High-risk security reports

Telšių žinios is a Lithuanian regional news media outlet focused on providing local news, cultural content, and community information for the Telšiai county area. Established in 2003, it operates a professional WordPress-based website featuring diverse news categories, video content, and subscription services. The site targets Lithuanian-speaking residents and stakeholders interested in regional affairs. Technically, the website employs a modern CMS with SEO and accessibility plugins, Google Fonts, and Google Analytics for tracking. Advertising is managed primarily through Google Ad Manager and DoubleClick. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and visible privacy or cookie policies, indicating room for compliance improvement. No WAF or blocking mechanisms interfere with content accessibility, and the domain registration aligns well with the business profile, supporting legitimacy. Overall, the website is professionally designed, well-structured, and trustworthy, though privacy compliance needs enhancement.

J

Joma Sport

joma-sport.lt

37

Joma Sport is an official Lithuanian representative of the Joma brand, specializing in the retail of sports apparel, equipment, and accessories for individual athletes, teams, and leisure consumers. The company operates an e-commerce platform built on WordPress and WooCommerce, offering a wide range of products categorized by gender, sport type, and product type. The website is professionally designed with good navigation, mobile optimization, and SEO practices, targeting the Lithuanian market primarily. Contact information and social media presence are clearly provided, enhancing trust and customer engagement. Technically, the website leverages modern web technologies including Elementor for page building, Yoast SEO for search optimization, and Google Analytics and Tag Manager for traffic analysis. Security measures include HTTPS encryption and Google reCAPTCHA integration to protect forms. However, some security headers are not explicitly detected, and there is no visible cookie consent mechanism, which could be improved for better GDPR compliance. The website performance is moderate, with good mobile responsiveness and basic accessibility features. From a security perspective, the site maintains a good posture with encrypted connections and no exposed sensitive data. The WHOIS data confirms a consistent and legitimate domain registration aligned with the business location and operations. No signs of malicious activity or suspicious domains were found. Privacy policy and terms of service pages are present, though the cookie policy and incident response information are lacking. Overall, Joma Sport presents a trustworthy and professional online presence with room for improvement in privacy compliance and security header implementation. Strategic recommendations include adding a cookie consent banner, publishing a security policy with incident response contacts, and enhancing security headers to strengthen protection and compliance.

Z

zahojime.cz | I malá rána může být velkou komplikací! Informace o prevenci a léčbě nehojících se ran.

zahojime.cz

32

The website zahojime.cz is an informational platform focused on wound care, providing educational content about the prevention and treatment of non-healing wounds. It targets a general audience interested in healthcare and wound management. The site is built on WordPress using the Divi theme and incorporates Google Analytics for visitor tracking. While the technical infrastructure is modern and the site is accessible with good mobile optimization, there is a lack of comprehensive privacy and cookie policies, as well as absence of contact information, which impacts user trust and compliance. The security posture is moderate with HTTPS usage but lacks visible security headers and incident response details. The domain WHOIS data is unavailable, raising concerns about domain legitimacy and trustworthiness.

N

Nutricia

nutricia.cz

44

Nutricia.cz is a specialized healthcare nutrition website operated under the Danone group, focusing on providing nutritional products and services for children and patients with special dietary needs. The website presents a professional and consistent brand image, with a clear focus on patient care, scientific knowledge, and individualized nutrition solutions. The target audience includes patients, parents, and healthcare professionals in the Czech Republic. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and integrating Google Analytics and Tag Manager for tracking. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though security headers and explicit security policies are absent. Privacy compliance is strong, with comprehensive GDPR-aligned privacy and cookie policies. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is trustworthy and professionally maintained, supporting Nutricia's market position as a reputable healthcare nutrition provider.

E

EPUAP org

epuap.org

39

The European Pressure Ulcer Advisory Panel (EPUAP) is a well-established non-profit organization dedicated to the prevention and treatment of pressure ulcers through research, education, and policy advocacy across Europe. The website serves as a comprehensive hub for healthcare professionals, researchers, and policy makers, offering educational resources, clinical guidelines, research funding information, and event details. The organization has a clear market position as a niche advisory panel with a strong focus on patient-centered and cost-effective pressure ulcer care. Technically, the website is built on a modern WordPress CMS platform using Elementor for design and WooCommerce for e-commerce capabilities. It integrates common web technologies such as jQuery and Google Analytics for tracking. The site demonstrates good SEO practices and mobile optimization, although performance is moderate. The presence of a cookie consent banner indicates awareness of GDPR requirements, but explicit privacy and terms of service documents are not readily found. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and explicit security headers. No critical vulnerabilities or blocking mechanisms were detected. The WHOIS data confirms a long-standing domain registration consistent with the organization's history, enhancing trustworthiness. Overall, the website is professional, trustworthy, and serves its target audience effectively. However, improvements in published privacy policies, security headers, and DNS security would strengthen compliance and security posture.

