High-risk security reports

E

eKempy.sk

ekempy.sk

41

eKempy.sk is a Slovak online catalog and booking platform specializing in campsites, caravans, apartments, bungalows, and related accommodations across Slovakia. Established in 2010, it offers a comprehensive database with reviews, photos, maps, and weather information, targeting tourists and campers seeking affordable and convenient lodging options. The website is well-structured with rich content and a consistent brand presence, positioning itself as a trusted resource in the Slovak hospitality sector. Technically, the site employs common JavaScript libraries such as jQuery, Slick, Owl Carousel, and Fancybox, and is hosted on servers associated with vas-hosting domains. It uses HTTPS with DNSSEC enabled, ensuring secure domain resolution and encrypted connections. However, the site lacks explicit privacy and terms of service pages, and does not implement a formal cookie consent mechanism, which are areas for compliance improvement. Security headers are not detected, and no incident response or vulnerability disclosure information is provided, indicating room for enhancing security posture. Advertising is managed through Google Adsense, with minimal tracking observed. Overall, the site is safe for general audiences, with no adult or questionable content detected.

E

eKempy.cz

ekempy.cz

42

eKempy.cz is a well-established Czech online directory specializing in camping sites, autokempy, and related outdoor accommodation options such as mobile homes, bungalows, and cabins. Founded in 2007, it serves a broad audience including families, anglers, cyclists, and sports enthusiasts by providing detailed listings, user reviews, maps, and weather information. The website holds a strong market position as a leading camping catalog in the Czech Republic, supported by rich content and user engagement features.

P

PRAHA REAL.cz - reality Praha,byty,domy,pozemky,nemovitosti

prahareal.cz

43

PrahaReal.cz is a Czech Republic-based real estate listing platform primarily focused on properties in Prague and its surrounding districts. The website offers a variety of real estate listings including apartments, houses, commercial spaces, and land for sale or rent. It serves as an advertising portal for private sellers and real estate agencies, providing map-based search and photo galleries to enhance user experience. The platform has been operational since 2007, indicating a stable presence in the local real estate market. Technically, the website is built using standard HTML, CSS, and JavaScript without modern frameworks or CMS detected. It is moderately optimized for mobile devices and SEO, with clear navigation and structured content. However, some technical shortcomings exist such as loading external scripts over insecure HTTP, lack of security headers, and no visible SSL enforcement from the provided data. These factors slightly reduce the technical maturity and security posture of the site. From a security perspective, the site does not display privacy or cookie policies, nor does it provide incident response or security policy documentation. The presence of mixed content and absence of security headers represent potential vulnerabilities. No critical security issues such as exposed credentials or malware were detected. The WHOIS data confirms domain legitimacy and consistency with the business focus, supporting trustworthiness. Overall, PrahaReal.cz is a functional and relevant real estate portal with good content quality and business credibility but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence.

R

REALITES.CZ

realites.cz

43

REALITES.CZ is a well-established Czech online real estate platform founded in 2005, offering a comprehensive range of property listings including apartments, houses, commercial spaces, land, and recreational properties. The website serves both private sellers and real estate agencies, providing free ad submissions and registration options for agencies. It targets property buyers, renters, and real estate professionals within the Czech Republic. The platform features categorized listings, map-based search, and links to related real estate services, positioning itself as a significant player in the Czech real estate market. Technically, the website employs standard web technologies such as HTML, CSS, and JavaScript, with a moderate performance profile and basic mobile optimization. The site uses HTTPS but lacks advanced security headers and formal privacy or cookie policies, indicating room for improvement in security and compliance. Advertising is integrated via Google Adsense, and no analytics scripts were detected in the provided content. From a security perspective, the site benefits from HTTPS and no visible exposure of sensitive data but lacks explicit security policies, incident response contacts, and advanced security headers. The absence of privacy and cookie policies suggests potential GDPR compliance gaps. No WAF or blocking mechanisms were detected, and the domain's WHOIS data confirms a consistent and mature registration history, supporting the site's legitimacy. Overall, REALITES.CZ presents a professional and functional real estate platform with good business credibility but requires enhancements in privacy compliance and security best practices to strengthen trust and regulatory adherence.

S

Spolubyvanie.sk

spolubyvanie.sk

42

Spolubyvanie.sk operates as the largest classified ads platform in Slovakia specializing in shared housing and roommate matching. Established in 2007, it offers a free listing service for individuals seeking or offering rooms and apartments across multiple Slovak regions. The platform targets Slovak residents, particularly young adults and students, looking for affordable and convenient housing solutions. Its market position is strong within its niche, supported by a long domain history and active listings with photos. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, with integration of Facebook social plugins for user engagement. The site is moderately optimized for mobile devices and SEO, though it lacks modern frameworks or CMS indications. Security posture is basic, with no visible security headers or advanced protections, and no explicit privacy or cookie policies, which poses compliance risks. Overall, the site is functional and credible but would benefit from enhanced security and privacy measures.

R

REALITES.SK

realites.sk

45

REALITES.SK is a Slovak online real estate portal established in 2006, offering a wide range of property listings including apartments, houses, commercial spaces, land, and recreational properties primarily in Slovakia with some international listings. The platform targets buyers, sellers, renters, and real estate agencies, providing free ad insertion and agency registration services. The website features a basic but functional technical infrastructure using standard web technologies, Google Adsense for advertising, and Facebook SDK for social integration. Security posture is moderate with HTTPS implied but lacking advanced security headers and explicit privacy policies. The site is accessible without WAF or blocking mechanisms and shows consistent WHOIS data supporting legitimacy. Overall, the site is a moderately professional real estate listing platform with room for improvement in privacy compliance and security best practices.

