Security Directory

I

Ivánek-Zeman v.o.s.

ivanek-zeman.cz

54

Ivánek-Zeman v.o.s. is a small, well-established gardening and landscaping company based in the Czech Republic with over 25 years of experience. The company offers a comprehensive range of services including garden design, establishment, maintenance, green roofs, ponds, irrigation systems, and machine work supply. Their market position is that of a trusted local service provider with a strong tradition and industry memberships. Technically, the website is built on WordPress, uses jQuery and Google Fonts, and integrates Facebook social plugins. The site is moderately performant and mobile-optimized with good SEO practices. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and incident response information. Privacy compliance is partial due to missing privacy policy and terms of service pages. Overall, the website reflects a credible and professional business with room for security and compliance improvements.

HTB - Požární ochrana a.s. is a Czech Republic based company specializing in comprehensive fire protection and occupational safety services. Their offerings include fire extinguisher servicing, inspections of fire safety equipment, risk analysis, training, and supply of related products such as floating pumps and smoke detectors. The company operates physical branches in Ostrava and Jihlava and maintains partnerships with several notable industrial entities, indicating a solid market presence in the regional manufacturing and safety sectors. Technically, the website is built using modern frontend technologies including Bootstrap, jQuery, FontAwesome, and Owl Carousel, providing a responsive and user-friendly experience. However, there is no evidence of a CMS or advanced backend platform. The site lacks visible analytics or tracking scripts, suggesting minimal user tracking. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site does not exhibit critical vulnerabilities but lacks important security headers and privacy-related policies, which are essential for GDPR compliance and user trust. The absence of WHOIS data reduces domain trustworthiness, although the website content and contact information appear legitimate and professional. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance measures, and improved transparency regarding domain registration to strengthen trust and reduce risk.

F

Forum Nová Karolina - Fashion. Gastro. Zábava

forumnovakarolina.cz

48

Forum Nová Karolina is a large retail and entertainment center located in the Czech Republic, established in 2011. The website presents a comprehensive overview of the center's offerings including over 220 shops, 24 restaurants, cinema, fitness, and various services. The business targets general consumers and families seeking shopping, dining, and entertainment experiences. The site is professionally designed with consistent branding and good content quality, supporting a positive user experience and clear navigation. Technically, the website is built on WordPress with modern plugins and frameworks, hosted by REG-WEBGLOBE, and integrates multiple marketing and analytics tools such as Google Analytics and Facebook Pixel. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with clear policies and GDPR consent management. Contact information is clearly provided, enhancing business credibility. No critical security or content safety issues were detected.

B

BeePartner a.s.

beepartner.cz

57

BeePartner a.s. is a Czech-based consulting company specializing in strategy development, project management, and securing funding for clients at various governmental and regional levels. The company has a solid market position with over 10 years of experience and a focus on partnership and regional development. Their website is professionally designed using WordPress and the Divi theme, offering good user experience and mobile optimization. The technical infrastructure includes modern web technologies and Google Analytics for user insights. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. Overall, the website reflects a trustworthy and compliant business with a clear focus on its target audience and services.

M

Moravian-Silesian Tourism, s.r.o.

mstourism.cz

51

Moravian-Silesian Tourism, s.r.o. operates as a regional destination management organization focused on promoting tourism in the Moravian-Silesian region of the Czech Republic. The company collaborates with various partners and projects to enhance sustainable tourism and position the region as an attractive destination for leisure and holidays. The website reflects a professional and consistent brand presence with clear navigation and relevant content aimed at tourists and stakeholders. Technically, the website is built on WordPress using modern frameworks such as Bootstrap and JavaScript libraries like Swiper.js. It integrates Google Tag Manager for analytics and employs a GDPR-compliant cookie consent mechanism via the Complianz plugin. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent management, but lacks advanced security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces transparency and trustworthiness somewhat, but the presence of multiple reputable partner links and consistent branding supports legitimacy. Overall, the website presents a moderate to good security posture and a professional digital presence suitable for its business purpose. Strategic improvements in security headers, incident response disclosure, and WHOIS transparency would enhance trust and compliance.

H

HSF System a.s.

hsfsystem.cz

46

HSF System a.s. is a Czech Republic-based construction company specializing in general contracting and installation of lightweight building envelopes such as facades and sandwich panels. The company operates as part of the PURPOSIA Group and serves construction investors and developers with turnkey building solutions. Their website demonstrates a professional presence with ISO certifications and notable client partnerships, indicating a solid market position in the regional construction sector. Technically, the website is built on WordPress with common marketing and analytics integrations, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements are recommended in security headers and incident response transparency. The absence of WHOIS data reduces domain trustworthiness, but the overall business credibility remains high based on content and certifications. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration details to improve trust and compliance.

