High-risk security reports

M

MICROSITE CZ s.r.o.

katalog-stomatologu.cz

43

Katalog-stomatologu.cz is a well-established Czech online directory and service platform dedicated to dental professionals and patients. Operated by MICROSITE CZ s.r.o. since 2010, it offers a comprehensive listing of dentists, dental hygienists, and related services across the Czech Republic. The platform includes advanced features such as online appointment booking, video presentations of clinics, and a secure medical mail system, positioning it as a key player in the Czech dental healthcare digital ecosystem. The website targets both dental professionals seeking to promote their services and patients looking for trusted dental care providers.

The website simplepartner.hu represents Otp Mobil Kft., a medium-sized Hungarian company founded in 2015, operating in the finance and technology sectors. The business focuses on providing online payment systems, mobile applications, and corporate solutions such as parking and e-vignette services. The site positions itself as a partner for e-commerce merchants and corporate clients requiring flexible payment and mobile financial services. The market position appears stable with links to related domains indicating a broader service ecosystem. Technically, the website is built with basic HTML and CSS without advanced frameworks or CMS detected. The site is moderately optimized for mobile devices and has a simple navigation structure. However, it lacks modern SEO and accessibility features and does not include analytics or tracking technologies. Performance is moderate with no visible technical debt but opportunities exist for modernization and improved user experience. From a security perspective, the site does not display privacy or cookie policies, lacks security headers, and does not provide contact information for incident response. No HTTPS or SSL configuration details were provided, limiting the security posture assessment. The domain WHOIS data is consistent and supports the legitimacy of the business. Overall, the security maturity is basic with room for significant improvements in compliance and protection. The overall risk is moderate due to the absence of critical security issues but the lack of privacy compliance and contact information reduces trust. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, improving mobile and accessibility features, and providing clear contact and incident response channels to strengthen trust and compliance.

Central Médiacsoport Zrt. is a Hungarian media company operating a portfolio of online media properties including news, lifestyle, health, entertainment, and classifieds websites. The company has an established market presence since 2006 and targets Hungarian internet users seeking diverse content. The business model is primarily based on media publishing and online advertising revenue streams. Technically, the website analyzed is a simple portal page linking to multiple subsidiary sites, with minimal technical complexity and no detected modern frameworks or CMS. Security posture is weak due to lack of visible HTTPS enforcement, security headers, and absence of published security policies or incident response contacts. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism detected. Overall, the site is functional but basic in design and technical implementation.

O

Obec Líšnice

obec-lisnice.cz

48

Obec Líšnice operates an official municipal website serving the local community of Líšnice in the Czech Republic. The site provides comprehensive information about the municipality, including news, official documents, event calendars, and contact details. It targets residents and visitors seeking local government services and updates. The website is built on a custom CMS platform by Galileo Corporation and uses modern web technologies such as jQuery, Bootstrap, and Swiper for UI components. Mobile optimization and accessibility features are well implemented, ensuring good user experience across devices. Security posture is moderate with HTTPS enforced and cookie consent mechanisms present, but lacks visible security headers and explicit incident response policies. WHOIS data is unavailable, which limits domain trust assessment, but the website content and structure indicate a legitimate government entity. Overall, the site is professional, trustworthy, and serves its intended audience effectively.

ZEMAN maso - uzeniny, a.s. operates a regional retail business specializing in fresh meat, traditional smoked meats, and delicacies sourced from their own production facility in Příbram, Czech Republic. The company targets general consumers seeking quality meat products through physical butcher shops and an online e-shop. Their market position is that of an established regional player with a focus on quality and tradition. Technically, the website employs modern web technologies including HTML5, CSS, JavaScript, Google Fonts, Google Tag Manager, Facebook Pixel, and Smartlook for analytics and user behavior tracking. The site is moderately optimized for mobile devices and SEO, with a good user experience and clear navigation. However, some accessibility and security header improvements are recommended. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and an explicit privacy policy page. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain trustworthiness, though the website content and business presence appear legitimate. Overall, the website scores well in content quality and business credibility but should improve privacy compliance and security best practices. Strategic recommendations include adding a privacy policy, enhancing security headers, and verifying domain registration details to strengthen trust and compliance.

Uzeniny Příbram, a.s. is a Czech meat processing company operating production plants in Příbram and Zábřeh na Moravě. The company focuses on pork and beef slaughtering and producing high-quality meat products such as hams and specialties with reduced sodium content. The website provides basic company and production information primarily targeting general consumers interested in their meat products. Technically, the website uses standard web technologies including Google Fonts, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is accessible, uses HTTPS, and implements a cookie consent mechanism, but lacks a privacy policy and security headers, which are important for compliance and security posture. No WHOIS data was found, which limits domain trust verification and reduces overall legitimacy confidence. The website does not expose any critical security vulnerabilities but could improve in privacy compliance and security best practices.

V

VIENNA-COMPONENTS-TRADING, s.r.o.

vicomtrade.cz

38

VIENNA-COMPONENTS-TRADING, s.r.o. is a Czech-based distributor specializing in electronic and electromechanical components for industrial automation, energy, telecommunications, medical, and transportation sectors. The company operates a professional WordPress-based website offering product catalogs, support, and contact information, targeting B2B customers in specialized industries. The website is well-structured, multilingual (Czech and English), and integrates an e-shop partner link for sales. Technically, the site uses modern web technologies including WordPress 6.8.3, jQuery, and Google Analytics, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks advanced security headers and public security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data is consistent with the business claims, indicating legitimacy and trustworthiness.

HANAGRAIN J. T. J. s.r.o. is a Czech-based agricultural commodity trading company specializing in the purchase, export, and import of various agricultural products including cereals, oilseeds, and protein components for feed production. Established in 1991, the company has built a trusted market position with long-term partnerships primarily in Germany, Austria, and Poland. Their business model emphasizes long-term forward contracts to provide price stability for clients. The website content is relevant and professional, targeting agricultural producers and commodity traders, but the digital presence is basic with limited SEO and mobile optimization.

