Security Directory

N

Nadace České spořitelny

nadacecs.cz

63

Nadace České spořitelny is a Czech non-profit foundation focused on enhancing education, particularly financial literacy among children and young people. It operates under the auspices of Česká spořitelna a.s., a major Czech bank, and runs programs such as Skoala and Den pro školu to foster competencies that support independence and financial health. The website is professionally designed, mobile-optimized, and provides comprehensive information about its activities and impact. Technically, it uses the GEM CMS framework and integrates Google Tag Manager for analytics. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy policies and terms of service are present and GDPR compliant. WHOIS data is not publicly available, likely due to registry privacy policies, but the site shows strong trust indicators and legitimacy. Overall, the site is a credible and well-maintained digital presence for the foundation.

V

www.Veverušák.cz

veverusak.cz

57

The website www.veverusak.cz is a Czech-language content portal primarily targeting children and young people, offering competitions, events, articles, book tips, advice, and games. It positions itself as a niche community and informational site with a focus on family-friendly content. The site is well-structured with clear navigation and consistent branding, catering to a small audience segment within the Czech Republic. Technically, the site uses modern web technologies including HTTPS, Google Analytics, Google Tag Manager, and jQuery, providing a moderate level of performance and mobile optimization. However, no CMS or hosting provider information is discernible from the data. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, but lacks important security headers and explicit security policies or incident response contacts, which could be improved to enhance trust and compliance. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not indicate malicious intent. Overall, the site is safe, professional, and suitable for its target audience, with room for security and compliance enhancements.

I

International Gas Union

igu.org

64

The International Gas Union (IGU) operates as a leading global organization dedicated to the gas industry, focusing on advocacy, research, and event organization to promote sustainable and innovative gas technologies worldwide. Their website reflects a mature digital presence with comprehensive content including industry reports, event information, and membership details. The technical infrastructure leverages modern web technologies such as Next.js and React, hosted on Vercel, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is partial, with cookie consent mechanisms present but lacking explicit privacy and terms of service pages. Overall, the site projects high professionalism and trustworthiness, supporting IGU's position as an essential entity in the energy sector.

P

Profimedia.CZ a.s.

profimedia.cz

59

Profimedia.CZ a.s. is a leading media company specializing in photography and video licensing, holding the position as the largest photo bank in Central Europe. Their extensive catalog includes over 300 million images, serving editorial and commercial clients. The company also represents numerous photographers and offers a wide range of services including custom photography, exhibitions, and publication production. Their partnership with Shutterstock further strengthens their market presence. Technically, the website is built on modern frameworks like React, employs security best practices such as HTTPS and Content Security Policy, and integrates analytics and marketing tools responsibly. Security posture is strong with no evident vulnerabilities, though additional security headers could enhance protection. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the company demonstrates a professional and trustworthy online presence, though the absence of WHOIS data slightly impacts domain trustworthiness.

A

Asociace online vydavatelů

asociaceonlinevydavatelu.cz

50

Asociace online vydavatelů is a Czech association representing independent online media publishers, focusing on advocacy, lobbying, and protecting media freedom at national and EU levels. The website is professionally designed, mobile-optimized, and provides relevant content about the association's agenda, member media, and news updates. Technically, the site uses modern web technologies including Google Analytics and Tag Manager with a cookie consent mechanism, and is served over HTTPS with good security practices, though some security headers are missing. The absence of WHOIS data reduces transparency and trust slightly but does not detract significantly from the site's legitimacy given the professional content and active social media presence. Overall, the site presents a credible and trustworthy digital presence for the association.

F

FlagsAPI - Country Flags API

flagsapi.com

56

FlagsAPI is a small technology service providing an API for country flag images in flat and shiny themes with multiple size options. The website is designed primarily for developers and web designers who need easy access to country flag images for integration into their projects. The business model is straightforward, offering a niche API service with a clear focus on flag image delivery. The domain is relatively new, registered in late 2021, which aligns with the business's apparent startup phase. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, with Google Fonts for typography. Hosting and DNS are managed via Cloudflare, providing some level of performance and security benefits, although DNSSEC is not enabled. The site is mobile-optimized and has a clear navigation structure, but lacks advanced frameworks or CMS platforms. Performance is moderate, and accessibility features are basic. From a security perspective, the site lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance and user trust. No contact or incident response information is available, limiting transparency and responsiveness to security issues. The WHOIS data shows a legitimate domain registration with no privacy protection, consistent with the business profile. Overall, the security posture is basic and could be improved significantly. The overall risk is moderate given the lack of privacy and security policies, but no critical vulnerabilities or malicious indicators were found. Strategic improvements in security headers, policy disclosures, and contact transparency would enhance trust and compliance.

The website www.meteoam.it serves as the official meteorological service of the Italian Air Force, providing comprehensive weather forecasts, observations, satellite imagery, and alerts primarily for Italy but also covering global weather phenomena. It is a government-operated platform under the Ministry of Defense, offering authoritative and trusted meteorological data to the general public, aviation professionals, and government agencies. The site is well-branded with consistent use of official logos and government affiliations, reinforcing its credibility and trustworthiness. From a technical perspective, the website employs modern web technologies including JavaScript, web components, and privacy-focused analytics via Matomo. It is hosted likely on government infrastructure, ensuring reliability and security. The site is mobile-optimized and features good SEO practices, although accessibility features could be enhanced. Cookie consent mechanisms are implemented effectively, demonstrating attention to privacy compliance. Security posture is strong with HTTPS enforced and security headers likely in place. No vulnerabilities or exposed sensitive data were detected in the content. However, the absence of explicit privacy policy, terms of service, and incident response information slightly reduces the overall compliance and security maturity. The WHOIS data confirms the domain's legitimacy as a government entity, with consistent registration details matching the website's claims. Overall, the website is a professional, secure, and authoritative source for meteorological information in Italy. Strategic recommendations include publishing clear privacy and security policies, enhancing accessibility, and providing explicit incident response and vulnerability disclosure channels to further strengthen trust and compliance.

