Security Directory

N

Národní pedagogické muzeum a knihovna J. A. Komenského

historiascholastica.com

58

Historia scholastica is a specialized international academic journal focused on the history of pedagogy and education, published biannually since 2015 by the National Pedagogical Museum and Library of J. A. Komenský in the Czech Republic. The journal operates under an open access model with Creative Commons licensing and is indexed in several reputable academic databases, establishing a strong niche market position within educational research. The website is built on Drupal 7 and hosted via Active24, with moderate performance and basic mobile and accessibility features. Google Analytics and Tag Manager are used for visitor tracking, but no visible cookie consent or privacy policies are present, indicating compliance gaps. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers, which are recommended for improvement. Overall, the site is professional and trustworthy, but could benefit from enhanced privacy compliance and updated security practices.

S

Sbírka Viléma Trmala

trmal.cz

34

The website www.trmal.cz is dedicated to the legacy and collection of Vilém Trmal, a Czech lawyer and antiquarian who co-founded the Český antikvariát ATA. It serves as a cultural and historical repository showcasing auctions, exhibitions, and publications related to Czech art and bibliofilia, particularly focusing on artists like Josef Váchal. The site targets collectors, art historians, and enthusiasts of Czech cultural heritage. Technically, the site uses standard web technologies including jQuery and Google Analytics, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage but lacks advanced security headers and visible privacy compliance measures. The absence of WHOIS data reduces domain trustworthiness, though the site content and presentation are professional and consistent with a legitimate cultural institution. Overall, the site is a valuable resource for its niche audience but would benefit from improved privacy and security transparency.

V

VÚK - Výzkumný ústav pro krajinu, v. v. i.

vukoz.cz

60

The website vuk.gov.cz represents the Výzkumný ústav pro krajinu, a government research institute focused on landscape and nature diversity in the Czech Republic. The site targets researchers, government entities, and environmental professionals, providing scientific research and consultancy services. The business model is that of a government research entity with a medium organizational size. The website is built on WordPress using the Divi theme, incorporating modern web technologies such as Google Tag Manager and Cookiebot for analytics and cookie consent management. The design is professional and mobile-optimized, offering a good user experience with clear navigation and relevant content. From a security perspective, the site lacks visible security headers and explicit privacy policies, which lowers its security posture. The SSL configuration status is unknown from the provided data, and no forms or contact information were detected in the analyzed HTML snippet. The absence of WHOIS data for the domain is unusual for a government domain and slightly reduces trustworthiness, although the domain's gov.cz TLD suggests official status. Cookie consent is implemented, indicating some level of privacy compliance, but GDPR compliance cannot be fully confirmed. Overall, the website is functional and professional but would benefit from improved security practices, including the implementation of security headers, clear privacy and terms of service policies, and visible contact information. The lack of WHOIS data warrants further investigation to confirm domain legitimacy. Strategic recommendations include enhancing security configurations, publishing comprehensive privacy and security policies, and improving transparency to build trust with users.

S

Správa NP České Švýcarsko

npcs.cz

55

Správa NP České Švýcarsko operates as one of the four national parks in the Czech Republic, focusing on the protection of unique sandstone formations and associated biotopes. The organization provides visitor information, ecological education, and park management services, positioning itself as a key governmental and non-profit entity in environmental conservation. The website serves as an official communication channel, offering news, events, safety information, and partner collaborations. Technically, the site is built on Drupal 10, employing modern web technologies and a cookie consent framework to comply with privacy regulations. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though security headers could be improved. The absence of WHOIS data suggests privacy protection, which is justified for this type of public entity. Overall, the site is professional, trustworthy, and well-maintained, supporting its mission effectively.

N

Národní park Šumava

npsumava.cz

57

Národní park Šumava operates as the official authority managing the Šumava National Park and its protected landscape area in the Czech Republic. The website serves as a comprehensive information portal for visitors, environmental researchers, and the general public interested in the park's natural heritage, events, and conservation efforts. It offers resources such as visitor centers, ecological education, maps, webcams, and an e-shop. The site is positioned as a trusted governmental and non-profit entity in the environmental conservation sector within the Czech Republic. Technically, the website is built on WordPress using modern plugins like Elementor for design, WPML for multilingual support, and performance optimizations via WP Rocket. It integrates analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook SDK, and OneSignal for push notifications. The site is mobile-optimized, accessible, and SEO-friendly, with appropriate meta tags and structured data enhancing search engine visibility. From a security perspective, the site enforces HTTPS and includes several security headers, indicating a good baseline security posture. Cookie consent mechanisms and privacy policies demonstrate GDPR compliance. However, the absence of WHOIS registration data and lack of explicit security policies or incident response contacts represent areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website presents a professional and trustworthy digital presence for the Šumava National Park authority, with recommendations to enhance transparency around security policies and domain registration details to further strengthen trust and compliance.

