Medium-risk security reports

Riga Shooting Range is a small hospitality business operating a licensed indoor shooting range in Riga, Latvia. It offers a variety of shooting packages targeting tourists and local adults seeking unique entertainment experiences such as bachelor parties and birthdays. The website is professionally designed with clear navigation and relevant content, supporting multiple languages and featuring a booking form for customer convenience. The technical infrastructure includes modern web technologies such as Bootstrap, jQuery, Google Analytics, and Hotjar, hosted by a reputable provider. Security posture is moderate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. The domain is well-established since 2012, consistent with the business history, and WHOIS data shows no privacy protection or suspicious patterns. Overall, the website is functional and credible but could improve privacy compliance and security practices.

Hobbywool SIA operates an e-commerce platform specializing in knitting goods, including books, knitting kits, and 100% wool yarn products. The company targets knitting enthusiasts and hobbyists, with a niche focus on Latvian knitting patterns and cultural knitting heritage. Founded in 2009, the business maintains a consistent brand presence and offers a well-structured online shopping experience. The website is built on WordPress with WooCommerce, leveraging popular plugins for SEO, GDPR compliance, and social sharing. Hosting is provided by MAXHOSTR.COM, with DNS managed via Cloudflare. The site demonstrates good mobile optimization and SEO practices, though performance is moderate.

Obec Hradište pod Vrátnom operates an official municipal website serving the local community in Slovakia. The site provides timely local government announcements, event information, and public service updates primarily targeting residents and visitors of the village. The website is built on Joomla CMS, utilizing common web technologies such as jQuery and Bootstrap, and is hosted likely by Websupport based on DNS information. The site is mobile responsive with a clear navigation structure and good content relevance for its audience. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks advanced security headers and cookie consent mechanisms. No contact emails or phone numbers are explicitly provided, which may limit direct communication channels. The domain registration data is consistent and trustworthy, supporting the legitimacy of the website.

The website www.obeccerova.sk serves as the official online presence of the municipality of Cerová in Slovakia. It provides comprehensive information about local government, community life, public documents, waste collection schedules, and news updates relevant to residents and visitors. The site targets local citizens and stakeholders interested in municipal affairs. Technically, the website employs a mix of popular frontend libraries such as jQuery, Bootstrap, OwlCarousel, and Fancybox, alongside Google Fonts and reCAPTCHA for security. The site is mobile-optimized with a clear navigation structure and basic accessibility features. Security posture is solid with HTTPS enforced and standard security headers present, although some libraries like jQuery are slightly outdated and could be updated to enhance security. Privacy compliance is well addressed with a cookie consent banner and a dedicated privacy policy page, indicating GDPR awareness. No terms of service or explicit security policies are found, which could be improved. Overall, the domain registration data aligns with the municipal nature of the site, confirming legitimacy and trustworthiness. No blocking or WAF interference was detected, allowing full content access and analysis.

The website www.obechlboke.sk serves as the official online presence of the municipality of Hlboké in Slovakia. It provides residents and visitors with comprehensive information about local government operations, community events, public services, and contact details. The site is well-structured with clear navigation and relevant content tailored to its audience, primarily local citizens and government officials. The business model is that of a governmental municipal portal, focusing on transparency and community engagement. Technically, the site employs a custom CMS platform provided by WEBY GROUP s.r.o., utilizing modern JavaScript libraries such as jQuery and FancyBox for enhanced user experience. The site is mobile-optimized and includes cookie consent mechanisms, though some accessibility features could be improved. Performance is moderate, with versioned CSS and JS assets indicating maintenance and updates. From a security perspective, the site uses HTTPS (implied by domain and modern standards), but lacks visible advanced security headers and explicit security policies. No incident response or vulnerability disclosure information is publicly available. The privacy policy and cookie consent are implemented and GDPR compliant, reflecting good privacy practices. WHOIS data confirms the legitimacy of the domain as a municipal entity with consistent registration details. Overall, the website presents a trustworthy and professional municipal portal with good content quality and privacy compliance. Security posture could be enhanced by adding security headers and publicizing incident response policies. The site is safe for general audiences with no adult or questionable content detected.

BSSHOP s.r.o. is a well-established Czech company specializing in the development of e-commerce platforms integrated with the POHODA economic system. With over 20 years of experience and more than 650 active e-shops, they hold a strong market position in the Czech and Slovak e-commerce sectors. Their key services include e-shop creation, integration with IS POHODA, process automation, supplier integration, marketing tools, and custom modifications. The company also operates its own online store, demonstrating practical expertise in e-commerce operations. Technically, the website employs modern web technologies including JavaScript, jQuery, Bootstrap, and integrates analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized and shows good SEO practices, although accessibility features are basic. Hosting appears to be managed via their own CDN and infrastructure. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, it lacks visible security headers and does not provide explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professional, trustworthy, and business-focused with clear contact information and partner references. The absence of privacy and terms of service pages is a notable gap. The domain WHOIS data aligns well with the business claims, supporting legitimacy. Strategic improvements in security policies and compliance documentation are recommended to enhance trust and security posture.

