High-risk security reports

The website milevsko.cz serves as a regional internet news portal for the town of Milevsko in the Czech Republic, providing local news, cultural event information, and community updates. It targets residents and visitors interested in regional happenings and local institutions. The business model is primarily informational with advertising support, focusing on community engagement and regional promotion. The domain has been registered since 1998, indicating a long-standing presence in the local digital space. Technically, the site is built on basic HTML, CSS, and JavaScript without modern CMS or frameworks. The hosting is provided by a Czech registrar REG-ZONER. The site lacks mobile optimization and advanced SEO or accessibility features, reflecting a modest technical maturity. No analytics or tracking technologies are detected, and the site does not implement modern security headers or visible HTTPS enforcement. From a security perspective, the absence of HTTPS and security headers is a concern, as is the lack of privacy and cookie policies. No incident response or vulnerability disclosure information is present. The site does not expose sensitive data or use vulnerable libraries, but overall security posture is basic and could be improved significantly. Overall, the website is functional and serves its community purpose but requires enhancements in security, privacy compliance, and technical modernization to improve trust and user experience. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving mobile responsiveness, and establishing clear contact and incident response channels.

N

NexGen IT s.r.o.

nexgen.cz

48

NexGen IT s.r.o. is a digital studio based in České Budějovice, Czech Republic, specializing in web design, software development, 3D visualization, and corporate identity services. The company serves clients domestically and internationally, including countries such as Slovakia, Germany, Austria, and Australia. Their business model combines service provision with the development of proprietary digital products like DMS, CMS, CRM, and an attendance system called NexDOS. The website presents a professional portfolio and client references, indicating a solid market position in the technology sector. Technically, the website employs modern JavaScript libraries including jQuery, FontAwesome, GSAP for animations, and integrates Google Maps API. The site is moderately optimized for performance and mobile responsiveness, with basic accessibility and SEO features. However, there is no detected CMS or explicit hosting provider information. The site lacks explicit privacy, cookie, and terms of service policies, which impacts compliance and user trust. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, no security headers were detected, and there is no vulnerability disclosure or incident response information available. The absence of WHOIS data for the domain is a significant concern, reducing the trustworthiness of the domain registration and raising questions about legitimacy. No WAF or blocking mechanisms were detected, and the content is fully accessible. Overall, the website is professionally designed and functional, but the lack of WHOIS transparency and privacy compliance documentation lowers its security and compliance posture. Strategic improvements in security headers, privacy policies, and domain registration transparency are recommended to enhance trust and compliance.

F

FT Sun s.r.o.

chciwwwstranky.cz

36

FT Sun s.r.o. is a Czech-based digital agency specializing in data-driven digital marketing, application development, and creative services such as photo and video production. The company positions itself as a pragmatic and experienced partner for businesses seeking to leverage internet technologies effectively. Their website reflects a professional and modern digital presence with clear service offerings and a focus on client engagement through contact forms and marketing tools. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Facebook Pixel, and reCAPTCHA for security and marketing purposes. The site is mobile-optimized and uses HTTPS, ensuring secure communications. However, the absence of certain security headers and lack of visible hosting or CMS details suggest room for technical improvements. From a security perspective, the site demonstrates good practices such as GDPR-compliant privacy and cookie policies and spam protection on forms. The lack of WHOIS data is a notable concern, as it impairs domain legitimacy verification. No critical vulnerabilities or exposed sensitive data were detected, but the site would benefit from enhanced security headers and published incident response information. Overall, FT Sun's website is a solid representation of a small technology service provider with good digital maturity and compliance posture. The main risk lies in the missing WHOIS information, which should be addressed to improve trust and transparency.

O

Obec Borová Lada

borova-lada.cz

37

Obec Borová Lada operates an official municipal government website serving the local community and visitors. The site provides comprehensive information about the municipal office, local services, tourism, public notices, and contact details. It targets residents and entrepreneurs in the Borová Lada area, positioning itself as a trusted local government resource. The business model is public sector focused, delivering essential civic information and services online. Technically, the website employs standard web technologies including jQuery, Google Analytics, Google Tag Manager, and Fancybox for UI enhancements. Hosting and web design are provided by ŠumavaNet.CZ. The site is moderately performant, mobile-optimized, and accessible with good SEO practices. Cookie consent mechanisms are implemented, though a dedicated privacy policy page is missing. From a security perspective, the site uses HTTPS and includes cookie consent but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain legitimacy verification, but the website content and structure indicate a legitimate municipal entity. Overall, the website is professional, trustworthy, and serves its public sector purpose well. Strategic improvements include publishing a privacy policy, enhancing security headers, and providing incident response information to strengthen compliance and security posture.

R

RRAS o.p.s.

bilastopa.cz

32

Bílá stopa is a Czech regional website dedicated to providing comprehensive information about cross-country skiing trails in the Šumava region. It offers current trail conditions, maps, webcams, and financing details, targeting skiing enthusiasts and tourists interested in outdoor winter activities. The website is supported by regional partners including local government and tourism organizations, enhancing its credibility and community focus. Technically, the site is built on WordPress with a modern tech stack including jQuery, Bootstrap, and several plugins for content management and GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS and implements a cookie consent mechanism, but lacks visible HTTP security headers and formal security policies. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable security posture. Overall, the site is trustworthy and serves its niche audience effectively, though improvements in privacy policy transparency and security headers are recommended.

