High-risk security reports

F

FlexiSystems s.r.o.

flexiedu.cz

40

FlexiSystems s.r.o. operates the elearning.flexiedu.cz website, providing modern e-learning solutions tailored for corporate clients and organizations. The company specializes in developing custom e-learning courses, managing online education, and offering mobile e-learning platforms. Their market position is that of an established Czech provider with a clear focus on education technology. The website reflects a professional and consistent brand image with a good quality of content and user experience. Technically, the site is built on ASP.NET Web Forms with common libraries such as jQuery and Slick Carousel for UI components. The site is moderately optimized for performance and mobile devices, with good SEO practices evident in meta tags and structured navigation. However, accessibility features are basic and could be improved. Analytics are implemented via Google Tag Manager, indicating moderate user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No WHOIS data was retrievable, which slightly reduces domain trustworthiness, though the website content and contact information support legitimacy. There are no visible vulnerabilities or exposed sensitive data, but improvements in security headers and compliance documentation are recommended. Overall, the site presents a low-risk profile with solid business credibility but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

F

FlexiSystems s.r.o.

flexisystems.cz

42

FlexiSystems s.r.o. is a Czech-based technology company specializing in delivering modern e-learning solutions, custom web projects, and tailored design services. Their offerings include a proprietary e-learning platform (FlexiEdu), web development services with CMS and mobile app integration (FlexiSite), and an online platform for course purchase and delivery (FlexiPortal). The company targets businesses and organizations seeking digital education and web solutions, positioning itself as a specialized regional provider with a professional online presence. Technically, the website is built on ASP.NET Web Forms with modern JavaScript libraries such as jQuery and Slick Carousel, and integrates Google Tag Manager for analytics. The site is mobile-optimized with good navigation and content quality, though accessibility features are basic. Security best practices are partially implemented; HTTPS is presumed but security headers are missing, and no explicit privacy or cookie policies are present. From a security perspective, the site shows no immediate vulnerabilities in the visible content, but the absence of WHOIS data and security policies reduces trustworthiness. The company provides clear contact information and client references, enhancing credibility. However, improvements are needed in privacy compliance, security headers, and incident response readiness. Overall, the website is professional and functional with moderate technical maturity and a solid business focus. Strategic enhancements in security and privacy policies would strengthen trust and compliance, supporting sustainable growth and risk mitigation.

S

SHOPEX

shopex.cz

49

Shopex.cz is an established Czech marketplace platform founded in 2007, offering a wide range of products including home goods, hobby items, children's products, pet supplies, and event tickets for fairs held at PVA EXPO PRAHA. The website targets general consumers in the Czech Republic seeking diverse retail products and event access. Technically, the site is built on the CS-Cart e-commerce platform and integrates multiple third-party analytics and advertising tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and Adform. The site is mobile-optimized with good navigation and content relevance, though accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks visible security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data is consistent with the business age and content, indicating legitimacy.

G

go bananas s.r.o.

gobananas.cz

49

go bananas s.r.o. is a Czech-based digital marketing and branding agency founded in 2021. The company specializes in building strong brands and delivering performance marketing solutions including creative campaigns, web development, social media management, video production, and influencer marketing. Their market position is that of a small but professional agency with a portfolio of diverse clients, emphasizing long-term partnerships and trust-building with customers. The website is built on Webflow and integrates modern technologies such as Google Analytics and Tag Manager for tracking, with a focus on responsive design and user experience. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal privacy or cookie policies, which are compliance gaps. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices to enhance user trust and regulatory adherence.

A

Appli Development s.r.o.

appli.cz

36

Appli Development s.r.o. is a Czech Republic based digital agency specializing in the development of mobile and web applications as well as digital marketing services. Founded in 2020, the company positions itself as a full-service provider helping businesses digitalize and grow through tailored app solutions and marketing campaigns. Their website reflects a professional and modern digital presence built on WordPress with Elementor, featuring clear service offerings and client engagement pathways. The technical infrastructure is based on a WordPress CMS with popular plugins such as Yoast SEO and Google Analytics integration, indicating a moderate level of digital maturity. The site is hosted on VAS Hosting as inferred from the nameservers. Performance and mobile optimization are good, though accessibility features are basic. SEO practices are implemented with structured data and meta tags. Security posture is solid with HTTPS enforced and no visible sensitive data exposure. However, the absence of security headers and explicit privacy and cookie policies indicates room for improvement in compliance and security best practices. No incident response or vulnerability disclosure information is provided, which could be a gap in security readiness. Overall, the website and business appear legitimate and professional with a good trust level. Strategic recommendations include adding comprehensive privacy and cookie policies, implementing security headers, and providing clear incident response contacts to enhance compliance and security posture.

B

BMT Medical Technology s.r.o.

sterilizatory-bmt.com

49

BMT Medical Technology s.r.o. is a Czech-based company specializing in the development, manufacturing, and supply of sterilization equipment including steam, hot air, and chemical sterilizers, as well as laboratory dryers, incubators, and stainless steel furniture. The company serves healthcare, pharmaceutical, and industrial sectors and is part of the MMM Group, indicating a strong market position and international reach. The website is professionally designed, content-rich, and targets Russian-speaking audiences with multilingual options. Technically, the site uses modern JavaScript libraries such as jQuery and Slick carousel, with lazy loading for performance optimization. However, no CMS or hosting provider details are evident. Security-wise, the site uses HTTPS (implied by external links), has a cookie consent mechanism, but lacks visible security headers and explicit privacy or terms of service pages. The WHOIS data for the domain is missing or indicates the domain is unregistered, which is a significant concern for domain legitimacy and trust. Overall, the site is functional and professional but requires improvements in security posture and domain registration verification.

