High-risk security reports

V

Vodovody a kanalizace Trutnov, a. s.

vaktu.cz

48

Vodovody a kanalizace Trutnov, a. s. is a regional utility company specializing in the production and supply of potable water as well as wastewater collection and treatment in the Trutnov region of the Czech Republic. Established in 2003, the company serves over 35,000 residents and operates extensive water and sewage infrastructure. The website reflects a professional corporate presence with clear information about services, company structure, and contact details. Technically, the site is built on WordPress using the Avada theme and integrates SEO and analytics tools, demonstrating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though improvements in security headers and explicit privacy policies are recommended. Overall, the site is trustworthy and well-aligned with the company's business operations.

The website utiqcontent.com is currently inaccessible due to an Access Denied error, likely caused by a web application firewall or security mechanism. This prevents any meaningful content or metadata extraction. The domain is newly registered in July 2024 with Amazon Registrar, Inc., indicating a new or upcoming business. No business information, contact details, or policies are available for review. The lack of accessible content and security headers suggests a low digital maturity at this time. Security posture cannot be fully assessed but is likely weak due to missing HTTPS and security best practices. Overall, the site presents a high risk due to lack of transparency and accessibility, and it is recommended to monitor for future updates or contact the domain owner for more information.

L

La Tribune Events

une-epoque-formidable.fr

40

Une époque Formidable is a professionally organized event by La Tribune Events, focusing on contemporary political, social, and economic issues. The website serves as an information portal for the event, targeting professionals, academics, and engaged citizens. The technical infrastructure is based on WordPress with several plugins and third-party integrations for analytics and marketing. The security posture is adequate with HTTPS enforced and monitoring via New Relic, but lacks explicit security headers and privacy policies. Overall, the website is well-designed and functional, though improvements in privacy compliance and contact transparency are recommended.

L

La Tribune Events

act50.com

46

The website act50.com is a professionally designed event promotion platform for ACT50, organized by La Tribune Events, targeting a French-speaking audience interested in territorial innovation and cooperation. The site leverages WordPress CMS with common plugins and integrates multiple third-party tracking and analytics services, indicating a moderate level of digital maturity. Hosting is provided by OVH sas, a reputable provider, and the domain is newly registered, consistent with the event's upcoming date in December 2025. Security posture is adequate with HTTPS enforced and domain locking, but lacks DNSSEC and explicit privacy or cookie policies. No contact emails or phone numbers are directly available, which may impact user trust and compliance.

L

La Tribune Events

forum-europe-afrique.fr

38

Forum Europe Afrique is a professional event organized by La Tribune Events, focusing on fostering dialogue and cooperation between European and African nations. The website serves as a platform for event information, networking, and media coverage, targeting professionals and stakeholders interested in international relations and development. The site is built on WordPress with a modern tech stack including WooCommerce, Gravity Forms, and various analytics and marketing tools. Hosting is provided by OVH, a reputable provider, and the site uses HTTPS with good SSL configuration. Security measures include Google reCAPTCHA and New Relic monitoring, though explicit security headers and privacy policies are lacking. Overall, the website presents a professional and trustworthy image, though improvements in privacy compliance and security best practices are recommended.

L

La Tribune Events

aim-marseille.com

46

The website aim-marseille.com serves as the official event page for AIM 2025, organized by La Tribune Events, a French media and event organization. It provides detailed information about the event program, workshops, sponsorship opportunities, and press resources. The site targets professionals and attendees interested in the AIM 2025 event, positioning itself as a key media event platform in France. The business model revolves around event organization, sponsorship, and media dissemination. The domain is relatively new, created in 2023, which aligns with the event timeline.

L

La Tribune Events

impacts-sante.com

46

Impacts Santé is a French healthcare-focused event platform operated under La Tribune Events, providing a professional venue for discussions, networking, and insights into healthcare innovation and policy. The website is built on WordPress with a moderate technical infrastructure including common plugins and third-party integrations for analytics and advertising. Security posture is adequate with HTTPS and monitoring tools but lacks some advanced security headers and explicit privacy compliance documentation. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency.

L

La Tribune Events

parisairforum.fr

39

The Paris Air Forum website is a professionally designed event platform managed by La Tribune Events, focusing on aerospace, technology, and innovation sectors. It serves as a hub for industry professionals to access information about the 2025 edition of the forum, including registration, exhibitors, and networking opportunities. The site leverages a mature technical infrastructure based on WordPress and integrates multiple third-party tools for analytics, marketing, and user engagement. Security posture is adequate with HTTPS and monitoring tools in place, though explicit security policies and headers could be improved. Privacy compliance is minimal, lacking visible privacy and cookie policies. Overall, the site presents a moderate risk profile with good business credibility and technical implementation.

L

La Tribune Events

techforfuture.fr

32

Tech For Future 2025 is an established technology event organized by La Tribune Events, focusing on startups and innovation in France and Europe. The website serves as a platform for event promotion, networking, and showcasing innovative startups. The technical infrastructure is based on WordPress with common plugins and integrations such as WooCommerce, Gravity Forms, and various marketing and analytics tools. The site is hosted by OVH and uses HTTPS with moderate performance and mobile optimization. Security posture is adequate but could be improved by adding explicit security headers and publishing security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security documentation.