V

Všeobecná zdravotní pojišťovna ČR (VZP ČR)

vzpoura-urazum.cz

43

The website 'VZPoura úrazům' is a project operated by the Všeobecná zdravotní pojišťovna ČR (VZP ČR), focusing on injury prevention among children and youth through educational meetings and awareness campaigns. It holds a reputable position as a long-standing initiative within the Czech healthcare and education sectors, targeting schools and young audiences. The project leverages official branding and maintains active social media channels to engage its audience effectively. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and various UI libraries, ensuring a responsive and user-friendly experience. The site is secured with HTTPS and integrates Google reCAPTCHA and cookie consent mechanisms, reflecting a good level of digital maturity. However, some security headers are missing, and there is no visible CMS or hosting provider information. From a security perspective, the site demonstrates solid practices such as encrypted connections and bot protection, but lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The absence of WHOIS data for the domain reduces trustworthiness, although the website content and official contact details strongly indicate legitimacy. Overall, the website is professional, content-rich, and well-targeted, with moderate technical and security maturity. Strategic improvements in security headers, transparency policies, and domain registration data would enhance trust and compliance.

S

SQAS

sqas.org

49

SQAS is a business focused on Safety & Quality Assessment for Sustainability, primarily serving sectors related to energy and transportation. The company appears to have a stable market presence with a domain registered since 2000, indicating long-term operation. The website provides basic information about its services but lacks detailed contact or policy pages. Technically, the site is built on WordPress with standard SEO and tracking tools like Google Analytics and Tag Manager, showing moderate digital maturity. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and published security policies. Overall, the site is professional but could improve in privacy compliance and transparency.

U

UAB "Interneto vizija"

uostopoliklinika.lt

38

Uosto poliklinika is a Lithuanian healthcare provider offering a broad spectrum of primary and secondary healthcare services including family medicine, specialist consultations, dental care, mental health services, rehabilitation, and laboratory testing. The website positions itself as a modern and reliable health institution serving the regional population. The digital infrastructure is built on WordPress with Elementor and WooCommerce, integrating essential marketing and analytics tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site implements GDPR-compliant cookie consent and privacy policies, reflecting a commitment to privacy and regulatory compliance. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though security headers could be improved. Overall, the website is professional, user-friendly, and trustworthy, supporting the business's credibility in the healthcare sector.

U

UAB "Interneto vizija" (registrar), business name not explicitly stated on site

dreverna.lt

39

Dreverna.lt is the official website for a hospitality and leisure complex located in Dreverna, Lithuania, offering accommodation, restaurant services, water sports, event hosting, and family-friendly activities. The site targets tourists and visitors interested in a scenic and recreational experience by the Curonian Lagoon and Dreverna River. The business is relatively young, established in 2020, and presents itself professionally with clear service offerings and customer testimonials. Technically, the website is built on WordPress with WooCommerce and uses modern plugins like WPBakery and Slider Revolution, indicating a moderate to advanced digital maturity. The site is mobile-optimized and SEO-friendly with structured data and meta tags. Security posture is good with HTTPS enabled and no exposed sensitive data, but lacks some advanced security headers and a cookie consent mechanism, which could be improved for GDPR compliance. Overall, the domain registration data aligns well with the website's claims, supporting its legitimacy. Strategic recommendations include implementing cookie consent, enhancing security headers, and publishing a security policy to improve compliance and trust.

UAB HSC Baltic is a Lithuanian construction company specializing in certified special building projects including residential, non-residential, transport communications, engineering networks, hydrotechnical, and cultural heritage structures. The company presents itself as experienced with a professional team and a portfolio of projects. The website is professionally designed with clear navigation and content relevant to its business domain. Technically, the site uses common JavaScript libraries and includes GDPR-compliant cookie consent mechanisms. Security posture is adequate with HTTPS and Google ReCaptcha, but lacks advanced security headers and explicit security policies. WHOIS data is unavailable, which limits domain legitimacy verification. Overall, the website reflects a credible medium-sized construction business with room for improvement in security and compliance transparency.

T

tovi

tovi.cz

34

tovi.cz is a Czech-based small technology company specializing in custom web and mobile application development, web design, process automation, and digital marketing services such as SEO and PPC. Founded in 2017, the company presents a professional portfolio of completed projects and transparent pricing examples, targeting businesses seeking tailored digital solutions. The website is well-structured, mobile-optimized, and uses modern web technologies including Google Fonts, Font Awesome, and jQuery, with analytics integrated via Google Analytics and Tag Manager. Security posture is moderate with HTTPS usage implied but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies, which is a notable gap given GDPR requirements. Contact information is clearly provided with email, phone, and a contact form, enhancing business credibility. Overall, the site is professional and trustworthy but would benefit from improved privacy and security disclosures.

