High-risk security reports

SLUTO s.r.o. operates an online platform (sluto.online) providing electronic tax forms and declarations primarily targeting Czech-speaking users. The website offers a streamlined service for submitting tax-related documents such as annual tax reconciliations. The business appears to be a small-sized entity founded in 2021, with a niche focus in the tax services sector. The site is professionally designed with consistent branding and clear navigation, supporting both Czech and English languages. Technical infrastructure is based on WordPress CMS hosted likely by Websupport, utilizing common plugins and Google Analytics for visitor insights. The site implements a cookie consent mechanism aligned with GDPR requirements, although a dedicated privacy policy page on the domain is absent, with references to an external domain for cookie usage information. Security posture is adequate with HTTPS enforced and no obvious vulnerabilities detected, but lacks advanced security headers and explicit security policies. Overall, the website is functional, trustworthy, and compliant with basic privacy standards, serving its target audience effectively.

S

Site officiel de la Ville de Tarbes

tarbes.fr

48

The website www.tarbes.fr serves as the official digital portal for the city of Tarbes, France, providing residents and visitors with comprehensive information about municipal services, news, urban planning, social programs, and cultural activities. The site is positioned as a key communication channel for the local government, offering a broad range of public service information and administrative resources. The target audience primarily includes local citizens, businesses, and visitors seeking official city information. Technically, the website is built on the WordPress CMS platform, utilizing popular plugins such as Yoast SEO for search engine optimization and Matomo for analytics, alongside Google Analytics which is disabled by default pending user consent. The site incorporates modern web technologies including jQuery, FontAwesome, and Leaflet for interactive maps. Mobile optimization and navigation clarity are well addressed, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR principles. However, the absence of a published privacy policy, terms of service, and incident response contact information represents gaps in compliance and transparency. The WHOIS data is unavailable, which slightly reduces trustworthiness but does not detract significantly given the official nature and branding of the site. Overall, the website demonstrates a solid foundation in content quality, technical implementation, and business credibility, with room for improvement in privacy compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and terms documents, enhancing security headers, and establishing clear incident response channels to strengthen trust and compliance.

K

Klasik dutalon

klasikduatlon.cz

42

The website klasikduatlon.cz is dedicated to organizing and promoting duathlon events in Příbram, Czech Republic, targeting athletes and sports enthusiasts. It provides detailed information about race categories, schedules, registration, and event logistics. The site is built on WordPress using common libraries such as jQuery and Bootstrap, with moderate mobile optimization and basic SEO features. However, it lacks critical security features such as HTTPS and security headers, and does not provide privacy or cookie policies, which are essential for compliance and user trust. The domain registration data is inconsistent with the website's content timeline, raising questions about the domain's history and ownership transparency. Overall, the site serves its business purpose but requires significant improvements in security and compliance to enhance trustworthiness and protect users.

Tyvado is a Czech company specializing in modern shading technology products including awnings, blinds, pergolas, and insect screens. The company targets homeowners and investors seeking comfort, ecological solutions, and energy savings. With over 12 years of experience and more than 200 completed projects, Tyvado positions itself as a trusted provider in the local market. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options including a detailed contact form and physical address. Technically, the site uses common web technologies such as jQuery and Google Analytics, with HTTPS enforced and cookie consent implemented. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. Security headers are not detected, suggesting room for improvement in security posture. Overall, the website is safe, professional, and compliant with GDPR requirements, but would benefit from enhanced security policies and domain legitimacy verification.

P

Poweryoga-pilates

poweryoga-pilates.cz

35

Poweryoga-pilates.cz is a small local fitness and wellness service provider based in Příbram, Czech Republic, specializing in Power Yoga and Pilates classes. The website serves as an informational and promotional platform for the business, offering schedules, articles, videos, and contact details. The business appears well-established with a domain age since 2009, targeting a general audience interested in health and fitness. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, and integrates several plugins for forms, galleries, and video embedding. The site is mobile optimized and uses HTTPS, ensuring secure communication. Security posture is moderate with use of Google reCAPTCHA and no visible vulnerabilities, though it lacks some security headers and a cookie consent mechanism. Contact information is clearly presented, including email, phone, and physical addresses, enhancing business credibility. Overall, the website is professional, trustworthy, and compliant with basic GDPR requirements.

P

Potisk Vylita

vylita.cz

39

Potisk Vylita is a Czech Republic-based company specializing in high-quality one- and multicoloured industrial and promotional printing services. Positioned as one of the largest printing companies in the Czech Republic, they offer rapid turnaround times including bulk orders, design proposals, and sample evaluations. Their business model focuses on B2B manufacturing and printing services targeting companies requiring customized printed products. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, including a GDPR-compliant privacy policy page. Technically, the website is built on WordPress using Bootstrap and jQuery, with Google reCAPTCHA implemented for form security. The site uses HTTPS with good SSL configuration but lacks some advanced security headers. Advertising is limited to Google Ads and Seznam Retargeting, with minimal user tracking observed. The site lacks explicit cookie consent mechanisms and security or incident response policies. Security posture is solid with HTTPS and reCAPTCHA, but could be improved by adding security headers and publishing incident response contacts. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact details support legitimacy. Overall, the site is safe, business-focused, and compliant with GDPR, with room for security and privacy enhancements. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and maintaining up-to-date software to enhance trust and compliance.