P

Parola spol. s r.o.

sportovecjihlavska.cz

47

The website www.sportovecjihlavska.cz serves as a regional media platform focused on the annual Sportovec Jihlavska sports awards and related local sports news. Operated by Parola spol. s r.o., it targets residents and sports enthusiasts in the Jihlava district, providing event coverage, voting mechanisms, and advertising opportunities. The business model revolves around media content and community engagement with advertising revenue streams. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, reCAPTCHA, and CKEditor, ensuring a functional and moderately optimized user experience. Security posture is adequate with HTTPS enforced and use of CAPTCHA, but lacks some security headers and explicit privacy policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the visible business information and partnerships support legitimacy. Overall, the site is professional, content-rich, and trustworthy for its audience, though it would benefit from enhanced compliance and security practices.

P

Parola spol. s r.o.

vas-politik.cz

49

Parola spol. s r.o. operates the regional news website 'Jihlavské listy' focused on political and local news for the Vysočina region in the Czech Republic. The site offers news articles, political commentary, advertising services, and subscription options, targeting local residents and politically engaged audiences. The business model relies on advertising revenue and local subscriptions, positioning itself as a key regional media outlet since its founding in 2007. Technically, the website employs modern web technologies including Bootstrap, Google Analytics, Google Tag Manager, and CKEditor, providing a responsive and user-friendly experience. Security measures include HTTPS, Google reCAPTCHA, and secure login forms, though some security headers are missing. Privacy compliance is basic with cookie consent implemented but no explicit privacy or terms of service pages found. The domain WHOIS data is unavailable, limiting trust analysis, but the presence of company contact details and consistent branding supports legitimacy. Overall, the website is functional, moderately secure, and professionally maintained with room for improvement in privacy and security practices.

T

TECHNODAT Develop

crmplus.cz

45

TECHNODAT Develop operates the CRMplus platform, a CRM and communication tool designed for small and medium-sized businesses primarily in the Czech Republic. The website presents a professional and consistent brand image, emphasizing GDPR compliance and offering extensions for order and production management. The technical infrastructure is based on WordPress with Elementor and several plugins, hosted by WEDOS Internet, a.s. The site demonstrates moderate performance and good mobile optimization, with SEO best practices implemented via Yoast SEO. Security posture is adequate with HTTPS enforced and a cookie consent mechanism in place, but lacks explicit security headers and published security policies. Privacy compliance is partially addressed through cookie consent but lacks a dedicated privacy policy page. Overall, the website is trustworthy and functional but would benefit from enhanced transparency and security documentation.

P

Patrioti MSK, z. s.

patriotimsk.cz

48

Patrioti MSK is a well-established Czech non-profit organization focused on developing and supporting entrepreneurs primarily in the Moravskoslezský region and Prague. The organization fosters a business community through events, networking, mastermind groups, and educational initiatives. Their market position is strong regionally, supported by a comprehensive digital presence including podcasts and event platforms. Technically, the website is built on WordPress with modern SEO and user experience practices, showing good mobile optimization and performance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates good compliance with GDPR and provides clear business and contact information, enhancing trust and credibility.

D

D.H.R. distribution films & rencontres

cooperativedhr.fr

45

D.H.R. distribution films & rencontres is a small independent film distribution entity based in France, focusing on documentary and fiction films that promote social reflection and cultural debates. The website presents a niche market position with a clear focus on socially conscious cinema and community engagement through events and screenings. The business model revolves around independent film distribution with economic independence and collaboration with related societies such as A Vif Cinémas and AKTIS Cinéma. Technically, the website is built on an outdated Joomla! 1.5 CMS platform, which poses security risks and limits modern web capabilities. The site uses basic JavaScript libraries like MooTools and lacks modern security headers and privacy compliance mechanisms. Security posture is moderate due to HTTPS usage but weakened by the outdated CMS and missing security headers. No privacy or cookie policies were found, indicating compliance gaps with GDPR and related regulations. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional but requires modernization and improved security and privacy practices to enhance trust and compliance.

L

Laïta Professionnel

laitapro.fr

49

Laïta Professionnel is a French B2B company specializing in dairy products for professionals in catering, food industry, bakery, and pastry sectors. The website presents a professional image with comprehensive product ranges and brand information. The company leverages the cooperative Laïta's expertise and brand recognition to serve its target audience effectively. Technically, the site is built on Drupal 10, uses modern JavaScript libraries, and implements cookie consent mechanisms to comply with privacy regulations. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be added for enhancement. WHOIS data is unavailable, likely due to privacy protection, but the website's professionalism and content quality support its legitimacy. Overall, the site is well-structured, user-friendly, and compliant with GDPR requirements.