EOS.cz is a Czech-based SaaS platform designed to streamline the administration and communication needs of sports clubs and other organizations such as communities, associations, and chambers. The platform offers a comprehensive suite of tools including membership databases, payment processing integrated with banking, communication channels, attendance tracking, event nominations, electronic registrations, GDPR compliance features, document sharing, and a mobile app. The website demonstrates a strong market presence with over 850 clubs and nearly 190,000 members, supported by client testimonials and mobile app store ratings. Technically, the site employs modern JavaScript frameworks like Alpine.js and Swiper.js, integrates analytics and user behavior tracking tools such as Google Analytics and Hotjar, and implements cookie consent mechanisms. Security posture is robust with HTTPS and multiple security headers, though explicit privacy and security policies are not published on the site. WHOIS data for the domain is unavailable, which slightly impacts trust but does not detract from the professional presentation and functionality of the platform.

Infyzio is a small healthcare business specializing in physiotherapy and related wellness services based in Karlovy Vary, Czech Republic. The website presents a professional and comprehensive overview of their services, targeting individuals including children, athletes, and pregnant women. The company offers a variety of therapies, massages, and training programs, supported by modern facilities. Technically, the website uses modern frontend technologies such as Tailwind CSS, Google Tag Manager, and Facebook Pixel, with a cookie consent mechanism implemented via Cookiebot. The site is mobile optimized and provides a good user experience with clear navigation and professional content. Security posture is adequate with HTTPS and secure forms, but lacks published security policies and some security headers. Privacy compliance is limited due to absence of a privacy policy and terms of service pages. WHOIS data is unavailable, which limits domain trust assessment, but the website content and contact details appear legitimate. Overall, the site scores well on business credibility and content quality but should improve privacy and security disclosures to enhance trust and compliance.

OC Varyáda is a retail shopping center located in Karlovy Vary, Czech Republic, established in 2005. It positions itself as the largest shopping center in the region, offering a variety of retail stores and hosting community events. The website is professionally designed using WordPress with Elementor and Yoast SEO, indicating a moderate level of digital maturity. The site includes structured data for events, enhancing SEO and user engagement. Technically, the site uses Cloudflare DNS and is registered with WEDOS, with HTTPS enabled, but lacks some security headers and explicit privacy or cookie policies. Security posture is moderate with room for improvement in compliance and incident response readiness. Overall, the site is safe, family-friendly, and trustworthy, but would benefit from enhanced privacy compliance and security best practices.

The website scoreboard-system.com is currently inaccessible beyond a Vercel security checkpoint page that verifies the visitor's browser. This indicates the presence of a Web Application Firewall (WAF) or security mechanism blocking direct access to the site's content. Due to this, no business-related content, contact information, or policies are available for analysis. The domain is registered with Tucows Domains Inc. since 2016 with a long expiry date in 2034, suggesting a legitimate registration history. The site is hosted on the Vercel platform and uses the Astro framework, indicating a modern technical infrastructure. However, the lack of accessible content and absence of privacy, cookie, or terms of service policies limit the ability to assess compliance and business credibility. Security posture cannot be fully evaluated due to missing security headers and SSL details in the provided data. Overall, the site appears to be protected by Vercel's security mechanisms but lacks publicly accessible information to perform a comprehensive analysis.

Aquaforum Františkovy Lázně operates as a prominent aquapark and spa facility in the Czech spa region, offering a wide range of leisure and wellness services including water attractions, spa clinic treatments, accommodation, and group offers. The website targets families, tourists, and local residents, positioning itself as a leading hospitality provider in the area. The business has been established since 2016, with a consistent online presence and clear branding. Technically, the website employs modern web technologies such as Google Analytics, reCAPTCHA, and Cookiebot for compliance and user experience. The infrastructure suggests a Ruby on Rails backend with custom CMS elements, hosted likely via Czech hosting providers.

