. The website demonstrates a professional and consistent brand presence with clear contact information and social media engagement. Technically, the website employs a modern tech stack including jQuery, Modernizr, Google Fonts, and integrates marketing and analytics tools such as Google Analytics, Facebook Pixel, and Mailchimp. The site is mobile-optimized with good SEO practices and a cookie consent mechanism, indicating compliance with GDPR requirements. However, no explicit CMS or hosting provider information is discernible, and some security headers appear to be missing. From a security perspective, the site uses HTTPS and includes cookie consent, but lacks visible security headers and a vulnerability disclosure policy. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and contact details appear legitimate. No critical vulnerabilities or exposed sensitive data were detected in the provided content. Overall, Habitat's website is a well-structured and trustworthy retail platform with moderate technical maturity and good privacy compliance. The main risk lies in the opaque domain registration information, which should be addressed to enhance trustworthiness and security posture.

T

TRANS – TECHNIK spol. s r.o.

trans-technik.cz

44

TRANS – TECHNIK spol. s r.o. is a Czech-based supplier specializing in parts for truck bodies, fastening materials, riveting tools, adhesives, and industrial chemicals. The company targets B2B customers in the transportation and manufacturing sectors, offering a comprehensive product catalog and multilingual website support. Their market position appears stable within the Czech Republic and neighboring countries, supported by partner sites in Romania and Poland. The website is professionally designed with clear navigation and product categorization, supporting a good user experience.

P

Property Xpress

htif.eu

45

The Hotel & Tourism Investment Forum (HTIF) website represents a professional event platform focused on the hospitality industry in Bulgaria, targeting hotel owners, investors, executives, and related professionals. It is positioned as the largest and most influential hospitality conference in Bulgaria and one of the most attended in Europe, offering detailed agendas and speaker profiles for its upcoming 2025 event. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern and SEO-optimized infrastructure. Hosting is provided by SuperHosting.BG Ltd., a reputable provider. Security posture is adequate with HTTPS enabled and Google Analytics tracking implemented with opt-out options; however, the absence of security headers and privacy/cookie policies indicates room for improvement in compliance and security best practices. Overall, the site is safe, professional, and trustworthy but should enhance privacy compliance and security configurations.

W

William H. Coleman, Inc.

cancuntravelmart.com

45

Cancun Travel Mart is a well-established tourism event organizer specializing in connecting international tour operators and buyers with suppliers from Cancun and other Mexican destinations. Managed by William H. Coleman, Inc., the event has a strong market position as a premier Mexican Caribbean tourism business development platform with over three decades of history. The website reflects a professional digital presence built on WordPress with Elementor, featuring good design quality, clear navigation, and mobile optimization. However, it lacks critical privacy and cookie policies, which are important for compliance and user trust. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal security policies. Contact information is comprehensive and transparent, enhancing business credibility.

H

Hodslavice

hodslavice.cz

46

The website www.hodslavice.cz serves as the official online presence of the municipality of Hodslavice in the Czech Republic. It provides residents and visitors with comprehensive information about local government services, news, events, and community organizations. The site is well-structured with clear navigation and includes contact details prominently in the header. Technically, the site employs HTTPS, uses Google Analytics for traffic analysis, and integrates an accessibility toolbar to enhance usability for users with disabilities. However, the absence of WHOIS data and lack of explicit privacy and cookie policies indicate areas for improvement in transparency and compliance. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the site is professional and trustworthy for its intended audience but would benefit from enhanced privacy disclosures and security best practices.

O

Obec Bitozeves

bitozeves.cz

48

Obec Bitozeves operates an official municipal website serving the local community of Bitozeves and its surrounding villages in the Czech Republic. The site provides comprehensive information about local government activities, public notices, events, and contact details. It targets residents and visitors seeking municipal services and updates. The business model is that of a government information portal, focusing on transparency and community engagement. Technically, the website employs a custom CMS platform likely provided by Galileo Corporation, utilizing modern JavaScript libraries such as jQuery, Bootstrap, Swiper.js, and PhotoSwipe for interactive and responsive design. The site is mobile optimized and features a cookie consent mechanism, indicating some level of privacy compliance. However, the absence of a dedicated privacy policy page and security headers suggests room for improvement in security and compliance. From a security perspective, the site uses HTTPS but lacks visible security headers and a vulnerability disclosure policy. No WHOIS data is available, which reduces domain trustworthiness, though the website content and official contact information support legitimacy. There are no signs of malware, phishing, or adult content, and the site maintains a safe content rating. Overall, the website is functional, professional, and trustworthy for its intended purpose but would benefit from enhanced security practices, explicit privacy documentation, and improved WHOIS transparency to strengthen its credibility and compliance posture.

