Security Directory

S

STACHEMA CZ s.r.o.

stachema.cz

63

STACHEMA CZ s.r.o. is a well-established Czech company specializing in the supply of construction chemicals and technological solutions for professional builders. With a market presence since 1998 and over 650 sales points across the Czech Republic, it holds a leading position in its sector. The website reflects a professional B2B and B2C e-commerce model, supported by a modern technical infrastructure including Vue.js and React frameworks, and integrated analytics via Google Tag Manager. The company is part of the DEK group, enhancing its market credibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the website is trustworthy, well-branded, and compliant with GDPR requirements.

D

Dlabka Distillery

dlabka.cz

50

Dlabka Distillery operates a professional e-commerce website specializing in the sale of distilled spirits such as gin, whisky, and liqueurs. The business targets adult consumers primarily in the Czech Republic, offering a curated selection of products with clear pricing and stock information. The website demonstrates a mature digital presence with modern technologies including Google Analytics 4 and Facebook Pixel for marketing and analytics purposes. The platform is built on the Upgates e-commerce system and uses the Nette framework for form validation and other backend functionalities. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, although HTTP security headers are not visibly configured. The absence of WHOIS data limits domain trust assessment, but the overall site professionalism and content quality suggest a legitimate and trustworthy business. Strategic improvements include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to strengthen trust and compliance.

Bovys s.r.o is a Czech Republic based medium-sized wholesale distributor specializing in fresh fruit and vegetables. Established in 1994, the company supplies a wide range of clients including retail stores, restaurants, hotels, school canteens, and other gastronomy operations. It holds a leading position as a supplier for school projects such as 'Ovoce a zelenina do škol' and 'Mléko do škol'. The company emphasizes quality control through HACCP systems and sustainability initiatives including a photovoltaic power installation co-financed by the EU. Technically, the website is built on WordPress with modern plugins and includes security features like HTTPS and Google reCAPTCHA. However, the absence of WHOIS registration data raises some concerns about domain legitimacy. Overall, the website is professional, well-structured, and compliant with privacy regulations, but could improve security headers and domain transparency.

GASTRO PRODUCTION s.r.o. is a Czech-based manufacturing company specializing in stainless steel catering equipment and custom project solutions for the hospitality industry. With over 35 years of experience and a strong presence in the EU market, the company offers a broad portfolio including cooling, heating, and neutral equipment. Their business model focuses on delivering tailored solutions with a commitment to quality and customer satisfaction. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting business clients in hospitality and catering sectors. Technically, the site is built on WordPress using modern libraries and frameworks such as Bootstrap and jQuery, providing a moderate performance and good mobile optimization. However, there is room for improvement in accessibility and SEO optimization. Security posture is basic with HTTPS enabled but lacking important security headers and cookie consent mechanisms, which may affect compliance with privacy regulations. No incident response or security policy information is provided, indicating potential gaps in security governance. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the company.

M

Miroslav Lörincz

snubniprstenyjinak.cz

42

The website snubniprstenyjinak.cz represents a small artisan jewelry business operated by Miroslav Lörincz, specializing in original and unconventional wedding rings handcrafted with personal inspiration from couples. The business targets couples seeking unique wedding rings with a personal touch, offering services such as personal consultations, trial silver models, and registered hallmark authenticity. The website content is primarily in Czech with an English version available, reflecting a localized market focus in the Czech Republic. Technically, the website uses basic web technologies including HTML, CSS, JavaScript, and jQuery. It is hosted by a Czech registrar and hosting provider REG-ZONER. The site shows moderate performance and basic mobile optimization but lacks modern security features such as HTTPS and security headers. There is no evidence of CMS usage or advanced frameworks, indicating a simple custom-built site. From a security perspective, the site lacks HTTPS, privacy and cookie policies, and contact information for security or incident response. No security headers or vulnerability disclosures are present. The absence of these elements indicates a low security maturity level and potential compliance gaps with GDPR and other regulations. No tracking or analytics scripts are detected, suggesting minimal user data collection. Overall, the website is functional and provides good content quality and user experience for its niche artisan business. However, it requires significant improvements in security posture, privacy compliance, and contact transparency to enhance trustworthiness and regulatory adherence. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving mobile responsiveness, and providing clear contact information.

B

BOMA Milevsko

bomamilevsko.cz

55

BOMA Milevsko is a well-established Czech company specializing in heating and plumbing services, including installation of boilers, heat pumps, solar systems, and ventilation with heat recovery. Founded in 1993, the company has a strong regional presence with over 30 years of experience and a customer base exceeding 1000 clients, particularly known for assisting with Kotlíkové dotace subsidies. Their business model combines service provision with retail and wholesale sales, supported by an e-shop and a bathroom studio for customer consultations. Technically, the website is built on WordPress using the Mioweb theme, hosted by websupport.cz. It employs modern web technologies such as jQuery and Google Fonts, and is mobile-optimized with good SEO practices. The site includes a cookie consent mechanism compliant with GDPR, but lacks some advanced security headers and explicit privacy/security policy pages. From a security perspective, the site uses HTTPS and has no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security headers and incident response contact information, which are recommended for improved security posture. No WAF or blocking mechanisms were detected, and the domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website is professional, trustworthy, and compliant with privacy regulations, but could benefit from enhanced security practices and more transparent contact information to further strengthen user trust and security readiness.