SalmingStore.cz operates as the official e-commerce platform for the Salming brand in the Czech Republic, specializing in high-quality sports products for running, floorball, ice hockey, handball, squash, and badminton. The website presents a professional and well-structured online store with clear navigation, product categorization, and customer service information. The business model focuses on direct retail sales with additional services such as personal pickup and free shipping over a certain threshold. The company behind the site is SIMPLO s.r.o., which is clearly indicated in the metadata. From a technical perspective, the website employs modern web technologies including Vue.js for frontend interactivity, Google Analytics and Tag Manager for tracking, Tawk.to for live chat support, and Sentry for error monitoring. The site is served over HTTPS with a good SSL configuration and includes GDPR-compliant cookie consent mechanisms. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforcement, use of reCAPTCHA on forms, and error tracking. However, there is room for improvement by implementing additional security headers such as Content-Security-Policy and publishing explicit security policies or incident response contacts. The absence of WHOIS data for the domain is a notable concern, reducing trust in domain legitimacy, although the website content and branding strongly suggest a legitimate business. Overall, the website is a trustworthy and professional e-commerce platform with good privacy compliance and user experience. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure and security policies, and verifying domain registration details to improve trustworthiness and compliance.

Dům jedním tahem is a Czech company specializing in low-energy prefabricated family houses made from ceramic concrete. The company emphasizes rapid construction, excellent insulation, and long durability. Their website offers free project designs, catalogs, consultations, and virtual tours, targeting individuals and families interested in energy-efficient homes in the Czech Republic. The business is positioned as a medium-sized regional player with a professional online presence and consistent branding. Technically, the website uses a variety of JavaScript libraries including jQuery, Google Tag Manager, and Slick Carousel, with good mobile optimization and SEO practices. The site enforces HTTPS and implements a cookie consent mechanism, reflecting a good security posture. However, no explicit security headers were detected, and WHOIS data for the domain is missing, which slightly reduces trustworthiness. Security-wise, the site shows good compliance with GDPR, including detailed privacy policies and consent forms. There are no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data is a concern but does not negate the legitimacy suggested by the website content and business information. Overall, the website is professional, secure, and compliant, with minor improvements recommended in security headers and domain registration transparency.

BAU-STAV a.s. is a well-established construction company based in the Karlovy Vary region of the Czech Republic, with nearly 30 years of experience. The company offers a comprehensive range of construction-related services including project design, construction work, steel constructions, locksmith work, transport, and roofing. It primarily serves clients in the Karlovy Vary and Central Bohemia regions but is capable of undertaking projects throughout the Czech Republic. The company is part of the SUAS GROUP, which is disclosed transparently on the website. Technically, the website uses a custom CMS built on the Gambik framework and incorporates modern JavaScript libraries such as jQuery, Bootstrap, and Fancybox. The site is mobile-optimized with good navigation and SEO practices. However, a visible server-side PHP fatal error indicates some backend instability and potential information leakage, which poses a security risk. The site uses HTTPS and Google Analytics with consent settings that deny ad and analytics storage by default, showing some privacy awareness. From a security perspective, the site lacks explicit security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. The absence of WHOIS data reduces domain registration transparency and trustworthiness. No incident response or vulnerability disclosure information is provided, limiting the company's security posture visibility. Overall, BAU-STAV a.s. presents a credible and professional business front with room for improvement in backend stability, security best practices, and privacy compliance to enhance trust and reduce risk.

Restaurace Letná Kladno is a small hospitality business operating a restaurant with a focus on quality menus including children's, lunch, seasonal, and thematic offerings. They emphasize unique cooking technology using a Josper grill and operate a local farm producing dairy and vegetable products, integrating farm-to-table concepts. The website is built on Joomla CMS with Gridbox builder, featuring modern frontend technologies and good mobile optimization. Security posture is strong with HTTPS and security headers, and a cookie consent mechanism is implemented. However, the absence of a privacy policy and terms of service pages, along with missing WHOIS data, reduces overall trust and compliance confidence. Contact information and social media presence are clearly provided, supporting business credibility.

DJ Jan Meruna is a small-scale event entertainment service based in the Czech Republic, offering DJ services, event moderation, streaming, technical event support, and entertainment activities. The website presents a professional and consistent brand image targeting clients organizing weddings, sports events, corporate and private parties, and children's events. The business model is service-oriented with a focus on personalized client engagement and flexibility. Technically, the website uses a modern tech stack including Bootstrap, jQuery, Font Awesome, and Google services such as reCAPTCHA and Tag Manager. The site is mobile optimized with good navigation and content quality. However, no CMS or hosting provider information is evident, and performance is moderate. Accessibility is basic, and SEO practices are adequately implemented. From a security perspective, the site uses HTTPS and integrates Google reCAPTCHA, but lacks visible security headers and explicit privacy or security policies. The WHOIS data is missing, which reduces domain trustworthiness and raises concerns about domain legitimacy. No forms or structured data were detected, limiting data collection and semantic SEO capabilities. Overall, the website is functional and professional but would benefit from improved security practices, explicit privacy and terms policies, and WHOIS transparency to enhance trust and compliance.