E

emline

emline.cz

43

Emline.cz is a Czech Republic based small technology company specializing in comprehensive online marketing services including campaign management, SEO, web and e-shop development, and domain management. Established in 2012, the company positions itself as a reliable partner offering professional and economical solutions for businesses seeking to enhance their online presence. The website is built on WordPress with modern plugins and frameworks, demonstrating a moderate to good level of technical maturity and mobile optimization. Security posture is solid with HTTPS enforced and Google reCAPTCHA protecting forms, though there is room for improvement in implementing security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a credible digital presence for the business.

The website cvs-praha.cz is currently non-functional, displaying a WordPress critical error page indicating a severe backend issue. The domain is registered since 2004 with a Czech hosting provider, suggesting a long-standing presence, but the current site content is minimal and inaccessible. There are no visible privacy, cookie, or terms of service policies, nor any contact information or business details on the page. Technically, the site uses WordPress but lacks proper error handling and security headers, and no analytics or advertising technologies are detected. The security posture is weak due to the critical error and lack of visible security best practices. Overall, the website's digital maturity is low, and it requires urgent technical remediation to restore functionality and improve security and compliance.

E

Erudyt.cz

erudyt.cz

42

Erudyt.cz is a Ukrainian Saturday school based in Prague, Czech Republic, providing Ukrainian education to children living abroad. The school offers education from grades 1 to 11 with the possibility of obtaining an official Ukrainian state certificate. It has been operating for over 10 years and collaborates with the International Ukrainian School in Kyiv. The website is built on WordPress, uses common web technologies, and is hosted on servers associated with fcomet.com. Contact information including phone numbers, email, and physical address is clearly provided. However, the site lacks privacy and cookie policies, security headers, and incident response information, which are areas for improvement. The content is safe, educational, and culturally focused, targeting Ukrainian families in the Czech Republic.

Angelato.cz is a small, family-run artisanal ice cream business based in Prague, Czech Republic, operating since 2007. The company produces high-quality ice cream and sorbets using natural ingredients and offers retail sales through multiple physical locations, catering services, and an online e-shop. The website is built on WordPress with modern plugins and technologies, providing a good user experience and mobile responsiveness. Security posture is moderate with HTTPS enabled but lacking advanced security headers and vulnerability disclosure mechanisms. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

P

Packung s.r.o.

obaly-optimalizace.cz

49

Packung s.r.o. operates the website obaly-optimalizace.cz, specializing in packaging optimization and sales primarily for industrial and manufacturing clients in the Czech Republic. The company offers a comprehensive range of services including packaging design, cost optimization, mechanical testing, and automation solutions. The website reflects a mature business with a medium-sized market presence and multiple specialized projects and partnerships. Technically, the site is built on WordPress with modern plugins and SEO tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates good compliance with GDPR and provides clear contact and business information, enhancing trustworthiness.

K

KERA GREEN s.r.o.

kera.cz

45

KERA GREEN s.r.o. is a well-established Czech manufacturer specializing in gardening substrates, fertilizers, and decorative materials, operating since 1992. The company serves professional gardeners, municipalities, hobby markets, and retail chains primarily in the Czech Republic and Slovakia, with presence in several European markets. Their business model focuses on manufacturing high-quality products with an emphasis on quality control, ecological footprint reduction, and customer flexibility including custom packaging solutions. Technically, the website is built on WordPress 6.1.8 with common plugins such as Yoast SEO, WPML for multilingual support, and Complianz for GDPR cookie consent management. The site uses Google Analytics and Google Tag Manager for tracking and marketing purposes. The site is mobile optimized and has good SEO practices, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain legitimacy verification, which is a concern for trust but the website content and business information appear professional and consistent. Overall, the website presents a professional and trustworthy front for a medium-sized manufacturing business with good privacy compliance and moderate technical maturity. Strategic improvements in security headers, incident response transparency, and domain registration verification are recommended to enhance trust and security posture.

A

ABC Kovopit-engineering, spol. s r.o.

abckovopit.cz

47

ABC Kovopit-engineering, spol. s r.o. is a Czech-based company specializing in the supply of machinery and equipment for the beverage industry, focusing on wine, liqueurs, and non-alcoholic beverage producers. Established in 1994, the company serves primarily small and medium-sized enterprises both domestically and internationally. Their offerings include processing equipment, filtration and stabilization systems, and filling and packaging machinery, complemented by consultation, leasing, sales, and service support. The website reflects a professional and consistent brand image with clear contact information and partner affiliations. Technically, the site is built on Joomla CMS with modern UI frameworks, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and formal privacy or terms policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

M

Mywebgrid s.r.o

svetlahvi.cz

48

SvetLahvi.cz is a Czech Republic based e-commerce retailer specializing in glass bottles, preserving jars, and related accessories for beverages including alcoholic drinks. The company operates on the PrestaShop platform and has been established since 2006, indicating a mature presence in its niche market. The website offers a broad catalog of products with clear pricing and availability information, targeting both consumers and businesses requiring glass packaging solutions. Technical infrastructure includes modern web technologies such as jQuery, Google reCAPTCHA, and Font Awesome, hosted likely with Czech providers consistent with the domain registration data. Security posture is adequate with HTTPS and CAPTCHA protections, but lacks some advanced HTTP security headers and formal security policies. Privacy compliance is partial, with a cookie consent banner present but no visible privacy or terms of service pages. Overall, the site is professional, functional, and trustworthy with room for improvement in compliance and security transparency.