1

1188

1188.cz

59

1188.cz is a Czech Republic-based telecommunications service provider specializing in 24/7 telephone directory assistance and information services. The company offers a nonstop hotline (1188) that helps users find phone numbers, business hours, traffic updates, and service providers. The website is built on Drupal 11 and employs modern web technologies to deliver a responsive and user-friendly experience. While the site is professionally designed and content-rich, it lacks explicit privacy and cookie policies, as well as security incident response information. The domain is well-established since 2006, indicating a stable business presence. Security posture is moderate with HTTPS usage but missing security headers and vulnerability disclosures.

S

Svazek obcí Milevska

sdruzeni-milevsko.cz

49

Svazek obcí Milevska is a regional association of municipalities in the Czech Republic providing official information, shared services, and community engagement for its member municipalities. The website serves as an official portal offering access to documents, event calendars, contact details, and news updates relevant to local governance and residents. Technically, the site employs a modern JavaScript stack including jQuery, Bootstrap, Swiper, and Leaflet for mapping, hosted likely on a CMS platform called Galileo. The site is mobile-optimized and provides a cookie consent mechanism, reflecting some privacy awareness. Security posture is generally good with HTTPS enforced, but lacks some security headers and formal privacy policy documentation. WHOIS data is missing, which reduces domain trust but the website content and contact information appear legitimate and consistent with a government association. Overall, the site is functional, professional, and trustworthy for its intended audience.

M

Městys Sepekov

sepekov.cz

45

Městys Sepekov operates an official municipal website serving the local community of Sepekov in the Czech Republic. The site provides comprehensive information about local government services, cultural events, public notices, and community resources. It targets residents and visitors seeking official municipal information and services. The website is well-structured with clear navigation and up-to-date content, reflecting a professional government entity. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Swiper.js, and Mmenu.js, built on a CMS platform likely named Lego2. The site is mobile-optimized, accessible, and uses HTTPS to secure communications. While some security headers are not explicitly detected, the site follows good practices such as cookie consent and no visible sensitive data exposure. From a security perspective, the site shows a mature posture with no evident vulnerabilities or exposed sensitive information. GDPR compliance is indicated by a privacy statement and cookie consent mechanism. The WHOIS data is unavailable due to EURid privacy policies, but the domain and website content align with a legitimate municipal government entity. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Recommendations include enhancing security headers and maintaining up-to-date third-party libraries to further improve security and compliance.

O

Obecní úřad Kovářov

kovarov.cz

53

Obec Kovářov operates an official municipal website serving the local community and visitors with comprehensive information about the municipality, including news, official announcements, event calendars, and contact details. The site targets residents and stakeholders interested in local governance and community activities. The business model is public service-oriented, providing transparency and accessibility to municipal resources. The website is well-branded and consistent with government sector standards, reflecting a small-sized municipal entity in the Czech Republic with a long historical background dating back to 1220. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, Swiper.js, and Mmenu.js, indicating a moderate level of digital maturity. The site is mobile-optimized and accessible, with good SEO practices and a custom CMS platform likely provided by Galileo Corporation. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were found in the content. The absence of WHOIS data limits domain trust verification, but the official nature of the site and presence of contact information mitigate concerns. Overall, the security posture is adequate but could be improved with additional headers and incident response disclosures. The overall risk assessment is low, with recommendations to enhance privacy policy visibility, implement security headers, and publish vulnerability disclosure information to strengthen trust and compliance. The site is safe for general audiences and does not contain any adult or questionable content.

O

Obec Chyšky

chysky.cz

49

Obec Chyšky operates as the official municipal government website for the Chyšky municipality in the Czech Republic. It provides residents and visitors with comprehensive information about local government activities, cultural events, public notices, and community services. The website is designed to serve as a central hub for municipal communication and transparency. Technically, the site employs modern web technologies including jQuery, Bootstrap, and Swiper, ensuring a responsive and accessible user experience. The presence of privacy and cookie policies indicates attention to regulatory compliance, particularly GDPR. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and incident response information, which could be improved. The absence of WHOIS data is a notable anomaly, potentially due to registry policies, but the website content and contact details strongly support its legitimacy as a government entity. Overall, the site is well-structured, trustworthy, and serves its intended audience effectively.

Město Milevsko operates an official municipal website serving residents and visitors with comprehensive information about local government services, events, public notices, and administrative contacts. The site features a reservation system for official documents and maintains active social media channels. The presence of ISO 50001 certification indicates a commitment to energy management standards. Technically, the website employs modern frameworks such as Foundation and jQuery, integrates Google Analytics for visitor tracking, and enforces HTTPS with a Content Security Policy header. Accessibility and mobile responsiveness are well addressed, providing a good user experience. Security posture is solid but could be enhanced with additional headers and policies. Privacy compliance is supported by a cookie consent banner and a privacy statement, though no terms of service or vulnerability disclosure policies are found. The absence of WHOIS data limits domain transparency but does not detract from the site's apparent legitimacy as a government entity. Overall, the website is professional, trustworthy, and well-suited to its public service role.