Kladenský měsíc is a local monthly news publication serving the residents of Kladno and its surrounding areas in the Czech Republic. The website provides current news, cultural, sports, health, and societal information relevant to the local community. The business operates as a small media outlet with a focus on regional content and community engagement. The website is developed and maintained by Fix Software, a Czech software company, indicating a professional backing for the digital platform. Technically, the website employs modern web technologies including Bootstrap for responsive design, jQuery for scripting, FontAwesome for icons, and Google Analytics for visitor tracking. Hosting is provided by Active24, a known Czech hosting provider, and the domain registration is consistent with the website's regional focus. The site demonstrates good design quality, clear navigation, and mobile optimization, although accessibility features are basic. From a security perspective, the site uses HTTPS, but lacks visible security headers and explicit privacy or cookie policies, which are critical for GDPR compliance. No direct contact emails or phone numbers are present on the main page, limiting immediate user contact options. The absence of a vulnerability disclosure policy or security.txt file suggests limited formal security communication. Overall, the security posture is moderate but could be improved with better compliance and security best practices. The overall risk is low given the nature of the content and business, but strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and regulatory adherence.

TOI TOI, sanitární systémy, s r.o. is a leading Czech company specializing in mobile sanitary technology solutions including rental and sale of mobile toilets, mobile fencing, construction cabins, and sanitary trailers. The company targets businesses and event organizers requiring hygienic and safety solutions for construction sites and mass events. Their market position is strong within the Czech Republic, supported by a professional website with clear service offerings and contact information. Technically, the website uses modern libraries such as jQuery, Bootstrap, and Font Awesome, with additional UI enhancements like WOW Slider and cookie consent mechanisms. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate; while HTTPS is presumably enabled, no explicit security headers were detected, and no dedicated security or incident response pages are present. Privacy compliance is good with GDPR-aligned privacy and cookie policies. WHOIS data is unavailable publicly due to CZ NIC policies, which slightly impacts trust but is common for this domain space. Overall, the website is professional, trustworthy, and well-maintained, with room for security improvements.

TEPO s.r.o. is a Czech Republic-based energy company specializing in thermal energy distribution and related services such as central dispatching and emergency heating support. The company has an established market presence since 1999 and serves primarily residential and commercial customers in the Kladno region. The website provides comprehensive information about services, outages, and company policies, targeting local customers and stakeholders. Technically, the website uses a combination of Drupal CMS and WordPress plugins, including Elementor and WooCommerce scripts, indicating a hybrid or transitional platform. The site is moderately optimized for performance and mobile devices, with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks some advanced security headers and explicit incident response policies. Privacy compliance is partially met with a GDPR page but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives.

Geodézie Kladno s.r.o. is a Czech geodetic company established in 2005, specializing in cadastral surveying, construction and engineering network measurements, digital mapping, GPS measurements, and consulting services. The company serves municipalities, government agencies, energy companies, and private clients, with a small team of eight employees. Their website reflects a professional and consistent brand image with clear contact information and references from reputable clients. Technically, the site is built on Joomla CMS with Gridbox builder, using modern web technologies including Bootstrap and Google Maps API. The site is mobile-optimized and performs moderately well. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal privacy or cookie policies, indicating room for compliance improvement. No WAF or blocking mechanisms were detected, and no analytics or tracking scripts suggest minimal user tracking. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

Corny.cz is a Czech website representing the Corny brand, which specializes in cereal bars and snacks with a history dating back to 1984. The site targets consumers looking for convenient and healthy snack options, offering a variety of protein and smoothie bars. The website is built on TYPO3 CMS and employs modern web technologies including SVG graphics, Google Tag Manager for analytics, and Usercentrics for cookie consent management. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content in Czech language. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit incident response or security policy pages are found. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the professional presentation and social media presence support legitimacy. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility.

The website tm0.cz currently presents only a minimal placeholder message indicating to contact the service provider, suggesting the site is either blocked, suspended, or under maintenance. The domain is registered since 2014 with a Czech registrar and uses Czech name servers, indicating a legitimate registration consistent with a Czech entity. However, the lack of any meaningful website content, metadata, or contact information severely limits the ability to assess the business or its services. The technical infrastructure appears minimal with no detectable technologies, scripts, or security features. Security posture is weak due to absence of HTTPS and security headers, and no privacy or cookie policies are present, indicating poor compliance with modern standards. Overall, the site is not currently functional as a business or service portal, resulting in a low trust and security score.