K

KRASIM TOUR, spol. s.r.o.

krasimtour.cz

48

KRASIM TOUR, spol. s.r.o. is a Czech travel agency specializing in holiday packages to popular destinations such as Bulgaria, Greece, Turkey, and exotic locations worldwide. Established in 2006, the company offers a comprehensive range of services including accommodation bookings, various transport options, travel insurance, and parking services at departure points. The website is well-structured, professionally designed, and targets Czech-speaking customers seeking vacation travel solutions. The company maintains a solid market position with over 30 years of experience and trust indicators such as insurance certification and a guarantee fund. Technically, the website employs modern web technologies including jQuery, Lightbox2, Google reCAPTCHA, and a chat widget for customer support. It uses a Content Security Policy and enforces HTTPS, reflecting a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. SEO and accessibility are adequately addressed, though accessibility could be further improved. From a security perspective, the site demonstrates good practices with HTTPS, CSP headers, and anti-bot measures. Cookie consent and privacy policies are implemented in compliance with GDPR. However, explicit security policies and incident response contacts are not found, representing an area for enhancement. No vulnerabilities or suspicious activities were detected. Overall, the website presents a low-risk profile with strong business credibility and a good security posture. Strategic recommendations include adding a dedicated security policy page, incident response contact information, and a vulnerability disclosure mechanism to further enhance trust and compliance.

E

Ecn Studio s.r.o

ecnstudio.cz

46

Ecn Studio s.r.o is a Czech technology company specializing in web design, web hosting, and online tools primarily serving nonprofit organizations and other clients requiring complex web solutions. The company has a legacy dating back to the early 1990s under the Econnect brand and continues to operate with a focus on quality and custom development. Their services include web hosting, web design, account services, network support, and a suite of online tools such as webmail, cloud storage, and a proprietary CMS called ActionApps Toolkit. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site uses modern JavaScript libraries like Swiper and LightGallery, and privacy-conscious analytics via Matomo with cookies disabled. The domain is registered with REG-WEDOS since 2017, consistent with the business history and location in the Czech Republic.

L

Lesy České Republiky, s. p.

parcour.cz

32

The website www.parcour.cz represents a government-operated shooting range facility located in the Czech Republic, specifically serving the Lesní závod Konopiště region. It provides services related to shooting sports, including training, registration, and hosting of shooting competitions such as the Lovecký brokový parkúr. The site is modest in size and targets a niche audience of hunters and shooting sports enthusiasts. The business model is focused on government service provision rather than commercial enterprise. Technically, the website uses standard web technologies including JavaScript, jQuery, and Google Analytics for tracking. The site is accessible over HTTPS but lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in security and privacy compliance. The WHOIS data is missing, which raises concerns about domain registration transparency but does not necessarily indicate illegitimacy given the government affiliation. Overall, the site is functional with basic content quality and moderate technical implementation.

I

ICT NWT s.r.o.

eveza.cz

48

EVEZA.cz is an established Czech Republic government-related platform operated by ICT NWT s.r.o., providing electronic tools for publishing and managing public procurement notices and profiles of contracting authorities. The platform supports compliance with Czech public procurement laws and targets public sector entities and suppliers. The website is built on a custom ASP.NET WebForms framework with modern JavaScript libraries such as jQuery, Google reCAPTCHA, and Matomo analytics, indicating a moderate level of digital maturity. The site implements HTTPS and cookie consent mechanisms, but lacks explicit privacy policy pages and visible security headers, which are areas for improvement. Overall, the security posture is adequate but could be enhanced by adding security headers and consolidating JavaScript libraries. The domain WHOIS data is consistent with the operator company, supporting legitimacy and trustworthiness.

H

HUMLNET CREATIVE s.r.o.

hucr.cz

43

HUMLNET CREATIVE s.r.o. is a Czech Republic-based small web development agency specializing in creating custom, modern, and professional websites tailored to client needs. Their market position is that of a regional service provider with a portfolio of local clients including schools, companies, and organizations. The company emphasizes a collaborative and tailored approach to web design and development, offering multilingual and responsive websites. Technically, the website is built on a modern stack including Bootstrap, jQuery, and OctoberCMS, with integration of Facebook SDK and Google Analytics for marketing and analytics purposes. The site is mobile-optimized and features a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and secure form handling, though additional security headers could improve defenses. The absence of WHOIS data reduces transparency but the website content and business information appear legitimate and professional. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, with moderate security maturity.

Pematex s.r.o. is a Czech-based company specializing in the wholesale and retail of fastening materials and hardware, serving manufacturing and industrial clients with a strong emphasis on fast and quality deliveries. The company operates multiple physical stores across the Czech Republic and offers a B2B e-commerce platform, positioning itself as an authorized supplier of the Nord-Lock brand. The website reflects a professional business presence with clear service offerings and customer engagement features.

M

Mekr´s

mekrs.cz

46

Mekr´s is a Czech-based wholesale supplier specializing in fastening and anchoring materials, offering over 60,000 items and serving more than 20 countries. Established in 1994, the company targets B2B customers in engineering, electronics, metallurgy, and automotive sectors. Their business model focuses on providing a comprehensive product range with custom solutions and a regional dealer network, supported by an e-commerce platform. Technically, the website is built on WordPress with Elementor, integrating modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Microsoft Clarity. The site is well-structured, mobile-optimized, and includes multi-language support. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are not explicitly detected and no formal security policy or incident response contacts are published. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and business presence appear professional and legitimate. Overall, the site demonstrates a mature digital presence with room for improvement in security transparency and domain registration clarity.