Transoft Solutions is a well-established company specializing in innovative software and services for transportation professionals, including aviation, civil infrastructure, and safety operations. With over 30 years of experience and a global user base spanning 150 countries, the company targets government agencies and engineering firms. The website reflects a mature digital presence with multilingual support and professional branding. Technically, the site is built on WordPress with modern SEO and accessibility features, though some security headers are missing. The security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of WHOIS data and explicit security policies suggests areas for improvement. Overall, the site is trustworthy and professional but would benefit from enhanced transparency and security documentation.

V

VINCI Energies

vinci-energies.com

72

VINCI Energies is a large enterprise specializing in multi-technical, customized solutions and services dedicated to energy, transport, communication infrastructures, buildings, factories, and IT systems. It operates internationally with a strong brand presence and multiple subsidiaries such as Omexom, Actemium, Axians, and VINCI Energies Building Solutions. The website reflects a mature digital infrastructure with WordPress CMS, modern JavaScript libraries, and privacy-respecting analytics via Matomo. GDPR compliance and cookie consent mechanisms are well implemented, indicating strong privacy awareness. Security posture is solid with HTTPS and a dedicated CSIRT page, though some security headers could be improved. WHOIS data is unavailable, which slightly impacts trust but the overall corporate presence and content quality support legitimacy.

B

Bentley Systems

bentley.com

71

Bentley Systems is a leading global provider of infrastructure engineering software, serving architects, engineers, constructors, and owner-operators. The company offers comprehensive solutions to advance infrastructure projects across multiple sectors including transportation, energy, and urban development. Their website reflects a mature enterprise with a strong global presence, supported by multiple localized domains and professional branding. The digital infrastructure leverages modern web technologies such as WordPress, Elementor, and advanced marketing and analytics tools like Marketo and Visual Website Optimizer, indicating a sophisticated digital marketing and customer engagement strategy. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data suggests privacy protection or proxy registration, which is common for enterprises but should be monitored for consistency. Overall, the website is professional, secure, and compliant with privacy regulations, targeting a broad professional audience in the infrastructure engineering domain.

U

UNIPEX CZ s.r.o.

unipex.cz

48

UNIPEX CZ s.r.o. is a Czech Republic-based IT company established in 2000, specializing in custom software development, ERP HELIOS iNuvio implementation, e-commerce solutions, and IT infrastructure services. The company targets manufacturing, commercial, and IT firms, providing comprehensive IT services with a team of certified experts. Their market position is that of a trusted regional IT partner with long-term client relationships and recognized certifications such as Microsoft Silver Partner and Internet Effectiveness Awards. Technically, the website employs modern web technologies including .NET and JavaScript, with Google Tag Manager for analytics and marketing. The site is well-designed, mobile-optimized, and provides clear navigation and professional content. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks visible HTTP security headers and explicit security policies. WHOIS data is unavailable, which raises some trust concerns, but the website content and business information appear legitimate and professional. Overall, the site demonstrates a good level of digital maturity and business credibility with room for security improvements.

Č

ČEVAK a.s.

vodarenskavezcb.cz

59

Vodárenská věž is a public water tower and tourist attraction located in České Budějovice, Czech Republic, operated by ČEVAK a.s., a regional water utility company. The website serves as an informational and promotional platform for visitors, offering details about tours, events, and the history of the tower. The site is well-structured, visually appealing, and provides clear contact information and social media links, enhancing visitor engagement and trust. Technically, the website uses modern web technologies including Google Maps API for location services and Google Tag Manager for analytics, with a cookie consent mechanism ensuring GDPR compliance. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be added for improvement. The absence of WHOIS data limits full domain trust assessment, but the website content and contact details strongly indicate legitimacy. Overall, the site is a reliable and professional digital presence for the Vodárenská věž attraction.

F

FG Forrest, a.s.

vodapodkontrolou.cz

60

The website vodapodkontrolou.cz represents a professional water consumption monitoring service operated by FG Forrest, a.s., targeting households, entrepreneurs, and large companies primarily in the Czech Republic. The service offers continuous monitoring of water usage with customizable alarms and notifications to prevent water damage and reduce costs. The business model is subscription-based with monthly tariffs and a one-time installation fee, requiring no purchase of hardware by the customer. Technically, the website employs modern web technologies including JavaScript, jQuery, Google Tag Manager, and Google Maps API. The site is mobile-optimized, accessible, and SEO-friendly with comprehensive metadata and multilingual support. Performance is moderate with good user experience and clear navigation. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. Cookie consent mechanisms and privacy policies are implemented in compliance with GDPR. However, explicit security policies and incident response contacts are not found, and security headers appear to be missing or not detected. Overall, the website is trustworthy and professionally maintained, though the absence of WHOIS data reduces transparency regarding domain registration. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include enhancing security headers, publishing incident response information, and improving domain registration transparency.