S

Správa Krkonošského národního parku

krnap.cz

59

Správa Krkonošského národního parku operates as the official administrative body responsible for managing the Krkonošský národní park in the Czech Republic. The website serves as a comprehensive resource for visitors, researchers, and the general public, offering information on park regulations, nature conservation efforts, events, and educational programs. The organization positions itself as a government entity focused on environmental protection and sustainable tourism. Technically, the website employs modern web technologies including Google Analytics and Tag Manager for tracking, and Swiper.js for interactive content. The site is well-structured, mobile-optimized, and includes accessibility features, reflecting a mature digital infrastructure. However, the absence of CMS identification and hosting details limits deeper technical profiling. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. While no critical vulnerabilities or exposed sensitive data were detected, the lack of explicit security policies and incident response contacts suggests room for improvement in transparency and preparedness. The missing WHOIS data introduces some uncertainty regarding domain registration legitimacy, although the official nature of the content and government affiliations mitigate this concern. Overall, the website presents a trustworthy and professional front for the national park administration, with strong content quality and user experience. Strategic enhancements in security documentation and domain registration transparency would further strengthen its risk posture and stakeholder confidence.

P

PVA a.s.

forarch.cz

53

Forarch.cz represents the official website of the largest and most visited construction trade fair in the Czech Republic, organized by PVA a.s. The site showcases a well-established event with a history dating back to 1997, targeting construction professionals, exhibitors, media, and visitors. The business model revolves around organizing and facilitating a major international trade fair, providing exhibition space, registration services, and media partnerships. The website is professionally designed, content-rich, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it leverages WordPress CMS with modern JavaScript libraries and integrates Google Tag Manager with consent mode to respect user privacy. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the domain and website exhibit high legitimacy and trustworthiness, with no signs of malicious activity or content safety concerns.

V

VINSELEKT MICHLOVSKÝ a.s.

michlovsky.com

50

Vinselekt Michlovský a.s. is a well-established Czech winery with a history dating back to 1993, specializing in the production and sale of various wines including white, red, rosé, sparkling, and bio wines. The company operates an e-commerce platform allowing direct consumer purchases and provides wine tasting experiences. The website is professionally designed, mobile-optimized, and includes age verification to comply with alcohol sales regulations. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Tag Manager and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks some security headers and a published privacy policy, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and contact information suggest a legitimate business. Overall, the site presents a trustworthy and professional front but should address privacy and security policy transparency to enhance compliance and user trust.

The website www.kacr.cz represents the Komora Auditorů České Republiky, a professional self-regulatory organization established by Czech law to oversee the auditing profession. It serves auditors, accounting professionals, and members of the auditing community in the Czech Republic by providing services such as auditor registries, professional education, publications, conferences, and quality control. The site is well-branded and consistent with its government and professional positioning. Technically, the website employs modern JavaScript libraries including jQuery, jQuery UI, and Slick Carousel, and integrates Google Tag Manager and Google Analytics with a privacy-conscious default denial of tracking until consent is given. The site is mobile responsive, accessible, and SEO optimized, though it lacks some advanced security headers and a published privacy policy. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but does not expose security policies or incident response contacts. No vulnerabilities or sensitive data exposures were detected. The absence of WHOIS data limits domain trust assessment, but the professional presentation and clear contact details support legitimacy. Overall, the site is a credible and professional resource for the auditing community in the Czech Republic, with moderate technical maturity and good security posture. Recommendations include publishing a privacy policy, adding security headers, and clarifying domain registration details to enhance trust and compliance.

P

PKS okna

pksokna.cz

44

PKS okna is a traditional Czech manufacturer specializing in the production of plastic, wooden, wood-aluminum, and aluminum windows and doors. With over 34 years of experience, the company positions itself as a reliable and quality-focused supplier serving customers primarily in the Czech Republic. The business operates as part of the larger PKS group, which includes several subsidiaries and partner companies, enhancing its market presence and operational capabilities. The website reflects a professional and consistent brand image, providing comprehensive product information, customer service contacts, and showcases completed projects to build trust. Technically, the website employs modern JavaScript libraries such as jQuery, Slick Carousel, and PhotoSwipe, alongside Google Tag Manager and Analytics for tracking and marketing purposes. The site is mobile-optimized with good SEO practices and basic accessibility features. Privacy and cookie policies are implemented with consent management, reflecting awareness of GDPR requirements. However, no explicit security policies or incident response information is publicly available. From a security perspective, the site uses HTTPS with a good SSL configuration, but lacks visible security headers and formal vulnerability disclosure mechanisms. No WHOIS data is available for the domain, which raises concerns about domain registration transparency and slightly impacts trustworthiness. Overall, the security posture is moderate with room for improvement in policy transparency and technical hardening. The overall risk assessment is moderate-low, with the primary concern being the absence of WHOIS data and limited security policy disclosures. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration details to improve trust and compliance.

A

AHORN CZ, s.r.o.

ahorn.cz

50

AHORN CZ, s.r.o. is a Czech manufacturer specializing in high-quality bed slats, mattresses, beds, and sleep accessories. With over 28 years of market presence, the company offers a broad portfolio of products targeting both end consumers and B2B partners, including specialized furniture retailers and manufacturers in Central Europe. The website reflects a mature digital presence with detailed product catalogs, B2B portals, and active social media engagement. Technically, the site uses modern web technologies such as jQuery, Slick Slider, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers are not detected and no dedicated security or incident response policies are published. WHOIS data is unavailable, which slightly reduces trustworthiness but does not contradict the company's established business claims. Overall, the site is professional, trustworthy, and well-structured, serving its market effectively.