M

MUDr. Blanka studýnková s.r.o.

mudrstudynkova.cz

45

MUDr. Blanka studýnková s.r.o. operates a local healthcare practice specializing in adult general medicine in Rakvice, Czech Republic. The website clearly communicates the business's services including preventive, diagnostic, and therapeutic care, as well as specific examinations for driver's and firearms licenses. The company targets adult patients in the local region and positions itself as a trusted healthcare provider with a professional online presence. Technically, the website is built on WordPress using common plugins and frameworks, delivering a good user experience with mobile responsiveness and clear navigation. Security posture is adequate with HTTPS enforced and a cookie consent mechanism in place, but lacks advanced security headers and a privacy policy page, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact details appear legitimate. Overall, the site is functional and professional but would benefit from enhanced security and compliance documentation.

E

Elektromontáže s.r.o.

elektromontazesro.cz

46

Elektromontáže s.r.o. is a Czech company specializing in professional electrical installations and energy infrastructure services, including public lighting, photovoltaic systems, charging stations for electric vehicles, and transformer stations. Established in 1999, the company positions itself as a reliable partner for municipalities, businesses, and developers, offering comprehensive project execution from study and design through to implementation and handover. The website reflects a medium-sized enterprise with a strong focus on quality, safety, and customer service. Technically, the site is built on WordPress with Elementor and Yoast SEO, providing a modern and responsive user experience. Security posture is good with HTTPS enforced, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is basic with a cookie consent mechanism but no visible privacy policy page. Overall, the website is professional and trustworthy, though the lack of WHOIS data and privacy policy slightly reduce trust scores.

The website zlin-katalog.cz serves as a regional business directory focused on the Zlín area within the Czech Republic. It provides categorized listings of companies and services, targeting local businesses and consumers seeking firm information. The site is part of a broader network under the parent domain cesko-katalog.cz, which manages multiple regional directories. The business model centers on online listings and advertising services for local firms. The website content is primarily in Czech and includes basic navigation and search functionalities. Privacy and terms of service pages are present, indicating some compliance with legal requirements. From a technical perspective, the site employs standard web technologies including jQuery, Google Analytics, and Facebook SDK for tracking and user engagement. The hosting and domain registration are consistent with a Czech-based business directory. The site uses HTTPS but lacks advanced security headers, which could be improved to enhance security posture. Performance and mobile optimization are basic but functional. Security-wise, the site shows no signs of blocking or WAF interference and does not expose sensitive data. However, the absence of cookie consent mechanisms and security headers suggests room for improvement in privacy compliance and security best practices. No incident response or vulnerability disclosure information is found, which is typical for this type of directory site. Overall, the website is a legitimate, small-scale regional business directory with moderate technical and security maturity. Strategic improvements in security headers, cookie consent, and privacy transparency would enhance trust and compliance.

The website katalog-vysocina.cz serves as a regional business directory for the Vysočina region in the Czech Republic, providing categorized listings of companies, services, shops, and institutions. It operates as part of the broader Česko-Katalog.cz network, which is evident from shared resources and linked domains. The site targets local businesses and consumers seeking company information and advertising opportunities within the region. The business model is primarily based on online directory listings and promotional services. The domain has been active since 2014, indicating an established presence in the regional market. Technically, the website uses common web technologies such as jQuery, Google Analytics for tracking, and Facebook SDK for social integration. The site appears to be custom-built or uses a proprietary CMS, with moderate performance and basic mobile optimization. SEO practices are basic but functional, with meta tags and structured navigation. However, accessibility features are minimal, and no advanced frameworks or platforms are detected. From a security perspective, the website uses HTTPS as implied by resource links, but no explicit security headers like Content-Security-Policy or HSTS are present. There is no visible cookie consent mechanism, and privacy compliance is basic but supported by linked privacy and terms pages on the parent domain. No direct contact information or incident response contacts are found on this domain, which may impact user trust and support responsiveness. Overall, the website is functional and serves its purpose as a regional business directory with moderate trustworthiness. Security posture and privacy compliance could be improved by implementing modern security headers, visible cookie consent, and clearer contact information. The site is safe for general audiences with no adult or questionable content detected.

Ústí-katalog.cz is a regional Czech business directory website focused on providing categorized listings of companies and services primarily in Ústí nad Labem and other Czech regions. It operates as part of the broader Česko-Katalog.cz network, which hosts multiple regional directories. The site offers search functionality and categorized navigation to help users find local businesses. The business model centers on advertising and promotional listings for companies within the Czech Republic. The website is relatively small in scale, founded in 2014, and targets both businesses and consumers seeking local company information. Technically, the site uses standard web technologies including jQuery, Google Analytics, and Facebook SDK for social integration and analytics. It is hosted likely by Forpsi (based on nameservers) and registered through REG-INTERNET-CZ. The site is served over HTTPS, but lacks advanced security headers and cookie consent mechanisms. Performance and mobile optimization are basic but functional. SEO is supported by meta tags and structured navigation. From a security perspective, the site has a moderate posture with HTTPS enabled and no visible sensitive data exposure. However, it lacks security headers such as Content-Security-Policy and anti-CSRF protections in forms. Privacy compliance is basic with a privacy policy and terms of service available on the parent domain, but no explicit cookie consent banner. No incident response or security policy information is found. Overall, the site is legitimate and consistent with its stated purpose as a regional business directory. It poses low risk, contains no adult or questionable content, and has a moderate AI score reflecting good business credibility but room for improvement in technical and security aspects.