U

Universal Media Limited

universalmedia365.com

47

Universal Media Limited is a UK-based media group established in 2009, specializing in business and consumer media across the US, Canada, and Europe. The company operates multiple branded publications such as CEO Today, Finance Monthly, and Lawyer Monthly, targeting professional audiences. Their business model focuses on editorial publishing, marketing partnerships, and brand management within the media sector. The website presents a professional and consistent brand image with clear contact information and a moderate market position as an established media group. Technically, the website is built on WordPress 6.8.3 using the Oxygen builder framework, incorporating modern web fonts from Google Fonts and Adobe Typekit, and leveraging jQuery and AOS for interactivity and animations. The site is mobile optimized with good SEO practices but lacks advanced accessibility features. Performance is moderate, with no evident critical technical issues. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in the HTML. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, and no privacy or cookie policies are present, indicating gaps in compliance and security best practices. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which impacts trustworthiness. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance, and domain registration transparency to improve its risk profile and trustworthiness.

S

Super zoo

superzoo.cz

49

Super zoo is a large Czech Republic-based retail and e-commerce company specializing in pet supplies. The website offers a wide range of products for various pets, supported by a network of over 200 physical stores and an online shop. The company targets pet owners seeking quality pet food, accessories, and related services. The site features comprehensive product categories, brand showcases, and customer support channels including phone, email, and online chat. Privacy and cookie consent mechanisms are implemented in compliance with GDPR regulations. Technically, the website uses modern JavaScript frameworks and integrates monitoring and analytics tools such as New Relic and Google Tag Manager. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response information are not published. The domain WHOIS data is unavailable, likely due to privacy protection, which is common for commercial sites but reduces transparency. Overall, the site is professional, user-friendly, and trustworthy, serving a large customer base in the pet retail sector.

B

Bemove

ariase.com

26

Ariase.com is a well-established French online comparison platform specializing in internet boxes, mobile plans, and smartphones. Owned by Bemove, a subsidiary of the CCM Benchmark - Le Figaro group, it targets French consumers seeking to optimize their telecom subscriptions. The website offers comprehensive comparison tools, coverage maps, speed tests, and up-to-date guides, positioning itself as a trusted resource in the telecommunications sector. Technically, the site employs modern web technologies including Google Tag Manager and Tailwind CSS, delivering fast performance and excellent mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are absent. Privacy compliance is partially met with a clear privacy policy but lacks a cookie consent mechanism. WHOIS data is unavailable, which slightly impacts domain transparency but is mitigated by the professional presentation and affiliation with a reputable parent company. Overall, Ariase.com demonstrates strong business credibility and technical maturity with room for improvement in privacy and security disclosures.

H

Hoop Corporate Services SA

hoop.swiss

48

Hoop Corporate Services SA operates a fully digital platform specialized in company formations and modifications within Switzerland. Targeting fiduciary firms, law offices, notaries, and corporate legal departments, Hoop streamlines traditionally complex and time-consuming processes by offering a 100% digital workflow including rapid capital deposit account setup via Yapeal. The company positions itself as a unique Swiss solution combining technology with compliance and efficiency. Technically, the website leverages modern frameworks such as Next.js and React, integrates analytics tools like Matomo and Google Analytics, and is hosted on a Swiss cloud infrastructure certified to ISO 27001 standards. Security posture is strong with HTTPS enforcement and secure cloud storage, though explicit security headers could be improved. Privacy compliance is well addressed with clear cookie and privacy policies. Overall, Hoop demonstrates a mature digital presence with strong business credibility and technical sophistication.

KENTAUR Saddlery s.r.o. is a Czech Republic-based manufacturer specializing in high-quality equestrian products, including a wide range of saddles and accessories. Established in 1998, the company targets equestrian enthusiasts and riders, offering products proudly made in Czechia. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its niche market. Social media presence on Facebook and Instagram supports community engagement and brand visibility. Technically, the website employs standard web technologies such as HTML5, CSS3, and JavaScript, with integration of Google Analytics and Google Tag Manager for user tracking and analytics. The site appears mobile-optimized with moderate performance and basic accessibility features. However, no CMS or advanced frameworks are detected, suggesting a custom or lightweight implementation. From a security perspective, the site uses HTTPS (implied by the domain), but lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No forms or data collection mechanisms are present on the homepage, reducing immediate risk exposure. The WHOIS data confirms a long-standing domain registration consistent with the business location and claims, enhancing trustworthiness. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance, enhanced security headers, and explicit policies to strengthen its security posture and regulatory adherence.

W

Welfare group s.r.o.

welfaregroup.cz

40

Welfare group s.r.o. is a Czech-based small family-founded company dedicated to promoting equine welfare through education, seminars, and product offerings such as the Bemer Horse-set. The company positions itself as a niche player aiming to establish welfare as a standard in the horse community by leveraging partnerships with known equine professionals and social media influencers. The website is built on WordPress with WooCommerce and Elementor, featuring a professional design and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks some security headers and formal privacy policies. Overall, the site is trustworthy and well-aligned with the company's business claims.