P

Pixelhouse s.r.o.

pixelhouse.cz

48

Pixelhouse s.r.o. is a Czech-based graphic studio specializing in web development, e-commerce solutions, graphic design, and video production. Established in 2007, the company targets businesses and individuals seeking professional digital and design services. Their website reflects a consistent brand image and offers clear information about their services and contact details. The company positions itself as an experienced local player with over a decade of industry presence. Technically, the website is built on Joomla! CMS with UIkit and Yootheme frameworks, incorporating accessibility features via a DJ-Extensions plugin. The site is mobile-optimized and demonstrates good SEO and usability practices. However, performance is moderate and could benefit from optimization. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and includes accessibility enhancements but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were identified in the provided content. The domain registration data is consistent with the business claims, showing a long-standing presence and transparent ownership. Overall, the website presents a professional and trustworthy digital presence with room for improvement in security best practices and privacy compliance mechanisms.

A

AUTO WOZAR s.r.o.

auto-wozar.cz

43

AUTO WOZAR s.r.o. operates as an authorized Peugeot dealership in the Czech Republic, specializing in the sale of new and used Peugeot vehicles, vehicle servicing, and financing options. The website targets both individual consumers and business clients interested in Peugeot cars and related services. The company has been established since 2015 and maintains a consistent brand presence with official Peugeot branding and a clear focus on automotive retail and service. Technically, the website is built on Joomla CMS with Yootheme templates and uses modern frontend frameworks like UIkit and jQuery. Hosting is provided by a Czech hosting provider, ensuring regional consistency. Security posture is moderate with HTTPS usage but lacks visible security headers and formal privacy or cookie policies, indicating areas for compliance improvement. Contact information is clearly presented, enhancing business credibility. No blocking or WAF mechanisms interfere with content access, and no adult or questionable content is present, making the site safe for general audiences.

A

Agentura Osma a.s.

osma.cz

43

Agentura Osma a.s. is a well-established Czech family-owned manufacturer specializing in the design and production of self-adhesive labels. With a history dating back to 1991 and a domain registered since 2000, the company serves a broad European market including France, producing over one million labels weekly. Their business model focuses on combining unique design with advanced printing technologies to support brand image development for clients in food, cosmetics, beverages, and related sectors. The website reflects a mature digital presence with modern technologies, good mobile optimization, and comprehensive content including customer testimonials and certifications. Security posture is solid with HTTPS and cookie consent implemented, though some security headers and formal policies are absent. Overall, the company demonstrates strong business credibility and technical maturity.

S

Spolek vinařů Dunajovské kopce

dunajovskepecky.cz

40

Dunajovské pecky is a regional project operated by Spolek vinařů Dunajovské kopce, focused on promoting unique local places, businesses, events, and projects within the Dunajovské kopce region in the Czech Republic. The website serves as a curated guide for visitors and locals, emphasizing quality, local authenticity, and community spirit. The project is relatively new, with domain registration and founding year in 2024, targeting tourists and regional enthusiasts through recommendations, event calendars, maps, and newsletters. Technically, the website is built on Joomla CMS with Yootheme and UIkit frameworks, enhanced by accessibility features via the DJ Accessibility plugin. The site is mobile-optimized, uses modern web standards, and includes SVG graphics and Google Fonts. Hosting is provided by REG-WEBGLOBE, consistent with the domain registration data. Performance is moderate with good accessibility and SEO practices, though some improvements in security headers and privacy compliance are recommended. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks explicit security headers and vulnerability disclosure mechanisms. No analytics or tracking scripts were detected, indicating minimal user tracking. Contact information is clearly provided, but privacy and cookie consent policies are either missing or basic, which may pose compliance risks. No signs of malicious content or vulnerabilities were found. Overall, the website presents a trustworthy and professional regional project with good content quality and technical implementation. Strategic improvements in privacy policies, cookie consent, and security headers would enhance compliance and security posture, supporting long-term trust and user confidence.