B

Beats for love

b4l.cz

49

Beats for Love is a prominent music festival organizer hosting the largest dance festival in Central Europe, based in the Czech Republic. The website showcases extensive content about the festival, including news, artist lineups, ticketing information, and partner details. The business model centers on event organization, ticket sales, and merchandise, supported by a mobile app for enhanced user engagement. The company behind the festival is PEPIAPP s.r.o., indicating a structured business entity. Technically, the website is built on WordPress with modern frameworks like Bootstrap and Swiper.js, leveraging CDN services for performance. SEO and mobile optimization are excellent, ensuring broad accessibility and user experience. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The absence of WHOIS data reduces domain trust slightly but does not detract from the professional presentation and operational maturity of the site. Overall, the website is a reliable and well-maintained digital presence for a major entertainment event.

J

Juta Agency

jutaagency.cz

52

Juta Agency is a Czech-based company specializing in the rental of mobile sanitary equipment including toilets, urinals, VIP sanitary trailers, mobile washbasins, fencing, and other related infrastructure primarily for construction sites, cultural events, sports events, weddings, and garden parties. The company targets businesses and event organizers within the Czech Republic, focusing on regions such as Moravia and Silesia. Founded in 2011, it operates as a small-sized enterprise with a clear regional market presence. Technically, the website employs a modern technology stack including Bootstrap, jQuery, FontAwesome, Google Fonts, Google Analytics, and Smartsupp Live Chat. The site is mobile optimized, uses HTTPS with good SSL configuration, and includes cookie consent mechanisms, indicating a reasonable level of digital maturity and compliance with privacy regulations. Hosting is provided by a Czech hosting provider, aligning with the company's regional focus. From a security perspective, the website enforces HTTPS and uses cookie consent banners but lacks explicit security headers such as CSP or HSTS in the provided data. No security or incident response policies are published, and no vulnerability disclosure or security.txt files are found. The site does not expose sensitive data and uses asynchronous script loading to improve performance and security. Overall, the security posture is moderate but could be improved by implementing additional security headers and formal policies. The overall risk assessment is low with no signs of malicious activity or suspicious content. The company demonstrates good business credibility with clear contact information, social media presence, and downloadable legal and product documents. Strategic recommendations include enhancing security headers, publishing security policies, and improving privacy compliance transparency to strengthen trust and security culture.

D

Dolní oblast VÍTKOVICE, z.s.

stcostrava.cz

62

Dolní oblast VÍTKOVICE, z.s. operates the Velký svět techniky, a popular science and technology educational center in the Czech Republic. Established in 2014, the center offers interactive exhibitions, a large 3D cinema, educational workshops, and family-friendly science shows. The website reflects a mature digital presence with multilingual support, rich content, and strong compliance with GDPR and cookie regulations. Technically, the site is built on WordPress with modern plugins and scripts, ensuring good performance and SEO optimization. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, professional, and well-maintained, serving a broad audience including families, schools, and science enthusiasts.

T

Trojhalí Karolina

trojhali.cz

53

Trojhalí Karolina is a multifunctional venue located in Ostrava, Czech Republic, offering a unique space composed of two heritage-protected buildings. The site serves a broad audience including sports enthusiasts, cultural event organizers, and the general public. It provides facilities for sports, cultural, social, and commercial events, positioning itself as a key local venue with historical significance. The business model revolves around venue rental and event hosting, supported by partnerships with local organizations and a clear focus on community engagement. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Slick Carousel, with integration of Google Analytics and Tag Manager for visitor tracking. The site is mobile-optimized and presents a professional design with clear navigation. However, some accessibility features are basic, and no CMS is explicitly identified, suggesting a custom or less common platform. From a security perspective, the site uses HTTPS and includes consent mechanisms for data privacy, but lacks visible advanced security headers and explicit security policies. No vulnerability disclosure or incident response information is provided, indicating room for improvement in security transparency and maturity. Overall, the website is trustworthy and professionally maintained, with a good balance of content quality and technical implementation. Strategic enhancements in security policies, incident response readiness, and accessibility could further strengthen its posture and compliance.

I

iMOVE at the Federal Institute for Vocational Education and Training (BIBB)

imove-germany.de

52

The website www.imove-germany.de is a government-backed platform operated by iMOVE at the Federal Institute for Vocational Education and Training (BIBB). It focuses on promoting international cooperation in vocational education and training, providing resources such as a provider pool, B2B marketplace, and informational content targeted at both international users and German providers. The site is professionally designed with consistent branding and clear navigation, supporting a medium-sized government initiative in the education sector based in Germany. Technically, the site uses standard web technologies including jQuery and Matomo analytics with privacy-conscious configurations such as disabled cookies. The site is mobile-optimized and SEO-friendly, though no CMS or hosting provider details are explicitly identified. Security posture is good with HTTPS enforced and privacy policies in place, but lacks explicit security headers and published incident response or vulnerability disclosure policies. Overall, the site is trustworthy, safe, and compliant with GDPR, serving as a credible resource for vocational education stakeholders.