The website teplice-katalog.cz serves as a regional business directory focused on companies and services in Teplice, Czech Republic. It provides categorized listings of local firms across multiple sectors, targeting local businesses and consumers seeking services in the region. The site is part of a larger network operated by Česko-Katalog.cz, which acts as the parent platform for multiple regional directories. The business model centers on online listings and advertising services for local companies. Technically, the website uses common web technologies such as jQuery, Google Analytics, and Facebook SDK for tracking and social integration. The site appears to be custom-built or uses a proprietary CMS, with moderate performance and basic mobile optimization. SEO and accessibility features are present but basic. The domain is registered since 2014, consistent with the business's operational timeline. From a security perspective, the site uses HTTPS but lacks advanced security headers like CSP or HSTS. No explicit security or incident response policies are published, and no vulnerability disclosure mechanisms are evident. Privacy compliance is partially addressed with a GDPR privacy page, but no cookie consent mechanism is implemented. Tracking via Google Analytics and Facebook is present, indicating moderate user tracking. Overall, the website is functional and serves its purpose as a local business directory but would benefit from enhanced security practices, improved privacy compliance, and more transparent contact information to increase trustworthiness and compliance with modern standards.

Tábor-katalog.cz is a Czech regional business directory website focused on providing categorized listings of companies and services primarily in the Tábor region and broader Czech Republic. The site is part of the larger Česko-Katalog.cz network, which operates multiple regional directories. The business model centers on offering searchable company listings and promotional services to local businesses. The website content is primarily in Czech and targets both businesses and consumers seeking local company information. The domain was registered in 2014, consistent with the site's maturity and market presence. Technically, the website uses common web technologies such as jQuery, Google Analytics, and Facebook SDK for tracking and social integration. The site loads multiple external CSS and JS resources from trusted domains. Mobile optimization and accessibility are basic but functional. SEO practices are present but minimal, with meta tags and structured navigation. Hosting and DNS are managed by Czech providers consistent with the regional focus. From a security perspective, the site uses HTTPS for external resources, but explicit security headers like Content-Security-Policy or HSTS are not detected. No direct vulnerabilities or exposed sensitive data were found in the provided content. Privacy compliance is partially addressed with a privacy policy and terms of service pages, but no cookie consent mechanism is evident. Contact information is minimal, with no direct emails or phone numbers found on the main page, which may impact user trust. Overall, Tábor-katalog.cz is a legitimate, regionally focused business directory with basic technical and security implementations. Improvements in security headers, privacy consent mechanisms, and clearer contact information would enhance trust and compliance. The site is safe for general audiences and does not contain adult or explicit content.

Prostejov-katalog.cz is a Czech regional business directory focused on listing companies and services in Prostějov and surrounding areas. It operates under the parent brand Česko-Katalog.cz, which manages multiple regional directories across the Czech Republic. The website provides categorized listings of local businesses, targeting both consumers and businesses seeking local service providers. The business model centers on online directory services and advertising opportunities for local companies. The site is primarily in Czech and serves a small to medium-sized market segment within the Czech Republic. Technically, the website uses common web technologies such as jQuery, Google Analytics, and Facebook SDK for social integration and tracking. The site appears to be custom-built or uses a proprietary CMS, with moderate performance and basic mobile optimization. SEO and accessibility features are present but basic. The domain is registered with a Czech registrar since 2014, consistent with the website's regional focus and business longevity. From a security perspective, the site uses HTTPS and includes Google site verification, but lacks advanced security headers like Content-Security-Policy or HSTS. No explicit security or incident response policies are published, and no vulnerability disclosure or security.txt files are found. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. No direct company contact emails or phone numbers are visible on the main page, which may impact user trust and support accessibility. Overall, the website is functional and serves its purpose as a regional business directory with moderate professionalism and trustworthiness. Security and privacy practices could be improved to enhance compliance and user confidence. The site content is safe for general audiences with no adult or explicit material detected.

The website prerov-katalog.cz operates as a regional business directory focused on the Přerov area within the Czech Republic. It provides categorized listings of local companies and services, targeting local businesses and consumers seeking firm information. The platform is part of the broader Česko-Katalog.cz network, which manages multiple regional directories. The business model centers on online advertising and directory listings, serving as a local marketplace for business visibility. Technically, the site uses standard web technologies including jQuery, Google Analytics, and Facebook SDK for social integration and analytics. The site is served over HTTPS, but lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in security and privacy compliance. The design and content quality are basic but functional, with moderate mobile optimization and clear navigation. From a security perspective, the site shows moderate maturity with HTTPS enabled but missing key security headers such as Content-Security-Policy and HSTS. No explicit incident response or vulnerability disclosure information is provided. Privacy compliance is partial, with a privacy policy present but no cookie consent banner. No sensitive data exposure or vulnerabilities were detected in the HTML content. Overall, the site is a legitimate, small-scale regional business directory with basic technical and security implementations. Strategic improvements in security headers, privacy compliance, and contact transparency would enhance trust and compliance posture.

Praha-katalog.cz is an online business directory focused on companies and services in Prague and the broader Czech Republic. It operates as a regional catalog offering categorized listings across multiple sectors, targeting both businesses and consumers seeking company information. The site is part of the broader Česko-Katalog.cz network, which manages multiple city-specific directories. The business model centers on providing searchable company listings and promotional services for firms within the region. Technically, the website uses a custom or unknown CMS with a technology stack including jQuery, Google Analytics, and Facebook SDK for analytics and social media integration. The site is served over HTTPS and includes multiple CSS stylesheets for layout and design. Performance is moderate with basic mobile optimization and accessibility features. SEO optimization is basic but includes meta tags and structured navigation. From a security perspective, the site benefits from HTTPS but lacks advanced security headers such as Content-Security-Policy or X-Frame-Options. No explicit incident response or security policies are visible, and no cookie consent mechanism is implemented despite GDPR relevance. The site uses third-party scripts asynchronously, reducing some risk, but could improve security posture by adding headers and explicit policies. Overall, the website is functional and moderately professional but could benefit from enhanced security practices, improved privacy compliance, and more visible contact information. The risk level is moderate with no critical vulnerabilities detected, but improvements in security and compliance would strengthen trust and reduce potential risks.

