High-risk security reports

Č

Česká asociace ocelových konstrukcí

caok.cz

48

Česká asociace ocelových konstrukcí (ČAOK) is a Czech non-profit organization dedicated to the development and promotion of steel constructions. Established in 1999, it serves as a professional association representing over 40 member companies in the steel construction sector. The website provides detailed information about the association, its members, benefits, reference projects, publications, and event calendar, targeting industry professionals and investors. Technically, the website is built on WordPress with Elementor and Astra theme, employing modern web technologies and offering good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and GDPR-aligned cookie management. Overall, the website is professional, trustworthy, and well-aligned with the organization's business objectives.

V

vanocnifocenibrno.cz

vanocnifocenibrno.cz

45

The website vanocnifocenibrno.cz represents a small local photography business specializing in Christmas-themed family photo sessions in Brno, Czech Republic. The business operates a WordPress-based site with WooCommerce integration for selling gift vouchers, targeting families with children of all ages. The site is professionally designed with consistent branding and good content quality, emphasizing a warm, family-friendly atmosphere. Social media presence on Facebook and Instagram supports community engagement and marketing efforts. Technically, the site uses modern web technologies including Elementor, Yoast SEO, Google Tag Manager, and tracking pixels from Facebook and Microsoft Clarity, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and standard security headers present, although no explicit security policy or incident response information is published. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism in place, aligned with GDPR requirements. Overall, the site is trustworthy and professionally maintained, though WHOIS data is unavailable, likely due to privacy protection, which is common for small businesses. Strategic recommendations include publishing a security policy, adding incident response contacts, and enhancing accessibility features to further improve trust and compliance.

H

hi SEO, s.r.o.

hiseo.cz

48

hi SEO, s.r.o. is a Czech Republic based small digital agency specializing in premium web development, SEO optimization, graphic design, and online advertising services. With over 15 years of experience, the company targets businesses and individuals seeking custom digital solutions including e-shops, informational websites, e-learning, and reservation systems. The website presents a professional image with clear contact information and client references, positioning the company as a trusted partner for digital success. The technical infrastructure is built on WordPress with WooCommerce and Elementor, leveraging popular SEO and multilingual plugins. The site is moderately performant, mobile-optimized, and uses Google Analytics and Tag Manager for analytics and marketing. Security posture is good with HTTPS enforced and privacy plugins in place, though some security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. While the website content is accessible and professional, the absence of WHOIS data and privacy policy page reduces transparency and privacy compliance confidence. Contact details and business registration numbers are clearly provided, supporting business credibility. Overall, the site is safe, well-structured, and suitable for general audiences. Strategic recommendations include improving privacy policy visibility, enhancing security headers, and ensuring regular updates to maintain security and compliance. The domain's WHOIS data absence warrants monitoring for legitimacy assurance.

K

Kubík Textil

kubiktextil.cz

49

Kubík Textil is a Czech-based retailer and wholesaler specializing in home textiles, operating an e-commerce platform built on PrestaShop. The company has a well-established market presence with over 31 years of experience, offering a wide range of textile products including bedding, towels, and bath accessories. The website targets general consumers and wholesale clients within the Czech Republic, providing a professional and user-friendly online shopping experience. Technically, the site leverages common web technologies such as jQuery and integrates marketing and analytics tools like Google Analytics and Facebook Pixel. Hosting is provided by WEDOS, a reputable Czech hosting provider, ensuring reliable domain management and uptime. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the website is accessible, well-structured, and compliant with GDPR requirements, reflecting a trustworthy and credible business operation.

P

Plzeňský Prazdroj

napivosrozumem.cz

39

Plzeňský Prazdroj's website napivosrozumem.cz serves as an educational platform focused on responsible beer consumption, alcohol awareness, and related health and legal information. The site targets adult Czech-speaking users and provides tools such as alcohol consumption tests and blood alcohol calculators, alongside informative articles. The business model appears to be informational and educational, likely supported by the brewery itself, positioning it as a niche resource in the Czech market. Technically, the site is built on WordPress with Elementor and several specialized plugins, hosted by a Czech hosting provider, and demonstrates moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced, an age verification gate, and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious elements were detected. Overall, the site is professional, trustworthy, and compliant with basic privacy regulations, though explicit contact details and security policies are limited. Strategic recommendations include enhancing security headers, maintaining plugin updates, and expanding transparency on security and incident response.

P

PENAM, a.s.

dinoo.cz

47

Dinoo.cz is a Czech Republic-based brand operated by PENAM, a.s., focused on delivering dinosaur-themed products and educational content primarily targeting children and families. The website offers a variety of plush toys, snacks, educational news, and interactive content, supported by a newsletter and B2B partnership opportunities. The brand positions itself as a niche player in the retail and manufacturing sectors with a strong emphasis on family engagement and educational value. Technically, the website is built on WordPress, leveraging modern web technologies such as Google Tag Manager, Facebook Pixel, and Splide.js for interactive carousels. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Security-wise, the site uses HTTPS and cookie consent mechanisms effectively but lacks explicit security headers and formal incident response or vulnerability disclosure policies. Privacy compliance is strong, with clear GDPR-aligned privacy and cookie policies and explicit user consent for marketing communications. Overall, the website is professional, trustworthy, and well-aligned with its business goals, though it could benefit from enhanced security policies and more comprehensive contact information.