D

Durisol zdivo

durisol-zdivo.cz

43

The website www.durisol-zdivo.cz presents a specialized construction business focused on the Durisol building system, which integrates wood, concrete, and insulation to create energy-efficient, healthy, and durable family homes. The site targets individuals and families in the Czech Republic interested in innovative and sustainable building technologies. The business offers consultation, project design, construction services, and DIY support, positioning itself as a niche player in the real estate and energy-efficient construction sector. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Owl Carousel, and Google services such as Analytics and Maps. The site is mobile-optimized with good navigation and content relevance. However, performance is moderate and accessibility features are basic. No CMS or hosting provider details were detected. From a security perspective, the site lacks visible security headers and a privacy policy, which are important for compliance and user trust. HTTPS status is unknown from the data, but Google Analytics and cookie consent are implemented, indicating some privacy awareness. The absence of WHOIS data is a significant concern, reducing domain trustworthiness and raising questions about domain registration legitimacy. Overall, the website is functional and professional but would benefit from enhanced security practices, transparent privacy policies, and verified domain registration information to improve trust and compliance.

The website penguins.pl is currently inaccessible, returning a 403 Forbidden error page served by nginx. This prevents any meaningful analysis of the website's content, business model, or security posture. The domain is registered with OVH SAS since 2011, indicating a mature and potentially legitimate domain. However, no metadata, contact information, or business content is available to assess the company's operations or compliance. The lack of accessible content and security headers limits the ability to evaluate technical infrastructure or privacy compliance. Overall, the site appears blocked or restricted, requiring further access for comprehensive analysis.

Y

Yoga in Daily Life

yogaindailylife.org

46

Yoga in Daily Life is a globally recognized non-profit organization dedicated to promoting the scientific master system of yoga authored by Paramhans Swami Maheshwarananda. The organization offers a wide range of yoga classes worldwide, online resources, and community events aimed at improving health and harmony of body, mind, and soul. The website reflects a mature digital presence with comprehensive content, structured data, and active social media engagement. Technically, the site is built on Joomla CMS with modern UIkit and Yootheme frameworks, integrating multimedia and social plugins effectively. Security posture is good with HTTPS, security headers, and privacy compliance, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is trustworthy, professional, and well-positioned in the wellness and spiritual education sector.

C

Centrum pro bezpečný stát z.s.

ochranaobyvatel.cz

42

Centrum pro bezpečný stát z.s. operates a Czech-language website focused on civil protection, emergency preparedness, and educational resources including a 3D learning platform and simulators. The organization targets the general public and municipalities, providing valuable information and training tools to enhance safety during extraordinary events. The website is positioned as a niche non-profit entity with a long-standing presence since 2007, supported by partnerships with related organizations. Technically, the site uses a combination of jQuery, Bootstrap, and other JavaScript libraries to deliver a responsive and interactive user experience, though some libraries are outdated. Security posture is moderate with HTTPS enforced and a cookie consent mechanism implemented, but lacks visible advanced security headers and explicit security policies. Privacy compliance is basic, with no explicit privacy policy or terms of service found in the provided content. Overall, the website is functional, informative, and trustworthy but could improve transparency and security practices.

P

P.F. art, spol. s r. o.

atlasskolstvi.cz

48

AtlasŠkolství.cz is an online educational directory operated by P.F. art, spol. s r. o., focused on providing comprehensive information about schools across the Czech Republic including universities, secondary schools, elementary schools, language schools, and higher vocational schools. The platform serves students, parents, educators, and employers by offering searchable school listings and advertising opportunities. The website is professionally designed with consistent branding and clear navigation, targeting the Czech education sector niche. Technically, the site uses standard web technologies including jQuery and Google Tag Manager, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers and incident response information are lacking. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR. However, the WHOIS data for the domain is unavailable, which raises questions about domain registration transparency but does not detract from the site's apparent legitimacy and professionalism.

The website www.bechynsko.cz serves as a cultural and tourism information portal for the Bechyně region in the Czech Republic. Operated by W Partner s.r.o., it provides event announcements, local news, tourist information, and virtual tours aimed at residents and visitors interested in regional culture and activities. The portal is positioned as a regional informational resource with a focus on community engagement and tourism promotion. Technically, the site uses a proprietary CMS developed by W Partner s.r.o., leveraging older JavaScript libraries such as jQuery 1.4.2, Slimbox2, and Flexslider, alongside FontAwesome and Google Fonts. The site shows moderate performance and basic mobile and accessibility support. SEO is basic but functional, with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS but lacks modern security headers and employs outdated JavaScript libraries with known vulnerabilities. No cookie consent or comprehensive privacy mechanisms are present, which is a compliance gap under GDPR. WHOIS data is unavailable, which reduces domain trustworthiness, though the site content and structure appear legitimate and consistent with a local government or community portal. Overall, the site is functional and serves its informational purpose well but requires modernization in security, privacy compliance, and technical stack to improve trust and resilience against threats.