Plzen-katalog.cz is a Czech regional business directory focused on providing categorized listings of companies and services primarily in Plzeň and other Czech cities. The platform operates under the parent brand Česko-Katalog.cz, established in 2014, and offers users a searchable catalog of firms across diverse sectors such as real estate, transportation, retail, and government. The website targets both businesses seeking visibility and consumers searching for local services. Technically, the site uses a custom-built platform with common web technologies including jQuery, Google Analytics, and Facebook SDK for tracking and social integration. The design and navigation are basic but functional, with moderate mobile optimization and SEO features.

The website pardubice-katalog.cz serves as a regional business directory focused on companies and services in Pardubice and the broader Czech Republic. It provides categorized listings across various sectors, facilitating users to find local businesses easily. The site is part of a larger network under the parent domain cesko-katalog.cz, which operates multiple regional directories. The business model centers on online listings and advertising services targeted at local businesses and consumers. Technically, the site employs common web technologies such as jQuery, Google Analytics, and Facebook SDK for tracking and social integration. The platform appears to be custom-built, with moderate performance and basic mobile optimization. SEO and accessibility features are present but could be improved for better user experience and reach. From a security perspective, the site uses HTTPS, ensuring encrypted communications. However, it lacks advanced security headers and explicit incident response or vulnerability disclosure policies. Privacy compliance is partially addressed with a privacy policy and terms of service available on the parent domain, but no cookie consent mechanism is present, which is a GDPR compliance gap. Overall, the website is functional and serves its purpose as a business directory with moderate trustworthiness. Strategic improvements in security headers, privacy compliance, and mobile optimization would enhance its security posture and user trust.

The website ostrava-katalog.cz serves as a regional business directory focused on companies and services in Ostrava, Czech Republic. It is part of a larger network of regional directories under the Česko-Katalog.cz brand, established since 2014. The platform offers categorized listings of firms across various sectors, targeting both businesses and consumers seeking local company information. The business model centers on providing an online searchable catalog with advertising and promotional services. Technically, the site uses a custom or unknown CMS with a technology stack including jQuery, Google Analytics, and Facebook SDK for tracking and user interaction. The site shows basic mobile optimization and SEO practices but lacks advanced accessibility features. Security posture is moderate with HTTPS usage implied but no visible security headers or explicit security policies. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism. Overall, the site is functional but could benefit from enhanced security and privacy features.

The website opava-katalog.cz serves as a regional business directory for Opava and surrounding areas in the Czech Republic, providing categorized listings of local companies and services. It operates under the parent brand Česko-Katalog.cz, which manages multiple regional directories. The platform targets local businesses and consumers seeking company information and advertising opportunities. The business model is primarily based on online directory listings and promotional services. The website is relatively small in scale, founded in 2014, and maintains a moderate market position within the Czech regional directory space. Technically, the site uses standard web technologies such as jQuery, Google Analytics, and Facebook SDK for tracking and social integration. It employs HTTPS for secure communication but lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance. The site’s design and content quality are basic, with moderate mobile optimization and SEO practices. Navigation is straightforward but could benefit from enhanced user experience improvements. From a security perspective, the website has a good SSL configuration but misses key security headers like Content-Security-Policy and X-Frame-Options. No incident response or vulnerability disclosure policies are present, and no direct contact information is provided on the main site, which may impact user trust. The site does not appear to be blocked by any WAF or security challenge, and no adult or explicit content is detected, making it safe for general audiences. Overall, the website is functional and legitimate but would benefit from improvements in privacy compliance, security posture, and user engagement features to enhance trust and professionalism.

Olomouc-katalog.cz is a regional online business directory focused on listing companies and tradesmen in the Olomouc region and broader Czech Republic. It operates as part of the larger Česko-Katalog.cz network, providing categorized business listings to facilitate consumer and business searches. The website targets local businesses and consumers seeking company information, offering a structured catalog of firms across various sectors. The business model centers on online directory services and advertising opportunities for listed companies. The site has been operational since at least 2014, indicating a stable presence in the regional market. Technically, the website employs a custom or unknown CMS with a technology stack including jQuery, Google Analytics, and Facebook SDK for tracking and social integration. The site uses HTTPS, ensuring encrypted communication, but lacks advanced security headers such as Content-Security-Policy or HSTS, which could enhance security posture. Performance and mobile optimization are basic, with room for improvement in accessibility and SEO practices. The site includes meta tags but lacks structured data markup. From a security perspective, the site demonstrates basic best practices such as HTTPS and no visible exposure of sensitive data. However, the absence of security headers and cookie consent mechanisms indicates gaps in compliance and security hardening. No incident response or security policy information is provided, and no vulnerability disclosure or security.txt files are found. The WHOIS data is consistent with the website's regional focus and business model, supporting legitimacy. Overall, the website is functional and moderately secure but would benefit from enhanced security measures, improved privacy compliance, and richer technical implementation to increase trust and user experience. Strategic recommendations include implementing security headers, adding cookie consent, improving contact transparency, and enhancing SEO and accessibility features.

Most-katalog.cz is a regional online business directory focused on companies and services in the Most region of the Czech Republic. It operates as part of the larger Česko-Katalog.cz network, providing categorized listings and search functionality for businesses. The website targets both consumers and businesses seeking local company information and advertising opportunities. Technically, the site uses common web technologies such as jQuery, Google Analytics, and Facebook SDK, hosted likely via Czech providers consistent with its regional focus. The site is accessible via HTTPS and includes basic SEO and navigation features, though mobile optimization and accessibility are basic. Security posture is moderate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. Privacy and terms of service pages are present, indicating some compliance with GDPR, but no explicit incident response or vulnerability disclosure information is found. Overall, the site is legitimate, stable, and safe for general audiences, but could improve in security and privacy compliance.