Z

Zboží.cz

zbozi.cz

61

Zboží.cz is a prominent Czech price comparison website founded in 2007 and operated under the parent company Seznam.cz, a.s. The platform aggregates products from thousands of e-shops, enabling consumers to compare prices, read reviews, and check availability and shipping costs. It targets general consumers seeking to make informed purchasing decisions across a wide range of product categories. Technically, the website leverages modern web technologies including React and Next.js, ensuring a responsive and user-friendly experience optimized for mobile devices. The site employs structured data (JSON-LD) to enhance SEO and product discoverability. Security-wise, the site uses HTTPS and modern frameworks but lacks explicit security headers and published privacy or cookie policies in the analyzed content, which are areas for improvement. The WHOIS data for the domain is unavailable, likely due to CZ domain registry policies, which slightly impacts trust assessment. Overall, Zboží.cz presents a professional, content-rich, and trustworthy e-commerce service with room to enhance privacy and security transparency.

D

Direct Pojišťovna

direct.cz

73

Direct Pojišťovna is a Czech Republic-based insurance company offering a variety of insurance products including auto, property, pet, travel, and business insurance. The company positions itself as a fast, online, and customer-friendly insurer with a strong market presence, serving over 500,000 clients. Their business model focuses on direct online sales and customer self-service via a mobile app and web platform. The website is professionally designed, mobile-optimized, and provides clear navigation and trust signals such as customer testimonials and transparent policies. Technically, the site uses modern frameworks like Next.js and React, integrates consent management, and employs Google Tag Manager for analytics. Security posture is strong with HTTPS and security headers, but lacks explicit published security policies or incident response information. WHOIS data is missing, which reduces domain trustworthiness, but the overall business credibility remains high based on website content and external references.

P

Platforma VIZE 0, z. ú.

platformavize0.cz

59

Platforma VIZE 0 is a Czech non-profit organization dedicated to improving road safety and reducing fatalities and serious injuries on Czech roads. The platform unites partners with a clear vision of zero road deaths and actively engages in education, advocacy, and innovative projects such as Vyprošťovák®, Virtuální dopravní zóna, and Nehoda nanečisto. Their target audience includes drivers, cyclists, motorcyclists, and the general public in the Czech Republic. The website reflects a professional and consistent brand image with clear communication of their mission and projects. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and Google Analytics with privacy-conscious configurations. The site is mobile-optimized, SEO-friendly, and provides a cookie consent mechanism aligned with GDPR requirements. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site uses HTTPS and secure form handling, with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data due to privacy protection is reasonable for a non-profit entity, though it limits domain trust verification. Overall, the site demonstrates a good security posture but could improve transparency by publishing security policies and incident response contacts. The overall risk assessment is low, with recommendations focusing on enhancing security headers, incident response readiness, and accessibility. The platform maintains a trustworthy and professional online presence suitable for its mission and audience.

M

Město Frýdlant

enjoyfrydlant.cz

61

The website www.enjoyfrydlant.cz serves as the official tourist information portal for the city of Frýdlant, Czech Republic. It provides comprehensive information about local events, cultural activities, services, and city history, targeting tourists and residents interested in exploring the region. The site is operated under the auspices of the local government, as evidenced by official contact details and municipal branding. The business model focuses on promoting tourism and local culture through an accessible online platform. Technically, the website is built on the Public4u CMS platform and utilizes common web technologies such as jQuery and JavaScript. The site is served over HTTPS, ensuring encrypted communication, but lacks advanced security headers which could enhance protection. The design is professional with good navigation and multilingual support, though mobile optimization and accessibility are basic. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site maintains a good baseline with HTTPS but could improve by implementing security headers and publishing explicit privacy and security policies. The absence of WHOIS data for the domain is a concern, as it limits the ability to verify domain ownership and age, slightly reducing trustworthiness. However, the presence of official contact information and consistent branding supports legitimacy. Overall, the website is a reliable and informative resource for visitors to Frýdlant, with moderate technical sophistication and a solid security posture. Strategic improvements in security headers, privacy documentation, and domain registration transparency would enhance trust and compliance.

E

Evangelische Kirche in Deutschland

ekd.de

67

The Evangelische Kirche in Deutschland (EKD) operates a comprehensive and professionally designed website serving as the central information hub for the Protestant churches in Germany. The site provides extensive resources including organizational information, contact details, thematic campaigns, and spiritual content targeting members and interested parties within the religious community. The EKD holds a strong national position as an umbrella organization for 20 regional churches and over 14,000 congregations. Technically, the website employs modern web standards with responsive design and integrates etracker analytics while respecting user privacy through cookie consent mechanisms. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the site demonstrates high trustworthiness and compliance with GDPR, making it a reliable source for its audience.

B

Biocultus

biocultus.com

59

Biocultus is a Czech-based company specializing in the design and sale of advanced composting toilet systems for both private and public use. The company positions itself as a global leader with over 20,000 installations across 11 countries, leveraging Finnish technology and over 30 years of experience. Their product offerings include private and public composting toilets, accessories, and comprehensive customer support services. The website is professionally designed, mobile-optimized, and rich in relevant content including product details and educational blog posts. Technically, the site uses modern frameworks such as Next.js and React, hosted likely on DigitalOcean, with integrated marketing and analytics tools like Google Tag Manager and Facebook Pixel. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are absent. WHOIS data is missing, raising concerns about domain registration legitimacy, but the overall business presence and content quality suggest a legitimate operation. Strategic recommendations include verifying domain registration, adding security and incident response information, and maintaining regular audits of third-party scripts.