B

BMT Medical Technology s.r.o.

sterilizers-bmt.com

47

BMT Medical Technology s.r.o. is a Czech-based manufacturer specializing in steam, hot air, and chemical sterilizers, laboratory drying ovens, incubators, and stainless steel furniture. The company serves a global customer base primarily in healthcare, laboratories, and the pharmaceutical industry. It is part of the MMM Group, which enhances its market credibility and reach. The website reflects a professional business with clear product and service offerings, supported by a consistent brand presence and multilingual support. Technically, the website uses modern JavaScript libraries such as jQuery and Slick carousel, with lazy loading for images and Google Analytics for visitor tracking. The site is mobile-optimized and has good SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement in loading speed and technical modernization. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism indicating GDPR awareness. However, no explicit security headers were detected, and no detailed privacy or security policies were found beyond cookie information. The WHOIS data for the domain is missing, which raises concerns about domain legitimacy despite the professional website content and contact information. Overall, the website presents a trustworthy and professional business front but should address WHOIS transparency and enhance security policies and headers to improve trust and compliance.

S

Svaz podnikatelů ve stínicí technice

spst-stineni.cz

46

Svaz podnikatelů ve stínicí technice (SPST) is a Czech trade association representing manufacturers and businesses in the shading technology sector. Formed in 2018 by the fusion of two entities, it provides certification, industry news, events, and resources to its members and the wider professional community. The website reflects a medium-sized organization with a clear focus on industry advocacy and networking. Technically, the site is built on Joomla CMS, using common JavaScript libraries and Google Analytics for tracking. It is mobile-optimized and presents a professional design with good navigation. Security posture is adequate with HTTPS enabled and CSRF protections in place, but lacks advanced security headers and explicit privacy or cookie policies, indicating compliance gaps. WHOIS data is missing, which raises concerns about domain legitimacy, though the active and professional website mitigates some risk. Overall, the site is safe, trustworthy, and serves its business purpose effectively.

Městská policie Znojmo operates as the official municipal police service for the city of Znojmo, Czech Republic. The website provides comprehensive information about public safety, police services, crime prevention, and contact details. It targets local citizens and visitors seeking assistance or information related to municipal policing. The business model is government-based, focusing on public order and safety. The site maintains a consistent brand presence with official social media channels and clear service offerings. Technically, the site uses common web technologies such as jQuery, Bootstrap, and FontAwesome, hosted on a Czech hosting provider. While the site is mobile-optimized and well-structured, minor technical issues like duplicate jQuery versions and malformed resource links exist. Security posture is moderate with a basic Content-Security-Policy header but lacks advanced security headers and vulnerability disclosures. No privacy or cookie policies were found, indicating a gap in compliance. Overall, the site is trustworthy and professional but could improve in privacy and security practices.

OC Convent is a retail shopping center located in Žďár nad Sázavou, Czech Republic, offering a variety of retail stores including supermarkets, pharmacies, and specialty shops. The website presents a professional and user-friendly interface built on WordPress with common plugins and libraries. The technical infrastructure is modern and mobile-optimized, supporting a good user experience. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though security headers and privacy policies are missing. The absence of WHOIS data limits domain trust assessment, but the site content and business information appear legitimate and consistent with a local retail center. Overall, the website is safe, professional, and serves its target audience effectively.

T

Trans Technik SRL

trans-technik.ro

45

Trans Technik SRL is a Romanian company specializing in the distribution of materials and subassemblies for automotive bodyworks, representing a Czech company with nearly 30 years of experience. Their product range includes materials for vehicle superstructures, aluminum and steel profiles, door kits, tarpaulin systems, hydraulic systems, and more, targeting businesses in the transportation and automotive sectors. The website is built on WordPress with WooCommerce, using modern plugins and standard analytics tools, indicating a moderate level of digital maturity. Security posture is good with HTTPS and security headers implemented, though formal security policies and incident response contacts are absent. Privacy compliance is basic with a privacy policy and cookie consent present. Overall, the website is professional and trustworthy, supporting a small-sized business with a clear market focus.

Svazek obcí mikroregionu Zábřežsko is a local government association focused on supporting the development of municipal self-governance and enhancing the economic, social, and cultural life of the Zábřežsko microregion in the Czech Republic. The website serves as an information portal for residents and local officials, providing access to documents, event announcements, and contact information. The organization positions itself as a community-centric entity facilitating regional cooperation and development. Technically, the website employs basic web technologies including HTML, CSS, JavaScript, and an older version of jQuery (1.3.2). Google Analytics is integrated for visitor tracking. The site shows moderate performance and basic mobile optimization but lacks modern frameworks or CMS indications. Accessibility and SEO optimizations are basic, with room for improvement. From a security perspective, the site uses HTTPS (implied by external scripts loaded over HTTPS), but no security headers were detected in the provided data. The use of an outdated jQuery version presents a potential vulnerability. There is no visible privacy or cookie policy, which raises compliance concerns, especially under GDPR. WHOIS data is missing, which limits domain legitimacy verification and reduces trustworthiness. Overall, the website is functional and serves its purpose for the local government audience but requires improvements in security, privacy compliance, and technical modernization to enhance trust and resilience against threats.

