Security Directory

The website https://crzp.mzp.cz/portal/ serves as the Central Environmental Registry (CRŽP) for the Czech Republic, managed by the Ministry of Environment and operated by the Czech Environmental Information Agency. It provides a centralized information system for managing environmental data including user registries, subject registries, authorizations, and various environmental operation sites. The portal targets public administration users and connected agenda information systems, positioning itself as an essential government service in the environmental sector. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Ajax Search Lite, ensuring good SEO and user experience. The site is mobile-optimized and uses HTTPS with a solid SSL configuration. While some advanced security headers are missing, the overall security posture is strong with no visible vulnerabilities or exposed sensitive data. Security-wise, the site benefits from official government backing and provides clear technical support channels. No incident response or explicit security policy pages were found, which could be improved. Privacy compliance is well addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professional, though the absence of WHOIS data limits domain registration transparency. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and improving accessibility features.

I

InstaWP

instawp.io

63

InstaWP is a specialized cloud platform focused on rapid WordPress site deployment and hosting, targeting developers, agencies, and freelancers. The platform offers instant site creation, reusable snapshots, migration tools, and a marketplace for templates and WaaS solutions. The business is positioned as a nimble, technology-driven service with a pay-as-you-go hosting model and no long-term commitments. Technically, the website is built on WordPress with Elementor and uses modern caching and SEO plugins, supported by Cloudflare DNS and NameCheap domain registration. The site is well-optimized for performance, mobile responsiveness, and SEO, with structured data enhancing search visibility. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and security policies are not explicitly published. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and technically mature, but could improve transparency on privacy and security policies.

I

Internet Projekt, a.s.

cng.cz

65

The website www.cng.cz represents a professional platform operated by Internet Projekt, a.s., focused on providing information and services related to compressed natural gas (CNG) refueling stations across the Czech Republic. It serves vehicle owners and fleet operators who utilize CNG as an alternative fuel, offering detailed station locations, pricing, payment options, and route planning tools. The site demonstrates a solid market position within the energy and transportation sectors in the region. Technically, the website employs modern web technologies including Google Maps API for geolocation services, jQuery for DOM manipulation, and Cookiebot for cookie consent management. It integrates Google Tag Manager and Google Analytics for tracking and analytics purposes. The site is mobile-optimized with good design quality and navigation clarity, although some accessibility and SEO optimizations could be improved. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, which are positive indicators. However, the absence of visible security headers and lack of explicit privacy policy or terms of service pages represent areas for improvement. The WHOIS data for the domain is unavailable, which limits the ability to fully verify domain legitimacy and trustworthiness. Overall, the website is functional, professional, and serves its business purpose well, but it would benefit from enhanced transparency regarding privacy, security policies, and contact information to strengthen user trust and compliance posture.

The website prepis.innogy.cz serves as an online platform for innogy, a major energy company in the Czech Republic, offering convenient online services for electricity and gas contract transfers. The site targets both households and businesses, providing detailed guides, video tutorials, and customer support channels to facilitate energy contract changes efficiently. The business model focuses on digital customer engagement and streamlined service delivery in the energy sector, positioning innogy as a trusted and accessible energy provider in the Czech market. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, Cookiebot for consent management, and Mluvii chat widgets for customer interaction. The site is well-structured with responsive design, good accessibility features, and SEO optimization. However, no CMS or hosting provider details were explicitly detected. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit HTTP security headers and a published vulnerability disclosure policy. No WHOIS registration data was found, which slightly reduces trustworthiness but the strong brand presence and consistent content mitigate concerns. Contact information is clearly provided, including phone numbers and interactive forms, supporting good user engagement. Overall, the website demonstrates a solid digital presence with good content quality and user experience. Security posture is adequate but could be improved by adding security headers and formal incident response information. The absence of WHOIS data is a notable gap. Strategic recommendations include enhancing security headers, publishing a security.txt file, and continuous monitoring of third-party scripts to maintain a robust security and compliance posture.

I

innogy

ipremium.cz

67

Innogy.cz operates as a major energy provider in the Czech Republic, serving over 1.7 million customers with electricity, natural gas, and related services. The website premium.innogy.cz focuses on the innogy Premium customer loyalty program, offering discounts and monthly contests to enhance customer engagement. The company positions itself as a leading energy supplier with a large workforce and a broad market presence. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and Cookiebot for consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and bot protection via Cloudflare Turnstile, though explicit security headers and vulnerability disclosure mechanisms are absent. Privacy compliance is well addressed with clear policies and consent banners. Overall, the site is professional, user-friendly, and trustworthy, but the lack of WHOIS data introduces some uncertainty about domain registration legitimacy.

S

Selim Rana

primeslider.pro

66

Prime Slider is a small technology business specializing in providing dynamic, ready-to-use slider templates designed for the Elementor page builder. The company, represented by Selim Rana, offers next-generation slider designs that simplify the web design process by allowing users to easily replace media files and content. The website demonstrates a professional and consistent brand presence with good SEO and structured data implementation. Technically, the site is built on WordPress with Elementor and BDThemes plugins, utilizing modern JavaScript libraries such as Swiper.js and jQuery. The site is mobile optimized and integrates Google Tag Manager with IP anonymization for analytics. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies. No contact information or incident response details are provided, which limits transparency. Overall, the domain age and website content align well, indicating a legitimate and focused business.