Fox Media Czech Republic s.r.o. is a Prague-based software development company specializing in mobile applications, backend systems, dashboards, and control panels. Their expertise includes modern technologies such as Rust, React.js, Node.js, and Docker, targeting ambitious clients seeking reliable and high-quality software solutions. The company positions itself as a niche player with a focus on performance-critical and multi-platform software development. The website presents a professional image with clear service offerings and client logos, indicating established partnerships and a credible market presence. Technically, the website is built using the Framer framework, leveraging modern web technologies and optimized for mobile devices. The tech stack is comprehensive and modern, including advanced tools for backend and frontend development. However, the site lacks explicit CMS usage and detailed hosting information. Performance and SEO are well addressed, but accessibility features are basic. From a security perspective, the site uses HTTPS but lacks visible security headers and formal security policies. There is no evidence of privacy or cookie policies, which raises compliance concerns, especially regarding GDPR. The absence of WHOIS data for the domain is a significant trust concern, as it prevents verification of domain ownership and age. No forms or data collection mechanisms are present, reducing immediate data exposure risks. Overall, the website is professional and content-rich but requires improvements in compliance documentation, security hardening, and domain registration transparency to enhance trust and reduce risk.

ST. NICOLAUS Monarchs is the oldest and most successful American football club in Slovakia, established in 1995 and based in Bratislava. The club operates a community-focused sports organization offering multiple teams, including senior and junior squads, and engages actively with fans through news, events, and social media. Their business model revolves around sports team management, community engagement, merchandising, and sponsorship partnerships. The website reflects a well-maintained digital presence with regular updates and a consistent brand identity.

BLADES Ústí nad Labem is a Czech American football sports club operating primarily in Ústí nad Labem. The website serves as a hub for news, events, and team information targeting fans and participants of American football in the region. The club maintains active engagement through social media channels and partnerships with local organizations. Technically, the website uses standard web technologies including Google Analytics and Facebook SDK for tracking and social integration. The site is accessible, mobile-friendly, and provides a good user experience with clear navigation and relevant content. However, the absence of WHOIS data and explicit privacy policies introduces some trust concerns. Security posture is moderate with HTTPS implied but lacking visible security headers and formal security policies. Overall, the site is functional and credible for its purpose but would benefit from enhanced transparency and security practices.

Prague Mustangs is a Czech-based American football team, recognized as the best Prague team in Czech leagues, active since 2009. The website serves as an informational platform for the team and its youth programs, targeting sports enthusiasts in the Czech Republic. The site is built using the Framer platform and integrates Google Analytics for visitor tracking. The technical infrastructure is modern and mobile-optimized, though some improvements in accessibility and security headers are recommended. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. No contact information or incident response details are provided, which limits user trust and compliance. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security practices.

The Prague Lions website serves as the official online presence for the Prague Lions American football team, highlighting their participation in the European League of Football (ELF) and the Czech American Football Association (ČAAF). The site is designed primarily for sports fans and local community members interested in the team and league activities. The content is minimal but focused on branding and navigation to key sections related to the team and league. Technically, the website is built using modern web technologies including React and Next.js, with Mantine UI for styling and components. The site demonstrates good mobile optimization and a clean, professional design, though content depth is basic. No CMS or hosting provider information is discernible from the provided data. From a security perspective, the site lacks visible security headers and privacy-related policies, which lowers its compliance posture. The WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency but does not necessarily indicate malicious intent. No forms or contact information are present, limiting user engagement and trust signals. Overall, the security posture is moderate but could be improved with standard best practices and transparency enhancements. The overall risk is moderate with no critical vulnerabilities detected in the provided data. Strategic improvements in privacy compliance, contact transparency, and security headers would enhance trust and user confidence.

The Prague Black Panthers website serves as the official digital presence for a leading American football team based in Prague, Czech Republic. The site provides comprehensive information about the team, including news, schedules, rosters, and merchandising options. The business is positioned as a prominent sports entity within the Czech Republic, targeting sports fans and the local community. The website is built on the Squarespace platform, leveraging modern web technologies such as Google Tag Manager and Typekit fonts, ensuring a visually appealing and mobile-optimized experience. However, the site lacks explicit privacy and cookie policies, which are critical for compliance and user trust. Security posture is adequate with HTTPS enforced and domain transfer protections in place, but the absence of DNSSEC and security headers represents areas for improvement. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

Pilsen Patriots is a Czech American football team based in Plzeň with a long-standing tradition since 1995. The website serves as an official platform providing information about the team, news updates, match schedules, player rosters, and recruitment opportunities. It targets local sports enthusiasts and potential players, positioning itself as a community-focused sports club with a clear local identity. The business model revolves around sports team promotion, community engagement, and player recruitment rather than commercial sales. Technically, the website is built on OctoberCMS and uses modern web technologies including jQuery, Google Fonts, and cookie consent scripts. The site is mobile optimized with good navigation and SEO practices. Performance is moderate, and accessibility is basic but functional. The site employs HTTPS with a valid SSL certificate, ensuring secure communication. From a security perspective, the site implements cookie consent with opt-in/out mechanisms and uses HTTPS. However, it lacks several security headers that could enhance protection against common web attacks. No privacy policy or terms of service pages are present, which is a compliance gap. WHOIS data is unavailable, limiting domain trust verification, but the website content and contact information appear legitimate and consistent with a local sports club. Overall, the website is functional, professional, and safe for general audiences. Strategic improvements include publishing privacy and security policies, adding security headers, and improving WHOIS transparency to enhance trust and compliance.