A

Agrární půdní fond s.r.o.

apfgroupcr.com

52

Agrární půdní fond s.r.o. operates a specialized investment platform focused on secured investments in agricultural land within the Czech Republic. The company targets conservative investors seeking inflation-beating returns through direct ownership of agricultural plots, offering investment products with secured yields and plans for corporate bond issuance. The website is professionally designed, content-rich, and provides comprehensive information including FAQs, contact details, and cookie consent mechanisms. Technically, the site uses ProcessWire CMS and integrates modern JavaScript libraries and analytics tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. Hosting is provided by WEDOS Internet, a reputable registrar and hosting provider. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies are absent. No WAF or content blocking was detected, and WHOIS data aligns well with the business claims, indicating legitimacy. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy platform for its niche market.

P

Pivovary CZ Group a. s.

litovel.cz

58

Pivovar Litovel is a well-established Czech brewery with a rich tradition spanning over 700 years, specializing in the production and retail of beer products. The company operates under Pivovary CZ Group a. s., serving a general adult audience with a focus on quality brewing and regional heritage. The website reflects a professional digital presence with multilingual support, clear navigation, and an e-commerce channel. Technically, the site employs modern tracking and analytics tools, including Google Tag Manager, Google Analytics, and Facebook Pixel, alongside a responsive design optimized for mobile users. Security measures include HTTPS enforcement and an age verification gate to restrict underage access, aligning with regulatory requirements for alcohol-related content. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with granular consent management. However, the absence of WHOIS registration data and lack of published security policies or incident response contacts represent areas for improvement. Overall, the website demonstrates a solid security posture and business credibility, though verification of domain registration and enhanced transparency on security practices are recommended.

N

Národní realitní holding a.s.

narodnirealitniholding.cz

49

Národní Realitní Holding is a Czech Republic-based real estate holding company focused on elevating the quality and reputation of the local real estate market. The company provides a portfolio of brands, broker training, unique real estate tools, and advisory services aimed at real estate agencies and brokers. Their market position is supported by strategic partnerships with key industry bodies such as the Realitní komora České republiky and the Realitní Akademie České Republiky. The website content is professionally presented, targeting real estate professionals and property clients within the Czech market. Technically, the website employs a modern JavaScript stack including jQuery, Google Maps API, and Fancybox for media display. The site is mobile optimized with good SEO practices but lacks some advanced accessibility features. Security posture is moderate with HTTPS enabled and cookie consent implemented; however, no security headers were detected and no published security or privacy policies were found, which are areas for improvement. The absence of WHOIS data for the domain reduces the ability to fully verify domain legitimacy and registration details, which impacts trust assessment. Despite this, the website's professional presentation, clear contact information, and strategic partnerships indicate a legitimate business operation. Overall, the site scores well on content quality and business credibility but should improve privacy compliance and security practices to enhance trust and reduce risk.

G

GALILEO Production, s.r.o.

quick-up.cz

43

Quick-up.cz is an e-commerce website operated by GALILEO Production, s.r.o., a Czech company founded in 2019. The website uses WordPress with WooCommerce and the Divi theme to provide an online retail platform, targeting primarily Czech customers. The business appears to be small-sized and focused on retail or related services, although specific product or service details are limited in the provided content. The website branding is consistent with the company name and includes a Facebook social media presence. Technically, the site employs modern web technologies including Google Fonts and standard WordPress plugins, with moderate performance and good mobile optimization. However, the site lacks visible advanced security headers and explicit privacy or cookie policies, which are important for GDPR compliance and user trust. No contact emails or phone numbers were found in the analyzed content, which may impact customer support and credibility. Overall, the domain registration data aligns well with the website content, indicating legitimacy and consistent business operation.

T

Tělovýchovná jednota Ostrava

volejbal-ostrava.cz

54

TJ Volejbal Ostrava is a regional volleyball sports club based in Ostrava, Czech Republic, offering professional training, team collaboration, and community engagement primarily focused on youth and adult volleyball teams. The club actively participates in national leagues and organizes events and tournaments, supported by a network of sponsors and partners. The website reflects a well-maintained digital presence with regular updates on matches, news, and social media integration. Technically, the site uses a custom CMS (Contimex) with modern web technologies and is mobile-optimized, though some improvements in accessibility and security headers are recommended. Security posture is moderate with HTTPS enabled but lacking advanced security headers and cookie consent mechanisms. The absence of WHOIS data reduces transparency but is common for privacy-protected domains. Overall, the site is trustworthy and professional, serving its community effectively.

A

AUTOHITY CZ s.r.o.

autohity.cz

42

AUTOHITY CZ s.r.o. operates a professional and well-established used and nearly new car dealership in the Czech Republic, primarily serving the Ostrava region with a branch in Olomouc. The company offers a broad inventory of approximately 400 vehicles across multiple popular brands, complemented by financing options and vehicle servicing. Their market position is strong as one of the largest used car dealers in the country, supported by a clear business model focused on retail automotive sales and customer service. The website reflects this with good content quality, consistent branding, and clear navigation.