M

MEDIA CLUB, s.r.o.

media-club.tv

49

MEDIA CLUB, s.r.o. operates as a media representation and advertising sales company affiliated with the Prima Group in the Czech Republic. The company leverages its extensive knowledge of the advertising market and represents over forty media outlets. The website serves as a professional platform to communicate news, services, and contact information to advertisers and media buyers. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and presents content clearly with good navigation and branding consistency. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business, indicating legitimacy and trustworthiness.

I

Informační turistické centrum Železná Ruda

eshop-itc.cz

50

The website www.eshop-itc.cz represents the online e-commerce platform of the Information Tourist Center Železná Ruda, focused on selling local souvenirs, books, and gifts related to the Šumava region in the Czech Republic. It targets tourists and local customers interested in regional products, operating as a small retail business with a niche market position. The site offers a catalog of products with customer ratings, a shopping cart system, and contact options including phone, email, and a contact form. Privacy and cookie policies are present, indicating GDPR compliance. Technically, the website uses a traditional jQuery-based stack with additional libraries such as Owl Carousel and FancyBox for UI components. The platform appears custom-built or proprietary, with moderate performance and good mobile optimization. SEO and accessibility features are basic but functional. No advanced analytics or tracking services were detected. From a security perspective, the site uses HTTPS and implements a cookie consent banner, but lacks visible security headers and vulnerability disclosure mechanisms. No WHOIS data was available for the domain, which reduces transparency and trustworthiness. The absence of security.txt or incident response contacts indicates room for improvement in security posture. Overall, the website is functional and serves its business purpose well, but would benefit from enhanced security practices, improved domain transparency, and more comprehensive privacy and incident response disclosures to strengthen trust and compliance.

M

Ministerstvo zemědělství

viscojis.cz

60

The website viscojis.cz is a Czech government-affiliated informational platform focused on food, health, nutrition, and food safety. It serves as an educational resource providing detailed content on nutrients, healthy eating habits, food safety practices, and nutrition-related diseases. The site targets the general public interested in nutrition and food safety, positioning itself as an authoritative source backed by the Ministry of Agriculture of the Czech Republic. Key services include educational articles, food safety guidelines, and health-related nutrition information. Technically, the website is built on WordPress 6.8.3 with standard web technologies such as jQuery and Bootstrap Icons. It demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The site uses HTTPS, ensuring secure communication, but lacks some security headers and privacy compliance features such as privacy and cookie policies. No advertising or tracking technologies were detected, indicating a privacy-conscious approach. From a security perspective, the site benefits from HTTPS and secure form handling but could improve by implementing security headers and publishing vulnerability disclosure information. The absence of privacy and cookie policies represents a compliance gap, especially under GDPR. Contact information is clearly provided, enhancing trust and credibility. WHOIS data confirms the domain's legitimacy and consistency with the government affiliation. Overall, viscojis.cz is a trustworthy, well-structured government resource with good content quality and technical implementation. Strategic improvements in privacy compliance and security headers would enhance its security posture and regulatory adherence.

S

Státní zdravotní ústav

szu.cz

49

Státní zdravotní ústav (SZÚ) is the official Czech Republic government public health institute under the Ministry of Health. It provides epidemiological research, public health data, education, and health promotion services. The website serves a broad audience including healthcare professionals, government entities, and the general public. SZÚ is positioned as a key national health authority with a long history and strong institutional backing. The site offers comprehensive content on health topics, research projects, and public health initiatives.

Č

Česká informační agentura životního prostředí

ispop.cz

55

ISPOP is a Czech government-operated integrated system designed to facilitate the electronic submission of environmental reporting obligations. Managed by the Czech Environmental Information Agency, it serves registered users who must comply with environmental data reporting requirements. The platform provides comprehensive technical documentation, user registration via the CRŽP system, and support services including a helpdesk and telephone assistance. The website is professionally designed with consistent government branding and clear navigation, targeting entities obligated to report environmental data in the Czech Republic. Technically, the website is built on WordPress with modern plugins such as Beaver Builder and Ajax Search Lite, leveraging jQuery and FontAwesome for UI enhancements. It employs HTTPS with strong SSL configuration and includes a cookie consent mechanism limited to technical cookies. While the site lacks explicit security headers and detailed incident response policies, it uses secure login via OpenID Connect and maintains a minimal tracking footprint, reflecting a moderate to good digital maturity. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and secure authentication. However, the absence of published security policies, vulnerability disclosure mechanisms, and security headers suggests room for improvement. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which limits domain trust assessment, but the official government affiliation and partner links support legitimacy. Overall, ISPOP presents a trustworthy and functional government service platform with solid content quality and security posture. Strategic enhancements in security transparency and WHOIS data availability would further strengthen its credibility and compliance standing.

P

Provozně ekonomická fakulta ČZU v Praze

vu3v.cz

58

The website vu3v.cz serves as the official portal for the Virtual University of the Third Age (VU3V), operated by the Provozně ekonomická fakulta of the Czech University of Life Sciences Prague. It provides lifelong learning opportunities primarily targeting seniors aged 50 and above, including retirees and unemployed persons. The platform offers both virtual and in-person educational courses, consultation centers, and free bonus courses, aiming to support active aging and social engagement through education. The site is well-positioned as a niche educational provider within the Czech and Slovak regions, leveraging Moodle as its learning management system.

