Security Directory

N

Národní knihovna České republiky

nkp.cz

63

Národní knihovna České republiky is the official national library of the Czech Republic, serving as a central cultural and educational institution. It offers a wide range of services including library catalog access, digital libraries, research support, and cultural events. The website reflects a well-established government entity with a strong market position in the cultural heritage sector. Technically, the site uses modern web technologies such as jQuery, Google Tag Manager, and integrates third-party widgets for marketing and user engagement. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS and secure forms, though some security headers could be improved. Privacy compliance is robust with clear cookie consent and privacy policies. Overall, the site is professional, trustworthy, and serves a broad audience including the general public, researchers, and cultural institutions.

O

OpenTable

opentable.fr

75

OpenTable France operates as a localized branch of the global OpenTable platform, providing online restaurant reservation services tailored to the French market. The website offers consumers the ability to discover and book tables at restaurants 24/7, supported by a comprehensive suite of restaurant management and marketing solutions. The platform is well-positioned in the hospitality industry as a leading service provider with a strong brand presence and international reach. Technically, the site leverages modern web technologies including React and Apollo GraphQL, integrates payment processing via Stripe, and employs robust analytics and consent management tools such as Mixpanel and OneTrust. Security posture is strong with enforced HTTPS, CSP nonce usage, and no visible vulnerabilities, although explicit security policies and incident response details are not publicly disclosed. Overall, the site demonstrates a mature digital infrastructure and good compliance with privacy regulations, supporting a trustworthy user experience.

OpenTable Taiwan operates as a leading online restaurant reservation platform, providing consumers in Taiwan with access to over 5,000 restaurants for real-time booking and availability checking. The website is well-localized with traditional Chinese content and targets general consumers seeking convenient dining reservations. Technically, the site leverages modern web technologies including React, Apollo GraphQL, and integrates analytics and consent management tools such as Mixpanel and OneTrust. The site demonstrates good SEO practices and mobile optimization, ensuring a positive user experience. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with privacy regulations including GDPR. Strategic recommendations include publishing a dedicated security policy and vulnerability disclosure to enhance transparency and trust.

OpenTable Italy operates as a leading online restaurant reservation platform, enabling consumers to discover and book tables at top restaurants across Italy. The website is well-branded, professionally designed, and offers comprehensive services including restaurant management and marketing solutions. It targets consumers seeking convenient dining reservations and restaurants looking for digital solutions to manage bookings and events. Technically, the site employs modern web technologies such as React and Apollo GraphQL, integrates analytics tools like Mixpanel and Google Tag Manager, and uses Google Maps APIs for location services. The site is mobile-optimized with good SEO and accessibility features, though accessibility could be further enhanced. Security posture is strong with HTTPS enforcement, security headers, and CSRF protections, but lacks publicly disclosed security policies or incident response contacts. Privacy compliance is robust with clear privacy and cookie policies and GDPR adherence. Overall, the site demonstrates a mature digital presence with high trustworthiness and business credibility.

OpenTable operates a leading global online restaurant reservation platform, providing diners with real-time booking capabilities and restaurants with management and marketing solutions. The website targets diners and restaurateurs, offering a comprehensive service ecosystem that includes private dining and event management. The platform is positioned as a market leader in hospitality technology, with a strong presence in the United Arab Emirates and globally. Technically, the website employs modern web technologies including React, Apollo GraphQL, and integrates with major analytics and consent management tools such as Google Analytics 4 and OneTrust. Hosting is managed via Akamai CDN, ensuring fast and reliable performance. Security posture is strong with HTTPS enforcement, security headers, and CSRF protections, although explicit security policies and incident response details are not publicly disclosed. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms in place. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity, suitable for an enterprise-grade hospitality service provider.

OpenTable Australia operates as a leading online restaurant reservation platform, enabling consumers to discover and book tables at restaurants across Australia. The website is part of a global brand with a strong market position in the hospitality sector, offering services such as restaurant bookings, private dining, and event experiences. The platform targets consumers seeking convenient and reliable restaurant reservations, leveraging a business model centered on connecting diners with restaurants through a digital interface. Technically, the website employs modern web technologies including React and Apollo GraphQL, supported by analytics tools like Mixpanel and Google Tag Manager, ensuring a fast, mobile-optimized, and SEO-friendly user experience. Security posture is strong with HTTPS enforcement, security headers, and CSRF protections, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with consent mechanisms aligned with GDPR standards. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity, with no indications of content blocking or security challenges.

OpenTable Mexico operates as a leading online restaurant reservation platform, providing consumers in Mexico with the ability to discover and book tables at top restaurants 24/7. The website is part of the global OpenTable brand, offering services such as restaurant reservations, management software, marketing, private dining, and event booking. The platform targets Mexican diners seeking convenient and reliable restaurant booking experiences. Technically, the website employs modern web technologies including React, Apollo GraphQL, and integrates analytics tools like Mixpanel and Google Tag Manager. It demonstrates good SEO, accessibility, and mobile optimization practices. Security-wise, the site enforces HTTPS, uses standard security headers, and includes CSRF tokens, reflecting a mature security posture. However, it lacks publicly available security policies and incident response contacts, which could be improved to enhance trust. Overall, the site is professional, trustworthy, and well-positioned in the hospitality sector in Mexico.