P

Pražské reality

praguerealestate.cz

49

Pražské reality operates a specialized real estate portal focused on luxury properties for sale and rent in Prague and the Czech Republic. The website offers a catalog of houses, apartments, lands, commercial properties, and other real estate types, along with agency registration services and a real estate advisory blog. The platform targets individuals and agencies interested in the Czech real estate market, positioning itself as a niche service provider with a professional online presence. Technically, the website employs a modern technology stack including jQuery, Bootstrap, FontAwesome, Google Tag Manager, and Leaflet.js for interactive maps. The site is built on a custom CMS and demonstrates good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating awareness of privacy compliance. However, no explicit security policies or incident response contacts are published, and security headers are not detected in the provided data. The absence of WHOIS registration details limits domain trust analysis, but the professional presentation and valid contact address support legitimacy. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security policy transparency and technical security controls would enhance trust and resilience.

O

ORION Realit s.r.o.

orionreal.cz

45

ORION Realit s.r.o. is a well-established real estate company based in Prague, Czech Republic, with over 30 years of experience. The company specializes in comprehensive real estate services including property sales, rentals, management, and relocation services. Their website reflects a professional market presence targeting individuals and businesses seeking real estate solutions in Prague and surrounding areas. The business model is focused on personalized client service and maintaining a strong local market position supported by memberships in international chambers of commerce. Technically, the website is built on a custom ASP.NET Web Forms platform enhanced with Telerik UI components, jQuery, and Bootstrap for responsive design. It uses Google Fonts and Google Tag Manager for analytics and marketing. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and solid SEO practices. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data confirms domain legitimacy and consistency with the business claims, supporting trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, making it a reliable platform for its target audience. Strategic improvements in security headers and incident response documentation could further enhance its security posture.

S

Sparkle WP

wpneuron.com

55

Sparkle WP is a specialized provider of premium WordPress themes, plugins, and hosting services, with a strong focus on Elementor-based templates and customization. The company targets WordPress users, freelancers, and agencies seeking high-quality digital products to enhance their websites. The website demonstrates a professional and consistent brand presence with rich content including tutorials, demos, and customer testimonials, positioning it well within its niche market. Technically, the website is built on WordPress with Elementor and uses modern web technologies such as jQuery and Google Tag Manager for analytics and marketing. The site is mobile-optimized and SEO-friendly, though performance is moderate. Hosting details are not explicit beyond Cloudflare DNS usage. The technical implementation is solid but could benefit from enhanced accessibility and security headers. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC, explicit security policies, incident response contacts, and cookie consent mechanisms, which are important for compliance and trust. No critical vulnerabilities or suspicious content were detected, and the domain registration is consistent and trustworthy. Overall, Sparkle WP presents a low-risk profile with good business credibility and technical maturity. Strategic improvements in security policies, privacy compliance, and security headers would enhance its security posture and user trust.

E

evzdelavani.cz

edukomforta.cz

51

Edukofmorta.cz is an established Czech educational platform founded in 2018, offering a broad range of in-person and online courses, professional exams, and subsequent training aimed at practical application of knowledge. The platform targets individuals and professionals seeking certification and skill development in sectors such as IT, finance, insurance, real estate, and construction. The business model revolves around e-commerce of educational services with a focus on verified instructors and comprehensive course offerings. Technically, the website is built on WordPress using WPBakery Page Builder and integrates modern JavaScript libraries and analytics tools including Google Analytics, Facebook Pixel, and Microsoft Clarity. The site is hosted likely by Active24, consistent with the domain registrar information. Security posture is solid with HTTPS enforced and use of reCAPTCHA on forms, though additional HTTP security headers could enhance protection. Privacy and cookie policies are present and GDPR compliance is indicated, but cookie consent mechanisms could be improved. Overall, the site demonstrates good professionalism, trustworthiness, and technical maturity with no blocking or WAF interference detected.

J

Jitka Skuhrava Glass

jitkaskuhrava.com

42

Jitka Skuhrava Glass is a small artisan glass art business based in the Czech Republic, specializing in personalized glass and lighting products. The website serves primarily as a brand showcase with minimal content and limited direct customer interaction features. The technical infrastructure is modest, utilizing common JavaScript libraries such as jQuery and Modernizr, and is hosted on Wedos servers. Google Analytics is implemented for visitor tracking, but no cookie consent or privacy policies are present, indicating gaps in privacy compliance. Security posture is basic with HTTPS implied but lacking security headers and DNSSEC, which could be improved to enhance protection. Overall, the domain registration is consistent with the business profile, supporting legitimacy. The website is safe for general audiences with no adult or questionable content detected.