O

Okresní hospodářská komora Třebíč

ohktrebic.cz

45

Okresní hospodářská komora Třebíč is a public-law regional chamber of commerce based in the Czech Republic, focused on supporting small and medium-sized enterprises in the Třebíč region. The organization provides membership services, consulting, events, project management, and information on grants and subsidies. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Contact information including phone, email, and social media is clearly presented, enhancing business credibility. However, the absence of privacy and cookie policies and lack of WHOIS data slightly reduce trustworthiness. The site uses HTTPS and security headers, indicating a good security posture.

Centrum rozvojových aktivit Unie zaměstnavatelských svazů ČR is a Czech non-profit employers' organization focused on supporting employer unions and social dialogue through projects, education, and development activities. The website presents a professional and consistent brand image with clear navigation and relevant content for its target audience of employers and social sector stakeholders in the Czech Republic. Technically, the site uses a traditional tech stack including jQuery, Google reCAPTCHA, and Google Analytics, hosted under a Czech registrar. Security posture is moderate with HTTPS and form protections but lacks modern security headers and uses outdated JavaScript libraries. Privacy compliance is basic with a cookie consent banner but no visible privacy policy or terms of service. Overall, the site is trustworthy and legitimate with credible partnerships but could improve in security and compliance documentation.

Galileo Corporation s.r.o. is a Czech company specializing in digital communication solutions for municipalities, cities, schools, and public organizations. Their flagship offerings include a mobile application (V OBRAZE), SMS and email communication tools, integration with social media, digital official boards, and AI products. The company serves over 2500 clients, positioning itself as a trusted partner in the public sector digitalization space. The website reflects a professional and consistent brand image with clear messaging tailored to government and public institutions. Technically, the site uses modern web technologies such as jQuery, Bootstrap, and Swiper.js, and incorporates analytics and cookie consent tools, indicating a mature digital infrastructure. Security posture is good with HTTPS and anti-spam measures on forms, though some security headers are not confirmed and could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the professional web presence and business transparency.

P

ProZvěřinu.cz – Zvěřina přímo od myslivců

prozverinu.cz

43

ProZvěřinu.cz is an online marketplace based in the Czech Republic that connects consumers directly with hunters to purchase high-quality game meat. The platform targets local consumers interested in nutritious, diet-friendly, and low-fat wild game meat. The business operates a niche marketplace model, facilitating direct sales and location-based searches for game meat offers. The website is built on WordPress using popular plugins for directory management and GDPR compliance, indicating a moderate level of digital maturity. The technical infrastructure includes integration with Google Maps API for enhanced user experience. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks advanced security headers and explicit incident response contacts. The absence of WHOIS registration data reduces domain trustworthiness, though the website content and compliance features suggest a legitimate operation. Strategic recommendations include improving security headers, adding clear contact and incident response information, and verifying domain registration details to enhance trust and compliance.

The website www.mesicbiopotravin.cz represents a government-backed informational campaign focused on promoting organic food and ecological farming in the Czech Republic. It is organized by the Ministry of Agriculture and has been active since 2005. The site targets consumers, farmers, schools, and the general public interested in organic products and sustainable agriculture. It provides news, educational content, event calendars, recipes, and partner information to support its mission. Technically, the site is built on WordPress using common frameworks like Bootstrap and jQuery, with SEO optimization via Yoast. The site is mobile-friendly and offers a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced, but the absence of security headers and privacy/cookie policies indicates room for improvement. The WHOIS data is missing, which raises transparency concerns but does not negate the site's legitimacy given its government affiliation and contact details. Overall, the site is a credible and valuable resource for organic food promotion in the Czech Republic.

P

Captcha - WEDOS Global Protection

poznejsvehofarmare.cz

49

The website poznejsvehofarmare.cz is currently protected by WEDOS Global Protection and presents a captcha verification page to visitors, indicating a security mechanism that restricts direct access to content. The page itself contains minimal content, primarily focused on the captcha challenge, with no visible business information, contact details, or policies. The domain is registered since 2015 with REG-ZONER and uses WEDOS name servers, consistent with the hosting and protection provider. Due to the captcha challenge, the website content is inaccessible for full analysis, limiting insights into the business and technical infrastructure. The security posture shows basic measures such as CSRF tokens and captcha but lacks advanced security headers and policies. Privacy and cookie compliance are absent on this page. Overall, the site appears safe with no adult or questionable content detected, but the blocking mechanism significantly limits the ability to assess the website's full quality and credibility.

Č

čekit s.r.o.

e-vsudybyl.cz

41

e-Všudybyl.CZ is an established Czech online magazine focused on the tourism industry, providing news and articles related to travel, hospitality, gastronomy, and spa sectors. The website targets professionals and enthusiasts within the Czech tourism market and operates under the company čekit s.r.o., founded in 2008. The site features regular content updates and partnerships with relevant industry organizations, positioning it as a niche media outlet in its sector. Technically, the website uses a combination of Foundation CSS framework, jQuery, Font Awesome, and common analytics tools such as Google Analytics and Facebook SDK. The site is mobile-optimized with a moderate performance profile and basic accessibility features. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. No WHOIS data is available, which reduces trustworthiness but the website content and partner affiliations support legitimacy. Overall, the site is safe for general audiences and provides relevant industry content.