Spolek Prokop Příbram is a Czech non-profit association dedicated to preserving the mining heritage and cultural traditions of the Příbram region. Founded in 1992, it continues the legacy of a historical mining student association and engages the community through cultural, educational, and sporting events. The organization collaborates with local government, museums, and other cultural institutions to maintain mining sites and promote regional history. Technically, the website is built on WordPress using Bootstrap and jQuery, hosted under a Czech registrar with DNS servers from forpsi.it/cz/net. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. No advanced analytics or tracking tools are detected, reflecting a minimal data collection approach. From a security perspective, the site uses HTTPS but lacks security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security best practices. No vulnerabilities or exposed sensitive data were found in the HTML content. The domain registration data aligns well with the website's stated purpose and location, supporting legitimacy. Overall, the website presents a trustworthy and professional front for a small non-profit cultural association but should enhance privacy compliance and security headers to improve its security posture and user trust.

T

Točírna z.s.

tocirna.cz

42

Točírna z.s. is a small ceramic workshop located in Příbram, Czech Republic, offering a variety of ceramic courses and workshops for children and adults. The business focuses on providing a calm and family-friendly environment for creative ceramic activities, including regular weekly courses, one-time thematic workshops, open studio sessions, and summer camps. The website is professionally designed with clear navigation and relevant content tailored to its target audience of ceramic enthusiasts and learners. Technically, the site is built on WordPress with common plugins for galleries, forms, and GDPR compliance, and it uses HTTPS with Google reCAPTCHA for security on contact forms. However, the absence of WHOIS data for the domain reduces the ability to fully verify domain legitimacy, though the presence of valid company registration and contact details supports trustworthiness. Overall, the website demonstrates good digital maturity for a small local business with appropriate privacy and security measures in place.

E

Etheris

etheris.cz

32

Etheris is a small artisanal business based in the Czech Republic specializing in unique, handcrafted ceramic products. The website showcases a variety of original ceramic items, emphasizing the artistic and positive energy aspects of the products. The business supports a local ceramic workshop, Točírna z.s., and operates primarily through direct sales and local engagement. The website is built on WordPress using common plugins and frameworks, providing a functional and visually appealing platform for product display and customer contact. From a technical perspective, the website employs standard web technologies including jQuery, Bootstrap, and WordPress CMS. SEO optimization is addressed through the All in One SEO plugin, and the site is mobile responsive at a basic level. Performance is moderate, with no major issues detected. However, some technical improvements could enhance security and compliance. Security posture is adequate with HTTPS enforced and a contact form that includes a privacy acceptance checkbox, indicating GDPR awareness. However, the absence of security headers and use of an older jQuery version present moderate risks. No explicit security policies or incident response contacts are published, which could be improved to enhance trust and compliance. Overall, the website is legitimate, professionally presented, and serves its niche market effectively. Strategic improvements in security headers, cookie consent mechanisms, and updated libraries would strengthen the security and compliance posture, supporting long-term business credibility and customer trust.

K

Kao.cz

kam-dnes-na-obed.cz

45

Kam-Dnes-Na-Oběd.cz (KDNO.cz) is a Czech Republic-based online directory specializing in listing restaurants, daily lunch menus, culinary experiences, and related events within various Czech districts. Founded in 2010 and operated by Kao.cz, the platform serves as a regional hospitality guide targeting general consumers seeking dining options and event information. The business model revolves around providing comprehensive restaurant listings, event updates, and advertising opportunities for hospitality providers. The website maintains a consistent brand presence and offers structured data to enhance search visibility.

Asia Bistro Příbram operates a local restaurant business specializing in Asian cuisine with an online ordering platform. The website provides daily menu selections and ordering options for the upcoming week, targeting local customers in Příbram. The business model is straightforward, focusing on dine-in and takeaway food services with temporarily suspended delivery. The website is modest but functional, reflecting a small local business with limited digital sophistication. Technically, the website uses standard web technologies including Bootstrap for responsive design and jQuery for scripting. Hosting is provided by Websupport, a known Czech hosting provider. The site is mobile-optimized with basic accessibility and SEO features but lacks advanced frameworks or CMS platforms. Performance is moderate with no evident technical debt but opportunities exist for modernization and enhanced user experience. From a security perspective, the site uses HTTPS and includes anti-CSRF tokens in forms, indicating some security awareness. However, no security headers were detected, and there is no visible privacy or cookie policy, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided. The absence of contact emails and phone numbers reduces business credibility and user trust. Overall, the website is safe with no adult or questionable content. The domain registration is consistent and appropriate for the business age and location. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and regulatory adherence.

B

BISTROOO

bistrooo.cz

45

Bistrooo is a small hospitality business based in Příbram, Czech Republic, offering breakfast, soups, hot meals, and daily menus. The website presents a clear business focus on local food service with reservation capabilities and business hours. The technical infrastructure is built on the Webnode CMS platform, leveraging AWS Cloudfront CDN and Google Tag Manager for analytics. The site is accessible, mobile-optimized, and has a good user experience, though it lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing security headers and privacy compliance elements. The absence of WHOIS data limits domain legitimacy verification, which impacts trustworthiness. Overall, the site is functional and professional but requires improvements in privacy compliance and security best practices.