The website www.feelo.cz currently displays only a temporary suspension notice in Czech, indicating that the e-commerce store is offline or not operational at this time. There is no accessible business content, metadata, or contact information available. The lack of WHOIS data further complicates trust and legitimacy assessments, as no registrar or registration dates are found. Technically, the site lacks any detectable technologies, scripts, or security headers, and no HTTPS information is available, suggesting poor security posture. Overall, the site is effectively non-functional and provides no meaningful user or business interaction.

The website at kavalino.cz currently presents no accessible content, with an empty HTML body and no metadata or scripts. The domain WHOIS data indicates a creation date in the future (January 29, 2025), which is inconsistent and suspicious, suggesting the domain may be inactive, placeholder, or under construction. The site uses Cloudflare nameservers, indicating potential use of a CDN or WAF, but no active content or security headers are detected. Overall, the digital maturity is very low with no visible business or security information. The security posture is weak due to lack of HTTPS and absence of security best practices. The risk level is high due to suspicious domain registration data and lack of transparency. Strategic recommendations include establishing valid SSL, publishing privacy and cookie policies, adding contact and business information, and improving technical implementation to build trust and compliance.

Tech Quest Africa is a newly established Nigerian company specializing in software development and digital skills training. The company positions itself as a strategic partner for businesses seeking custom software solutions and individuals aiming to acquire in-demand tech skills. Their offerings include a training academy, business process automation, and custom software development services. The website demonstrates a modern technical infrastructure using JavaScript frameworks and integrates Google Analytics for user insights. While the site is well-designed and mobile-optimized, it lacks some advanced security headers and cookie consent mechanisms, which are important for compliance and user trust. The domain registration is consistent with the business profile, enhancing credibility. Overall, the company shows promise but should enhance its security and privacy posture to align with best practices.

The website at impactlab.com is currently inaccessible beyond a bot verification challenge page utilizing Google's invisible reCAPTCHA. This security mechanism prevents direct access to the site's actual content, limiting the ability to analyze business, security, and compliance aspects fully. The domain is long-established, registered since 2000 via GoDaddy.com, LLC, with standard domain locks indicating legitimate ownership. However, no business or contact information is visible in the provided HTML content. The technical infrastructure includes reCAPTCHA scripts and hosting on WPX Hosting, but no other technologies or CMS are detectable. Security headers and privacy policies are absent from the accessible content, and no analytics or advertising scripts are present beyond reCAPTCHA. Overall, the site appears to have a strong security posture in terms of bot protection but lacks visible compliance and business transparency in the accessible content.

A

Activspaces

activspaces.com

33

Activspaces is a prominent technology incubator based in Cameroon, dedicated to fostering innovation and supporting African entrepreneurs. The organization provides a comprehensive ecosystem including startup support, project management, network development, and business development services. Their market position as Cameroon's leading tech hub is reinforced by a professional website and active social media presence. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS enabled but lacks advanced security headers and formal policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust. Privacy and cookie policies are missing, indicating compliance gaps. Overall, the site is professional and business-focused but would benefit from enhanced security and compliance measures.

A

Addock

addock.co

49

Addock operates as a specialized B2B SaaS platform focused on the tours and activities sector, providing booking and fulfillment solutions tailored for local experience operators and travel brands. The company positions itself as a next-generation technology provider facilitating real-time connectivity between operators, distributors, and customers. The website content and structure reflect a professional approach targeting industry professionals seeking innovative booking solutions. Technically, the site is built on WordPress with Elementor and integrates modern SEO and analytics tools, indicating a moderate to advanced digital maturity. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and formal security policies. Overall, the site is accessible, well-structured, and trustworthy with room for improvement in privacy and security disclosures.

T

Tcsard, s.r.o

vycvikvhale.cz

43

The website www.vycvikvhale.cz represents a small Czech social enterprise named Tcsard, s.r.o, specializing in dog training, particularly for rescue dogs and kynological activities. The business model focuses on social entrepreneurship, employing disadvantaged individuals and reinvesting profits into community and economic development. The site offers services including professional training for rescue dog handlers, dog training for the general public, rental of training facilities, and organization of related events and courses. The company maintains an active presence on Facebook and is supported by regional authorities, enhancing its community credibility. Technically, the website employs a traditional tech stack with jQuery 1.11.2, jQuery UI, Flexslider, Fancybox, Google Fonts, Google Analytics, and Mapy.cz API. While functional and moderately performant, the use of outdated JavaScript libraries introduces security risks. The site is served over HTTPS but lacks visible advanced security headers. Mobile optimization and accessibility are basic but adequate. SEO practices are present but could be improved with more comprehensive metadata and structured data. From a security perspective, the site shows moderate maturity. HTTPS is enabled, and a cookie consent banner is implemented, indicating some privacy awareness. However, the absence of privacy and terms of service pages, outdated libraries, and missing security headers reduce the overall security posture. The WHOIS lookup failed to retrieve domain registration data, which raises concerns about domain legitimacy and transparency. No direct company contact emails or phone numbers are publicly listed, limiting direct communication channels. Overall, the website is a functional and community-oriented platform with good content quality and user experience but requires improvements in security practices, privacy compliance, and domain transparency to enhance trust and resilience against threats.