Morava-katalog.cz is an online regional business directory focused on the Morava region within the Czech Republic. It operates as part of the broader Česko-Katalog.cz network, providing categorized listings of companies across multiple sectors such as automotive, construction, travel, e-commerce, finance, and services. The platform targets both businesses seeking visibility and consumers searching for local company information. The business model centers on offering searchable company listings and promotional services within a regional niche market. The website was established in 2014 and maintains a small-scale operation with moderate content quality and branding consistency. Technically, the website employs a custom or unknown CMS with a technology stack including jQuery, Google Analytics, and Facebook SDK for tracking and social media integration. The site uses HTTPS and Google site verification, indicating basic security hygiene. Performance and mobile optimization are moderate to basic, with room for improvement in accessibility and SEO. The site lacks modern security headers and a cookie consent mechanism, which are important for compliance and security. From a security perspective, the site demonstrates a basic security posture with HTTPS enabled and no visible exposed sensitive data. However, the absence of security headers such as Content-Security-Policy and HSTS reduces its defense-in-depth. There is no published security policy or incident response contact information, and no vulnerability disclosure or security.txt file is present. Privacy compliance is partial, with a privacy policy and terms of service available but no cookie consent banner detected. Overall, the website is functional and legitimate with a moderate trust level. Strategic improvements in security headers, privacy compliance, and contact transparency would enhance its security posture and user trust. The domain registration data aligns well with the website's business age and content, supporting its legitimacy.

The website 'České Budějovice - katalog firem' serves as a regional online business directory focused on companies and services in České Budějovice and the broader Czech Republic. It is part of a network of similar directories under the parent brand Česko-Katalog.cz, established in 2014. The platform offers categorized listings and search functionality to help users find local businesses across various sectors. The site targets both consumers and businesses seeking local company information and advertising opportunities. Technically, the website employs standard web technologies such as jQuery, Google Analytics, and Facebook SDK for tracking and social integration. It uses HTTPS for secure communication but lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance. The site shows basic mobile optimization and accessibility features but could benefit from modernization and enhanced performance tuning. From a security perspective, the site demonstrates a moderate posture with no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement. The lack of cookie consent and limited privacy compliance features are notable gaps given the GDPR requirements. Overall, the website is functional and moderately professional but would benefit from enhanced security practices, improved privacy compliance, and better contact transparency to increase trustworthiness and user confidence.

W

Winncare

winncare.pt

30

Winncare's website is currently in maintenance mode, displaying a placeholder page with minimal content and no direct business or contact information. The company appears to operate in Portugal with a Spanish site variant, suggesting a regional presence. The website is built on WordPress using a maintenance plugin and includes basic frontend technologies such as jQuery. However, the site lacks visible privacy, cookie, or terms of service policies, and no contact details are provided, limiting user engagement and trust. Technically, the site uses HTTPS URLs and standard WordPress scripts but does not expose advanced security headers or analytics tools. The maintenance mode limits content quality and user experience, resulting in a basic mobile optimization and poor SEO readiness. No signs of tracking or advertising technologies were detected, indicating minimal data collection and user tracking. From a security perspective, the site shows no immediate vulnerabilities but lacks visible security best practices such as security headers and incident response information. The absence of privacy and cookie policies also indicates potential compliance gaps with GDPR and related regulations. The domain's WHOIS data was not provided, restricting detailed legitimacy analysis, but no suspicious indicators were found in the accessible content. Overall, the site currently presents a low-risk profile due to limited exposure but requires significant improvements in content, compliance, and security posture to support business credibility and user trust once fully operational.

G

Groupe WINNCARE

winncare.it

47

Groupe WINNCARE is a specialized manufacturer and distributor of medical devices, focusing on hospital beds, therapeutic mattresses, patient lifting equipment, and care facility furniture. The company holds a strong position in the European healthcare equipment market, serving care providers and individuals with reduced autonomy. Their website is multilingual and professionally designed, reflecting a medium-sized enterprise with a clear business model centered on quality medical products and services. Technically, the site employs modern web technologies including jQuery, Bootstrap, and advanced sliders, with integrated analytics tools such as Matomo, Google Analytics, and Hotjar, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit published security policies or incident response contacts, suggesting room for improvement in transparency and security governance. Overall, the website is trustworthy, compliant with GDPR, and provides a positive user experience with good content quality and navigation.

W

Winncare

winncare.dk

47

Winncare is a Denmark-based healthcare company specializing in the design and manufacture of innovative medical and rehabilitation products aimed at improving the lives of dependent individuals and their caregivers. The company offers a broad portfolio including medical beds, pressure relief mattresses, lifting aids, fall management solutions, and hygiene products. The website demonstrates a professional and consistent brand presence with multilingual support, indicating a strong European market position. Technically, the site is built on WordPress with modern plugins and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is solid with HTTPS enforced, though there is room for improvement in security headers and explicit privacy compliance documentation. The absence of WHOIS data limits domain trust verification, but the website content and structure suggest legitimacy. Overall, Winncare presents as a credible medium-sized healthcare provider with a focus on quality and innovation.

G

Groupe Winncare

winncare.fr

37

Groupe Winncare is a French healthcare equipment manufacturer specializing in medical beds, therapeutic mattresses and cushions, patient lifting systems, and furniture for care facilities. With over 40 years of experience, the company targets persons with loss of autonomy, caregivers, and healthcare institutions across Europe. The website demonstrates a professional digital presence with multilingual support and multiple service platforms such as Winncare Academy and EasyDiag. Technically, the site is built on WordPress with modern plugins and SEO optimization, offering good mobile responsiveness and user experience. Security posture is adequate with HTTPS enforced but lacks explicit security headers and privacy policies. WHOIS data is unavailable, which slightly reduces trustworthiness. Overall, the site is credible and well-positioned in the healthcare sector but would benefit from enhanced privacy compliance and security transparency.

O

Obecní úřad Číhaň

cihan.cz

48

The website www.cihan.cz/cihan/ serves as the official online presence of the municipality of Číhaň in the Czech Republic. It provides comprehensive information about the local government office, community associations, tourism, and practical information for residents and visitors. The site targets local citizens and tourists, offering updates, official documents, and contact details. Technically, the site uses common web technologies such as jQuery, Google Analytics, and Font Awesome, with a moderate performance and good mobile optimization. Security-wise, the site lacks visible HTTP security headers and explicit security policies but implements a cookie consent mechanism compliant with GDPR principles. The absence of WHOIS data limits domain trust assessment, but the site content and contact information appear legitimate for a small municipal government entity.