W

WEBHOUSE, s.r.o.

ceskaobec.cz

44

Česká Obec is a Czech Republic-based technology company specializing in providing a mobile communication platform tailored for municipalities, city districts, and microregions. Their flagship product is a mobile app that facilitates efficient, GDPR-compliant communication between local governments and citizens, including features such as SMS messaging, event notifications, and integration with schools. The company positions itself as a cost-effective solution for local governments to modernize citizen engagement without heavy investment in custom development. The website demonstrates a solid market presence with multiple municipal references and partner collaborations. Technically, the website is built on the Vismo CMS platform with standard web technologies including HTML5, CSS, and JavaScript. It integrates Google reCAPTCHA for form security and provides mobile app download links for iOS and Android platforms. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Hosting and domain registration are consistent with a Czech-based business. From a security perspective, the site uses HTTPS and implements reCAPTCHA to protect forms from bots. However, it lacks advanced security headers such as Content-Security-Policy and HSTS, which could enhance its security posture. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is addressed with a basic GDPR-compliant privacy policy and cookie information, though no explicit cookie consent mechanism is present. Overall, Česká Obec presents a trustworthy and professional online presence with clear business focus and contact transparency. Security practices are adequate but could be improved with additional headers and policies. The site is safe for general audiences and does not contain any adult or questionable content.

C

Cognito.CZ, s.r.o.

jimebrno.cz

71

Jíme Brno is an online food delivery platform serving Brno and its surroundings, aggregating multiple local restaurants such as Monte Bú, Pivnice U Čápa, and Ristorante Piazza. The website offers a variety of cuisines including premium steaks, Czech cuisine, pizza, and desserts. The platform targets local residents and visitors seeking quality food delivery without fast food options. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, Hotjar, and Facebook Pixel for analytics and marketing. It uses Amazon Cloudfront as a CDN for hosting assets, ensuring moderate performance and good mobile optimization. Security posture is decent with HTTPS enforced and cookie consent implemented, but lacks comprehensive security headers and explicit privacy or terms of service pages. The absence of WHOIS data limits domain trust analysis, but the website content and technology usage suggest a legitimate business. Overall, the site is safe for general audiences and professionally presented.

H

Harnol & Partners

harnol.cz

59

Harnol & Partners is a professional services firm specializing in accounting, payroll, tax consulting, and audit services primarily serving clients in the Czech Republic and Slovakia. The company positions itself as a trusted advisor offering comprehensive financial and tax-related services to businesses and individuals. The website is built on the Wix platform, reflecting a moderate level of digital maturity with a professional design and mobile optimization. However, the absence of WHOIS data and privacy-related policies indicates areas for improvement in transparency and compliance. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit incident response contacts. Overall, the website presents a credible business front but would benefit from enhanced privacy and security disclosures to strengthen trust and compliance.

S

SOLETANCHE Česká republika s.r.o.

soletanche.cz

56

SOLETANCHE Česká republika s.r.o. is a Czech branch of the international geotechnical company Soletanche Bachy, specializing in special foundation works and ecological contamination remediation. The company has been operating independently in the Czech market since 1992 and offers a wide range of geotechnical services including underground walls, jet grouting, micropiles, anchors, and soil improvement. The website reflects a business-to-business model targeting construction and environmental remediation sectors. Technically, the website uses legacy JavaScript libraries such as MooTools and Slimbox, with basic HTML and CSS structure. The site is accessible with no detected blocking or WAF challenges, but lacks modern security headers and HTTPS status information. No privacy or cookie policies are present, and contact information is not explicitly provided on the site. The absence of WHOIS data limits domain legitimacy verification, although the website content appears professional and relevant to its industry. Overall, the site scores moderately on content quality and business credibility but scores low on security posture and privacy compliance.

I

International Ski and Snowboard Federation

fis-ski.com

11

The International Ski and Snowboard Federation (FIS) operates as the global governing body for skiing and snowboarding disciplines, overseeing thousands of events annually. The website serves as a comprehensive platform for event calendars, live results, athlete biographies, news, and multimedia content, targeting sports fans, athletes, and media professionals worldwide. The organization holds a strong market position as the authoritative entity in winter sports governance. Technically, the website is built on modern frameworks such as Next.js and React, supported by a CMS (Storyblok) and integrated with analytics and consent management tools like Google Tag Manager and Cookiebot. The site demonstrates excellent performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs multiple security headers, and integrates cookie consent mechanisms, indicating a robust security posture. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. No vulnerabilities or suspicious activities were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations such as GDPR. It effectively supports the organization's mission and audience needs, with recommendations focusing on enhancing transparency around security policies and incident response.

S

Spaneco ltd.

spaneco.com

43

Spaneco ltd. is a technology service provider specializing in the development of multilingual websites, online configurators, and content management systems catering to a diverse clientele ranging from freelancers to international corporations. The company positions itself as a provider of comprehensive digital solutions with a focus on multilingual and multimedia web development. The website demonstrates a professional design with good navigation and mobile optimization, leveraging modern technologies such as Google Analytics, Google Tag Manager, and Google reCAPTCHA v3 to enhance user experience and security. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security measures are partially implemented with HTTPS and CAPTCHA, but additional security headers and policies are recommended to strengthen the security posture. Privacy compliance is basic, with a cookie consent mechanism present but lacking explicit privacy and terms of service documentation. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation to improve trustworthiness and compliance.