S

STS Education

sts-education.be

64

STS Education is an established education service provider based in Belgium, specializing in facilitating secondary education programs for international students seeking study opportunities in countries such as the United States, United Kingdom, and Ireland. The company positions itself as a trusted facilitator for students aiming to experience international schooling adventures. The website reflects a professional and consistent brand image, targeting international secondary students with clear program offerings and support services. Technically, the website is built on WordPress with modern frameworks like Bootstrap and employs SEO best practices through Yoast SEO. It integrates multiple analytics and advertising pixels, indicating a mature digital marketing approach. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms compliant with GDPR, and includes standard security headers, though it lacks a publicly visible security policy or incident response contact. The WHOIS data is restricted due to registry policy, but no suspicious indicators were found. Overall, the site demonstrates a good security posture and digital maturity appropriate for its business domain.

D

DER Touristik CZ a.s.

fischergroup.cz

54

DER Touristik CZ a.s. operates as a major travel and tourism company in the Czech Republic, consolidating several well-known brands such as EXIM tours, FISCHER, NEV-DAMA, and eTravel. The company offers a wide range of vacation packages including beach holidays, skiing trips, family vacations, and online travel booking services. As part of the REWE Group, a large German retail and tourism conglomerate, DER Touristik CZ holds a strong market position in the Czech travel industry. The website reflects a professional and consistent brand image targeting Czech consumers seeking diverse travel experiences. Technically, the website employs modern JavaScript libraries, Google reCAPTCHA for bot protection, and Usercentrics for GDPR-compliant consent management, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, although some security headers and explicit incident response information are missing. Overall, the site is safe, well-structured, and compliant with privacy regulations, but the absence of WHOIS data and contact emails slightly reduces trustworthiness.

D

DER Touristik CZ a.s.

dertouristik.cz

54

DER Touristik CZ a.s. is a major Czech travel company operating multiple well-known brands such as FISCHER, EXIM tours, NEV-DAMA, and eTravel. It is part of the German REWE Group, a leading European retail and tourism conglomerate. The company offers a broad range of travel services including beach vacations, ski holidays, family travel, and online booking options, targeting Czech consumers seeking quality holiday experiences. The website reflects a professional and consistent brand presence with clear contact information and social media engagement. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and a consent management platform to comply with privacy regulations. Security posture is solid with HTTPS and bot protection, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable, limiting domain registration trust analysis, but the business affiliation and content support legitimacy.

M

Mathesio

mathesio.cz

51

Mathesio is a Czech technology company specializing in creative IT solutions including web applications, technological solutions, business process optimization, and design. With a team of 15 developers, they serve government ministries, corporate clients, and startups. Their website reflects a professional and consistent brand image, with content primarily in Czech and an English alternate domain available. The company has been operating since 2013, which aligns with the domain registration date, indicating a stable business presence. Technically, the website is built on WordPress and leverages a broad technology stack including JavaScript frameworks (React, AngularJS), PHP frameworks (Nette, CodeIgniter), Java technologies (Spring, Hibernate), and others. The site is mobile optimized and uses modern web standards, though performance is moderate. Analytics and tracking are implemented via Google Analytics and Facebook Pixel, but no cookie consent mechanism is present. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and published security policies. No forms or sensitive data collection points were detected on the homepage. Privacy and cookie policies are missing, which is a compliance gap especially for GDPR. Contact information is minimal, limited to a Facebook page link, reducing direct communication channels. Overall, Mathesio presents as a credible small technology firm with a solid technical foundation but with room for improvement in privacy compliance, security best practices, and transparency of contact and policy information.

D

Darkmay s.r.o.

cestovnisystem.cz

56

Darkmay s.r.o. operates the CeSYS platform, a comprehensive SaaS solution for travel agencies primarily in the Czech Republic and neighboring countries. The platform offers multiple products including search engines, web design, sales management, and marketing tools tailored for travel agencies. With over 16 years of market presence and partnerships with major travel industry players, CeSYS holds a strong position in its niche. The website demonstrates a mature technical infrastructure leveraging modern web technologies and analytics tools with user consent mechanisms. Security posture is generally good with HTTPS and consent-based tracking, though explicit privacy and security policies are lacking. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

NAVRCHOLU.cz is a Czech web traffic monitoring and ranking platform operated by Internet Info s.r.o., established in 1997. The service provided rankings and visitor statistics for Czech websites but ceased active measurement as of January 31, 2021, now offering only historical data. The website targets Czech internet users, website owners, and digital marketers interested in web traffic insights. The business model focused on providing traffic analytics and rankings, positioning itself as a long-standing player in the Czech digital media space. Technically, the site uses standard web technologies including JavaScript, jQuery, Google Tag Manager, and Google Analytics, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial, with privacy and cookie policies present but no explicit consent mechanisms. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

G

GO Česká republika, s.r.o.

sumavago.cz

44

ŠUMAVAGO is a regional tourism portal operated by GO Česká republika, s.r.o., providing comprehensive information and booking services for accommodation and activities in the Šumava region of the Czech Republic. The website targets tourists and visitors interested in outdoor activities, lodging, and local events. It offers a variety of services including hotel and pension bookings, maps, galleries, and event calendars, positioning itself as a key regional tourism resource. Technically, the site uses a traditional web stack with HTML, CSS, JavaScript, jQuery, and integrates Google Analytics and Facebook SDK for marketing and tracking. However, it still relies on deprecated Flash content, which impacts modern compatibility and security. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal privacy or cookie policies, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and professional but would benefit from modernization and improved privacy and security practices.