OpenTable.nl is a localized Dutch website of the global OpenTable platform, providing online restaurant reservation services, user reviews, and a points-based rewards system. It targets restaurant diners and restaurateurs in the Netherlands, offering a real-time booking network and restaurant management solutions. The website is well-branded, professionally designed, and optimized for SEO and mobile use. Technically, it leverages modern web technologies including React, Apollo GraphQL, and integrates analytics tools such as Mixpanel and Google Tag Manager. Security posture is strong with HTTPS enforcement, security headers, and CSRF protections, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is robust with clear privacy and cookie policies aligned with GDPR. Overall, the site is trustworthy, accessible, and professionally maintained, supporting a large-scale hospitality business.

OpenTable.sg is a regional website of the global OpenTable brand, providing an online platform for restaurant discovery and table reservations primarily targeting consumers in Singapore. The site offers 24/7 booking services and integrates restaurant management software solutions, positioning itself as a leading player in the hospitality reservation industry. The website is professionally designed with excellent content quality and clear navigation, supporting a seamless user experience across devices. Technically, the site employs modern web technologies including React, Google Analytics 4, and OneTrust for privacy compliance, ensuring robust performance and user tracking capabilities. Security posture is strong with HTTPS enforcement, CSP headers, and CSRF tokens, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the domain appears legitimate and consistent with the OpenTable brand, though WHOIS data for the specific .sg subdomain is unavailable, likely due to privacy protection or subdomain usage. Strategic recommendations include enhancing transparency around security policies and incident response to further build user trust.

OpenTable is a leading global online restaurant reservation platform offering real-time booking services, diner reviews, and loyalty rewards. The website targets general consumers seeking dining experiences and restaurants looking to manage reservations. It maintains a strong market position with a large international footprint, including localized domains for multiple countries. The platform is built on modern web technologies including React, Apollo GraphQL, and integrates payment processing via Stripe, supported by robust analytics and consent management tools. Security posture is strong with HTTPS enforcement, CSP, CSRF tokens, and reCAPTCHA integration, though explicit security policies and incident response details are not publicly disclosed. Overall, the site is professional, user-friendly, and compliant with privacy regulations, making it a trustworthy service for users and partners.

OpenTable is a leading online restaurant reservation platform serving primarily Canadian diners through its opentable.ca domain. The website offers 24/7 restaurant booking services and provides restaurant management software solutions, private dining options, and marketing tools for restaurateurs. The platform is well-established with a strong market position and international presence, as evidenced by multiple localized versions and extensive location-based content. Technically, the site employs modern web technologies including React, Apollo GraphQL, and integrates analytics tools such as Mixpanel and Google Tag Manager. The website is mobile-optimized and SEO-friendly, providing a professional user experience. Security-wise, OpenTable enforces HTTPS, uses standard security headers, and includes CSRF tokens, indicating a mature security posture. Privacy compliance is robust with clear privacy and cookie policies and GDPR adherence. However, WHOIS data for the domain is not publicly available, likely due to privacy protection, which is justified for a commercial platform of this scale. Overall, OpenTable.ca is a trustworthy, professionally maintained website with strong business credibility and technical maturity.

OpenTable operates as a leading online restaurant reservation platform, providing diners with the ability to book tables in real-time at fine dining establishments globally. The platform also offers restaurant management software solutions, supporting restaurateurs with reservation management, marketing, and event planning. OpenTable's market position is strong, supported by a comprehensive digital presence and a large user base. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization, reflecting a mature digital infrastructure. Technically, the site leverages modern web technologies including React, Apollo GraphQL, and integrates multiple analytics and tracking tools such as Mixpanel and Google Tag Manager. Security posture is robust with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. The absence of WHOIS data reduces transparency but does not detract from the overall legitimacy of the brand. Strategic recommendations include publishing detailed security policies and incident response contacts to enhance trust and compliance visibility.

L

LOCO

transla.do

64

LOCO is an AI-driven localization service focused on automating and optimizing e-commerce product translations and market expansions. The company leverages a team of AI agents to provide continuous, high-quality localization with integrated SEO and export capabilities, targeting small to large e-commerce businesses and agencies. The website is professionally designed, mobile-optimized, and uses modern web technologies including Webflow, Google Tag Manager, Facebook Pixel, Hotjar, and Cookiebot for analytics and compliance. Security posture is good with HTTPS and cookie consent implemented, though explicit security headers and privacy policies are lacking. WHOIS data is privacy protected, which is typical for tech companies, and no suspicious patterns were found. Overall, the site presents a credible and trustworthy business with strong digital maturity but could improve transparency on privacy and security policies.