M

Ministerstvo průmyslu a obchodu

narodniportal.cz

54

The website 'Oficiální portál Rady Kvality ČR' is an official Czech government portal managed by the Ministry of Industry and Trade. It serves as a national information hub focused on quality management and corporate social responsibility (CSR) in the Czech Republic. The portal provides comprehensive information about the Quality Council of the Czech Republic, national quality policies, CSR initiatives, national awards, and related events. It targets organizations, businesses, and the general public interested in quality and CSR standards within the country. Technically, the site is built on WordPress 6.8.2 with modern plugins such as Yoast SEO Premium for search optimization, Google Tag Manager and Google Analytics for visitor tracking, and WP 2FA Premium for enhanced security. The site employs responsive design, lazy loading for images, and cookie consent mechanisms compliant with GDPR. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and uses two-factor authentication plugins, indicating a good security posture. However, no explicit security headers were detected in the HTML source, and there is no publicly available incident response or vulnerability disclosure information. No vulnerabilities or exposed sensitive data were found in the content. Privacy compliance is strong with a clear privacy policy and cookie consent banner. Overall, the website presents a trustworthy and professional government portal with good content quality and technical implementation. The lack of WHOIS data is noted but is consistent with government domain policies. Strategic recommendations include adding security headers, publishing incident response policies, and enhancing accessibility compliance to further strengthen the site's security and trustworthiness.

I

innogy Energo

innogy-energo.cz

67

innogy Energo is a major energy company operating in the Czech Republic, providing natural gas, electricity, and related services to approximately 1.7 million customers. The company emphasizes its extensive operational footprint with over 4000 employees and multiple service offerings including CNG filling stations, photovoltaics, and electromobility solutions. The website reflects a professional and consistent brand presence with clear navigation and comprehensive service information. Technically, the site leverages modern technologies such as Sitecore CMS, jQuery, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. Security measures include HTTPS enforcement and bot protection via Cloudflare Turnstile, though explicit security headers and policies are not visible. Privacy compliance is well addressed with detailed cookie and privacy policies and a consent banner. Overall, the site demonstrates a solid security posture with room for improvement in publishing explicit security policies and incident response contacts. The absence of WHOIS data slightly impacts trust but is mitigated by the professional presentation and official contact details.

W

Wug Torino 2025

wugtorino2025.com

56

Wug Torino 2025 is the official digital presence for the FISU World University Games Winter event scheduled in Torino in 2025. The website serves as a comprehensive platform for event information, ticket sales, volunteer coordination, media resources, and cultural programming. It targets students, athletes, sports enthusiasts, and the general public interested in university-level winter sports. The business model revolves around event promotion and merchandising, positioning itself as the authoritative source for all event-related content. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and integrating tracking and cookie compliance tools such as PixelYourSite and Iubenda. The site is hosted with a reputable registrar and uses Cloudflare DNS, ensuring reliable performance and security. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements like DNSSEC and CSP headers are recommended. Privacy compliance is strong, with clear cookie consent and GDPR adherence. However, contact information and explicit security policies are not publicly available, which could be enhanced to improve trust. Overall, the site is professional, well-branded, and trustworthy, supporting the event's digital needs effectively.

S

slezskaharta.cz

slezskaharta.cz

45

The website slezskaharta.cz serves as the official online portal for the Mikroregion Slezská Harta, a regional tourism and event promotion entity in the Czech Republic. It provides comprehensive information about local attractions, events such as the Dragon Boat Festival and Bike Marathon, boat transportation services, and e-bike rentals. The site targets tourists, local visitors, and residents interested in regional activities and services. The business model focuses on promoting regional tourism and facilitating service bookings, positioning itself as a key local information hub.

M

Ministerstvo investícií, regionálneho rozvoja a informatizácie SR

sk-cz.eu

64

The website www.sk-cz.eu serves as the official online presence for the Interreg Slovensko – Česko cross-border cooperation program, managed by the Slovak Ministry of Investments, Regional Development and Informatization. It provides comprehensive information on funding calls, project partner databases, training seminars, and relevant documentation for stakeholders in Slovakia and the Czech Republic. The site targets government entities, regional authorities, and project partners involved in EU-funded cross-border initiatives. The business model is government program administration and information dissemination, positioning itself as a trusted source for regional cooperation information. Technically, the website is built on WordPress 6.8.3 with a modern tech stack including Google Analytics via MonsterInsights, Contact Form 7, and cookie consent management plugins. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. The use of official Slovak government design elements and consistent branding enhances user trust and professionalism. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, security headers are not explicitly observed and could be improved. The absence of a security.txt or explicit incident response contact suggests room for enhancement in vulnerability disclosure and incident management. Overall, the website presents a low-risk profile with strong legitimacy indicators despite the lack of publicly available WHOIS data due to EURid privacy policies. The site is well-maintained, compliant with privacy regulations, and serves its government program function effectively. Strategic recommendations include implementing security headers, publishing vulnerability disclosure information, and enhancing incident response transparency to further strengthen security posture and trust.