Kostelecké uzeniny a.s. is a well-established Czech company specializing in the production and retail of meat products such as sausages, hams, and salamis, emphasizing the use of Czech-sourced meat. The company holds a strong market position in the Czech Republic, supported by consumer trust and multiple product partnerships. Their website reflects a professional and modern digital presence built on WordPress and WooCommerce, integrating contemporary web technologies and compliance tools such as GDPR and cookie consent management. Security measures include HTTPS enforcement and Google reCAPTCHA integration, although explicit security policies and incident response information are absent. The absence of WHOIS data limits domain trust verification, but overall, the site demonstrates a secure and compliant posture suitable for its business model.

K

KMOTR - Masna Kroměříž a.s.

kmotr.cz

42

KMOTR - Masna Kroměříž a.s. is a Czech meat processing and retail company operating under the AGROFERT group umbrella. The company offers a wide range of meat products including fermented and heat-treated items, sausages, sliced salami, and gluten-free options. Their business model combines manufacturing with retail sales through both an e-shop and a physical store, targeting general consumers interested in quality meat products. The website is professionally designed, consistent in branding, and provides relevant business and product information in Czech language. Technical infrastructure includes modern web technologies and integration with analytics and marketing tools such as Google Analytics and Facebook Pixel. The site is mobile optimized and provides a comprehensive cookie consent mechanism aligned with GDPR requirements. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and a formal security policy is absent. WHOIS data is missing, which reduces domain registration trust but does not detract from the legitimacy of the business as presented. Overall, the website is functional, trustworthy, and compliant with privacy regulations, serving as a credible digital presence for the company.

U

UNITED BAKERIES a.s.

odkolek.cz

46

UNITED BAKERIES a.s., operating under the brand Odkolek, is a traditional Czech bakery with a strong market presence and a history dating back to 1998. The company offers a range of bakery products, recipes, and news updates, targeting general consumers interested in quality bakery goods. The website reflects a professional and consistent brand image, supported by clear contact information and affiliation with the AGROFERT group. Technically, the site is built on WordPress with modern JavaScript libraries and performance optimizations, ensuring good user experience and mobile responsiveness. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response details are absent. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business.

V

Vodňanská drůbež, a.s.

vodnanskadrubez.cz

42

Vodňanská drůbež, a.s. is a Czech poultry manufacturing and retail company with a strong local market presence. The company emphasizes its Czech origin and quality poultry products, offering a wide range of products, recipes, and career opportunities through its website. The digital infrastructure is built on modern web technologies including the Nette PHP framework and JavaScript libraries such as Naja for AJAX and Swiper for sliders. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected. Privacy compliance is well addressed with GDPR and cookie policies clearly presented. However, the lack of WHOIS data limits domain trust verification, though the website content and branding strongly indicate a legitimate business. Social media presence on Facebook and YouTube supports brand engagement. Overall, the website is professional, secure, and compliant, serving its target audience effectively.

E

EPAX s.r.o.

epax.cz

42

EPAX s.r.o. is a Czech Republic-based IT and marketing service provider specializing in web design, web hosting, graphic design, and multimedia production. Established since 2007 with a domain registered since 2004, the company targets businesses seeking professional internet solutions and marketing support. Their website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site uses modern JavaScript frameworks such as Vue.js and includes responsive design elements, though some accessibility and SEO optimizations could be improved. Security posture is moderate with HTTPS and CSRF tokens implemented, but lacks published security policies, security headers, and vulnerability disclosure mechanisms. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy and security transparency.

M

Měšťanský pivovar Havlíčkův Brod a.s.

hbrebel.cz

47

Měšťanský pivovar Havlíčkův Brod a.s. operates the website www.hbrebel.cz, presenting itself as a historic brewery established in 1834 in the Czech Republic. The company offers a diverse portfolio of beers, including traditional and specialty brews, and engages customers through brewery tours, original Rebel restaurants, and an e-commerce platform. The website targets adult consumers, requiring age verification due to alcohol-related content. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Google Analytics, Hotjar, and Facebook Pixel, with a custom CMS by CzechProject spol. s r.o. The site is mobile optimized and SEO friendly, though accessibility could be improved. Security posture is good with HTTPS and reCAPTCHA on forms, but lacks some security headers and a published security policy. Privacy compliance is strong with GDPR-aligned privacy and cookie policies. However, the absence of WHOIS data for the domain reduces trust from a domain registration perspective. Overall, the website is professional, functional, and trustworthy from a business and user perspective, but domain legitimacy verification is limited.

The website khs-till.cz represents a domain registered since 2001 under a Czech registrar, indicating a potentially established local business. However, the website content is extremely minimal, consisting solely of a single centered image with no textual content, metadata, or interactive elements. There are no privacy, cookie, or terms of service policies, nor any contact information or business details presented on the site. Technically, the site lacks modern web technologies, security headers, and performance optimizations, and there is no evidence of HTTPS usage from the provided data. The absence of security and privacy policies, combined with minimal content, results in a low trust and security posture assessment.