U

UNIWEB s.r.o.

regionplzen.cz

51

REGIONPLZEN.CZ is a well-established regional news and information portal serving the Plzeňský kraj region in the Czech Republic. Operated by UNIWEB s.r.o., the portal offers daily news, a business directory, event calendars, job listings, and regional advertising services. The website targets local residents and businesses, providing relevant and timely regional content. The portal has a consistent brand presence and is supported by a parent media group, REGION24.CZ.

R

Region24

region24.cz

53

Region24 is a Czech regional media group operating a network of regional online news portals and thematic websites, reaching over one million users annually. The business model focuses on regional news publishing, online advertising, and SEO services. The website is professionally designed with consistent branding and clear navigation, targeting a general audience interested in regional news across multiple Czech regions. Technically, the site uses modern front-end technologies including Bootstrap and jQuery, hosted by Active24, with moderate performance and good mobile optimization. Security posture is moderate with HTTPS assumed and no visible exposed sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and legitimate, supporting the business credibility. Strategic improvements in privacy compliance and security practices are recommended to enhance trust and compliance.

B

Budapesti Zsidó és Izraeli Filmfesztivál

zsifi.org

53

The Budapest Jewish and Israeli Film Festival website serves as the official digital presence for an established cultural event celebrating Jewish and Israeli cinema. The festival, with over a decade of history, targets community members and film enthusiasts, emphasizing cultural storytelling and community togetherness. The website is professionally designed using WordPress and common plugins, providing a good user experience with clear navigation and mobile optimization. Privacy and cookie consent mechanisms are implemented, reflecting compliance with GDPR standards. Security posture is adequate with HTTPS enabled, though improvements such as enabling DNSSEC and adding security headers are recommended. The domain registration data aligns well with the festival's history, supporting legitimacy and trustworthiness.

N

Net Magnet s.r.o.

netmagnet.cz

44

Net Magnet s.r.o. is a Czech digital agency specializing in custom web development, web applications, e-shops, and online marketing services such as PPC, SEO, and CRO. With over 15 years of experience and more than 150 satisfied clients, the company positions itself as a trusted partner for businesses seeking to enhance their online presence and customer acquisition. Their service offerings include website audits and free consultations, emphasizing strategic and tailored solutions. The website is professionally designed, mobile-optimized, and rich in client testimonials and certifications, reflecting a mature digital presence. Technically, the website is built on WordPress and leverages modern JavaScript libraries and tracking tools including jQuery, Modernizr, ScrollMagic, Google Tag Manager, Facebook SDK, and Leady tracking. The site employs HTTPS with a Content Security Policy header, though additional security headers could improve its security posture. Performance is moderate with good mobile optimization and SEO practices. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Security-wise, the site demonstrates good practices such as secure form handling and HTTPS enforcement but could benefit from enhanced security headers and explicit incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain trust slightly, but the overall business credibility and transparency mitigate this concern. Overall, Net Magnet presents a professional, trustworthy, and technically competent digital agency website with minor areas for security and privacy improvement. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing security policies, and regular third-party script audits to maintain compliance and trust.

Jihočeská centrála cestovního ruchu is a government-affiliated regional tourism organization responsible for coordinating and promoting tourism in the South Bohemian region of the Czech Republic. Established in 2003, it serves as the destination management organization, supporting both domestic and inbound tourism through project management, statistical analysis, and marketing activities. The website reflects a professional and consistent brand presence targeting tourists and regional stakeholders. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and jQuery, with integration of Facebook Pixel for marketing analytics. The site is hosted by Active24, a reputable provider, and demonstrates good mobile optimization and SEO practices. However, no CMS or advanced frameworks are explicitly detected. From a security perspective, the site uses HTTPS with excellent SSL configuration and no visible vulnerabilities or exposed sensitive data. Security headers are not explicitly detected, and there is no published security policy or incident response information. Privacy compliance is partially addressed with a GDPR policy page but lacks a cookie consent mechanism. User tracking is moderate due to Facebook Pixel usage. Overall, the website is trustworthy, well-maintained, and aligned with its government role. Strategic improvements include implementing cookie consent, enhancing security headers, publishing security policies, and improving accessibility to strengthen compliance and user trust.

T

Turistický spolek Lipenska

tslipenska.cz

43

Turistický spolek Lipenska is a certified regional destination organization focused on promoting and developing tourism in the Lipensko area of the Czech Republic. Founded in 2016, it serves as a non-profit entity that unites local municipalities, businesses, and interest groups to enhance the region's attractiveness and quality of life for residents. The organization operates the tourist web Lipensko.cz, providing comprehensive regional information and services to visitors and locals alike. Technically, the website is built on WordPress with popular plugins and themes, offering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site presents a trustworthy and professional image aligned with its business purpose.