F

FTV Prima, spol. s r. o.

skupinaprima.cz

54

Skupina Prima is a leading and strong media company in the Czech Republic, operating since 1993. The company specializes in television broadcasting, advertising, and digital media services including HbbTV. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting Czech media consumers and business partners. Technically, the site is built on WordPress with Elementor and Yoast SEO, indicating a modern CMS infrastructure. Security posture is good with HTTPS and security headers properly configured, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy and safe for general audiences, with privacy and cookie policies in place and GDPR compliance evident. The lack of public WHOIS data is a minor transparency concern but common for media companies. Strategic recommendations include publishing security policies and incident response information to enhance trust and compliance.

S

SWEET.TV

sweet.tv

65

SWEET.TV is a well-established OTT streaming platform founded in 2010, offering a wide range of TV channels, movies, and animation content primarily targeting general audiences in the Slovak Republic and surrounding regions. The platform supports multi-device access and subscription-based services, positioning itself as a comprehensive national online cinema. Technically, the website employs modern web technologies including AngularJS, jQuery, Bootstrap, and integrates advanced consent management and analytics tools such as Didomi, Google Tag Manager, and Facebook Pixel. The infrastructure leverages Cloudflare DNS and GoDaddy registrar services, ensuring reliable hosting and domain management. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though DNSSEC is not enabled and some security headers could be more explicitly implemented. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the website demonstrates high professionalism, excellent content quality, and trustworthy business credibility.

Č

Česká informační agentura životního prostředí (CENIA)

cenia.cz

57

Česká informační agentura životního prostředí (CENIA) is a Czech government-affiliated organization under the Ministry of Environment, providing expert, informational, data, and research support related to environmental matters. It operates multiple environmental information systems and offers validated environmental data and mapping services. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content targeting both experts and the general public interested in environmental issues. Technically, the site is built on WordPress with modern plugins and self-hosted Matomo analytics, ensuring privacy-conscious tracking. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained.

P

PVA a.s.

forarch.cz

53

Forarch.cz represents the official website of the largest and most visited construction trade fair in the Czech Republic, organized by PVA a.s. The site showcases a well-established event with a history dating back to 1997, targeting construction professionals, exhibitors, media, and visitors. The business model revolves around organizing and facilitating a major international trade fair, providing exhibition space, registration services, and media partnerships. The website is professionally designed, content-rich, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it leverages WordPress CMS with modern JavaScript libraries and integrates Google Tag Manager with consent mode to respect user privacy. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the domain and website exhibit high legitimacy and trustworthiness, with no signs of malicious activity or content safety concerns.

T

Telraam - Smart traffic counters for all transport modes - indoor and outdoor models.

telraam.net

54

Telraam is a specialized technology company offering AI-powered, privacy-friendly traffic counting devices and data services for various transport modes including pedestrians, cyclists, cars, and heavy vehicles. The company provides both indoor and outdoor models, complemented by an intuitive dashboard and an open API for data integration. Their market position is niche, targeting citizens, municipalities, and urban planners interested in mobility data. The website employs a modern technical infrastructure with popular JavaScript libraries such as jQuery, Leaflet for mapping, Chart.js for data visualization, and Luxon/Moment for date-time handling. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. No CMS or hosting provider details were identified. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. No explicit privacy or cookie policies were found, indicating gaps in privacy compliance. Contact is primarily via a contact form, with no direct emails or phone numbers visible. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. Recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, and establishing a vulnerability disclosure process to enhance security and compliance.

U

Udenrigsministeriet

um.dk

63

Udenrigsministeriet is the official Danish Ministry of Foreign Affairs responsible for managing Denmark's foreign policy, diplomatic missions, and international cooperation. The website serves as a comprehensive portal for government information, travel advice, and international engagement, including support for Ukraine and Denmark's EU presidency. The site targets Danish citizens, international partners, and businesses seeking official information and services. Technically, the website is built on the Sitecore CMS platform, utilizing modern JavaScript libraries and third-party tools for analytics and accessibility compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, the website enforces HTTPS and employs GDPR-compliant cookie consent mechanisms, but lacks explicit security policy disclosures and some advanced security headers. The domain WHOIS data is consistent with the official government entity, showing a long-established presence since 1998, enhancing trustworthiness. Overall, the website is professional, secure, and compliant, serving as a reliable government resource.

Oxy.host is a WordPress-based website showcasing design sets and templates built with the Oxygen builder plugin. The site targets web designers and developers who use WordPress and Oxygen builder, offering importable page sections and full site templates to enhance their design workflow. The business model revolves around promoting the Oxygen builder product and providing design assets to its user base. Technically, the site runs on WordPress 6.8.3 with Oxygen Builder plugin version 3.8.1, uses jQuery and Adobe Typekit fonts, and leverages Cloudflare DNS services. The site performance and mobile optimization are basic but functional. Security posture is moderate with domain transfer protection and Cloudflare DNS, but lacks DNSSEC, security headers, and visible HTTPS enforcement. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly provided, including a support email and phone number, along with active social media links. Overall, the site is functional and moderately trustworthy but would benefit from enhanced security and privacy compliance measures.

