High-risk security reports

S

Správa železnic

konferenceszt.cz

40

The website konferenceszt.cz serves as the official platform for the 12th annual conference on communication and security technologies in the railway sector, organized primarily by Správa železnic and supported by regional and industry partners. It provides detailed event information, registration options, advertising opportunities, and multimedia content to engage industry professionals. The site is well-branded and targets railway technology experts and stakeholders. Technically, it is built on WordPress with Elementor, leveraging modern JavaScript libraries and Google Fonts, hosted likely by WEDOS, a Czech provider. The site is mobile-optimized and performs moderately well. Security posture is solid with HTTPS enforced, but lacks advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly presented with professional emails and phone numbers. Overall, the site is trustworthy and professional but could improve privacy and security transparency.

ProBowling.cz is a Czech Republic-based small business specializing in bowling-related services including an e-shop for bowling equipment, a sports club for training and competitions, and organizing bowling tournaments. The website presents a clear business focus on the bowling community with relevant content and navigation. Technically, the site uses basic HTML and CSS with hosting provided by Active24, but lacks advanced frameworks or CMS indications. Mobile optimization and accessibility are basic but functional. Security posture is weak due to missing HTTPS confirmation, absence of security headers, and lack of privacy and cookie policies. Contact information is clearly provided, supporting business credibility. Overall, the site is legitimate and consistent with its WHOIS registration data but requires improvements in security and compliance to enhance trust and user protection.

Xbowling.cz is a Czech Republic-based bowling entertainment service provider operating since at least 2011. The website offers information about bowling services and multiple branches, targeting general leisure customers. The technical infrastructure includes common web technologies such as jQuery, Google Analytics, Google Tag Manager, and Facebook Pixel, with cookie consent implemented via CookieYes. The website is accessible without any WAF or security challenges, but lacks explicit privacy and terms of service pages, and does not provide clear contact information. Security posture is moderate with HTTPS enabled but missing security headers and use of an outdated jQuery version. Overall, the site is functional and professional but could improve privacy compliance and security best practices.

B

Bowling Brno

bowlingbrno.cz

41

Bowling Brno is a medium-sized hospitality and leisure business located in Brno, Czech Republic, offering a variety of sports and entertainment services including bowling, adventure golf, beach volleyball, a golf simulator, and restaurant facilities. The website is professionally designed with good content quality and clear navigation, targeting families, sports enthusiasts, and corporate clients. The business maintains an active social media presence and community engagement through youth sports programs and tournaments. Technically, the website uses modern JavaScript libraries and frameworks such as Foundation, jQuery, and LightGallery, with Google Analytics and Facebook SDK for tracking. However, there is no evidence of a CMS or hosting provider information. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism detected. WHOIS data is missing, which reduces domain trustworthiness and should be investigated further. Overall, the website is functional, trustworthy, and suitable for its business purpose but could improve in security and privacy compliance.

The domain etbf.eu currently serves only a standard HTTP 404 Not Found error page, indicating that the website content is inaccessible or not yet deployed. There is no visible business information, metadata, or structured data to analyze. The domain is registered through a reputable registrar, team.blue Denmark A/S, but no further registrant details or business identity are provided. Due to the lack of content, the technical infrastructure cannot be assessed beyond the registrar information. Security posture is minimal with no HTTPS or security headers detected in the provided data. Overall, the website presents a high risk due to lack of content, absence of privacy and security policies, and no contact information, making it unsuitable for business or user trust at this time.

P

0 - Chyba: 0

pap-brezinaservis.cz

36

The website pap-brezinaservis.cz appears to represent a small Czech business established in 2014, but currently only displays an error page indicating a PHP coding issue. The site uses Joomla CMS with common frontend libraries such as jQuery, Bootstrap, and Font Awesome. There is no accessible business content, contact information, or privacy and cookie policies, which significantly limits the ability to assess the business model or market position. Technically, the site shows signs of moderate performance and basic mobile optimization but lacks security best practices such as security headers and visible HTTPS enforcement. The presence of a PHP error message is a security concern as it may expose internal implementation details. Overall, the website is not currently functional for end users and lacks critical compliance and security features.

2

210 Gym Plzeň

avalonfitness.cz

44

210 Gym Plzeň is a modern fitness center located in Plzeň, Czech Republic, offering a large facility of 2100 square meters equipped with over 80 Grün Sport machines. The gym provides personal trainers, group fitness classes, and specialized zones such as strength training and Booty builder areas. The website reflects a professional local business targeting fitness enthusiasts in the region. Technically, the site is built on WordPress using Elementor, with integrations for analytics and marketing tools like Google Analytics and Facebook Pixel. Security posture is good with HTTPS and security headers in place, but lacks published security policies or incident response information. Privacy compliance is basic with a cookie consent mechanism but no clear privacy or terms of service pages. Overall, the site is trustworthy and well-maintained, though WHOIS data is unavailable, likely due to privacy protection.