F

FreeDivision

freedivision.com

60

FreeDivision is a specialized company focusing on hardware and software data security with over 15 years of experience, primarily serving the Czech, Slovak, and Brazilian markets. They represent several globally recognized manufacturers of security technologies and emphasize GDPR compliance and advanced data security analysis. The website reflects a professional B2B service provider with a clear focus on security solutions and data protection. Technically, the site uses modern frontend frameworks and libraries, including Bootstrap, FontAwesome, and Cookiebot for consent management, hosted on AWS Cloudfront CDN, ensuring moderate performance and good mobile responsiveness. Security posture is solid with HTTPS and bot protection via Google reCAPTCHA, but lacks visible security headers and explicit incident response contacts. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the absence of WHOIS data and domain registration information raises concerns about domain legitimacy and consistency with the claimed business history. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security best practices.

OctopusPro s.r.o. operates a professional website offering comprehensive data and monitoring services tailored for real estate agencies, brokers, investors, banks, and developers primarily in the Czech Republic and Slovakia. The company positions itself as a leading provider of real estate market data with a strong client base exceeding 950 customers and long-term partnerships. Their key services include real estate monitoring, auction monitoring, ownership record tracking, insolvency monitoring, and web services integrated with partner platforms such as cenovaMapa.cz and realitnieso.cz. The website is built on WordPress with modern front-end libraries and plugins, ensuring a responsive and user-friendly experience. However, the absence of WHOIS data limits verification of domain legitimacy, although the website content and business presence strongly suggest a legitimate operation. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. Overall, the site demonstrates good technical maturity and business credibility with room for improvement in security and compliance documentation.

S

Semibold s.r.o.

semibold.cz

62

Semibold s.r.o. is a Czech-based creative agency specializing in branding, web design, print design, and strategic digital services. The company positions itself as a professional and reliable partner for businesses seeking to develop strong visual identities and effective web presences. Their market position is supported by a robust portfolio and a high client retention rate, indicating customer satisfaction and trust. The website reflects a modern, well-structured digital presence with multilingual support and clear calls to action. Technically, the site leverages Webflow CMS, Google Tag Manager, and privacy-compliant analytics tools, demonstrating digital maturity and attention to user privacy. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and formal policies could be enhanced. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting Semibold's credibility as a design agency.

O

Osobnosti.cz - celebrity, filmy, fankluby

osobnosti.cz

71

Osobnosti.cz is a Czech media website specializing in celebrity profiles, films, and fan clubs. It serves as a large database and news portal targeting a general Czech-speaking audience interested in entertainment and celebrity news. The site features a professional design with good navigation and mobile optimization, supported by modern web technologies and advertising platforms such as Google Adsense and Gemius. Despite the lack of publicly available WHOIS data, the website appears legitimate and well-established in its niche. However, the absence of visible privacy and cookie policies indicates a gap in compliance with data protection regulations. Security posture is generally good with HTTPS enforced, but security headers and vulnerability disclosures are missing, suggesting room for improvement. Overall, Osobnosti.cz is a functional and content-rich media site with moderate trustworthiness and technical maturity.

S

STORMWARE s.r.o.

mpohoda.cz

58

STORMWARE s.r.o. operates the mPOHODA platform, a mobile invoicing and sales application designed primarily for small businesses, freelancers, and accountants in the Czech Republic. The service integrates seamlessly with the POHODA accounting software, enabling users to create invoices and sales documents on the go, both online and offline. The company leverages over 30 years of experience and holds certifications such as ISO 9001, positioning itself as a trusted provider in the business software sector. The website reflects a professional and user-friendly design, optimized for mobile devices and enriched with customer testimonials and clear calls to action.

Č

Český svaz aerobiku a fitness FISAF.cz

ceskosehybe.cz

49

Česko se hýbe is a Czech non-profit initiative operated by the Czech Aerobics and Fitness Association FISAF.cz, dedicated to promoting healthy lifestyles and physical activity among children, youth, and the general population. The website serves as an official portal for their projects, including competitions and educational programs aimed at schools and sports clubs. The organization has a strong presence in the Czech Republic with numerous partners and active participants. Technically, the website is built on WordPress, utilizing jQuery and Google Fonts, hosted by WEDOS. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security-wise, HTTPS is enforced, and a cookie consent mechanism is implemented, but there is a lack of security headers and formal privacy or security policies published. Overall, the security posture is adequate for a non-profit informational site but could be improved by adding privacy policies, terms of service, and security headers. No critical vulnerabilities or suspicious activities were detected. The domain registration is consistent with the organization's history and location, supporting legitimacy. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving technical security measures to strengthen trust and compliance with regulations.

P

Power Yoga Akademie

bmsa.cz

45

Power Yoga Akademie is a Czech Republic-based accredited educational center specializing in yoga instructor training. It offers certified courses recognized by the Ministry of Education, Youth and Sports (MŠMT) and Yoga Alliance, including both in-person and online programs. The website reflects a professional educational service provider targeting individuals seeking formal yoga instructor qualifications. Technically, the site employs modern web technologies such as jQuery, Google Tag Manager, and Facebook Pixel, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the site content and certifications support legitimacy. Overall, the site is well-structured, compliant with GDPR, and provides clear contact and policy information.