Č

Česká televize

ceskatelevize.cz

59

Česká televize is the Czech Republic's public television broadcaster, providing a wide range of content including live TV streaming, news, sports, cultural, educational, and children's programming. It operates multiple branded channels such as ČT1, ČT2, ČT24, ČT sport, Déčko, ČT art, and ČT edu, serving a broad general audience primarily within the Czech Republic. The business model is based on public funding through TV license fees, positioning it as a leading media entity in the country. Technically, the website employs a modern web stack including jQuery, Modernizr, Google Tag Manager, and analytics tools like Gemius and Microsoft Clarity. It is well-optimized for mobile devices, accessible, and SEO-friendly. The site uses HTTPS with strong SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, consent management, and no visible vulnerabilities or exposed sensitive data. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly present and could be improved. No dedicated security policy or incident response contact information is publicly available, and no vulnerability disclosure or security.txt file was found. Overall, the website is professional, trustworthy, and safe for general audiences. The lack of WHOIS data is mitigated by the site's official nature and consistent branding. Strategic recommendations include enhancing security header implementation, publishing incident response details, and establishing a vulnerability disclosure policy to further strengthen security posture.

OpenTable Germany operates as a leading online restaurant reservation platform, enabling users to discover and book tables at top restaurants across Germany. The website is well localized for the German market, featuring comprehensive restaurant listings, reservation management, and marketing solutions for restaurateurs. The platform targets general consumers seeking convenient dining experiences and restaurants looking to optimize bookings and customer engagement. Technically, the site leverages modern web technologies including React, Apollo GraphQL, and integrates analytics and consent management tools such as Mixpanel and OneTrust. Hosting and CDN services are provided by Akamai, ensuring robust performance and security. Security posture is strong with HTTPS enforcement, security headers, and CSRF protections, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high professionalism, excellent content quality, and good privacy compliance, positioning it as a trustworthy and mature digital service in the hospitality sector.

T

Twilio

twilio.org

71

Twilio.org is a dedicated nonprofit arm of Twilio, a leading global technology company specializing in digital communication APIs including SMS, voice, video, and authentication services. The website positions Twilio.org as a platform empowering social impact organizations, nonprofits, healthcare, and education sectors to enhance their communication capabilities through Twilio's technology, financial resources, and expert support. The site demonstrates a strong market position with extensive partnerships and a clear focus on social good. Technically, the website is built on Adobe Experience Manager, leveraging modern analytics tools such as Segment and Google Tag Manager, and employs advanced personalization and consent management solutions like Mutiny and TrustArc. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses consent management for privacy compliance, and shows no signs of exposed sensitive data or vulnerable libraries. However, explicit security headers are not clearly visible in the HTML source, and no dedicated security or incident response pages were found, indicating room for improvement in transparency and security communication. Overall, the website is professional, trustworthy, and aligned with Twilio's corporate identity. The lack of WHOIS data is likely due to privacy protection, which is justified for this business type. The site is safe for general audiences and does not contain any adult or questionable content.

S

Sendgrid

sendgrid.com

74

SendGrid is a leading cloud-based email delivery and marketing platform, trusted by enterprises and developers worldwide. As a Twilio company, it offers robust email APIs, marketing campaign tools, and professional services to optimize email deliverability and engagement. The website reflects a mature digital presence with comprehensive resources, clear navigation, and strong branding. Technically, the site leverages modern analytics, consent management, and performance monitoring tools, hosted on a reliable cloud infrastructure with Adobe Experience Manager as CMS. Security posture is strong with HTTPS enforcement, domain locking, and privacy compliance mechanisms in place, though DNSSEC is not enabled and explicit incident response policies are not publicly detailed. Overall, SendGrid's website demonstrates high professionalism, trustworthiness, and compliance, supporting its market leadership in email services.

X

XART s.r.o.

xart.cz

63

XART s.r.o. is a Czech digital agency specializing in web development, e-commerce solutions, online marketing, and advertising production. The company positions itself as a strong team delivering thoughtful web solutions and effective marketing that drives sales. Their website reflects a mature digital presence with comprehensive service offerings, client references, and certifications such as Google Partner and Heureka. Technically, the site uses modern tracking and analytics tools, including Google Tag Manager, Facebook Pixel, and Seznam tracking, integrated with a proprietary CMS (xartCMS). The site is mobile-optimized and provides a cookie consent mechanism aligned with GDPR requirements. Security posture is generally good with HTTPS enforced, though security headers are not explicitly detected in the provided data. WHOIS data is unavailable, which limits domain trust assessment, but the website content and business information indicate a legitimate and professional operation. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility.

L

Liberecký kraj

kraj-lbc.cz

70

Liberecký kraj is the official regional government authority for the Liberec Region in the Czech Republic. The website serves as a comprehensive portal providing information about the regional office's activities, organizational structure, communication methods, and affiliated organizations. It also offers news updates, public announcements, and access to various regional services. The site targets residents, businesses, and stakeholders within the region, aiming to facilitate transparent governance and public engagement. Technically, the website employs a modern tech stack including jQuery, Moment.js, Bootstrap Bootbox, and Swiper.js for UI components. It integrates Google Tag Manager and Google Analytics for tracking and analytics, with a cookie consent mechanism to comply with GDPR. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure suitable for a government entity. From a security perspective, the site uses HTTPS and implements cookie consent for privacy compliance. However, no explicit security headers were detected in the provided data, suggesting room for improvement in security hardening. The absence of WHOIS data is unusual for a government domain and slightly impacts trust assessment, but the official branding, contact details, and social media presence support its legitimacy. Overall, the website presents a professional, trustworthy, and user-friendly platform for regional government communication. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and ensuring WHOIS data transparency to strengthen trust and compliance.