S

slezskaharta.cz

slezskaharta.cz

45

The website slezskaharta.cz serves as the official online portal for the Mikroregion Slezská Harta, a regional tourism and event promotion entity in the Czech Republic. It provides comprehensive information about local attractions, events such as the Dragon Boat Festival and Bike Marathon, boat transportation services, and e-bike rentals. The site targets tourists, local visitors, and residents interested in regional activities and services. The business model focuses on promoting regional tourism and facilitating service bookings, positioning itself as a key local information hub.

T

Turistické informační centrum Český Těšín

ic-tesin.cz

47

Turistické informační centrum Český Těšín operates as a local government-affiliated tourist information center serving visitors to Český Těšín and the surrounding Moravian-Silesian region. The website provides comprehensive information on tourism, cultural events, accommodation, and local businesses, positioning itself as the official source for regional visitor information. The target audience primarily includes tourists and local visitors seeking event calendars, historical insights, and practical travel information. The business model is public service funded by regional government budgets, emphasizing accessibility and community engagement. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google Translate for multilingual support, enhancing accessibility for non-Czech speakers. The site demonstrates moderate performance and basic mobile optimization, with a clear navigation structure and consistent branding. However, there is room for improvement in accessibility and SEO optimization to better serve diverse user needs. From a security perspective, the website uses HTTPS, ensuring encrypted communication, but lacks visible advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected, indicating a reasonable security posture for a public information site. Privacy compliance is basic, with privacy and cookie policies present but no active consent mechanism. Contact information is clearly displayed, enhancing trust and transparency. Overall, the website is a trustworthy and professional digital presence for a local government tourist center. Strategic recommendations include enhancing security headers, implementing cookie consent mechanisms, and improving accessibility and SEO to elevate user experience and compliance. These steps will strengthen the site's security posture and regulatory adherence while maintaining its role as a reliable regional information hub.

Technologické centrum Praha is a Czech innovation and business development center providing a broad range of services including innovation potential analysis, mentoring, acceleration programs, consulting on grants and intellectual property, and technology transfer. The organization has been a key player in the Enterprise Europe Network services in the Czech Republic for 18 years and is transitioning its role to a new consortium of regional partners. The website reflects a professional government-affiliated entity targeting entrepreneurs and SMEs in the Czech Republic. Technically, the site uses modern web technologies such as Bootstrap and jQuery, with responsive design and SVG icons, but lacks advanced security headers and cookie consent mechanisms. The security posture is moderate with HTTPS enabled but missing some best practices. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and partner references support legitimacy. Overall, the site is well-structured and informative but could improve privacy compliance and security transparency.

The website www.cz-pl.eu serves as the official portal for the Interreg Czechia – Poland cross-border cooperation program, facilitating project funding, information dissemination, and stakeholder engagement between Czech and Polish border regions. The program focuses on environmental protection, transportation development, SME growth, and strengthening cross-border community ties. The site is professionally designed with consistent branding and clear navigation, targeting applicants, project recipients, and governmental/non-profit entities involved in regional cooperation. Technically, the website employs modern web technologies including JavaScript, CSS, Google Fonts, and Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well, though accessibility features could be improved. No CMS or hosting provider details are explicitly detected. Security posture is good with HTTPS enabled and no exposed sensitive data, but lacks visible security headers and formal privacy/cookie policies. Security-wise, the site shows no signs of vulnerabilities or malicious content. However, the absence of privacy and cookie policies, as well as lack of incident response or vulnerability disclosure information, indicates room for compliance and transparency improvements. WHOIS data is unavailable due to EURid privacy restrictions, but the domain and content appear legitimate and consistent with an official government-backed program. Overall, the website is trustworthy, professional, and serves its informational and administrative purpose well. Strategic improvements in privacy compliance, security headers, and accessibility would enhance its security posture and user trust.

P

Parádní kraj

paradnikraj.cz

48

Parádní kraj is a regional development and innovation initiative focused on the Pardubice region in the Czech Republic. It supports businesses, researchers, students, and municipalities by providing opportunities for growth, education, and innovation. The website serves as a platform to promote regional projects, funding opportunities, and partnerships with government and other organizations. The site is professionally designed with clear navigation and content relevant to its target audience. Technically, it is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is evident with a GDPR policy and cookie banner. Overall, the site is trustworthy and well-positioned as a government-backed regional development resource.

Č

Česká komora architektů

ceskacenazaarchitekturu.cz

44

The website ceskacenazaarchitekturu.cz serves as the official portal for the Czech Architecture Award 2025, organized by the Czech Chamber of Architects. It showcases the best architectural realizations built in the Czech Republic over the last five years, providing information about the competition, timelines, nominees, and public voting. The site targets architects, industry professionals, and the general public interested in architecture within the Czech Republic. The business model is non-profit and focused on promoting architectural excellence and public engagement through exhibitions and awards. Technically, the website is built using modern JavaScript frameworks such as Vue.js and Nuxt.js, hosted on DigitalOcean, and integrates Google Analytics and Google Tag Manager for visitor tracking. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with preloading of scripts and responsive design elements. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, no explicit security headers were detected, and there is a lack of visible privacy and cookie policies, which are important for GDPR compliance. No vulnerability disclosures or incident response contacts are provided, indicating room for improvement in security transparency and user trust. Overall, the website is professional and trustworthy, with consistent branding and relevant content. The domain registration data aligns well with the business purpose and history, supporting legitimacy. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, enhancing accessibility, and publishing vulnerability disclosure and incident response information to strengthen security posture and compliance.