P

Power Yoga Akademie

yogaworld.cz

46

Yoga World is an educational platform specializing in advanced yoga instructor training and self-awareness yoga practices, targeting yoga professionals and enthusiasts in the Czech Republic. The website presents a professional and clear structure with relevant content and services, including workshops, seminars, and a voucher system for continuing education. Technically, the site uses modern web technologies such as jQuery, Google Tag Manager, and Facebook Pixel, and enforces HTTPS for secure communication. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy in Czech. However, the absence of WHOIS data and security headers slightly reduces trustworthiness. Overall, the site demonstrates a solid digital presence with room for improvement in security and transparency.

K

Koncertní sál Ostrava

koncertnisal.cz

58

The website www.koncertnisal.cz serves as the official informational platform for the new concert hall project in Ostrava, designed by renowned architect Steven Holl. It provides detailed descriptions of the architectural vision, cultural significance, and sustainable technologies involved. The site targets local residents, cultural enthusiasts, donors, and partners, aiming to promote awareness and support for the project. Technically, the site employs modern web technologies including jQuery, Nette framework, Google reCAPTCHA, and Cookiebot for GDPR-compliant cookie management. The presence of a Facebook page further supports community engagement. Security-wise, the site uses HTTPS and bot protection but lacks visible advanced security headers and explicit privacy or security policies, indicating room for improvement. Overall, the site is professional, content-rich, and trustworthy, with moderate technical maturity and good privacy compliance.

O

Ostrava Expat Centre

ostravaexpat.eu

54

Ostrava Expat Centre is a small, government-affiliated non-profit organization providing free public information and community support services for expatriates living in Ostrava, Czech Republic. The website serves as a comprehensive resource offering relocation guidance, event information, and community engagement opportunities, positioning itself as a trusted local hub for expats. Technically, the site is built on WordPress with a modern tech stack including performance and privacy plugins, ensuring fast load times, mobile responsiveness, and good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are absent. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR, making it a reliable resource for its target audience.

S

Story TLRS

storytlrs.cz

62

Story TLRS is a Czech creative agency specializing in brand storytelling, influencer marketing, and social media content production. With approximately 10 years of experience, they serve brands by crafting engaging narratives and managing digital presence across platforms. Their market position is supported by a portfolio of notable clients and positive testimonials. Technically, the website is built on Webflow, leveraging modern web technologies and third-party analytics and marketing tools, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS, security headers, and reCAPTCHA integration, though lacks published security policies and incident response details. Overall, the site is professional and trustworthy, but the absence of WHOIS data and some contact details slightly reduce credibility.

B

BRNO JEDNA

brnojedna.cz

44

BRNO JEDNA is a small real estate business focused on selling new apartments and leasing office spaces in the center of Brno, Czech Republic. The website presents a professional and modern design with clear navigation and relevant content targeting residents and businesses interested in real estate investment and occupancy in Brno. The business appears to be newly established in 2022, consistent with the domain registration date. Technically, the website uses modern web technologies including Google Tag Manager for analytics and CookieHub for cookie consent management. Hosting is provided by websupport.cz, a Czech hosting provider. The site is mobile optimized and includes SEO best practices such as meta tags and Open Graph data. However, no CMS or major web frameworks were detected, suggesting a custom or lightweight implementation. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible privacy policy or terms of service, which is a compliance gap especially under GDPR. Cookie consent is implemented, indicating some level of privacy awareness. No contact emails or phone numbers are present in the HTML content, limiting direct communication channels. Overall, the website is safe, professional, and functional but would benefit from enhanced privacy disclosures, security headers, and visible contact information to improve trust and compliance. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in security and privacy policies are recommended to strengthen the website's posture and user trust.

P

PSN s. r. o.

zitbranik.cz

55

PSN s. r. o. is a Czech real estate development company with a focus on residential properties, exemplified by the Žít Braník project in Prague. The website presents a professional and modern digital presence, showcasing detailed project information, multimedia content, and clear calls to action for potential buyers. The company targets young families, couples, singles, and investors, offering a variety of apartment types and emphasizing community and location benefits. Technically, the website leverages modern web technologies including Webflow CMS, GSAP animations, and Google Tag Manager for analytics, ensuring a fast, responsive, and engaging user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit incident response information are absent. Privacy compliance is strong, with a comprehensive privacy policy and cookie management. Overall, the site is trustworthy and professionally maintained, though the lack of WHOIS data limits domain registration trust assessment.

