High-risk security reports

S

Svaz podnikatelů ve stínicí technice

svst.cz

46

Svaz podnikatelů ve stínicí technice (SPST) is a Czech trade association representing manufacturers and businesses in the shading technology sector. Established in 2018 through a merger, it serves as a unified body promoting industry standards, certifications, events, and information dissemination. The website reflects a professional organization with a medium-sized membership base and active industry engagement. Technically, the site is built on Joomla CMS with common libraries like jQuery and Bootstrap, offering moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enabled and CSRF protections, but lacks advanced security headers and explicit privacy or cookie policies. The absence of WHOIS data reduces domain trust, though the site content and branding are consistent and professional. Overall, the site is functional and credible but would benefit from enhanced privacy compliance and security best practices.

E

ESMEDIA Interactive s.r.o.

esmedia.cz

47

ESMEDIA Interactive s.r.o. is a Czech-based company specializing in custom e-commerce solutions, online marketing, PPC, SEO, and content development. With nearly three decades of experience and a client base spanning business, healthcare, and government sectors, the company positions itself as a comprehensive digital service provider. Their website showcases a professional portfolio with numerous references and client logos, indicating a strong market presence in the Czech Republic. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, reCAPTCHA, and Leaflet.js for mapping, combined with Bootstrap and jQuery frameworks. The website is mobile-optimized and well-structured, providing a positive user experience. Security-wise, the site enforces HTTPS and uses reCAPTCHA for form protection, but lacks visible security headers and a published privacy policy, which are areas for improvement. The absence of WHOIS data limits domain legitimacy verification, but the professional content and clear business information mitigate some concerns. Overall, the site is secure, professional, and business-focused, with recommendations to enhance privacy compliance and security posture.

The website www.scolarest.cz appears to be a placeholder or demo site built using WordPress and the Oxygen Builder plugin. The content is generic and does not provide any meaningful business information related to 'Scolarest'. The site includes links and branding related to Oxygen Builder rather than a distinct company. The WHOIS data is unavailable, indicating the domain may be unregistered or privacy protected, which raises questions about the legitimacy of the domain and its association with any real business. Technically, the site uses modern web technologies such as jQuery and Google Fonts, but lacks advanced security headers and privacy policies. The contact information is generic and likely not related to a real company. Overall, the site has a low trust and business credibility score.

R

Regiony Sobě – Národní síť Místních akčních skupin

regionysobe.cz

43

Regiony Sobě is a Czech national network of Local Action Groups focused on regional development and supporting local businesses. The website promotes community self-reliance and regional strength, targeting local communities and enterprises within the Czech Republic. The site is built on WordPress and uses common web technologies such as jQuery, Leaflet.js for mapping, Google Analytics, and Facebook Pixel for tracking. The technical infrastructure is moderately modern with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. The absence of WHOIS data limits domain legitimacy verification, which impacts overall trust. No direct contact information or detailed business credentials are found in the provided content, which may affect user trust and compliance transparency.

N

Národní síť Místních akčních skupin České republiky, z.s.

mistniakcniskupiny.cz

45

The Národní síť Místních akčních skupin České republiky, z.s. is a Czech non-profit organization that unites 176 local action groups covering 91% of the Czech Republic's territory. It supports rural development through project funding, community engagement, and strategic planning, collaborating with government ministries and other partners. The website reflects a well-established entity with a clear mission to support rural communities and local entrepreneurship. Technically, the site is built on WordPress with common plugins and uses HTTPS with Google Analytics for tracking. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is moderate with HTTPS enforced but missing security headers and incident response information. WHOIS data is unavailable, which reduces trust but the website content and partner affiliations indicate legitimacy. Overall, the site is professional and trustworthy but could improve privacy compliance and security transparency.

C

CityPortals.cz

cityportals.cz

42

CityPortals.cz is a specialized service provider offering municipalities in the Czech Republic a platform to display regional job offers directly on their websites. The service aggregates job listings from major Czech job portals and the national employment office, providing a valuable tool to combat local unemployment. The website is professionally designed with clear navigation and good mobile optimization, targeting municipal governments and local citizens seeking employment opportunities. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Google Analytics, with moderate performance and SEO optimization. However, the absence of privacy and cookie policies and missing WHOIS registration data are notable compliance and trust concerns. Security posture is basic with HTTPS enabled but lacks advanced security headers and incident response information. Overall, the site is functional and trustworthy for its niche but would benefit from improved privacy compliance and domain registration transparency.