The website www.stallions.cz represents the Pardubice Stallions, a local American football team based in Pardubice, Czech Republic. The site serves as a hub for team news, recruitment information, match updates, and partner acknowledgments. It targets sports enthusiasts and community members interested in American football. The business model is that of a small non-profit sports club supported by local sponsors and partners. The website content is well-structured, visually consistent, and provides relevant information about the team and its activities. Technically, the website is built on the Webnode platform, utilizing modern web technologies such as HTML5, CSS3, and JavaScript, with assets delivered via Amazon Cloudfront CDN. The site is mobile-optimized and loads with moderate performance. However, accessibility and SEO optimizations are basic, and no advanced frameworks or CMS customizations are detected. From a security perspective, the website enforces HTTPS with a valid SSL certificate and implements a cookie consent banner compliant with GDPR principles. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, and no privacy policy or terms of service pages are present. No contact information for security incidents or data protection officers is provided. The WHOIS data is unavailable or privacy protected, which is typical for small organizations but limits domain trust assessment. Overall, the website is functional, trustworthy for its purpose, and safe for general audiences. Strategic improvements include adding privacy and terms policies, enhancing security headers, and providing clear contact information to improve compliance and trustworthiness.

Jičín Hurricanes z.s. is a small, community-focused sports club based in Jičín, Czech Republic, specializing in American football. The club operates multiple teams including adult men's tackle football, women's tackle and flag football, and youth teams for various age groups. It emphasizes player development, community engagement, and fair play, positioning itself as a respected local sports entity. The website reflects this focus with detailed team descriptions, youth programs, and social media integration. Technically, the site is built on the Webnode platform, leveraging modern CDN services and analytics tools like Google Tag Manager and Smartlook. The site is mobile-optimized and performs moderately well, though some SEO and accessibility improvements are possible. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks some recommended security headers and privacy compliance documentation. Overall, the site is trustworthy and professional but would benefit from enhanced privacy policies and security best practices to improve compliance and user trust.

The website dragonshk.cz is currently a placeholder error page hosted on the Wix platform, indicating that the domain is not connected to an active website. There is no business content, contact information, or policies available on the site. The domain was registered in 2020 through a Czech registrar and uses Wix name servers, consistent with the hosting platform. Technically, the site uses AngularJS and jQuery libraries typical for Wix error pages but lacks any advanced security headers or privacy compliance features. The security posture is minimal, with no visible vulnerabilities but also no proactive security measures. Overall, the site presents a low trust profile due to the absence of business information and policies, and it is not currently serving any business function.

Brno Sígrs is a local American football team based in Brno, Czech Republic, competing in the 2nd League with multiple teams across age categories. The website provides comprehensive information about the team, including news, match results, standings, and recruitment opportunities. The site is built using modern web technologies such as React and Next.js, offering good performance and mobile optimization. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy. Security posture is moderate with no detected security headers and unknown SSL configuration. Privacy and cookie policies are missing, which impacts compliance. Overall, the site serves its community well but could improve in security and privacy transparency.

BERNDORF BÄDERBAU s.r.o. is a Czech-based manufacturer and constructor of premium stainless steel pools, wellness, and aquapark facilities. The company targets private customers, hotels, and public sectors, positioning itself as a leader in stainless steel pool development in the Czech Republic and Europe. Their website reflects a professional business with a comprehensive portfolio of services including private, hotel, and public pools, as well as pool servicing and spare parts. Technically, the website employs modern JavaScript libraries and analytics tools, ensuring good user experience and mobile optimization. Security posture is solid with HTTPS and consent management, though it lacks some advanced security headers and explicit incident response information. The absence of WHOIS data is a notable transparency concern but does not detract significantly from the overall legitimacy of the business. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and improving domain registration transparency.

M3 STEEL, s.r.o. is a Czech-based company specializing in the turnkey delivery of prefabricated steel halls, steel constructions, roof and wall cladding, and hall reconstructions. The company targets businesses and investors seeking flexible and precise construction solutions, positioning itself as a specialist in the manufacturing and construction sector within the Czech Republic. The website presents detailed service offerings and project references, supporting its market position as a reliable small-sized construction service provider. Technically, the website employs a moderate technology stack including jQuery 2.1.4 and Google reCAPTCHA for form protection. The site is mobile-optimized with good SEO practices and a professional design. However, it lacks advanced frameworks or CMS identification and does not disclose hosting details. Performance is moderate with basic accessibility features. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to mitigate spam. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate. No vulnerabilities or exposed sensitive data were detected. Overall, the website is functional and professional but has compliance and security gaps that should be addressed to improve trust and legal adherence. Strategic improvements in privacy disclosures, security headers, and WHOIS transparency are recommended to enhance the company's digital maturity and risk posture.