B

Brdský běžecký pohár

brdskypohar.cz

44

The website 'Brdský běžecký pohár' serves as a regional platform dedicated to organizing and promoting running events and athletic competitions primarily in the Příbram area of the Czech Republic. It offers detailed information about upcoming races, results, photo galleries, and registration options, targeting runners, athletes, and local sports enthusiasts. The business model revolves around event organization, community engagement, and race facilitation, positioning itself as a key regional sports event organizer. Technically, the website employs a modern tech stack including HTML5, CSS, JavaScript with jQuery and Bootstrap 5 frameworks, and integrates Google Analytics for visitor tracking. The site is hosted under a Czech registrar with appropriate DNS settings and uses HTTPS for secure communication. Mobile optimization and user experience are good, though accessibility and SEO could be improved. From a security perspective, the site benefits from HTTPS but lacks visible security headers and a formal privacy or cookie policy, which are important for GDPR compliance. No vulnerability disclosure or incident response information is provided. The use of Google Analytics without a cookie consent mechanism indicates potential privacy compliance gaps. Overall, the website is functional, content-rich, and trustworthy for its intended audience but would benefit from enhanced privacy compliance, improved security headers, and formal policies to strengthen its security posture and regulatory adherence.

F

Fundación Parque Científico de Madrid

fpcm.es

46

Fundación Parque Científico de Madrid (FPCM) is a non-profit foundation established in 2001 by two major Spanish universities to foster scientific and technological entrepreneurship and innovation. The organization provides office and laboratory spaces, R&D services, business acceleration, and international programs to support deep tech entrepreneurs and innovators. The website reflects a mature digital presence with professional design, clear navigation, and compliance with privacy regulations. Technically, the site is built on WordPress with Elementor and integrates SEO and analytics tools, demonstrating a modern and maintainable infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though additional HTTP security headers and published security policies could enhance trust. Overall, the site is trustworthy, well-branded, and serves its target audience effectively.

A

ASEALEN

asealen.es

46

ASEALEN is a Spanish association representing over 40 companies focused on promoting the use of energy storage technologies. Positioned as a key sector advocate, ASEALEN provides technical and legal advisory, disseminates sector news, and fosters collaboration among stakeholders. The website reflects a professional and well-structured digital presence, leveraging WordPress with Elementor and SEO best practices to engage its target audience effectively. The association maintains active social media channels on Twitter and LinkedIn, enhancing its outreach and credibility. Technically, the site uses modern web technologies and includes GDPR-compliant privacy and cookie policies with consent mechanisms. Security posture is solid with HTTPS enforced, though some security headers could be improved. WHOIS data is unavailable due to registry restrictions, but the website content and presentation support legitimacy. Overall, ASEALEN demonstrates a mature digital footprint suitable for its role as a sector leader in energy storage in Spain.

D

Digital Depo | Strategický online marketing a weby do celého světa

digitaldepo.cz

43

Digital Depo is a Czech-based digital agency specializing in strategic online marketing and website development services aimed at businesses seeking to expand their online presence globally. The website is built on WordPress using the Elementor framework, incorporating modern web technologies and multiple analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. The site demonstrates good design quality, mobile optimization, and SEO practices, although some accessibility features are basic. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit security policies. The absence of public WHOIS data due to privacy protection limits full trust assessment, and no explicit privacy or cookie policies were found, indicating room for compliance improvement.

C

CoopCircuits

coopcircuits.fr

48

CoopCircuits is a French cooperative e-commerce platform founded in 2019 that facilitates short food supply chains by leveraging the open source Open Food Network software. It enables organizers and consumers to collaboratively manage and participate in local organic product distribution. The platform supports diverse economic models and emphasizes community governance and transparency. Technically, the site uses modern frameworks such as AngularJS and Ruby on Rails, integrates secure payment processing via Stripe, and employs error monitoring with Bugsnag. The website is well-designed, mobile-optimized, and provides clear navigation and relevant content. Security posture is strong with HTTPS enforced, PCI-compliant payments, and no visible vulnerabilities, though some security headers could be improved. Privacy and legal policies are present and GDPR compliant, though cookie consent mechanisms could be enhanced. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

A

Agence Parisienne du Climat

adaptaville.fr

47

Adaptaville.fr is a French-language informational platform initiated by the Agence Parisienne du Climat, focused on providing ecological solutions to adapt to climate change in the Île-de-France region. The website serves local authorities, policymakers, and ecological actors by listing proven adaptation solutions, offering news, resources, and a map of solutions. The platform operates as a non-profit, supported by partnerships with public entities such as Métropole du Grand Paris and Ville de Paris. Technically, the site uses modern JavaScript libraries like jQuery and Lucide icons, and employs Plausible Analytics for privacy-conscious user tracking. The hosting is provided by Infomaniak Network SA, a reputable registrar and hosting provider. Security posture is adequate with HTTPS enforced, but lacks visible security headers and cookie consent mechanisms. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the site is professional, trustworthy, and well-branded, though improvements in privacy compliance and security headers are recommended.

CoachCopro is a French public service platform dedicated to supporting co-ownerships in their energy renovation projects. It operates as part of the national energy renovation service, France Rénov'. The website provides informational resources and accompaniment services tailored to co-ownership renovation needs. Technically, the site is built using modern JavaScript frameworks such as Nuxt.js and Vue.js, with integration of the TinyMCE editor for content management. The site demonstrates good design quality and user experience, optimized for mobile devices, but lacks comprehensive privacy and cookie policies, which are critical for compliance. Security posture is moderate due to absence of visible security headers and unknown SSL configuration. WHOIS data is unavailable, which raises concerns about domain registration transparency. Overall, the platform appears legitimate and focused on its public service mission but would benefit from enhanced compliance and security measures.