K

Královéhradecká krajská centrála cestovního ruchu, p. o.

hkregion.cz

58

The website www.hkregion.cz serves as the official tourism portal for the Královéhradecký region in the Czech Republic, managed by the Královéhradecká krajská centrála cestovního ruchu, a public organization. It provides comprehensive information on regional attractions, events, cultural activities, wellness, sports, and family-friendly options, targeting tourists, local visitors, and tourism professionals. The portal features multimedia content, interactive maps, and an AI-based guide to enhance user experience. Technically, the site employs a modern technology stack including jQuery, Leaflet.js for mapping, and integrates Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. It uses the Public4u CMS platform and is optimized for mobile devices with good SEO and accessibility basics. The site is served over HTTPS with a cookie consent mechanism, reflecting compliance with GDPR and privacy standards. From a security perspective, the site enforces HTTPS and secure form submissions but lacks some advanced security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie management are clearly presented, though no explicit security policy or incident response information is available. The WHOIS data is unavailable, limiting domain legitimacy verification, but the official branding and partner links support its authenticity. Overall, the site is a well-maintained regional government tourism portal with good content quality, technical implementation, and privacy compliance. Strategic improvements could focus on enhancing security headers and accessibility features to further strengthen its security posture and user inclusivity.

F

FUNKE Works GmbH

trainee-gefluester.de

70

Trainee-Gefluester.de is a German online platform operated by FUNKE Works GmbH, specializing in trainee job listings and career advice for graduates and young professionals. The website offers a comprehensive range of services including job search, career tips, application templates, podcasts, and a career check tool, positioning itself as a niche job portal in the education sector. The platform targets job seekers in Germany looking for trainee programs and related career resources. Technically, the website employs modern web technologies such as Tailwind CSS, StimulusJS, Turbo, and uses CDNs like Amazon CloudFront and Imgix for performance optimization. It integrates Google Tag Manager, Plausible Analytics, and a consent management platform to ensure GDPR compliance. Security-wise, the site enforces HTTPS and uses a consent mechanism for cookies, but lacks explicit security headers and published incident response policies. Overall, the site is professional, secure, and trustworthy with good privacy compliance, but could improve by publishing security policies and contact information for security incidents.

F

FUNKE Works GmbH

praktikum.info

71

Praktikum.info is a German internship marketplace operated by FUNKE Works GmbH, targeting students, pupils, and career entrants seeking internships in Germany and abroad. The platform offers a large selection of internship listings, career check tools, application tips, templates, and a podcast for career advice. The website is well-positioned in the education sector with a medium-sized market presence and a professional, user-friendly design. Technically, the site uses modern frameworks such as Turbo (Hotwire), Tailwind CSS, and is hosted on Amazon Cloudfront CDN, ensuring fast performance and mobile optimization. Privacy compliance is strong, with GDPR-compliant cookie consent and a comprehensive privacy policy. Security posture is good with HTTPS enforced and use of security best practices, though explicit security headers could be verified further. WHOIS data is privacy protected, which is justified for this business type. Overall, the site is trustworthy, professional, and well-maintained.

F

FUNKE Works GmbH

azubi.de

70

Azubi.de is a leading German online platform specializing in apprenticeship and dual study program listings, operated by FUNKE Works GmbH. The website targets students and young adults seeking vocational training opportunities in Germany, offering comprehensive job listings, employer profiles, and career advice. The platform enjoys a strong market position supported by partnerships with prominent companies and a professional, user-friendly design. Technically, the site leverages modern frameworks and CDNs, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS enforcement, GDPR-compliant cookie consent, and secure form handling, although explicit security headers could be further verified. No critical vulnerabilities or suspicious content were detected. Overall, Azubi.de demonstrates a mature digital presence with good privacy compliance and business credibility.

M

Muzeum hlavního města Prahy

muzeumprahy.cz

66

Muzeum hlavního města Prahy is a well-established municipal museum dedicated to preserving and presenting the history and culture of Prague. It operates multiple exhibition sites and offers a variety of cultural events, educational programs, and publications. The website reflects a mature digital presence with rich multimedia content, clear navigation, and multilingual support. Technically, it employs modern web technologies including Google Tag Manager and cookie consent mechanisms, ensuring compliance with privacy regulations such as GDPR. Security posture is generally good with HTTPS enforced, though the absence of visible security headers and incomplete WHOIS data suggest areas for improvement. Overall, the site is trustworthy and professional, serving a broad audience including families, schools, and researchers.

G

GHMP

ghmp.cz

64

GHMP (Galerie hlavního města Prahy) is a prominent municipal gallery in Prague specializing in modern and contemporary art. The website showcases exhibitions, educational programs, online collections, and cultural events, positioning GHMP as a key cultural institution serving a broad general audience. The business model focuses on public engagement through exhibitions, workshops, and publishing activities, supported by commercial rentals and an e-commerce platform. The website reflects a medium-sized organization with consistent branding and strong trust indicators including official municipal affiliation and comprehensive privacy compliance. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery, Slick Slider, and Marquee3k for interactive content. It integrates Google Tag Manager and Facebook Pixel for analytics and marketing, alongside a GDPR-compliant cookie consent mechanism. The site is mobile-optimized with good accessibility and SEO practices, delivering a moderate performance experience. From a security perspective, the site enforces HTTPS and employs cookie consent best practices. However, it lacks explicit security headers and publicly available security or incident response policies, which are recommended for enhanced protection and transparency. No vulnerabilities or exposed sensitive data were detected in the content. Overall, GHMP's website is professional, content-rich, and compliant with privacy regulations, though the absence of WHOIS registration data introduces some uncertainty regarding domain registration transparency. Strategic improvements in security policy disclosure and WHOIS data availability would further strengthen trust and security posture.

