High-risk security reports

VALBEK-EU, a.s. is a well-established Czech engineering and construction project design company operating since 1990 with a diversified portfolio of services including civil, industrial, road, tunnel, bridge, geotechnical, railway, and water management construction projects. The company maintains a strong regional presence with multiple subsidiaries and branch offices across the Czech Republic, Slovakia, Sweden, and Ukraine. Their website serves primarily as a career portal and corporate information hub targeting professionals and job seekers in the construction and engineering sectors. Technically, the website uses a custom CMS with common JavaScript libraries such as jQuery and bxSlider, hosted on Webglobe.cz infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional content. Security posture is adequate with HTTPS enforced and cookie consent implemented, but could be improved by enabling DNSSEC and adding security headers. No critical vulnerabilities or exposed sensitive data were detected. Overall, the domain registration is consistent with the business claims, though the domain is relatively new compared to the company's founding year, indicating a dedicated career site or rebranding effort.

Skupina Valbek-EU is a Czech-based engineering and consulting group specializing in infrastructure, construction, and technological innovation projects. The website serves as a content hub featuring articles, podcasts, and interviews targeted at professionals and stakeholders in the construction and infrastructure sectors. The company appears well-established with multiple subsidiaries and a strong focus on project design, technical supervision, and sustainable development. Technically, the website uses a custom CMS with common JavaScript libraries such as jQuery and bxSlider, hosted on Webglobe infrastructure. While the site is well-designed, mobile-optimized, and content-rich, it lacks explicit privacy and cookie policies, which impacts compliance. Security-wise, HTTPS is enabled, but the use of an outdated jQuery version and absence of security headers present moderate risks. The domain registration is consistent with the business age and shows no suspicious patterns. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

Valbek is a well-established Ukrainian project company specializing in engineering and construction design services since 1990. The company offers a comprehensive portfolio of 20 interconnected service types, enabling complex project design for small and large infrastructure objects. With a team of over 450 specialists including engineers, constructors, and construction experts, Valbek operates regionally with presence in Ukraine, Czech Republic, Slovakia, and Sweden. The website reflects a professional business model focused on transportation and civil engineering sectors, targeting government and private infrastructure clients. Technically, the site uses a legacy jQuery version alongside modern UI libraries, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and updated libraries. Privacy compliance is strong with GDPR and cookie policies clearly presented. Contact information and management profiles enhance business credibility. Overall, the website is trustworthy and professionally maintained, though improvements in security headers and modernization of scripts are recommended.

Valbek Sweden AB is a consulting company specializing in civil engineering and infrastructure sectors, with over 30 years of experience and a broad portfolio of services spanning more than 20 technical areas. The company targets businesses and organizations involved in construction, urban development, and infrastructure projects primarily in Sweden and neighboring countries. Their business model focuses on providing expert consulting, project management, and sustainable solutions. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site uses legacy JavaScript libraries like jQuery 1.11.3 and includes modern UI components such as bxSlider and PhotoSwipe. The site is mobile-optimized and includes cookie consent mechanisms compliant with GDPR. Security posture is moderate with HTTPS enabled but lacks modern security headers and uses outdated libraries, which pose potential risks. No explicit security or incident response policies are publicly available. Overall, the website is trustworthy and professional but would benefit from technical and security updates.

Valbek SK, spol. s r. o. is a well-established Slovak project design and consulting company specializing in infrastructure and construction projects such as railways, roads, bridges, tunnels, and geotechnical works. With a history dating back to 1990 and a medium-sized workforce, the company operates regionally with branches and sister companies in the Czech Republic, Sweden, and Ukraine. Their service portfolio includes engineering design, project management, laboratory testing, and software development for construction. The website reflects a professional and consistent brand image with clear contact information and ISO certifications, indicating a mature business presence. Technically, the website employs a traditional tech stack with jQuery and several UI libraries, delivering moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though some modernization opportunities exist, such as updating jQuery and enhancing accessibility features. The site uses HTTPS and implements a comprehensive cookie consent mechanism, demonstrating good privacy compliance. Security posture is solid with no visible vulnerabilities or exposed sensitive data; however, the absence of explicit security headers and incident response contacts suggests room for improvement. The company maintains GDPR compliance with clear privacy and cookie policies. Overall, the website is trustworthy and professional, supporting the company's credibility in the transportation and construction sectors. Strategically, Valbek SK should focus on updating technical components, enhancing security headers, and publishing incident response information to strengthen their security posture and trust further.

The website kpmk.eu serves as an informational portal for the Library of the Prague Metropolitan Chapter, focusing on cataloging its historical book collection and related ecclesiastical topics. It targets qualified researchers and scholars interested in the history of the Prague Cathedral and its liturgical institute. The site is built on Joomla CMS with standard web technologies such as jQuery and Bootstrap, providing a moderate level of performance and mobile optimization. However, the site lacks modern security practices such as HTTPS enforcement and security headers, and does not provide privacy or cookie policies, which limits its compliance with GDPR and other privacy regulations. No contact or incident response information is available, which reduces trust and business credibility.