R

RTM plus produkce s.r.o.

mojertm.cz

57

RTM plus produkce s.r.o. operates the website mojertm.cz, which serves as a membership club for viewers of the RTM plus television channel. The business model centers on providing members with discounts on cultural, social, and sports events through partnerships, facilitated by a mobile application for event selection and ticketing. The company targets a culturally engaged audience primarily in the Czech Republic. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

M

Město Týn nad Vltavou

tnv.cz

46

The website tnv.cz serves as the official online portal for the municipal government of Týn nad Vltavou, Czech Republic. It provides comprehensive information and services related to city administration, public notices, cultural events, and citizen resources. The site targets local residents, businesses, and visitors, offering a range of municipal services including contact forms, public procurement details, and tourism information. The domain is well-established since 2002, reflecting a mature digital presence for the city government. Technically, the website employs a traditional HTML/CSS/JavaScript stack with the Vismo CMS platform. It integrates Google services such as reCAPTCHA for form security and Google Translate for multilingual support. The site is hosted under a Czech registrar and uses HTTPS, ensuring secure communications. Performance and mobile optimization are adequate, with good accessibility and SEO practices observed. From a security perspective, the site demonstrates good baseline practices including HTTPS enforcement and anti-bot measures on forms. However, it lacks explicit security headers and formal incident response or vulnerability disclosure policies. Privacy compliance is addressed with GDPR references and cookie policy disclosures, though no active consent mechanism is present. The WHOIS data aligns well with the website content, indicating legitimacy and trustworthiness. Overall, the website is a reliable and professional municipal portal with solid content and technical implementation. Security posture is adequate but could be enhanced with additional headers and formal policies. Privacy compliance is basic but sufficient for the site’s scope. Strategic recommendations include improving security headers, adding incident response contacts, and implementing cookie consent mechanisms to strengthen compliance and trust.

S

Sparrow Labs

sparrowfi.com

66

Sparrow Labs operates a digital platform focused on providing students and borrowers with a powerful search engine to compare private student loans and refinancing options. The company positions itself as a leading marketplace in the student loan finance sector, targeting U.S. students and educational institutions. Their platform offers personalized loan rates, management tools, and refinancing services, aiming to simplify borrowing and reduce costs for their users. Technically, the website is built on modern frameworks such as Next.js and React, delivering a responsive and interactive user experience. The site integrates multiple analytics and marketing tools, indicating a mature digital marketing strategy. Security-wise, the site enforces HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the professional presentation and partnerships lend credibility. Overall, Sparrow Labs demonstrates a solid business and technical foundation but should enhance privacy compliance and domain registration transparency to strengthen trust and security posture.

S

Sparrow Labs

sparrowtest.com

65

Sparrow Labs operates a sophisticated online platform specializing in private student loan comparison and refinancing services. The website positions itself as a leading solution for students seeking to save time and money on their student loans, offering personalized rates with no impact on credit scores. The platform targets students and borrowers in the education finance sector, providing tools to manage and refinance loans efficiently. Technically, the website is built on modern frameworks such as Next.js and React, ensuring fast performance and excellent mobile optimization. The site employs multiple analytics and marketing tools to enhance user engagement and track performance. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks a publicly available security policy or incident response contact, which could be improved. The absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, though the professional presentation and partner affiliations support its credibility. Overall, Sparrow Labs demonstrates a mature digital presence with room for enhanced transparency in security and compliance documentation.

The website www.podlahyalfa.cz operates as a Czech Republic-based e-commerce platform specializing in the sale of flooring materials including vinyl, laminate, PVC, carpets, and related installation services. The site targets both consumers and businesses seeking flooring solutions, positioning itself as a niche retailer within the flooring market. The business model is primarily retail with an added service component for installation, catering to a local or regional audience. The website content is well-organized with detailed product categories and subcategories, supporting a good user experience and navigation clarity. Technically, the website leverages modern web technologies including Google Analytics, Google Tag Manager, and a platform provided by ByznysWeb.cz. The site is served over HTTPS with a good SSL configuration and implements a cookie consent mechanism that blocks scripts until user consent is given, indicating a basic level of privacy compliance. However, the absence of a published privacy policy and terms of service pages represents a compliance gap. The site shows moderate performance and good mobile optimization but could improve accessibility features and security headers. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and consent-based script loading. No critical vulnerabilities or exposed sensitive data were detected. However, the lack of additional security headers and absence of a security.txt or vulnerability disclosure policy suggest room for improvement in security posture. The WHOIS data for the domain is unavailable, likely due to privacy protection, which slightly reduces trust but is common for small e-commerce businesses. Overall, the website presents as a legitimate small business e-commerce site with a good user experience and moderate security posture. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, adding a vulnerability disclosure mechanism, and improving accessibility compliance to strengthen trust and compliance.

I

Train Line – Mezinárodní a vnitrostátní kamionová přeprava

itrain.cz

59

The website itrain.cz represents a newly established Czech transportation service specializing in international and domestic truck freight. The domain was registered in early 2024, consistent with a startup or new business venture. The site is built on WordPress using the Bold Page Builder plugin, indicating a modern but basic technical infrastructure. The website design is professional and mobile-optimized, providing a good user experience with clear navigation. However, the content is relatively basic and lacks comprehensive business and compliance information such as privacy policies or terms of service. Security posture is moderate with HTTPS enabled but missing important security headers and explicit security policies. Contact information is limited to a contact form without direct emails or phone numbers, which may impact user trust and business credibility. Overall, the site is functional and safe but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

Pocitové mapy is a Czech-based service specializing in participatory mapping tools that engage citizens in providing feedback on their local environments. The company targets municipalities and urban planners, offering both online and offline data collection methods, GIS data analysis, and visualization services. The website is professionally designed, multilingual, and demonstrates established partnerships with recognized organizations, indicating a solid market presence in the government and non-profit sectors. Technically, the website is built on WordPress with common plugins such as WPML for multilingual support and Contact Form 7 for forms. The site is mobile-optimized and performs moderately well, though some security best practices like security headers are missing. HTTPS is enforced, ensuring secure communication. Security posture is generally good but could be improved by adding security headers and formal privacy and cookie policies. The absence of WHOIS data reduces domain trust slightly, but the professional content and business presence mitigate concerns. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website represents a trustworthy and professional service with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, and clarifying domain registration details to improve trustworthiness.