A

ADREX BASE CAMP

adrex.cz

44

Adrex Base Camp is a small outdoor sports business located in Vír, Czech Republic, specializing in year-round sports equipment rental, test centre services, and organizing company and group events focused on adventure and outdoor activities. The website presents a professional and consistent brand image with clear contact information and active social media presence. The business targets outdoor enthusiasts and corporate groups seeking organized sports and adventure experiences in the Svratka Valley region. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and MonsterInsights for analytics and SEO optimization. It employs HTTPS with a valid SSL certificate and integrates Google Maps API for location services. The site is moderately optimized for performance and mobile devices, with basic accessibility features. However, some security best practices like security headers are missing. From a security perspective, the site uses HTTPS and has a cookie consent mechanism, but lacks a published privacy policy, terms of service, and security policy pages. WHOIS data for the domain is unavailable, which limits the ability to fully verify domain legitimacy and trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is functional, professional, and safe for general audiences but would benefit from enhanced privacy compliance documentation and improved security headers. The absence of WHOIS data is a notable gap in trust assessment and should be addressed to improve domain transparency and credibility.

P

Positive Activities z.s.

trailyvir.cz

41

Trails in Vír is a small regional business operating a biking resort in the Vysočina region of the Czech Republic. The company, Positive Activities z.s., offers groomed and wilderness biking trails, bike rental, servicing, and shuttle services through partnerships. The website is professionally designed with good content quality and clear navigation, targeting biking enthusiasts and tourists interested in outdoor activities. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Google Analytics integration, providing a solid digital infrastructure. However, the absence of WHOIS data limits domain trust assessment. Security posture is adequate with HTTPS enabled but lacks some security headers and privacy compliance mechanisms such as cookie consent. Overall, the site is functional and trustworthy for its niche audience but could improve privacy and security transparency.

P

ProfiPress s.r.o.

zemedelec.cz

45

Zemedelec.cz is a well-established Czech agricultural news portal operated by ProfiPress s.r.o., founded in 2003. The website provides comprehensive news coverage across all agricultural sectors, targeting professionals and stakeholders in the Czech agricultural industry. It offers advertising opportunities, subscription services, and event information, positioning itself as a key media player in its niche. The site is professionally designed with consistent branding and good content quality, supported by structured data and SEO best practices. Technically, it runs on WordPress with Oxygen Builder and integrates multiple modern plugins and analytics tools, ensuring a robust digital presence. Security measures include HTTPS, GDPR-compliant cookie consent, and use of reCAPTCHA, although some security headers could be enhanced. Overall, the website is accessible, trustworthy, and compliant with privacy regulations, with a moderate to good security posture.

3EC International, s.r.o. is an independent accredited certification company based in the Czech Republic, specializing in QHSE system certifications, product certifications, and related training services. Established in 2009, the company operates with experienced auditors and holds accreditation from the Czech Institute for Accreditation, positioning itself as a trusted partner for businesses seeking certification and compliance services. The website reflects a professional and consistent brand image targeting corporate clients in need of certification and training solutions. Technically, the website is built on WordPress using the Divi theme, incorporating standard JavaScript libraries such as jQuery and MediaElement.js. The site is moderately optimized for performance and mobile responsiveness, with basic SEO and accessibility features. Hosting details are not explicitly identified, but the site uses HTTPS ensuring secure communication. From a security perspective, the website enforces HTTPS but lacks several important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible privacy policy, cookie consent mechanism, or incident response contact information, indicating gaps in privacy compliance and security transparency. No WAF or blocking mechanisms were detected, and no vulnerabilities or exposed sensitive data were found in the analyzed content. Overall, the website presents a trustworthy and professional front for the business but would benefit from enhanced privacy compliance, security headers, and incident response disclosures to improve its security posture and regulatory adherence.

H

Hello Design | Tisková grafika, webdesign

hellodesign.cz

40

Hello Design is a small Czech Republic based graphic and web design service provider specializing in print graphics, web design, UX, and UI. The website presents a professional and visually appealing design with good mobile optimization and SEO practices. The technical infrastructure includes modern web technologies such as HTML5, CSS3, JavaScript, and integration with Facebook Customer Chat for user engagement. However, the security posture is weak due to lack of visible security headers and unknown SSL/TLS configuration. Privacy compliance is minimal with no visible privacy or cookie policies. The absence of WHOIS data raises concerns about domain registration legitimacy, which impacts overall trust. Strategic improvements in security and compliance are recommended to enhance credibility and user trust.