O

Obec Hlavňovice

hlavnovice.cz

46

Obec Hlavňovice operates as a local municipal government entity in the Czech Republic, providing official information and services to residents and tourists. The website serves as a portal for administrative details, public notices, and community resources, positioning itself as a trusted local authority. The business model focuses on public service and community engagement rather than commercial activities. Technically, the site employs standard web technologies such as jQuery, Google Analytics, and Fancybox, with a moderate performance profile and good mobile optimization. However, the absence of WHOIS data and lack of advanced security headers indicate areas for improvement in digital maturity and security posture. The site implements a cookie consent mechanism aligned with privacy best practices but lacks a dedicated privacy policy page and incident response information. Overall, the website is functional and trustworthy for its intended audience but would benefit from enhanced security and compliance transparency.

C

ESG reporting firem | CRIF-ESG.cz

crif-esg.cz

41

The website www.crif-esg.cz presents itself as a provider of ESG reporting and certification tools targeted at companies required to report on environmental, social, and governance activities. The content is professionally presented in Czech language, focusing on simplifying ESG reporting processes and offering competitive advantages to businesses. The technical infrastructure is based on WordPress with the Divi theme, incorporating modern analytics and tracking tools such as Google Analytics, Microsoft Clarity, and LinkedIn Insight Tag. The site demonstrates moderate digital maturity with good SEO and mobile optimization but lacks some accessibility features and explicit security policies. Security posture is moderate; HTTPS is implied but no security headers or incident response contacts are visible. The absence of WHOIS data is a significant concern, reducing domain trustworthiness and legitimacy. Overall, the site is functional and business-focused but would benefit from enhanced transparency and security measures.

C

CRIF - Czech Credit Bureau

mcribis.cz

49

CRIF - Czech Credit Bureau operates the Cribis.cz platform, providing comprehensive credit and risk information services primarily for businesses in the Czech and Slovak Republics. The platform offers tools for screening companies and individuals, including credit reports, relationship diagrams, monitoring services, and AML compliance checks. The company positions itself as a trusted partner for businesses seeking to mitigate risks associated with unreliable partners. Technically, the website is built on WordPress with modern technologies such as React and integrates multiple analytics and marketing tools, including Google Analytics and Microsoft Clarity. The site demonstrates good privacy compliance with a detailed cookie consent mechanism and a comprehensive privacy policy. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some HTTP security headers are not confirmed. The absence of WHOIS data is a notable gap, reducing domain registration trustworthiness, but the website content and business information appear professional and credible overall.

P

Pixelfield

pixelfield.cz

48

Pixelfield is a Czech Republic-based digital agency specializing in the development and design of mobile and web applications, virtual and augmented reality solutions, games, and custom software. Established in 2012, the company serves a diverse clientele including startups and established businesses, positioning itself as a reliable partner for digital product innovation. The website reflects a professional and consistent brand image with clear navigation and multilingual support. Technically, the site employs modern tracking and analytics tools such as Google Analytics, Hotjar, and Oribi, and is hosted on cesky-hosting.eu with HTTPS enabled, ensuring secure communications. However, the absence of explicit privacy and cookie policies, security headers, and vulnerability disclosures indicates areas for compliance and security improvement. Overall, Pixelfield demonstrates a solid digital presence with room to enhance privacy compliance and security posture.

P

Pixel Design s.r.o.

pixeldesign.cz

43

Pixel Design s.r.o. is a Czech-based creative web and graphic design studio specializing in custom website development, e-commerce solutions, internet marketing, and graphic design services. The company targets businesses and individuals primarily in the Pardubice, Hradec Králové, and Prague regions. Their website demonstrates a professional and modern digital presence with comprehensive service offerings and client references. Technically, the site uses modern web technologies including Google reCAPTCHA v3, Microsoft Clarity, and Google Tag Manager, and appears to be built on Fork CMS. Security posture is good with HTTPS enforced and spam protection on forms, though security headers are not evident and could be improved. Privacy compliance is strong with a clear cookie consent mechanism and a detailed privacy policy in Czech. The absence of WHOIS data limits domain registration trust assessment, but the business presence and content quality support legitimacy. Overall, the website is well-designed, user-friendly, and compliant with privacy regulations, making it a trustworthy digital asset for the company.

Nakladatelství TRITON operates an established Czech-language e-commerce platform specializing in the sale of books across various categories including medicine, science fiction, fantasy, and general literature. The website presents a clear business model focused on direct online sales to Czech and Slovak readers, with a niche market positioning as a specialized publisher. The platform is built on the Zoner InShop system and utilizes legacy JavaScript libraries alongside modern web fonts and carousel plugins. While the site is functional and professionally designed with good navigation and content relevance, some technical debt is evident in the use of outdated libraries that may pose security risks. Security posture is moderate, with HTTPS enforced and cookie consent implemented, but lacking advanced security headers and explicit security policies. Contact information is primarily via a contact form, with no direct emails or phone numbers publicly listed. Overall, the website is legitimate and trustworthy, with a domain age consistent with the business history. Strategic improvements in security and privacy compliance would enhance the platform's resilience and user trust.

S

Svaz knihovníků a informačních pracovníků České republiky (SKIP)

tydenknihoven.cz

42

The website www.tydenknihoven.cz represents the Týden knihoven 2025 event, a longstanding annual campaign organized by the Czech library association SKIP. It promotes library services and events across the Czech Republic, targeting libraries and the general public. The site provides event registration, program search, and educational webinars, reflecting a focused non-profit mission with a strong national presence. Technically, the site is built on WordPress with common web technologies like jQuery and Leaflet for maps, delivering a moderate performance and good mobile responsiveness. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and updated libraries are recommended. Privacy compliance is lacking due to missing privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy and professionally maintained, supporting a reputable non-profit cause.