K

KČT - Klub českých turistů

kct.cz

57

KČT - Klub českých turistů is a well-established Czech non-profit organization dedicated to promoting tourism and outdoor activities. With over 135 years of history, it serves approximately 30,000 members by marking hiking trails, organizing events, publishing maps and magazines, and operating tourist huts. The website reflects a mature digital presence built on WordPress with Elementor, featuring good design and navigation tailored to its audience. Technically, the site uses modern web technologies and integrates Google Analytics for visitor insights. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and formal security policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

B

BDO

ethicshotline.eu

60

BDO Ethics Hotline is a specialized platform designed to facilitate whistleblower notifications in compliance with the EU Directive on whistleblower protection. The service is primarily targeted at organizations and individuals within the European Union seeking a secure and anonymous channel to report unethical or illegal activities. The website leverages the reputable BDO brand, a well-known international network of independent accounting and consulting firms, enhancing its credibility and trustworthiness in the compliance sector. Technically, the website employs modern web technologies including jQuery, Bootstrap, and CKEditor, ensuring a responsive and user-friendly interface. The presence of CSRF tokens in forms indicates attention to security in data submission processes. However, the site lacks visible security headers and cookie consent mechanisms, which are important for comprehensive security and privacy compliance. The hosting and domain registration are consistent with the Czech Republic location and BDO's regional presence. From a security perspective, the site enforces HTTPS and includes basic protections but could improve by implementing additional security headers and publishing clear security policies and incident response contacts. No vulnerabilities or malicious content were detected. Overall, the website presents a professional and trustworthy platform for whistleblower reporting, though enhancements in privacy compliance and security transparency are recommended.

D

Digital Media Technology Sp. z o.o.

imgw.pl

60

The website imgw.pl represents the official Institute of Meteorology and Water Management (IMGW-PIB) in Poland, a government entity providing meteorological and hydrological data and services. The domain is well-established since 1997 and uses a professional WordPress-based infrastructure with modern plugins and integrations such as Google Analytics and marketing tools. The site targets a broad audience including the general public, government agencies, and researchers, offering weather forecasts, warnings, and climate monitoring services. Technically, the site is well-structured, mobile-optimized, and uses HTTPS, but lacks some advanced security headers and explicit privacy and cookie policies. Security posture is moderate with room for improvement in headers and public security policies. Overall, the domain registration data aligns well with the website's government affiliation and country, supporting its legitimacy.

S

Slovenský hydrometeorologický ústav

shmu.sk

52

Slovenský hydrometeorologický ústav (SHMÚ) is the official Slovak government institute responsible for meteorological, hydrological, climatological, and air quality services. The website serves as a comprehensive portal providing real-time weather data, forecasts, warnings, and scientific information targeted at the general public, researchers, and environmental professionals. It holds a strong market position as the authoritative national source for weather and environmental data in Slovakia. Technically, the website uses modern JavaScript libraries such as jQuery and integrates Google Tag Manager and Facebook SDK for analytics and marketing, all implemented with user consent mechanisms. The site is well-structured, accessible, and optimized for performance and SEO, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and basic security headers present, though there is room for improvement in advanced security policies and incident response transparency. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR and cookie regulations.

M

Ministrstvo za digitalno preobrazbo

gov.si

63

The website www.gov.si is the official Slovenian government portal managed by the Ministry of Digital Transformation. It serves as a comprehensive platform providing citizens and residents with information about government operations and easy access to various public administration services. The portal includes links to specialized government service portals such as eUprava, SPOT, eDavki, and zVem, enhancing its role as a central hub for e-government services in Slovenia. The site targets a broad audience including citizens, businesses, and travelers, offering multilingual support to accommodate diverse users. From a technical perspective, the website employs a modern technology stack including Matomo for analytics, jQuery, and other JavaScript libraries to enhance user experience. The site is mobile-optimized, accessible, and SEO-friendly, with proper use of meta tags and structured data. Performance is moderate, with asynchronous loading of scripts to improve responsiveness. However, the CMS platform is not explicitly identified, suggesting a custom or proprietary solution. Security posture is strong with HTTPS enforced and secure form handling, but there is room for improvement in security headers and explicit publication of security policies. No cookie consent mechanism was detected, which is a compliance gap. The WHOIS data confirms the domain's legitimacy, showing consistent registration details aligned with the Slovenian government and a domain age appropriate for a long-established official portal. Overall, the website demonstrates a high level of professionalism, trustworthiness, and functional completeness, making it a reliable source for government-related information and services. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security and incident response policies, and adding vulnerability disclosure information to further strengthen trust and security posture.

U

Univerzita Karlova

cuni.cz

66

Univerzita Karlova is a prestigious and leading university in the Czech Republic, offering a wide range of academic programs, research opportunities, and community engagement. The website reflects a mature digital presence with comprehensive content targeting students, staff, alumni, and the public. The institution maintains a strong market position as the top-rated university in the country, supported by a long domain history and consistent branding. Technically, the website employs modern JavaScript libraries such as jQuery and bxSlider, integrates Matomo and Google Tag Manager for analytics, and uses cookie consent mechanisms to comply with privacy regulations. The site is mobile-optimized and provides a good user experience, although accessibility features could be enhanced. From a security perspective, the site uses HTTPS with good SSL configuration and enforces cookie consent. However, it lacks explicit security headers and does not publish an incident response or vulnerability disclosure page. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR. The domain WHOIS data confirms legitimacy and long-standing operation. Strategic improvements in security headers and incident response transparency would further strengthen the security posture.