The website www.autoantenne24.com is currently inaccessible beyond a Cloudflare security challenge page that requires human verification via Turnstile captcha. Due to this, no actual business content, contact information, or policies are available for analysis. The domain WHOIS data is not found, suggesting the domain may be unregistered, newly registered, or privacy protected. The technical infrastructure relies on Cloudflare for security and DDoS protection, but no further technology stack or CMS information is available. The security posture is minimal due to lack of accessible content and absence of security headers or policies. Overall, the site presents a high risk of low trustworthiness and limited transparency. Strategic recommendations include ensuring the domain registration is valid and visible, providing clear business and privacy information, and improving accessibility beyond WAF challenges.

The website webhostlist.de is currently inaccessible, returning a 503 Service Unavailable error page indicating temporary downtime or maintenance. The site is hosted by netclusive GmbH, a German hosting provider, as confirmed by DNS and footer references. Due to the lack of accessible content, no business-specific information, privacy policies, or contact details are available for analysis. The technical infrastructure appears minimal with no detected scripts, analytics, or security headers, and no HTTPS information was provided. This limits the ability to assess the site's security posture or compliance status. Overall, the site shows poor content quality and minimal technical implementation, resulting in a low trust and credibility score.

W

we make it

we-make.it

48

We make it is a Berlin-based small studio specializing in risography printing, book works, and graphics services, catering primarily to independent publishers and DIY enthusiasts. The company emphasizes collaborative processes and democratization of art and information through self-publishing. The website is built on WordPress with a moderate technical infrastructure including jQuery and Swiper.js, and uses Yoast SEO for optimization. Marketing scripts from sender.net are present for email campaigns. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks advanced security headers and formal privacy or cookie policies. Contact information is available via email and physical address, with active social media presence. The domain is well-established since 2012, consistent with the business history. Overall, the website is professional and trustworthy but could improve privacy compliance and security practices.

O

openbiblio.eu

openbiblio.eu

43

Openbiblio.eu is a niche community platform dedicated to promoting openness and collaboration within the library and bibliothekswissenschaft sectors. It hosts various projects including an incentive system for open libraries, webcasts, and a Mastodon social instance, primarily serving library professionals and academics. The platform is operated by Stabi Berlin and leverages WordPress technology hosted by netcup GmbH. Technically, the website is functional with moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is safe, trustworthy, and serves its community purpose effectively but would benefit from enhanced security and compliance measures.

C

CK Kramolín

ck-kramolin.cz

42

CK Kramolín is a small, local cycling club based in the Czech Republic, focused on organizing cycling events and supporting its members. The website provides event news, photos, and contact information primarily in Czech language, targeting cycling enthusiasts in the region. The domain age and WHOIS data align well with the club's history and activities, indicating a legitimate and stable organization. Technically, the website uses Bootstrap and jQuery with a basic but functional design. However, it lacks modern security features such as HTTPS enforcement and security headers, and does not provide privacy or cookie policies, which are important for GDPR compliance. Overall, the site is functional and informative but requires improvements in security and privacy compliance to enhance trust and protect users.

A

Automoto klub v AČR Nepomuk - since 1946

amknepomuk.cz

42

The website for Automoto klub v AČR Nepomuk is a minimal, outdated online presence for a local automotive club in the Czech Republic with a claimed history since 1946. The site uses deprecated HTML framesets and lacks substantive content, modern design, or mobile optimization. There are no visible contact details, privacy policies, or terms of service, and no WHOIS data is available for the domain, which raises concerns about legitimacy and trustworthiness. The site includes Google Analytics and Tag Manager scripts but lacks security best practices such as HTTPS enforcement and security headers. Overall, the digital maturity of the site is low, and it does not meet modern standards for security or privacy compliance.

S

Stavby Linka

stavbylinka.cz

39

Stavby Linka is a Czech construction company specializing in new house construction, renovations, and property modifications primarily in the Plzeň region. The company serves both private customers and various known businesses across multiple industries. The website is built on WordPress using Elementor and Yoast SEO, featuring a professional design with good navigation and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks security headers and published security policies. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the website presents a trustworthy small business with room for improvement in privacy and security transparency.

M

Město Nepomuk

nepomuk.cz

44

The website www.nepomuk.cz is the official online presence of the town of Nepomuk in the Czech Republic, providing municipal news, events, and citizen services. It serves as a local government portal targeting residents and visitors, offering information about the town, upcoming events, contact details, and a citizen portal. The site is professionally designed with consistent branding and good content quality, supporting multiple languages including Czech, English, and German. Technically, it employs modern web technologies such as Google Analytics, Google reCAPTCHA, jQuery, and smart app banners, ensuring a moderate performance and good mobile optimization. Security-wise, the site uses HTTPS and reCAPTCHA for form protection but lacks visible security headers and comprehensive privacy or cookie policies, which are areas for improvement. The WHOIS data for the domain is unavailable, which is unusual but may be due to registry policies. Overall, the site is trustworthy and serves its purpose well but could enhance its security posture and privacy compliance.