The website leadexplorer.com is currently inaccessible, returning a 503 Service Temporarily Unavailable error with minimal HTML content. Due to this, no business content, metadata, or contact information could be extracted or analyzed. The domain is registered with Amazon Registrar, Inc. since 2015, indicating a potentially established business presence, but the lack of accessible content prevents validation of business operations or services. Technically, the site lacks visible security headers, privacy policies, or any compliance indicators. The security posture cannot be fully assessed, but the absence of HTTPS and security best practices is a concern. Overall, the site is currently non-functional from a user and security perspective, resulting in a low AI score and limited insights.

H

HZ Vinařství s.r.o.

valtickepodzemi.cz

49

Valtické Podzemí is a hospitality and wine tourism business based in the Czech Republic, specializing in historic wine cellar tours, wine tastings, and cultural events. The company operates a unique project connecting 13 historic wine cellars dating back to the 13th century, offering individual visits, group programs, and private events. The business holds a prestigious award, CHAMPION TOP VINAŘSKÝ CÍL ČR, underscoring its quality and reputation in the local market. The website is professionally designed, mobile-optimized, and rich in relevant content targeting wine enthusiasts, tourists, and corporate clients. Technically, the website is built on WordPress with modern JavaScript libraries such as Swiper.js and AOS for animations. It employs performance optimization tools like WP Rocket and SEO enhancements via Yoast SEO. The site uses Google Tag Manager and Microsoft Clarity for analytics and tracking, with a GDPR-compliant cookie consent mechanism in place. Social media integration and partner links further enhance its digital presence. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks explicit security policy and incident response information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust verification, but the presence of clear contact information and business details supports legitimacy. Overall, the site demonstrates a strong security posture with room for improvement in transparency and formal security documentation. Strategically, the business should focus on publishing a security policy, establishing incident response contacts, and enhancing domain registration transparency to improve trust. Continued monitoring of third-party scripts and regular security audits will help maintain a robust security posture. The website's excellent content quality and user experience position it well for growth in the wine tourism sector.

E

ESSENS Restaurant

essensrestaurant.cz

41

ESSENS Restaurant is a fine dining establishment located in South Moravia, Czech Republic, offering Michelin-quality gastronomic experiences focused on regional and seasonal ingredients. The website presents a professional and visually appealing interface with clear navigation and multilingual support, targeting discerning clients seeking high-end culinary experiences. The technical infrastructure leverages popular front-end libraries such as Bootstrap, jQuery, and Flexslider, alongside tracking and marketing tools including Google Tag Manager, Facebook Pixel, and Adform. While the site is mobile optimized and performs moderately well, some libraries are outdated and security headers are not evident, indicating room for improvement in security posture. The absence of privacy and cookie policies and missing WHOIS data represent compliance and trust concerns. Overall, the website is functional and professional but would benefit from enhanced security and privacy measures to align with best practices and regulatory requirements.

V

Vinařství Hraniční Zámeček

hzvinarstvi.cz

47

Vinařství Hraniční Zámeček is a small premium winery based in Lednice, Czech Republic, offering exclusive wines and hospitality services including a hotel resort and wine tastings. The website is professionally designed using WordPress and Elementor, featuring modern SEO practices and structured data to enhance search visibility. Privacy and cookie policies are implemented with GDPR compliance, and tracking technologies such as Google Tag Manager and Facebook Pixel are used for marketing and analytics. However, no direct contact emails or phone numbers are found on the site, and WHOIS data is unavailable, which slightly reduces transparency. Security posture is good with HTTPS and cookie consent, but could be improved with additional security headers and explicit vulnerability disclosure. Overall, the site presents a trustworthy and mature brand image targeting wine consumers and hospitality guests.

S

SUNLUX, s.r.o.

sunlux.cz

45

SUNLUX, s.r.o. is a Czech Republic-based company specializing in photovoltaic energy solutions for residential, commercial, and industrial clients. With over 15 years of experience since 2009, the company offers comprehensive services including design, consultation, installation, and ongoing maintenance of photovoltaic systems. Their market position is supported by multiple certifications and memberships in industry organizations, reflecting a strong local presence and expertise in renewable energy solutions. The website is professionally designed using WordPress and Elementor, optimized for performance and mobile devices, and includes a cookie consent mechanism to comply with privacy regulations. However, explicit privacy and terms of service pages are not found, which could be improved for better compliance and transparency. The company uses Google Tag Manager for analytics and tracking, indicating a moderate level of user data collection.

The website ivisitprague.com is a small-scale tourism service provider specializing in tours and travel assistance in Prague, Czech Republic. Established in 2015, the business targets tourists seeking local travel experiences. The website is built on WordPress using the Elementor framework, featuring a professional and consistent design optimized for mobile devices. The technical infrastructure is moderate in performance, hosted by Forpsi, with HTTPS enabled ensuring secure connections. However, DNSSEC is not enabled, and security headers are absent, indicating room for improvement in security posture. Privacy and cookie policies are not present, which may affect compliance with GDPR and user trust. Contact information is limited to contact forms without explicit emails or phone numbers. Overall, the website presents a moderate risk profile with good business credibility but requires enhancements in privacy compliance and security best practices.

S

Svatební centrum Caxa Brno

caxabrno.cz

49

Svatební centrum Caxa Brno is a well-established wedding and formal wear rental and sales business located in Brno, Czech Republic. The company offers a wide range of wedding dresses, formal dresses, men's suits, and accessories, complemented by wedding coordination services. The website reflects a professional and comprehensive digital presence with rich content, customer testimonials, and active social media engagement. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern plugins and tracking tools such as Google Analytics and Facebook Pixel. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits domain trust verification, but the overall business credibility is supported by consistent branding and detailed service offerings. Privacy compliance is strong with clear policies and consent management. Strategic recommendations include enhancing security headers, adding incident response information, and maintaining up-to-date software to mitigate vulnerabilities.