M

Město Kyjov

mukyjov.cz

50

The website mukyjov.cz serves as a municipal portal for the city of Kyjov, Czech Republic, providing a centralized access point to various city-related services including webmail, cloud services, map servers, employee portals, legal information systems, and cadastral access. The site is modest in design and content, reflecting its role as a government gateway rather than a commercial or content-rich platform. The domain is well-established since 1999, reinforcing its legitimacy as an official municipal resource. From a technical perspective, the site uses basic HTML, CSS, and JavaScript without advanced frameworks or CMS platforms. The hosting is provided by REG-WEBGLOBE, a known registrar and hosting provider. The site includes a seasonal snowflake animation script but lacks modern SEO, accessibility, and mobile optimization features. No analytics or tracking scripts are present, indicating minimal user data collection. Security posture is basic with no detected security headers or explicit HTTPS enforcement visible in the provided data. There are no forms or data collection points, reducing attack surface but also limiting interactivity. The absence of privacy, cookie, and terms of service policies indicates non-compliance with GDPR and related regulations, which is a notable gap for a government site. Overall, the site is low risk in terms of content safety and security vulnerabilities but requires improvements in privacy compliance, security best practices, and user engagement features to enhance trust and regulatory adherence.

M

m-ARK Marketing a reklama, s.r.o

m-ark.cz

44

m-ARK Marketing a reklama, s.r.o is a Czech Republic based marketing and advertising agency established since 1991. The company offers a range of services including brand marketing, creative design, photo and video production, and publishes travel-related magazines. The website reflects a professional and consistent brand image targeting businesses seeking marketing and creative services. The domain age and WHOIS data confirm a long-standing market presence, supporting business credibility. Technically, the website uses modern web technologies such as Google Fonts, Google reCAPTCHA for form security, and a responsive design with a slider component. However, no CMS or advanced frameworks are explicitly detected. Performance is moderate with basic SEO and accessibility features. The site lacks explicit security headers and privacy/cookie policies, which are important for compliance and user trust. From a security perspective, HTTPS is implied and Google reCAPTCHA is implemented, indicating some security awareness. However, the absence of security headers and privacy policies represents compliance and security gaps. No incident response or vulnerability disclosure information is provided. No WAF or blocking mechanisms are detected, and no suspicious content is found. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced security practices and privacy compliance to improve its security posture and user trust.

P

Pěvecký sbor DVOŘÁK Uherský Brod, z. s.

dvorak-ub.cz

55

Pěvecký sbor DVOŘÁK Uherský Brod is a small non-profit choir organization based in the Czech Republic, focused on choral singing and cultural events. The website serves as a portal for choir information, event announcements, and recruitment of new singers. It maintains an active presence on social media platforms such as Facebook, Instagram, and YouTube, supporting community engagement and outreach. The business model centers on cultural promotion and community participation rather than commercial activities. Technically, the website is built on the Webnode CMS platform and hosted via AWS Cloudfront CDN, ensuring reliable delivery and moderate performance. The site uses modern web technologies including JavaScript and CSS, and integrates Google Tag Manager for analytics and tracking. Mobile optimization and responsive design are adequately implemented, providing a good user experience across devices. From a security perspective, the website enforces HTTPS, which is a critical baseline for secure communications. However, it lacks several important security headers that could enhance protection against common web vulnerabilities. No privacy or cookie policies are present, which is a compliance gap especially under GDPR regulations. The absence of WHOIS data due to privacy protection slightly reduces trust but is understandable for a small cultural entity. No forms collecting sensitive data were detected on the homepage, reducing immediate risk. Overall, the website is functional, safe, and serves its community purpose well, but it would benefit from improved security practices and formalized privacy compliance. Strategic recommendations include implementing security headers, publishing privacy and cookie policies with consent mechanisms, and enhancing accessibility features to broaden inclusivity.

I

Investitionsbank Schleswig-Holstein (IB.SH)

ibsh-unternehmerinnenpreis.de

66

The website www.ibsh-unternehmerinnenpreis.de represents the IB.SH-Unternehmerinnenpreis, an entrepreneurship award initiative by the Investitionsbank Schleswig-Holstein (IB.SH) aimed at recognizing and promoting female entrepreneurs in Schleswig-Holstein, Germany. The site serves as an informational and promotional platform for the award, showcasing winners, jury members, and providing downloadable resources such as FAQs, press releases, and social media kits. The business model is non-profit and government-affiliated, focusing on fostering female entrepreneurship and economic diversity in the region. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and uses Matomo for analytics, reflecting a privacy-conscious approach. The site is mobile-optimized, accessible, and SEO-friendly with proper meta tags and structured content. However, some security headers are missing, which could be improved to enhance security posture. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. Contact information is clearly provided with multiple dedicated contacts, enhancing trust and transparency. The absence of explicit security or incident response policies is noted but not uncommon for this type of site. Overall, the website is professional, trustworthy, and well-aligned with its mission. It effectively supports the IB.SH's goal of empowering female entrepreneurs in Schleswig-Holstein. Strategic improvements in security headers and publishing security policies could further strengthen its security posture and user trust.