W

William Thomas Artisan Bakery

wtbakery.cz

53

William Thomas Artisan Bakery is a small artisan bakery based in Brno, Czech Republic, specializing in handmade fresh bakery products without using semi-finished goods. The company operates multiple physical bakery locations in Brno and Prague, offering a range of sweet and savory baked goods, merchandise, and vouchers. Their business model combines retail sales with an e-commerce platform for customer convenience. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a trustworthy customer experience. Technically, the website employs modern web technologies including jQuery, Bootstrap, Font Awesome, and integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is served over HTTPS with good SSL configuration, although security headers are not visibly implemented, representing an area for improvement. The website lacks a visible cookie consent mechanism despite having a privacy policy, which may impact GDPR compliance. From a security perspective, the site shows good practices like HTTPS enforcement and no visible sensitive data exposure. However, the absence of security headers and incident response information suggests moderate security maturity. The WHOIS data for the domain is unavailable, which slightly reduces trustworthiness but does not negate the legitimacy indicated by the website content and contact details. Overall, the website presents a professional and trustworthy online presence for a local artisan bakery. Strategic recommendations include enhancing security headers, implementing explicit cookie consent, publishing security policies, and investigating the missing WHOIS data to improve domain trust and compliance posture.

T

Technická univerzita v Liberci

tul.cz

62

Technická univerzita v Liberci is a medium-sized technical university based in the Czech Republic, offering diverse study programs with a strong emphasis on applied research and student support. The website reflects a professional academic institution with clear branding, comprehensive content, and a focus on practical education. The technical infrastructure is built on WordPress with modern plugins and tracking tools, ensuring a good user experience and GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data reduces domain trust slightly but does not detract from the legitimacy of the institution. Overall, the website is well-maintained, secure, and trustworthy for its target audience.

S

Slavia pojišťovna a.s.

slavia-pojistovna.cz

57

Slavia pojišťovna a.s. is a well-established Czech insurance company with a long tradition, offering a broad range of insurance products including auto, health, travel, home, and business insurance. The company targets both families and entrepreneurs, providing online and offline services supported by a network of physical branches across the Czech Republic. The website reflects a mature digital presence with multilingual support and mobile applications for Android and iOS, enhancing customer accessibility and engagement. Technically, the website is built on WordPress with modern integrations such as Google Tag Manager, Facebook Pixel, Hotjar, and MailerLite for marketing and analytics. It employs service workers for progressive web app capabilities and uses SVGs and responsive design for optimal performance and mobile experience. SEO and accessibility are well addressed with structured data and clear navigation. From a security perspective, the site enforces HTTPS and uses consent-based tracking mechanisms. While explicit security headers are not fully confirmed, the site shows good security hygiene with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data is a notable gap, reducing transparency about domain registration, but the overall business legitimacy is supported by consistent branding, detailed contact information, and regulatory compliance indications. Overall, Slavia pojišťovna presents a professional and trustworthy online presence suitable for its industry. Strategic recommendations include enhancing security header implementation, publishing a vulnerability disclosure policy, and improving incident response contact visibility to further strengthen trust and compliance.

D

Create a new item

dpaste.com

47

dpaste.com is a specialized online pastebin service primarily targeting programmers and developers who need to share and store code snippets with syntax highlighting and markup preview. The service offers a clean, minimalistic interface with support for a wide range of programming languages and an API for automated paste creation. The website is small in scale but has been operational since 2006, indicating a stable presence in its niche market. It leverages third-party advertising through EthicalAds and provides user support via a Freshworks widget. Technical infrastructure includes modern JavaScript libraries such as jQuery and htmx, and fonts from Google Fonts, hosted on static.dpaste.com and other external domains.

J

Jan Krejčí, Xcreative

xcreative.cz

46

Xcreative s. r. o., led by Jan Krejčí, is a Czech-based small business specializing in professional web design, development of internet and intranet applications, and graphic work. Established since 2003, the company boasts over 1,000 satisfied customers and offers services including web design, e-commerce solutions, content management systems, and custom functionality development. The website presents a premium look and feel, emphasizing mobile responsiveness and modern design elements. Technically, the site is built on WordPress with popular plugins such as Slider Revolution and WP Rocket, ensuring good performance and user experience. Privacy and cookie compliance are well implemented, reflecting adherence to GDPR requirements. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency and legitimacy verification. Overall, the business appears credible and professional, but domain registration details should be confirmed for full trust assurance.

M

Ministerstvo zdravotnictví

mzcr.cz

65

The website https://mzd.gov.cz/ is the official online presence of the Ministry of Health of the Czech Republic, serving as a comprehensive portal for public health information, healthcare legislation, and government services. It targets the general public, healthcare professionals, and government officials, providing up-to-date news, policy documents, and resources related to health and safety. The site is well-branded with consistent government identity and includes official social media channels for outreach. Technically, the site is built on WordPress 6.8.2 with modern libraries such as jQuery and Bootstrap, ensuring responsive design and accessibility. It integrates Google Analytics and Tag Manager for user tracking and performance monitoring, alongside a Google Custom Search Engine for internal content search. The site uses HTTPS with strong SSL configuration, though it lacks some recommended security headers, presenting an opportunity for enhanced security hardening. From a security and compliance perspective, the site includes a cookie consent banner and a privacy policy page, indicating GDPR compliance efforts. However, there is no visible security.txt or incident response contact information, and WHOIS data is unavailable, which limits full domain legitimacy verification. Despite this, the .gov.cz domain and official content strongly support the site's authenticity. Overall, the site is professionally maintained with good content quality and user experience. Security posture is solid but could be improved with additional headers and formal vulnerability disclosure mechanisms. The absence of WHOIS data is a minor concern but likely due to registry policies rather than malicious intent. Strategic recommendations include enhancing security headers, publishing incident response details, and adding a security.txt file to improve transparency and trust.