C

CENTRUM NÁBYTKU MAXI ORION, s.r.o.

maxiorion.cz

52

CENTRUM NÁBYTKU MAXI ORION, s.r.o. is a well-established Czech furniture retailer with over 20 years of experience, operating both a large physical store in Olomouc and an online e-commerce platform. The company specializes in a wide range of furniture including living rooms, kitchens, bedrooms, office furniture, and accessories, targeting local households and businesses. Their business model combines traditional retail with digital sales and customer support, offering services such as free 3D kitchen design and installment payment options. The website reflects a consistent brand presence and provides clear contact information and customer service channels. Technically, the website uses common web technologies including jQuery, Slick Carousel, Google Tag Manager, and Facebook Pixel for marketing and analytics. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. The content is well organized and professionally presented, supporting a positive user experience. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, it lacks published security policies, incident response contacts, and security.txt files, which are recommended for improved transparency and vulnerability management. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website and business demonstrate a solid and trustworthy online presence with room for improvement in formal security documentation and enhanced accessibility. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

T

Tylex Letovice s.r.o.

tylex.cz

47

Tylex Letovice s.r.o. is a traditional Czech textile manufacturer with a history dating back to 1832. The company specializes in producing custom-made curtains, jacquard curtains, voiles, bed linen, and 3D knits, serving both retail consumers and B2B customers. Their market position is that of a well-established, quality-focused textile producer emphasizing Czech origin and craftsmanship. The website reflects a professional business with clear product offerings and a user-friendly interface. Technically, the website employs common web technologies such as jQuery and Google Analytics, with proper HTTPS encryption and consent management for tracking. The site is moderately optimized for performance and mobile devices, though some SEO and accessibility improvements are possible. No CMS or hosting provider details were identified. From a security perspective, the site uses HTTPS and secure login forms but lacks visible security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic but present, with privacy and cookie policies accessible. The absence of WHOIS data for the domain reduces trust in domain legitimacy, though the website content and business information appear credible. Overall, the website is safe, professional, and trustworthy for its intended audience, but domain registration transparency should be verified. Strategic improvements in security headers, incident response documentation, and enhanced privacy compliance would strengthen the security posture and trustworthiness.

D

DIRECT ALPINE s.r.o.

directalpine.cz

48

DIRECT ALPINE s.r.o. is a Czech Republic-based small retail company specializing in high-quality outdoor clothing and accessories. The company positions itself as a niche European brand focusing on durable, functional apparel tested by professional climbers and outdoor experts. Their business model centers on e-commerce sales with additional B2B offerings and comprehensive warranty services. The website is professionally designed, mobile-optimized, and provides a rich catalog of products with detailed descriptions and multiple language options. Technically, the site employs modern web technologies, including Google Tag Manager, Facebook SDK, and a cookie consent management system, ensuring compliance with privacy regulations. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly available. Overall, the site is trustworthy, well-maintained, and compliant with GDPR, though WHOIS data is unavailable, likely due to privacy protection. Strategic recommendations include publishing explicit security and incident response policies and enhancing transparency around data protection officers and vulnerability disclosures.

T

TRANS – TECHNIK spol. s r.o.

trans-technik.cz

44

TRANS – TECHNIK spol. s r.o. is a Czech-based supplier specializing in parts for truck bodies, fastening materials, riveting tools, adhesives, and industrial chemicals. The company targets B2B customers in the transportation and manufacturing sectors, offering a comprehensive product catalog and multilingual website support. Their market position appears stable within the Czech Republic and neighboring countries, supported by partner sites in Romania and Poland. The website is professionally designed with clear navigation and product categorization, supporting a good user experience.

B

BioVendor – Laboratorni medicina a.s.

biovendor.com

55

BioVendor – Laboratorni medicina a.s. is a Czech Republic-based biotechnology company specializing in the development and manufacturing of immunoassays, recombinant proteins, antibodies, and endotoxin-removal products. Positioned as part of the larger BioVendor Group, the company serves research laboratories and healthcare professionals internationally, offering a broad portfolio of diagnostic and research products. Their business model focuses on innovation and reliable laboratory diagnostics, supported by multiple subsidiary brands and joint projects. The website reflects a professional and consistent brand image with comprehensive product and service information. Technically, the website employs a moderate technology stack including jQuery, Slick slider, Google Tag Manager, and Microsoft Clarity for analytics and user tracking. The site is mobile-optimized with good SEO and accessibility basics, though some modern security headers are missing. Performance is moderate, and the site uses Adobe Typekit fonts for consistent branding. Privacy and cookie policies are present with GDPR compliance, and contact information is clearly provided. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and public security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is incomplete or unavailable, which slightly reduces trustworthiness, but the overall business credibility and professionalism mitigate this concern. Overall, the website is a reliable and professional digital presence for BioVendor R&D, with recommendations to enhance security headers and publish explicit security policies to improve trust and compliance further.