A

Autodoprava OMstavby

autodoprava-omstavby.cz

45

Autodoprava OMstavby is a small Czech transportation and construction logistics company based in Plzeň, offering services such as earthworks, demolition, domestic freight transport, vehicle rental with drivers, and material removal. The company emphasizes reliability and has been operating for over two decades, supported by customer testimonials and a clear local presence. The website is built on WordPress using the Divi theme, with standard technologies like jQuery and Google Analytics integrated. It features a GDPR-compliant contact form and cookie consent banner, reflecting basic privacy awareness. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with HTTPS enabled but lacks advanced security headers and incident response information. Overall, the site is functional, professional, and suitable for its target audience but would benefit from enhanced security and transparency measures.

NEVA Group s.r.o. is an established authorized dealer and service provider specializing in DAF and TATRA commercial vehicles in the Czech Republic. The company offers a comprehensive range of services including new and used truck sales, vehicle servicing, driver training, financing, and spare parts supply. With a domain age dating back to 2008 and certifications such as ISO 9001 and ISO 14001, NEVA Group demonstrates a solid market presence and commitment to quality and environmental standards. The target audience primarily consists of commercial vehicle operators and transport companies seeking reliable vehicle solutions and support. Technically, the website employs a traditional tech stack featuring jQuery 1.9.1, Bootstrap, and Google Analytics, with a moderate performance profile and basic mobile optimization. While the site includes cookie consent mechanisms and integrates marketing tools like Google Tag Manager and Google Ads, it lacks modern security headers and uses outdated JavaScript libraries, which may expose it to vulnerabilities. Privacy compliance is partial, with no explicit privacy policy page detected, though cookie consent is implemented. From a security perspective, the site benefits from HTTPS but lacks visible security headers and explicit security policies. The use of outdated libraries and absence of a vulnerability disclosure or incident response contact reduce its security maturity. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, NEVA Group's website is professional and functional, with good business credibility and moderate technical and security posture. Improvements in privacy policy transparency, security header implementation, and updating legacy scripts would enhance its compliance and security standing.

V

VV&J s.r.o.

vvaj.cz

43

VV&J s.r.o. is a Czech-based medium-sized company with over 30 years of experience specializing in photovoltaics, telecommunications, electrical installations, and construction services. The company operates primarily in the energy and telecommunications sectors, serving business clients across multiple European countries. Their business model focuses on supplier-engineering and assembly services for investment construction projects, supported by a strong track record and ISO 9001 certification. Technically, the website employs a modern frontend stack including Bootstrap 4.3.1, jQuery, and Popper.js, delivering a responsive and well-structured user experience. The site is moderately optimized for performance and SEO, with clear navigation and multi-language support. However, no CMS or advanced analytics tools are detected, indicating a straightforward technical infrastructure. From a security perspective, the website uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and published security policies such as privacy or cookie policies. There is no incident response or vulnerability disclosure information available, which suggests room for improvement in security transparency and compliance. Overall, the website presents a professional and trustworthy business presence with solid credibility but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

Staročeský Catering s.r.o is a small Czech hospitality company specializing in catering services including rauty, corporate events, bankets, and stand sales for small and large events. The company operates multiple venues in the Plzeň region and offers equipment rental for events. The website is built on WordPress and uses common web technologies such as jQuery, bxSlider, and Google Fonts. While the site provides clear contact information and event references, it lacks privacy and cookie policies, which is a compliance concern. The technical infrastructure is moderately modern but uses outdated WordPress and jQuery versions, which may expose security vulnerabilities. Security headers are not detected, and no incident response or security policies are visible. Overall, the site is functional and professional but requires updates and compliance improvements to enhance security and privacy posture.

The website solarnisystemy-ceskebudejovice.cz is currently inaccessible, displaying only a minimal placeholder message 'site not found'. There is no visible business content, metadata, or contact information to analyze. The domain is registered since 2011 with the registrar REG-KRAXNET and uses the name server ns.kraxnet.com, indicating a legitimate registration but no active website presence. The lack of content and security features such as HTTPS and security headers indicates a very low digital maturity and security posture. No privacy or cookie policies are present, and no business or contact details are available, which severely limits trust and credibility. Overall, the site appears offline or abandoned, posing a high risk for users seeking information or services from this domain.

C

Czechocar CZ, spol. s.r.o.

czechocar.cz

46

Czechocar CZ, spol. s.r.o. operates a professional car rental and carsharing service in the Czech Republic, offering a wide range of vehicles from economy to luxury models. The company is an independent franchisee of Enterprise Rent-a-Car, which strengthens its market position and trustworthiness. The website is well designed, mobile optimized, and provides clear navigation and relevant business information including multiple physical office locations and a phone contact. Privacy and cookie compliance are well implemented with a dedicated GDPR policy document and cookie consent mechanism. Technically, the site uses modern frontend technologies such as Svelte and Bootstrap, and integrates Google Analytics via Google Tag Manager for user behavior insights. Security posture is good with HTTPS enforced and secure forms, though there is room for improvement by adding explicit security policies and incident response contacts. Overall, the website reflects a mature business with a solid digital presence and trustworthy operations.