Č

Člověk a Víra

clovekavira.cz

48

Člověk a Víra is a Czech non-profit organization dedicated to documenting and sharing religious and cultural content related to faith communities primarily in the Czech Republic. The website serves as a multimedia platform offering photographic galleries, exhibitions, and media publications that cater to religious audiences and the general public interested in faith and church life. It maintains a multilingual presence to reach broader audiences in neighboring countries and internationally. Technically, the website is built on Drupal 10, leveraging modern web technologies and Google Tag Manager for analytics. The site is mobile-optimized and provides a clear navigation structure, enhancing user experience. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism compliant with GDPR, though it lacks explicit security policies and incident response contacts. Overall, the website demonstrates a good security posture with room for improvement in security headers and transparency. The domain registration is consistent and legitimate, supporting the organization's credibility. Strategic recommendations include enhancing security headers, publishing security policies, and improving contact transparency to strengthen trust and compliance.

The website www.aspshop.sk is currently inaccessible, returning a 403 Forbidden error page served by nginx 1.26.2. Due to the lack of accessible content, no metadata, business information, or contact details could be extracted. The site appears to be blocked or restricted, preventing a full analysis of its business operations or technical infrastructure. The absence of visible content also means no privacy, cookie, or security policies are available for review. Consequently, the security posture cannot be properly assessed, and no trust indicators or certifications are identifiable. This severely limits the ability to evaluate the website's credibility or compliance status.

The website www.aspshop.cz is currently inaccessible, returning a 403 Forbidden error page served by nginx 1.26.2. This indicates that access to the site is blocked or restricted, preventing any content retrieval or analysis. The lack of WHOIS data further complicates the assessment of domain legitimacy and ownership. Due to the absence of accessible content, no metadata, contact information, privacy policies, or business details could be extracted. The technical infrastructure appears minimal with only the web server identified. Security posture cannot be evaluated as no HTTPS or security headers information is available. Overall, the site presents a high risk due to lack of transparency and accessibility, and no trust indicators are present.

W

www.ondrejhauser.co.uk

ondrejhauser.co.uk

49

The website www.ondrejhauser.co.uk operates as an online gambling and sports betting platform targeting Thai-speaking users. It promotes a variety of betting services including football betting, casino games, slots, and lottery. The site positions itself as a leading and trusted platform in the Thai market, leveraging the popular 'ufabet' brand. However, the domain WHOIS data is missing and indicates the domain is invalid according to Nominet UK registry rules, which raises concerns about the legitimacy and ownership of the domain. The website is built on WordPress using Elementor and Yoast SEO, showing moderate technical maturity but lacks critical compliance and security features such as privacy policies, cookie consent, and security headers.

LIVEBOX Event Production, s.r.o. is a Czech-based company specializing in comprehensive technical solutions for events including conferences, gala shows, hybrid events, studios, concerts, trade fairs, and equipment leasing. With over 20 years of experience in audiovisual technology, the company targets corporate clients and event organizers seeking turnkey event production services. The website reflects a professional and consistent brand presence with detailed service descriptions and a team section showcasing key personnel. Technically, the website is built on ASP.NET with Bootstrap and jQuery, incorporating Google Analytics and Tag Manager for user tracking. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, it lacks visible privacy and cookie policies and does not implement GDPR consent mechanisms, which are critical for compliance in the EU. From a security perspective, the site uses HTTPS but lacks visible security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company’s experience and no suspicious registration patterns. Overall, the website is professional and credible but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

Smart Cams is a small Czech Republic-based media service provider specializing in live HD video streaming solutions. Their services include live streaming for notable clients such as Škoda, O2, Prima, and STV, along with camera rental, video transcoding, and web administration features. The website demonstrates a professional design with clear navigation and responsive layout, leveraging modern technologies like Bootstrap, jQuery, and Flowplayer. However, the absence of WHOIS registration data and lack of visible privacy or cookie policies indicate gaps in transparency and compliance. Security posture is moderate with HTTPS usage but missing security headers and no explicit incident response or data protection officer information. Overall, the site is functional and business-focused but would benefit from enhanced privacy compliance and security best practices.

O

One Family Office

onefamilyoffice.cz

47

One Family Office is a recently established (2023) multi-family office based in the Czech Republic, offering comprehensive investment management, advisory, asset protection, and concierge services to high-net-worth families and individuals. The company positions itself as the largest family office in Central Europe with a strong team of investment professionals and legal advisors, managing significant assets and family structures. The website is built on WordPress with modern technologies and includes tracking tools such as Google Tag Manager and Facebook Pixel. While the site is professionally designed and content-rich, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the domain registration is consistent with the business claims and shows legitimacy.

H

HAVEL & PARTNERS

nextzeny.sk

44

NextŽeny is a project led by the reputable law firm HAVEL & PARTNERS, focusing on the global trend of wealth transfer into the hands of women, supporting female entrepreneurship, investment, and networking in the Czech and Slovak markets. The website provides research, studies, and a magazine to inform and empower women managing wealth. Technically, the site is built on WordPress with modern performance optimizations and multilingual support. Security posture is solid with HTTPS and DNSSEC enabled, though explicit security policies and cookie consent mechanisms are missing. The WHOIS data shows inconsistencies with domain creation dates, which should be verified to ensure trustworthiness. Overall, the site is professional, content-rich, and targeted at a finance-savvy female audience in Slovakia and the Czech Republic.