M

Martin Domes

martindomes.cz

45

Martin Domes operates a personal brand website focused on web design, online marketing, and educational content including courses and books. The site targets individuals and small businesses seeking professional web presence and digital marketing expertise. The business model is service-oriented, leveraging digital content and training to generate revenue. The website is well structured, professionally designed, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with a modern plugin ecosystem supporting SEO, GDPR compliance, and user experience enhancements. Security posture is solid with HTTPS enforced and cookie consent implemented, though some HTTP security headers are missing and no explicit security policy or incident response information is provided. WHOIS data is unavailable, which slightly reduces trustworthiness but the site content and branding support legitimacy. Overall, the site is a credible, professional digital asset for a small technology-focused business.

S

Sphere

sphere.sk

53

Sphere operates the largest loyalty program in Slovakia and the Czech Republic, providing consumers with access to thousands of discount opportunities and attractive rewards through a unified loyalty card system. The website serves as a portal for card activation, partner catalog browsing, and reward redemption, targeting consumers interested in retail savings and benefits. The platform is well-positioned in the regional market with a strong brand presence and extensive partner network. Technically, the website is built on WordPress with Elementor and enhanced by Yoast SEO for search optimization. It integrates multiple analytics and tracking tools such as Facebook Pixel, Hotjar, and Smartlook, indicating a mature digital marketing strategy. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some improvements are possible. From a security perspective, the site enforces HTTPS and includes standard security headers, reflecting a good baseline security posture. However, it lacks explicit security policies and incident response contact information, which are important for transparency and trust. The absence of a cookie consent mechanism is a compliance gap under EU regulations. Overall, the website is professional, functional, and trustworthy, with minor areas for improvement in privacy compliance and security transparency. No critical vulnerabilities or suspicious content were detected, making it a reliable platform for its intended audience.

S

Sight Digital +

sightplus.cz

39

Sight Digital + is a small, growth-oriented digital design agency based in Prague, Czech Republic. The company focuses on delivering data-driven design solutions to startups and established businesses aiming to increase sales, leads, or profits. Their portfolio showcases a variety of digital services including website development, app creation, e-commerce solutions, and design projects. The agency maintains a professional online presence with active social media profiles on Dribbble, Behance, and LinkedIn, supporting their market positioning as a niche creative agency.

R

Ruml Atelier

rumlatelier.com

44

Ruml Atelier is a small Czech design and architecture atelier specializing in study, projects, realization, exterior and interior design, development, marketing, and graphic design services. The website is built on WordPress using Elementor and Yoast SEO, indicating a moderate level of digital maturity. The site is well structured with good design quality and mobile optimization, targeting a general audience interested in architectural and design services. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the domain is well aged and legitimate, supporting the business credibility. Strategic improvements in privacy compliance and security hardening are recommended to enhance trust and regulatory adherence.

R

Realitní Eso

realitnieso.cz

42

Realitní ESO is a Czech Republic-based real estate portal operated by OctopusPro, s.r.o., providing a comprehensive platform for buying, selling, and renting various types of properties including apartments, houses, commercial spaces, and land. The website offers free ad insertion, personal agent services, property valuation tools, and real estate advice articles, positioning itself as a leading real estate portal in the Czech market. Technically, the site is built on ASP.NET WebForms with common JavaScript libraries such as jQuery and integrates Google Analytics and Google Maps API for enhanced user experience and tracking. Security posture is moderate with HTTPS usage but lacks visible security headers and cookie consent mechanisms, which may affect GDPR compliance. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and business presence suggest a legitimate operation. Overall, the site provides a professional and trustworthy user experience but would benefit from improved security and privacy compliance measures.

P

Pražské reality

prazskereality.cz

49

Pražské reality operates a professional real estate portal primarily focused on property sales and rentals in Prague and across the Czech Republic. The website offers a comprehensive catalog of properties including houses, apartments, commercial spaces, and land, along with tools such as a mortgage calculator and a blog featuring real estate news. The platform targets individuals and businesses interested in luxury and general real estate in the region. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though it lacks some advanced security headers and explicit incident response contacts. The absence of WHOIS data for the domain is a notable concern, limiting the ability to fully verify domain legitimacy. Overall, the site is professional and trustworthy from a user perspective but would benefit from enhanced transparency and security practices.

W

Wishbox

duve.com

72

Duve, operated by Wishbox, is a well-established hospitality guest experience platform founded in 2000, offering a comprehensive SaaS solution for hotels, hostels, and vacation rentals. The platform enables guest communication, upselling, access to hotel information, and keyless room entry through a branded web application. The company maintains a strong market position supported by high customer ratings and active social media presence. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, TikTok Pixel, and Cookiebot for consent management. Hosting appears to be on AWS infrastructure with DNS managed via AWS Route53. Security posture is solid with HTTPS enforced and domain registrar locks in place, though DNSSEC is not enabled. Privacy compliance is partially addressed with a cookie consent mechanism but lacks explicit privacy policy and terms of service pages. Overall, the website demonstrates good professionalism, technical maturity, and business credibility, with room for improvement in privacy documentation and DNS security.