P

Pivovar Cvikov

pivovarcvikov.cz

47

Pivovar Cvikov is a Czech brewery established in 2013, producing traditional beers using local ingredients and spring water. The company operates not only in beer production but also in hospitality sectors including a restaurant (Restaurant Sladovna), a hotel (Hotel Kleis), and a bakery/confectionery unit. Their market position is regional with a diversified business model that includes online sales through an external e-shop. The website reflects a good level of professionalism and branding consistency, targeting beer consumers and hospitality customers primarily in the Czech Republic. Technically, the site uses modern web technologies such as lazy loading and WebP images, hosted by Websupport, and is mobile optimized with moderate performance. Security posture is adequate with HTTPS enforced but lacks some security headers and privacy compliance elements such as privacy and cookie policies. No critical vulnerabilities or WAF blocks were detected, but compliance gaps exist regarding GDPR and cookie consent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

D

DUP družstvo – Pivovar Poutník, Pelhřimov

pivovarpoutnik.cz

45

Pivovar Poutník is a traditional brewery located in Pelhřimov, Czech Republic, specializing in the production of unpasteurized beers using classical brewing technologies. The company positions itself as a regional brewery with a rich history dating back to at least 1552, offering a variety of beer products including light beers and special brews. Their market presence is supported by participation in local events and recognition through awards. The website is professionally designed, targeting a mature audience interested in traditional Czech beer products. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and Google reCAPTCHA v3 for form protection. The site is mobile optimized with good SEO practices and a cookie consent mechanism, indicating a reasonable level of digital maturity. However, no CMS or hosting provider information is explicitly identified. From a security perspective, the site uses HTTPS with a valid SSL certificate and implements reCAPTCHA to protect forms. Despite this, it lacks explicit security headers and published security or incident response policies, which are areas for improvement. The absence of WHOIS data reduces the ability to fully verify domain legitimacy, though the website content and structured data suggest a legitimate business. Overall, the website presents a trustworthy and professional image with moderate technical and security maturity. Strategic improvements in security transparency and domain registration clarity would enhance trust and compliance.

P

Primator

primator.cz

47

Primator is an established brewery company based in the Czech Republic, with a domain registered since 1998. The company focuses on beer production, brewery tours, and product sales including an e-shop. The website is built on WordPress with a professional design, clear navigation, and good SEO practices. It integrates common marketing and analytics tools such as Google Analytics, Facebook Pixel, and Cookiebot for cookie consent management. Contact information including phone number and physical address is clearly presented, along with social media links to Facebook and Instagram. However, the site lacks a published privacy policy, terms of service, and security policy, which are important for compliance and trust. The security posture is generally good with HTTPS and no obvious vulnerabilities, but could be improved with additional security headers and published policies.

MORAVAMALT s.r.o. is a Czech malt house specializing in the production and supply of Czech malt for domestic and international breweries. The company emphasizes tradition, quality, and sourcing from Czech farmers, supported by an ISO 22000:2006 certification for food safety management. The website presents basic information about the company, its services, and certifications, targeting brewery partners. Technically, the website is simple, built with basic HTML and CSS, lacking modern frameworks or CMS, and shows moderate performance and SEO optimization. Security posture is minimal with no detected security headers or privacy policies, and no HTTPS enforcement details available. The domain registration is consistent with the business claims, showing legitimacy and appropriate domain age. Overall, the website is functional but lacks advanced security and privacy compliance features.

P

Pivovar Nymburk

postriziny.cz

47

Pivovar Nymburk, also known as Postřižiny, is a historic Czech brewery established in 1895, producing a diverse range of beers including light, dark, special, and non-alcoholic varieties. The brewery has a strong regional presence with export activities to 15 European countries and engages customers through brewery tours and events. The website reflects a mature business with consistent branding and clear communication of its offerings. Technically, the site uses modern web technologies including Google reCAPTCHA and Google Translate, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and age verification to comply with alcohol regulations, though some security headers are missing. Privacy compliance is addressed with a comprehensive cookie consent mechanism and privacy policy. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information support the legitimacy of the business. Overall, the site is professional, secure, and compliant with relevant regulations, targeting an adult audience interested in beer products and brewery experiences.

P

Pivovary Lobkowicz

pivovary-lobkowicz.cz

48

Pivovary Lobkowicz is a Czech brewery company specializing in the production and sale of beer and related beverages. The website presents the brand's heritage and craftsmanship, emphasizing traditional brewing processes and quality ingredients. The company appears to hold a solid market position within the Czech hospitality sector, targeting a general mature audience interested in beer products. Technically, the website is built on WordPress with modern plugins for SEO, GDPR compliance, and user engagement, reflecting a moderate to good level of digital maturity. Security measures such as HTTPS and security headers are properly implemented, although the absence of WHOIS data limits full trust verification. Overall, the site is professional, secure, and compliant with privacy regulations, supporting the company's credibility and customer trust.