Divadlo Semafor is a culturally significant theatre company based in the Czech Republic, offering a variety of theatrical performances and cultural events. The website provides comprehensive information about upcoming shows, ticket purchasing options, and company history, targeting Czech-speaking audiences interested in theatre and culture. The business model centers on live entertainment and ticket sales, supported by an e-shop and newsletter subscription for audience engagement. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, ensuring a responsive and user-friendly experience. However, some areas such as SEO and accessibility could be improved. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published privacy or security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate. Strategic improvements in privacy compliance, security headers, and WHOIS transparency would enhance overall trust and security.

S

Stará čistírna odpadních vod v Bubenči

staracistirna.cz

48

Stará čistírna odpadních vod v Bubenči is a cultural heritage site located in Prague, Czech Republic, focusing on the historical wastewater treatment plant built between 1901 and 1906. The website serves to promote the site as a tourist attraction offering guided tours and event space rentals. The business operates in a niche cultural and historical sector with a small-scale presence. Technically, the website is built on WordPress using Elementor and Yoast SEO, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy or security policies. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

Z

Zenit SK, s.r.o.

polykarbonat.sk

42

Zenit SK, s.r.o. operates the website polykarbonat.sk, specializing in the sale and distribution of polycarbonate sheets and related plastic products in Slovakia. The company offers a comprehensive product range including cellular, solid, and trapezoidal polycarbonate sheets from well-known brands such as Makrolon, Palram, Koscon, and Rodeca. Their business model combines retail and wholesale with an online e-commerce platform, supported by logistics and professional plastic processing services. The website targets general consumers and businesses needing construction and industrial plastic materials. Technically, the website uses legacy jQuery and jQuery UI libraries, integrated with Google Analytics, Google Tag Manager, and Microsoft Clarity for user tracking and analytics. The site is built on the EASYPAGE CMS platform and includes a cookie consent banner compliant with basic GDPR requirements. However, the site lacks modern security headers and uses outdated JavaScript libraries, which may pose security risks. Mobile optimization and accessibility are basic but functional. From a security perspective, the site does not publish a privacy policy, terms of service, or incident response procedures, which are critical for compliance and trust. The cookie consent mechanism is present but could be improved with clearer privacy disclosures. No WAF or blocking mechanisms were detected, and no vulnerabilities were evident from the HTML content. Contact information is clearly provided, enhancing business credibility. Overall, the website is professionally designed and functional but requires improvements in privacy compliance, security best practices, and modernization of its technical stack to enhance trust and reduce risk.

Z

Zenit SK, s.r.o.

plexisklo.sk

42

Zenit SK, s.r.o. operates the website plexisklo.sk, specializing in the sale and distribution of plexiglass (PLEXIGLAS®) and related plastic products. The company targets both retail and wholesale customers, offering a wide range of extruded and cast plexiglass sheets, blocks, tubes, rods, mirrors, and adhesives. The business maintains multiple physical locations in Slovakia and supports e-commerce sales through a dedicated online shop. The website is professionally designed with clear navigation and product categorization, supporting a positive user experience.

24/7 media s.r.o. is a small Czech Republic based company specializing in media representation, media buying, consulting, and wedding agency services including domestic and international weddings as well as airline ticket sales. The company has been established since 2006, indicating a stable presence in its niche market. The website content is minimal but provides essential contact information and links to related partner services. Technically, the website is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS, and lacks mobile optimization and accessibility features. Security posture is weak due to absence of HTTPS enforcement and security headers, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the site is functional but requires modernization and improved security and privacy practices to enhance trust and compliance.

T

Topinfo s.r.o.

tzb-info.sk

45

TZB-info is a well-established Czech expert web portal specializing in construction, building technical equipment, and energy savings. It serves professionals and stakeholders in these sectors by providing daily updated news, technical articles, legal regulations, product databases, and discussion forums. The website is operated by Topinfo s.r.o., a medium-sized company with a history dating back to 2001, and is part of a family of related sites including estav.tv and energospot.cz. Technically, the site uses a custom CMS (Topinfo CMS) with a technology stack including jQuery, Google Tag Manager, and Gemius analytics. The site is mobile-optimized and employs HTTPS with good SSL configuration. Security posture is adequate but could be improved by adding advanced security headers and updating legacy libraries. Privacy compliance is basic with cookie consent implemented and a privacy policy available. No WHOIS data is publicly available due to registry policies, which slightly reduces trust but does not outweigh the professional presentation and content quality. Overall, TZB-info is a credible and authoritative source in its niche with room for technical and security enhancements.

A

AkčnéLetáky.sk

akcneletaky.sk

35

AkcneLetaky.sk is a Slovak online platform specializing in aggregating promotional leaflets and discount offers from a wide range of retail chains including hypermarkets, supermarkets, and specialty stores. The website serves consumers in Slovakia by providing a centralized location to find current sales and discounts, helping users save money on their purchases. The platform features categorized navigation, search functionality, and links to numerous partner retail domains, indicating a well-structured business model focused on retail marketing and consumer savings. Technically, the website employs standard web technologies such as HTML5, CSS, and JavaScript, and integrates Google services including Google Analytics and Adsense for analytics and monetization. The site is served over HTTPS, ensuring encrypted communication, and demonstrates moderate performance and good mobile optimization. However, it lacks visible security headers and does not provide privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site shows a basic security posture with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. The absence of security headers and formal privacy and cookie policies represents areas for improvement. No incident response or vulnerability disclosure information is provided, which could be a gap in security readiness. The website does not appear to be blocked by any WAF or security challenge, and no adult or explicit content is present, making it safe for general audiences. Overall, AkcneLetaky.sk is a legitimate and established retail aggregator platform with good content quality and business credibility. To enhance its security and compliance posture, the site should implement privacy and cookie policies, add security headers, and provide clear contact information for security incidents. These improvements would increase user trust and align the platform with best practices in web security and privacy.