R

Regiony nás baví

regionynasbavi.cz

49

Regiony nás baví is a Czech regional event promotion website established in 2020, focusing on cultural and social activities within the Czech Republic. The platform targets the general public interested in local events and community engagement. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern and SEO-optimized infrastructure. Hosting is provided by Active24, with content delivery enhanced by Cloudfront CDN and Google Fonts integration. Security posture is solid with HTTPS enforced and multiple security headers present, though formal security policies and incident response contacts are absent. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies and an active consent mechanism. Overall, the website presents a professional and trustworthy front with moderate tracking and good user experience.

C

CARE Česká republika

care.cz

34

CARE Česká republika is a well-established Czech non-profit organization focused on humanitarian aid and charitable projects, including crisis relief efforts such as those in Sudan. The website serves as a platform for information dissemination, donation collection, and engagement with supporters. It operates a charity e-shop and donation campaigns, targeting the general public and donors interested in humanitarian causes. The organization has a credible market position within the Czech Republic's non-profit sector, supported by a domain registered since 2005 and consistent WHOIS data. Technically, the website is built on WordPress with WooCommerce, enhanced by the Breakdance theme and plugins. It integrates modern web technologies including jQuery, Google Tag Manager, Facebook Pixel, and Google Pay for payment processing. The site demonstrates good SEO practices with structured data and meta tags, and it is mobile optimized with a moderate performance profile. Hosting is provided by wedos.cz, a Czech hosting provider, aligning with the organization's location. From a security perspective, the site enforces HTTPS and uses security tokens in forms, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is partial; while a cookie consent mechanism is present, no privacy policy or terms of service pages were found in the provided data. Contact information is limited to donation forms without direct emails or phone numbers, which may impact user trust and compliance. Overall, the website is trustworthy and professionally maintained, with room for improvement in privacy disclosures and security headers. The risk level is moderate, primarily due to incomplete privacy documentation and limited direct contact information. Strategic enhancements in these areas would strengthen compliance and user confidence.

K

Konfederace zaměstnavatelských a podnikatelských svazů České republiky

kzps.cz

44

Konfederace zaměstnavatelských a podnikatelských svazů České republiky (KZPS) is the largest employer and business association in the Czech Republic, representing 140 member associations and over 23,000 entities with approximately 1.75 million employees. The organization advocates for its members' interests in legislative matters and participates actively in tripartite negotiations. The website reflects a professional and consistent brand presence, targeting employers and business associations within the Czech market. Founded in 2003, KZPS has a well-established market position and a comprehensive digital presence.

A

ANTECOM s.r.o.

antecom.cz

41

ANTECOM s.r.o. is a Czech-based publishing and communication agency established in 2008, with a core team experienced in public relations, marketing communication, and advertising since the early 1990s. The company publishes specialized magazines such as TRADE NEWS and AGE MANAGEMENT, targeting business professionals and stakeholders interested in trade, export, and intergenerational cooperation. The website reflects a professional business presence with good content quality and consistent branding, supported by a network of reputable partners and supporters.

V

Vítězslav Válka

vitavalka.cz

37

Vítězslav Válka is a seasoned UI/UX designer and web developer based in the Czech Republic, offering specialized design services including corporate applications, web design, and consulting with over 20 years of experience. The website positions him as a reliable and professional service provider with a strong portfolio and client testimonials, targeting businesses and professionals seeking high-quality design solutions. Technically, the site is built on WordPress, uses modern web technologies, and is hosted by Wedos, with good performance and mobile optimization. Security posture is adequate with HTTPS enabled and secure form handling, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the domain registration is consistent with the business claims, and no suspicious patterns were detected, indicating a trustworthy online presence.

M

Městský úřad Železná Ruda

zelezna-ruda.cz

37

The website www.zelezna-ruda.cz serves as the official municipal and regional tourism portal for Železná Ruda, Czech Republic. It provides comprehensive information on local government services, tourism, culture, sports, accommodation, and events. The site targets both local residents and tourists, offering multilingual support in Czech, German, and English. The business model is primarily public service and regional tourism promotion, positioning itself as a key information source for the area. Technically, the website employs common web technologies such as jQuery, Google Analytics, Google Tag Manager, Fancybox, and Flexslider for UI and analytics. The site is moderately optimized for performance and mobile devices, with good accessibility and SEO practices. However, no CMS or hosting provider details are explicitly identified. The site uses cookie consent mechanisms and GDPR compliance pages, indicating awareness of privacy regulations. From a security perspective, the website uses HTTPS and implements cookie consent denying ad and analytics storage by default. However, no explicit security headers or incident response policies are found. There is no vulnerability disclosure or security.txt file. The WHOIS data is consistent with the municipal nature of the site, showing no suspicious patterns. Overall, the security posture is moderate but could be improved with additional headers and policies. The overall risk assessment is low, with no signs of malicious content or vulnerabilities. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and improving contact transparency. The site is trustworthy and professionally maintained, serving its public and tourism functions effectively.