O

ODĚVY HOTOVÝ

odevyhotovy.cz

33

ODĚVY HOTOVÝ is a Czech manufacturing company specializing in work wear, ready-made clothing, leisure clothing, and specialist clothing for various sectors including gastronomy, healthcare, machine industries, craftsmen, and car industries. Established in 1994, the company has a significant regional presence and supplies products primarily in the Czech Republic, Austria, and Germany. Their business model includes both direct production and hired labor manufacturing, with additional services such as embroidery and sewing pattern construction. The website reflects a medium-sized enterprise with a focus on quality Czech products and traditional crafts. Technically, the website is built on WordPress using the Elementor page builder and Astra theme, hosted by REG-ZONER. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. No advanced analytics or advertising tools are detected, indicating a focus on informational content rather than marketing. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks important security headers and does not disclose privacy, cookie, or incident response policies, which are areas for improvement. No WAF or security challenge is detected, and the domain registration data is consistent and transparent, supporting the legitimacy of the business. Overall, the website is professional and trustworthy with good content quality and technical implementation but requires enhancements in privacy compliance and security best practices to improve its security posture and regulatory adherence.

P

První Pomoc Psa

prvnipomocpsa.cz

41

První Pomoc Psa is a Czech-based small business specializing in dog first aid training seminars and related services, including physiotherapy and an e-commerce shop selling dog first aid kits. The company has a solid market position with over 15 years of experience and conducts more than 70 seminars annually, targeting both laypersons and professionals interested in canine emergency care. The website is built on WordPress with WooCommerce integration, leveraging common web technologies such as jQuery, Font Awesome, and Google Analytics for tracking and marketing purposes. The technical infrastructure is moderate in performance and well-optimized for mobile devices, hosted by a reputable Czech provider (WEDOS). Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks some security headers and visible privacy compliance mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.

Č

Český kynologický svaz

kynologie.cz

44

Český kynologický svaz (ČKS) is a national Czech organization dedicated to kynology, focusing on dog sports training and breeding. The website serves as an information hub for members and enthusiasts, providing news, event results, organizational details, and resources related to dog training and breeding activities. The site is well-branded with affiliations to recognized bodies such as CMKU and FCI, indicating a strong position in the Czech kynology community. Technically, the site uses a mix of older JavaScript libraries and custom CMS solutions, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks modern security headers and uses outdated libraries, which pose risks. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from technical and compliance improvements.

W

WebAppers

webappers.com

46

WebAppers is a niche content website dedicated to providing high-quality open source web development resources, including articles on tools, WordPress themes, and plugins. The site targets web developers and designers seeking curated information to enhance their projects. It operates primarily through content publishing combined with affiliate marketing and advertising revenue streams. Technically, the site is built on WordPress with common plugins such as Yoast SEO and integrates multiple third-party scripts for analytics and advertising. The website demonstrates good SEO and mobile optimization but lacks advanced accessibility features. Security posture is moderate with HTTPS enabled but missing key security headers and no visible vulnerability disclosure mechanisms. The absence of WHOIS data for the domain raises some concerns about registration legitimacy, although the website content and structure appear professional and trustworthy. Overall, the site is functional and serves its audience well but could improve in privacy compliance and security best practices.

W

WPlook Web Agency

wplook.ca

42

WPlook Web Agency is a Montreal-based digital creative agency specializing in WordPress website design and development for enterprise-level clients primarily in Canada and the USA. Founded in 2014, the agency offers a comprehensive suite of services including strategy, design, engineering, and marketing, positioning itself as a trusted partner for large-scale WordPress projects. The website reflects a professional and consistent brand image with clear navigation and multilingual support, targeting business clients seeking expert WordPress solutions. Technically, the website is built on WordPress CMS with modern tools such as Yoast SEO, Contact Form 7, Google reCAPTCHA, and Google Tag Manager. The use of the Foundation framework and jQuery indicates a mature but somewhat traditional tech stack. Performance and mobile optimization are good, though accessibility features are basic. The hosting provider is not explicitly identified, but domain registration is managed by eNom Canada Corp. From a security perspective, the site employs HTTPS and reCAPTCHA to protect forms, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No privacy or cookie policies were found, indicating compliance gaps with GDPR and other privacy regulations. The WHOIS data shows privacy protection for the registrant, which is justified for this business type, and the domain age aligns with the company's founding date, supporting legitimacy. Overall, WPlook Web Agency presents a credible and professional online presence with room for improvement in privacy compliance and security hardening. Addressing these areas will strengthen trust and regulatory adherence, supporting continued growth in the competitive digital agency market.