V

Vedelisteze.sk

vedelisteze.sk

44

Vedelisteze.sk is a Slovak language online media portal providing daily updated content focused on lifehacks, interesting facts, and science topics. The website targets a general audience interested in practical tips and educational content. It operates on a WordPress CMS platform, leveraging common web technologies and advertising networks such as Google Adsense and Google Tag Manager. The site demonstrates a moderate level of digital maturity with good design, mobile optimization, and SEO practices. Security posture is adequate with HTTPS enforced and Cloudflare DNS usage, but lacks explicit security policies and headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website appears legitimate and stable with a domain age consistent with its content history.

V

Vladimir Gerlich

beer-coasters.eu

38

The website www.beer-coasters.eu is a niche hobbyist platform dedicated to the collection, exchange, and information sharing of beer coasters (beer mats) worldwide. Operated by Vladimir Gerlich since 2003, it serves a community of collectors with a focus on detailed images, brewery information, and exchange opportunities. The site is modest in scale, targeting enthusiasts and collectors primarily in the Czech Republic and internationally. Technically, the site uses classic web technologies such as jQuery and Floatbox, with integrations for Google Analytics and Tag Manager for visitor tracking. The infrastructure appears stable but basic, with moderate performance and limited mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for improvement in compliance and user data protection. No WHOIS registrant data is available due to EURid privacy protections, but the domain age and content consistency support legitimacy. Overall, the site is functional and trustworthy for its niche audience but would benefit from enhanced security and privacy practices.

L

LATAM Airlines Group S.A.

latamairlines.com

49

LATAM Airlines Group S.A. operates as a leading airline in Chile and South America, offering a comprehensive range of travel services including flight bookings, travel packages, hotel reservations, car rentals, and travel insurance. The website targets travelers primarily in Chile and the broader South American region, leveraging a strong brand presence and a loyalty program (LATAM Pass) to enhance customer engagement. The company maintains a significant market position as the region's leading airline, supported by subsidiaries such as LATAM Cargo and partnerships with major travel service providers like Booking.com and Despegar.

The website sdn.cz currently presents only minimal content, displaying a simple 'OK' message with no additional information, metadata, or interactive elements. The domain is registered since 2009 with a Czech registrar, indicating a potentially legitimate and established domain ownership. However, the lack of meaningful content, contact information, and security features significantly limits the website's utility and trustworthiness. Technically, the site lacks modern web technologies, security headers, and HTTPS information, which are critical for secure and professional web presence. From a security perspective, the absence of privacy policies, cookie consent mechanisms, and incident response information indicates poor compliance with GDPR and general security best practices. Overall, the website appears inactive or placeholder, posing low risk but also offering no business or security value in its current state.

E

E.M.A. Europe, s. r. o.

horoskopy.cz

49

Horoskopy.cz is a Czech-language astrology and horoscope website providing daily horoscopes, Chinese horoscopes, yearly forecasts, card readings, and astrological counseling. It operates as a content portal primarily monetized through advertising, with strong affiliation to Seznam.cz, a major Czech internet company. The site targets a general audience interested in astrology and related services. Technically, the site uses modern JavaScript frameworks, integrates with Seznam.cz's advertising and consent management platforms, and employs Gemius for analytics. While the site is accessible and functional, it shows room for improvement in mobile optimization and accessibility. Security posture is adequate with HTTPS and sandboxed ad iframes, but lacks some security headers and explicit privacy policies. WHOIS data is unavailable, which slightly reduces domain transparency, but the presence of official company contact and Seznam.cz affiliation supports legitimacy. Overall, the site is a moderately mature digital property with good content quality and advertising transparency.

L

Leschinger.cz

leschinger.cz

45

Leschinger.cz is a professional freelance WordPress developer and UI/UX designer based in the Czech Republic, offering custom WordPress theme and plugin development, website redesign, and e-shop development services. The website showcases a strong portfolio with notable clients and emphasizes quality, flexibility, and security in its offerings. Technically, the site is built on WordPress 6.8.3 with modern plugins and fonts, optimized for SEO and mobile responsiveness. Security posture is good with HTTPS enabled, but lacks some security headers and formal privacy/cookie policies. No WHOIS data is available, likely due to privacy protection, but the site content and business claims are consistent and trustworthy. Overall, the site presents a credible and professional digital presence for a small freelance business.