K

Konektor

knktr.cz

42

Konektor is a Czech-based integrated communication agency founded in 2021, specializing in strategic communications, advertising, public relations, influencer marketing, and public affairs. The company serves business clients by assembling expert teams tailored to client needs, supported by a strong portfolio of case studies and notable clients such as Microsoft, NVIDIA, and Netflix. The website reflects a professional and modern digital presence with comprehensive service descriptions and client testimonials. Technically, the website is built on Angular framework with modern tracking and marketing tools including Google Tag Manager and Bing Ads. Hosting and domain registration are consistent with the company's Czech Republic location. The site is mobile-optimized and SEO-friendly, though accessibility features could be enhanced. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks explicit published security policies or incident response contacts. No critical vulnerabilities or suspicious content were detected. Privacy compliance is well addressed with a clear privacy policy and cookie management. Overall, the website and domain present a trustworthy and credible business with a solid digital infrastructure. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility compliance to further strengthen trust and compliance.

K

Kristian

kristian.cz

46

Kristian is a well-established full-service advertising agency based in the Czech Republic, founded in 1995. The company offers a comprehensive range of marketing services including media planning, creative ideation, digital marketing, production, graphic design, and multimedia content creation. Their client portfolio includes prominent brands such as Škoda Auto, Dior, and Gorenje, reflecting a strong market presence and trusted reputation. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a positive user experience. Technically, the website leverages modern web technologies including Bootstrap, Font Awesome, Mapbox GL JS, and October CMS, ensuring a contemporary and responsive digital infrastructure. Performance is moderate with good SEO and accessibility basics in place. Security posture is solid with HTTPS enforced and secure form handling, though the absence of security headers and formal privacy/cookie policies indicates room for improvement in compliance and defense-in-depth. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. However, the lack of privacy and cookie policies, as well as missing incident response contacts and vulnerability disclosure mechanisms, represent compliance and transparency gaps. The WHOIS data aligns well with the business claims, showing a consistent and legitimate domain registration history. Overall, Kristian's website reflects a mature and credible business with strong branding and technical implementation. Strategic enhancements in privacy compliance and security best practices would further strengthen their digital trustworthiness and regulatory adherence.

I

INTUO s.r.o.

intuo.eu

44

INTUO s.r.o. is a Czech-based marketing and advertising agency established in 2008, specializing in brand building, advertising campaigns, and graphic design services. The company serves a range of notable clients including ŠKODA AUTO, T-Mobile, and Agrofert, positioning itself as a reliable partner in the media sector. The website reflects a professional portfolio with detailed project descriptions and client logos, targeting businesses seeking comprehensive marketing solutions. Technically, the website uses legacy jQuery 1.8.3, Google Analytics, and Google Tag Manager for tracking. Hosting is provided by Český hosting (THINline s.r.o.). The site has moderate performance and basic mobile optimization, with a fixed-width layout. SEO and accessibility features are basic but functional. No CMS or modern frameworks are detected. From a security perspective, the site uses HTTPS but lacks visible security headers and uses an outdated JavaScript library, which may pose risks. There are no privacy or cookie policies present, indicating compliance gaps with GDPR. Contact information is clearly provided, but no incident response or security policy details are found. Tracking is moderate via Google services without visible consent mechanisms. Overall, the website is professional and trustworthy but requires improvements in privacy compliance, security best practices, and modernization of technical components to enhance security posture and user trust.

S

Studio Protein

studioprotein.cz

45

Studio Protein is a Czech digital graphic design studio specializing in brand building, logo creation, web and app design, packaging, and presentations. They position themselves as a creative agency using a proprietary method called OBSAH+FORMA to transform brands into distinctive visual identities. The website is professionally designed, targeting businesses seeking comprehensive branding and design services. The company is a founding member of the Czech Union of Graphic Design, indicating a reputable market position. Technically, the website employs modern web technologies including jQuery, Nette Forms, and Google Tag Manager for analytics. It features a cookie consent mechanism compliant with GDPR, and the site is mobile optimized with good SEO practices. However, no explicit security headers were detected, and WHOIS data is unavailable, likely due to privacy protection. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were found. The absence of WHOIS data slightly reduces trust but is common for small creative agencies. Overall, the site presents a moderate to good security posture. The overall risk is low given the nature of the business and the professional presentation. Strategic recommendations include enhancing security headers, publishing explicit security and privacy policies, and verifying SSL configurations to strengthen trust and compliance.

G

Garp Integrated

g-in.cz

46

Garp Integrated is a strategic and creative agency based in Prague, specializing in brand activation, promotional campaigns, and empathetic branding. The company serves businesses seeking to enhance consumer engagement and communication integration, leveraging local and international recognition for its work. The website reflects a professional and modern digital presence built on WordPress with Elementor, incorporating SEO best practices and client portfolio showcases. Security measures include HTTPS and Google reCAPTCHA on contact forms, though additional security headers and policies could enhance protection. The absence of WHOIS data and privacy policies presents minor trust and compliance concerns but does not detract significantly from the overall legitimacy. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, and providing clear incident response contacts.