P

Práce na horách. najděte si brigádu a zažijte zimu snů - Práce na horách

pracenahorach.cz

43

The website pracenahorach.cz is a niche job listing platform focused on seasonal winter employment opportunities in Czech mountain resorts, primarily targeting students and seasonal workers interested in ski instruction and related hospitality roles. The site offers curated job offers, course information, and location details, supported by partner ski schools and mountain activity providers. Technically, the site uses modern web technologies including HTML5, CSS, JavaScript, Google Analytics, Google Tag Manager, reCAPTCHA, and Smartsupp live chat, delivering a responsive and user-friendly experience. Security posture is generally good with HTTPS enforced and anti-bot measures on contact forms, though it lacks some security headers and formal privacy/cookie policies, which are compliance gaps. The absence of WHOIS data limits domain transparency but does not detract from the site's apparent legitimacy. Overall, the site is professionally designed, content-rich, and safe for general audiences.

S

Sáňkařská dráha Špindlerův Mlýn

sankarska-draha.cz

45

Sáňkařská dráha Špindlerův Mlýn operates the longest illuminated sledding track in the Czech Republic, offering a unique winter sports experience primarily targeting families, groups of friends, and corporate clients visiting the Krkonoše region. The business model integrates transportation, equipment rental, and hospitality services to enhance visitor experience. The website is professionally designed using WordPress with modern plugins for SEO, GDPR compliance, and user engagement such as newsletter subscriptions. Technically, the site employs a solid tech stack including Slider Revolution and WPBakery, though some plugins may require updates to mitigate potential vulnerabilities. Security posture is adequate with HTTPS and reCAPTCHA protections, but could be improved by implementing additional security headers and publishing security policies. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which impacts overall trust. The site is fully accessible without WAF or blocking mechanisms, and content is family-friendly and safe for general audiences.

T

Tourist Board Špindlerův Mlýn, z.s.

touristboard.cz

49

Tourist Board Špindlerův Mlýn, z.s. is a non-profit destination management organization dedicated to promoting tourism in the Špindlerův Mlýn area and the broader Krkonoše region. Supported by the city and key tourism operators, it focuses on marketing, tourism projects, and event organization to enhance the visitor experience and regional development. The website is professionally designed, mobile-optimized, and provides clear information about the organization's mission and activities, targeting tourists and local stakeholders.

F

FT Sun s.r.o.

ftsun.cz

46

FT Sun s.r.o. is a Czech digital agency specializing in data-driven digital services including application development, e-marketing, photo and video production, graphic design, and e-shop solutions. The company targets businesses seeking pragmatic and technologically standardized digital partners. The website presents a professional image with clear service offerings and a focus on GDPR compliance. Technically, the site uses modern web technologies such as Bootstrap, Owl Carousel, Google Analytics, Google Tag Manager, Facebook Pixel, and reCAPTCHA to enhance user experience and security. Security posture is solid with HTTPS enforced and consent mechanisms in place, though the absence of security headers and WHOIS data reduces overall trust. The domain WHOIS data is missing, which is a concern for domain legitimacy but the website content and business information appear consistent and professional. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations, making it a credible digital agency in the Czech market.

4

42 Wolfsburg

42wolfsburg.de

45

42 Wolfsburg is a specialized software development school that is part of the global 42 network, offering bachelor and master level education in software development. The website presents a professional and modern digital presence built on WordPress with Elementor, targeting prospective students and the tech education market. The technical infrastructure is solid, leveraging modern web technologies and performance optimizations, with good mobile responsiveness and SEO practices. Security posture is generally good with HTTPS enforced and privacy consent mechanisms implemented, though explicit privacy and security policies are not published. No critical vulnerabilities or suspicious content were detected, indicating a trustworthy and safe platform. Overall, the site reflects a credible educational institution with room for improvement in transparency and security documentation.

The website 42yerevan.am is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any business or service content. The domain is registered since 2019 with a reputable registrar, but no business information, contact details, or policies are available on the site. The lack of accessible content and absence of privacy, cookie, or terms of service policies indicate a very low digital maturity and poor user experience. Technically, the site only loads Google Fonts externally and does not provide any security headers or SSL configuration details in the provided data. This severely limits the ability to assess the security posture or compliance status. Overall, the site is not currently functional for end users or business purposes.

I

Innovation Academy

42seoul.kr

46

42 Seoul is an innovative software education program based in South Korea, operated by the Innovation Academy. The program offers tuition-free, self-directed learning aimed at cultivating top-tier software developers. The website reflects a medium-sized educational entity with a clear focus on growth, mentorship, and practical experience through collaborations with various companies. The business model emphasizes accessibility and challenge-driven learning without traditional academic constraints. Technically, the website employs a custom CMS with a technology stack including jQuery, Slick Carousel, Google Fonts, and Google Analytics, hosted via Megazone and utilizing Cloudflare DNS. The site is mobile-optimized with good SEO practices, though some accessibility features are basic. Performance is moderate, and the site uses HTTPS with a secure domain registration status. From a security perspective, the site enforces HTTPS and uses Cloudflare nameservers, but lacks visible security headers and a cookie consent mechanism, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a comprehensive privacy policy present but no explicit cookie consent. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy, professional, and well-aligned with its educational mission. Strategic improvements in security headers and privacy compliance would further strengthen its posture and user trust.