S

Statutární město České Budějovice

c-budejovice.cz

51

The website www.c-budejovice.cz serves as the official online presence of the statutory city of České Budějovice, Czech Republic. It provides comprehensive information about city governance, public services, news, cultural events, and municipal resources targeted at residents, visitors, and local businesses. The site is well-branded with official logos and maintains consistent messaging aligned with its government function. The presence of social media links and a cookie consent mechanism indicates a commitment to user engagement and regulatory compliance. Technically, the site is built on the Drupal CMS platform, leveraging common web technologies such as jQuery, Google Analytics, and JW Player for multimedia content. The site is mobile-optimized with a moderate performance profile and basic accessibility features. However, some security best practices such as HTTP security headers are not visibly implemented, and WHOIS data for the domain is missing, which raises some concerns about domain registration transparency. From a security perspective, the site uses HTTPS and anonymizes IP addresses in analytics, which are positive indicators. The cookie consent banner complies with EU regulations, but there is no visible security policy or incident response information. No vulnerabilities or malware indicators were detected in the content. Overall, the site presents a moderate security posture with room for improvement in transparency and technical security controls. The overall risk assessment is moderate with a recommendation to verify domain registration details, implement additional security headers, and publish clear security and privacy policies. These steps would enhance trust and compliance, supporting the city’s digital service delivery and citizen engagement objectives.

N

NexGen IT s.r.o.

nexgen.cz

48

NexGen IT s.r.o. is a digital studio based in České Budějovice, Czech Republic, specializing in web design, software development, 3D visualization, and corporate identity services. The company serves clients domestically and internationally, including countries such as Slovakia, Germany, Austria, and Australia. Their business model combines service provision with the development of proprietary digital products like DMS, CMS, CRM, and an attendance system called NexDOS. The website presents a professional portfolio and client references, indicating a solid market position in the technology sector. Technically, the website employs modern JavaScript libraries including jQuery, FontAwesome, GSAP for animations, and integrates Google Maps API. The site is moderately optimized for performance and mobile responsiveness, with basic accessibility and SEO features. However, there is no detected CMS or explicit hosting provider information. The site lacks explicit privacy, cookie, and terms of service policies, which impacts compliance and user trust. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, no security headers were detected, and there is no vulnerability disclosure or incident response information available. The absence of WHOIS data for the domain is a significant concern, reducing the trustworthiness of the domain registration and raising questions about legitimacy. No WAF or blocking mechanisms were detected, and the content is fully accessible. Overall, the website is professionally designed and functional, but the lack of WHOIS transparency and privacy compliance documentation lowers its security and compliance posture. Strategic improvements in security headers, privacy policies, and domain registration transparency are recommended to enhance trust and compliance.

O

Obec Borová Lada

borova-lada.cz

37

Obec Borová Lada operates an official municipal government website serving the local community and visitors. The site provides comprehensive information about the municipal office, local services, tourism, public notices, and contact details. It targets residents and entrepreneurs in the Borová Lada area, positioning itself as a trusted local government resource. The business model is public sector focused, delivering essential civic information and services online. Technically, the website employs standard web technologies including jQuery, Google Analytics, Google Tag Manager, and Fancybox for UI enhancements. Hosting and web design are provided by ŠumavaNet.CZ. The site is moderately performant, mobile-optimized, and accessible with good SEO practices. Cookie consent mechanisms are implemented, though a dedicated privacy policy page is missing. From a security perspective, the site uses HTTPS and includes cookie consent but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain legitimacy verification, but the website content and structure indicate a legitimate municipal entity. Overall, the website is professional, trustworthy, and serves its public sector purpose well. Strategic improvements include publishing a privacy policy, enhancing security headers, and providing incident response information to strengthen compliance and security posture.

R

RRAS o.p.s.

bilastopa.cz

32

Bílá stopa is a Czech regional website dedicated to providing comprehensive information about cross-country skiing trails in the Šumava region. It offers current trail conditions, maps, webcams, and financing details, targeting skiing enthusiasts and tourists interested in outdoor winter activities. The website is supported by regional partners including local government and tourism organizations, enhancing its credibility and community focus. Technically, the site is built on WordPress with a modern tech stack including jQuery, Bootstrap, and several plugins for content management and GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS and implements a cookie consent mechanism, but lacks visible HTTP security headers and formal security policies. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable security posture. Overall, the site is trustworthy and serves its niche audience effectively, though improvements in privacy policy transparency and security headers are recommended.

K

KRASIM TOUR, spol. s.r.o.

krasimtour.cz

48

KRASIM TOUR, spol. s.r.o. is a Czech travel agency specializing in holiday packages to popular destinations such as Bulgaria, Greece, Turkey, and exotic locations worldwide. Established in 2006, the company offers a comprehensive range of services including accommodation bookings, various transport options, travel insurance, and parking services at departure points. The website is well-structured, professionally designed, and targets Czech-speaking customers seeking vacation travel solutions. The company maintains a solid market position with over 30 years of experience and trust indicators such as insurance certification and a guarantee fund. Technically, the website employs modern web technologies including jQuery, Lightbox2, Google reCAPTCHA, and a chat widget for customer support. It uses a Content Security Policy and enforces HTTPS, reflecting a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. SEO and accessibility are adequately addressed, though accessibility could be further improved. From a security perspective, the site demonstrates good practices with HTTPS, CSP headers, and anti-bot measures. Cookie consent and privacy policies are implemented in compliance with GDPR. However, explicit security policies and incident response contacts are not found, representing an area for enhancement. No vulnerabilities or suspicious activities were detected. Overall, the website presents a low-risk profile with strong business credibility and a good security posture. Strategic recommendations include adding a dedicated security policy page, incident response contact information, and a vulnerability disclosure mechanism to further enhance trust and compliance.