L

LepsiPrace.cz

lepsiprace.cz

44

LepsiPrace.cz is an online job portal primarily targeting job seekers and employers in the Czech Republic. The platform offers job listings and candidate services, leveraging WordPress CMS with specialized job board plugins. The website demonstrates a good level of content quality and user experience, with a professional design and clear navigation. However, the absence of publicly available WHOIS data limits the ability to verify domain legitimacy and registrant details, which impacts overall trust. Technically, the site uses modern web technologies and performance optimization plugins but lacks visible security headers and comprehensive privacy or terms of service documentation. The cookie consent mechanism is present, indicating some level of privacy compliance. Security posture is moderate but could be improved by implementing standard security headers and incident response information. Overall, the site is functional and relevant for its target audience but would benefit from enhanced transparency and security practices.

L

LYNT services s.r.o.

lynt.cz

49

LYNT services s.r.o. operates as a premium PPC agency specializing in performance marketing with a monthly budget management exceeding 60 million CZK. Established in 2012, the company holds a prestigious Google Premier Partner status and boasts 15 years of experience. Their service portfolio includes PPC campaign management, business reporting, auditing, and international campaign expansion across more than 100 countries. The website reflects a mature digital presence with modern technologies such as WordPress, Bricks builder, and Cloudflare integration, ensuring fast performance and mobile optimization. Security measures are robust, including HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not published. Overall, the company demonstrates high business credibility and compliance with GDPR and cookie regulations.

R

Roman Kreuziger Cycling Academy z.s.

rkca.cz

44

Roman Kreuziger Cycling Academy z.s. is a Czech non-profit organization focused on cycling training and team management. The website serves as a platform to showcase the cycling academy's activities, sponsors, and equipment, targeting cycling enthusiasts and sports professionals. The business operates in the transportation sector with a niche focus on sports cycling. Technically, the website is built on WordPress using Elementor and several plugins for SEO, social media integration, and marketing. The site is hosted by Wedos, a Czech hosting provider, and uses HTTPS with Google Analytics for traffic monitoring. Security posture is moderate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact options are limited to a newsletter subscription form, with no direct emails or phone numbers provided. Overall, the website is professional, well-branded, and trustworthy but could improve compliance and security transparency.

A

Avanzado Group s.r.o.

avanzadogroup.cz

43

Avanzado Group s.r.o. is a small Czech company specializing in comprehensive security and detective services, shooting courses, and construction of turnkey family houses. The website presents a professional image with clear service offerings and active social media presence, targeting general audiences including businesses and organizations. Technically, the site is built on WordPress 4.9.8 with common plugins and libraries such as jQuery and Bootstrap, but uses outdated versions that pose security risks. The site employs HTTPS and Google reCAPTCHA for form security but lacks modern security headers and up-to-date software versions. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR. WHOIS data is unavailable, which reduces transparency and trustworthiness. Overall, the site is functional and professional but requires technical and compliance improvements to enhance security and trust.

E

EKV Project s.r.o.

ekvproject.cz

39

EKV Project s.r.o. is a specialized company focused on photovoltaic power plants, providing solar energy solutions primarily in the Czech Republic. The website presents a professional image with clear business focus on renewable energy services. The technical infrastructure is based on WordPress CMS with Elementor page builder and Yoast SEO plugin, indicating a modern and maintainable platform. Google Tag Manager and reCAPTCHA are implemented, supporting analytics and security needs. However, the absence of WHOIS data and lack of visible privacy and cookie policies reduce transparency and compliance confidence. Security headers are not detected, suggesting room for improvement in security hardening. Overall, the website is functional and informative but would benefit from enhanced privacy compliance and security practices.

V

Volteq s.r.o.

volteq.cz

44

Volteq s.r.o. is a small Czech company specializing in electrical installation and construction services, including strong and weak current electrical systems, reconstruction of residential units, and installation of HVAC systems as an official Gree partner. The company primarily serves the Plzeň region but can operate across the Czech Republic. Their website is professionally designed with clear navigation and good content quality, targeting local residential and commercial customers. Technically, the site uses modern HTML5, CSS3, and JavaScript with the Foundation framework, and is mobile optimized with moderate performance. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security best practices. Overall, the domain registration is recent but consistent with a legitimate small business website launch. The site contains no adult or questionable content and maintains a professional and trustworthy online presence.