Sdružení obcí povodí Morávky is a regional municipal association located in the eastern part of the Moravian-Silesian region of the Czech Republic. The organization serves ten member municipalities and focuses on providing information about local governance, tourism, community events, and regional projects. The website acts as an information hub for residents and visitors, promoting local attractions, cycling routes, educational trails, and public notices. The association positions itself as a key regional player in community development and tourism promotion within the Silesian area. Technically, the website is built on the IPO CMS platform by Antee s.r.o., utilizing jQuery, jQuery UI, Owl Carousel, Google reCAPTCHA, and Matomo analytics. The site is mobile responsive with good navigation and content structure. HTTPS is enforced, and privacy-conscious analytics settings are used. However, some JavaScript libraries are outdated, and no explicit security headers were detected, indicating room for security improvements. From a security perspective, the site demonstrates basic best practices such as HTTPS and cookie consent but lacks a published privacy policy, security headers, and incident response contacts. The WHOIS data is unavailable, which reduces domain trustworthiness and should be investigated further. No vulnerabilities or malicious content were detected. Overall, the site is safe and trustworthy but would benefit from enhanced transparency and security hardening. The overall risk is moderate with recommendations to improve privacy compliance, update technical components, and publish security policies to strengthen trust and regulatory adherence.

M

Městský úřad Aš

muas.cz

46

The website muas.cz serves as the official municipal portal for the city of Aš in the Czech Republic. It provides residents and visitors with access to city news, public services, contact information, and various online tools such as forms and event calendars. The site is positioned as a trusted government resource with a clear focus on local governance and community engagement. The target audience primarily includes local citizens and stakeholders interested in municipal affairs. Technically, the website is built on the vismoWeb5 CMS platform, utilizing standard web technologies including HTML5, CSS3, and JavaScript. It incorporates accessibility features and mobile optimization, along with multilingual support via Google Translate. The site demonstrates moderate performance and good SEO practices, although some improvements could be made in security header implementation. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies and incident response information, and does not implement a cookie consent mechanism despite having a cookie policy. No vulnerabilities or malicious content were detected. Overall, the security posture is solid but could benefit from enhanced transparency and technical controls. The domain registration aligns well with the municipal identity, showing consistency and legitimacy. The site links to several trusted partner domains related to local government and services. There are no signs of blocking or WAF interference, and the content is safe for general audiences. Strategic recommendations include adding security and incident response policies, implementing cookie consent, and enhancing security headers to improve compliance and trust.

D

Dutch Cycling Embassy

dutchcycling.nl

44

Dutch Cycling Embassy is a medium-sized organization established in 2011, dedicated to sharing Dutch cycling expertise and technology globally to promote cycling as a sustainable and efficient mode of transport. The website positions the organization as a leading authority in cycling infrastructure, behavior, and policy, targeting governments, urban planners, and cycling advocates worldwide. The business model focuses on knowledge dissemination, consultancy, and networking through various programs and expertises. Technically, the website is built on WordPress with modern SEO and cookie compliance plugins, featuring good mobile optimization and moderate performance. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though lacks published security policies and advanced security headers. Overall, the site is professional, trustworthy, and content-rich, but could improve privacy transparency and incident response readiness.

A

artEcho, s.r.o.

earch.cz

48

EARCH.cz is a Czech online magazine focused on architecture, design, and technology, operated by artEcho, s.r.o. The website offers a rich variety of content including articles, videos (EARCH.tv), job listings, and a catalog of firms and products related to the architecture industry. It maintains partnerships with several industry players, enhancing its market position as a reputable media outlet in the Czech Republic. The site targets architects, designers, and enthusiasts interested in modern architecture and related technologies. Technically, the website employs a modern technology stack including Laravel Livewire, Google Tag Manager, Google Adsense, and Plausible Analytics. The site is mobile-optimized with good SEO practices and moderate performance. However, some security headers are missing, and there is no visible cookie consent mechanism, which could be improved for better privacy compliance. From a security perspective, the site uses HTTPS with CSRF protection on forms, but lacks published security policies, incident response contacts, or vulnerability disclosure information. The absence of WHOIS data for the domain reduces trustworthiness and raises questions about domain registration legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional and trustworthy in content and design but would benefit from enhanced security headers, explicit privacy and cookie consent mechanisms, and transparency in domain registration. Strategic improvements in these areas would strengthen its security posture and compliance with GDPR requirements.