A

Artyp

artyp.cz

49

Artyp is a small artisanal e-commerce business based in the Czech Republic specializing in handcrafted, hand-painted wedding invitations, birthday and christening invitations, and related paper goods. The company emphasizes originality, quality, and eco-friendly packaging, targeting individuals planning special events. The website is professionally designed with good content quality, clear navigation, and mobile optimization. It uses a modern technology stack including jQuery, Bootstrap, Google Analytics, and Facebook Pixel, supporting a mature digital presence. Security posture is solid with HTTPS and CAPTCHA protections, though lacking some HTTP security headers and formal security policies. Privacy compliance is partial with a cookie consent mechanism but no dedicated privacy policy page found. Contact information is clear and trustworthy, supported by customer testimonials and social media presence. However, the absence of WHOIS registration data limits domain trust assessment, which is a notable risk factor.

C

Catering Brno Slunečnice

cateringbrnoslunecnice.cz

49

Catering Brno Slunečnice is a small hospitality business specializing in comprehensive catering services for events such as weddings, corporate parties, and family celebrations in Brno and surrounding areas. The company operates under the Slunečnice Food network with multiple related venues, emphasizing quality and customer service. The website is professionally designed using the Webnode CMS platform, leveraging modern CDN and analytics technologies to deliver content efficiently. However, the absence of privacy and cookie policies and lack of visible contact information limit its compliance and trustworthiness. The security posture is generally good with HTTPS enforced, but missing security headers and incident response details are areas for improvement. The domain WHOIS data is unavailable, which raises concerns about registration transparency and business legitimacy. Overall, the site is safe, well-structured, and suitable for its target audience but requires enhancements in privacy compliance and business transparency to improve trust and security.

T

Tangible design festival

tangible-festival.org

44

The Tangible design festival website represents a cultural event based in Marseille, France, dedicated to various forms of design expression. The festival is scheduled for October 2025 and features exhibitions, workshops, and meetings across multiple local venues. The business model centers on event organization and cultural promotion within the local design community, targeting a general audience interested in contemporary design and art. Technically, the website is built with modern web standards including HTML, CSS, and JavaScript, and uses HTTPS with hosting provided by OVH sas. The site includes minimal external dependencies, notably the Umami analytics platform for visitor tracking. The site is mobile optimized and accessible with good SEO practices, but lacks advanced frameworks or CMS platforms. From a security perspective, the site benefits from HTTPS and domain status protections but lacks DNSSEC and security headers, which are recommended for enhanced security. No privacy or cookie policies are present, and no contact or incident response information is provided, indicating gaps in compliance and user trust features. The WHOIS data shows a suspicious future domain creation date, which undermines domain legitimacy and trustworthiness. Overall, the website is functional and professionally designed for its purpose but requires improvements in privacy compliance, security hardening, and transparency to enhance trust and regulatory adherence.

G

GEISTER MEDIZINTECHNIK GMBH

gbluelabel.de

41

GEISTER MEDIZINTECHNIK GMBH is a well-established German company specializing in the manufacture and supply of premium surgical instruments under the G BLUE LABEL™ brand. With a heritage spanning approximately 100 years, the company targets medical professionals and institutions requiring high-quality, innovative surgical tools. Their business model is primarily B2B, focusing on product excellence and custom solutions to meet surgical needs. The website reflects a professional and consistent brand image, supporting their market position as a premium instrument provider. Technically, the website employs modern JavaScript frameworks such as Vue.js and Axios, alongside jQuery and FontAwesome for UI elements. The site is mobile-optimized with good navigation and SEO practices, though performance is moderate. The CMS appears custom-built with PHP components. Analytics are implemented via Google Analytics and Tag Manager, indicating moderate user tracking. From a security perspective, the site uses HTTPS and includes verification meta tags for Google and Facebook, but lacks visible security headers and explicit cookie consent mechanisms. No sensitive data exposure or vulnerabilities were detected in the content. The WHOIS data is minimal but consistent with the business, showing no suspicious patterns. However, contact information is not explicitly provided on the main page, which could impact user trust. Overall, the website is professional and trustworthy with room for improvement in privacy compliance and security best practices. Strategic enhancements in cookie consent, security headers, and contact transparency would strengthen their security posture and user confidence.

P

Pražské Ulice

prazskeulice.cz

43

Pražské Ulice is a Czech website dedicated to showcasing urban projects related to Prague's streets, squares, embankments, and islands. It serves as an informational and promotional platform targeting the general public interested in local urban development. The site features launched projects, blog articles, photo galleries, and cooperation opportunities, positioning itself as a niche local informational resource. Technically, the website employs common web technologies such as jQuery, Bootstrap, Google Analytics, and Facebook SDK, with moderate performance and good mobile optimization. Security-wise, HTTPS is enabled and cookie consent mechanisms are in place, but the site lacks advanced security headers and explicit privacy or security policies. The absence of WHOIS registration data reduces transparency and trustworthiness, although the website content and structure appear legitimate and professional. Overall, the site scores moderately in content quality, technical implementation, security posture, privacy compliance, and business credibility.