C

CRnet, s.r.o.

ecanis.cz

44

eCanis.cz is a Czech online kynology magazine operated by CRnet, s.r.o., providing a rich array of expert articles, interviews, podcasts, and real-life stories focused on dogs and dog training. The site maintains a consistent publishing schedule with at least one new article daily and serves as an official media partner of the Czech-Moravian Cynological Union (ČMKU). The business model combines media publishing with e-commerce offerings and advertising partnerships, targeting dog enthusiasts and kynology professionals primarily in the Czech Republic. Technically, the website employs a traditional web stack with jQuery, jQuery UI, Flexslider, and Fancybox, alongside Google Fonts and Google Analytics for tracking. The site uses HTTPS and includes a cookie consent banner, but some JavaScript libraries are outdated, which may pose security risks. Mobile optimization and accessibility are basic but functional, and SEO practices are moderate. From a security perspective, the site benefits from HTTPS and secure login forms but lacks visible security headers and uses older JavaScript libraries. No explicit privacy policy or terms of service pages were found, which impacts privacy compliance. WHOIS data is unavailable, limiting domain registration trust analysis, but the website's partnerships and content suggest legitimacy. Overall, eCanis.cz presents a professional and trustworthy online presence within its niche, though improvements in security practices, privacy transparency, and technical modernization are recommended to enhance its risk posture and compliance standing.

M

motoTrasy.com - cestování na motorce

mototrasy.com

40

motoTrasy.com is a niche web platform dedicated to motorcycle enthusiasts primarily in the Czech Republic region. It provides a community-driven environment where users can share motorcycle routes, interesting places, and multi-day trips. The website offers user registration and login features to personalize content sharing. Technically, the site uses a combination of older JavaScript libraries such as jQuery 1.11.2, jQuery UI, and plugins like Nivo Slider and Fancybox, alongside modern mapping libraries like OpenLayers. Google Analytics is employed for user tracking, but no visible cookie consent or privacy policies are present, indicating limited privacy compliance. Security posture is moderate with HTTPS usage but lacks modern security headers and uses outdated libraries with known vulnerabilities. The absence of WHOIS registration data raises concerns about domain legitimacy, although the site content and partner links suggest a legitimate community platform. Overall, the site is functional and content-rich but requires improvements in security, privacy compliance, and domain registration transparency.

T

treninksepsem, s.r.o.

treninksepsem.cz

40

The website treninksepsem.cz represents a small Czech company, treninksepsem, s.r.o., specializing in dog training services including individual lessons, puppy training, and rescue dog training. The business is positioned as a specialized provider with over 25 years of experience, targeting dog owners seeking professional training and behavioral improvement for their pets. The site content is well-structured, professionally presented, and focused on its niche audience. Technically, the website uses a traditional tech stack with jQuery 1.11.2, jQuery UI, Flexslider, and Fancybox, along with Google Fonts and Font Awesome. While the site is served over HTTPS with a good SSL configuration, it uses an outdated jQuery version that may expose it to security vulnerabilities. The site lacks modern security headers and does not appear to have a CMS or advanced frameworks. Performance and mobile optimization are moderate to basic. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, indicating some privacy awareness. However, the absence of a privacy policy, terms of service, and security headers reduces its compliance posture. The WHOIS data is unavailable, which raises concerns about domain legitimacy and registration transparency. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the website is functional and professional but requires improvements in security practices, privacy compliance, and domain registration transparency to enhance trustworthiness and reduce risk.

T

Tričkař.cz - nejenom ručně kreslená trička

trickar.cz

43

Tričkař.cz is a small Czech Republic based e-commerce retailer specializing in original hand-drawn designs and digital textile printing, primarily on T-shirts and related apparel. The website showcases a niche market focus with custom and personalized products, targeting customers interested in unique, artistic clothing. The technical infrastructure uses a mix of legacy and modern JavaScript libraries, with integration of external services such as Mapy.cz for mapping and Google Fonts for typography. The site is accessible, uses HTTPS, and includes cookie consent mechanisms, but lacks explicit privacy and terms of service documentation. Security posture is moderate with secure forms and HTTPS but missing security headers and vulnerability disclosures. Overall, the website is functional and professional but could improve compliance and security transparency.

C

CRnet, s.r.o.

engravia.cz

42

Engravia.cz is a specialized small business based in České Budějovice, Czech Republic, offering laser engraving and cutting services primarily focused on wood, stainless steel, leather, and plastic materials. The company provides personalized gifts and custom manufacturing solutions with a business model combining service and e-commerce. Their market position is that of a local niche specialist with a consistent brand presence and a professional website showcasing detailed product offerings and customer engagement features such as login and registration. Technically, the website employs a moderately modern tech stack including jQuery, jQuery UI, Google Analytics, and Mapy.cz API for mapping. While the site is accessible and well-structured with good SEO and content quality, some technical improvements are recommended, such as updating JavaScript libraries and enhancing mobile optimization and accessibility. From a security perspective, the site uses HTTPS and has secure login forms, but lacks visible security headers and explicit privacy or terms of service pages. The cookie consent banner is present, indicating some level of privacy compliance. No critical vulnerabilities or exposed sensitive data were detected, but updating security practices and adding formal policies would strengthen the security posture. Overall, the website is trustworthy and professional with moderate risk due to missing WHOIS data and some security best practices. Strategic recommendations include implementing security headers, publishing privacy and terms policies, updating libraries, and improving mobile and accessibility features to enhance user trust and compliance.