F

Fragile

fragile.cz

47

Fragile is a well-established marketing agency based in Prague, Czech Republic, founded in 2004 and operating under the parent company KNOWLIMITS Group. The company offers a comprehensive suite of marketing services ranging from strategy and media planning to creative production, social media management, influencer marketing, performance marketing, SEO, and data analytics. Their website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on WordPress with modern frameworks and plugins, ensuring good performance and SEO optimization. Security posture is solid with HTTPS enabled and GDPR compliance mechanisms in place, including cookie consent and privacy policies. No critical vulnerabilities or blocking mechanisms were detected, and the WHOIS data aligns well with the business claims, indicating legitimacy and trustworthiness.

Eventisimo s.r.o. is a creative event agency based in the Czech Republic specializing in BTL activities, event marketing, and sales promotion. The company claims over 10 years of experience and offers full-service event preparation tailored to client needs. Their website reflects a professional and consistent brand image targeting clients seeking comprehensive event marketing solutions. Technically, the website is built on WordPress with modern integrations such as Google Analytics, Facebook Pixel, and Google reCAPTCHA, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and anti-bot measures in place, though the absence of security headers and privacy policies suggests room for improvement. The lack of WHOIS data limits domain trust verification, but the website content and social media presence support business legitimacy. Overall, the site is well-designed, user-friendly, and suitable for its target audience.

D

DFMG

dfmg.cz

47

DFMG is a Czech marketing group combining expertise from digital communication agencies and technology firms. They offer a broad range of marketing services including graphic design, application development, performance marketing, content marketing, multimedia production, event management, client service, and strategic creative consulting. The website is professionally designed, mobile-optimized, and integrates modern analytics and cookie consent tools, reflecting a mature digital infrastructure. Security posture is moderate with HTTPS usage but lacks visible security headers and published security policies. WHOIS data is unavailable, which reduces transparency but the website content and social media presence support legitimacy. Overall, the site is well-positioned for business clients seeking comprehensive marketing solutions in the Czech market.

C

CAN.agency

icomtech.cz

47

CAN.agency is a well-established Czech communication agency founded in 2016, specializing in brand identity, creative strategies, media communication, and integrated marketing services. The company positions itself as one of the longest operating agencies in the Czech Republic, targeting businesses seeking comprehensive brand building and media strategies. Their business model focuses on delivering measurable advertising results through a combination of creative and media planning services. The website reflects a professional and consistent brand image with a clear presentation of services and client portfolio.

A

advertia digital s.r.o.

advertia.cz

49

advertia digital s.r.o. is a well-established full-service digital agency based in the Czech Republic, specializing in branding, marketing, web design, and strategic communication. With over a decade of experience and recognition as the top digital agency in the Czech Republic by Clutch in 2025, the company targets brands, startups, and businesses seeking impactful digital growth solutions. Their service portfolio includes brand workshops, consulting, campaigns, and rapid digital sprints tailored for urgent business needs. Technically, the website is built on WordPress with modern SEO and multilingual capabilities, leveraging tools like Yoast SEO, WPML, Google Analytics, and Cookiebot for privacy compliance. The site demonstrates good performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is attributed to privacy protection, which is justified for this business type. Overall, the website presents a strong security posture with room for improvement in formal security disclosures. The overall risk is low, supported by professional content, clear business information, and compliance with privacy regulations. Strategic recommendations include enhancing security headers, publishing security policies, and establishing vulnerability disclosure channels to further strengthen trust and security posture.

A

AKA (Asociace komunikačních agentur České republiky, spolek)

aka.cz

49

AKA (Asociace komunikačních agentur České republiky, spolek) is a leading non-profit association in the Czech Republic that unites top communication agencies. The organization focuses on advancing communication standards, supporting innovation, and investing in education for marketing professionals. It operates various projects including awards (Effie), certification, legal advisory, and public tender standards, positioning itself as a key industry influencer in the Czech media and marketing sector. The website reflects a mature digital presence with professional design, comprehensive content, and strong SEO practices. Technically, the site is built on WordPress with modern plugins for SEO and GDPR compliance, and it uses Google Tag Manager for analytics. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data is a concern but the overall professionalism and transparency of the site mitigate this risk. Contact information is clearly provided, and the site maintains active social media channels. Overall, AKA demonstrates a strong market position and digital maturity with room for minor security enhancements.

CDN-SCRIPT.COM is a newly launched technology service offering a free and open source content delivery network aimed at developers to facilitate faster loading of library files on websites. The website is minimalistic, focusing on a simple message and basic branding without extensive content or legal disclosures. The technical infrastructure leverages modern frontend libraries such as Bootstrap and Font Awesome, and uses Google Tag Manager for analytics. The domain is registered recently in March 2024 with NameCheap and uses Cloudflare nameservers, indicating a reliable hosting and DNS setup. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and compliance features are absent, with no privacy or cookie policies, and no contact or incident response information provided. Overall, the site is functional but basic, with room for improvement in compliance, security best practices, and business transparency.

U

UNIWEB s.r.o.

regionzlin.cz

48

REGIONZLIN.CZ is a well-established regional news and information portal focused on the Zlínský kraj region in the Czech Republic. Operated by UNIWEB s.r.o., the portal offers daily news, a business directory, event calendars, job listings, and regional advertising services. The website targets residents and businesses within the region, positioning itself as a key media player with a consistent brand and quality content. The domain has been active since 2007, supporting the site's legitimacy and long-term presence in the market. Technically, the site employs modern front-end technologies such as Bootstrap, jQuery, and various UI libraries, hosted via Active24, and integrates Google Analytics for user tracking.