PPL CZ operates as a leading parcel delivery and logistics service provider in the Czech Republic, offering parcel shipment, pickup, and return services supported by a comprehensive network of Parcelboxes and Parcelshops. The company targets both private individuals and businesses, providing convenient delivery options and a mobile app for shipment management. The website reflects a mature digital presence with professional design, clear navigation, and modern technology usage including React and Liferay CMS. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not published. The absence of WHOIS data limits domain trust assessment, but the overall business credibility is supported by the website's quality and service offerings. Strategic recommendations include publishing security and incident response policies, improving accessibility, and verifying domain registration details.

The website trinitymedia.ai serves as a minimal landing page primarily used for serving audio content and directs visitors to trinityaudio.ai for further information. The business appears to be in the technology sector focused on audio media delivery. The domain is relatively young, created in 2018, and uses privacy protection for WHOIS data, which is common for technology startups. The site itself is very basic with minimal content, no privacy or cookie policies, no contact information, and no visible security features or analytics integrations. This indicates a low level of digital maturity and limited user engagement capabilities. Security posture is weak due to lack of security headers and no visible HTTPS enforcement details, though no critical vulnerabilities were detected in the provided data. Overall, the site is safe for general audiences but lacks transparency and compliance features expected for professional business websites.

A

ARR - Agentura regionálního rozvoje

lipo.ink

44

Lipo.ink is a Czech business incubator based in Liberec, operated by ARR - Agentura regionálního rozvoje. It supports startups and established entrepreneurs by providing coworking spaces, event rentals, consulting services, and educational workshops. The website is professionally designed with clear navigation and bilingual support (Czech and English). The technical infrastructure includes modern JavaScript libraries and analytics tools, ensuring a responsive and interactive user experience. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though some HTTP security headers could be improved. GDPR compliance is evident with a comprehensive privacy policy and cookie management. Overall, Lipo.ink presents a trustworthy and credible platform for regional business development.

H

Hamri Plus s.r.o.

nejbusiness.cz

32

NejBusiness.cz is a Czech business portal operated by Hamri Plus s.r.o., providing a wide range of business-related content including news, company sales, job offers, investment opportunities, and educational resources. The site targets entrepreneurs, companies, and professionals primarily in the Czech Republic, positioning itself as a comprehensive business information and services platform. The business model includes advertising, membership (NB+), and business consulting services. Technically, the website uses a custom CMS with legacy JavaScript libraries such as jQuery 1.7.1 and integrates Google Analytics, Tag Manager, and Adsense for tracking and monetization. The site is moderately optimized for performance and mobile use but could benefit from modernization and enhanced accessibility features. Security posture is adequate with HTTPS enabled but lacks important security headers and explicit privacy and cookie policies, indicating compliance gaps. The WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website is professional and trustworthy but requires improvements in privacy compliance and security best practices.

The website www.kicmp.cz represents the Kulturní a informační centrum města Přelouče, a local cultural and information center serving the city of Přelouč in the Czech Republic. It provides information on cultural events, exhibitions, cinema programming, and local tourist information. The site targets residents and visitors interested in cultural activities and community engagement. The business model is non-profit and community-focused, offering event hosting, ticket reservations, and venue rentals. The website content is primarily in Czech and includes detailed event calendars and cultural news.

Readmetro is a digital content platform providing access to editions of its publication across multiple countries. The website serves as a catalog allowing users to select their country and view recent and historical editions. The business model focuses on content distribution in the media sector, targeting a general audience interested in regional editions. The website is relatively simple, with basic content and navigation but lacks comprehensive business and contact information. Technically, the site uses modern web standards including HTML5, CSS3, and JavaScript ES modules with dynamic content loading via the Fetch API. The site is mobile optimized with responsive design elements but lacks advanced SEO and accessibility features. No CMS or hosting provider information is discernible from the content. From a security perspective, the site does not present HTTPS or security headers information in the provided data, and no privacy or cookie policies are found, indicating limited compliance with privacy regulations such as GDPR. No contact or incident response information is available, reducing transparency and trust. The WHOIS data for the subdomain is unavailable, which is typical for subdomains but limits domain legitimacy verification. Overall, the website is functional but basic, with moderate trustworthiness. Strategic improvements in security posture, privacy compliance, and business transparency are recommended to enhance user trust and regulatory compliance.

S

svettisku.eu

svettisku.eu

31

Svět tisku is a Czech online media platform dedicated to providing news and information related to the printing industry and associated sectors such as DTP, pre-press, press, post-press, and signmaking. It evolved from a traditional paper magazine to a digital publication, targeting professionals and enthusiasts within the printing and paper industries. The website offers categorized content and industry updates authored primarily by Jiří Koudelka. Technically, the site is built on WordPress 6.8.3, utilizing common web technologies like jQuery, Font Awesome, and slick carousel for UI enhancements. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and policies. No privacy or cookie policies are present, indicating compliance gaps with GDPR. Contact information and incident response channels are not provided, limiting user trust and transparency. Overall, the site is functional and relevant but requires improvements in security, privacy compliance, and business transparency to enhance credibility and user trust.