M

Město Kaplice

mestokaplice.cz

48

Město Kaplice operates an official municipal website serving the residents and stakeholders of Kaplice, Czech Republic. The site provides comprehensive information about city governance, public services, news updates, and community engagement initiatives. It targets local citizens and visitors seeking municipal information and services. The business model is that of a public sector entity providing transparent access to city administration and resources. The website is well-branded, consistent, and includes trust signals such as official contact details and social media presence. Technically, the website employs a modern tech stack including Bootstrap, jQuery, FontAwesome, and integrates third-party services like Munipolis for municipal news and Chetty chatbot for user interaction. The site is mobile-optimized, accessible, and uses HTTPS with Google Analytics for traffic monitoring. Cookie consent and privacy policies are implemented, reflecting good privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers and explicit incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces trust assessment confidence but the website content and official contact information support legitimacy. Overall, the website is a reliable and professional municipal portal with good content quality and technical implementation. Strategic improvements include adding security headers, incident response information, and obtaining transparent WHOIS data to enhance trust and security posture.

Loire Vins operates an e-commerce platform specializing in the sale of wines from the Loire region of France. The website targets French-speaking wine consumers and enthusiasts, offering a wide selection of red, white, rosé, sparkling, and organic wines directly sourced from producers. The business model focuses on direct-to-consumer sales with secure payment and fast delivery services. The company positions itself as a niche player in the French wine e-commerce market with a consistent brand presence and good content quality. Technically, the website is built on the PrestaShop CMS platform and integrates multiple modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Sendinblue, Matomo, and Skeepers for customer reviews. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with a well-structured technical stack supporting e-commerce operations. From a security perspective, the site enforces HTTPS, implements standard security headers, and uses cookie consent mechanisms compliant with GDPR. However, there is no publicly available security policy or incident response information, and no vulnerability disclosure program is evident. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the website content and technical setup suggest a legitimate business. Overall, Loire Vins presents a professional and trustworthy e-commerce platform for Loire wines, with room for improvement in transparency around security policies and domain registration details. Strategic recommendations include publishing security and incident response policies, establishing a vulnerability disclosure channel, and monitoring domain registration status to enhance trust and compliance.

U-Contact PME is a French business portal designed to facilitate connections between very small and small-to-medium enterprises (TPE/PME) and the Coopérative U, a significant player in the retail cooperative sector. The website serves as an informational and transactional platform, offering access to various commercial activities such as consumer goods, fresh products, textiles, and bazaar items. It targets suppliers and partners seeking to engage with Coopérative U's network. Technically, the site is built on modern frameworks including Nuxt.js and Bootstrap, ensuring a responsive and user-friendly experience. The presence of privacy and cookie policies, along with HTTPS enforcement, reflects a commitment to compliance and security. However, explicit security policies and incident response information are not publicly available, indicating areas for improvement. Overall, the site demonstrates a solid security posture with no detected vulnerabilities or suspicious content, supporting its role as a trusted business portal.

The website www.coursesu.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block page. This security mechanism prevents access to the site content, resulting in no visible business information, metadata, or user-facing content. The domain WHOIS data is unavailable, indicating the domain may be unregistered, very new, or protected by privacy measures. Consequently, no business details, contact information, or compliance policies are present for analysis. The technical infrastructure is limited to Cloudflare's security services, with no detectable CMS, frameworks, or hosting details. The security posture cannot be fully assessed due to lack of access, but the presence of a WAF block suggests a high-security environment or potential abuse triggers. Overall, the site currently presents a high risk due to lack of transparency and accessibility.

U-Techno.fr is an online retail platform specializing in household appliances, multimedia, and smartphones, operating primarily in the French market. The website is part of the broader Magasins U cooperative ecosystem, offering consumers a range of products with home delivery included. The site demonstrates a solid digital presence with a professional design, clear navigation, and integration of modern e-commerce technologies such as Shopware and Google reCAPTCHA Enterprise for bot protection. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership details. Security posture is generally good with HTTPS and some security best practices in place, but could be improved by adding explicit security headers and publishing a security policy. Privacy compliance is partially addressed with a cookie consent mechanism, though a dedicated privacy policy page is not clearly found. Overall, the site is trustworthy and well-positioned in its retail niche but would benefit from enhanced transparency and security documentation.

G

Gemini oční klinika

gemini.cz

48

Gemini oční klinika is a well-established Czech healthcare provider specializing in ophthalmology and eye surgeries. The clinic operates multiple branches across the Czech Republic and offers a wide range of services including laser eye surgery, cataract operations, pediatric ophthalmology, and aesthetic eye procedures. The website reflects a professional and trustworthy healthcare brand with strong market positioning and a comprehensive service portfolio. Technically, the site is built on WordPress with modern JavaScript libraries and SEO tools, ensuring good performance and user experience. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms in place, though some security headers could be enhanced. Privacy compliance is robust, with clear GDPR policies and cookie management. Overall, the site demonstrates a mature digital presence suitable for a large healthcare provider.