V

Via Aurea, s.r.o.

cityone.cz

49

CityOne is a Czech Republic-based platform operated by Via Aurea, s.r.o., focused on smart city solutions, projects, and expert networking. The website serves as a marketplace and information hub for smart city initiatives, covering sectors such as energy, transportation, ICT, and public services. It targets municipalities, urban planners, technology providers, and citizens interested in smart city development. The platform offers project showcases, product listings, expert profiles, news articles, and event calendars, facilitating collaboration and knowledge sharing in the smart city ecosystem. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Analytics, Google reCAPTCHA, and Google Maps API. The site is mobile-optimized with good navigation and content structure, though it appears to use a custom or proprietary CMS. Performance is moderate, and accessibility features are basic. Security best practices such as HTTPS and cookie consent mechanisms are implemented, but security headers are not detected, indicating room for improvement. From a security perspective, the site shows a good posture with encrypted connections and form protections via reCAPTCHA. However, the absence of WHOIS registrant data and lack of explicit privacy and security policies reduce overall trust. No vulnerabilities or malicious content were detected. Privacy compliance is partially addressed through cookie consent, but no dedicated privacy policy page was found. Overall, CityOne presents a professional and trustworthy platform for smart city stakeholders, but it would benefit from enhanced transparency in domain registration, explicit privacy and security policies, and improved security header implementation to strengthen its security posture and compliance.

I

INPRO

i2000.cz

45

INPRO is a Czech Republic-based education and training service provider specializing in courses, seminars, and consultancy. The website presents a professional and consistent brand image focused on expanding educational opportunities beyond traditional schooling. The target audience includes individuals and organizations seeking professional development and training services. Technically, the website is built on WordPress using the Avada theme and supports multilingual content via WPML. It employs Google Analytics and Tag Manager for user tracking and includes Google reCAPTCHA for form security. Security posture is moderate with HTTPS enabled and some security best practices observed, but lacks comprehensive security headers and a visible privacy policy. The absence of WHOIS data limits domain trust assessment, but the website content and structure suggest a legitimate business. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms pages. Overall, the site is safe, well-designed, and functional, but could improve transparency and security practices.

C

CIVINET Česká a Slovenská republika, z.s.

civinet.cz

45

CIVINET Česká a Slovenská republika, z.s. is a non-profit network affiliated with the European CIVITAS initiative, focused on promoting sustainable urban mobility in Czech and Slovak cities. The organization facilitates knowledge sharing, networking, educational events, and supports participation in international projects to improve local transport systems. The website reflects a professional and consistent brand presence with clear information about services and upcoming events. Technically, the site is built using modern frameworks such as Gatsby and React, with good mobile optimization and SEO practices. However, security posture could be improved by implementing security headers and verifying SSL configurations. Privacy compliance is well addressed with clear cookie consent and privacy policy pages. Overall, the site presents a trustworthy and credible resource for stakeholders in sustainable mobility.

L

Landa Ruhmkorf s.r.o.

landaruhmkorf.cz

47

Landa Ruhmkorf s.r.o. is a small Czech architectural firm specializing in landscape architecture and public space design. Founded in 2020 by Lukáš Landa and Simona Rühmkorf, the company positions itself as a conceptual and urbanism-integrated landscape architecture studio. Their website showcases project portfolios, team information, and collaborations with other architecture and design firms, indicating a professional and niche market presence. Technically, the website is built on the Cargo platform, uses modern web standards, and is mobile optimized, though it lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy or cookie policies, which are compliance gaps. No forms or analytics scripts are detected, reducing privacy risks but also limiting marketing insights. Overall, the domain registration aligns well with the business information, supporting legitimacy and trustworthiness.