E

Ekobal s.r.o.

ekobal.cz

46

Ekobal s.r.o. is a Czech-based company specializing in packaging machinery, packaging materials, and pallet presses. The company serves primarily B2B clients in manufacturing and logistics sectors, offering a broad range of products including stretch films, LDPE, HDPE, PVC films, binding straps, adhesive tapes, and paper packaging. Their website reflects a mature business with over 20 years of experience, supported by client testimonials and recognized certifications such as ISO 9001 and ISO 14001. The company emphasizes quality, service, and technical expertise in packaging solutions. Technically, the website employs a modern technology stack including jQuery, Google Analytics, Google Tag Manager, Facebook Pixel, and MailChimp for marketing and analytics. The site is mobile-optimized with good SEO practices and a professional design. However, some technical improvements are recommended, such as adding security headers and a cookie consent mechanism to enhance privacy compliance. From a security perspective, the site uses HTTPS with excellent SSL configuration and does not expose sensitive data. There is no evidence of security incident response or vulnerability disclosure mechanisms, which could be improved to strengthen security posture. The absence of WHOIS data for the domain is a notable transparency gap, although the website content and business information support legitimacy. Overall, the website is professional, trustworthy, and well-positioned in its market niche. Strategic improvements in security and privacy compliance would further enhance its credibility and resilience against emerging threats.

C

Czech Online Expo

czechonlineexpo.cz

49

Czech Online Expo is a prominent Czech event organizer specializing in e-commerce and digital business conferences. The website promotes the 2026 edition of their flagship event, featuring over 150 speakers, 100 exhibitors, and thousands of attendees. The event offers a comprehensive program with multiple summits, workshops, and networking opportunities, targeting professionals in the e-commerce and digital marketing sectors. The site is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Bricks Builder, and integrates tracking and marketing tools like Google Tag Manager and SmartEmailing. The site uses HTTPS and includes cookie consent mechanisms, indicating attention to privacy compliance. However, some security headers are missing, and no WHOIS data is available, which slightly reduces trustworthiness. Security posture is generally good with encrypted connections and no visible vulnerabilities or exposed sensitive data. Privacy policies and cookie management comply with GDPR requirements. The absence of direct contact emails or phone numbers on the main pages suggests a preference for contact via forms or social media. Overall, the website represents a credible and professional business with a strong market position in the Czech e-commerce event space. Strategic recommendations include enhancing security headers, improving transparency with WHOIS data, and providing clearer direct contact information to boost trust and compliance.

Z

Zlin Design Week

zlindesignweek.com

49

Zlin Design Week is a well-established annual design festival based in Zlín, Czech Republic, focusing on design inspiration, community engagement, and cultural events. The festival is supported by local government bodies, cultural ministries, and educational institutions, positioning it as a key regional event with international reach. The website reflects a professional and consistent brand image, targeting design professionals, students, and the local community. Technically, the site is built on WordPress with modern JavaScript libraries and plugins, offering a good user experience with mobile optimization and GDPR-compliant cookie management. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers could enhance it further. Overall, the site is trustworthy, compliant, and professionally maintained, with clear contact information and active social media presence.

The website packagingsummit.earth is currently inaccessible, returning a 403 Forbidden error with no visible content. This prevents any meaningful analysis of the business, its services, or its digital presence. The domain is registered via GoDaddy with privacy protection, which obscures registrant details. The lack of accessible content and metadata limits the ability to assess the company's market position, technical infrastructure, or security posture. The domain age is consistent with a relatively new business founded in 2020, but no further business information is available. Technically, the site lacks visible security headers or SSL configuration data, and DNSSEC is not enabled, indicating potential security improvements are needed. Overall, the site’s security posture is weak due to lack of accessible content and security best practices. The domain registration privacy and restrictive status flags reduce trust and legitimacy scores. Strategic recommendations include enabling DNSSEC, configuring HTTPS and security headers, and publishing accessible content including privacy and cookie policies to improve compliance and trust.

S

Skitterphoto

skitterphoto.com

41

Skitterphoto is a niche media platform founded in 2014 that provides free public domain photos for download and use without restrictions. It targets photographers and content creators who need high-quality images without licensing fees. The platform encourages photographers to contribute their photos under a public domain license, fostering a community-driven content model. Technically, the website uses a custom or unknown CMS with common web technologies such as jQuery, Google Analytics, and Google Adsense for analytics and monetization. Hosting is provided by Hostnet, inferred from the domain's nameservers. The site is mobile optimized with good navigation and SEO practices, though accessibility features are basic. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and advanced security headers. Privacy compliance is basic with a privacy policy and cookie notice present but no explicit consent mechanism. Business credibility is supported by consistent branding, clear licensing, and a mature domain age. Overall, the site is professional and trustworthy with room for security and privacy improvements.

F

Fancycrave

fancycrave.com

42

Fancycrave is a niche digital marketplace specializing in premium photos and graphic assets tailored for creative professionals and enthusiasts. The website offers a variety of downloadable digital content including backgrounds, illustrations, stock photos, and wallpapers. The business has been established since 2011, indicating a mature presence in the digital creative asset market. The platform is built on WordPress with Easy Digital Downloads and Elementor, integrating Stripe for payment processing, reflecting a modern and scalable technical infrastructure. The website demonstrates good design quality, clear navigation, and mobile optimization, catering well to its target audience. Security posture is adequate with HTTPS enabled and secure payment integration, though improvements are recommended in security headers and cookie consent mechanisms. Privacy compliance is supported by a comprehensive privacy policy, but lacks visible cookie consent. Overall, the site is trustworthy and professionally maintained, with room for enhanced security and compliance transparency.