M

Mráz Agro CZ, s.r.o.

mrazagro.cz

44

Mráz Agro CZ, s.r.o. is a Czech company specializing in innovative and sustainable solutions primarily in the food and feed industries, with additional activities in energy biomass and consulting services. The company emphasizes circular economy principles by repurposing by-products and plant-based residues to reduce waste and promote environmental responsibility. Their market position is that of an innovative and trusted partner serving both business clients and end customers with a diverse product portfolio including food raw materials, feed, petfood ingredients, and energy substrates. Technically, the website employs modern frontend technologies such as Bootstrap 5, jQuery, Font Awesome, and Fancybox, ensuring a responsive and user-friendly experience. The site is well-structured with clear navigation and good mobile optimization. However, there is no evidence of a CMS or hosting provider details. Performance is moderate, and SEO practices are adequately implemented through meta tags and Open Graph data. From a security perspective, the site uses HTTPS and includes a contact form with a simple captcha challenge, indicating basic protection against spam. However, no security headers were detected, and there is no visible privacy or cookie policy, which are important for GDPR compliance. The absence of WHOIS registrant data reduces transparency but is likely due to privacy protection. No incident response or security policy information is provided, which could be improved. Overall, the website is professional, trustworthy, and business-focused with a good security baseline but lacks some compliance and security best practices. Strategic improvements in privacy disclosures, security headers, and incident response readiness would enhance the security posture and trustworthiness of the site.

Č

Českomoravský svaz minipivovarů z.s.

minipivo.cz

42

Českomoravský svaz minipivovarů z.s. is a Czech non-profit association dedicated to supporting small breweries through legal, educational, and informational services. The website serves as a portal for members and the public to access news, events, and member listings, positioning itself as a key player in the Czech craft beer community. The business model focuses on member services, advocacy, and event organization, targeting brewery owners and beer enthusiasts within the Czech Republic. Technically, the site is built on the Fast-Web CMS platform, utilizing legacy JavaScript libraries and common plugins for UI and interactivity. While the site is mobile-optimized and SEO-friendly, some technical debt is evident due to outdated libraries. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit incident response policies. Overall, the site is trustworthy and professional, with good privacy compliance and clear contact information.

A

Asociace sklářského a keramického průmyslu ČR

skloakeramika.cz

44

The website skloakeramika.cz serves as an informational portal dedicated to the glass, ceramics, and porcelain industries in the Czech Republic. Operated by the Asociace sklářského a keramického průmyslu ČR, it provides industry news, job opportunities, event listings, educational resources, and a company directory. The portal targets professionals and the general public interested in these manufacturing sectors, positioning itself as a niche but authoritative source within the Czech market. The business model is primarily informational and association-driven, supporting industry awareness and networking.

M

Měšťanský pivovar v Poličce, a.s.

pivovar-policka.cz

46

Měšťanský pivovar v Poličce, a.s. is a Czech brewery specializing in the production and sale of various traditional beer types, including light and dark beers, strong beers, and non-alcoholic options. The company also engages in sustainable energy initiatives such as photovoltaic systems. The website targets local consumers and business partners, providing detailed product information, employment opportunities, and contact details primarily via phone. The digital infrastructure includes modern analytics tools like Google Tag Manager and TikTok pixels, indicating a moderate level of digital maturity. Security measures include an age verification gate to comply with alcohol sales regulations, but lack explicit privacy policies and security headers, which are areas for improvement. The absence of WHOIS data reduces transparency and trust, though the website content and business presentation appear professional and consistent with a medium-sized manufacturing entity.

P

Podkovan s.r.o.

podkovan.cz

44

Podkovan s.r.o. is a traditional Czech brewery with a rich heritage dating back to 1434, specializing in producing high-quality Czech beer using traditional methods and natural spring water. The company positions itself as a medium-sized brewery focused on authenticity and quality, targeting beer consumers who appreciate traditional Czech lagers and dark beers. The website reflects a well-maintained digital presence built on WordPress with SEO optimization and multilingual support. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks comprehensive privacy and cookie policies, which are important for GDPR compliance. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the business credibility given the detailed company information and contact data provided. Overall, the website is professional, informative, and trustworthy, though improvements in privacy compliance and security headers are recommended.

The website podskalska.cz represents an established educational institution in Prague, Czech Republic, offering secondary and higher vocational education across multiple specialized study programs. The institution targets students, parents, and applicants, providing comprehensive educational services including student intranet access, exam registration, language certification, and participation in the Erasmus+ program. The domain has been active since 2005, indicating a stable presence in the education sector. Technically, the website employs standard web technologies such as jQuery and Google Fonts, with embedded Google Maps for location services. The site is mobile-optimized and presents a clear navigation structure, although it lacks advanced CMS indicators and modern frameworks. Performance is moderate, with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks visible security headers and cookie consent mechanisms, which are important for compliance and protection. No incident response or security policy information is provided, limiting transparency in security posture. Overall, the website is professional and trustworthy, with a good business credibility score. The main risks relate to privacy compliance and security best practices, which can be improved to enhance user trust and regulatory adherence.

B

Bohemia Hop, a.s.

bohemiahop.cz

43

Bohemia Hop, a.s. is a Czech-based company specializing in the procurement and sale of hops, serving both domestic and international beverage industry clients. The company offers a diverse portfolio of Czech hop varieties catering to large and craft breweries, positioning itself as a key player in the hop manufacturing and distribution sector. The website reflects a professional business presence with clear contact information and social media engagement, supporting its market position. Technically, the website is built on Joomla CMS with modern frontend frameworks like Bootstrap and jQuery, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and presents good navigation and content quality, although some accessibility features could be improved. Security posture is adequate with HTTPS enabled and CSRF tokens in use, but lacks comprehensive security headers and explicit privacy or cookie policies. The absence of WHOIS registration data is a notable concern, limiting the ability to fully verify domain legitimacy and ownership. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR and related regulations. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and security readiness. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security best practices, and domain registration transparency to strengthen its risk profile and trustworthiness.