M

Městská knihovna v Praze

mlp.cz

55

Městská knihovna v Praze operates as a major public library serving the city of Prague, offering a wide range of cultural and educational services including lending books, music, films, and artworks, as well as hosting cultural events and providing free e-book downloads. The website is professionally designed, multilingual, and provides user account functionality. Technically, the site uses established JavaScript libraries and APIs, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent, but lacks some advanced security headers and uses an outdated jQuery version. WHOIS data is unavailable, which slightly impacts trust but the official city affiliation and professional presentation support legitimacy. Overall, the site is a reliable public service portal with room for security and technical improvements.

P

Prague City Tourism

prague.eu

69

Prague City Tourism operates an official and comprehensive tourism website for the city of Prague, providing extensive information on cultural sites, events, accommodation, and visitor services. The website targets tourists and visitors, offering e-commerce capabilities for tickets and city passes. Technically, the site is built on WordPress with WooCommerce and uses modern SEO and accessibility practices, including Google Tag Manager and Cookiebot for consent management. Security posture is strong with HTTPS and security headers, though privacy and terms policies are not explicitly found. Overall, the site is professional, trustworthy, and well-optimized for user experience and search engines.

B

Botanická zahrada hlavního města Prahy

botanicka.cz

61

Botanická zahrada hlavního města Prahy operates as a public botanical garden located in Prague, Czech Republic. It offers a wide range of services including public garden access, educational programs for schools and groups, seasonal exhibitions, an e-shop, and event hosting. The garden is positioned as a leading botanical institution in Prague, focusing on plant conservation, biodiversity, and public education. The website is professionally designed with clear navigation and rich content, targeting a general audience including families, students, and visitors interested in nature and botany. Technically, the site uses modern web technologies such as Alpine.js and integrates multiple analytics and marketing tools including Google Analytics and Facebook Pixel. The site is mobile-optimized and performs moderately well, though some accessibility features could be enhanced. Security posture is good with HTTPS enforced and no obvious vulnerabilities, but could benefit from additional security headers and published security policies. Privacy compliance is well addressed with a cookie consent banner and privacy policy present. Contact information is clearly provided, enhancing business credibility. WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and official contact details support its legitimacy.

P

Prague Zoo

zoopraha.cz

57

Prague Zoo operates as a prominent zoological garden in the Czech Republic, offering visitor services, educational programs, and active animal conservation efforts. The website serves as an official English-language portal providing comprehensive information about the zoo, including visitor guidance, animal exhibits, and multimedia content. The organization targets tourists, educators, conservation supporters, and the general public, positioning itself as a leading non-profit institution in the hospitality and conservation sectors. Technically, the website is built on Joomla CMS with a moderate performance profile. It integrates modern JavaScript libraries such as MooTools and accessibility tools including screen reader support and text-to-speech functionalities. The site employs HTTPS with Google reCAPTCHA for form security and Google Tag Manager for analytics and marketing. While the site is accessible and well-structured, it lacks some security headers that could enhance its security posture. From a security perspective, the site demonstrates good practices including HTTPS enforcement, cookie consent mechanisms, and anti-bot protections. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear GDPR-aligned policies and cookie management. Overall, Prague Zoo's website is professional, user-friendly, and secure, though the missing WHOIS information slightly diminishes domain trust. Strategic recommendations include improving security headers, verifying domain registration details, and maintaining up-to-date CMS and plugin versions to mitigate potential vulnerabilities.

D

Dopravní podnik hl. m. Prahy, akciová společnost

dpp.cz

62

Dopravní podnik hl. m. Prahy, akciová společnost (DPP) is the primary public transportation operator in Prague, Czech Republic, managing metro, tram, and bus services. The website serves as a comprehensive portal for passengers, providing schedules, ticketing information, service updates, and customer support. The company maintains a strong market position as the main public transit provider in the city, targeting daily commuters and visitors. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and analytics tools, with good mobile optimization and accessibility. The presence of structured data enhances SEO and content discoverability. Security measures include HTTPS enforcement and CSRF tokens on forms, though some security headers could be improved. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is supported by a comprehensive privacy policy and cookie consent mechanisms, reflecting GDPR adherence. However, the absence of a security policy or incident response contact is noted. Overall, the website is professional, trustworthy, and user-friendly, though the lack of WHOIS data reduces domain trustworthiness. Strategic improvements in security headers and transparency around incident response would enhance the security and compliance profile.