U

UNIWEB s.r.o.

regionhradec.cz

46

REGIONHRADEC.CZ is a regional news and information portal focused on the Hradecký kraj region in the Czech Republic. Operated by UNIWEB s.r.o., the portal offers daily news, business directories, event calendars, job listings, and regional advertising services. The website targets local residents and businesses, positioning itself as a leading regional media outlet with a strong content offering and consistent branding. Technically, the site employs modern front-end technologies including Bootstrap, jQuery, and various UI libraries, hosted by Active24. It demonstrates good SEO and mobile optimization but lacks some advanced accessibility features. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks some security headers and explicit incident response information. Privacy compliance is partially met with a comprehensive GDPR policy but no visible cookie consent mechanism. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

U

UNIWEB s.r.o.

regionliberecko.cz

46

REGIONLIBERECKO.CZ is a well-established regional news and information portal serving the Liberecký kraj region in the Czech Republic. It provides daily news, a business directory, event calendars, job listings, and regional advertising opportunities. The portal is part of the REGION24.CZ media group and operated by UNIWEB s.r.o., a reputable Czech web and marketing company. The website targets local residents and businesses, offering relevant regional content and services. Technically, the site employs modern front-end technologies such as Bootstrap, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks some security headers and explicit security policies. Privacy compliance is addressed with a comprehensive GDPR policy, though cookie consent mechanisms are absent. Overall, the site demonstrates a mature digital presence with good content quality and business credibility.

S

Seznam.cz, a.s.

classicpraha.cz

48

Classic Praha is a Czech classical music radio station operated by Seznam.cz, a major internet company in the Czech Republic. The station broadcasts classical, film, jazz, swing, and musical music primarily in Prague on 98.7 FM and also offers online streaming and a mobile app. The website provides cultural news, program schedules, and multimedia content to its audience. Technically, the site uses modern JavaScript libraries, Google Analytics, Gemius tracking, and a consent management platform to comply with privacy regulations. The site is well-structured, mobile-optimized, and uses HTTPS for secure communications. However, the absence of WHOIS data reduces transparency and trust slightly. No direct contact emails or phone numbers are visible, and there is no explicit security or incident response policy published. Overall, the website is professional, content-rich, and trustworthy, with moderate tracking and advertising integration.

AZ GEO, s.r.o. is a well-established Czech company specializing in geological, ecological, and environmental consulting and services. Founded in 1998 and part of the Skupina Valbek group, it offers a broad portfolio including geotechnical surveys, environmental impact assessments, waste management, and laboratory soil mechanics testing. The company serves a diverse clientele including government bodies, municipalities, investors, and construction firms across the Czech and Slovak Republics. The website reflects a professional business with clear service offerings and contact information, supported by recognized ISO certifications.

I

IBR Consulting, s.r.o.

ibrconsulting.cz

43

IBR Consulting, s.r.o. is a Czech consulting company specializing in transportation construction projects, offering comprehensive services from technical assistance to software development for project management. The company targets investors, project planners, and contractors, positioning itself as a leading player in the Czech transportation construction sector. Their website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on WordPress with modern plugins and analytics tools, providing moderate performance and good mobile optimization. Security posture is solid with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The absence of WHOIS data reduces trust in domain legitimacy, but the website content and business information appear credible and professional.

C

Cukrářství Budařovi

cukrarstvibudarovi.cz

48

Cukrářství Budařovi is a small family-owned confectionery business based in the Czech Republic, specializing in traditional pastries, cakes, and other sweet products. The company operates physical stores in Ostrožská Lhota and Uherské Hradiště and offers an e-commerce platform for customer orders. Their market position is local and regional, focusing on quality and traditional recipes. The website reflects a professional and consistent brand image with clear navigation and product categorization. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Analytics, and Mapy.cz mapping services. While the site is mobile-optimized and performs moderately well, it uses a deprecated map SDK which should be updated. The site is served over HTTPS, but lacks some advanced security headers and explicit privacy policy disclosures on the homepage. From a security perspective, the site demonstrates basic good practices such as HTTPS enforcement and secure form handling. However, the absence of WHOIS data and lack of published security or incident response policies reduce overall trust. No critical vulnerabilities were detected, but updating third-party libraries and enhancing security headers is recommended. Overall, the website is safe, professional, and suitable for its target audience. The main risk lies in the missing WHOIS data and limited privacy disclosures, which should be addressed to improve trust and compliance.

B

BeWooden Company s.r.o.

bewooden.cz

46

BeWooden Company s.r.o. is a Czech-based artisan company specializing in handcrafted wooden jewelry, watches, and fashion accessories. Established in 2013, it has positioned itself as a reputable brand in the retail sector, emphasizing sustainability, craftsmanship, and unique design. The company operates a professional e-commerce platform complemented by physical retail presence and offers custom corporate gifts. The website demonstrates strong branding consistency, excellent content quality, and positive customer engagement through reviews and social media. Technically, the site employs modern web technologies and integrates multiple marketing and analytics tools, ensuring a good user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain registration transparency but does not detract from the overall legitimacy supported by certifications and customer feedback. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving accessibility features to further strengthen trust and compliance.