U

UIAA

theuiaa.org

49

The UIAA website represents the International Climbing and Mountaineering Federation, a globally recognized non-profit organization dedicated to promoting safety, sustainability, and community in mountain sports. The site offers comprehensive resources including safety standards, training, event calendars, and member directories, positioning UIAA as a central authority in the mountaineering sector. The website is well-designed, mobile-optimized, and rich in relevant content, targeting climbers, mountaineers, and affiliated organizations worldwide. Technically, the site is built on WordPress with modern plugins and libraries such as WPBakery Page Builder, Ultimate VC Addons, and Google Analytics integration. It demonstrates good SEO practices, mobile responsiveness, and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies could be enhanced. No blocking or WAF challenges were detected, allowing full content access. WHOIS data is privacy protected, which is typical for non-profit organizations, and does not detract from the site's legitimacy given the professional presentation and consistent branding. The site maintains GDPR compliance with clear privacy and cookie policies. Overall, the UIAA website is a trustworthy, professional platform serving its community effectively, with recommendations to strengthen security headers and publish vulnerability disclosure information to further enhance trust and compliance.

V

Vybavení pro horolezectví, outdoor a práce ve výškách | VERTONE

vertone.cz

43

Vertone.cz is a Czech Republic-based retail and distribution company specializing in outdoor, climbing, and camping equipment. The website serves as an e-commerce platform featuring multiple well-known outdoor brands such as Petzl, Thermarest, MSR, Montane, and others. The target audience includes outdoor enthusiasts, climbers, and professionals working at heights. The business model focuses on retail sales, material inspections, training, and servicing related to outdoor and safety equipment. The domain was registered in 2020, consistent with a small to medium-sized retail business.

S

SINGING ROCK s.r.o.

singingrock.cz

48

SINGING ROCK s.r.o. is a Czech-based company specializing in the manufacturing and retail of climbing and professional safety equipment. The company maintains a strong market position with an international presence, offering products such as harnesses, helmets, and fall arrest devices. Their website targets climbers and professionals working at heights, providing product information, community engagement, and B2B sales channels. The business model combines manufacturing with direct retail and wholesale distribution. Technically, the website employs a modern tech stack including jQuery, Slick Carousel, and Google Analytics for tracking. The site is mobile optimized with good navigation and content quality. While no CMS is explicitly detected, the site uses standard web technologies and scripts to deliver a responsive user experience. Performance is moderate with room for improvement in SEO and accessibility. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks visible security headers and does not provide explicit incident response or vulnerability disclosure information. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website presents a professional and trustworthy front for SINGING ROCK s.r.o., with good content quality and compliance practices. Strategic improvements in security headers, incident response transparency, and SEO could enhance the site's security posture and digital maturity.

A

AHS ČR - servisní, s.r.o.

czechskipass.cz

41

CzechSkipass.cz is a regional Czech Republic based business offering ski passes valid across 18 ski resorts, targeting winter sports enthusiasts. The website is professionally designed with clear navigation and provides essential business information including contact email and physical address. The business is supported by the Association of Mountain Resorts (AHS ČR), enhancing its credibility in the hospitality and transportation sectors. Technically, the site uses modern JavaScript libraries, Google Analytics, Facebook Pixel, and Google Tag Manager for tracking and marketing purposes. The site is mobile optimized and performs moderately well. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is basic with no cookie consent mechanism detected, and GDPR compliance is not explicitly addressed. Overall, the site is trustworthy and professionally maintained but could improve privacy and security transparency.

S

Svaz knihovníků a informačních pracovníků České republiky (SKIP)

skipcr.cz

45

Svaz knihovníků a informačních pracovníků České republiky (SKIP) is the largest professional organization for librarians and information workers in the Czech Republic, representing over 2,100 members including institutions and individuals. The organization focuses on promoting equal access to information, supporting educational and cultural activities, and organizing national projects to foster reading and library services. The website is well-structured, professionally designed using Drupal 10, and provides comprehensive information about SKIP's activities, membership, and events. It targets library professionals and institutions within the Czech Republic.

N

Noc s Andersenem / Klub dětských knihoven SKIP ČR

nocsandersenem.cz

45

Noc s Andersenem is a well-established international non-profit event focused on promoting children's reading through an annual night-time storytelling event involving libraries, schools, and children's clubs primarily in the Czech Republic and Europe. The website reflects a consistent and professional presentation of the event, targeting children and families with educational and cultural content. The event is organized by the Klub dětských knihoven SKIP ČR and supported by notable partners including government and cultural institutions. Technically, the website uses modern front-end technologies such as Bootstrap, jQuery, and Owl Carousel, providing a responsive and user-friendly experience. However, some technical aspects like security headers and privacy compliance are lacking or not explicitly implemented. The security posture is moderate with HTTPS implied but no explicit security headers detected. The absence of privacy and cookie policies is a compliance gap, especially under GDPR. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and partner references suggest legitimacy. Overall, the site is safe, professional, and credible but would benefit from improved security and privacy practices.