K

Korek Mikulov

korekmikulov.cz

45

Korek Mikulov operates as a small hospitality business specializing in wine bar and restaurant services located in Mikulov, Czech Republic. The company also runs an e-commerce platform for wine and related products, positioning itself as the first cooperative wine bar in the Dunajovské kopce region. Their target audience includes local visitors, tourists, and wine enthusiasts. The website content is professionally presented in Czech, with clear navigation and mobile optimization, supporting a positive user experience. The business model combines on-site hospitality with online retail, supported by partnerships with regional producers and tourism entities. Technically, the website is built on Joomla CMS with VirtueMart e-commerce integration, utilizing modern JavaScript libraries such as jQuery and UIkit. Hosting is provided by REG-WEBGLOBE, a Czech registrar, consistent with the business location. Performance is moderate with good mobile responsiveness, though accessibility and SEO optimizations are basic. The site includes a cookie consent banner indicating some privacy compliance efforts but lacks comprehensive privacy and security policies. From a security perspective, HTTPS is implied but no explicit security headers were detected in the provided data. No incident response or vulnerability disclosure information is present. The site does not expose sensitive data or show signs of vulnerabilities but would benefit from enhanced security practices such as implementing security headers and publishing security policies. The domain WHOIS data aligns well with the business claims, showing consistent registration details and appropriate domain age. Overall, the website presents a trustworthy and professional image for a small hospitality business with moderate technical maturity and basic privacy compliance. Strategic improvements in security posture and privacy transparency would enhance trust and compliance.

The analyzed content corresponds to a Chrome browser internal error page (chrome-error://chromewebdata/) displayed when a website is inaccessible or offline. This page contains no actual website content, business information, or external links. It primarily serves as a placeholder with embedded JavaScript and CSS for the Chrome offline dinosaur game. Consequently, no privacy, cookie, or terms of service policies are present, nor is there any contact or security policy information. The technical infrastructure is limited to Chromium internal scripts and canvas-based game logic, with no hosting or CMS details available. Security posture cannot be meaningfully assessed due to the nature of the content. Overall, this is not a public-facing website but a browser-generated error page, and thus lacks business credibility or compliance indicators.

P

Pro Neziskovky

pro-neziskovky.cz

41

Pro Neziskovky is a small Czech-based IT service provider specializing in custom software development and IT consultancy for non-profit organizations. The business offers tailored information systems, social service evidence software, web counseling, Linux server management, and mobile app development. The website is professionally designed with clear navigation and good mobile optimization, reflecting over 20 years of experience. However, the absence of WHOIS data and privacy/cookie policies indicates areas for improvement in transparency and compliance. Technically, the site uses modern front-end technologies but lacks visible security headers and analytics tools. Overall, the security posture is moderate with room for enhancements in policy publication and security best practices.

S

STALLERGENES AG

shop-stallergenes.ch

47

STALLERGENES AG operates an e-commerce platform specializing in allergy protection bedding products, primarily targeting dust mite allergy sufferers in Switzerland. The website presents a professional and consistent brand image, offering detailed product categories and educational content about dust mite allergies. The business model focuses on direct online sales with customer support and informational resources. Technically, the site is built on the PrestaShop CMS platform, utilizing modern JavaScript libraries and Google Analytics for tracking. The site is mobile optimized and provides a good user experience with clear navigation and responsive design. Security-wise, the website enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, explicit security policies and incident response information are not publicly available, which could be improved. Overall, the domain registration data aligns well with the website's claims, indicating a trustworthy and legitimate business presence.

The website astratracker.net currently serves as a placeholder page with minimal content, indicating that a new internet presence is under construction. There is no substantive business information, services, or contact details available, which limits the ability to assess the company's market position or offerings. The domain is registered since 2012 with Mesh Digital Limited, but the website itself appears undeveloped or inactive. From a technical perspective, the site lacks modern web technologies, security headers, and HTTPS configuration. The hosting appears to be managed via DomainControl (GoDaddy), but no CMS or frameworks are detected. The site is not optimized for mobile or accessibility, and SEO elements are absent. Security posture is weak due to the absence of HTTPS, security headers, and privacy policies. No forms or scripts are present, reducing attack surface but also indicating no active user engagement or data collection. The domain registration is consistent and not privacy protected, but the lack of content and business information reduces trustworthiness. Overall, the site poses low risk but also low value or credibility. Strategic recommendations include enabling HTTPS, developing substantive content including privacy and cookie policies, adding contact information, and implementing security best practices to improve trust and compliance.

S

Stallergenes Greer

stallergenesgreer.fr

47

Stallergenes Greer is a large international biopharmaceutical company specializing in allergen immunotherapy and allergy diagnostics, headquartered in Switzerland with a French localized website. The company positions itself as a global leader in allergy treatment, focusing on personalized medicine and patient support services. The website is professionally designed, mobile-optimized, and provides comprehensive information about their products, services, and corporate responsibility. Technically, the site uses Drupal CMS with modern JavaScript libraries and frameworks such as jQuery, Bootstrap, and OwlCarousel, ensuring a good user experience and moderate performance. Security posture is strong with HTTPS enforced and use of Google reCAPTCHA, although some security headers are missing and no explicit incident response or vulnerability disclosure information is present. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned policies. The absence of WHOIS data for the .fr domain is a concern and slightly reduces trustworthiness, but overall the site reflects a credible and professional business presence.