M

mawis

mawis.eu

68

MAWIS is a specialized service provider focused on delivering digital solutions for municipal and governmental infrastructure management in the Czech Republic. Their offerings include cadastral data services, urban planning tools, and public infrastructure management, targeting government agencies and municipalities. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress, utilizing common plugins such as WooCommerce, Rank Math SEO, and Complianz GDPR for compliance and e-commerce functionality. The site employs modern web technologies including Google Tag Manager and Google Fonts, ensuring a moderate performance and good mobile optimization. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, indicating awareness of privacy regulations. However, explicit security policies and incident response information are absent, and security headers are not evident, suggesting room for improvement in security hardening. Overall, the website presents a trustworthy and compliant digital presence with moderate technical sophistication. Strategic enhancements in security policies and technical security controls would further strengthen its posture.

T

Technická správa komunikací hlavního města Prahy, a.s.

tsk-praha.cz

56

Technická správa komunikací hlavního města Prahy, a.s. (TSK Praha) is a large public company responsible for managing and maintaining the transportation infrastructure of Prague, including roads, bridges, tunnels, greenery, cycling paths, and parking facilities. The company operates under the ownership of the City of Prague and aims to improve the quality of life in the city through efficient infrastructure management and development. Their website reflects a professional and comprehensive digital presence with detailed information about their activities, projects, and public services. The technical infrastructure of the website is built on WordPress with modern plugins such as Yoast SEO, WPForms, and Instagram Feed integration. The site is well-optimized for SEO, mobile-friendly, and includes accessibility features. Security measures include HTTPS enforcement, security headers, Google reCAPTCHA on forms, and a cookie consent mechanism compliant with GDPR. Security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the website lacks explicit incident response contact information and a vulnerability disclosure policy, which are recommended for enhanced security transparency. Privacy compliance is robust, with clear privacy and cookie policies and user consent mechanisms. Overall, TSK Praha presents a trustworthy and professional online presence consistent with its role as a public infrastructure manager. Strategic recommendations include publishing incident response contacts, establishing a vulnerability disclosure program, and enhancing security policy disclosures to further strengthen trust and security posture.

P

Prettysocial Media

prettysocialmedia.nl

52

Prettysocial Media is a Netherlands-based advertising agency specializing in placing branded content on Facebook and Instagram through a network of over 350 influential publishers. Their business model leverages the authority of publishers to enhance campaign effectiveness, targeting brands and companies seeking social media advertising solutions. The website reflects a professional and consistent brand image with clear contact information and case studies showcasing their work. Technically, the site is built on WordPress using modern themes and plugins, optimized for performance and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response details are absent. Privacy compliance is addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the website presents a trustworthy and credible business presence with room for improvement in security transparency and terms of service documentation.

Bluehost is a leading web hosting and domain registration company, now partnered with Fast Domain to provide enhanced hosting and domain services. The website presents a professional and comprehensive offering targeting individuals and businesses seeking reliable hosting solutions. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS and multiple analytics and marketing tools with appropriate consent mechanisms. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers could be further confirmed. The WHOIS data for the domain is unavailable, likely due to registry policies or privacy, but the brand's market presence and website professionalism support legitimacy. Overall, Bluehost demonstrates a mature digital presence with extensive service offerings and good compliance practices.

Bluehost Inc. operates a comprehensive web hosting and domain registration platform, serving a broad audience from beginners to professional agencies. The website highlights a partnership with Hostmonster and offers a wide range of hosting solutions including shared, VPS, dedicated, and cloud hosting, alongside professional services such as website design and marketing. The company is positioned as a leading enterprise in the technology sector with a strong brand presence and multiple subsidiary hosting brands. Technically, the site leverages modern technologies including Adobe Experience Manager, various analytics and marketing pixels, and robust consent management tools, ensuring a mature digital infrastructure. Security posture is strong with HTTPS enforced, cookie security flags, and ADA compliance scripts, though explicit security headers could be more visible. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for performance and user experience.

C

CzechTourism

czechtourism.cz

63

CzechTourism is the official national tourism organization of the Czech Republic, focused on promoting the country as a travel destination through various marketing activities and projects. The website serves as a digital platform to communicate these efforts to tourists and industry stakeholders. Technically, the site employs modern frontend technologies such as Vue.js and integrates Google services like Tag Manager and reCAPTCHA, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied and reCAPTCHA usage, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. Overall, the site appears trustworthy and professional, but the absence of WHOIS data and privacy documentation slightly reduces confidence.

J

Jonak

jonak.fr

71

Jonak is a French e-commerce retailer specializing in high-end women's footwear. The website showcases a broad collection of fashionable shoes and accessories, targeting women seeking trendy and premium products. The brand maintains a consistent and professional online presence with clear navigation, structured data, and integration of modern web technologies such as Vue.js, jQuery, and Google Maps API. The site supports customer engagement through social media and offers customer service contact options. Technically, the website is well-implemented with HTTPS and performance optimizations, though explicit privacy and terms of service pages are not clearly identified in the provided content. Security posture is solid with HTTPS and no visible vulnerabilities, but could be improved by adding explicit security headers and a vulnerability disclosure policy. WHOIS data is unavailable, which slightly reduces domain trust verification. Overall, Jonak presents a credible and professional e-commerce platform with room for enhanced privacy and security transparency.