T

Trendy Living

trendy-living.cz

44

Trendy Living is a Czech lifestyle and home decor website providing articles, tips, and product reviews focused on modern living and furniture. The site targets a general audience interested in home improvement and lifestyle trends. It operates primarily as a content publisher with advertising and partner promotions as key revenue streams. Technically, the website uses a mix of popular frontend libraries including jQuery, Bootstrap, and various sliders, along with Google Analytics and Facebook SDK for analytics and marketing. The site is served over HTTPS and includes a cookie consent mechanism, indicating some level of privacy compliance. However, explicit privacy policy and terms of service pages are not found, which is a compliance gap. Security posture is moderate with HTTPS and reCaptcha implemented but lacks security headers. WHOIS data is unavailable, likely due to privacy protection, which reduces transparency but does not indicate malicious intent. Overall, the website is functional, professionally designed, and moderately secure, suitable for its business purpose.

V

Víkendový RELAX

vikendovyrelax.cz

44

Víkendový RELAX is a Czech hospitality content platform focusing on wellness resorts, hotels, and relaxation destinations. The website provides curated articles and recommendations for travelers seeking weekend getaways and wellness experiences primarily within the Czech Republic. The business operates as a content and referral platform, targeting individuals interested in leisure and hospitality services. Technically, the site is built on the PublicMC CMS platform using Bootstrap and jQuery frameworks, integrating multiple third-party analytics and marketing tools such as Google Analytics, Facebook Pixel, and SmartLook. The website is mobile-optimized and features a cookie consent mechanism compliant with GDPR principles, although no explicit privacy policy or terms of service pages were found. Security posture is moderate with HTTPS enforced and reCAPTCHA implemented, but lacks security headers and detailed security policies. WHOIS data is unavailable, which reduces domain trustworthiness and suggests privacy protection or registration issues. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

GRAND Developer is a Czech online media platform specializing in real estate development projects, architectural news, interviews, and AI-generated content related to architecture and design. The website targets real estate developers, architects, and enthusiasts interested in the latest trends and projects in the Czech Republic and abroad. It operates under Studio Modern Creative and has been active since 2005, offering a niche content publishing business model supported by partnerships and advertising. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Analytics, Google Translate, and reCAPTCHA, with a custom CMS platform. The site is mobile-optimized with good SEO and basic accessibility features. Performance is moderate, and the site uses HTTPS with a cookie consent mechanism, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks explicit security headers and dedicated security policy pages. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a professional and trustworthy front with comprehensive content and good technical implementation. The absence of WHOIS data reduces transparency but is common for Czech domains. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party scripts to maintain security posture.

U

Ulice Újezd, Malá strana, Praha

uliceujezd.cz

43

The website www.uliceujezd.cz serves as a local business directory and promotional platform for the Ulice Újezd street area in Malá Strana, Prague. It highlights local hotels, restaurants, cafes, and shops, targeting local visitors and tourists interested in this specific neighborhood. The site offers listings, partner information, and newsletter subscription options, positioning itself as a niche hospitality and local commerce resource. Technically, the website employs a traditional web stack including jQuery, Bootstrap, Google Analytics, and Smartsupp chat integration. It uses Google Fonts and common JavaScript libraries for UI and analytics. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. Cookie consent mechanisms are implemented, indicating some level of privacy compliance, though a dedicated privacy policy page is absent. From a security perspective, the site uses HTTPS and includes CAPTCHA placeholders for form protection, but lacks visible security headers such as CSP or HSTS. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain reduces trustworthiness and complicates domain legitimacy assessment. Overall, the security posture is moderate but could be improved with enhanced headers and explicit privacy/security policies. The overall risk assessment suggests a functional and legitimate local business site with moderate technical maturity and privacy compliance. Strategic recommendations include adding a privacy policy, improving security headers, verifying WHOIS registration details, and enhancing accessibility and SEO to strengthen trust and compliance.

U

Ulice Na Příkopě , Praha 1

ulicenaprikope.cz

43

The website www.ulicenaprikope.cz serves as an informational and promotional platform focused on the Na Příkopě street area in Prague 1, highlighting local restaurants, cafes, shopping venues, hotels, and entertainment options. It targets visitors and customers interested in exploring this prominent commercial street. The business model is primarily a local directory and marketing platform for businesses in this area, with features such as partner listings and newsletter subscriptions. The site is small in scale and operates within the hospitality sector in the Czech Republic. From a technical perspective, the website employs a traditional tech stack including jQuery, Bootstrap, Google Analytics, SmartLook for session recording, and Facebook Pixel for marketing. The site shows moderate performance and good mobile optimization but lacks advanced accessibility features. SEO optimization is basic, and no CMS or hosting provider details are evident. The site uses HTTPS and includes a cookie consent mechanism, but no HTTP security headers were detected, indicating room for security improvements. Security posture is moderate with standard tracking and marketing tools integrated. The site uses cookie consent and CAPTCHA placeholders but lacks explicit privacy and security policies. No vulnerabilities or exposed sensitive data were identified in the content. The absence of WHOIS data reduces domain trustworthiness, suggesting privacy protection or registration issues. However, the website content is professional and safe, with no adult or questionable material. Overall, the site is functional and serves its business purpose well but would benefit from enhanced security headers, clearer privacy policies, and verified domain registration information to improve trust and compliance.