Z

ZNOVÍN ZNOJMO, a. s.

znovin.cz

50

ZNOVÍN ZNOJMO, a. s. is a medium-sized Czech company specializing in the production and retail of traditional Moravian wines. The company operates a comprehensive e-commerce platform offering a wide range of wines, complemented by wine tourism services and loyalty programs. Their market position is that of an established regional wine producer with a focus on quality and customer engagement. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for wine consumers and tourists. Technically, the site uses modern JavaScript libraries and tracking tools, with good SEO and accessibility practices. Security posture is solid with HTTPS enforcement and age verification for alcohol sales, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with cookie consent and a privacy policy. Overall, the business demonstrates credibility and trustworthiness with clear contact information and social media presence.

A

Albi

albi.cz

54

Albi.cz is a well-established Czech e-commerce retailer specializing in board games, children's educational products, gifts, and premium scented candles. The company has a strong market presence in the Czech Republic with a domain registered since 1998, indicating long-term business operations. The website targets a general audience including families and gift buyers, offering a broad product catalog with clear navigation and professional design. Technically, the website employs modern tracking and analytics technologies such as Google Tag Manager, Facebook Pixel, Microsoft Clarity, and Smartlook. Hosting is provided by Active24, a known Czech hosting provider. The site is mobile optimized and performs moderately well, though explicit CMS or frameworks are not detected, suggesting a custom or proprietary platform. From a security perspective, the site uses HTTPS and implements reCAPTCHA for bot protection. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly configured, and no public security policy or incident response contacts are provided. Cookie consent mechanisms are present, but no formal privacy policy or terms of service links were found in the analyzed content, indicating room for improvement in privacy compliance. Overall, the website is trustworthy and professional with a solid business foundation. Strategic improvements in privacy documentation, security header implementation, and incident response transparency would enhance the security posture and compliance standing.

F

FG Forrest, a.s.

fg.cz

74

FG Forrest, a.s. is a well-established Czech internet agency specializing in custom e-commerce solutions, websites, and intranets with over 27 years of experience. The company positions itself as a trusted partner for online business, serving a broad range of clients including major corporations. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content showcasing their services, client testimonials, and industry awards. Technically, the site employs modern technologies such as Google Tag Manager, LinkedIn Insight, and Plausible Analytics, and is built on their proprietary CMS and e-commerce platform Edee.one. Security posture is strong, evidenced by HTTPS enforcement, ISO 27001 certification, and cookie consent mechanisms. However, the absence of WHOIS data limits domain registration trust analysis. Overall, FG Forrest demonstrates a robust digital maturity and business credibility suitable for their market segment.

P

Platforma VIZE 0, z. ú.

vize0.cz

59

Platforma VIZE 0 is a Czech non-profit organization dedicated to improving road safety and reducing fatalities and serious injuries on Czech roads. The platform actively engages in education, advocacy, and public awareness campaigns, targeting drivers, cyclists, motorcyclists, and pedestrians. Their projects include practical safety tools and virtual reality experiences to educate the public. The website reflects a well-established presence since 2018, with consistent branding and a clear mission. Technically, the site uses modern JavaScript frameworks and libraries, integrates Google Tag Manager for analytics, and is hosted likely by Wedos, a Czech hosting provider. The site is mobile-optimized and SEO-friendly, with good user experience and navigation. Security-wise, HTTPS is enforced and cookie consent mechanisms are implemented, but there is room for improvement in security headers and incident response transparency. Overall, the platform demonstrates a strong commitment to privacy compliance and trustworthy communication.

S

SIMPLO s.r.o.

easycookie.io

53

EasyCookie is a small technology company (SIMPLO s.r.o.) providing GDPR cookie consent management solutions primarily targeting website owners and digital agencies. Their SaaS platform offers features such as automatic cookie scanning, customizable consent banners, multi-language support, and integration with Google Consent Mode v2 to help clients maintain compliance with privacy regulations. The website is professionally designed with clear navigation, responsive layout, and transparent pricing plans including a free tier to attract new users. Technically, the site uses modern web technologies including Google Tag Manager, JavaScript, and Laravel backend inferred from cookies. The site is served over HTTPS with a good SSL configuration, though some security headers are missing. The cookie consent mechanism is implemented with detailed cookie categorization and user consent options. Analytics tools like Google Analytics and Hotjar are used for user behavior tracking, with moderate user tracking levels. From a security perspective, the site demonstrates good practices such as CSRF protection and HTTPS enforcement. However, the absence of a published privacy policy, terms of service, and incident response contacts are notable gaps. The WHOIS data is not publicly available due to privacy protection, which is common for small SaaS providers but slightly reduces transparency. No signs of malware or phishing were detected, and the content is safe for general audiences. Overall, EasyCookie presents a trustworthy and functional GDPR compliance solution with room for improvement in privacy transparency and security header implementation. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and adding vulnerability disclosure information to strengthen trust and compliance posture.

W

Websupport

websupport.se

66

Websupport is a well-established Swedish web hosting and domain registration provider founded in 2013 and part of the larger team.blue group. The company offers a comprehensive suite of services including domain registration, web hosting packages, email solutions such as Business Mail, and website building tools like WordPress and Website Builder. Positioned as one of Europe's largest web hosting providers, Websupport targets individuals and businesses seeking reliable online presence solutions. The website is professionally designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content.