C

Cykloserver.cz

cykloserver.cz

39

Cykloserver.cz is a well-established Czech cycling news and community platform founded in 2000, serving hobby cyclists and enthusiasts primarily in the Czech Republic and Slovakia. The site offers a variety of content including cycling news, event calendars, trip tips, and an online cycling atlas, supported by partnerships with relevant cycling organizations. The business model appears to be content-driven with advertising and partner promotions. Technically, the website uses standard web technologies with HTTPS and Google Analytics integration, hosted by a Czech hosting provider. While the site is functional and content-rich, it lacks formal privacy and cookie policies and does not implement advanced security headers, which are areas for improvement. The security posture is moderate with secure forms and HTTPS but missing some best practices. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

S

Outlook

starezsport.cz

61

The website is a login portal for Microsoft Outlook Web Access (OWA) customized for the domain starezsport.cz. It provides a user interface for email access but lacks any business descriptive content, contact information, or privacy and cookie policies. The domain is registered since 2006 and hosted on Czech servers, indicating a stable presence. The technical infrastructure relies on legacy Microsoft technologies including ActiveX controls, which may pose security risks in modern environments. The page is minimalistic with basic design and limited mobile optimization. Security posture is moderate with HTTPS implied but lacking modern security headers and privacy compliance disclosures. No analytics or advertising scripts are present, reducing tracking concerns but also limiting marketing insights. Overall, the site serves a functional purpose but lacks comprehensive business and compliance information.

Cryosoft.cz is a Czech-based internet advertising agency specializing in custom web development and multimedia projects. The company offers comprehensive internet projects including web presentations, CRM systems, e-shops, and online catalogs, supported by their proprietary CryoADMIN administration interface. Additionally, they provide multimedia services such as corporate identity creation, promotional videos, and original music production. The business targets clients seeking tailored digital solutions primarily within the Czech market. The website content is professional and well-structured, reflecting a small but specialized agency with a focus on quality and client references. Technically, the website employs standard web technologies including jQuery, CSS, and JavaScript, with a responsive design and good SEO practices. HTTPS is enforced, and cookie consent mechanisms are implemented to comply with GDPR requirements. However, no explicit privacy policy page was found, and no contact emails or phone numbers are directly visible on the homepage, which could impact user trust and compliance. From a security perspective, the site benefits from HTTPS and basic security best practices but lacks advanced security headers and published security policies or incident response contacts. The absence of WHOIS data reduces domain trustworthiness, although the website content and business information appear legitimate and consistent with a long-standing operation since 2006. Overall, the security posture is moderate with room for improvement in transparency and policy publication. The overall risk assessment is low to moderate, with recommendations to enhance security headers, publish privacy and security policies, and provide clear contact information to improve trust and compliance. The website is accessible without WAF or blocking mechanisms, enabling full content analysis.

The website www.mocnak.cz represents a personal portfolio for Jan Mocňák, a media professional specializing in graphic design, video production, and photography with 20 years of experience. The site is minimalistic, providing basic contact information and a brief description of services. There is no evidence of advanced business infrastructure or multiple service offerings beyond the individual professional's portfolio. The market position is that of a small-scale individual service provider targeting clients seeking media production services in the Czech Republic. Technically, the website uses basic HTML and CSS without any detected CMS or advanced frameworks. The site appears moderately optimized for mobile devices but lacks modern SEO and accessibility features. No analytics or tracking technologies are detected, indicating minimal digital marketing infrastructure. The absence of privacy, cookie, or terms of service policies suggests low digital maturity in compliance and user data protection. From a security perspective, the site does not show evidence of HTTPS enforcement or security headers, which lowers its security posture. The lack of WHOIS data raises concerns about domain registration transparency, although the site content itself does not indicate malicious intent. No forms or user input fields are present, reducing attack surface but also limiting user engagement capabilities. Overall, the website is a straightforward personal portfolio with limited technical sophistication and security measures. Strategic improvements in security headers, HTTPS enforcement, privacy compliance, and domain registration transparency would enhance trust and professionalism.

S

sitour Česká republika

sitour.cz

51

sitour Česká republika is a specialized company integrating advertising, information, and communication systems in mountain and tourist regions for over 20 years. They provide innovative multimedia and digital signage solutions tailored for ski resorts and outdoor tourism, positioning themselves as a leading network in the digital out-of-home advertising sector within the mountain resort industry. The website demonstrates a mature digital infrastructure using modern frameworks like Astro and integrates Google Analytics with a strong privacy consent mechanism. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and vulnerability disclosure mechanisms are absent. The absence of WHOIS data is a notable risk factor, but the professional presentation, international partnerships, and clear contact information support the legitimacy of the business. Overall, the site is well-designed, user-friendly, and compliant with GDPR requirements.

Městská knihovna Litovel operates as a public library serving the Litovel community in the Czech Republic. The website provides comprehensive information about library services, including lending for children and adults, electronic books, internet access, regional functions, and cultural events. The target audience primarily consists of local readers and visitors interested in library resources and activities. The business model is that of a public institution focused on education and cultural enrichment. Technically, the website is built on the Public4u CMS platform and utilizes jQuery and JavaScript for interactive features. While the site is functional and moderately optimized, mobile responsiveness and accessibility could be improved. The site enforces HTTPS and includes cookie consent mechanisms, indicating a baseline of privacy compliance. From a security perspective, the site lacks advanced security headers and does not expose sensitive data or vulnerable libraries. No security incidents or policies are publicly documented. The absence of WHOIS data limits domain trust assessment, but the website content and external links suggest legitimacy. Overall, the site maintains a good security posture for a small public institution but could benefit from enhanced security best practices. The overall risk is low given the nature of the business and content, but improvements in technical implementation and security hardening are recommended to maintain trust and compliance.

N

Nilfisk

nilfisk.com

74

Nilfisk is a globally recognized leader in the manufacturing and provision of premium cleaning machines, products, solutions, and services catering to both professional and consumer markets. The company maintains a strong market position with a comprehensive product portfolio and a global footprint, supported by a professional and well-structured website that reflects its brand and business model effectively. The website targets professional cleaning service providers and consumers seeking high-quality cleaning solutions. Technically, the site leverages modern web technologies such as React and Next.js, ensuring good performance, mobile optimization, and accessibility. Security measures are robust, with HTTPS enforcement and appropriate security headers, although there is room for improvement in public vulnerability disclosure and incident response transparency. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Nilfisk's digital presence is professional, secure, and trustworthy, supporting its business credibility and customer engagement.