Č

Český svaz pivovarů a sladoven

nezlobseprokazse.cz

40

The website nezlobseprokazse.cz is an educational platform operated by the Český svaz pivovarů a sladoven, focused on preventing the sale of alcohol to minors in the Czech Republic. It offers free virtual reality training and interactive videos to educate sellers and cashiers about legal responsibilities, common tactics used by minors, and proper age verification methods. The site targets retailers and business owners involved in alcohol sales, positioning itself as a specialized compliance support resource within the retail and non-profit sectors. Technically, the site uses modern JavaScript frameworks, including Vue.js and Slick Carousel, and integrates Google Analytics for user tracking. The site is mobile-optimized and presents content in a professional and accessible manner, though accessibility features could be improved. Security posture is solid with HTTPS and CSRF tokens, but lacks some security headers and explicit privacy and cookie policies, which are compliance gaps. Overall, the domain registration data aligns well with the website's purpose and location, supporting legitimacy. The site is safe for mature audiences, focusing on alcohol-related education without adult or explicit content.

Prosperita Fresh Time is a Czech business and lifestyle media publication operated by RIX, s.r.o. The website offers regularly updated articles covering business innovations, energy, transportation, and lifestyle topics targeted at professionals and entrepreneurs. The site uses WordPress CMS and integrates Google Analytics, Google Tag Manager, and Google Publisher Tags for advertising and tracking. Cookie consent and privacy policies are implemented in compliance with GDPR. The website is well-structured with good navigation and mobile optimization, providing a professional user experience. However, no direct contact emails or phone numbers are publicly available, and WHOIS data is unavailable, likely due to privacy protection. Security posture is good with HTTPS enforced but could be improved by adding additional security headers. Overall, the site is trustworthy and safe for general audiences.

Media Know® is a Czech Republic based small marketing and advertising agency operated by RIX, s.r.o., offering a range of services including marketing strategy development, web design, print materials, media relations, and PR consulting. The website presents a professional image with clear business contact details and a focus on practical marketing solutions rather than trendy internet fads. However, the technical infrastructure is basic, with no detected CMS or advanced frameworks, and limited mobile optimization. Security posture is weak due to lack of HTTPS and security headers, and no privacy or cookie policies are present, which may impact GDPR compliance. The absence of WHOIS registration data raises concerns about domain legitimacy, which affects overall trustworthiness. Strategic improvements in security, privacy compliance, and domain registration transparency are recommended to enhance credibility and user trust.

C

Czech Accreditation Institute (Český institut pro akreditaci, o.p.s.)

cai.cz

49

The Czech Accreditation Institute (CAI) is a government-established public service organization responsible for accreditation activities in the Czech Republic. Founded in 1993, CAI operates an accreditation system aligned with European and international standards, serving laboratories, certification bodies, and inspection entities. The organization is a recognized member of major international accreditation bodies such as EA, ILAC, and IAF, and is a signatory to key multilateral agreements, reinforcing its credibility and market position. Technically, the CAI website is built on WordPress with modern plugins for booking, GDPR compliance, and user interaction. The site is well-structured, mobile-optimized, and employs HTTPS with valid SSL certificates, ensuring secure user connections. Cookie consent mechanisms and GDPR compliance are actively implemented, reflecting a mature approach to privacy and data protection. From a security perspective, the site demonstrates good practices including HTTPS enforcement and use of Google reCAPTCHA. However, the absence of explicit security policies, incident response information, and missing WHOIS data for the domain introduce some concerns regarding transparency and trustworthiness. No vulnerabilities or malicious content were detected. Overall, CAI presents a professional and trustworthy digital presence consistent with its role as a national accreditation body. Strategic improvements in publishing security policies and resolving WHOIS data gaps would enhance trust and compliance posture.

D

DTO CZ s.r.o.

dtocz.cz

46

DTO CZ s.r.o. is a Czech Republic-based educational and consulting company specializing in professional training, courses, seminars, retraining, qualification exams, and certifications. The company also operates an e-shop for standards and publications and offers rental services for halls and classrooms. With a history dating back to 2003 and a parent organization, the Czech Union of Scientific and Technical Societies, DTO CZ holds a solid market position serving thousands of clients annually. The website reflects a professional and consistent brand image targeting individuals and organizations seeking educational services within the Czech Republic. Technically, the website employs modern tracking and analytics tools such as Google Analytics (both Universal and GA4), Facebook Pixel, and Cookiebot for consent management. The site is mobile-optimized with good SEO practices and clear navigation. However, no CMS or hosting provider details are explicitly detected. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but lacks visible security headers in the HTML source, which could be improved. No incident response or explicit security policy pages are found. The absence of WHOIS data reduces transparency and trustworthiness, although the website content and business information appear legitimate and consistent. Overall, DTO CZ s.r.o. presents a trustworthy and professional online presence with room for improvement in security header implementation and WHOIS transparency. Strategic recommendations include enhancing security headers, publishing incident response contacts, and regular third-party script audits to strengthen security posture and trust.