E

European Patent Office

epo.org

48

The European Patent Office (EPO) website serves as a comprehensive portal for patent-related services, legal information, and educational resources. It targets patent applicants, IP professionals, legal practitioners, and the general public interested in innovation and intellectual property protection in Europe. The site reflects the EPO's position as a leading governmental organization in the patent domain, offering extensive tools and information to support patent searching, application, and legal processes. Technically, the website is built on Drupal 10 with React components for specialized applications, supported by Matomo analytics for user tracking with privacy considerations. The site demonstrates modern web practices including responsive design, accessibility features, and strong SEO optimization. Performance is fast, and the site is well-structured for user navigation. From a security perspective, the site enforces HTTPS with excellent SSL configuration and implements multiple security headers. Cookie consent mechanisms and privacy policies indicate compliance with GDPR and related regulations. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to malformed query responses, but this is consistent with registry policies rather than suspicious activity, and the domain is legitimate for a major European governmental entity. Overall, the EPO website is a secure, professional, and authoritative resource for patent information and services, with strong privacy and compliance postures. It is recommended to maintain regular security audits, keep third-party components updated, and continue transparency in privacy practices to uphold trust and security.

B

BZ Company Internacional s.r.o.

bzcompany.cz

46

BZ Company Internacional s.r.o. is a Czech Republic-based IT service provider specializing in web development, application development, e-commerce solutions, web hosting, and online marketing services. The company positions itself as a general IT technology contractor and is a member of the VZK group, targeting primarily local businesses seeking comprehensive digital solutions. Their service offerings include responsive websites, custom e-shops, information systems, hosting, and SEO/PPC marketing campaigns. The website content is professional, well-structured, and localized in Czech, reflecting a small-sized enterprise with a clear business focus. Technically, the website employs standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, with additional libraries like Slick Carousel for UI components. The site is mobile-optimized with a responsive design and includes a cookie consent mechanism compliant with GDPR. However, no advanced frameworks or CMS platforms are explicitly identified, suggesting a custom or lightweight CMS solution. Performance is moderate, and SEO practices appear adequate with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS, ensuring encrypted communication. Cookie consent is implemented, but no explicit security headers (e.g., CSP, X-Frame-Options) are detected, indicating room for improvement. The absence of WHOIS data limits domain trust verification, but the presence of clear contact information and business references supports legitimacy. No signs of malware, phishing, or vulnerabilities are evident in the content. Overall, the security posture is moderate but could benefit from enhanced header policies and incident response disclosures. The overall risk assessment is low to moderate, with recommendations focusing on improving security headers, publishing detailed privacy and security policies, and enhancing WHOIS transparency. The company demonstrates a solid digital presence suitable for its market niche but should consider strengthening compliance and security practices to build greater trust and resilience.

S

SMRK studio

smrkstudio.cz

43

SMRK studio is a Czech-based innovative web design and development company specializing in WordPress-based websites and e-commerce solutions. They emphasize fresh, functional, and fast web solutions with a unique ecological branding approach, planting trees for each completed project. The company targets businesses and individuals seeking custom web solutions primarily in the Czech market. Their service portfolio includes web design, HTML and WordPress development, graphic design, web hosting, and additional digital marketing services such as SEO and PPC. Technically, the website is built on WordPress with modern web standards including HTML5, CSS3, and JavaScript. It uses Google Tag Manager for analytics and Rank Math for SEO optimization. The site is mobile-optimized, fast-loading, and well-structured with comprehensive metadata and structured data for SEO. However, no cookie consent mechanism was detected, which is a privacy compliance gap. From a security perspective, the site enforces HTTPS and uses secure forms with anti-spam measures. No major vulnerabilities or exposed sensitive data were found. Security headers are not explicitly detected, and no formal security or incident response policies are published. The lack of WHOIS data is a concern for domain legitimacy, but the website content and contact information appear professional and trustworthy. Overall, the website scores well on content quality, technical implementation, and business credibility but has room for improvement in privacy compliance and security policy transparency. The domain registration status should be verified to ensure legitimacy and trustworthiness.

I

ifTECH s.r.o.

iftech.cz

45

ifTECH s.r.o. operates as a specialized wholesale distributor focusing on solar energy products including solar panels, inverters, optimizers, battery storage systems, and related infrastructure such as wallboxes and solar power plant constructions. The company targets B2B customers such as installers and businesses within the Czech Republic and neighboring markets. The website presents a professional and consistent brand image with clear navigation and relevant product offerings. Technically, the site is built on Angular 10, uses modern web technologies, and includes standard SEO and mobile optimization features. Security posture is adequate with HTTPS enabled but lacks some advanced security headers and explicit security policies. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms of service pages. WHOIS data is missing, which impacts domain trustworthiness and should be investigated further. Overall, the site is functional and professional but could improve transparency and security documentation.