S

saferinternet.cz

saferinternet.cz

47

Saferinternet.cz is a Czech-language online magazine dedicated to internet safety, technology, finance, law, and transportation topics. Established in 2004, it serves a general audience in the Czech Republic seeking advice, tips, and news about safer internet usage and related technologies. The website offers regularly updated articles and guides, positioning itself as a niche media outlet focused on digital safety and awareness. Technically, the site employs modern web standards including HTTPS, Google Fonts, Google Adsense for monetization, and Matomo for analytics, reflecting a moderate level of digital maturity. The site is mobile-optimized with good navigation and content structure, although accessibility features are basic. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the site is trustworthy and safe for general audiences, but could improve compliance and security transparency.

W

Wendepunkt e.V.

wendepunkt-ev.de

46

Wendepunkt e.V. is a German non-profit organization dedicated to promoting respect and non-violence in upbringing, partnerships, and sexuality. It offers a broad range of services including trauma counseling, child protection, family support, prevention programs, offender relapse prevention, and professional training. The organization targets children, youth, families, and professionals, positioning itself as a key regional player in Schleswig-Holstein for social and educational services. The website is built on WordPress with a moderate to good technical infrastructure, including modern plugins and responsive design. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and incident response transparency are recommended. Privacy compliance is good with a comprehensive GDPR privacy policy, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its mission.

Grape Media s.r.o. is a Czech technology company specializing in innovative internet advertising technologies and services. Founded in 2009, it offers products such as VideoAd.cz, Adplan.cz, and Preroll.cz, targeting internet advertising operators and advertisers to enhance campaign planning and execution. The company positions itself as a niche technology provider within the Czech market, focusing on rich media and interactive advertising formats. Technically, the website employs modern front-end technologies including Bootstrap, jQuery, Google Analytics, and Google reCAPTCHA, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some SEO and accessibility features could be improved. From a security perspective, the site uses HTTPS and Google reCAPTCHA for form protection but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. The absence of WHOIS data limits domain trust assessment, though the website content and business information appear legitimate and professional. Overall, the website presents a moderate risk profile with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

W

Webglobe

webglobe.com

49

Webglobe is a technology service provider specializing in domain registration, web hosting, email services, and server infrastructure solutions. The company targets individuals and businesses seeking reliable online presence services, boasting over 120,000 satisfied customers and award-winning hosting. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site leverages WordPress CMS with modern frameworks like Bootstrap 5 and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Visual Website Optimizer. Security posture is generally good with HTTPS and secure forms, but lacks explicit security headers and published security policies. WHOIS data is missing, raising concerns about domain registration transparency. Overall, the site is trustworthy but would benefit from improved privacy compliance and clearer domain registration information.

C

CTP

ctparkpraguenorth.eu

45

CTP is a leading real estate company specializing in the development and management of industrial parks across Central and Eastern Europe. The Prague North site is a modern business hub offering logistics, warehousing, manufacturing, retail, and office spaces with excellent connectivity to Prague and major transport routes. The website demonstrates a mature digital presence with a professional design, multilingual support, and comprehensive business information. Technically, it leverages WordPress with SEO and analytics tools, ensuring good performance and user experience. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site reflects a trustworthy and credible business with clear contact channels and client testimonials.

C

CTP

ctp.eu

49

CTP is a leading European commercial real estate company specializing in logistics and industrial properties. It operates across 10 countries with over 200 locations, positioning itself as the largest listed owner and developer in its sector. The company offers a broad range of commercial spaces including warehouses and office buildings, targeting businesses seeking scalable and flexible real estate solutions. The website reflects a mature digital presence with multilingual support and comprehensive business and investor information. Technically, the website is built on WordPress with modern performance optimizations such as lazy loading, Google Tag Manager, and integration of Google Maps API. The site is mobile-optimized, fast-loading, and accessible, indicating a high level of digital maturity. Security practices include HTTPS enforcement and script nonce usage, although explicit security policies and incident response information are not publicly detailed. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Contact information is transparent and accessible, enhancing business credibility. Overall, the website demonstrates professionalism, trustworthiness, and a solid foundation for business operations and customer engagement.