H

Hotel Císař Ferdinand

hotelcisarferdinand.cz

48

Hotel Císař Ferdinand is a small hospitality business located in Loket, Czech Republic, offering hotel accommodation, a restaurant, and an on-site brewery. The website presents a professional and well-structured digital presence with clear information about services, local attractions, and contact details. The technical infrastructure is based on WordPress with modern plugins and frameworks such as Elementor and Bootstrap, providing a responsive and SEO-optimized experience. Security posture is adequate with HTTPS enabled, but lacks some security headers and formal privacy and cookie policies. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with a small hospitality business. Overall, the site is suitable for its target audience of tourists and visitors seeking accommodation and dining in Loket.

Jdi Do Klubu is a Czech non-profit virtual low-threshold club aimed at youth and young adults, providing a safe space for community engagement, advice, and support. Operated by Česká asociace streetwork, z.s., and supported by partners such as Bohemia Energy, the platform offers various services including a content library, competitions, and a chat support system which is currently offline due to financial constraints. The website demonstrates a consistent brand presence and compliance with GDPR regulations, including a visible cookie consent mechanism.

C

Crystal BOHEMIA a.s.

24crystal.cz

39

Crystal BOHEMIA a.s. operates the e-commerce website 24crystal.cz, specializing in the sale of crystal glassware and related decorative and gift products. The company targets consumers interested in high-quality crystal products, positioning itself as a niche retailer within the Czech Republic. The website provides a professional online shopping experience with clear navigation and detailed terms of service, reflecting a mature business model founded in 2019. Technically, the website employs common JavaScript libraries such as jQuery, Slick Carousel, and tracking tools including Google Analytics and Facebook Pixel. The site is hosted under the registrar REG-WEBGLOBE and uses HTTPS, ensuring secure communication. However, the site lacks explicit privacy and cookie policies and does not implement visible security headers, indicating areas for compliance and security improvement. From a security perspective, the website shows a moderate posture with no detected vulnerabilities or blocking mechanisms. The absence of privacy and cookie consent mechanisms presents compliance risks under GDPR. Contact information is clearly provided, enhancing business credibility. The content is safe for general audiences but includes mature content related to alcohol products. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and better mobile optimization to strengthen trust and regulatory adherence.

3

Events in Jablonec | 365 Jablonec

365jablonec.cz

47

The website 365jablonec.cz serves as a local event listing platform for Jablonec nad Nisou, Czech Republic, providing up-to-date information on cultural, sports, educational, and leisure events. It targets a general audience interested in local happenings and offers features such as event search and organizer information. The site uses modern web technologies including React and Next.js, indicating a contemporary technical infrastructure with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data raises concerns about domain legitimacy and trustworthiness, impacting the overall risk profile. Strategic recommendations include enhancing security headers, publishing privacy and cookie policies, and providing clear contact and incident response information to improve compliance and trust.

The website www.jablonec.com serves as the official tourism information center for Jablonec nad Nisou, Czech Republic. It provides comprehensive information on local attractions, cultural events, sports activities, and accommodations, targeting tourists and visitors to the region. The site is professionally designed with clear navigation and multilingual support, enhancing accessibility for international visitors. Technically, it is built on WordPress using the Avada theme and several plugins including Yoast SEO and Google Tag Manager, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data raises concerns about domain registration legitimacy, warranting further investigation. Overall, the site is trustworthy, content-rich, and compliant with privacy regulations, making it a reliable resource for tourism information.

The website totalizatorsportowy.pl currently serves as a parked domain page with no active business content or services. The domain is registered since 2003 via Aftermarket.pl Limited, a domain aftermarket provider, and the website content aligns with this by indicating the domain is for sale. There is no visible business information, contact details, or privacy and cookie policies, which significantly limits the site's credibility and trustworthiness. Technically, the site uses basic HTML, CSS, and JavaScript with external scripts for advertising and tracking, but lacks HTTPS enforcement and security headers, exposing it to potential security risks. The embedded iframe points to an external suspicious domain, which could pose security concerns. Overall, the site is low trust and minimal in content, serving primarily as a domain sales landing page.

D

Digitain

paydrom.co

49

Paydrom is a payment gateway and service provider specializing in secure and quality payment solutions tailored for the iGaming industry. The company operates under the parent brand Digitain and offers a comprehensive suite of services including cashier integration, business intelligence, transaction management, refunds, risk and fraud management, and payment account management. Their market position is focused on enabling iGaming businesses to optimize payment flows and scale efficiently with a broad range of payment methods and local market coverage. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, Swiper Slider, and Font Awesome Pro, providing a responsive and visually appealing user experience. The site includes tracking via Google Tag Manager but lacks visible advanced security headers and privacy compliance mechanisms. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site uses HTTPS and displays a PCI certification logo, indicating adherence to payment security standards. However, it lacks a published privacy policy, cookie consent mechanism, and incident response contact details, which are critical for GDPR compliance and overall security posture. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, the website presents a professional and trustworthy front for its business, but improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.