Č

Český hydrometeorologický ústav

chmi.cz

61

The Český hydrometeorologický ústav (ČHMÚ) is the Czech Republic's national meteorological and environmental authority, providing comprehensive weather forecasts, hydrological data, and air quality monitoring. The website serves a broad audience including the general public, government bodies, media, and business partners, offering detailed environmental data, news, and specialized services such as mobile applications. The organization holds ISO 9001 certification, reinforcing its credibility and commitment to quality. Technically, the website employs traditional web technologies including jQuery and JavaScript, with a moderate performance profile and basic mobile optimization. The site implements a robust cookie consent mechanism aligned with GDPR requirements, denying marketing and analytics cookies by default. While HTTPS is used, explicit security headers are not detected in the provided data, suggesting room for improvement in security hardening. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of detailed incident response contacts and security headers indicates potential gaps. Privacy compliance is strong, supported by comprehensive privacy and cookie policies. The domain WHOIS data is unavailable due to CZ.NIC policies, but the domain usage and content strongly indicate legitimacy as a government entity. Overall, the website is professional, trustworthy, and content-rich, with recommendations to enhance security headers, mobile responsiveness, and incident response transparency to further strengthen its security and user trust.

V

Volkswagen Užitkové vozy

vw-uzitkove.cz

59

Volkswagen Užitkové vozy is the official Czech Republic website for Volkswagen commercial vehicles, offering a comprehensive portfolio of new vehicle models, configurators, financing options, and after-sales services including servicing and accessories. The site targets both business customers and individual buyers interested in commercial vehicles, positioning itself as a key player in the Czech automotive transportation sector. The website demonstrates strong brand consistency with official Volkswagen branding and links to related Volkswagen services and partners. Technically, the site is built on modern frameworks such as Next.js and React, providing a responsive and accessible user experience with good SEO practices. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though some security headers are not detected and no explicit security or incident response policies are published. Privacy compliance is well addressed with visible cookie consent and privacy policy pages. The absence of WHOIS data reduces domain trustworthiness, but the overall professional presentation and official branding mitigate concerns. Strategic recommendations include improving security header implementation, publishing a security policy, and enhancing transparency around incident response.

T

Tino Digital Agency

tino.design

67

Tino Digital Agency is a professional UI/UX design and web/mobile development agency primarily serving clients in the USA market, with a focus on fintech, healthcare, energy, and crypto sectors. The company offers comprehensive services including research and strategy, UX/UI design, and full-cycle development. Their portfolio includes notable clients and projects, supported by multiple industry awards and high client satisfaction ratings. Technically, the website is built on modern frameworks such as Next.js and React, hosted by Hosting Ukraine LLC, and optimized for performance and mobile devices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy and cookie policies, which are areas for improvement. Overall, the business demonstrates strong credibility and professionalism, though privacy compliance and security transparency could be enhanced.

nivia.de is a German technology company specializing in avalanche transceiver devices featuring advanced 3D technology for faster and more precise search capabilities. The website presents a professional and focused product offering targeting skiers, mountaineers, and rescue professionals. The company positions itself as an innovator in avalanche safety technology with a small business footprint. Technically, the site uses modern web technologies including JavaScript ES modules, SVG graphics, and the UIkit framework, hosted on kasserver.com. The site is mobile optimized with good SEO and accessibility basics. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. No direct contact emails or phone numbers are visible, with contact likely via forms. Overall, the site is trustworthy and professional but could improve in privacy compliance and security transparency.

K

Kohlbrat & Bunz GmbH

kohlbratbunz.com

57

Kohlbrat & Bunz GmbH is a small, family-owned Austrian company established in 1930 specializing in manufacturing medical, transport, and rescue equipment such as vacuum mattresses and rescue stretchers. Their products serve medical professionals, rescue teams, and animal healthcare sectors worldwide. The website is hosted on WordPress.com, leveraging modern CMS and Gutenberg blocks, providing a professional and mobile-optimized user experience. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Contact information and social media presence are clearly provided, enhancing business credibility. Overall, the site is trustworthy but would benefit from improved security and compliance disclosures.

G

Galileo Corporation s.r.o.

smart-info.cz

39

Galileo Smart Info is a Czech Republic based service operated by Galileo Corporation s.r.o. that enables municipalities to communicate important announcements to their citizens via SMS and email. The platform targets local government officials and citizens, offering a free service with features such as message category selection and a mobile application for enhanced user experience. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the website uses modern web technologies including JavaScript and CSS, and integrates Google Analytics with IP anonymization to monitor traffic. Hosting is provided by Forpsi, a Czech hosting provider, which aligns with the local focus of the service. The website is mobile optimized and performs moderately well, though there is room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide a cookie consent mechanism, which are areas for improvement to enhance compliance and security posture. No vulnerability disclosure or incident response information is available, which could be added to improve transparency and trust. Overall, the website and service appear legitimate and trustworthy with a solid foundation. Strategic improvements in security headers, privacy compliance, and incident response transparency would further strengthen the platform's security and compliance standing.

M

Město Mikulov

mikulov.cz

41

Město Mikulov operates as the official municipal government website for the city of Mikulov in the Czech Republic. It provides comprehensive information and services for both citizens and tourists, including municipal office details, cultural events, tourism highlights, and e-services. The website is well-branded and targets local residents and visitors, emphasizing the city's rich history and wine culture. Technically, the site employs modern web technologies, including JavaScript and Google Analytics, and is mobile-optimized with good accessibility and SEO practices. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks some advanced security headers and explicit security policies. The absence of WHOIS data reduces domain registration transparency, but the website content and official branding strongly support its legitimacy. Overall, the site presents a professional and trustworthy digital presence for the city government.