E

Exim

eximtours.cz

54

EXIM tours is a well-established Czech travel agency specializing in worldwide package tours, last minute deals, and specialized travel services for families, couples, and seniors. The company operates under the DER Touristik group, positioning itself as a leading player in the Czech travel market. The website reflects a mature digital presence with modern technologies such as Vue.js, Google Tag Manager, and Usercentrics for privacy compliance. Security measures include HTTPS enforcement and bot protection via Google reCAPTCHA, although explicit security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. The absence of WHOIS data due to privacy protection is typical for such businesses and does not detract from the site's legitimacy. Overall, EXIM tours demonstrates a professional and trustworthy online presence suitable for its market segment.

F

Fischer

fischer.cz

55

CK FISCHER is a prominent Czech travel agency specializing in holiday packages, including last minute and first minute offers, with a strong loyalty program (DERCLUB). The company operates under the parent company DER Touristik CZ a.s., part of the REWE Group. The website targets general consumers seeking quality vacation services primarily in the hospitality sector. Technically, the site uses modern JavaScript frameworks (Vue.js), integrates Google Analytics, Google Tag Manager, Usercentrics for consent management, and reCAPTCHA for bot protection. The site is mobile optimized and has good SEO practices. Security posture is solid with HTTPS and consent mechanisms, but lacks some advanced security headers and explicit security policies. WHOIS data is missing, which reduces domain trust assessment confidence but the business presence and branding indicate legitimacy. Overall, the site is professional, user-friendly, and compliant with privacy regulations.

E

Eventgroove

eventgroove.com

62

Eventgroove operates an all-in-one platform specializing in event ticketing, fundraising, and ecommerce solutions tailored for nonprofits, event organizers, and distributed organizations. The website presents a professional and modern interface, leveraging WordPress with Divi theme and NitroPack for performance optimization. The platform integrates various marketing and analytics tools such as Google Tag Manager and HubSpot, indicating a mature digital marketing strategy. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are lacking. The absence of WHOIS data for the domain raises concerns about registration transparency, which slightly diminishes overall trust. Strategic recommendations include publishing comprehensive privacy and cookie policies, enhancing security headers, and providing clear contact and incident response information.

P

PANKREA s.r.o.

pankrea.cz

54

PANKREA s.r.o. is a small creative PR agency based in the Czech Republic specializing in public relations, corporate identity, web design, marketing, and custom programming services. The company targets businesses seeking to build and promote their brand identities through professional web presence and marketing communication. The website presents a professional image with clear service offerings and client references, positioning PANKREA as a creative and expert partner in the media and marketing sector. Technically, the website uses modern tools such as Google Analytics, Google Tag Manager, and Google reCAPTCHA, and is built on the Estofan CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site employs reCAPTCHA and cookie consent mechanisms but lacks visible security headers and publicly disclosed security policies. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear legitimate and professional. Overall, the site scores well on content quality and technical implementation but has room for improvement in security posture and privacy transparency.

L

Lesy České Republiky, s. p.

parcour.cz

32

The website www.parcour.cz represents a government-operated shooting range facility located in the Czech Republic, specifically serving the Lesní závod Konopiště region. It provides services related to shooting sports, including training, registration, and hosting of shooting competitions such as the Lovecký brokový parkúr. The site is modest in size and targets a niche audience of hunters and shooting sports enthusiasts. The business model is focused on government service provision rather than commercial enterprise. Technically, the website uses standard web technologies including JavaScript, jQuery, and Google Analytics for tracking. The site is accessible over HTTPS but lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in security and privacy compliance. The WHOIS data is missing, which raises concerns about domain registration transparency but does not necessarily indicate illegitimacy given the government affiliation. Overall, the site is functional with basic content quality and moderate technical implementation.

V

VARS BRNO a.s.

vars.cz

68

VARS BRNO a.s. is an innovative Czech company specializing in Intelligent Transportation Systems (ITS), infrastructure management, and project engineering with over 25 years of experience. As a member of the VINCI Energies group, it holds a strong market position as a leader in implementing advanced solutions for transportation and infrastructure management. The company offers key services including traffic telematics, infrastructure management solutions, and infrastructure project design. The website is professionally designed, primarily in Czech with English alternatives, and targets infrastructure managers and related organizations. Technically, the site runs on WordPress with modern plugins such as Yoast SEO and Matomo Analytics, indicating a mature digital infrastructure with privacy-conscious analytics. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and well-structured for its audience.

S

Sejkora a přátelé s.r.o.

sejkorarestaurant.cz

60

Sejkora a přátelé s.r.o. operates a modern Krkonošská restaurant located in Janské Lázně, Czech Republic, focusing on traditional regional cuisine with a modern gastronomic approach. The business targets tourists and locals seeking authentic culinary experiences rooted in local ingredients and culture. The website is professionally designed, featuring clear navigation, reservation capabilities via a third-party widget, and active social media presence. Technically, the site runs on WordPress with common web technologies and integrates external services for reservations. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. The absence of WHOIS data limits domain trust assessment, but the business information and website content appear legitimate and consistent with a small hospitality enterprise.