A

Ateliér XTOPIX

xtopix.cz

44

Ateliér XTOPIX is a Czech architectural studio specializing in a wide range of projects including reconstruction of houses and brownfields for cultural purposes, new construction of schools and kindergartens, urbanism, and revitalization of central squares and public spaces in heritage zones. The website presents a professional portfolio showcasing various projects with rich visual content and clear navigation. Technically, the site is built on Joomla CMS using modern frameworks like UIkit and jQuery, with a responsive design and cookie consent mechanism implemented. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. The absence of WHOIS data and privacy policy pages slightly reduces trustworthiness. Overall, the site is well-maintained and serves its target audience effectively.

D

David Navrátil

younick.cz

49

The website www.younick.cz represents a small-scale freelance business operated by David Navrátil, specializing in graphic design, including logo creation, print materials, and website development. The site is professionally designed using modern web technologies such as Webflow and integrates Google Analytics for visitor tracking. The business targets clients seeking personalized design and web services primarily in the Czech Republic. Contact information is clearly provided, enhancing business credibility. Technically, the site is built on a modern platform with good mobile optimization and basic SEO practices. However, the absence of security headers and privacy policies indicates room for improvement in security and compliance. The WHOIS data is unavailable, which limits the ability to verify domain registration legitimacy and age, slightly reducing trustworthiness. Security posture is moderate with HTTPS enabled but lacking advanced security headers and privacy compliance mechanisms. No critical vulnerabilities were detected in the visible content. Overall, the site is safe for general audiences and does not contain any adult or questionable content. Recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and improving WHOIS transparency to enhance trust and compliance.

A

AUTONOVA BRNO s.r.o.

autonova.cz

48

AUTONOVA BRNO s.r.o. is an established automotive dealership and service provider based in Brno, Czech Republic, specializing in Škoda and Volkswagen vehicles as well as KTM and GasGas motorcycles. With over 50 years of experience and integration into the VIG group, the company offers a comprehensive range of services including new and used vehicle sales, servicing, financing, insurance, and vehicle inspections. The website reflects a professional and consistent brand image targeting consumers and businesses in the transportation sector within the Czech market. Technically, the website is built on WordPress with modern SEO and analytics tools, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site demonstrates high trustworthiness and business credibility, though WHOIS data is unavailable, limiting domain registration verification.

A

AUTONOVA BRNO s.r.o.

gasgasbrno.cz

46

AUTONOVA BRNO s.r.o. operates as an authorized dealer and service provider for GASGAS motorcycles in Brno, Czech Republic. The company offers a range of new motorcycles, original parts, accessories, and test rides for select models. Positioned as a specialized retailer in the transportation sector, the business targets motorcycle enthusiasts and riders seeking GASGAS products. The website reflects a professional retail model with clear contact channels and up-to-date product information. Technically, the site is built on WordPress with modern integrations such as Google reCAPTCHA and Google Tag Manager, ensuring a secure and user-friendly experience. Security posture is strong with HTTPS and consent mechanisms, though additional security headers and incident response details could enhance trust. The absence of WHOIS data limits domain legitimacy verification, but the website content and business information appear credible and consistent with an established small business. Overall, the site is well-structured, GDPR compliant, and provides a positive user experience with good SEO and mobile optimization.

R

REMspace Inc

remspace.net

49

REMspace Inc operates as a specialized research center focusing on REM sleep, lucid dreaming, sleep paralysis, and out-of-body experiences. The company provides educational content, free ebooks, videos, and offers a lucid dreaming mask and a mobile app to enhance user experience. Positioned as a leading entity in its niche, REMspace targets individuals interested in sleep technologies and consciousness exploration. The website is professionally designed, multilingual, and provides clear contact information including physical address and social media channels. Technically, the site is built on WordPress with WooCommerce, uses modern JavaScript libraries like Swiper.js, and integrates analytics tools such as Google Tag Manager and Yandex Metrica. Security posture is good with HTTPS enabled and no exposed sensitive data, though improvements are recommended in DNSSEC and security headers. Privacy compliance is adequate with policies published but lacks active cookie consent mechanisms. Overall, the site is trustworthy and well-maintained, suitable for its audience and business goals.

The website at www.arisf.sport is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The site lacks any visible business information, contact details, or user-facing content, which severely limits the ability to assess its business operations or market positioning. The WHOIS data is unavailable due to privacy protection or non-registration, further complicating legitimacy verification. Technically, the site uses basic HTML and CSS with Google Fonts but lacks modern frameworks or CMS indications. Security posture is weak due to the absence of security headers and no visible SSL configuration details. Overall, the site appears either under maintenance, misconfigured, or intentionally restricted, resulting in a low trust and credibility score.