S

Snapfix Ltd.

snapfix.com

68

Snapfix Ltd. is a well-established company founded in 2005, specializing in providing a photo-first CMMS software solution tailored primarily for the hospitality and facility management sectors. Their platform enables efficient task and work order management through simple photo, video, voice, and QR code inputs, targeting hotels, residential care, education, and industrial sectors. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content that highlights key services and customer testimonials from reputable brands. Technically, the site is built on HubSpot CMS, leveraging modern analytics and marketing tools such as Google Analytics 4, Microsoft Clarity, and Facebook Pixel, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and privacy compliance including cookie consent mechanisms. However, explicit incident response contacts and vulnerability disclosure policies are not found, representing an area for improvement. Overall, the domain registration data aligns well with the business claims, supporting a high legitimacy score.

C

CURRY Innovations GmbH

curry-innovations.com

51

CURRY Innovations GmbH operates the RYVE platform, a next-generation digital innovation platform combining Headless CMS, DAM, and PIM to enable intranet, websites, web apps, and native apps from a centralized system. The company targets developers and enterprises seeking modern, flexible digital solutions. The website is professionally designed, mobile-optimized, and presents a strong market position with reputable clients such as Volkswagen and Mercedes-Benz. Technically, the site uses modern frontend technologies including Bootstrap and jQuery, with Google Analytics for user tracking. However, no CMS or hosting provider details are evident, and security headers are not detected, indicating room for security improvements. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional web presence. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is functional and trustworthy but would benefit from enhanced security and compliance transparency.

M

MD webdesign

mdwebdesign.cz

48

MD webdesign is a specialized web design and online marketing studio based in Brno, Czech Republic, focusing on creating commercially successful websites and e-shops primarily for small businesses and sole proprietors. With 18 years of experience and over 180 successful projects, the company offers comprehensive services including web design, e-shop development, and SEO-driven marketing. The website reflects a professional and well-structured digital presence, leveraging WordPress CMS and modern plugins to deliver a user-friendly experience. Privacy and cookie policies are well implemented, demonstrating GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit incident response information could enhance trust. The absence of WHOIS data limits transparency regarding domain ownership, which slightly impacts overall trustworthiness. Overall, the site is professional, content-rich, and well-optimized for its target audience.

K

Kurzy Sprint

uctokurzy.cz

59

The website uctokurzy.cz is an established Czech online education platform specializing in practical accounting courses designed for individuals and small business owners seeking to improve their accounting skills. The business is operated by Kurzy Sprint, a company with MŠMT accreditation, lending credibility and trust to the offerings. The courses focus on practical application, including tutorials on accounting software, and are accessible immediately after purchase, supporting flexible learning. The site is well-structured, professionally designed, and includes comprehensive privacy and cookie policies compliant with GDPR regulations. Technically, the site is built on WordPress, hosted by Wedos, and uses common marketing and tracking tools such as Facebook Pixel and Smartsupp Live Chat. Security posture is good with HTTPS and security headers in place, though no explicit security or incident response policies are published. Overall, the site presents a trustworthy and professional educational service with moderate to good technical maturity.

H

Henceforth

henceforth.com

63

Henceforth is a strategic consultancy specializing in real estate, hospitality, and luxury sectors. The company appears to be a small, niche player founded in 2003, offering advisory services to businesses and investors in these markets. The website is professionally designed using WordPress and the Semplice theme, with good mobile optimization and clear navigation. Technical infrastructure includes Cloudflare DNS and standard web technologies such as jQuery. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, but lacks advanced security headers and explicit privacy and terms policies. No blocking or WAF challenges were detected, and the domain registration is consistent and trustworthy. Overall, the site presents a moderate risk profile with room for improvement in security and compliance documentation.

G

GeoPortal.MV

geoportal-mv.de

60

GeoPortal.MV is the official geospatial data platform for the German state of Mecklenburg-Vorpommern, providing comprehensive access to geodata, thematic maps, geoweb services, and specialized geo applications. It serves a broad audience including citizens, government agencies, and businesses within the region. The platform offers both lightweight and professional geodata viewers and supports data downloads and administrative services. The website is well-branded, professionally designed, and regularly updated with news and newsletters, reinforcing its authoritative position in the regional geospatial data market. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response information are absent. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie consent. Overall, the site demonstrates a mature digital presence suitable for a government entity, with a high trust level and minimal risk exposure.

Orsabac s.r.o. is a Czech Republic based small business specializing in the design, manufacture, installation, and sale of sliding doors and walls, including glazing solutions for pergolas and terraces. The company targets homeowners and property developers seeking modern, space-saving, and barrier-free interior solutions. Their market position is niche with a focus on quality and custom solutions. The website is built on WordPress with a modern tech stack including Bootstrap and uses common plugins for galleries and forms. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled and use of Google reCAPTCHA, but lacks explicit security headers and a visible privacy policy. WHOIS data is missing, which impacts domain trustworthiness, but the website content and contact information appear professional and legitimate. Overall, the site is safe, well-structured, and serves its business purpose effectively.