B

Bike-Arena

bikearena.cz

44

Bike-Arena is a specialized retail business based in Příbram, Czech Republic, focusing on the sale and servicing of bicycles, electric bikes, and cycling accessories. The company operates both an e-commerce platform and a physical store, offering additional services such as bike rental, maintenance, and test rides. Their market position is that of a regional expert catering to recreational, sport, and competitive cyclists. The website is well-structured, professionally designed, and provides comprehensive product and service information targeted at cycling enthusiasts. Technically, the website employs modern JavaScript libraries including jQuery, jQuery UI, and Select2, alongside Google Tag Manager and analytics tools. It is mobile-optimized with responsive design and includes cookie consent mechanisms aligned with GDPR requirements. The site uses HTTPS, ensuring encrypted communications, but lacks some recommended HTTP security headers which could enhance protection. From a security perspective, the site demonstrates good practices such as secure login forms and consent management but does not publish explicit security policies or incident response contacts. The absence of WHOIS data reduces transparency slightly but is mitigated by clear business contact information and a physical address. No critical vulnerabilities or exposed sensitive data were detected. Overall, Bike-Arena presents a trustworthy and professional online presence with moderate technical maturity and a solid security posture. Strategic improvements in security headers and transparency around security policies would further strengthen their risk profile.

Hořákov CZ is a small-scale community website dedicated to the history and current affairs of the village Hořákov in the Czech Republic. The site provides archival materials, historical documents, and local information primarily targeted at residents, natives, and enthusiasts of the region. The website is built on WordPress, utilizing common plugins and a well-known theme, delivering a moderate performance and good mobile responsiveness. The content is rich in historical data, including downloadable PDFs and genealogical information, but lacks modern privacy and security compliance features such as privacy policies and cookie consent mechanisms. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the site is trustworthy and serves its niche audience well but should enhance compliance and security practices to align with best practices.

J

JAVI solutions s. r. o.

javi.sk

42

JAVI solutions s. r. o. is a Slovakia-based technology company specializing in comprehensive information system solutions including business intelligence, internet solutions, software development, and ongoing support. The company targets businesses seeking integrated and customized IT solutions to optimize their internal processes and customer reach. Their market position is that of a niche provider with a focus on tailored software and system integration services. Technically, the website is built on a modern stack including Debian, MySQL, PHP, Java, and front-end technologies like Bootstrap and jQuery. The site uses a custom CMS (BiS/WEB 1.0.2 rc) and integrates Google Analytics and Tag Manager for tracking. Mobile optimization and SEO practices are well implemented, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA v2 to protect forms. However, it lacks explicit security headers and does not publish a security policy or incident response contacts. Cookie consent is implemented, but privacy policy and terms of service are missing, which impacts compliance and user trust. Overall, the website is professional and trustworthy with a good security baseline but would benefit from enhanced privacy and security disclosures. The domain registration data aligns well with the company identity, supporting legitimacy. Strategic improvements in security headers, privacy documentation, and incident response readiness are recommended to strengthen the security posture and compliance.

S

Smartim, s.r.o.

smartim.cz

46

Smartim, s.r.o. is a Czech Republic-based small business specializing in comprehensive online marketing services including SEO, PPC, web design, social media marketing, and analytics. With over 14 years of experience, they serve businesses seeking to improve their online presence and marketing effectiveness. The website is professionally designed, content-rich, and well-structured, targeting primarily Czech businesses. Technically, the site uses modern JavaScript libraries such as jQuery and AOS for animations, and integrates Google Tag Manager and LinkedIn Insight for marketing analytics. Security posture is good with HTTPS enforced and secure forms, but lacks some security headers and explicit incident response policies. Privacy compliance is strong with GDPR-aligned privacy and cookie policies and consent mechanisms. The absence of WHOIS data reduces domain trustworthiness, but the professional presentation and detailed contact information support legitimacy. Overall, the site is a credible and effective marketing platform with room for security enhancements.

Price-check.eu is a professional European B2B SaaS platform specializing in real-time online price monitoring and comparison for e-commerce businesses and suppliers. The company, operated by E-solutions, s.r.o., offers advanced tools for tracking product prices, stock availability, and market trends to support efficient pricing strategies. The website is well-designed, mobile-optimized, and provides comprehensive business information targeting German-speaking markets. Technically, the site uses modern frameworks such as Vue.js and Bootstrap, integrates Google Tag Manager and Analytics, and enforces HTTPS for secure communications. However, it lacks visible security headers and explicit privacy and terms of service pages, which are recommended for compliance and trust. No WHOIS registrant data is available due to EURid privacy policies, but the domain and website content appear legitimate and consistent with the business claims. Overall, the site demonstrates a solid security posture with room for improvement in privacy transparency and security best practices.