Random State is a Swedish-based technology company specializing in innovative lottery and bingo gaming solutions. They provide a comprehensive platform including player account management, random number generation, game modules, cloud hosting, and compliance support. Their team comprises industry veterans and creative professionals focused on delivering exclusive and engaging real money gaming experiences. The company holds recognition such as the Swedish Gambling Award and has secured strategic investments, positioning them as a notable player in the iLottery sector. Technically, the website is built on modern frameworks including Nuxt.js and Vue.js, leveraging Storyblok CMS and AWS CloudFront CDN for performance and scalability. The site is mobile-optimized, fast-loading, and SEO-friendly, with multimedia content enhancing user engagement. Security headers are implemented, and HTTPS is enforced, though DNSSEC is not enabled. No major vulnerabilities or exposed sensitive data were detected. From a security and compliance perspective, the site lacks published privacy and terms of service policies, which is a notable gap for GDPR compliance. Cookie consent is implemented, but no incident response or vulnerability disclosure information is available. Contact information is clearly provided, but no phone numbers are listed. Overall, the security posture is good but could be improved with additional transparency and security controls. The overall risk is moderate with no critical issues detected. Strategic recommendations include publishing privacy and terms policies, enabling DNSSEC, adding security.txt or vulnerability disclosure, and enhancing security headers. These steps will improve compliance, trust, and security maturity.

S

Home | Smart Mobile Gamers

smartmobilegamers.org

41

The website www.smartmobilegamers.org appears to be a basic Wix-built site with minimal content and no visible business or contact information. The lack of privacy policies, terms of service, or security disclosures indicates a low level of digital maturity. Technically, the site uses standard Wix scripts and polyfills but lacks advanced SEO, accessibility, and security features. The absence of WHOIS data and registrant information reduces trust and raises concerns about domain legitimacy. Overall, the security posture is weak with no evident security headers or incident response mechanisms. The site is accessible without WAF or security challenges but provides limited business or user engagement value.

D

Dunajovské kopce - spolek vinařů

dunajovskekopce.cz

43

Dunajovské kopce - spolek vinařů is a regional association of winemakers from the Czech Republic, specifically from the villages of Březí u Mikulova and Dolní Dunajovice. The association focuses on producing and promoting wines made from grapes grown in their local terroir. Their website serves as a platform to showcase member wineries, promote wine tourism through events like open cellar days, and operate an e-shop for wine sales. The business is small-sized, with 16 members, and targets wine enthusiasts and tourists interested in local wine culture. Technically, the website is built on Joomla CMS using Yootheme templates and UIkit framework, offering a modern and responsive design with good navigation and content quality. However, there is room for improvement in accessibility and SEO. Security-wise, the site uses HTTPS and obfuscates emails but lacks visible security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

V

Vinařství Pavlica

vinarstvipavlica.cz

38

Vinařství Pavlica is a small family-owned winery based in the Czech Republic, specializing in producing wines from grapes grown on their own vineyards. The business has a local market focus, supplying wines to restaurants, bistros, cafes, wine shops, and direct customers. The website provides detailed business background and product information but lacks critical security and privacy features. Technically, the site uses common frontend libraries such as Bootstrap and Owl Carousel but does not implement HTTPS or security headers, which poses risks to user data and trust. No privacy or cookie policies are present, and no contact information is provided, limiting user engagement and compliance with data protection regulations. Overall, the site is functional and informative but requires significant improvements in security, privacy, and compliance to enhance trust and protect visitors.

I

Integrační centrum Praha

konferenceintegrace.cz

39

Integrační centrum Praha operates as a non-profit organization focused on integration and migration communication, primarily organizing conferences such as "Komunikací k integraci". The website serves as an informational and promotional platform for these events, targeting professionals in public administration, NGOs, media, and academia. Technically, the site is built on WordPress using the Enfold theme and WPML for multilingual support, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security headers and incident response information. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting its role as a government/non-profit entity in the Czech Republic.

I

Integrační centrum Praha o.p.s.

saladbowlofprague.cz

39

Salad Bowl of Prague is a culturally focused non-profit project managed by Integrační centrum Praha o.p.s., aimed at promoting understanding and integration of migrants in Prague through guided tours, cultural events, and educational content. The website is built on WordPress with a modern tech stack including SEO and multilingual plugins, and integrates Google Maps and Facebook Pixel for enhanced user engagement and analytics. The site demonstrates good security practices with HTTPS and GDPR compliance, though some security headers could be improved. Contact information and privacy policies are clearly presented, supporting trust and transparency.

A

Atlas předsudků

atlaspredsudku.cz

39

Atlas předsudků is a Czech Republic based educational and informational website focused on debunking prejudices and misinformation about foreigners and integration within the country. The site is funded by the European Union and the Czech Ministry of Interior, positioning it as a government-backed public awareness campaign. It offers interactive quizzes, detailed factual content, and multimedia resources to educate the general public on migration and integration topics. The target audience is the Czech general public interested in social issues and combating misinformation. Technically, the website uses modern web technologies including Bootstrap 5 and Google Analytics, with a cookie consent mechanism that respects user privacy by default denying ad and analytics cookies. The site is hosted on a Czech hosting provider and uses a domain registered in 2020, consistent with its recent campaign nature. Security posture is moderate with room for improvement in security headers and incident response transparency. No privacy policy or terms of service pages were found, which is a compliance gap. Overall, the website is professional, trustworthy, and serves an important social function with good content quality and user experience.