B

Bábolna város hivatalos honlapja

babolna.hu

31

Bábolna.hu is the official municipal website of Bábolna city in Hungary, providing comprehensive information about the city's history, government, tourism, cultural life, and current events. The site targets residents, visitors, and stakeholders interested in local governance and community activities. It serves as a digital portal for municipal announcements, event information, and public resources, positioning itself as a trusted source of official city information. Technically, the website is built on the WordPress CMS platform, utilizing the Yoast SEO plugin for search engine optimization and Google Fonts for typography. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. The use of HTTPS ensures secure communication, and structured data via JSON-LD enhances search engine understanding. However, no advanced frameworks or hosting details are evident from the HTML content. From a security perspective, the site benefits from HTTPS encryption and lacks visible vulnerabilities or exposed sensitive data. However, it lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is present, and contact details for security matters are absent. These gaps represent areas for improvement to enhance trust and compliance. Overall, the website is professional, trustworthy, and well-branded, but it would benefit from improved privacy compliance, explicit security policies, and enhanced transparency regarding data protection and incident handling to strengthen its security posture and regulatory adherence.

The Global TV Group is an international coalition of broadcasters and sales houses trade bodies across multiple continents, focused on promoting television as an effective advertising and media platform. The website serves as an informational and advocacy platform, hosting webinars, industry news, and member information. The technical infrastructure is based on WordPress with a modern plugin ecosystem including Slider Revolution and Contact Form 7, providing a responsive and professional user experience. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though security headers and policies could be improved. The absence of WHOIS data for the domain is a notable concern, reducing trust in domain legitimacy despite the professional presentation. Privacy and cookie policies are missing, which impacts compliance and user trust. Overall, the site is functional and credible within its niche but would benefit from enhanced transparency and compliance documentation.

A

Ajurvédská Univerzita Praha

ayurveda-online.net

47

Ayurveda-online.net is a small, niche educational website sponsored by the Ajurvédská Univerzita Praha, providing free access to classical Ayurvedic and spiritual literature. The site targets students, researchers, and practitioners interested in Ayurveda and related disciplines. It operates as a non-commercial resource with a focus on educational content rather than commercial services. Technically, the website is simple, built with static HTML and CSS, and hosted on a registrar-associated infrastructure with DNS servers in the Czech Republic. The site is mobile responsive but lacks advanced technical features or CMS integration. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. No privacy or cookie policies are present, and no contact information or forms are provided, limiting user engagement and compliance maturity. Overall, the site is trustworthy for its educational purpose but could improve in security and privacy compliance.

A

ajur.cz

ajur.cz

46

ajur.cz is a Czech Republic-based website focused on Ayurvedic health consultations, education, and e-commerce. The business combines traditional Ayurveda with modern medical knowledge, offering consultations by qualified practitioners and selling Ayurvedic herbs, spices, and literature through an online shop. The site also promotes the Ayurvedic University in Prague and related activities, targeting individuals interested in holistic health and Ayurveda. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and Elementor, hosted on cesky-hosting.eu. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies, representing compliance gaps. No WAF or blocking mechanisms are detected, and no suspicious content or vulnerabilities are apparent. Overall, the site is trustworthy and professional but could improve privacy compliance and security hardening.

R

Roklen Fin a.s.

roklen.cz

48

Roklen Fin a.s. is a Czech financial group established in 2014, offering a broad range of financial services including corporate finance, investment services, currency exchange, securities trading, and financial news. The group operates multiple specialized brands targeting companies and private individuals, positioning itself as a leading fintech and financial advisory group in the Czech Republic. The website is professionally designed with clear navigation and consistent branding, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries and lazy loading for performance, but lacks some advanced security headers and explicit privacy compliance features. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but improvements are recommended in privacy policy publication and security header implementation. Overall, the site is trustworthy and business credible, though privacy compliance and security transparency could be enhanced.

A

Autosklo Hleďa

hleda.cz

45

Autosklo Hleďa is a regional automotive service provider based in the Czech Republic, specializing in automotive glass repair and replacement, air conditioning servicing, tire services, general auto repair, and vehicle rental. The company operates multiple branches in key cities such as Vyškov, Kroměříž, Prostějov, and Šumperk, targeting vehicle owners in the Střední Morava region. Their website reflects a professional and consistent brand presence with clear service offerings and contact information. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google Tag Manager, ensuring a responsive and user-friendly experience. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanisms. Security posture is moderate, with HTTPS usage and some best practices observed, but lacks explicit security headers and incident response information. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, though the website content and business operations appear credible and trustworthy. Overall, the website scores well in content quality, technical implementation, and business credibility, with room for improvement in security and domain registration transparency.

C

cistirna-matraci.cz

cistirna-matraci.cz

45

The website cistirna-matraci.cz represents a small local business specializing in mattress cleaning and disinfection services in Prague and across the Czech Republic. The company offers a variety of cleaning methods including UV-C, ozone, and soda cleaning, targeting consumers seeking hygienic mattress maintenance. The website is built on WordPress using the Divi theme, incorporating modern SEO practices and cookie consent mechanisms, indicating a moderate level of digital maturity. However, the absence of a privacy policy and terms of service documents highlights compliance gaps that should be addressed. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and incident response contacts. Overall, the site is professional and trustworthy for its business scope but would benefit from enhanced compliance and security documentation.