M

MEDIATE s.r.o.

cajeapotheke.cz

40

MEDIATE s.r.o. is a Czech family-owned company founded in 1996 specializing in the manufacture and supply of herbal teas, syrups, and dietary supplements primarily for pharmacies and healthy nutrition stores. The company maintains a strong market position in the Czech Republic and exports products internationally through exclusive partners. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics, hosted likely by WEDOS, a Czech provider. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though explicit security policies and incident response contacts are not found. The domain is very recently registered, which is a minor discrepancy given the company's long history but does not indicate illegitimacy. Overall, the site is trustworthy and well-maintained.

SOFICO-CZ, a. s. is a Czech software company specializing in creating internet shops, ordering applications, and comprehensive information systems primarily for business clients. The company positions itself as a trusted provider to successful firms, supported by ISO 9001 and ISO/IEC 27001 certifications, indicating a strong commitment to quality and information security. Their website reflects a professional and consistent brand image targeting B2B customers seeking tailored internet projects. Technically, the website employs a moderately modern technology stack including jQuery, Google reCAPTCHA v3, Google Analytics, and Facebook Pixel, with good mobile optimization and SEO practices. However, some technologies like jQuery are outdated, and explicit security headers are missing, which could be improved. The site uses HTTPS exclusively and implements cookie consent mechanisms, demonstrating good privacy compliance. From a security perspective, the site benefits from ISO certifications and secure form handling with reCAPTCHA, but lacks visible security headers and a published incident response or vulnerability disclosure policy. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for this business type. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, secure, and compliant with privacy regulations, with minor technical improvements recommended. The risk level is low, and the company appears credible and trustworthy based on available data.

C

Covitar s. r. o.

covitar-velkoobchod.cz

49

Covitar s. r. o. operates a Czech-based wholesale and retail e-commerce platform specializing in dried fruits, vegetables, nuts, and other ingredients for healthy nutrition. The company supplies both organic (Bio) and non-organic products and has expanded retail distribution under the brand "Fruits du Paradis." The website targets wholesale buyers and retail customers interested in health food ingredients, positioning itself as a niche supplier in the Czech market. Technically, the website is built on the Shoptet e-commerce platform, leveraging jQuery and integrating Google Analytics and Facebook SDK for marketing and analytics purposes. The site is mobile-optimized with good navigation and content relevance. Security-wise, the site enforces HTTPS, uses standard security headers, and implements CSRF protection on forms, though it uses an outdated jQuery version which could pose risks. Privacy and cookie policies are present and GDPR compliant, enhancing trust. However, the absence of WHOIS registration data reduces domain trustworthiness and warrants further verification. Overall, the site presents a professional and secure e-commerce presence with moderate technical maturity.

A

Alpiro s.r.o.

alpirossl.cz

47

Alpiro s.r.o. operates the website alpirossl.cz, offering a range of SSL certificates including domain validated, organization validated, extended validation, and S/MIME email signing certificates. The company targets businesses and website owners seeking affordable and reliable SSL solutions, emphasizing fast issuance and support for modern encryption standards. The website presents a professional and consistent brand image with clear navigation and good mobile optimization. Technically, the site uses standard web technologies such as jQuery, Google Analytics, and Google Tag Manager for tracking. The site is moderately performant and mobile-friendly but lacks advanced accessibility features and comprehensive SEO optimizations. No CMS or hosting provider information is discernible from the content. From a security perspective, the site enforces HTTPS and uses secure forms but lacks visible security headers and explicit privacy or cookie policies, which are compliance gaps. The absence of WHOIS data for the domain is a significant concern, reducing trust in domain legitimacy. No direct contact emails or phone numbers are provided, only a contact form. Overall, the security posture is moderate but could be improved with better transparency and compliance documentation. The overall risk is moderate with recommendations to implement privacy and cookie policies, add security headers, and clarify domain registration details to enhance trust and compliance.

H

Hotel České Žleby

hotelceskezleby.cz

36

Hotel České Žleby is a family-run hotel located in the Šumava region of the Czech Republic, offering comfortable accommodation and quality dining experiences. The website presents a professional and consistent brand image targeting general audiences interested in hospitality services in this region. The business appears to be small-sized and established since 2013, with a clear focus on local tourism and hospitality. Technically, the website is built on WordPress with common plugins such as WPBakery Page Builder, Google Tag Manager, and Cookiebot for cookie consent management. The site is hosted by REG-WEDOS, a known hosting provider, and uses HTTPS with good SSL configuration. Security posture is adequate but could be improved by adding security headers and explicit security policies. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service on the homepage. Overall, the website is safe, professional, and trustworthy with no signs of malicious or adult content.

Penzion Fiala is a small hospitality business located in Kubova Huť, Czech Republic, offering affordable accommodation in the Šumava region. The website provides detailed information about the lodging options, amenities such as sauna and parking, and nearby tourist attractions. The business targets general tourists seeking relaxation and outdoor activities in the region. The domain is well-established since 2011, consistent with the business age. Technically, the website uses common JavaScript libraries including jQuery, Flexslider, and Fancybox, with Google Fonts and Font Awesome for styling. Hosting is provided by ŠumavaNet.CZ. The site is moderately optimized for mobile and SEO, with a clear navigation structure and good content quality. However, it lacks a CMS indication and advanced accessibility features. From a security perspective, HTTPS usage is implied but not explicitly confirmed in the HTML content. No security headers such as CSP or HSTS are detected, and there is no privacy or cookie policy present, indicating compliance gaps with GDPR. The site uses Google Analytics and Google Tag Manager for tracking, with moderate user tracking levels but no cookie consent mechanism. Overall, the website is functional and professional for a small hospitality business but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