V

Vega TEAM

vegateam.cz

42

Vega TEAM is a Czech Republic-based internet studio specializing in creating successful websites, e-shops, internet marketing, custom software, and mobile applications. Established since 1999, the company targets businesses seeking professional digital solutions and offers a broad range of services including web development, marketing, consulting, and maintenance. The website reflects a professional and consistent brand image with clear service offerings and client engagement channels. Technically, the site uses common web technologies such as jQuery, FlexSlider, Google Analytics, and Zopim Live Chat, indicating a moderate level of digital maturity. However, mobile optimization and accessibility are basic, and performance is moderate. Security posture is average with no visible HTTPS confirmation or security headers detected in the provided data, and no privacy or cookie policies are published, indicating compliance gaps. WHOIS data is unavailable, which reduces domain trustworthiness and raises questions about domain registration transparency. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

M

MN Modelar

mn-modelar.cz

38

MN Modelar operates a professional e-commerce platform specializing in plastic models and modeling supplies, targeting hobbyists primarily in the Czech Republic and Slovakia. The website offers a broad catalog of products from well-known brands, supported by customer reviews and secure payment options, positioning itself as a trusted regional retailer. Technically, the site employs modern web technologies including Bootstrap, jQuery, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Security measures include HTTPS enforcement and reCAPTCHA on forms, though some HTTP security headers like Content-Security-Policy are missing. Privacy compliance is addressed with cookie consent mechanisms and a privacy policy page. However, the absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and business indicators suggest a legitimate operation. Overall, the site is well-structured, user-friendly, and secure, with room for improvement in security header implementation and transparency regarding domain registration.

A

Armycast

armycast.cz

43

Armycast is a small e-commerce business specializing in scale modeling accessories such as decal sets, resin sets, and airbrush mask sets. The website is built on the PrestaShop platform and targets hobbyists and collectors interested in military scale models. The site presents a professional and well-structured online store with clear product listings and pricing. Technically, the site uses modern web technologies including jQuery and Material Icons, and it is mobile-optimized with moderate performance. Security posture is adequate with HTTPS enabled, but lacks important security headers and explicit privacy and cookie policies, which are compliance gaps. The absence of WHOIS data limits the ability to verify domain legitimacy fully, reducing trustworthiness. Overall, the site is functional and professional but would benefit from improved compliance and security practices.

A

Avax-Models

avax-models.cz

49

Avax-Models is a Czech Republic based e-commerce retailer specializing in plastic model kits and related hobby supplies. Established since 2009, the company targets model hobbyists and enthusiasts with a broad catalog of products including aircraft, vehicles, figures, and accessories. The website is professionally designed with clear navigation and a focus on user experience, supporting multiple languages and providing comprehensive product information. Technically, the site uses modern JavaScript libraries such as jQuery and is hosted on a regional provider consistent with its market. Security posture is adequate with HTTPS and cookie consent mechanisms implemented, though it lacks advanced security headers and explicit security policies. The domain is currently expired, which poses a risk to business continuity and trust. Contact information including phone and email is clearly presented, and social media presence is established on Facebook and Instagram. Overall, the site demonstrates good privacy compliance and business credibility for a small retail operation.

The website www.mpmshop.cz is currently inaccessible, returning a 403 Forbidden error page served by nginx 1.26.2. This prevents any meaningful content or metadata extraction. The absence of WHOIS data further complicates legitimacy verification, suggesting the domain may be unregistered, suspended, or privacy protected. No business, contact, or security information is available, indicating a very low digital maturity level and poor security posture. Without access to the site content or metadata, no privacy or compliance policies can be confirmed. Overall, the site presents a high risk due to lack of transparency and accessibility.

Hauler.cz is a niche manufacturing and e-commerce website specializing in high-quality photo-etched and resin accessories for scale modellers. The company targets hobbyists and scale modelling enthusiasts primarily in the Czech Republic and European Union. The website offers detailed product catalogs, newsletters, and a direct e-shop for purchasing products. The business model relies on direct sales and distributor partnerships, positioning Hauler as a specialized player in the manufacturing sector for modelling accessories. Technically, the website uses a simple tech stack including jQuery and custom JavaScript with CSS styling. The site is accessible and functional but shows basic mobile optimization and limited SEO and accessibility features. There is no detected CMS or advanced frameworks, indicating a lightweight custom or static site approach. Performance is moderate with no evident advanced hosting or CDN usage. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are important for GDPR compliance given the European audience. No incident response or vulnerability disclosure information is provided. The WHOIS data is unavailable, likely due to privacy protection, which reduces transparency but is common for small businesses. No tracking or analytics scripts were detected, indicating minimal user tracking. Overall, Hauler.cz presents a professional and trustworthy front for its niche market but should improve privacy compliance and security headers to enhance trust and regulatory adherence. The lack of WHOIS transparency is a minor concern but not unusual for this business type.

P

Plastikovy-model.cz

plastikovy-model.cz

48

Plastikovy-model.cz is a Czech Republic based e-commerce retailer specializing in plastic model kits including airplanes, cars, ships, military vehicles, and related modeling accessories such as paints, glues, and tools. The website targets hobbyists and model enthusiasts, offering a broad catalog of products from various well-known manufacturers. The business operates a niche online retail model with a clear focus on the modeling hobby market segment in the Czech Republic. Technically, the website employs a modern but standard technology stack including jQuery, Bootstrap, and Google Analytics for tracking. The site is mobile responsive and well-structured for user navigation. However, it lacks some advanced security headers and detailed WHOIS data, which slightly impacts trustworthiness. The site uses HTTPS properly and implements cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the site shows good practices such as HTTPS enforcement and cookie consent but could improve by adding security headers like Content-Security-Policy and HSTS. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are present and accessible, supporting compliance with data protection regulations. Overall, Plastikovy-model.cz presents a professional and trustworthy online retail presence for plastic model enthusiasts. The absence of WHOIS data is a minor concern but does not significantly detract from the site's legitimacy given the quality of content and contact transparency. Strategic improvements in security headers and ongoing library updates are recommended to enhance security posture.