Price-check.sk is a professional online price monitoring and comparison tool operated by E-solutions, s.r.o., targeting e-shops and product distributors primarily in Slovakia and surrounding European markets. The platform offers real-time data monitoring, price alerts, reporting, and analytics to support efficient pricing strategies in B2C and B2B environments. The website demonstrates a solid market position with references from reputable brands and a consistent, professional digital presence. Technically, the site uses modern web technologies including Vue.js, Google Tag Manager, and is hosted on Websupport with DNSSEC and HTTPS properly configured, ensuring a secure and performant user experience. However, the site lacks explicit privacy and terms of service pages and does not provide direct contact information, which slightly impacts privacy compliance and user trust. Security posture is strong with no visible vulnerabilities, but could be improved by adding security headers and incident response contacts. Overall, the website is trustworthy, well-designed, and serves its business purpose effectively.

Price-check.com is a professional SaaS platform operated by E-solutions, s.r.o., specializing in real-time price monitoring and comparison for products across European online markets. The service targets online retailers and distributors, providing comprehensive data analytics, alerts, and reporting to support pricing strategies in B2C, B2B, and contractor environments. The website is well-structured, multilingual, and showcases a solid client base through references and logos. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, and responsive design elements, ensuring good user experience and SEO optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit privacy policies indicates room for improvement. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the active and professional website presence. Overall, the site scores well on content quality and business credibility but should address compliance and transparency gaps to enhance trust.

K

ČKA - online výsledky

kuzelky.com

45

The website kuzelky.com serves as an online portal for bowling (kuzelky) results and league information primarily targeting the Czech bowling community. It provides schedules, live results, club contacts, and administrative login capabilities. The site is niche-focused, catering to players, clubs, and fans within the Czech Republic, and is supported by a domain registered since 2007, indicating a stable presence in its market segment. The business model revolves around providing timely sports results and league management information rather than commercial transactions or e-commerce. Technically, the site employs traditional web technologies including XHTML 1.0 Transitional, JavaScript with jQuery, and SweetAlert2 for UI dialogs. It uses XMLHttpRequest for dynamic content loading and is hosted via the registrar Gransy, s.r.o. The site shows moderate performance and basic mobile optimization but lacks modern CMS or frameworks. SEO and accessibility features are minimal, and the design is functional but basic. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers such as Content Security Policy or HSTS. The login form does not show advanced protections like CAPTCHA or anti-CSRF tokens. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. The WHOIS data is consistent with the website’s Czech focus and shows no suspicious patterns. Overall, the site is moderately trustworthy and functional for its purpose but requires improvements in privacy compliance, security hardening, and modernization of technical infrastructure to enhance user trust and regulatory adherence.

T

TTS energo s.r.o.

ttsenergo.cz

36

TTS energo s.r.o. is a regional energy company based in Třebíč, Czech Republic, specializing in the production and distribution of heat energy primarily from biomass. The company positions itself as a pioneer in biomass heat production within the Czech Republic and emphasizes environmental responsibility and local community support. Their services include heat production, customer benefits, emergency dispatch services, and technology projects. The website reflects a medium-sized enterprise with a professional online presence and clear business focus. Technically, the website is built on WordPress using common libraries such as jQuery, Modernizr, and Google Maps API. SEO is enhanced by the Yoast SEO plugin, and performance optimizations are implemented via WP Rocket. The site is mobile-optimized and uses HTTPS with strong SSL configuration. However, some security best practices like security headers and cookie consent mechanisms are missing or not detected. From a security perspective, the site demonstrates a moderate security posture with HTTPS enforced and anonymized IP tracking in analytics. The presence of a whistleblowing directive and GDPR privacy policy indicates some compliance awareness. The absence of WHOIS data is a concern for domain legitimacy and trust, though the website content and business information appear professional and consistent. Overall, the site is trustworthy and functional with room for improvement in security headers, privacy compliance (cookie consent), and domain registration transparency. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing incident response contacts, and verifying domain WHOIS information to strengthen trust and compliance.

The website sazkovekancelare.cz is currently inaccessible due to a Cloudflare security challenge page employing Turnstile CAPTCHA, which blocks direct access to the site's content. This prevents extraction of any meaningful business, compliance, or contact information. The domain was registered in 2018 with REG-ACTIVE24 and uses Cloudflare nameservers, indicating a standard setup for security and performance. Due to the blocking, no privacy policies, cookie consent mechanisms, or terms of service are detectable. The technical infrastructure relies on Cloudflare's security platform, but no further details on CMS or frameworks are available. The security posture cannot be fully assessed given the lack of accessible content, but the presence of Cloudflare WAF and CAPTCHA indicates a baseline security measure. Overall, the site cannot be fully analyzed, and the risk assessment is limited by the lack of accessible data.

The website www.ruik.cz is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct content access. No business-related content, contact information, or policies are available for analysis. The domain WHOIS data is unavailable, indicating either privacy protection or lack of registration, which limits trust and legitimacy assessment. The technical infrastructure relies on Cloudflare for security and performance, but no further technology or CMS details are discernible. Security posture is limited to the presence of Cloudflare's WAF, but no additional security headers or configurations are visible. Overall, the site lacks transparency and content, resulting in a low trust and credibility score.