C

COFFEEBREAK s.r.o.

coffee-break.cz

45

COFFEEBREAK s.r.o. is a well-established Czech company specializing in the authorized distribution of premium coffee brands such as Lavazza, alongside professional coffee machines, syrups, teas, and other gastronomy-related products. With approximately 20 years of market presence, the company targets professional gastronomy businesses including cafes, hotels, and offices, offering a comprehensive portfolio of products and tailored services. The website reflects a professional and consistent brand image, supporting its market position as a trusted distributor in the hospitality sector. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses popular JavaScript libraries such as jQuery. It integrates Matomo and Google Tag Manager for analytics and employs the Complianz GDPR plugin for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR requirements. However, it lacks visible security headers such as Content-Security-Policy and X-Frame-Options, which are recommended for enhanced protection. The absence of WHOIS registrant data due to privacy protection slightly reduces trust but is common for commercial entities. No critical vulnerabilities or exposed sensitive data were detected. Overall, COFFEEBREAK's website demonstrates a solid business and technical foundation with good privacy compliance and a safe content profile. Strategic improvements in security headers and transparency around domain registration could further enhance trust and security posture.

U

UNAR

unar-prohotel.cz

46

UNAR is a Czech company specializing in manufacturing hotel furniture, including mattresses, beds, folding sofas, and accessories, with a tradition dating back to 1991. The company targets hotels, pensions, and spa houses primarily in the Czech Republic and possibly neighboring regions. Their market position is that of an established medium-sized manufacturer with over 300 completed projects, emphasizing quality and custom solutions. Technically, the website employs modern web technologies such as jQuery, Foundation framework, Owl Carousel, and integrates Google Analytics and Tag Manager for tracking, alongside reCAPTCHA for form security. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though it lacks some security headers and a security.txt file. Privacy compliance is well addressed with a cookie consent banner and a privacy policy in Czech, indicating GDPR awareness. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trustworthiness. Overall, the website is professional and trustworthy from a content and technical perspective but would benefit from improved transparency in domain registration and enhanced security headers.

F

FLAE ROBOTICS, a.s

flaerobotics.ai

46

FLAE Robotics is a newly established Czech company specializing in AI-driven humanoid staff solutions for the hospitality industry. Their innovative approach focuses on creating virtual and physical AI receptionists to transform hotel operations and guest experiences. The company is led by experienced professionals with backgrounds in hospitality, AI, and technology consulting, positioning them as a promising startup in the hospitality technology sector. Technically, the website is built on WordPress with Elementor and integrates modern analytics and cookie consent tools, reflecting a moderate to good digital maturity. Security posture is solid with HTTPS and basic security practices, though improvements such as DNSSEC and security policies are recommended. Overall, the site is professional and trustworthy, though lacking formal privacy and terms documentation. Strategic recommendations include enhancing privacy compliance, publishing security policies, and enabling DNSSEC to strengthen trust and security.

S

Children of Saul

saulgyermekei.hu

40

The website 'Children of Saul' appears to be a small-scale, likely non-profit or community-oriented site based in Hungary. The site is built on WordPress and supports multilingual content in English and Hungarian. The content is minimal with no visible business descriptions, contact information, or privacy-related policies, which limits the ability to fully assess the business model or market position. Technically, the site uses standard WordPress plugins and libraries such as jQuery, Fancybox, and WPML for multilingual support. Google Analytics and Google Tag Manager are used for visitor tracking, indicating some level of digital maturity. Security posture is basic with HTTPS enabled but lacking security headers and visible security policies. No forms or user data collection mechanisms were detected on the analyzed page. Overall, the site is safe with no adult or explicit content detected, but it lacks comprehensive privacy and security disclosures.

Y

Yellow Point, spol s r. o.

yellow-point.cz

32

Yellow Point, spol s r. o. is a Czech Republic-based sport and educational agency established in 1999, specializing in adrenaline experiences, sports skill development, and corporate event organization across the Czech Republic. The company offers a variety of services including ski schools, sport activities, corporate teambuilding events, and gift certificates, targeting a broad audience interested in active and educational leisure. The website is professionally designed, multilingual, and provides clear contact information and partner affiliations, indicating a solid market presence. Technically, the site uses modern JavaScript libraries, tracking tools, and implements cookie consent mechanisms, reflecting a moderate to good digital maturity. Security posture is adequate but could be improved by adding security headers and enhancing form protections. The absence of WHOIS data is a notable concern for domain transparency but does not detract significantly from the business credibility based on website content. Overall, Yellow Point presents as a trustworthy and professional service provider in the hospitality and sports education sector.

H

Hotel u Kabinky | Ubytování ve 4** hotelu v lázeňském středisku v Krkonoších

hoteljanskelazne.cz

43

Hotel U Kabinky is a small hospitality business located in the heart of the Krkonoše mountains in Janské Lázně, Czech Republic. It offers 4-star accommodation directly adjacent to a cable car station and spa colonnade, targeting tourists, families, and sports enthusiasts. The hotel provides rooms, apartments, and depandances, complemented by an on-site restaurant and a sports shop. Additionally, it operates a ski school and related sports services, enhancing its value proposition in the winter sports market. The website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a mature digital presence. Security posture is strong with HTTPS and security headers implemented, though no explicit security or incident response policies are published. The absence of WHOIS registration data is a notable gap that impacts trust but does not detract from the overall professional presentation. Privacy and cookie policies are present and GDPR compliant. Overall, the site demonstrates a solid business and technical foundation with room for improvement in transparency and security documentation.