D

Úvod - 10000 kroků ke zdraví

desettisickroku.cz

48

The website www.desettisickroku.cz represents a Czech health and urban mobility initiative focused on promoting walking as a healthy lifestyle and community engagement activity. It targets individuals, cities, schools, companies, and partners to participate in walking challenges, fostering positive health and environmental changes. The site is professionally designed with consistent branding and features numerous partners and ambassadors, indicating a well-established presence in its sector. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and various JavaScript libraries, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and older jQuery versions are used, which could be updated for improved security. Privacy compliance is good, with clear cookie policies and GDPR-aligned consent. However, WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trustworthiness but is mitigated by the professional site content and partner endorsements. Overall, the site is a credible, well-maintained platform supporting a public health cause.

W

WEBHOUSE, s.r.o.

ceskaobec.cz

44

Česká Obec is a Czech Republic-based technology company specializing in providing a mobile communication platform tailored for municipalities, city districts, and microregions. Their flagship product is a mobile app that facilitates efficient, GDPR-compliant communication between local governments and citizens, including features such as SMS messaging, event notifications, and integration with schools. The company positions itself as a cost-effective solution for local governments to modernize citizen engagement without heavy investment in custom development. The website demonstrates a solid market presence with multiple municipal references and partner collaborations. Technically, the website is built on the Vismo CMS platform with standard web technologies including HTML5, CSS, and JavaScript. It integrates Google reCAPTCHA for form security and provides mobile app download links for iOS and Android platforms. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Hosting and domain registration are consistent with a Czech-based business. From a security perspective, the site uses HTTPS and implements reCAPTCHA to protect forms from bots. However, it lacks advanced security headers such as Content-Security-Policy and HSTS, which could enhance its security posture. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is addressed with a basic GDPR-compliant privacy policy and cookie information, though no explicit cookie consent mechanism is present. Overall, Česká Obec presents a trustworthy and professional online presence with clear business focus and contact transparency. Security practices are adequate but could be improved with additional headers and policies. The site is safe for general audiences and does not contain any adult or questionable content.

C

Con Gusto Catering

congustocatering.cz

42

Con Gusto Catering is a specialized catering service provider based in Brno, Czech Republic, offering exclusive gastronomy for various events including weddings, corporate functions, and celebrations. The company is part of the larger Con Gusto Restaurant Group, which includes several partner restaurants and wine suppliers. Their services encompass a wide range of culinary styles and event support including AV equipment and personnel. The website reflects a professional and consistent brand image with clear contact information and partner affiliations. Technically, the site uses modern frameworks such as Bootstrap and integrates Google Analytics and Tag Manager for marketing and analytics purposes. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks visible advanced security headers and detailed security policies. The absence of WHOIS data reduces domain trust but the business presence and content suggest legitimacy. Overall, the site is well-structured, mobile-optimized, and provides a good user experience with moderate tracking and compliance measures.

K

KOREK Wines s. r. o.

korekwines.cz

41

KOREK Wines s. r. o. is a Czech-based small business specializing in the import and distribution of authentic wines from prominent European wine regions. Founded in 2018, the company emphasizes quality, terroir authenticity, and sustainable production by partnering with small family wineries. Their business model combines product sales with premium wine-related services such as guided tastings, wine travel, and consulting. The website reflects a professional and consistent brand image targeting wine enthusiasts and hospitality professionals. Technically, the site uses modern web technologies including Bootstrap, jQuery, and integrates marketing and analytics tools like Google Analytics and Facebook Pixel. Security posture is moderate with HTTPS implied but lacks visible security headers and formal privacy documentation. The absence of WHOIS data limits domain legitimacy verification, though the website content and contact information appear credible. Overall, the site is functional, well-designed, and serves its niche market effectively.

T

Táckárna

tackarna.cz

43

Táckárna is a small hospitality business operating two branches in Brno, Czech Republic, offering fresh and locally sourced meals including breakfast, daily menus, snacks, poke bowls, and pizza. The company is part of the Con Gusto group, which is reflected in the website footer and branding. The website is professionally designed with clear navigation, mobile optimization, and comprehensive content that targets local customers seeking quality food services. Technically, the site is built on WordPress using modern plugins and frameworks, with good SEO and accessibility practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. WHOIS data is unavailable, likely due to privacy protection, but the business information on the site is consistent and trustworthy. Overall, Táckárna presents a credible and professional online presence with room for enhanced security transparency.