E

Expediční kamera 2025 - Zažij dobrodružství na plátně tvého kina!

expedicnikamera.cz

41

Expediční kamera is a niche film festival focused on travel, adventure, and nature films, operating since 2009 primarily in the Czech Republic and Slovakia. It is organized by the website HedvabnaStezka.cz and features screenings at over 150 locations including cinemas, clubs, and cultural venues. The website presents a professional and consistent brand image with good content quality and user experience. Technically, it is built on WordPress with modern tools like Yoast SEO, Google Analytics, and Leaflet.js for maps. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit privacy and cookie policies, which are compliance gaps. No direct contact emails or phone numbers are provided, limiting direct communication channels. Overall, the site is trustworthy and well-positioned in its niche but could improve privacy compliance and security transparency.

S

Snow Film Fest

snowfilmfest.cz

41

Snow Film Fest is a well-established film festival focused on winter sports and outdoor adventure films, operating since 2011 and presented by the Czech magazine Svět outdooru. The website serves as a platform to showcase festival films, schedules, and locations, targeting enthusiasts of winter sports and outdoor activities primarily in the Czech Republic and neighboring regions. The festival has a stable market position with a network of local co-organizers and a consistent brand presence. Technically, the website is built on WordPress, leveraging common tools such as Google Analytics and MailerLite for marketing and analytics. The site is moderately optimized for performance and mobile devices, with good SEO practices implemented via Yoast SEO. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and explicit privacy and cookie policies, which are compliance gaps. Overall, the site is professional and trustworthy but could improve privacy compliance and security transparency.

F

Festival Obzory – Největší víkendová outdoorová akce v Praze! 2025

festivalobzory.cz

40

Festival Obzory is a prominent outdoor and travel festival held annually in Prague, Czech Republic, with the next event scheduled for November 7-9, 2025. The festival offers a rich program of 80 lectures, workshops, and films, targeting outdoor enthusiasts, travelers, students, and families interested in hiking, climbing, and adventure. The website serves as the main information and ticket sales platform, showcasing partners and sponsors, and providing event details. The business model centers on event organization and collaboration with partners and exhibitors.

V

VLTAVA LABE MEDIA a.s.

adactive.cz

42

VLTAVA LABE MEDIA a.s. operates a professional media and advertising platform in the Czech Republic, offering a variety of advertising formats across print and digital media. The company maintains a strong market position with a comprehensive portfolio including newspapers, magazines, online platforms, and event services. The website reklamy.vlmedia.cz serves as a dedicated portal for advertising formats, targeting advertisers and marketing professionals. Technically, the site employs modern web technologies such as Google Tag Manager, Bootstrap, and a responsive design approach, ensuring good mobile optimization and user experience. Privacy compliance is well addressed through the use of Didomi consent management and clear links to privacy and cookie policies. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data reduces domain trust slightly but does not detract from the overall legitimacy indicated by consistent branding and external references.

U

Unie zaměstnavatelských svazů ČR

uzs.cz

49

Unie zaměstnavatelských svazů ČR is a major Czech employers' association representing a broad spectrum of sectors including public services, healthcare, energy, education, and finance. The organization serves over 20,000 member organizations and nearly a million employees, positioning itself as a dominant voice in the Czech Republic's employer landscape. The website reflects this professional stature with clear navigation, sector-specific content, and partnership references. Technically, the site employs common web technologies such as jQuery, Google Tag Manager, and ShareThis for social sharing and analytics, indicating a moderate level of digital maturity. However, the absence of WHOIS data and lack of explicit privacy and security policies suggest areas for improvement in transparency and compliance. Security posture is moderate with HTTPS implied but missing explicit security headers and vulnerability disclosures. Overall, the site is safe, professional, and targeted at a general audience of employers and stakeholders.