Česká Asociace Univerzitního Sportu (ČAUS) is a Czech non-profit organization dedicated to promoting university sports and organizing academic sports competitions within the Czech Republic. The website serves as the official platform for disseminating information about competitions, events, and representation of Czech students in sports at various levels. The organization has a well-established presence since 2006 and maintains partnerships with national and international sports bodies. The site targets students, university sports participants, and organizers within the academic sports community.

Č

Česká kuželkářská a bowlingová federace

ckbf.cz

45

Česká kuželkářská a bowlingová federace (ČKBF) is the national governing body for ninepin and tenpin bowling sports in the Czech Republic. It operates as a non-profit sports federation overseeing its two organizational units, the Czech Ninepin Bowling Association (ČKA) and the Czech Bowling Association (ČBA). The federation manages sport governance, competition organization, membership, talent development, and represents the Czech Republic in international bowling organizations such as IBF, WNBA, and ETBF. The website provides comprehensive information about the federation's activities, partners, official documents, and contact details, targeting amateur and professional players, clubs, and sports enthusiasts within the Czech Republic.

Z

Zako Slovakia, s. r. o.

zakobowling.com

45

Zako Slovakia, s. r. o. operates the website zakobowling.com, providing services and products related to the realization, reconstruction, and maintenance of skittles and bowling lanes. The company also offers an e-commerce platform selling spare parts and accessories for these sports. The business targets sports centers and enthusiasts primarily in Slovakia, positioning itself as a niche regional provider with a small business scale. The website is multilingual, supporting Slovak and several other European languages, enhancing accessibility for a broader audience. Technically, the website is built on WordPress, utilizing common plugins such as Yoast SEO for search optimization, TranslatePress for multilingual support, and Moove GDPR Cookie Compliance for privacy management. Hosting is provided by Websupport, indicated by the domain's nameservers. The site demonstrates moderate performance and basic mobile optimization, with a functional but basic design and navigation structure. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, aligning with GDPR requirements. However, it lacks DNSSEC, security headers, and published security or incident response policies, which are areas for improvement. No critical vulnerabilities or malicious content were detected. The domain registration is consistent and legitimate, though the domain is relatively new compared to the website's content history, suggesting a possible domain migration or re-registration. Overall, the website presents a functional and moderately secure platform for its business operations but would benefit from enhanced privacy disclosures, security hardening, and more comprehensive contact information to improve trust and compliance.

U

UniBind

unibind.sk

49

UniBind is a specialized manufacturer and provider of innovative thermal binding systems and professional binding technology, targeting businesses and professionals who require high-quality document presentation solutions. The company emphasizes speed, durability, and customizable design in their products, offering a range of binding machines and covers. The website is built on Joomla CMS with the Gridbox builder, incorporating modern web technologies such as Bootstrap and jQuery, and includes embedded video content and e-commerce links. Security posture is generally good with HTTPS and reCAPTCHA usage, but lacks explicit privacy and cookie policies, which are important for GDPR compliance. The site is fully accessible without WAF or blocking mechanisms, and WHOIS data confirms legitimacy and consistency with the business claims.

CET Group Co., Ltd. is a well-established global manufacturer specializing in high-quality compatible spare parts and consumables for the office imaging industry. Founded in 1996 and headquartered in Beijing, China, CET Group has expanded its operations worldwide with subsidiaries in the USA, Japan, Singapore, Russia, Dubai, and Central Asia. The company offers a broad product portfolio including toner cartridges, drum units, fuser assemblies, bulk toner, and precision parts, supported by strong R&D and quality control centers. CET Group positions itself as a leader in the office imaging consumables market with a focus on innovation, quality, and customer satisfaction. Technically, the website is built using modern web technologies including React and Next.js, with a responsive design and good SEO practices. The site performs moderately well and provides a professional user experience with clear navigation and comprehensive content. However, some accessibility features could be improved. From a security perspective, the website uses HTTPS and follows basic best practices but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Overall, CET Group's website reflects a credible and professional business with a strong global presence and solid technical infrastructure. Strategic improvements in security policies, privacy compliance, and accessibility could further enhance trust and compliance.

O

Olicom International S.r.l.

olicom-group.com

41

Olicom International S.r.l. is a medium-sized Italian company specializing in manufacturing and providing specialized printing solutions and equipment, including banking and postal terminals, retail terminals, kiosks, interactive terminals, and industrial moulds. The company positions itself as a market leader in banking automation, serving primarily financial institutions and retail sectors. Their website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the website is built on Joomla CMS with modern UI frameworks such as Semantic UI and UIkit, and includes standard analytics and spam protection tools like Google Analytics and reCAPTCHA. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and DNSSEC. The WHOIS data is consistent and supports the legitimacy of the business. Overall, the website is functional, professional, and trustworthy but could improve in security and compliance transparency.