H

HUMLNET CREATIVE s.r.o.

hucr.cz

43

HUMLNET CREATIVE s.r.o. is a Czech Republic-based small web development agency specializing in creating custom, modern, and professional websites tailored to client needs. Their market position is that of a regional service provider with a portfolio of local clients including schools, companies, and organizations. The company emphasizes a collaborative and tailored approach to web design and development, offering multilingual and responsive websites. Technically, the website is built on a modern stack including Bootstrap, jQuery, and OctoberCMS, with integration of Facebook SDK and Google Analytics for marketing and analytics purposes. The site is mobile-optimized and features a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and secure form handling, though additional security headers could improve defenses. The absence of WHOIS data reduces transparency but the website content and business information appear legitimate and professional. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, with moderate security maturity.

M

Mekr´s

mekrs.cz

46

Mekr´s is a Czech-based wholesale supplier specializing in fastening and anchoring materials, offering over 60,000 items and serving more than 20 countries. Established in 1994, the company targets B2B customers in engineering, electronics, metallurgy, and automotive sectors. Their business model focuses on providing a comprehensive product range with custom solutions and a regional dealer network, supported by an e-commerce platform. Technically, the website is built on WordPress with Elementor, integrating modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Microsoft Clarity. The site is well-structured, mobile-optimized, and includes multi-language support. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are not explicitly detected and no formal security policy or incident response contacts are published. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and business presence appear professional and legitimate. Overall, the site demonstrates a mature digital presence with room for improvement in security transparency and domain registration clarity.

BYD Trutnov, operated by Autostyl a.s., is an authorized dealership and service center specializing in electric vehicles and plug-in hybrids from the BYD brand. Positioned as the first BYD representative in the Trutnov region of the Czech Republic, the company focuses on delivering modern, eco-friendly mobility solutions to local consumers. The website reflects a professional business presence with clear branding, comprehensive product offerings, and accessible customer contact points. Technically, the website is built on a modern stack including October CMS, Bootstrap, and JavaScript libraries such as Swiper.js and jQuery. It is mobile-optimized and includes SEO best practices like meta tags and Open Graph data. Google Tag Manager is used for analytics and tracking, with a cookie consent mechanism that aligns with GDPR requirements. From a security perspective, the site enforces HTTPS and implements cookie consent controls, but lacks visible security headers which could enhance protection against common web threats. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data raises concerns about domain legitimacy and should be investigated further. Overall, the website presents a trustworthy and professional front for the business, but improvements in security headers and domain registration transparency are recommended to strengthen trust and compliance.

T

Toyota Česko

toyotatrutnov.cz

65

Toyota Central Europe - Czech s.r.o., represented online by Autostyl a.s., operates as an official regional dealer for Toyota in the Czech Republic. The company provides comprehensive automotive sales, servicing, and customer support, targeting consumers interested in Toyota vehicles and accessories. The website reflects a professional and consistent brand presence aligned with Toyota's corporate identity. Technically, the site leverages Adobe Experience Manager and Scene7 for content management and media delivery, supported by Google Tag Manager for analytics and cookie consent management. The infrastructure indicates a mature digital presence with moderate performance and good mobile optimization. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed through cookie consent mechanisms and GDPR-aligned privacy policies. Overall, the domain appears legitimate and trustworthy despite the absence of public WHOIS data, which is common for corporate domains. Strategic recommendations include enhancing public security policy disclosures and incident response information to further build trust and compliance.

R

Rentstyl, s.r.o.

rentstyl.cz

53

Rentstyl, s.r.o. operates a Czech-language website offering operational leasing and car rental services primarily for Škoda and Toyota vehicles. The company targets individuals and businesses seeking flexible vehicle leasing solutions with fixed monthly payments including insurance and servicing. The website is professionally designed with good content quality and clear navigation, optimized for mobile devices. Technically, the site uses a custom MVC-based CMS integrated with BSSHOP e-commerce platform and employs Google Tag Manager for analytics and marketing. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though HTTP security headers are not explicitly detected. The absence of WHOIS data limits domain ownership transparency, which slightly impacts trustworthiness. Overall, the site presents a legitimate and professional business with moderate risk due to incomplete domain registration information.

P

Práce na horách. najděte si brigádu a zažijte zimu snů - Práce na horách

pracenahorach.cz

43

The website pracenahorach.cz is a niche job listing platform focused on seasonal winter employment opportunities in Czech mountain resorts, primarily targeting students and seasonal workers interested in ski instruction and related hospitality roles. The site offers curated job offers, course information, and location details, supported by partner ski schools and mountain activity providers. Technically, the site uses modern web technologies including HTML5, CSS, JavaScript, Google Analytics, Google Tag Manager, reCAPTCHA, and Smartsupp live chat, delivering a responsive and user-friendly experience. Security posture is generally good with HTTPS enforced and anti-bot measures on contact forms, though it lacks some security headers and formal privacy/cookie policies, which are compliance gaps. The absence of WHOIS data limits domain transparency but does not detract from the site's apparent legitimacy. Overall, the site is professionally designed, content-rich, and safe for general audiences.