A

Asociace institucí vzdělávání dospělých ČR, z.s.

aivd.cz

38

Asociace institucí vzdělávání dospělých ČR, z.s. is a leading professional association dedicated to the adult education sector in the Czech Republic. The organization focuses on uniting adult education institutions, advocating for their interests, and promoting quality standards in lifelong learning. Their services include membership management, organizing educational events and conferences, expert consulting, and publishing informational resources. The website reflects a medium-sized non-profit entity with a clear mission and target audience within the education sector. Technically, the website is built on an ASP.NET platform with a custom CMS provided by FlexiSystems s.r.o. It employs modern front-end libraries such as jQuery, Bootstrap, and Owl Carousel for UI components and Google Analytics for visitor tracking. The site is moderately optimized for performance and mobile responsiveness, though accessibility features are basic. SEO practices are present but could be enhanced. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks visible security headers and explicit privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS data limits domain trust verification, although the website content and contact information appear professional and legitimate. Overall, the site presents a trustworthy and professional image suitable for its sector, but improvements in privacy compliance, security headers, and WHOIS transparency are recommended to strengthen its security posture and regulatory adherence.

The website at eblida.org is currently inaccessible, returning a 403 Forbidden error page which blocks access to any substantive content. This prevents extraction of business, contact, or policy information from the site. The domain is registered with Gandi SAS since 1998, indicating a long-standing registration, but the lack of accessible content limits the ability to assess the organization's market position or services. Technically, the site lacks DNSSEC and security headers, and no analytics or tracking scripts are present in the HTML. The security posture is minimal due to the absence of visible security best practices, though the domain registration status provides some trust. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a poor user experience and limited transparency.

J

Jihočeská univerzita v Českých Budějovicích

jcu.cz

48

Jihočeská univerzita v Českých Budějovicích is a large public university in the Czech Republic offering a wide range of academic programs, research activities, and international cooperation. The website serves students, faculty, researchers, and partners with comprehensive information about faculties, study programs, research, and university governance. The digital infrastructure is built on Joomla CMS with modern frontend technologies such as UIkit and Bootstrap, providing a responsive and accessible user experience. Security posture is strong with HTTPS enforcement, security headers, and CSRF protections, although some security policy documentation and incident response contacts are not publicly available. Privacy and cookie policies are present and indicate GDPR compliance. The domain WHOIS data is unavailable due to privacy protection, which is common and justified for such institutions. Overall, the website is professional, trustworthy, and well-maintained.

A

Asociace malých a středních podniků a živnostníků České republiky (AMSP ČR)

amsp.cz

49

AMSP ČR is a well-established, politically independent association founded in 2001 that represents small and medium-sized enterprises, tradesmen, and professional groups in the Czech Republic. It serves as a key advocate and support organization for SMEs, providing consulting, legislative feedback, research, education, and networking services. The association operates multiple projects targeting digital transformation, family businesses, crafts, women entrepreneurs, and other SME-related themes. The website is professionally designed, content-rich, and targets Czech-speaking business audiences. Technically, the website employs modern web technologies including Google Tag Manager, Bootstrap, and Cookie Script for privacy compliance. It is mobile-optimized and uses HTTPS with strong security headers, indicating a good security posture. Analytics and tracking are implemented with user privacy considerations, including cookie consent mechanisms. Security-wise, the site demonstrates good practices such as HTTPS enforcement and security headers, but lacks publicly available security policies or incident response information. No vulnerabilities or suspicious content were detected. The absence of WHOIS data reduces trust slightly but does not detract significantly from the overall legitimacy given the professional presentation and clear contact information. Overall, AMSP ČR's website is a credible, secure, and well-maintained platform supporting Czech SMEs with comprehensive resources and partnerships. Strategic recommendations include publishing explicit security policies, incident response details, and enhancing accessibility features to further strengthen trust and compliance.

Č

Česká biskupská konference

cirkev.cz

49

Církev.cz is the official news portal of the Roman Catholic Church in the Czech Republic, operated by the Česká biskupská konference. It provides up-to-date news, interviews, podcasts, and cultural content targeted primarily at the Czech Catholic community and those interested in church affairs. The site also integrates an e-shop for religious literature and related products, supporting its media and informational mission. The portal enjoys a strong market position as the primary Catholic news source in the country, with consistent branding and a network of related domains enhancing its ecosystem. Technically, the website employs modern web technologies including Google reCAPTCHA for security, Facebook SDK for social integration, and lazy loading for performance optimization. The site is mobile-optimized with good accessibility and SEO practices, delivering a professional user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. From a security and compliance perspective, the site demonstrates GDPR compliance with a comprehensive privacy policy and cookie consent management. However, the absence of WHOIS registration data reduces domain trustworthiness from a registration standpoint. No critical vulnerabilities or adult content were detected, and the site is fully accessible without WAF or blocking mechanisms. Overall, Církev.cz presents a trustworthy, professional, and well-maintained digital presence for the Czech Catholic Church, with recommendations to enhance security headers and provide clearer contact information to further strengthen trust and compliance.