ALPSPORT s.r.o. operates the website Alpsport.cz, specializing in retail sales of outdoor equipment including gear for skialp, freeride, telemark, climbing, camping, and hiking. The company positions itself as a leading provider in the Czech Republic with a broad product range and services such as equipment rental and climbing courses. The website is built on ASP.NET Web Forms technology, utilizing several JavaScript libraries including jQuery and Owl Carousel, and integrates Google Tag Manager and Smartsupp Live Chat for analytics and customer support. While the technical infrastructure is functional, some components like jQuery are outdated, and security headers could be improved. The site enforces HTTPS and includes a cookie consent mechanism, but lacks an explicit privacy policy and terms of service pages in the provided content. Overall, the security posture is moderate with room for enhancement in compliance and technical modernization. The domain WHOIS data is unavailable, likely due to privacy protection, but the website content and business information indicate a legitimate and established retail business. Strategic recommendations include updating libraries, enhancing security headers, and publishing comprehensive privacy and terms policies to improve trust and compliance.

Z

ZOO Dvůr Králové a. s.

safaripark.cz

48

Safari Park Dvůr Králové is a well-established zoological park in the Czech Republic specializing in African wildlife conservation and visitor engagement. The website provides comprehensive information about animal exhibits, visitor planning, educational programs, and conservation projects. It also offers accommodation services and an online shop, indicating a diversified business model focused on tourism and conservation funding. The site targets families, tourists, and educational groups, positioning itself as a key regional attraction with reputable partnerships. Technically, the website uses a modern tech stack including jQuery, Google Analytics, Facebook SDK, and a custom CMS (Toolkit). The site is mobile-optimized with good navigation and content quality. However, some technical improvements are possible, especially in security headers and performance optimization. From a security perspective, the site uses HTTPS and has a cookie consent mechanism, indicating GDPR awareness. However, it lacks explicit privacy policies, security headers, and incident response contacts, which are areas for improvement. No WAF or blocking mechanisms were detected, and the WHOIS data is consistent and trustworthy. Overall, the website is professional and trustworthy with moderate security posture and privacy compliance. Strategic improvements in security policies and transparency would enhance its risk profile and user trust.

S

Safari Park Resort

safariparkresort.cz

44

Safari Park Resort is a hospitality business located in Dvůr Králové nad Labem, Czech Republic, offering hotel accommodation, safari camping, dining, and experiential programs. The website presents a professional and consistent brand image targeting tourists interested in safari and zoo experiences. The business is small-sized, founded in 2015, and maintains a good market position regionally with partnerships for booking and certification. Technically, the website uses modern JavaScript libraries, analytics tools, and a cookie consent mechanism, but lacks explicit privacy and terms of service pages. Security posture is moderate with HTTPS implied but missing explicit security headers and policies. Contact information is clearly provided with multiple phone numbers and emails, enhancing business credibility.

E

ECN Studio

ecn.cz

48

ECN Studio operates a professional web presence focused on web design, web hosting, and technical support services primarily targeting Czech businesses and users. The company has a long-standing domain registration dating back to 1995, indicating established market presence. The website offers multiple online tools such as webmail, cloud storage, and toolkits, enhancing its service portfolio. The site is well structured with clear navigation and consistent branding, though it lacks formal privacy and cookie policies. Technically, the website uses modern HTML5, CSS3, and JavaScript with responsive design elements, providing a good user experience across devices. However, there is no evidence of advanced frameworks or CMS usage, and performance is moderate. Security posture is adequate with HTTPS implied but lacks explicit security headers and incident response information. No forms or user data collection mechanisms are present on the main page, reducing immediate data protection concerns. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data but would benefit from implementing security headers, publishing privacy and cookie policies, and providing vulnerability disclosure channels. The WHOIS data confirms domain legitimacy and consistency with the business claims, enhancing trustworthiness. Overall, the website is safe, professional, and suitable for general audiences with no adult or questionable content. Strategic recommendations include enhancing privacy compliance, improving security headers, and adding incident response information to strengthen trust and regulatory adherence. The site’s technical and business foundations are solid but could be modernized further for improved performance and security.

W

William H. Coleman, Inc.

travelmartlatinamerica.com

45

TravelMart LatinAmerica is a well-established event organizer specializing in the Latin America tourism industry, facilitating business development through pre-scheduled appointments between global tour operators and suppliers from Central and South America. The company has a strong market position as a premier event since 1978, targeting professional buyers and suppliers in the hospitality and transportation sectors. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site is built on WordPress with Elementor and uses modern SEO and security tools such as Yoast SEO and Google reCAPTCHA, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and domain locking but lacks advanced security headers and DNSSEC, representing areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is trustworthy and functional but would benefit from enhanced security and compliance measures.