Asociace Záchranný kruh is a Czech non-profit association focused on safety education, prevention, and preparation in areas of common risks and emergencies. Established since 2005, it serves children, youth, parents, and educators by developing educational projects, materials, and safety tools. The website reflects a well-structured platform with a clear mission and a broad network of partners including governmental and non-profit organizations. Technically, the site uses a CMS platform (MultiCMS), modern JavaScript libraries, and integrates Google Analytics and Adsense with proper cookie consent mechanisms. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit incident response contacts. WHOIS data is unavailable, which reduces domain trust from a registration perspective but the website content and partner ecosystem support legitimacy. Overall, the site is professional, content-rich, and compliant with GDPR, serving as a valuable resource for safety education in the Czech Republic.

F

Fajnvylety.cz

fajnvylety.cz

52

Fajnvylety.cz is a Czech regional travel and leisure website providing over a thousand tips for trips, including castles, nature trails, cycling routes, and family-friendly outings. The site is positioned as a regional media content provider with a focus on travel and events in the Czech Republic, targeting a general audience interested in outdoor activities and cultural events. The business model relies on content publishing combined with advertising revenue. Technically, the site runs on WordPress with common SEO and analytics tools such as Yoast SEO Premium, Google Analytics, and Google Tag Manager. Advertising is managed through multiple ad networks including AdRotate and Seznam SSP. Security posture is adequate with HTTPS enabled but lacks some security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies and no visible consent mechanism. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the website is professionally designed, content-rich, and SEO optimized but would benefit from enhanced privacy and security practices.

U

UOL a.s.

uol.cz

64

UOL a.s. is a Czech Republic-based accounting and tax advisory firm offering comprehensive services including accounting, payroll, online accounting systems, and tax consulting. The company targets small and medium-sized businesses and self-employed individuals, providing both physical branch support across regional cities and a robust online platform. The website reflects a mature digital presence with professional design, clear navigation, and strong trust signals such as client testimonials and GDPR compliance. Technically, the site is built on WordPress with modern plugins and analytics integrations, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts transparency but is common in professional services. Overall, UOL presents a credible and trustworthy business with a well-implemented digital infrastructure.

O

OLYMP CSMV

olympcsmv.cz

45

OLYMP CSMV is an official government sports center under the Ministry of Interior of the Czech Republic, established in 2009. The website serves as a portal for sports-related news, results, and organizational information targeting athletes, sports departments, and the general public interested in sports activities related to the Ministry. The site is built on a modern WordPress platform using Elementor and Yoast SEO, indicating a reasonable level of digital maturity. Social media integration is present, enhancing outreach and engagement. Security posture is solid with HTTPS enabled and nonce usage, but lacks some security headers and formal privacy/cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

C

Czech Video Center a.s.

ikiosek.cz

63

iKiosek.cz is a Czech e-commerce platform specializing in the sale of newspapers, magazines, special editions, and books in both digital and physical formats. Operated by Czech Video Center a.s., it serves a broad audience interested in media content, offering a comprehensive catalog of popular Czech publications. The website demonstrates a good level of digital maturity with responsive design, modern analytics integration, and a robust cookie consent mechanism ensuring GDPR compliance. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and business registration details. Security posture is solid with HTTPS and consent management, but could be improved by implementing additional security headers and publishing explicit security policies. Overall, the platform presents a professional and trustworthy user experience with clear navigation and relevant content.

L

LIXUS TECHNIK s.r.o.

sekacky-morava.cz

50

LIXUS TECHNIK s.r.o. operates a professional website focused on the sale and servicing of advanced robotic lawn mowers, including brands like Segway Navimow and Mammotion. The company positions itself as the largest seller of robotic mowers without boundary wires in Northern Moravia, targeting consumers and businesses seeking smart lawn care solutions. Their business model includes retail sales, rentals, demonstrations, and installation services, supported by a physical showroom in Ostrava. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Google reCAPTCHA, and Google Analytics, indicating a mature digital infrastructure. Security measures include HTTPS enforcement and spam protection on forms, though additional HTTP security headers and a dedicated security policy page would enhance their posture. The absence of WHOIS registration data is a notable gap, reducing domain trustworthiness despite the professional presentation and clear contact information. Overall, the website is well-designed, user-friendly, and compliant with GDPR cookie consent requirements, reflecting a credible and customer-focused business presence.