K

KAPKA PLUS s.r.o.

kapkaplus.cz

42

KAPKA PLUS s.r.o. is a Czech Republic based small enterprise specializing in professional seminars and training focused on the operation and inspection of boilers, pressure vessels, piping, and safe operation of mobile platforms. The company targets professionals in the energy and safety sectors, providing niche educational and consulting services. The website is built on WordPress using the Divi theme and incorporates SEO best practices via Yoast SEO. It employs Google Analytics for visitor tracking with a cookie consent mechanism in place. The technical infrastructure is moderate in performance, mobile optimized, and hosted by a Czech hosting provider consistent with the business location. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though it lacks advanced security headers and explicit security policies. The absence of privacy and terms of service policies represents a compliance gap. Overall, the domain registration data aligns well with the business information, indicating legitimacy and stability.

M

MADETA a.s.

madeta.cz

48

MADETA a.s. is the largest milk processor in the Czech Republic with a long tradition dating back to 1837. The company specializes in manufacturing and retailing a wide range of dairy products including milk, cream, yogurts, cheeses, and desserts. Their market position is strong within the Czech dairy industry, supported by a comprehensive product portfolio and multiple subsidiary domains for e-commerce, wholesale, logistics, and gastronomy. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site uses modern JavaScript libraries and tracking technologies, integrating Google Analytics, Facebook Pixel, TikTok Pixel, and Microsoft Clarity for analytics and marketing purposes. Security posture is good with HTTPS enforced and reCAPTCHA protection on forms, although security headers are not detected and could be improved. Privacy compliance is robust with clear GDPR policies and cookie consent mechanisms. Overall, the site is trustworthy and professionally maintained, though WHOIS data is unavailable, likely due to privacy protection.

The website vkterminalservices.lv is registered to VK Tranzits, SIA, a Latvian legal entity likely operating in the transportation sector. However, the website is currently inaccessible, returning a 403 Forbidden error indicating access restrictions or server misconfiguration. No business descriptive content, metadata, or interactive elements are available for analysis. The hosting environment is identified as cPanel, Inc., but no further technical details or CMS information can be derived. Security posture is weak due to lack of visible security headers and absence of SSL/TLS configuration details. Privacy and compliance policies are missing, and no contact phone numbers or social media presence is evident. The WHOIS data is partially available and consistent with the registrant's business location and identity, but the domain creation date is unknown. Overall, the website's digital maturity is low, and the lack of accessible content severely limits trust and usability.

I

IMA s.r.o.

ima.cz

40

IMA s.r.o. is a Czech Republic-based company specializing in comprehensive identification systems including access control, attendance, catering, parking, and localization solutions. The company targets businesses and organizations requiring secure and innovative identification technologies, offering local, multinational, and mobile installations. The website reflects a professional and consistent brand presence with clear service offerings and a focus on technology solutions. Technically, the site is built on WordPress using Elementor and integrates modern marketing and analytics tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enabled and no visible sensitive data exposure; however, the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. Privacy compliance is limited due to missing privacy and cookie policies and lack of explicit GDPR indicators. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and presentation suggest a legitimate business. Overall, the site scores moderately well but would benefit from enhanced privacy compliance and security best practices.

The website www.damejidlo.cz is currently inaccessible due to a bot mitigation challenge page implemented using PerimeterX and Google reCAPTCHA Enterprise. This prevents access to any meaningful content, business information, or contact details. The WHOIS lookup returned no registration data, indicating either privacy protection or an unregistered domain, which further limits trust and legitimacy assessment. The technical infrastructure shows use of advanced bot protection technologies but lacks visible security headers or compliance policies. Overall, the site’s security posture is limited to bot mitigation, with no accessible content to evaluate further. The risk assessment is high due to lack of transparency and accessibility, and strategic recommendations include enabling access for legitimate users and publishing essential compliance and contact information.

S

Studio DR, sp. z o.o.

studiodr.pl

49

Studio DR is a Polish media and technology company specializing in professional audio recording, mastering, dubbing, post-production, web solutions, creative media production, and distribution of pro audio equipment. Established in 2009, it holds a significant market position as the main distributor of the popular series The Chosen in Poland. The company targets media professionals, musicians, creative agencies, and audio equipment customers within Poland. Their business model combines service provision with product distribution, supported by a clear brand presence and consistent content quality. Technically, the website is built on WordPress with modern JavaScript libraries and modules, integrating Matomo and Google Analytics for user tracking with privacy considerations. The site is hosted likely by OVH SAS, a reputable provider, and shows moderate performance with good mobile optimization. However, accessibility and SEO optimizations are basic and could be improved. From a security perspective, the site uses HTTPS and implements Google reCAPTCHA on forms, alongside a cookie consent mechanism, indicating awareness of privacy and security best practices. Nonetheless, the absence of DNSSEC, security headers, and a formal security or incident response policy suggests room for improvement. No critical vulnerabilities or suspicious activities were detected. Overall, the website and business present a trustworthy and professional image with a solid foundation. Strategic enhancements in security policies, technical SEO, and accessibility would further strengthen their digital maturity and compliance posture.