S

Ski areál U Horejšů

skiarealuhorejsu.cz

32

Ski areál U Horejšů is a small local recreational business based in the Czech Republic offering mountain cart rides and seasonal skiing activities. The website provides detailed information about the services, pricing, and contact details, targeting families and tourists interested in outdoor activities. The technical infrastructure is based on WordPress with common plugins and a modern theme, hosted likely by Wedos, a Czech hosting provider. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security best practices. Overall, the website is trustworthy and professional for its business scope but should enhance privacy compliance and security measures.

The website www.novehute.cz represents a small regional ski resort called Lyžařský Areál Nové Hutě located in the Czech Republic's Šumava region. It offers family-friendly skiing services including ski lifts, ski school, rental, and cross-country skiing trails. The site is integrated with partner ski areas such as Zadov, enhancing its market position within the regional winter sports tourism sector. The business model focuses on seasonal tourism and recreational services targeting families, beginners, and intermediate skiers. Technically, the website uses legacy HTML with CSS and JavaScript libraries such as jQuery, VisualLightBox, and FancyBox. It includes Google Analytics and Tag Manager for user tracking and a cookie consent mechanism, indicating some level of privacy awareness. However, the site shows signs of outdated technology (IE8 compatibility mode) and lacks modern security headers or HTTPS enforcement visible in the HTML content, which may impact user trust and security. From a security perspective, the absence of WHOIS data raises concerns about domain registration transparency. No privacy policy or terms of service are present, and security headers are missing. While cookie consent is implemented, GDPR compliance is not clearly documented. The site does not appear to be blocked by any WAF or security challenge, and no critical vulnerabilities were detected in the content. Overall, the security posture is moderate but could be significantly improved with modern best practices. The overall risk assessment suggests the site is operational and legitimate but would benefit from enhanced security measures, transparent privacy documentation, and updated technical infrastructure to improve trust and compliance. Strategic recommendations include implementing HTTPS with HSTS, adding security headers, publishing privacy and security policies, and modernizing the website technology stack.

AUTOCENTRUM Dojáček is a medium-sized, established automotive dealership and service provider in the Czech Republic with over 30 years of experience. The company offers authorized sales and servicing for multiple automotive brands, including Citroen, Fiat, Jeep, and Hyundai, among others. Their business model focuses on vehicle sales (new, demo, used), authorized servicing, and related automotive services, supported by an online presence featuring vehicle listings and service booking capabilities. The website reflects a consistent brand image and professional content, targeting consumers and businesses seeking automotive solutions locally. Technically, the website employs a traditional tech stack with jQuery, jQuery UI, and Slick Slider, hosted on a CMS platform by Picabo. The site is mobile-optimized with good SEO and accessibility basics, though some technologies like jQuery are outdated. Security posture is moderate, with HTTPS usage implied but lacking visible security headers and modern security practices. Privacy compliance is well addressed with clear cookie consent and privacy policy documentation. The absence of WHOIS data for the domain raises concerns about domain registration transparency, though the website content and certifications (ISO 9001:2008) support business legitimacy. No direct contact emails or phone numbers are present on the site, which may impact user trust and support accessibility. Overall, the site is functional and professional but would benefit from enhanced security measures and clearer contact information to improve trust and compliance.

S

SLIM, s.r.o.

fischer-shop.cz

46

Fischer-shop.cz is a Czech Republic based e-commerce retailer specializing in winter sports equipment including skis, boots, poles, helmets, and related accessories. The company operates a professional online store with a clear market position as an official partner of national ski and biathlon teams. Their product offerings cover multiple winter sports categories, targeting winter sports enthusiasts and skiers primarily in the Czech market. The website is well-structured, mobile-optimized, and uses modern web technologies including Google Tag Manager and New Relic for performance and monitoring. Security posture is strong with HTTPS enforced and monitoring tools in place, though explicit security headers could be improved. Privacy and cookie policies are present with consent mechanisms, indicating good GDPR compliance. The absence of WHOIS data slightly reduces trust but the overall business credibility is high based on website content and contact information.

W

Web4Ukrajina.cz | Nesouhlasíme s agresí Ruské federace vůči Ukrajině

web4ukrajina.cz

41

Web4Ukrajina.cz is a small non-profit advocacy website established in 2022, focused on opposing the aggression of the Russian Federation towards Ukraine. It provides embeddable JavaScript code snippets that other websites can use to display anti-war appeals specifically targeting Russian visitors. The site has a clear mission and a network of over 9,000 participating websites, indicating a moderate market presence within its niche. Technically, the site uses modern frontend technologies including Bootstrap 5 and Google Fonts, and is hosted behind Cloudflare DNS services, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanisms, despite usage of Google Analytics. Contact information is limited to a single email address, with no phone or physical address provided. Overall, the site is trustworthy for its advocacy purpose but would benefit from improved compliance and security practices.