U

Ulice Vinohradská, Praha

ulicevinohradska.cz

43

The website www.ulicevinohradska.cz serves as a local business directory focused on Vinohradská street in Prague, highlighting restaurants, bars, hotels, shops, and other services. It targets local residents and visitors seeking information about businesses in this area. The platform operates as an informational and promotional tool for local hospitality and retail businesses, with a small-scale market presence. Technically, the site uses common web technologies including jQuery, Bootstrap, Google Analytics, and Facebook SDK, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. The absence of WHOIS registration data reduces domain trustworthiness, though the site content appears legitimate and safe for general audiences. Overall, the site is functional and professional but would benefit from enhanced security and compliance documentation.

B

BussinesMC

ulicenarodni.cz

45

The website www.ulicenarodni.cz serves as a local informational portal focused on the Národní street area in Prague 1, providing visitors and locals with details about hotels, restaurants, bars, cultural venues, theaters, and clubs. The site targets tourists and residents interested in cultural and hospitality services, positioning itself as a niche guide for this specific locality. The business model appears to be promotional and informational, likely monetized through partnerships and advertising. The site is operated by BussinesMC, a small entity with no publicly disclosed parent or subsidiaries. Technically, the website employs a traditional web stack with HTML5, CSS3, JavaScript, jQuery, and Bootstrap, supplemented by third-party analytics and marketing tools such as Google Analytics, Facebook Pixel, and SmartLook. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is adequate with GDPR-aligned cookie consent and a basic privacy policy. Overall, the website is trustworthy and professionally maintained, though it could benefit from enhanced security practices and more transparent business contact information.

The website rohanske-nabrezi.cz operates as a local Czech media outlet focused on the Rohanské nábřeží area in Prague, providing news, articles, and interviews related to business, culture, and lifestyle. The site is built on WordPress and uses common plugins such as Yoast SEO and Swiper.js for enhanced user experience. The content is well-structured and regularly updated, targeting a general audience interested in local developments and community topics. The business model centers on content publishing with a niche focus on the Karlín district and surrounding areas. Technically, the site is hosted on Czech hosting providers with a moderate performance profile and good mobile optimization. However, the Google Analytics plugin is present but not configured, indicating incomplete analytics implementation.

H

Hradčanské náměstí, Praha

hradcanske-namesti.cz

44

The website www.hradcanske-namesti.cz serves as a local informational and promotional platform focused on Hradčanské Square in Prague, highlighting restaurants, cafes, shops, and historical buildings. It targets tourists and local visitors interested in exploring this historic area. The business model appears to be centered on providing curated content and promoting local businesses, supported by newsletter subscriptions and partner listings. The site is small in scale and focused on hospitality and tourism within the Czech Republic. Technically, the website employs a moderately modern tech stack including jQuery, Bootstrap, Google Analytics, Google Tag Manager, and SmartLook for analytics and user interaction tracking. The site is mobile optimized with good user experience and basic SEO practices. However, no CMS or hosting provider details are evident. Performance is moderate, and accessibility is basic. From a security perspective, the site uses HTTPS and implements cookie consent with reCaptcha for form protection. However, no advanced security headers such as CSP or HSTS are detected, and there is no visible privacy policy or terms of service, which are important for compliance and trust. The WHOIS data is unavailable, likely due to privacy protection, limiting domain trust analysis. No contact emails or phone numbers are explicitly provided, which reduces business credibility slightly. Overall, the website is legitimate and functional for its purpose but would benefit from enhanced security headers, clearer privacy and contact information, and improved compliance documentation to strengthen trust and security posture.

B

BussinesMC

staromestske-namesti.cz

44

The website www.staromestske-namesti.cz serves as a promotional platform for Staroměstské náměstí (Old Town Square) in Prague, targeting tourists and visitors interested in local restaurants, bars, hotels, shops, and cultural attractions. The business behind the site appears to be a small local entity named BussinesMC, focusing on hospitality and tourism promotion. The site offers curated listings and a newsletter subscription to engage visitors. Technically, the website employs a moderate technology stack including jQuery, Bootstrap, Google Analytics, Facebook SDK, and SmartLook chat. It is mobile optimized with a good user experience and clear navigation. However, it lacks explicit CMS identification and some modern security headers. Performance is moderate with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and cookie consent mechanisms with detailed categories, including marketing and analytics cookies. Google reCaptcha is integrated for form protection. However, no explicit security or incident response policies are published, and no contact information is provided for security or abuse reporting. The absence of security headers and terms of service pages are notable gaps. Overall, the website is safe, professional, and trustworthy for general audiences, with no adult or questionable content. The domain uses privacy protection for WHOIS, which is justified for a small business. Recommendations include publishing privacy and security policies, adding security headers, and providing clear contact information to enhance trust and compliance.

The website 'Svět Notebooků' serves as a Czech language portal primarily focused on technology news, reviews, and local city information portals. It operates a network of city and thematic portals, targeting Czech-speaking audiences interested in technology and local news. The business model appears to be content-driven with advertising and partner services such as web development and AI training. Technically, the site uses modern frontend technologies including Tailwind CSS, Leaflet.js, and Google Analytics for tracking. The site is mobile-optimized with a responsive design and interactive menus. However, the main content area currently displays an internal database connection error, indicating backend issues that affect user experience and trust. Security posture is moderate with HTTPS implied but lacking visible security headers and cookie consent mechanisms. Privacy compliance is basic with GDPR and terms pages present but no explicit cookie policy or consent banner. Overall, the site is functional but requires backend fixes and enhanced security and privacy features to improve trust and compliance.