O

Orange house s.r.o.

orangehouse.cz

45

Orange house s.r.o. is a Czech Republic based IT company specializing in comprehensive business communication solutions including CRM systems, CMS web platforms, and B2B commerce solutions. Founded in 2012 as a subsidiary of Xantipa Agency s.r.o., the company offers tailored software products and services such as technical support, training, and document management audits. Their market position is that of a small but established technology provider focused on enhancing business management and communication efficiency. Technically, the website employs a mix of legacy and modern JavaScript libraries, Google Analytics for tracking, and a proprietary CMS. However, some components like jQuery 1.9.1 and the Mapy.cz SDK are outdated, which may pose security risks. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. Security posture is adequate with HTTPS usage but lacks security headers and uses deprecated libraries. Privacy compliance is weak due to absence of privacy and cookie policies. Business credibility is strong with clear company information and contact details. Overall, the website is professional and trustworthy but would benefit from technical and compliance improvements.

S

Svazek obcí Východní Krkonoše

vychodnikrkonose.cz

49

Svazek obcí Východní Krkonoše is a regional association of municipalities in the Eastern Krkonoše area of the Czech Republic, focused on regional development, tourism, and community support. The organization provides services such as meeting room rentals, coworking spaces, and event equipment, and manages multiple projects aimed at enhancing tourism and sustainable regional growth. The website reflects a well-established entity with a domain age since 2004, consistent with its operational history. Technically, the website employs modern web standards including HTML5, CSS3, Bootstrap for responsive design, and Font Awesome for icons. It is hosted by Active24, a known Czech hosting provider, and uses HTTPS with good performance optimizations such as Google PageSpeed. The site is mobile-friendly and has good SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS and implements a cookie consent banner compliant with GDPR. However, no explicit security headers or incident response policies are found, and no vulnerability disclosure or security.txt files are present. No critical vulnerabilities or exposed sensitive data were detected in the content analyzed. Overall, the website is professional, trustworthy, and suitable for its target audience of local municipalities and regional stakeholders. Strategic improvements in security headers and explicit security policies would enhance its security posture and compliance.

S

Střední škola Olgy Havlové

oajl.cz

49

Střední škola Olgy Havlové is a specialized secondary school located in Janské Lázně, Czech Republic, providing education primarily for students with physical disabilities and multiple impairments. The institution offers a range of services including an internat, special pedagogical center, and leisure center, supported by European Union and EHP funding projects. The website reflects a focused educational mission targeting students, parents, and the public with clear navigation and relevant content. Technically, the site uses common JavaScript libraries such as jQuery and lightGallery, with a moderate performance and basic mobile optimization. Security posture is adequate with HTTPS usage but lacks advanced security headers and cookie consent mechanisms. WHOIS data is unavailable, which reduces domain trustworthiness despite the legitimate educational content. Overall, the site is professional and trustworthy but would benefit from improved privacy compliance and enhanced security practices.

The website www.janskelazne.cz serves as an official tourism and accommodation information portal for Janské Lázně and the SkiResort Černá hora-PEC, the largest ski resort in the Czech Republic. It offers online booking services with promotional discounts on ski passes and leisure activities, targeting tourists and visitors interested in winter sports and summer leisure in the Krkonoše region. The site demonstrates a consistent brand presence and provides clear contact information, reinforcing its role as a local tourism information center with over two decades of experience. Technically, the website employs a traditional web stack including jQuery, jQuery UI, Google Analytics, Google Tag Manager, and Google Maps API, indicating moderate digital maturity. The site is mobile-optimized with good navigation and content relevance, although some accessibility features could be improved. Performance is moderate, with external dependencies on trusted providers for fonts and analytics. From a security perspective, the site uses HTTPS and standard tracking scripts but lacks explicit security headers and privacy/cookie policies, which are critical for GDPR compliance and user trust. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which should be addressed to enhance trustworthiness. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security practices, and verification of domain registration details to strengthen its security posture and business credibility.

M

Max Realitní Fond SICAV a.s.

maxrealitni.cz

36

Max Realitní Fond SICAV a.s. operates as a premium real estate investment fund focused on retail and office properties within the Czech Republic. The fund targets qualified investors, offering a business model centered on pooling capital to invest in prime real estate assets with a goal of achieving an annual return of approximately 8.5%. The website presents a professional and consistent brand image, providing detailed information about investment strategies, team members, and performance metrics. Technical infrastructure leverages modern JavaScript libraries such as jQuery, Bootstrap, and Chart.js, alongside Cookiebot for GDPR-compliant cookie management. Analytics are implemented via Google Analytics and Google Tag Manager, supporting moderate user tracking with appropriate consent mechanisms. Security posture is adequate but could be improved by implementing additional HTTP security headers and verifying SSL configurations. The absence of WHOIS data due to privacy protection limits transparency but does not detract significantly from the site's credibility given the professional presentation and clear business information. Overall, the website is well-structured, user-friendly, and compliant with privacy regulations, serving its target audience effectively.

H

HAVEL & PARTNERS

nextzeny.cz

44

NextŽeny is a specialized project by the reputable law firm HAVEL & PARTNERS, focusing on the global trend of wealth transfer to women, female entrepreneurship, and investment. The website serves as a platform for research dissemination, networking, and educational initiatives targeting women investors and business professionals primarily in Czechia and Slovakia. The project is supported by notable partners such as RSM, UBS, VISA, and others, enhancing its credibility and market position. Technically, the website is built on WordPress with modern performance optimizations including lazy loading, multilingual support via WPML, and Google Tag Manager integration. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Hosting and domain registration are consistent and appropriate for the business scale and age. From a security perspective, the site uses HTTPS and employs best practices like deferred script loading and no exposed sensitive data. However, it lacks explicit security headers and a visible cookie consent mechanism, which are important for GDPR compliance. There is no published security policy or incident response contact, which could be improved to enhance trust and readiness. Overall, the website is professional, trustworthy, and well-aligned with its business goals. Strategic improvements in privacy compliance and security transparency would further strengthen its posture and user confidence.