M

Memodo

memodo.cz

45

Memodo is a Czech-based B2B wholesale and e-commerce company specializing in photovoltaic products and solar energy solutions. Positioned as a leading photovoltaic wholesaler in Europe, Memodo offers a wide range of products including solar panels, inverters, residential and commercial energy storage systems, energy management systems, mounting systems, charging stations, and related accessories. Their target audience primarily consists of installation companies and business partners in the renewable energy sector. The website is professionally designed with clear navigation and product categorization, supporting a seamless user experience for their business clientele. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, integrated with Google Tag Manager and Google Analytics 4 for analytics and marketing purposes. The site uses the Datamints CMS platform and includes cookie consent management, indicating a moderate level of digital maturity. Performance and mobile optimization are good, though accessibility features could be improved. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies such as privacy policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS data for the domain reduces trustworthiness and suggests a need for verification of domain registration status. Overall, Memodo presents a credible and professional online presence in the energy sector, with room for improvement in privacy compliance and security transparency. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and verifying domain registration details to strengthen trust and compliance.

D

Doucha Šikola advokáti s.r.o.

dsadvokati.cz

49

Doucha Šikola advokáti s.r.o. is a specialized law firm based in the Czech Republic focusing on energy law and commercial legal services. The firm supports projects in renewable energy and provides comprehensive legal advice in areas such as contract law, mergers and acquisitions, and intellectual property protection. Their market position is strengthened by partnerships with key industry associations and a portfolio of notable clients. Technically, the website employs modern web technologies including animation libraries and Google Tag Manager, offering a good user experience with mobile optimization and clear navigation. Security posture is moderate with cookie consent and privacy policy in place, but lacks visible security headers and explicit incident response contacts. WHOIS data is missing, which slightly reduces trust from a domain registration perspective but the professional content and client testimonials support legitimacy. Overall, the website is well-designed, content-rich, and trustworthy for its target audience.

K

Komora obnovitelných zdrojů energie, z.s.

3dnavody.cz

40

3D Návody is a Czech Republic based organization focused on providing interactive 3D guides and educational resources in the renewable energy sector, specifically photovoltaic systems and other renewable energy sources. The website serves professionals and trainees aiming to increase their expertise through online interactive content, mobile applications, and access to specialized databases. The business is relatively new, with domain registration in late 2024, aligning with the launch of the platform. The company operates under the legal entity Komora obnovitelných zdrojů energie, z.s., indicating a formal organizational structure within the energy sector. Technically, the website is built on a modern WordPress CMS platform using Elementor for page building and Yoast SEO for optimization. It employs standard web technologies including jQuery and integrates Google Tag Manager for analytics. The site is mobile optimized and demonstrates good SEO practices, although accessibility features could be improved. Performance is moderate, with caching plugins in use. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and formal security policies or incident response contacts. Privacy compliance is minimal, with no visible privacy or cookie policies or consent mechanisms, which is a gap for GDPR compliance. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data. Overall, the website presents a professional and trustworthy platform for renewable energy education in the Czech market. Strategic improvements in privacy compliance, security headers, and incident response documentation would enhance trust and regulatory adherence.

D

Dreamind s.r.o.

dreamind.cz

44

Dreamind s.r.o. is a Czech-based digital marketing consulting company established in 2020. The company targets businesses seeking to enhance their digital presence by offering consulting services and marketing strategies. Their website showcases client logos and offers a free initial consultation, indicating a client-focused approach. The business operates primarily in the technology sector within the Czech Republic and maintains a small company size. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, uses Google Fonts and Typekit for typography, and leverages Cloudflare for DNS and CDN services. The site is mobile-optimized with a moderate performance profile. However, SEO and accessibility features are basic, and no CMS or backend platform is explicitly detected. From a security perspective, the website uses HTTPS (implied by Cloudflare usage) but lacks explicit security headers and published security policies. There is no privacy or cookie policy, which is a compliance gap, especially under GDPR. The contact form collects personal data but lacks visible anti-spam or security controls. No incident response or vulnerability disclosure information is provided, limiting transparency in security matters. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, improved security headers, and published policies to strengthen its security posture and regulatory adherence.

S

SLAPAKY.CZ | Štípaný přírodní kámen již od 279 Kč

slapaky.cz

45

The website www.slapaky.cz is a professional e-commerce platform specializing in the sale of natural split stone products such as sandstone, quartzite, slate, porphyry, schist, limestone, and granite. It targets both retail customers and businesses in the Czech Republic, offering a wide range of stone products for construction, landscaping, and decorative purposes. The site provides additional services including free sample shipping, delivery across the Czech Republic, and storage options. The business appears to be a small-sized entity focused on the real estate and retail sectors. Technically, the website employs modern JavaScript libraries, Google Tag Manager, Matomo analytics, and other marketing tools, ensuring a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and secure forms, although some security headers could be improved. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms. However, the WHOIS data is missing, which reduces transparency and trustworthiness from a domain registration perspective. Overall, the website is well-structured, secure, and professionally presented, suitable for its market niche.

The website toptop.cz is currently inaccessible, returning a 403 Forbidden error page served via Cloudflare, indicating restricted access or security controls preventing content retrieval. Due to this, no business, contact, or policy information is available for analysis. The domain is registered since 2008 with a Czech registrar and uses Cloudflare DNS, suggesting a legitimate and established presence. However, the lack of accessible content severely limits the ability to assess the company's business model, services, or compliance posture. The technical infrastructure includes Cloudflare protection, but no further details on CMS, frameworks, or analytics can be determined. Security posture cannot be evaluated beyond the presence of Cloudflare protection. Overall, the site is currently blocked from public access, resulting in a low AI score and incomplete analysis.