C

CzechCrunch

cc.cz

48

CzechCrunch is a well-established Czech media website founded in 2002, serving as a primary source of inspiration and information for modern individuals in the Czech Republic. It focuses on business, startups, lifestyle, travel, and technology news. The site offers a variety of content formats including articles, podcasts, newsletters, and events, supported by advertising revenue. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Alpine.js, and multiple analytics and advertising integrations. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and security headers, but lacks published security policies and incident response information. Privacy compliance is weak due to missing visible privacy and cookie policies and consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security transparency.

Sunheron is a travel-focused website designed to assist users in selecting their next holiday destination. The site leverages modern web technologies such as React and Gatsby, providing a visually appealing and responsive user experience. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and age, which impacts overall trustworthiness. The website lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with no detected security headers and the presence of tracking scripts like Google Tag Manager and Hotjar, indicating moderate user tracking but limited privacy compliance. Overall, the site appears functional and professionally designed but requires improvements in transparency, security, and legitimacy verification.

H

Hovor od Ježíška | Originální vánoční překvapení pro děti

hovorodjeziska.cz

56

Hovor od Ježíška is a Czech-based online service offering personalized Christmas phone calls from Santa (Ježíšek) to children. The service allows parents to customize the call with the child's name, age, and specific praise or advice, creating a magical holiday experience. The website is professionally designed, mobile-optimized, and includes rich structured data such as reviews and FAQs, enhancing user trust and SEO. The business targets families with children primarily in the Czech Republic and operates a niche market position with a clear value proposition. Technically, the site uses modern frameworks like Next.js and integrates payment processing via GoPay, along with marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security posture is moderate with HTTPS usage but lacks explicit security headers and cookie consent mechanisms. WHOIS data is unavailable, which impacts domain trustworthiness, but the website content and business model appear legitimate and professional. Overall, the site demonstrates a mature digital presence with room for improvement in security and privacy compliance.

P

Pozdrav od Ježíška, s.r.o.

pozdravodjeziska.cz

54

Pozdrav od Ježíška, s.r.o. operates a specialized e-commerce platform offering personalized Christmas postcards with custom messages from Ježíšek, targeting children and families primarily in the Czech Republic. The service includes selecting original postcard designs, writing or choosing pre-written messages, and postal delivery, with a strong charitable component supporting the Fond ohrožených dětí. The website demonstrates a consistent brand presence and positive customer feedback, positioning it as a trusted niche player in its market segment. Technically, the website employs modern JavaScript frameworks and integrates multiple analytics and marketing tools such as Google Tag Manager, TikTok Pixel, Facebook Pixel, and Sentry for error monitoring. The site is mobile-optimized with good SEO practices and moderate performance. However, explicit CMS or hosting details are not disclosed. From a security perspective, the site enforces HTTPS and uses some best practices like error monitoring and consent management for cookies and tracking. Nonetheless, it lacks explicit security headers and published security policies or incident response contacts, which could be improved to enhance trust and compliance. The absence of WHOIS data reduces transparency but does not currently impact the operational legitimacy of the site. Overall, the website is professional, user-friendly, and trustworthy for its intended audience, with moderate technical maturity and a solid privacy compliance posture. Strategic improvements in security policies and transparency would further strengthen its risk profile.

N

Next analytica

nextanalytica.io

62

Next analytica is a Czech-based technology company specializing in server-side tracking solutions designed to enhance marketing campaign performance by increasing data accuracy and speed. Their offerings include proprietary server-side analytics products, Looker Studio reporting, margin import tools, and web analytics consulting. The company targets marketing professionals, e-commerce platforms, and agencies, positioning itself as a trusted provider with a strong regional presence and a medium-sized team of experts. Technically, the website is built on Webflow CMS, leveraging modern cloud infrastructure primarily hosted on Microsoft Azure and AWS, with integrations to Google Tag Manager, Facebook Pixel, and other marketing tools. The site demonstrates good performance, mobile optimization, and SEO practices. Security-wise, the site enforces HTTPS, provides cookie consent mechanisms compliant with GDPR, and uses server-side tracking to improve data control. However, it lacks explicit security headers and published incident response policies. WHOIS data is unavailable due to privacy protection, which is justified for this business type. Overall, the website is professional, trustworthy, and well-structured, with room for improvement in security transparency and accessibility.

M

Metrák, s.r.o.

metrak.cz

55

Metrák, s.r.o. operates an online platform for ordering waste container rentals and construction material deliveries across the Czech Republic. The company leverages a large network of over 450 local suppliers and nearly 3,000 containers to provide fast and reliable service. Their website offers a user-friendly interface with online pricing, ordering, and payment capabilities, targeting both individual and business customers. The business is well-positioned in the transportation and logistics sector with strong customer trust signals including high ratings on Google and Firmy.cz. Technically, the website is built on modern web technologies including Next.js and React, with integration of multiple analytics and marketing tools such as Google Tag Manager, Facebook SDK, and Smartlook. The site is mobile-optimized, fast-loading, and SEO-friendly, reflecting a mature digital infrastructure. However, some improvements could be made in explicit security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site enforces HTTPS and does not expose sensitive data. While no critical vulnerabilities were detected, the absence of published security policies and incident response contacts suggests room for improvement in transparency and readiness. The lack of WHOIS data reduces domain registration trust but is mitigated by the professional presentation and external trust indicators. Overall, Metrák.cz presents a credible, professional, and functional online service with moderate risk. Strategic enhancements in privacy compliance and security transparency would further strengthen their position and customer confidence.