L

LIVEBOX, a.s.

livebox.cz

49

LIVEBOX, a.s. is a Czech-based company specializing in live streaming services, including sports broadcasts, pay-per-view events, and event production. The company targets sports fans, corporate clients, and event organizers, positioning itself as a reliable and experienced streaming service provider with a medium-sized market presence. Their website showcases a professional design with clear navigation and multimedia content highlighting their key services and partnerships. Technically, the site uses ASP.NET Web Forms with Bootstrap and jQuery, integrating analytics and tracking tools such as Google Analytics, Facebook Pixel, and Smartlook, all managed with user consent mechanisms. Security posture is moderate, with no visible security headers and no explicit incident response or vulnerability disclosure policies published. The absence of WHOIS data reduces domain trust, but the website content and contact information appear legitimate and professional. Overall, the site scores well in content quality and business credibility but could improve in technical security and transparency.

C

Ceník domén, srovnání cen domén | CenikDomen.com

cenikdomen.com

47

CenikDomen.com is a Czech Republic-based website specializing in providing a comprehensive comparison of domain prices across Czech and global registrars. Established in 2013, the site monitors prices for over 500 domain extensions, targeting individuals and businesses seeking the best domain registration deals. The website employs modern frontend technologies such as Bootstrap and Font Awesome, ensuring a responsive and user-friendly interface optimized for mobile devices. However, the site lacks critical compliance elements such as privacy and cookie policies, and no contact information is readily available, which may impact user trust and regulatory compliance. Security-wise, the site uses HTTPS but does not implement DNSSEC or security headers, indicating room for improvement in its security posture. Overall, the domain registration data aligns well with the website's purpose, reflecting a legitimate and stable online presence.

The website hotrec.eu is currently inaccessible due to an invalid SSL certificate on the origin server, resulting in a Cloudflare error 526 page being served. This prevents access to any meaningful content or business information. The site is hosted via OVH SAS and protected by Cloudflare, but the SSL misconfiguration severely impacts trust and usability. No privacy, cookie, or terms of service policies are present, nor are there any contact details or forms. The technical infrastructure is minimal, relying primarily on Cloudflare and OVH SAS hosting. Security posture is weak due to the SSL issue and lack of security headers. Overall, the site is blocked by a WAF mechanism, limiting analysis and reducing the AI score to 25.

M

Metropolitní kapitula u sv. Víta

katedrala.tv

47

Katedrála TV is an official streaming media platform operated by Metropolitní kapitula u sv. Víta, providing live and archived religious services primarily related to St. Vitus Cathedral in Prague. The website serves a general audience interested in religious content, offering scheduled programming and video archives. The business operates as a small non-profit entity within the media and government/non-profit sectors, with a clear focus on religious broadcasting. Technically, the website employs modern web technologies including Google Fonts, Google Analytics with consent, Cookiebot for cookie management, and Cloudflare for DNS and CDN services. The site is mobile optimized with good navigation and SEO practices, though it lacks a detected CMS and some advanced accessibility features. Performance is moderate, supported by CDN usage. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, it lacks DNSSEC, security headers, and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business identity, enhancing trustworthiness. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could improve security posture by enabling DNSSEC, adding security headers, and publishing security policies. Contact information is minimal on the site, which could be enhanced for better user support and trust.

Valbek, spol. s r.o. is a well-established Czech engineering and project management company specializing in infrastructure and construction projects since 1990. The company offers a broad range of services including project design, geotechnical surveys, construction supervision, and software development for the construction industry. With a large team of experts and multiple ISO certifications, Valbek holds a strong market position in the Czech Republic and neighboring countries. The website reflects a professional and comprehensive digital presence with clear service descriptions and contact information. Technically, the website uses a traditional tech stack with jQuery and bxSlider, and integrates modern fonts and photo galleries. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR. However, some technologies like jQuery are outdated, and security headers are not visibly implemented, which could be improved. From a security perspective, the company demonstrates maturity through ISO 27001 certification and published security policies. The website enforces HTTPS and provides cookie consent, but lacks a dedicated incident response contact and security.txt file. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professional, and compliant with privacy regulations. The domain age and WHOIS data align well with the company's history, supporting legitimacy. Strategic improvements in security headers, technology updates, and incident response transparency would enhance the security posture and user trust.

L

LOGstudio

logstudio.cz

45

LOGstudio is a Czech-based design and creative agency specializing in web development, UI/UX design, branding, printing materials, online marketing, and professional photo/video production. The company positions itself as a passionate and innovative partner for businesses seeking to enhance their brand identity and digital presence. Their website demonstrates a strong portfolio and client base, indicating a solid market position within the creative technology sector. Technically, the site is built on WordPress using the Divi theme, enhanced with SEO and GDPR compliance plugins, and hosted by a reputable Czech registrar. Security posture is good with HTTPS enabled and CAPTCHA on contact forms, though some security headers could be improved. Privacy compliance is well addressed with clear cookie consent and GDPR policy pages. Overall, the website is professional, user-friendly, and trustworthy, with no critical security or content safety issues detected.