C

Centrum Czech in

centrumczechin.cz

37

Centrum Czech in is a small educational organization based in the Czech Republic specializing in Czech language courses for adults and children. The website is professionally designed using WordPress with modern SEO practices and social media integration. The technical infrastructure includes common plugins and Google Analytics for tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and serves its niche audience effectively but should improve compliance and security transparency.

C

Centrum na podporu integrace cizinců v Ústeckém kraji

centrumcizincu.cz

47

Centrumcizincu.cz is a Czech Republic based regional integration center focused on supporting foreigners, especially Ukrainian citizens and other immigrants, in the Ústecký region. The organization provides free legal, social, and educational counseling, Czech language courses, and integration activities funded by the European Union and the Czech Ministry of Interior. The website is professionally designed using WordPress CMS with modern technologies and includes multilingual support via Google Translate. Contact information and cookie consent mechanisms are clearly implemented, reflecting good privacy compliance. Security posture is solid with HTTPS and reCAPTCHA integration, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, the site is trustworthy and serves a clear non-profit government-related mission.

P

Poradna pro integraci

barevnaplaneta.cz

47

Barevná planeta is a well-established multietnic world music festival organized by the non-profit organization Poradna pro integraci, held in Ústí nad Labem, Czech Republic. The website provides comprehensive event information, supported by local government and international organizations such as UNICEF. The festival targets a broad audience interested in multicultural music and cultural events. Technically, the site is built on WordPress with modern plugins and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS, reCAPTCHA, and no visible vulnerabilities, though security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and well-maintained, reflecting the festival's long history and community support.

M

MindMontan

mindmontan.de

45

MindMontan is a German-based environmental technology project focused on reducing water pollution caused by mining activities. The website presents the project as a collaborative effort with strong partners, funded by the German Federal Ministry of Education and Research (BMBF). It offers information about innovative technologies aimed at mitigating environmental impacts both regionally and globally. The site targets stakeholders interested in environmental protection and mining impact reduction. Technically, the website is built on WordPress with the Avada theme, employing modern web technologies and plugins for gallery and cookie management. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks advanced security headers and explicit incident response or vulnerability disclosure policies. Overall, the website is trustworthy, professional, and compliant with GDPR, though it could improve in security policy transparency and technical security headers.

OPA Group s. r. o. operates the website oculocin.cz, specializing in the development, manufacturing, and distribution of natural eye care products, including eye drops designed to treat chronic conjunctivitis and irritated eyes without antibiotics. The company positions itself as a provider of safe, effective, and innovative healthcare products with certifications such as ISO 13485 and CE MDD 0434, targeting consumers seeking natural and hygienic eye care solutions. The website is professionally designed using WordPress with multilingual support and SEO optimization, providing clear product information and customer engagement through a registration form and social media links. Technically, the site employs modern web technologies and is hosted by Wedos, with good SSL configuration and basic security practices in place. However, security headers and explicit security policies could be enhanced. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the website demonstrates a high level of business credibility and technical maturity, with no signs of blocking or malicious content.

The website hitachimorava.cz represents Tepelná čerpadla Mazur s.r.o., a small Czech company specializing in the sale, installation, and servicing of heat pumps and HVAC systems, primarily under the HITACHI brand. The company positions itself as an official distributor in the Czech Republic with over 60 years of experience in the industry. The site targets residential and commercial customers seeking high-quality, energy-efficient heating and cooling solutions. The business model focuses on product sales, professional installation, and after-sales service, supported by a user-friendly website with clear product offerings and contact channels. Technically, the website employs a modern but somewhat dated technology stack including AngularJS 1.6.7, jQuery, Bootstrap, and integrates Google Analytics, Google Tag Manager, and Smartsupp live chat for customer engagement and analytics. The site is hosted likely via WEDOS, a Czech hosting provider, consistent with the domain registrar information. The site is mobile optimized and SEO friendly with proper meta tags and structured navigation. From a security perspective, the website demonstrates good privacy compliance with a comprehensive GDPR policy and cookie consent mechanism. However, no explicit security headers were detected, and the use of an older AngularJS version may pose some security risks. There is no visible incident response or vulnerability disclosure information, which could be improved. The site uses HTTPS for all external resources, but direct SSL configuration details are not available. Overall, the website is professional, trustworthy, and well-aligned with the business goals. The risk level is moderate with recommendations to enhance security headers, update frameworks, and publish incident response contacts. The domain registration data is consistent with the business claims, supporting legitimacy. The site contains no adult or questionable content and is safe for general audiences.