J

JM Modely

jm-modely.cz

49

JM Modely is a Czech Republic based e-commerce retailer specializing in plastic model kits and related hobby products. The website offers a wide range of products including aircraft, military vehicles, ships, paints, tools, and accessories targeted at model hobbyists. The business operates primarily online, leveraging a Czech e-commerce platform (eshop-rychle.cz) and provides customer support via phone and online forms. The site is professionally designed with good navigation and product presentation, catering to a niche market of scale model enthusiasts. Technically, the website uses modern JavaScript libraries, a responsive design, and integrates Matomo analytics and Smartsupp chat for user engagement and tracking. Security posture is strong with HTTPS enforced and secure login forms, though some security headers are missing. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism. WHOIS data is missing, which raises concerns about domain registration transparency and trustworthiness. Overall, JM Modely presents a credible and functional online retail presence with room for improvement in privacy compliance and domain legitimacy verification.

R

RCsubs

rcsubs.cz

46

RCsubs is a specialized small business based in the Czech Republic that offers a niche range of submarine scale models and related accessories. Their product catalog includes resin scale models, 3D printed submarine kits, diving systems, and photo-etched sets, targeting hobbyists and model enthusiasts. The website is built on Joomla CMS and presents a moderate level of digital maturity with good content quality and user experience. However, it lacks critical privacy and cookie policies, explicit contact information, and security headers, which are important for compliance and trust. The domain registration data is consistent with the business location and age, supporting legitimacy. Overall, the site is functional and informative but requires improvements in privacy compliance and security posture to enhance trust and regulatory adherence.

T

Technické muzeum v Brně

tmbrno.cz

47

Technické muzeum v Brně is a prominent technical museum located in Brno, Czech Republic, offering a wide range of permanent and temporary exhibitions, educational programs, and cultural events. The institution targets a broad audience including families, students, researchers, and the general public interested in technology and history. The website reflects a well-established non-profit cultural entity with a strong local and regional presence, supported by partnerships and active social media engagement. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities, leveraging modern web technologies and SEO best practices. The site is mobile-optimized and accessible, providing a professional user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not published. The absence of WHOIS data limits domain registration trust analysis, but the overall digital footprint and content quality support legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining up-to-date software to ensure ongoing protection and compliance.

L

LATAM Airlines Group S.A.

latam.com

49

LATAM Airlines Group S.A. operates as a leading airline in Chile and South America, offering a comprehensive range of travel services including flight bookings, travel packages, hotel reservations, car rentals, and travel insurance. The website targets travelers primarily in Chile and the broader South American region, providing a seamless digital experience for booking and managing travel. The company maintains a strong market position as a regional leader with a well-established loyalty program, LATAM Pass, enhancing customer retention and engagement. Technically, the website is built on modern web technologies including React with Next.js framework, supported by robust analytics and marketing tools such as Google Analytics, FullStory, Adjust, and Exponea. The site is hosted on a reliable CDN infrastructure (Akamai), ensuring fast performance and excellent mobile optimization. SEO and accessibility practices are well implemented, contributing to a professional and user-friendly experience. From a security perspective, the site enforces HTTPS and employs standard security headers, with no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the website presents a low-risk profile with high professionalism and trustworthiness, though the absence of WHOIS domain registration data slightly reduces confidence in domain legitimacy. Strategic recommendations include publishing detailed security and incident response policies and enhancing transparency around vulnerability disclosures.

K

Kontrola systémů vytápění

kontrolykotluzlin.cz

42

The website www.kontrolykotluzlin.cz represents a small Czech-based business specializing in heating system inspections and energy compliance services, primarily serving the Zlín region and nearby cities such as Brno and Olomouc. The company offers legally mandated inspections for heating systems with heat sources above 70 kW, including licensed and unlicensed operations, as well as related services like gas and pressure equipment inspections and external energy specialist consulting. The site content is professionally presented in Czech, with clear contact details and official certifications, indicating a legitimate and focused service provider in the energy sector. Technically, the website leverages the AMP framework to ensure fast loading and excellent mobile optimization. It uses JSON-LD structured data to enhance search engine understanding and integrates Google Analytics for visitor tracking. The site is well-structured with good SEO practices and accessibility features, although no CMS or hosting provider details are explicitly identified. The absence of forms reduces attack vectors, and the site appears to use HTTPS, though explicit security headers are not detected in the provided data. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. However, the lack of explicit security headers and cookie consent mechanisms are areas for improvement. The WHOIS data is missing, which is unusual and reduces trustworthiness from a domain registration perspective. Despite this, the presence of official certifications and detailed contact information supports the site's legitimacy. Overall, the website is a well-maintained, professional platform for a niche energy compliance service provider. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and verifying domain registration details to improve trust and compliance.