The website www.tpcr-turnov.cz serves as an informational portal focused on promoting local landmarks and tourism in Turnov, Czech Republic. It provides links to partner sites such as the Valdštejn Castle, Synagogue Turnov, and the local information center. The site uses the Public4u CMS platform and relies on traditional web technologies like jQuery and CSS. The content is primarily in Czech with language options for English, German, and Polish, targeting a general audience interested in cultural and historical tourism. The site lacks detailed business information and contact data, which limits its business credibility.

J

Jazyky-online.info

jazyky-online.info

45

Jazyky-online.info is a Czech language educational portal offering free online language learning resources primarily targeting self-learners including adults and children. The website provides modules for learning English and other major world languages such as German, French, Spanish, Russian, Chinese, and Japanese. It operates as a small-scale educational platform with a long history dating back to at least 2007, emphasizing free access to language education. Technically, the site is built with basic HTML and CSS, includes legacy Google Analytics tracking, and lacks modern CMS or frameworks. The site is accessible without WAF or blocking mechanisms, but it does not enforce HTTPS or implement modern security headers, indicating a basic security posture. Privacy compliance is minimal, with a privacy policy present but no cookie consent mechanism. Contact is available only via an external contact form on a partner domain. Overall, the site is safe for general audiences and maintains moderate trustworthiness despite limited transparency in WHOIS data due to privacy protection.

Č

Český statistický úřad

volby.cz

61

The website volby.cz serves as the official platform for the Czech Statistical Office (Český statistický úřad) to publish election and referendum results. It is a government-operated site providing authoritative statistical data related to various elections in the Czech Republic. The site targets voters, election commissions, and government officials, offering comprehensive election results and related information. The branding and content strongly indicate a trusted government source, although WHOIS data is unavailable, which slightly impacts transparency. Technically, the site uses modern web technologies including JavaScript, CSS, SVG, and web components within the gov-design framework. The site is mobile-optimized and accessible, with good SEO practices evident. However, there is no evidence of advanced analytics or tracking, and no visible security headers were detected in the provided HTML content. The site lacks explicit privacy, cookie, and terms of service policies, which is a gap in compliance and user transparency. From a security perspective, the site uses HTTPS (implied by the URL), but no security headers or incident response contacts are visible. The absence of WHOIS data is unusual but may be due to CZ NIC policies or privacy protections. No vulnerabilities or malicious content were detected. Overall, the site demonstrates a moderate security posture but would benefit from enhanced transparency and security best practices. The overall risk assessment is moderate with a recommendation to improve privacy disclosures, implement security headers, and provide clear contact information for security incidents. These steps would enhance user trust and compliance with data protection regulations.

S

SmartEnvi

smartenvi.eu

55

SmartEnvi is a specialized environmental monitoring platform focused on measuring air quality and meteorological data primarily in the Czech Republic. The website provides interactive maps and data visualization for various monitoring stations, serving governmental bodies, researchers, and environmental agencies. The platform leverages modern web technologies such as Leaflet.js and OpenStreetMap for geospatial data presentation. While the website content is professionally structured and relevant to its niche, it lacks visible privacy and cookie policies, contact information, and security best practices such as security headers. The absence of WHOIS registrant data is consistent with EURid's privacy policies for .eu domains and does not raise immediate concerns. Overall, the site demonstrates moderate digital maturity but requires improvements in security and compliance to enhance trust and user confidence.

K

Kulturní centrum Turnov, s.r.o.

kcturnov.cz

41

Kulturní centrum Turnov, s.r.o. operates as a regional cultural center in Turnov, Czech Republic, providing a variety of cultural events including theater, music concerts, and film screenings. The website serves as a portal for event programming, ticketing, and cultural information targeting a general audience interested in arts and culture. The business model focuses on event organization and venue management, positioning itself as a key cultural hub in the region. Technically, the website employs modern web technologies such as JavaScript ES modules, CSS, and HTML5, with asynchronous data loading via Fetch API. The site is mobile-optimized and includes SEO best practices like meta descriptions and keywords. However, no CMS or hosting provider details are evident, and some accessibility features could be improved. From a security perspective, the site uses HTTPS as implied by the base URL, includes a cookie consent mechanism, and integrates Google Analytics for visitor tracking. There is a lack of explicit security headers and no visible incident response or security policy pages. The absence of WHOIS domain registration data reduces trustworthiness and raises concerns about domain legitimacy. Overall, the website is professional and content-rich but would benefit from enhanced security practices, clearer business contact information, and verified domain registration details to improve trust and compliance.

M

Městská Policie Brno

dopravnihristebrno.cz

42

Dopravní hřiště Riviéra Brno is a municipal traffic education facility operated by the Municipal Police of Brno, Czech Republic. It provides traffic safety education primarily targeting children, schools, and the general public through interactive projects, tests, and bicycle registration services. The website reflects a well-established public service with a clear focus on traffic education and safety, supported by EU funding and local government partnerships. The content is professionally presented in Czech and targets local audiences including schools and families. Technically, the website is built on TYPO3 CMS with modern web technologies including responsive design, external fonts, and icon libraries. The site demonstrates moderate performance and good mobile optimization but lacks some advanced accessibility features. SEO practices are adequate with proper meta tags and structured navigation. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and does not provide explicit security policies or incident response information. Cookie consent mechanisms are absent despite GDPR relevance, which is a compliance gap. The WHOIS data aligns well with the municipal police entity, confirming legitimacy and trustworthiness. Overall, the website is a credible, well-maintained public service platform with good content quality and business credibility. Security and privacy compliance can be improved by adding cookie consent, security headers, and publishing security policies. These enhancements would strengthen user trust and regulatory compliance.