G

GLOB-TRADE td, s.r.o.

globetrade.cz

44

GLOB-TRADE td, s.r.o. is a Czech-based company specializing in the sale, installation, and servicing of garage doors, entrance gates, barriers, and related parking systems, primarily as an authorized dealer of Hörmann products since 2002. The company targets both residential and commercial customers within the Czech Republic, offering a comprehensive product range including garage doors, industrial doors, gates, shutters, and custom locksmith metalwork. Their business model combines direct sales, professional consultation, and after-sales service, supported by an e-commerce platform. The website reflects a medium-sized enterprise with a consistent brand presence and recognized certifications such as ISO 9001.

S

SEDOS transport s.r.o.

sedostransport.cz

50

SEDOS transport s.r.o. is a Czech Republic based company specializing in domestic and international transportation of heavy and oversized cargo, including machinery and specialized freight. The company emphasizes professional service with over 20 years of experience, a modern fleet, and comprehensive logistics solutions. Their website presents detailed service offerings and contact information, targeting businesses requiring specialized transport solutions. Technically, the website uses modern JavaScript libraries, Google Analytics, and a cookie consent mechanism, indicating moderate digital maturity. Security posture is good with HTTPS and reCAPTCHA implemented, but lacks explicit security policies and incident response contacts. The absence of WHOIS data reduces domain trustworthiness, though the website content and business information appear legitimate. Overall, the site is professional and functional with room for improvement in transparency and security disclosures.

A

ALVI, spol. s r. o.

restaurace-alvi.cz

52

Restaurace ALVI is a small hospitality business located in Ostrava, Czech Republic, specializing in traditional Czech cuisine, tank beer, and accommodation services. The website presents a professional and content-rich platform targeting local residents and tourists seeking authentic Czech dining experiences and lodging near the city center. The business emphasizes event hosting capabilities and offers multiple banquet rooms and accommodation options. Technically, the website uses modern JavaScript libraries, Bootstrap, and Google Analytics, and is built on the Eliška CMS platform. It is mobile-optimized with good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some security headers and formal security policies. WHOIS data is unavailable, which slightly reduces trust but does not detract significantly from the business credibility given the clear contact information and consistent content. Overall, the site is well-maintained and trustworthy for its business domain.

E

eUbytko.cz

eubytko.cz

55

eUbytko.cz is an established online accommodation booking platform focused on the Czech Republic market. It offers a wide range of lodging options including apartments, pensions, hotels, cottages, and wellness resorts, targeting tourists and travelers seeking vacation stays within the country. The website features rich content, including categorized accommodation listings, travel guides, and blog articles, enhancing user engagement and decision-making. Technically, the site employs modern JavaScript libraries such as jQuery, Owl Carousel, and Google Tag Manager, with asynchronous script loading to optimize performance. SEO is supported through structured data (JSON-LD) and Open Graph metadata, improving search engine visibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit privacy and terms of service pages are not clearly found. The WHOIS data is privacy protected, which is common and justified for this business type. Overall, the site demonstrates a mature digital presence with good usability and trust indicators.

A

ABA Apartments s.r.o.

abaapartments.cz

50

ABA Apartments s.r.o. operates a hospitality business offering 59 modern self-service apartments in Olomouc, Czech Republic. The company provides comfortable short and long-term accommodation with amenities such as kitchens, WiFi, smart TVs, and free parking. Complementary services include a partner restaurant Café Kitchen, event hosting facilities for weddings and conferences, and wellness services like massages. The website is professionally designed, mobile-optimized, and provides clear contact information and social media presence, supporting a positive market position in local hospitality. Technically, the website uses a modern technology stack including jQuery, Bootstrap, Slick Carousel, and Google Analytics 4. It is built on the Eliška CMS platform and employs HTTPS with cookie consent mechanisms, indicating a mature digital infrastructure. Performance and SEO are moderate to good, with room for improvement in accessibility and security headers. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks published security policies or incident response contacts. Privacy compliance is good with GDPR-aligned cookie policies and consent banners. The absence of WHOIS data limits domain trust assessment, but website content and contact details appear legitimate. Overall, ABA Apartments presents a trustworthy and professional online presence with strong business credibility and technical implementation. Strategic improvements in security transparency and WHOIS data visibility would enhance trust and compliance further.

S

STAGES HOTEL

stageshotel.com

64

STAGES HOTEL Prague is a modern lifestyle hotel located adjacent to the O2 arena in Prague, Czech Republic. It offers 300 stylish rooms including suites, conference facilities, a unique backstage bar and restaurant, fitness center, and parking. The hotel is part of Marriott's Tribute Portfolio, positioning it as a premium hospitality provider targeting concert and sports event attendees as well as business travelers. The website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it is built on WordPress with modern JavaScript libraries and integrates marketing and analytics tools such as Google Tag Manager and Bing tracking. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response information are missing. The WHOIS data is notably absent, which raises some concerns about domain registration transparency, but the strong brand affiliation and professional content mitigate this risk. Overall, the site is trustworthy and well-positioned in its market niche.

C

CTP

ctp.cz

49

CTP is a leading European real estate company specializing in the development and management of logistics and industrial properties across 10 countries. The website reflects a mature, professional business with a strong market position and comprehensive service offerings tailored to commercial clients. The technical infrastructure leverages WordPress CMS with modern performance and multilingual enhancements, ensuring a fast and accessible user experience. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates high professionalism and trustworthiness, supporting CTP's brand as a major player in the real estate sector.