W

Websupport.sk

websupport.sk

67

Websupport.sk is a leading Slovak technology company specializing in domain registration, web hosting, cloud servers, and website building services. With a market-leading position and over 20 years of experience, it serves a broad audience ranging from small bloggers to enterprises. The company is part of the Team.Blue group and operates multiple regional subsidiaries, indicating a strong European presence. The website reflects a mature digital infrastructure with modern technologies such as WordPress, Alpine.js, and advanced consent management tools, ensuring compliance with GDPR and user privacy standards. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts could be improved. Overall, the site is professional, trustworthy, and well-optimized for performance and user experience.

W

Websupport Magyarország

websupport.hu

67

Websupport Magyarország is a well-established Hungarian technology company specializing in domain registration, web hosting, VPS, SSL certificates, business email, and website builder services. With over 20 years of experience and a strong regional presence as part of the team.blue group, it serves a broad audience ranging from individuals to businesses seeking reliable online presence solutions. The website reflects a professional and user-friendly design, optimized for mobile and accessibility, with clear navigation and comprehensive service offerings. Technical infrastructure leverages modern web technologies including WordPress, Alpine.js, and Tailwind CSS, supported by robust analytics and marketing tools integrated with GDPR-compliant consent management. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities or exposed sensitive data. Overall, the site demonstrates a mature digital presence aligned with industry best practices.

P

Placed

placed.com

70

Placed is a technology company specializing in location intelligence and online to offline attribution services, providing businesses with insights into consumer location data and ad intelligence. The company was acquired by Foursquare in 2019, which is reflected in the website content and linked legal documents. The website is professionally designed, mobile optimized, and uses modern analytics and marketing tools such as Google Tag Manager and Marketo. Privacy and terms of service are linked to Foursquare's legal pages, indicating integration with the parent company's compliance framework. However, the lack of WHOIS data and absence of direct contact information slightly reduce trustworthiness. Security posture is generally good with HTTPS and CSRF tokens, but could be improved by adding explicit security headers and a cookie consent mechanism.

P

Pěšky městem, z. s.

peskymestem.cz

50

Pěšky městem is a Czech non-profit organization dedicated to making cities safer and more pleasant for pedestrians, advocating walking as the best mode of transport for short distances. The organization runs various projects focused on school safety, urban mobility, and sustainable transport, supported by educational campaigns and events. Their website reflects a professional and consistent brand image, with comprehensive content and clear calls to action for community involvement and donations. Technically, the site is built on WordPress with modern plugins and tools, including GDPR compliance and analytics integrations, hosted by a Czech hosting provider. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

Č

České vysoké učení technické v Praze

cvut.cz

64

České vysoké učení technické v Praze (ČVUT) is a large, well-established technical university in the Czech Republic, recognized as one of the oldest and largest technical universities in Europe. The institution provides a broad range of higher education programs including bachelor, master, and doctoral studies, alongside active research and lifelong learning services. The website targets students, researchers, academic staff, and the general public interested in technical education and research. The business model is that of a public university focused on education and research services.

N

NOHO a. s.

noho.cz

66

NOHO a. s. is a Czech-based family-owned real estate developer focused on creating sustainable housing and renewable energy projects, primarily in Hradec Králové. The company positions itself as an innovator in community energy and sustainable urban development, with multiple award-winning projects such as Cihlovka 1 and 2 and the Kukleny neighborhood. Their business model integrates real estate development with community and energy solutions, targeting environmentally conscious residents and stakeholders. Technically, the website is built on Webflow with modern JavaScript libraries and analytics tools, providing a fast, mobile-optimized, and accessible user experience. Security posture is good with HTTPS and cookie consent mechanisms, though security headers could be improved. The absence of WHOIS data is a concern for domain transparency but does not currently detract from the website's professional presentation and trustworthiness. Overall, NOHO demonstrates a mature digital presence aligned with its business goals.

A

artEcho, s.r.o.

earch.cz

48

EARCH.cz is a Czech online magazine focused on architecture, design, and technology, operated by artEcho, s.r.o. The website offers a rich variety of content including articles, videos (EARCH.tv), job listings, and a catalog of firms and products related to the architecture industry. It maintains partnerships with several industry players, enhancing its market position as a reputable media outlet in the Czech Republic. The site targets architects, designers, and enthusiasts interested in modern architecture and related technologies. Technically, the website employs a modern technology stack including Laravel Livewire, Google Tag Manager, Google Adsense, and Plausible Analytics. The site is mobile-optimized with good SEO practices and moderate performance. However, some security headers are missing, and there is no visible cookie consent mechanism, which could be improved for better privacy compliance. From a security perspective, the site uses HTTPS with CSRF protection on forms, but lacks published security policies, incident response contacts, or vulnerability disclosure information. The absence of WHOIS data for the domain reduces trustworthiness and raises questions about domain registration legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional and trustworthy in content and design but would benefit from enhanced security headers, explicit privacy and cookie consent mechanisms, and transparency in domain registration. Strategic improvements in these areas would strengthen its security posture and compliance with GDPR requirements.