The website kuptanio.pl currently serves as a placeholder landing page hosted by Cyberfolks, a Polish hosting provider. It provides basic instructions for uploading website files and removing the default index.html file. The site targets website owners or administrators managing the kuptanio.pl domain. The business behind the domain is Consulting Service Sp. z o.o., established in 2005, indicating a mature hosting service presence. The site lacks comprehensive business content and primarily functions as a hosting placeholder with links to support and knowledge base resources. Technically, the website is built with standard HTML5 and CSS3, featuring responsive design and SVG graphics. It is hosted by Cyberfolks, as inferred from branding and URLs. The site performs well with fast loading times and good mobile optimization but lacks advanced frameworks or CMS integration. No analytics or tracking scripts are detected, indicating minimal user data collection. From a security perspective, the site uses HTTPS but does not have DNSSEC enabled, and no security headers were detected in the provided data. There are no forms or inputs, reducing attack surface, but the absence of privacy and cookie policies indicates compliance gaps. The WHOIS data is consistent and trustworthy, with no privacy protection masking and a domain age appropriate for the business. Overall, the website is low risk but limited in content and compliance features. Strategic recommendations include enabling DNSSEC, adding security headers, implementing privacy and cookie policies, and enhancing transparency to improve trust and compliance.

S

Seyfor

altus.cz

48

Vario.cz is a Czech-based ERP software provider offering a modular economic and CRM system tailored for small and medium-sized businesses. The company, operated by Seyfor, a.s., has over 30 years of development experience and a strong market presence with more than 1700 successful implementations and 8000 users. Their ERP system covers a wide range of business functions including finance, supply chain, manufacturing, service, HR, and sales, available both on-premise and in the cloud with mobile applications. The website is professionally designed, well-structured, and optimized for SEO, providing comprehensive information, customer testimonials, and multiple contact channels. Technically, the site runs on WordPress with modern libraries and integrates Google Analytics, Tag Manager, reCAPTCHA, and Cookiebot for privacy compliance. Security posture is good with HTTPS and anti-spam measures, though additional HTTP security headers could enhance protection. WHOIS data is unavailable, limiting domain trust analysis, but the overall business credibility and digital maturity are high. The site complies with GDPR and provides clear privacy and cookie policies. Overall, Vario.cz represents a mature, trustworthy business with a solid technical foundation and good security hygiene.

J

J.P.N. Cars s.r.o.

jpncars.cz

45

J.P.N. Cars s.r.o. is an established automotive dealership and service provider based in Brno, Czech Republic, specializing in Nissan and Ssangyong vehicles. The company has a long-standing market presence dating back to 1992, offering new and used car sales alongside comprehensive servicing. Their website reflects a professional and consistent brand image, targeting local customers with clear contact information and social media engagement. Technically, the site is built on the concrete5 CMS platform with modern frontend libraries, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though lacking advanced security headers and explicit incident response policies. Overall, the site is trustworthy and compliant with GDPR, but could benefit from enhanced security practices and transparency.

S

SuperHracky.eu

superhracky.eu

46

SuperHracky.eu is a Czech-based e-commerce and wholesale toy retailer offering a wide range of products including LEGO sets and various categories of children's toys. The website is built on the PrestaShop platform and features a professional design with clear navigation and mobile optimization. The business targets retail and wholesale customers primarily within the Czech Republic, supported by a physical store in Žatec. The product catalog is extensive, with detailed descriptions and images enhancing user experience. Technically, the website employs common web technologies such as jQuery, Bootstrap, and Font Awesome, ensuring a modern and responsive interface. HTTPS is enforced, and a cookie consent mechanism is implemented to comply with privacy regulations. However, some security headers are missing, and no explicit security or incident response policies are visible, indicating room for improvement in security posture. From a security and compliance perspective, the site shows basic GDPR compliance through cookie consent but lacks a visible privacy policy and incident response contact details. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data. The domain registration is consistent with the business profile, and no WAF or blocking mechanisms interfere with content accessibility. Overall, SuperHracky.eu presents a trustworthy and functional e-commerce platform with good business credibility and moderate security maturity. Strategic enhancements in security headers, privacy documentation, and incident response readiness would further strengthen its posture.

S

SMAN SPED, spol. s r.o.

smansped.cz

47

SMAN SPED, spol. s r.o. is a Czech-based transportation company specializing in international freight transport with nearly 30 years of experience. The company focuses on transporting all types of goods, including hazardous materials, primarily servicing Austria and Germany. Their fleet includes modern trailers with telematic tracking, ensuring reliable and transparent logistics services. The website is professionally designed, multilingual, and provides clear contact information and a GDPR-compliant privacy policy. Technically, the site is built on Concrete CMS with modern libraries and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent implemented, though security headers and explicit policies are absent. No blocking or WAF challenges were detected, and the domain WHOIS data aligns well with the business claims, supporting legitimacy.

B

Biome4Future

biome4future.com

49

Biome4Future is a pioneering healthcare company specializing in the analysis and commercial storage of human microbiomes to support future health restoration. The company operates a WordPress-based website with e-commerce capabilities, offering advanced molecular-biological analysis and cryopreservation services. Their market position is unique as the first public microbiome bank globally, targeting individuals and families concerned with digestive health and immunity. Technically, the website employs modern technologies including WooCommerce, Google Tag Manager, and multiple analytics tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements can be made by enabling DNSSEC and adding security headers. Overall, the site is professional, trustworthy, and compliant with GDPR, though it lacks explicit incident response and vulnerability disclosure information.