ENVIFORM a.s. is a Czech Republic-based company specializing in occupational safety, fire protection, environmental services, quality management, and related consulting and training. The company offers a broad portfolio of services including certifications (ISO 9001, ISO 14001, ISO 45001), disinfection, emission measurements, corrosion testing, and custom production of personal protective equipment. Their market position is supported by EU-funded projects and a comprehensive digital presence including e-learning and e-commerce platforms. Technically, the website is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager for tracking. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. WHOIS data is unavailable, which slightly reduces trust but the overall business credibility is high based on content and certifications. The website is accessible with no WAF blocking or security challenges.

AGENTURA Hana s.r.o. appears to be a small business or agency with minimal online presence on the provided domain. The website content is extremely limited, serving primarily as a redirect notice to a new domain (ckhana.cz). There is no detailed business description, contact information, or service listings on this page. Technically, the site uses Bootstrap 4.3.1 and jQuery 3.3.1 slim, loaded from reputable CDNs, but lacks modern security features such as HTTPS and security headers. The absence of WHOIS data raises concerns about domain registration legitimacy and trustworthiness. Overall, the digital maturity is low, with poor content quality and minimal privacy or compliance measures.

WISNAR groupe mondiale s.r.o. is a Czech travel agency specializing in organized sightseeing tours primarily within Europe and the Mediterranean region. With over 31 years of experience, the company targets individual travelers, student groups, educators, and various organizations, offering both first minute and last minute travel packages. Their market position is strong within the Czech Republic, supported by extensive customer testimonials, insurance against insolvency, and official licensing. The website provides a comprehensive online booking system, detailed travel information, and multiple contact channels, reflecting a mature digital presence. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and several plugins for SEO, cookie management, and user interaction. The site is mobile-optimized and demonstrates good SEO practices. Security measures include HTTPS enforcement, Google reCAPTCHA integration, and a GDPR-compliant cookie consent mechanism. However, some security headers are not explicitly detected, suggesting room for improvement in hardening the site against common web threats. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear policies and consent mechanisms. The absence of WHOIS data limits domain legitimacy verification, but the website's professional content and business information support its credibility. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and conducting regular security audits to sustain trust and compliance.

3xTOP.cz operates as a niche outdoor sports club in the Czech Republic, focusing on unique mountain peak challenges completed within 24 hours. The website provides detailed information about the club, routes, events, and partner collaborations, targeting outdoor enthusiasts and cyclists. Technically, the site is built on Joomla CMS with Bootstrap and jQuery, but uses an outdated jQuery version which poses security risks. The site employs Google Analytics and Tag Manager for user tracking but lacks visible privacy and cookie policies, indicating compliance gaps. Security posture is moderate with HTTPS enabled but missing security headers and outdated libraries. WHOIS data is unavailable, reducing domain trustworthiness. Overall, the site is functional and content-rich but requires improvements in security, privacy compliance, and technical modernization.

TRAVEL FAMILY s.r.o. operates the website www.ckvt.cz as a leading Czech travel agency specializing in family vacations primarily to Croatia and neighboring countries. The company offers a broad portfolio of holiday packages, including last minute deals, transportation options, and travel insurance. The website is professionally designed with a clear navigation structure and rich content tailored to families and travelers seeking beach and cultural vacations. Technically, the site is built on ASP.NET WebForms with integrations for Google Analytics, Facebook SDK, and Bing Ads, among others. While the site uses HTTPS and security headers, some outdated libraries like jQuery 1.9.1 are present, which could pose security risks. Privacy policies are comprehensive and GDPR compliant, but the absence of a cookie consent mechanism is a compliance gap. Overall, the site demonstrates a mature digital presence with good business credibility and trust indicators.

The website moravatour.cz is currently a parked domain with no active business content. It is primarily used to advertise the domain for sale, targeting potential domain buyers. The site lacks any company information, contact details, or service descriptions, indicating no operational business presence. The technical infrastructure relies on basic HTML and JavaScript with advertising scripts from Google Adsense and related networks. The site is hosted on Cloudfront CDN, providing moderate performance and basic mobile optimization. Security posture is weak due to absence of HTTPS enforcement, lack of security headers, and no visible security policies or incident response information. Privacy compliance is minimal with only a basic privacy policy linked via a popup and no cookie consent mechanism. Overall, the site presents low trustworthiness and limited business credibility.