M

Městský ateliér prostorového plánování a architektury, příspěvková organizace

mappaostrava.cz

52

Městský ateliér prostorového plánování a architektury (MAPPA) is a municipal organization focused on urban planning, architecture, and sustainable development in Ostrava, Czech Republic. The website presents a professional and comprehensive overview of their projects, news, and data applications, targeting local residents, urban planners, and stakeholders. The organization emphasizes vitality, livability, and sustainability in city development. Technically, the website uses modern web technologies including embedded GIS maps, JavaScript libraries like Swiper.js, and Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and includes cookie consent mechanisms, reflecting good digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, but the website content and contact information strongly indicate legitimacy. Overall, the site is trustworthy, professional, and compliant with privacy regulations.

L

Loxper

loxper.com

58

Loxper is a Czech Republic-based digital platform offering entertaining and educational travel routes and stories about interesting places. The website is built on the Wix platform and targets general audiences interested in travel and local exploration. The business model revolves around providing a mobile application and curated content to enhance travel experiences. Technically, the site uses modern web technologies and common marketing tools such as Google Tag Manager and Facebook Pixel, hosted on Wix infrastructure. Security posture is moderate with HTTPS enforced but lacks visible security headers and formal privacy or incident response policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the active and professional website presence suggests legitimate operations. Overall, the site is user-friendly and content-rich but would benefit from improved transparency and compliance documentation.

I

INPRO

i2000.cz

45

INPRO is a Czech Republic-based education and training service provider specializing in courses, seminars, and consultancy. The website presents a professional and consistent brand image focused on expanding educational opportunities beyond traditional schooling. The target audience includes individuals and organizations seeking professional development and training services. Technically, the website is built on WordPress using the Avada theme and supports multilingual content via WPML. It employs Google Analytics and Tag Manager for user tracking and includes Google reCAPTCHA for form security. Security posture is moderate with HTTPS enabled and some security best practices observed, but lacks comprehensive security headers and a visible privacy policy. The absence of WHOIS data limits domain trust assessment, but the website content and structure suggest a legitimate business. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms pages. Overall, the site is safe, well-designed, and functional, but could improve transparency and security practices.

O

OSN Česká Republika

osn.cz

59

The website osn.cz serves as the official United Nations Information Centre for the Czech Republic, providing comprehensive information about the UN's activities, priorities, and agencies. It targets a broad audience including government institutions, NGOs, schools, media, and the general public interested in UN affairs. The site is well-branded, consistent, and professionally maintained, reflecting its authoritative role as a UN representation. Technically, the site is built on WordPress with modern frameworks like UIkit and performance optimizations such as WP Rocket caching and lazy loading. It uses Cloudflare DNS and enforces HTTPS, ensuring good security fundamentals. However, explicit security headers and privacy policies are not evident, indicating room for improvement in security posture and privacy compliance. Analytics via Google Tag Manager and Google Analytics are used moderately, with basic privacy compliance. Contact information is clearly provided, including email, phone, and physical address, enhancing business credibility. Overall, the site is trustworthy, safe, and professionally operated, with a mature domain consistent with its long-standing presence.

C

Center for Economic Research and Graduate Education – Economics Institute

cerge-ei.cz

64

CERGE-EI is a reputable academic institution specializing in graduate economics education and research based in Prague, Czech Republic. It offers PhD and Master's programs and is affiliated with Charles University and the Czech Academy of Sciences, positioning itself as a leading center for economic research and graduate education in the region. The website reflects a strong academic focus with extensive research publications, events, and educational resources targeting graduate students, researchers, and academics worldwide. Technically, the site is built on Joomla CMS with modern libraries such as jQuery and Bootstrap, and integrates Google Analytics and Tag Manager for tracking. It features a cookie consent mechanism and privacy policy aligned with GDPR requirements. Security posture is solid with HTTPS and CSRF protections, though some security headers could be improved. Overall, the site is professional, well-branded, and trustworthy, with no signs of malicious content or blocking mechanisms.

A

AUTONOVA BRNO s.r.o.

autonova.cz

48

AUTONOVA BRNO s.r.o. is an established automotive dealership and service provider based in Brno, Czech Republic, specializing in Škoda and Volkswagen vehicles as well as KTM and GasGas motorcycles. With over 50 years of experience and integration into the VIG group, the company offers a comprehensive range of services including new and used vehicle sales, servicing, financing, insurance, and vehicle inspections. The website reflects a professional and consistent brand image targeting consumers and businesses in the transportation sector within the Czech market. Technically, the website is built on WordPress with modern SEO and analytics tools, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site demonstrates high trustworthiness and business credibility, though WHOIS data is unavailable, limiting domain registration verification.

A

AUTONOVA BRNO s.r.o.

gasgasbrno.cz

46

AUTONOVA BRNO s.r.o. operates as an authorized dealer and service provider for GASGAS motorcycles in Brno, Czech Republic. The company offers a range of new motorcycles, original parts, accessories, and test rides for select models. Positioned as a specialized retailer in the transportation sector, the business targets motorcycle enthusiasts and riders seeking GASGAS products. The website reflects a professional retail model with clear contact channels and up-to-date product information. Technically, the site is built on WordPress with modern integrations such as Google reCAPTCHA and Google Tag Manager, ensuring a secure and user-friendly experience. Security posture is strong with HTTPS and consent mechanisms, though additional security headers and incident response details could enhance trust. The absence of WHOIS data limits domain legitimacy verification, but the website content and business information appear credible and consistent with an established small business. Overall, the site is well-structured, GDPR compliant, and provides a positive user experience with good SEO and mobile optimization.