C

CZECH NEWS CENTER a.s.

mimibazar.cz

48

Mimibazar.cz is a Czech online marketplace and community platform primarily targeting mothers and families. Operated by CZECH NEWS CENTER a.s., it offers a broad range of services including classifieds for new and used goods, product testing, contests, recipes, discussion forums, and blog content. The platform is well-established in the Czech market and serves as a trusted hub for buying, selling, and community engagement among its target audience. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and consent management tools to ensure a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and consent mechanisms in place, though some security headers could be enhanced and broken image links fixed. The absence of WHOIS data suggests privacy protection, which is common for commercial sites, but the presence of multiple trust indicators and a reputable parent company supports legitimacy. Overall, Mimibazar.cz demonstrates a mature digital presence with good content quality, privacy compliance, and business credibility.

The website at nmds.pro is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any meaningful content. There is no visible business information, contact details, or compliance documentation available on the site. The WHOIS data is minimal and does not provide creation or expiry dates, with the registrar identified as Identity Digital Inc., a known privacy service provider. Due to the lack of accessible content and transparency, the website's business purpose and legitimacy cannot be determined. Technically, the site uses Google Fonts but lacks any detectable CMS, frameworks, or security headers. The absence of HTTPS information and security policies indicates a poor security posture. Overall, the site is effectively blocked from analysis, resulting in a low trust and credibility score.

C

Central European Anti-Doping Organization (CEADO)

ceado.org

48

The Central European Anti-Doping Organization (CEADO) operates as a regional non-profit entity focused on promoting clean sport and supporting anti-doping agencies across Central and Southeastern Europe. Their key services include regional cooperation facilitation, mentoring national anti-doping organizations, and conducting prevention and education programs. The organization is headquartered in Vienna, Austria, and maintains a professional web presence with regular news updates and clear contact information. Technically, the website is built on the Internetkonzepte.at CMS and utilizes modern JavaScript libraries such as jQuery, Typeahead.js, and Fancybox. The site is mobile-optimized, accessible, and performs moderately well. However, there is room for improvement in security headers and incident response visibility. The site uses HTTPS, ensuring encrypted communication. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and no visible exposure of sensitive data. However, the absence of security headers and vulnerability disclosure policies indicates areas for enhancement. The WHOIS data is unavailable due to a malformed query, limiting the ability to fully verify domain legitimacy. Despite this, the website content and contact details appear trustworthy and professional. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with an overall AI score of 77. Strategic recommendations include implementing security headers, adding a terms of service page, publishing a vulnerability disclosure policy, and improving incident response contact visibility to strengthen trust and security posture.

P

PFNonwovens a.s.

pfnonwovens.cz

49

PFNonwovens a.s. is a Czech manufacturing company specializing in nonwoven materials and is part of the PFNonwovens group managed by PFNonwovens Holding s.r.o. The website serves as a corporate portal providing company information, investor relations, and media contacts. The business targets investors, partners, and customers in the manufacturing sector. Technically, the website uses legacy JavaScript libraries such as jQuery 1.8.0 and Modernizr 2.0, indicating a need for modernization. The site is accessible without WAF or blocking mechanisms and presents a professional design with clear navigation, though mobile optimization and accessibility are basic. Security posture is moderate but weakened by outdated libraries and lack of security headers. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. WHOIS data is missing, which reduces domain trust but the website content and contact details align with a legitimate Czech company. Overall, the site is functional and professional but requires technical and security improvements to enhance trust and compliance.

A

ATIVEON s.r.o.

netflixer.cz

33

Netflixer.cz is a Czech media website specializing in news, reviews, and information related to Netflix and broader entertainment content. Operated by ATIVEON s.r.o., the site targets general audiences interested in films, series, and related cultural content. The business model is primarily advertising-supported, leveraging Google Adsense and other ad networks to monetize content. The site maintains a consistent brand presence with active social media channels on Instagram and Facebook, and offers interactive content such as quizzes and videos to engage users. Technically, Netflixer.cz is built on the WordPress CMS platform, utilizing common plugins for GDPR compliance (Complianz), social login (MiniOrange), and analytics (Gemius, Google Tag Manager). The site is hosted via Wedos, a Czech hosting provider, with a domain registered in 2020, consistent with the site's content timeline. Performance is moderate with good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully detected, the site uses reputable plugins to manage privacy and security. No vulnerabilities or exposed sensitive data were found in the analysis. However, the site lacks a published security policy, incident response contacts, or vulnerability disclosure mechanisms, which could be areas for improvement. Overall, Netflixer.cz presents a professional and trustworthy media outlet with good content quality and compliance posture. The risk level is low, but enhancing security headers and publishing formal security and incident response policies would strengthen its security maturity and trustworthiness.

S

SerialZone.cz

serialzone.cz

45

SerialZone.cz is a Czech entertainment website specializing in TV series information, news, and community engagement. Established in 2007, it serves as a comprehensive portal offering series calendars, watchlists, subtitles databases, articles, and forums targeting a general audience interested in television content. The site maintains a consistent brand presence and offers a variety of user-centric features supported by advertising revenue.