L

Liberec - informace z tohoto krásného města

libereconline.cz

49

The website libereconline.cz is a Czech language local news and information portal focused on the city of Liberec. It provides news articles, city updates, and links to related portals and services. The site is part of a broader network of city portals managed under the zpravodajstvionline.cz project. The business model appears to be media and advertising-driven, supplemented by partnerships offering web development and AI training services. The site targets residents and visitors interested in local news and city information. Technically, the site uses modern frontend technologies including Tailwind CSS, Leaflet.js for maps, AOS for animations, and Google Analytics for tracking. The site is mobile responsive and has a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though explicit security headers and cookie consent mechanisms are missing. Privacy and terms of service pages are available on a related domain, indicating some compliance with GDPR. Overall, the domain is legitimate, registered since 2011, and consistent with the website's purpose. Recommendations include adding cookie consent, improving security headers, and publishing explicit security policies to enhance trust and compliance.

P

Praha 2 - informace a aktuální zprávy z ČR

praha2online.cz

49

Praha2online.cz is a local news and information portal focused on Prague 2 and broader Czech Republic news. It provides categorized news content, local updates, and special interest articles, supported by a network of related city portals. The website leverages modern front-end technologies such as Tailwind CSS, Leaflet.js, and AOS for animations, ensuring a responsive and visually appealing user experience. Hosting is provided by vshosting.cz, with domain registration dating back to 2010, indicating an established presence in the local media market. The site integrates Google Analytics for user tracking but lacks a visible cookie consent mechanism, which may impact privacy compliance.

P

Praha 1 - informace a aktuální zprávy z ČR

praha1online.cz

49

Praha1online.cz is a Czech local news and information portal focused on Prague 1 and surrounding areas. It provides timely news, updates, and information on various topics including local events, technology, and community affairs. The site is part of a broader network of city portals and thematic websites, supported by partnerships with web development and AI training providers. The business model appears to be based on advertising and content provision to a local audience. Technically, the website employs modern frontend technologies such as Tailwind CSS, Leaflet.js for maps, AOS for animations, and integrates Google Analytics for user tracking. Hosting is provided by Czech-based providers, consistent with the domain registration data. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for GDPR compliance. No direct contact emails or phone numbers are found, and no formal security or incident response policies are published. The WHOIS data is transparent and consistent with the website's local focus and age, supporting legitimacy. Overall, the site is a well-maintained local news portal with moderate technical maturity and a good business presence. Strategic improvements in privacy compliance and security practices would enhance trust and regulatory adherence.

S

Svět notebooků

svetnotebooku.cz

39

Svět notebooků is a Czech language media website specializing in news, reviews, and insights about notebooks and related technology. The site targets technology enthusiasts and notebook users primarily in the Czech Republic. It operates on a WordPress CMS platform with modern web technologies and integrates Google Analytics for visitor tracking. The website presents professional content with good design and navigation, optimized for mobile devices. However, it lacks published privacy and cookie policies, which are critical for GDPR compliance and user trust. Security practices are basic, with HTTPS enabled but missing important security headers and incident response information. Overall, the site is legitimate and functional but would benefit from enhanced privacy and security measures.

M

Mělnická zdravotní, a. s.

nemocnice-neratovice.cz

43

Nemocnice Mělník is a regional healthcare provider in the Czech Republic offering a wide range of medical services including surgery, gynecology, radiology, and rehabilitation. The hospital operates under the parent company Group Mediterra and maintains a network of related hospitals and clinics. The website is professionally designed, targeting patients and regional healthcare consumers, providing detailed information about ambulances and departments. Technically, the site is built on WordPress with modern tracking and analytics tools, and it is mobile optimized with good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response information. The absence of WHOIS data reduces domain trustworthiness, but the overall business credibility remains high due to comprehensive contact information, certifications, and social media presence. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to improve trust.

M

Mělnická zdravotní, a. s.

nemocnice-melnik.cz

44

Nemocnice Mělník is a significant multidisciplinary regional hospital in the Středočeský kraj of the Czech Republic, serving approximately 110,000 residents. It offers a broad spectrum of healthcare services including acute 24-hour care across multiple specialties such as surgery, traumatology, orthopedics, internal medicine, gynecology, neonatology, neurology, infectious diseases, anesthesiology, and rehabilitation. The hospital is part of the Group Mediterra healthcare network, which manages several related healthcare facilities and clinics. The website reflects a professional healthcare provider with comprehensive patient resources and clear communication channels. Technically, the website is built on WordPress and employs modern web technologies including jQuery, Owl Carousel, and Google Analytics for tracking. It uses HTTPS with strong SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. The site is mobile-optimized and provides good SEO and accessibility features, although some accessibility improvements could be made. From a security perspective, the website enforces HTTPS, uses security headers, and has secure contact forms. However, it lacks a publicly available security policy, incident response information, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy with consistent registrant information matching the healthcare entity's claims. Overall, Nemocnice Mělník's website demonstrates a high level of professionalism, security, and compliance suitable for a healthcare provider. Strategic recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure information to enhance trust and security posture further.

G

Group Mediterra a.s.

mediterra.cz

49

Group Mediterra a.s. is a Czech healthcare group operating multiple hospitals, clinics, and a medical secondary school, providing comprehensive healthcare services including preventive, acute, and follow-up care. The group serves both domestic patients under public health insurance and international patients seeking specialized medical procedures. The website is professionally designed using WordPress CMS with modern technologies and offers multilingual support. It implements GDPR-compliant privacy and cookie policies with user consent mechanisms. Security posture is good with HTTPS and reCAPTCHA but lacks some advanced security headers and explicit security policies. WHOIS data is unavailable, which reduces domain transparency but the website content and business information appear legitimate and trustworthy.