R

REMspace Inc

remspace.net

49

REMspace Inc operates as a specialized research center focusing on REM sleep, lucid dreaming, sleep paralysis, and out-of-body experiences. The company provides educational content, free ebooks, videos, and offers a lucid dreaming mask and a mobile app to enhance user experience. Positioned as a leading entity in its niche, REMspace targets individuals interested in sleep technologies and consciousness exploration. The website is professionally designed, multilingual, and provides clear contact information including physical address and social media channels. Technically, the site is built on WordPress with WooCommerce, uses modern JavaScript libraries like Swiper.js, and integrates analytics tools such as Google Tag Manager and Yandex Metrica. Security posture is good with HTTPS enabled and no exposed sensitive data, though improvements are recommended in DNSSEC and security headers. Privacy compliance is adequate with policies published but lacks active cookie consent mechanisms. Overall, the site is trustworthy and well-maintained, suitable for its audience and business goals.

I

International University Sports Federation

fisu.net

52

The International University Sports Federation (FISU) operates a comprehensive and professionally designed website serving as the official portal for university sports worldwide. The site provides news, event calendars, results, educational programs, and support resources targeting universities, sports federations, media, and event organizers. Recognized by the International Olympic Committee, FISU holds a strong market position as a global leader in university sports. The website demonstrates a mature digital infrastructure built on WordPress with modern technologies such as Yoast SEO, Swiper.js, Google reCAPTCHA, and Google Tag Manager, ensuring good performance, mobile optimization, and SEO compliance. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though explicit security headers and a published security policy are absent. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. The absence of WHOIS data reduces transparency but is common for such organizations. Overall, the website is trustworthy, professional, and well-maintained, supporting FISU's mission effectively.

S

SportAccord

sportaccord.sport

52

SportAccord is a globally recognized organization dedicated to connecting International Sport Federations, cities, right holders, and businesses to shape the future of sport. The website reflects a professional and well-established entity with a strong market position in organizing major sports business conferences and events such as the SportAccord Convention and the International Federation Forum. The content is rich, relevant, and targeted towards sports industry stakeholders and leaders worldwide. Technically, the website is built on WordPress with modern plugins and integrates advanced analytics and consent management tools, indicating a mature digital infrastructure. Security posture is good with HTTPS and monitoring tools in place, though explicit security headers and a public security policy could enhance trust further. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website presents a credible and trustworthy digital presence for SportAccord.

E

Expediční kamera 2025 - Zažij dobrodružství na plátně tvého kina!

expedicnikamera.cz

41

Expediční kamera is a niche film festival focused on travel, adventure, and nature films, operating since 2009 primarily in the Czech Republic and Slovakia. It is organized by the website HedvabnaStezka.cz and features screenings at over 150 locations including cinemas, clubs, and cultural venues. The website presents a professional and consistent brand image with good content quality and user experience. Technically, it is built on WordPress with modern tools like Yoast SEO, Google Analytics, and Leaflet.js for maps. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit privacy and cookie policies, which are compliance gaps. No direct contact emails or phone numbers are provided, limiting direct communication channels. Overall, the site is trustworthy and well-positioned in its niche but could improve privacy compliance and security transparency.

F

Festival Obzory – Největší víkendová outdoorová akce v Praze! 2025

festivalobzory.cz

40

Festival Obzory is a prominent outdoor and travel festival held annually in Prague, Czech Republic, with the next event scheduled for November 7-9, 2025. The festival offers a rich program of 80 lectures, workshops, and films, targeting outdoor enthusiasts, travelers, students, and families interested in hiking, climbing, and adventure. The website serves as the main information and ticket sales platform, showcasing partners and sponsors, and providing event details. The business model centers on event organization and collaboration with partners and exhibitors.

K

knihynahory.cz

knihynahory.cz

55

Knihynahory.cz is a Czech Republic based specialized e-commerce retailer focused on selling hiking maps, climbing and travel guides, and related travel literature. The website targets outdoor enthusiasts and travelers seeking detailed and region-specific cartographic and guidebook products. The business operates on the Shoptet e-commerce platform and integrates multiple third-party services for analytics, marketing, and user experience enhancements. The site demonstrates a moderate to good level of digital maturity with a responsive design, clear navigation, and a cookie consent mechanism aligned with GDPR principles. Security posture is generally good with HTTPS enforced and CSRF protection on login forms; however, the use of an outdated jQuery version and lack of explicit security headers suggest room for improvement. No privacy policy or terms of service were detected in the provided HTML content, which may impact compliance and user trust. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include updating libraries, publishing comprehensive privacy and security policies, and enhancing security headers to strengthen trust and compliance.

P

Pádler.cz

padler.cz

59

Pádler.cz is a Czech online media portal dedicated to water sports enthusiasts including kayakers, rafters, and paddleboarders. It offers a variety of content such as articles, event calendars, equipment reviews, and classifieds. The website is well-branded and regularly updated, targeting a niche audience interested in paddling and outdoor activities. Technically, it is built on WordPress with modern web technologies and integrates multiple advertising and tracking services. Security posture is good with HTTPS and anti-spam measures, but lacks visible privacy and cookie policies. The absence of WHOIS data raises concerns about domain registration transparency, impacting trust. Overall, the site is functional and content-rich but would benefit from improved compliance and transparency.