Vinařství Sadílek is a small family-owned winery based in Hustopeče, Czech Republic, with a history dating back to 1983. The business focuses on producing and selling a variety of white and red wines, operating a historic cellar that also serves as a venue for tastings and events. The website reflects a local hospitality business with clear contact details and a modest digital presence. Technically, the site runs on concrete5 CMS with common JavaScript libraries and offers a moderate user experience with good mobile optimization. Security posture is basic, with HTTPS enabled but lacking important security headers and privacy policies, indicating room for improvement in compliance and security best practices. Overall, the site is functional and trustworthy but would benefit from enhanced privacy compliance and security measures.

Základní umělecká škola Brno, Vranovská is a well-established educational institution specializing in foundational arts education including music, dance, and visual arts. With a history dating back to 1924, it serves children and youth in the Brno region, offering a variety of cultural and educational programs. The website reflects a professional and consistent brand presence with clear navigation and relevant content for its target audience. Technically, the site is built on Concrete CMS and uses modern JavaScript libraries to enhance user experience, with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and formal policies could be improved. Overall, the domain registration data aligns well with the institution's profile, indicating legitimacy and trustworthiness.

Z

zvidalkove.cz

zvidalkove.cz

49

Zvidalkove.cz is a small educational business specializing in interactive and playful learning programs for preschool children and kindergartens. The company offers programs focused on first aid basics, healthy lifestyle education, and environmental awareness. The website is professionally designed using WordPress with the OceanWP theme and Elementor page builder, providing a good user experience and clear navigation. The business targets Czech kindergartens and parents interested in early childhood education. Social media presence is established on Facebook and Instagram, enhancing community engagement. Technically, the website employs modern web technologies including HTTPS, cookie consent management via CookieYes, and Google Fonts. While Google Analytics is included, it is not fully configured, indicating room for improvement in analytics deployment. The site is mobile optimized and SEO friendly with comprehensive metadata and structured data. Hosting and domain registration are consistent with the business profile, with the domain registered recently in 2024. From a security perspective, the site uses HTTPS and implements GDPR-compliant cookie consent with granular user controls. However, security headers are not detected, and no explicit security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the HTML content. Privacy compliance is good, with a clear privacy policy page available. Business credibility is supported by testimonials and clear contact information via email and contact form. Overall, Zvidalkove.cz presents a trustworthy and professional online presence for a new educational business. Strategic improvements in security headers, incident response transparency, and analytics configuration would enhance the security posture and operational insights. The website content is safe for general audiences, focusing on educational material for children.

N

nakymatone – Neviditelné reproduktory s úžasným zvukem

nakymatone.cz

38

Nakymatone.cz is a Czech-based company specializing in the development and sale of invisible speakers using proprietary Controlled Resonance Technology (CRT). The company leverages extensive experience in sound engineering and system integration to deliver high-quality audio products designed for easy installation and lifetime enjoyment. Their market position is that of a niche innovator in the audio technology sector, targeting consumers and businesses seeking elegant, invisible speaker solutions. Technically, the website is built on WordPress with popular plugins such as LayerSlider and Elementor, providing a visually appealing and moderately optimized user experience. However, the presence of multiple external scripts from suspicious domains raises security concerns. The site lacks essential privacy and cookie policies, and no contact information is clearly provided, which impacts trust and compliance. WHOIS data is unavailable, indicating privacy protection or registration issues, further reducing transparency. Overall, the website is functional and informative but requires significant improvements in security posture, privacy compliance, and business transparency to enhance credibility and user trust.

B

Bang & Olufsen | AVS INTEGRATION

avs-shop.cz

37

The website avs-shop.cz represents a small retail business specializing in premium Bang & Olufsen audio and television products, with a physical store located in Prague Anděl. The site is built on WordPress with WooCommerce, leveraging popular plugins such as Yoast SEO and various marketing and analytics tools. The business targets consumers seeking high-end audio equipment in the Czech Republic. Technically, the site is well-structured, mobile-optimized, and uses HTTPS with good SSL configuration, though some security headers could be improved. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected. Overall, the site presents a professional and trustworthy e-commerce platform with moderate security posture and good business credibility.

Domy-Domy.cz is a Czech language content website focused on providing inspiration, advice, and tips for family house construction, modern architecture, and comfortable rural living. The site targets individuals interested in building or improving family homes, offering a range of articles authored by Jan Novák. The business model appears to be content publishing monetized through affiliate marketing and advertising partnerships. The website uses modern frontend technologies including Bootstrap and Google Analytics, hosted likely via the WEDOS provider. The site is mobile optimized with good SEO practices and a clear navigation structure. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and published security policies. WHOIS data shows an unusual domain creation date in the future, which raises questions about domain legitimacy, though the site content is professional and consistent. Overall, the site scores a 72 out of 100 in AI evaluation, indicating a good but improvable digital presence.

T

Tradicion

tradicion.cz

44

Tradicion is a small entertainment business specializing in Latino dance performances, offering exotic dancers, original costumes, and authentic atmosphere shows. The website is built on WordPress using the Divi theme and integrates common marketing and analytics tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. The site includes a cookie consent mechanism indicating some level of GDPR compliance, but lacks visible privacy policy and terms of service pages. No direct contact information is provided on the homepage, which may affect user trust. Technically, the site is moderately optimized with good mobile responsiveness and SEO practices, but could improve security by implementing additional HTTP security headers. The absence of WHOIS data for the domain reduces the trustworthiness of the domain registration, warranting further investigation. Overall, the site presents a professional and focused business offering niche entertainment services with moderate digital maturity and security posture.