TJ ISMM Jistebník, z.s. is a local Czech sports club primarily focused on football activities, including men's teams, youth training, and community events. The website serves as an information portal for club news, match schedules, membership, and event announcements, targeting local sports enthusiasts and club members. The business operates as a non-profit entity with regional sponsorship support, emphasizing community engagement and sports development. Technically, the website is built on the Webnode CMS platform, utilizing modern web technologies such as JavaScript, CSS, and HTML5, and is hosted via AWS Cloudfront CDN. It employs Google Tag Manager for analytics and tracking. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. However, it lacks advanced security headers and visible privacy or cookie policies. From a security perspective, the site enforces HTTPS and uses standard tracking tools but does not implement comprehensive security headers or provide incident response contacts. The absence of WHOIS data due to privacy protection limits domain trust analysis, though the website content and structure appear legitimate and appropriate for its community sports role. Overall, the website presents a good user experience and content quality for its audience but would benefit from enhanced privacy compliance, security hardening, and transparency improvements to strengthen trust and regulatory adherence.

KH ISMM Kopřivnice is a regional handball sports club based in Kopřivnice, Czech Republic. The website serves as a hub for team information, match schedules, results, youth programs, and club history, targeting handball enthusiasts, players, and the local community. The club operates as a non-profit entity focused on sports development and community engagement. Technically, the website employs a variety of JavaScript libraries including jQuery, Nivo Slider, and Owl Carousel, and is built on the Web Bez starosti CMS platform. The site is mobile responsive and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. WHOIS data is unavailable, which raises concerns about domain registration transparency. Overall, the site is professional and trustworthy but would benefit from improved compliance and security practices.

Mobilní hospic Ondrášek is a Czech non-profit organization founded in 2006, dedicated to providing mobile hospice care to terminally ill adults and children, enabling them to spend their final days with dignity at home. The organization also offers educational courses and actively engages with the community through fundraising and support initiatives. Their website reflects a professional and consistent brand image, targeting patients, families, donors, and healthcare professionals. Technically, the site employs modern web technologies including Google Analytics, Facebook Pixel, and Google reCAPTCHA for security and analytics, hosted on Websupport.cz. The site is mobile-optimized, accessible, and SEO-friendly, though it lacks some advanced security headers and explicit privacy and cookie policies. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but improvements are recommended in policy transparency and security headers. Overall, the domain registration data aligns well with the organization's profile, indicating legitimacy and trustworthiness.

Mlýn Kozlovice is a hospitality business located in the Czech Republic offering traditional and modern cuisine through its restaurant, alongside accommodation services via its penzion and cottages. The business also hosts events such as weddings and celebrations, positioning itself as a regional provider with a historical and cultural appeal. The website is professionally designed, mobile-optimized, and provides clear contact information and customer testimonials, enhancing trust and credibility. Technically, the website is built on WordPress and uses modern JavaScript libraries like jQuery and Splide.js for interactive elements. The site is served over HTTPS, ensuring secure communication, but lacks some security headers and cookie consent mechanisms, which are recommended for improved compliance and security posture. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site demonstrates good baseline security with HTTPS and no visible vulnerabilities in the HTML content. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in security governance. The WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and consistent business information support its legitimacy. Overall, Mlýn Kozlovice presents a trustworthy and well-maintained online presence for a small hospitality business, with recommendations to enhance privacy compliance and security best practices to further strengthen its digital maturity and customer trust.

ISMM Project & Training s.r.o. operates the ISMM Tenis Park Ostrava, a local sports facility offering six tennis courts with artificial surfaces and additional nohejbal courts. The business targets tennis and nohejbal players in Ostrava and surrounding areas, providing year-round access with indoor and outdoor courts, a bar, and event hosting. The website is well-branded, consistent, and provides clear contact and reservation options, including online booking through a third-party platform. Technically, the site is built on WordPress with modern plugins for forms, GDPR compliance, and analytics, ensuring a good user experience and mobile optimization. Security measures include HTTPS, Google reCAPTCHA, and cookie consent mechanisms, though additional security headers could enhance protection. Overall, the domain registration aligns with the business information, indicating legitimacy and trustworthiness.

Hotel Gong Štramberk is a family-run hospitality business located in Štramberk, Czech Republic, offering a variety of accommodation options, restaurant services, and tourism packages. The website is professionally designed with clear navigation, multilingual support (Czech and English), and comprehensive information about rooms, packages, and local tourism. The business holds a recognized quality certificate from Hotel.cz, indicating a reputable market position in the local hospitality sector. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and Complianz for GDPR compliance, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and WHOIS data transparency slightly reduce trustworthiness. Overall, the site is safe, user-friendly, and compliant with privacy regulations, serving its target audience effectively.