T

Tulení pásy

tulenipasy.cz

59

Tulení pásy is a Czech language online portal dedicated to ski mountaineering, freeriding, and other winter outdoor activities. It offers a catalog of ski touring routes, equipment reviews, methodological articles, event calendars, and community discussion forums. The website targets winter sports enthusiasts primarily in the Czech Republic and surrounding regions. The business model appears to be content-driven with revenue generated through advertising and partnerships with related outdoor projects. Technically, the site is built on WordPress with modern web technologies including Google Tag Manager, CleanTalk anti-spam, and Google advertising networks. The site is mobile optimized and SEO friendly, providing a good user experience. Security posture is moderate with HTTPS enabled and anti-spam measures in place, but lacks explicit security headers and published privacy or cookie policies. WHOIS data is unavailable or privacy protected, which is common but reduces transparency. Overall, the site is professionally maintained and trustworthy for its niche audience.

S

SvetBehu.cz

svetbehu.cz

60

SvetBehu.cz is a well-established Czech media portal dedicated to running and related sports activities. It offers a comprehensive range of content including race calendars, training plans, running routes, equipment reviews, orienteering, discussion forums, and nutrition advice. The site also publishes a magazine with subscription options, positioning itself as a key resource for Czech-speaking running enthusiasts. Technically, the website is built on WordPress and leverages modern technologies such as Google Analytics 4, Google Tag Manager, and MailerLite for marketing and analytics. It employs anti-spam measures and advertising networks relevant to its niche. Security posture is solid with HTTPS enforced and basic security headers present, though there is room for improvement in security headers and explicit privacy compliance documentation. The absence of WHOIS data due to privacy protection is common for media sites and does not raise immediate concerns. Overall, the site demonstrates a professional and trustworthy presence with good content quality and user experience.

H

HedvabnaStezka.cz

hedvabnastezka.cz

59

HedvabnaStezka.cz is a Czech-language travel portal focused on providing travel articles, guides, and an active community discussion platform for travelers and adventure seekers. The website is well-established with a consistent brand presence and regularly updated content, positioning itself as a trusted source in the Czech travel media market. Technically, the site is built on WordPress with modern SEO and anti-spam plugins, leveraging Google Tag Manager and advertising networks for monetization. Security posture is solid with HTTPS and bot detection, though visible privacy and cookie policies are missing, which impacts compliance. Overall, the site offers a good user experience with clear navigation and mobile optimization but should improve transparency on privacy and terms to enhance trust and compliance.

V

VLTAVA LABE MEDIA a.s.

adactive.cz

42

VLTAVA LABE MEDIA a.s. operates a professional media and advertising platform in the Czech Republic, offering a variety of advertising formats across print and digital media. The company maintains a strong market position with a comprehensive portfolio including newspapers, magazines, online platforms, and event services. The website reklamy.vlmedia.cz serves as a dedicated portal for advertising formats, targeting advertisers and marketing professionals. Technically, the site employs modern web technologies such as Google Tag Manager, Bootstrap, and a responsive design approach, ensuring good mobile optimization and user experience. Privacy compliance is well addressed through the use of Didomi consent management and clear links to privacy and cookie policies. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data reduces domain trust slightly but does not detract from the overall legitimacy indicated by consistent branding and external references.

U

Unie zaměstnavatelských svazů ČR

uzs.cz

49

Unie zaměstnavatelských svazů ČR is a major Czech employers' association representing a broad spectrum of sectors including public services, healthcare, energy, education, and finance. The organization serves over 20,000 member organizations and nearly a million employees, positioning itself as a dominant voice in the Czech Republic's employer landscape. The website reflects this professional stature with clear navigation, sector-specific content, and partnership references. Technically, the site employs common web technologies such as jQuery, Google Tag Manager, and ShareThis for social sharing and analytics, indicating a moderate level of digital maturity. However, the absence of WHOIS data and lack of explicit privacy and security policies suggest areas for improvement in transparency and compliance. Security posture is moderate with HTTPS implied but missing explicit security headers and vulnerability disclosures. Overall, the site is safe, professional, and targeted at a general audience of employers and stakeholders.

The International Federation of Library Associations and Institutions (IFLA) operates as a globally recognized non-profit organization dedicated to supporting libraries and information professionals worldwide. Their website serves as a comprehensive platform for advocacy, professional development, events, and resources, positioning IFLA as a leading voice in the library sector. The organization targets library associations, institutions, and professionals, offering membership benefits and fostering global collaboration. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Slick Carousel, Google Tag Manager, and Hotjar for analytics and user experience enhancement. Hosting and CDN services appear to be provided by Cloudflare, ensuring reliable performance and security. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs best practices such as asynchronous loading of analytics scripts. However, there is room for improvement in implementing comprehensive security headers and publishing explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected, indicating a solid security posture. Overall, the website is professional, trustworthy, and safe for general audiences. The lack of WHOIS data due to privacy protection is typical for organizations of this nature and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving transparency around incident response.