The website at e24files.com currently presents minimal content, essentially an XML response indicating an empty AWS S3 bucket listing with no visible business or marketing information. The domain is registered since 2013 with a reputable registrar but lacks DNSSEC and detailed registrant data. There are no visible privacy policies, contact information, or security policies on the site. Technically, the site lacks modern web technologies, metadata, and any user-facing content, resulting in a poor digital maturity assessment. Security posture cannot be fully evaluated due to lack of HTTPS and security headers data, but the absence of these is a concern. Overall, the site appears inactive or underdeveloped, posing risks in trust and credibility for users.

The website at squareupstaging.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents access to any substantive content. As a result, no business-specific information, policies, or contact details are available for analysis. The domain is registered since 2014 with a reputable registrar and uses AWS DNS services, indicating a legitimate and mature domain. However, the lack of DNSSEC and the active WAF block limit the ability to assess the website's technical and security posture fully. The absence of visible privacy, cookie, or terms of service policies and contact information further restricts compliance and business credibility evaluation. Overall, the site appears to be protected by standard security measures but is currently inaccessible for detailed review.

S

Sulu GmbH

sulu.io

47

Sulu GmbH operates a leading open-source PHP CMS platform built on the Symfony framework, targeting enterprise projects and developers. The company offers a robust content management system with multisite and multilingual capabilities, supported by professional consulting, training, and development services. The website reflects a mature business with consistent branding and a clear value proposition for developers, marketers, agencies, and content teams. Technically, the site is well-implemented with modern technologies, fast performance, and good mobile optimization. Security posture is solid with HTTPS and secure domain registration, though improvements are recommended in security headers and published policies. Overall, the site is professional, trustworthy, and well-positioned in the technology CMS market.

B

Barn Fashion s.r.o.

barnmanagement.cz

42

Barnmanagement.cz is a specialized marketing and advertising agency focused exclusively on the equestrian sector in the Czech Republic. The company, Barn Fashion s.r.o., founded in 2021, offers tailored marketing services including social media marketing, online marketing, web development, PR, production of advertising materials, and representation of content creators. The agency positions itself as the first and only marketing firm in the Czech Republic dedicated to the equestrian community, serving over 10 exclusive clients in this niche. The website is professionally designed, mobile-optimized, and provides clear contact information and references to partner companies, enhancing trustworthiness. Technically, the website runs on WordPress with the Enfold theme and Avia framework, utilizing modern web technologies such as jQuery and Google Fonts. Hosting is provided by a Czech hosting provider, consistent with the business location. The site uses HTTPS with a good SSL configuration and integrates Facebook Pixel for marketing and tracking purposes. However, it lacks some security headers and a cookie consent banner, which are recommended for GDPR compliance. From a security perspective, the site shows good practices like HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. There is no published security policy or incident response contact, which could improve transparency and readiness. The domain WHOIS data aligns well with the business information, showing consistency and legitimacy. No WAF or blocking mechanisms were detected, allowing full content access. Overall, Barnmanagement.cz demonstrates a solid business presence with good technical implementation and moderate security posture. Strategic improvements in privacy compliance and security transparency would further enhance trust and compliance.

K

kbin.pub

kbin.pub

45

kbin.pub is a minimal content website primarily serving as an advertising and content aggregation platform. The site leverages Google advertising and analytics technologies but lacks substantive business information, contact details, or clear branding. The technical infrastructure is basic, with standard HTML, CSS, and JavaScript, and no detected CMS or advanced frameworks. Security posture is limited, with HTTPS enabled but no security headers or cookie consent mechanisms present. The WHOIS data is unavailable or redacted, indicating privacy protection, which reduces transparency and trust. Overall, the site appears to be a small-scale advertising portal with limited user engagement features and minimal content.

R

Rezervační systém pro restaurace RezervujStůl – online rezervace stolů

rezervujstul.cz

44

RezervujStůl operates as an online reservation system tailored for restaurants and cafes, providing a comprehensive platform for managing table bookings both online and internally. The business targets restaurant operators seeking efficient reservation management to optimize seating capacity and improve operational efficiency. The website highlights a 15-year market presence and processes approximately 35,000 reservations monthly, indicating a stable market position within the hospitality sector in the Czech Republic. Technically, the site employs legacy JavaScript libraries such as jQuery 1.10.2 and jQuery UI 1.9.2, alongside modern tracking tools like Google Analytics and Google Tag Manager. While the site is accessible and well-structured with good SEO practices, it lacks advanced security headers and uses outdated libraries, which may pose security risks. Privacy compliance is partially addressed with a privacy policy and terms of service, but no cookie consent mechanism is present. The absence of WHOIS data reduces domain trustworthiness, although the website content and testimonials suggest a legitimate business. Overall, the site demonstrates moderate digital maturity with room for security and privacy improvements.