C

Chata Šumava

chatasumava.cz

45

Chata Šumava is a small hospitality business offering accommodation in the Šumava region of the Czech Republic, specifically in Hojsova Stráž near Železná Ruda. The website presents family-friendly lodging options with amenities such as garden space, children's corner, and parking. It targets general tourists and families seeking affordable stays in a scenic mountain area. The business leverages local partnerships and maintains a presence on social media and review platforms like Hotel.cz, which awards it a quality certificate. Technically, the website uses a traditional web stack with jQuery, Flexslider, Fancybox, and Google Fonts. It integrates Google Analytics, Google Tag Manager, and Facebook SDK for tracking and marketing purposes. The site is moderately optimized for mobile and SEO, with a clear navigation structure and professional design. Hosting appears to be provided by a local Czech provider, ŠumavaNet.CZ. From a security perspective, the site uses HTTPS for external resources but lacks explicit security headers and cookie consent mechanisms, which are important for GDPR compliance. The contact form includes validation, and no sensitive data is exposed in the HTML. However, the absence of WHOIS data for the domain reduces trust and raises questions about domain registration legitimacy. Overall, the website is functional and professional for a small hospitality business but would benefit from improved security practices, explicit cookie consent, and transparency in domain registration to enhance trust and compliance.

Z

Zemědělská akciová společnost Koloveč

zaskolovec.cz

48

Zemědělská akciová společnost Koloveč is a medium-sized regional agricultural company based in the Czech Republic, specializing in agricultural production and manufacturing, including the production and sale of traffic signs. The company operates an e-shop for traffic signs and provides additional services such as machinery sales, road transport, earthworks, and maintenance. The website reflects a professional and consistent brand image with clear contact information and a social media presence on Facebook. Technically, the site uses modern JavaScript libraries and includes cookie consent mechanisms, indicating a moderate level of digital maturity. However, the absence of a privacy policy and visible security headers suggests areas for compliance and security improvement. The WHOIS data is not publicly available, likely due to privacy protection, but the website content and contact details support the legitimacy of the business. Overall, the site is well-structured, mobile-optimized, and provides relevant content for its target audience.

R

Retailys.com s.r.o.

retailys.cz

39

Retailys.com s.r.o. operates the website retailys.cz, providing a SaaS platform for managing multiple e-commerce stores across different languages and currencies, with integration to major global marketplaces such as Amazon and eBay. The company targets online retailers seeking to expand internationally, offering tools for marketing automation and order consolidation. The website is professionally designed, SEO optimized, and includes comprehensive privacy and cookie policies compliant with GDPR. Technically, the site is built on WordPress with modern plugins and tracking technologies, including Google Analytics, Facebook Pixel, and Zoho SalesIQ. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the website content and structure indicate a legitimate business. Contact is primarily via web forms and a contact page, with no direct emails or phone numbers publicly listed.

S

Sdružení historie hasičstva Stachy

muzeumstachy.cz

44

The website www.muzeumstachy.cz represents the Pošumavské hasičské muzeum Stachy, a small regional museum dedicated to the history of firefighting in the Pošumaví region of the Czech Republic. Operated by the Sdružení historie hasičstva Stachy, the site provides information about the museum's exhibitions, including a notable exhibit on fire cause investigation supported by the Jihočeský kraj. The museum targets general visitors interested in cultural heritage and firefighting history. The business model is non-profit and educational, focusing on local community engagement and historical preservation. Technically, the website is built on the Webnode CMS platform and leverages modern web technologies including HTML5, CSS3, JavaScript, and external services such as Facebook SDK and Google Tag Manager. Hosting is provided via Amazon Cloudfront CDN, ensuring moderate performance and good mobile optimization. SEO and accessibility are basic but functional. The site lacks advanced security headers but enforces HTTPS, contributing to a reasonable security posture. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, as well as missing WHOIS domain registration data, reduces overall trust and compliance posture. The lack of contact emails and phone numbers on the homepage limits direct communication channels. The site uses tracking scripts from Google and Facebook, but no explicit consent mechanisms or GDPR compliance indicators are present. Overall, the website is a legitimate cultural institution's online presence with good content quality and technical implementation but requires improvements in privacy compliance, security headers, and transparency of domain registration to enhance trustworthiness and regulatory adherence.

Dobrovolný svazek obcí Ostružná is a voluntary association of municipalities in the Czech Republic, serving as a cooperative body for local government entities including Velhartice, Kolinec, Mokrosuky, Chlistov, Hlavňovice, and Číhaň. The website provides basic information about the association, its member municipalities, and contact details. The site is modest in design and functionality, focusing on informational content rather than interactive features. Technically, the site uses legacy JavaScript libraries such as jQuery and includes Google Analytics for visitor tracking, but lacks modern security features such as HTTPS enforcement and security headers. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. The WHOIS data for the domain is unavailable, which limits the ability to verify domain registration legitimacy and age. Overall, the site serves its purpose as a local government information portal but requires improvements in security, privacy compliance, and technical modernization.

I

Institute of Agricultural Economics and Information

iaei.cz

47

The Institute of Agricultural Economics and Information (IAEI) is a Czech research institution specializing in applied research on agricultural economics, markets, environmental impact, and rural development. It functions as an expert center providing consultancy, education, certification, and knowledge transfer services to agricultural professionals, policymakers, and educators. The website reflects a well-established organization with a domain registered since 2009 and a clear focus on agriculture and related sectors. Technically, the website is built on Drupal 10 with modern libraries such as Bootstrap and jQuery, supporting responsive design and moderate performance. The infrastructure appears stable and professionally maintained, hosted likely by Active24, a known Czech hosting provider. The site integrates Google Analytics via Google Tag Manager for user tracking but lacks visible privacy and cookie policies, which is a compliance gap. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks security headers and formal security or incident response policies. No forms are present on the homepage, reducing immediate data collection risks. The overall security posture is moderate but could be improved by adding security headers and formal policies. Overall, the website is professional, trustworthy, and serves its target audience well. Strategic improvements in privacy compliance and security best practices would enhance its risk profile and user trust.