B

Babyweb.cz - těhotenství, porod, děti a jejich maminky

babyweb.cz

41

Babyweb.cz is a well-established Czech online magazine focused on pregnancy, childbirth, childcare, and parenting. It offers a wide range of content including articles, blogs, calculators, and a community forum, targeting pregnant women, mothers, and women planning pregnancy. The website is professionally designed with consistent branding and good content quality, serving a medium-sized audience in the Czech Republic. Technically, the site runs on WordPress with modern frameworks like Bootstrap and integrates multiple advertising and analytics services such as Google Analytics, Gemius, and Adform. It is mobile-optimized and implements structured data for SEO. Security posture is good with HTTPS and reCAPTCHA usage, but lacks some security headers and explicit security policies. Privacy compliance is basic with no clear privacy or cookie policy pages detected in the provided content, though a consent mechanism is present. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for content publishers. Overall, the site is trustworthy and professional with moderate risk.

H

Hrot24.cz

hrot24.cz

49

Hrot24.cz is a Czech-language online news media platform focusing on economy, politics, and business. It offers news articles, podcasts, and a monthly magazine subscription, targeting Czech-speaking audiences interested in these sectors. The website is professionally designed with consistent branding and structured content authored by named journalists, supporting its credibility in the media industry. Technically, the site uses modern web technologies such as React and Next.js, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. WHOIS data is unavailable or privacy protected, which is common but reduces transparency. Overall, the site is safe, professional, and trustworthy for general audiences.

P

Pavel Srp

auto-mania.cz

48

auto-mania.cz is a Czech automotive news and magazine website founded in 2011, operated by Pavel Srp. It provides automotive news, veteran car coverage, tuning, motorsport reports, event invitations, and automotive advice targeted primarily at Czech automotive enthusiasts. The website uses WordPress with Astra theme and Elementor page builder, integrating advertising networks such as Google Adsense and Seznam Ads with a consent management platform to comply with privacy regulations. The site demonstrates good SEO practices and structured data usage, enhancing its visibility and user experience. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the website is professionally maintained with a moderate technical maturity and good business credibility.

E

Echo24.cz

echo24.cz

45

Echo24.cz is a Czech opinion daily news website offering a broad range of content including news articles, opinion pieces, podcasts, and subscription services. It operates under the Echomedia brand and maintains a consistent and professional online presence targeting the Czech-speaking general public interested in current affairs and commentary. The website integrates multiple advertising and analytics platforms to support its business model, which relies on advertising revenue and subscriptions. Technically, the site employs modern JavaScript libraries and tracking tools, with good SEO and mobile optimization, though some accessibility features could be improved. Security posture is solid with HTTPS and consent management in place, but security headers are not explicitly detected and should be enhanced. WHOIS data is not publicly available, indicating privacy protection, which is typical for media companies. Overall, the site is trustworthy, professional, and safe for general audiences.

K

KNOWLIMITS Group a.s.

knowlimits.cz

48

KNOWLIMITS Group a.s. is the largest independent Czech communication group specializing in comprehensive marketing and media services. Their offerings span strategy, media planning, digital and social media, creative production, retail marketing, data research, PR, and events. The group operates across 15 European markets with a significant turnover, positioning itself as a major player in the regional media industry. The website reflects a professional and consistent brand image, targeting businesses seeking integrated communication solutions. Technically, the site is built on WordPress with Bootstrap and jQuery, supporting multilingual content via WPML and optimized for mobile devices. Google Tag Manager is used for analytics and marketing tracking, indicating a mature digital infrastructure. Security posture is moderate with HTTPS implied but lacking explicit security headers and formal privacy/cookie policies, which are critical for compliance and trust. WHOIS data is unavailable, which raises concerns about domain registration transparency but does not detract from the professional presentation and business legitimacy evident on the site. Overall, the site is well-designed and functional but would benefit from enhanced security and privacy compliance measures.

E

Economia, a.s.

economia.cz

45

Economia, a.s. is a prominent Czech media company dedicated to delivering high-quality journalism and valuable content. The company operates multiple media titles including daily print and online products, complemented by advisory and marketing services. It holds a notable position in the Czech media landscape, evidenced by its Journalism Trust Initiative certification, reflecting its commitment to transparency and professional journalism. The website targets business owners, top management, public administration, and informed citizens interested in comprehensive public affairs coverage. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates advanced SEO and consent management tools, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and employs a robust consent management platform, though it lacks some advanced security headers and explicit security policies. Overall, the site is professional, GDPR compliant, and trustworthy, with clear contact information and social media presence. Recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

M

Městský úřad Znojmo

muznojmo.cz

36

The website www.znojmocity.cz serves as the official online presence of the city of Znojmo, Czech Republic. It provides comprehensive information about the city administration, cultural events, tourism, social services, and public notices. The site targets residents, visitors, and local businesses, offering a broad range of municipal services and news updates. The business model is that of a government entity focused on public service and information dissemination. The site maintains a consistent brand identity aligned with official city symbols and includes active social media channels to engage the community. Technically, the website is built on a proprietary CMS platform (vismo) and leverages modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics and Google Translate for accessibility and analytics. The site is mobile optimized and includes accessibility features, providing a good user experience. Performance is moderate, with embedded multimedia content and external scripts. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, no explicit security policy or incident response contact information is published, and security headers are not visibly configured. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain legitimacy verification, but the official nature of the content and branding strongly support its authenticity. Overall, the website is a well-maintained municipal portal with good content quality, technical implementation, and privacy compliance. Strategic improvements include publishing a security policy, adding security headers, and providing incident response contacts to enhance trust and security posture.