Pecka.TV is a Czech-based internet television service operated by VELUS Invest SE, offering affordable IPTV packages with over 160 channels, including popular Czech and international content. The service emphasizes flexibility with no contracts, multi-device support, and features such as ad skipping and cloud DVR. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Yoast SEO, and Cookiebot for consent management. Social media presence is active on Facebook, Instagram, and YouTube. Security posture is good with HTTPS and consent mechanisms, though some security headers and policies are not explicitly published. The domain registration is consistent with the business profile and country, indicating legitimacy. However, explicit privacy policy and terms of service documents were not found in the provided content, which could be improved for compliance and trust.

T

Telly s.r.o.

telly.cz

67

Telly s.r.o. operates a modern television subscription service targeting the Czech market, offering TV packages with promotional discounts and a focus on family entertainment. The company is positioned as a medium-sized telecommunications provider founded in 2019, with a clear digital presence and active marketing efforts. The website is built on WordPress and integrates multiple analytics and advertising technologies, including Google Analytics, Facebook Pixel, TikTok Pixel, and Criteo, supported by a comprehensive cookie consent mechanism ensuring GDPR compliance. The technical infrastructure is modern and well-optimized for mobile and SEO, hosted with Active24 and using Cloudflare DNS services. Security posture is good with HTTPS enforced and no critical vulnerabilities detected, though improvements in security headers and published security policies are recommended. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Ž

Živina

zivina.cz

55

Živina.cz is a Czech e-commerce platform specializing in quality food products designed for easy and tasty cooking. The company emphasizes fresh and farm-sourced ingredients, targeting general consumers interested in convenient cooking solutions. The website presents a professional and consistent brand image with a clear focus on retail food products, supported by a loyalty program and wholesale options. Technically, the site is built on the Shoptet platform, utilizing modern JavaScript libraries and multiple marketing and analytics integrations, ensuring a moderate to good performance and mobile optimization. Security posture is strong with HTTPS enforcement and security headers, though the absence of a public security policy and incident response information suggests room for improvement. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. The lack of WHOIS data limits domain trust assessment but does not detract from the site's apparent legitimacy and professionalism.

M

Mama Labels

mamalabels.cz

59

Mama Labels is an e-commerce retailer specializing in personalized name stickers and labels for children's clothing, shoes, school supplies, and toys. The company targets parents and caregivers seeking durable, water-resistant labeling solutions for children attending school, kindergarten, or daycare. The website is professionally designed, mobile-optimized, and offers multiple language versions for regional markets, indicating a mature digital presence. Technically, the site runs on PrestaShop CMS and integrates various marketing and analytics tools such as Google Tag Manager, Hotjar, and Facebook Pixel, with user consent mechanisms in place. Security posture is strong with HTTPS and security headers implemented, though no explicit security or incident response policies are published. WHOIS data is unavailable, limiting domain trust analysis, but the website content and business presentation suggest legitimacy. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility.

D

DigiKoalice

digikoalice.cz

63

DigiKoalice is a Czech national coalition platform dedicated to advancing digital skills and employment opportunities. It operates as a government-affiliated educational platform supported by the Ministry of Education, Youth and Sports and the National Pedagogical Institute of the Czech Republic. The platform connects schools, ICT companies, and non-profit organizations to foster digital literacy and innovation in education. It offers resources such as event calendars, courses, best practice examples, and strategic documents to support digital education across the Czech Republic. Technically, the website is built on WordPress 6.8.3, leveraging modern web technologies including Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. The site is mobile-optimized, well-structured, and uses a cookie consent mechanism compliant with GDPR principles. Hosting appears to be managed through REG-WEBGLOBE with DNS services by Ignum, consistent with Czech-based operations. From a security perspective, the site enforces HTTPS with a good SSL configuration and employs cookie consent for user privacy. However, it lacks explicit security headers and does not publicly disclose security policies or incident response procedures. No vulnerabilities or exposed sensitive data were detected in the provided content. The domain registration data aligns well with the website's claims, indicating a legitimate and trustworthy entity. Overall, DigiKoalice presents a professional, secure, and privacy-conscious platform serving the Czech educational sector. Strategic recommendations include enhancing security headers, publishing formal security and incident response policies, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

The website vzdelavanivdatech.cz serves as an official educational data visualization platform operated by the Czech School Inspectorate (Česká školní inspekce ČR). It provides comprehensive visual data and insights related to the Czech education sector, including secondary school entrance exams, regional schooling, higher education, and EU funding. The platform targets stakeholders within the education ministry and related organizations, offering a centralized resource for educational data. Technically, the site employs modern frontend technologies such as Bootstrap 5 and Google Tag Manager, hosted on Forpsi infrastructure. It is mobile-optimized with a clean, professional design and consistent branding aligned with government standards. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though security headers and explicit privacy/cookie policies are lacking. Overall, the site demonstrates high business credibility and trustworthiness with transparent WHOIS data and official contact information.