T

TopLinks.CZ - katalog odkazů

toplinks.cz

44

TopLinks.cz is a Czech online directory and catalog service established in 2007, offering a large database of categorized links including business registries, legal databases, real estate listings, and public information resources. The site targets Czech and Slovak internet users seeking comprehensive access to official registries and practical information. Its business model relies primarily on advertising revenue, notably Google Adsense, and link listings. Technically, the site is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS, hosted on Czech infrastructure consistent with its domain registration. Security posture is basic with HTTPS enabled but lacking advanced security headers and published security policies. Privacy compliance is minimal, with a cookie notice but no explicit privacy policy or consent mechanism. Overall, the site is functional and moderately trustworthy but would benefit from enhanced security and privacy practices.

K

Karel Sevcik

penguins-hockey-cards.com

49

The website www.penguins-hockey-cards.com is a niche hobbyist platform dedicated to the collection and exchange of Pittsburgh Penguins hockey cards. It serves a small community of collectors and fans, providing detailed information about the collection, exchange opportunities, and related news. The site is maintained by an individual collector, Karel Sevcik, and reflects a personal passion rather than a commercial enterprise. The business model is primarily informational and community-driven, with some card exchange and sales features. The market position is that of a specialized collector's resource with limited scale and reach. Technically, the site uses standard web technologies including JavaScript, jQuery, Google reCAPTCHA v3 for bot protection, Google Analytics for tracking, and Google Adsense for advertising. The site appears to have basic mobile optimization and accessibility features but lacks modern CMS or frameworks. Performance is moderate with no advanced optimization evident. The site does not enforce HTTPS in the provided data, and no advanced security headers are detected, indicating room for improvement in security posture. From a security perspective, the site employs Google reCAPTCHA to mitigate automated abuse but lacks visible HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. No privacy or cookie policies are present, which is a compliance gap especially for GDPR. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and ownership transparency. However, the site content is safe, non-commercial, and targeted at general audiences, reducing immediate risk. Overall, the site is a functional hobbyist platform with moderate technical maturity but weak security and privacy compliance. Strategic improvements in HTTPS adoption, security headers, and privacy policies would enhance trust and compliance. The lack of WHOIS data should be addressed to improve legitimacy perception.

N

nowgoal.plus

nowgoal.plus

41

The website free.nowgoal.plus/free/freesoccer provides live football scores, results, and fixtures primarily targeting football fans and sports bettors. It offers a range of football leagues and matches with real-time updates and match analysis features. The site uses JavaScript and jQuery with Google Tag Manager and Google Analytics for tracking user interactions. However, the technical infrastructure lacks advanced security headers and privacy compliance measures. The absence of privacy and cookie policies, as well as contact information, limits user trust and regulatory compliance. WHOIS data is malformed and incomplete, raising concerns about domain legitimacy and transparency. Overall, the site functions as a basic sports live score provider but requires significant improvements in security, privacy, and business credibility to enhance trustworthiness and compliance.

T

Topinfo s.r.o.

energospot.cz

48

Energospot.cz is a specialized information service operated by Topinfo s.r.o., providing real-time and historical spot electricity prices for the Czech energy market. The website targets consumers and market participants interested in detailed electricity price data and market trends. It leverages a custom CMS and modern JavaScript libraries to deliver interactive charts and data visualizations. The site is affiliated with reputable Czech energy and construction portals, enhancing its credibility within its niche. Technically, the site uses a moderate technology stack with some outdated libraries but maintains good mobile optimization and user experience. Security posture is adequate with HTTPS usage but lacks explicit security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. The domain registration is recent but consistent with the business launch, and no suspicious WHOIS patterns are detected. Overall, the site is a credible and useful resource for its target audience but would benefit from improved privacy and security practices.

T

Topinfo s.r.o.

estav.tv

49

Estav.tv is a Czech online television platform specializing in architecture, construction, energy efficiency, and interior design. Operated by Topinfo s.r.o., the site offers a rich library of video content, podcasts, and audio articles targeting professionals and enthusiasts in the building and architectural sectors. The platform holds a niche market position with a focus on educational and inspirational media content. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Google Adsense, and streaming technologies like HLS.js and Plyr. The site is mobile-optimized and uses HTTPS, ensuring secure content delivery. However, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security headers are not detected, and DNSSEC is not enabled, indicating room for security improvements. Overall, the domain registration is consistent and trustworthy, with no WAF or blocking detected, allowing full content access.

WAudit.cz is a Czech-based small web service offering a simple and free web visitor counting and monitoring tool. The website is primarily targeted at Czech website owners who want to track their visitor statistics with minimal complexity. The business model is straightforward, providing a free service with optional user registration. The site also promotes related Czech internet services such as speed testing and website creation platforms, indicating a niche ecosystem focus. Technically, the website uses basic HTML, CSS, and JavaScript without advanced frameworks or CMS detected. The site is accessible over HTTPS but lacks modern security headers and cookie consent mechanisms, which limits its compliance with privacy regulations such as GDPR. Performance and mobile optimization are basic, with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS but does not implement additional security headers or provide clear incident response or vulnerability disclosure information. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness, although the website content appears consistent and professional for a small service. No critical vulnerabilities or adult content were detected. Overall, WAudit.cz presents a modest but functional web analytics service with basic technical and security posture. Strategic improvements in privacy compliance, security headers, and domain registration transparency would enhance trust and regulatory adherence.