A

Agentura pro sociální začleňování

socialni-zaclenovani.cz

41

The website www.socialni-zaclenovani.cz represents the Agentura pro sociální začleňování, a government agency under the Ministry of Regional Development of the Czech Republic. It focuses on social inclusion and combating social exclusion in Czech municipalities. The site provides extensive information on projects, news, and localities involved in social integration efforts. Technically, the site is built on WordPress using the Avada theme and includes common plugins such as Slider Revolution and Ajax Search Lite. It integrates Google Analytics and Google Tag Manager for user tracking. Security posture is moderate with HTTPS enabled but lacks visible security headers and explicit incident response contacts. Privacy and cookie policies are not explicitly found, which may impact compliance. WHOIS data is unavailable, limiting domain legitimacy verification, but the content and government affiliation suggest a legitimate entity. Overall, the site is professional, content-rich, and serves a specialized government function.

E

European LEADER Association for Rural Development

elard.eu

47

The European LEADER Association for Rural Development (ELARD) is a well-established non-profit organization focused on improving rural life and promoting sustainable local development across Europe. With a network of 33 members and over 2,500 Local Action Groups, ELARD plays a significant role in advocacy, knowledge sharing, and project coordination in rural development. The website reflects this mission with comprehensive content, clear navigation, and a professional design. Technically, the site is built on WordPress using modern plugins and frameworks, with good SEO and mobile optimization. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not present. Overall, the site is trustworthy and aligns well with its stated business purpose.

Č

Česká škola bez hranic z.s.

csbh.cz

40

Česká škola bez hranic z.s. is a Czech non-profit organization dedicated to supporting Czech schools abroad and promoting Czech language and culture internationally. The website serves as a hub for information about their activities including international conferences, language olympiads, translation competitions, webinars, and educational resources. The organization targets Czech expatriates, educators, parents, and children interested in maintaining Czech education outside the Czech Republic. Established in 2009, it holds a reputable position within its niche educational sector. Technically, the website is built on WordPress 6.7.4 using the Gridlove theme and several Meks plugins to enhance functionality. It is hosted on opalstack.com and uses HTTPS with a moderate performance profile. The site is mobile-optimized and has good SEO practices, though accessibility features are basic. Analytics are handled via Jetpack Stats with minimal user tracking. From a security perspective, the site benefits from HTTPS and does not expose sensitive data or use vulnerable libraries visibly. However, it lacks important security headers and does not publish security policies or incident response contacts. Privacy compliance is weak as no privacy or cookie policies are found, and no consent mechanisms are implemented. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy for its audience but would benefit from improved privacy compliance and security hardening. Strategic recommendations include implementing privacy and cookie policies, adding security headers, publishing a security policy with incident response contacts, and regular security audits to maintain trust and compliance.

M

Městský úřad Zábřeh

zabreh.cz

48

The website zabreh.cz serves as the official online presence of the municipal government of Zábřeh, Czech Republic. It provides residents and visitors with comprehensive information about the town, including news updates, event calendars, official notices, and contact details for municipal offices. The site targets local citizens and stakeholders seeking administrative and community information. The business model is that of a government entity focused on public service delivery and community engagement. Technically, the site is built on the vismoWeb5 CMS platform and employs modern web technologies such as HTML5, CSS3, JavaScript, and integrates Google services including Analytics and reCAPTCHA. The site demonstrates good mobile optimization, accessibility features, and SEO practices, ensuring a positive user experience across devices. From a security perspective, the site uses HTTPS with a good SSL configuration and includes security best practices such as Google reCAPTCHA on forms and cookie consent mechanisms compliant with GDPR. However, explicit security headers like Content-Security-Policy are not evident, and no formal security or incident response policies are published. No vulnerabilities or suspicious content were detected. Overall, zabreh.cz is a trustworthy and professionally maintained municipal website with strong content quality and technical implementation. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.