Divadelní restaurant Teátr is a small, premium hospitality business located in Brno, Czech Republic, offering a theater-themed dining experience with a focus on quality cuisine and beverages. It operates under the Con Gusto Restaurant Group umbrella, which manages several related restaurant and catering brands. The website provides detailed information about the restaurant's offerings, loyalty program, and contact details, targeting general audiences including theater visitors and local diners. Technically, the website uses modern frontend technologies such as Bootstrap, jQuery, and FontAwesome, with integrations for analytics and social media widgets. The site is mobile-optimized and well-structured, though no CMS or hosting provider details were detected. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site lacks visible security headers and explicit privacy or cookie policies, indicating compliance gaps. WHOIS data is unavailable, which reduces domain trustworthiness. No forms or incident response contacts were found, and SSL configuration details are unknown. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is moderate with no critical vulnerabilities detected in the content. Strategic recommendations include adding privacy and cookie policies, implementing security headers, verifying SSL configuration, and improving WHOIS transparency to enhance trust and compliance.

K

KASTNER software

kastnersw.cz

48

KASTNER software is a Czech-based software company specializing in economic, accounting, and tax software solutions tailored for small businesses and entrepreneurs. Their main products include FORM studio for electronic forms, STEREO for accounting and tax management, and ENTER for invoicing and cash register functions. The company positions itself as an experienced provider with over 30 years in the industry and a user base exceeding 10,000 customers. The website is professionally designed, consistent in branding, and provides clear information about their offerings and support services. Technically, the website leverages modern web technologies such as Blazor Server for its frontend framework, integrates multiple analytics and marketing tools including Google Tag Manager, Facebook Pixel, Smartlook, and Seznam Analytics, and employs Google reCAPTCHA v3 for bot protection. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site uses HTTPS and includes anti-bot measures, but lacks explicit security headers visible in the HTML source. No vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain raises some concerns about domain registration transparency and trustworthiness. No direct contact emails or phone numbers are present on the main page, which could impact user trust and support accessibility. Overall, the website presents a professional and trustworthy front for KASTNER software's business, but improvements in domain registration transparency, security header implementation, and clearer contact information would enhance its security posture and business credibility.

S

Seyfor, a. s.

money.cz

48

Money.cz is the official website for Money S3, an accounting software product developed and offered by Seyfor, a. s., a Czech technology company. The website targets small and medium-sized businesses, freelancers, non-profits, and accounting firms, providing comprehensive tools for invoice management, payroll, inventory, and tax compliance. The site is well-positioned in the Czech market with a strong customer base of over 20,000 users. The business model revolves around software sales, subscriptions, and value-added services including training and support.

K

Keloc

keloc.cz

41

Keloc is a small Czech Republic-based company specializing in IT sales and service, web development, digital printing, hosting, and economic software solutions. The company targets businesses and individuals seeking comprehensive IT and web services. Their market position appears local or regional with a focus on personalized service. Technically, the website is built on WordPress using the Divi theme, incorporating standard analytics and tracking tools such as Google Analytics and Google Tag Manager. The site is mobile-optimized and presents a professional design with clear navigation. Security posture is moderate with HTTPS enabled but lacks security headers and visible privacy or terms policies, which are areas for improvement. The absence of WHOIS data reduces trust signals but does not necessarily indicate malicious intent. Overall, the website is functional and professional but could enhance trust and compliance by adding privacy policies, security headers, and clearer contact information.

J

Ježek software s.r.o.

jezeksw.cz

48

Ježek software s.r.o. operates a professional accounting software product named DUEL, targeting professional accountants and accounting firms primarily in the Czech Republic. The company offers a modular, comprehensive economic system covering accounting, payroll, inventory, and related business processes, with cloud capabilities and automation features. The website is well-designed, content-rich, and provides clear contact channels and privacy compliance mechanisms. Technically, the site uses modern web technologies including Bootstrap, jQuery, and integrates multiple marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security posture is good with HTTPS enforced and cookie consent implemented, though HTTP security headers and explicit security policies are absent. WHOIS data is missing, which reduces domain trust from a registration perspective but does not detract from the professional presentation and business legitimacy of the site. Overall, the website scores well on content quality, technical implementation, and privacy compliance, with room for improvement in security transparency and domain registration verification.

E

EKONOM System

ekonom-system.cz

47

EKONOM System is a Czech Republic based small business accounting software provider with a long-standing domain registration since 1999. The website is professionally designed using WordPress and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity. The site targets entrepreneurs and small firms with an easy-to-use and affordable accounting program. Security posture is good with HTTPS and reCAPTCHA implemented, but lacks explicit security headers and published security policies. Privacy compliance is partial with a cookie consent mechanism but no visible privacy policy page. Overall, the website is trustworthy and professionally maintained, reflecting a legitimate business with a clear market focus.

E

E-Consulting Czech s.r.o.

e-cons.cz

39

E-Consulting Czech s.r.o. is a medium-sized company specializing in digital accounting, payroll, and HR outsourcing services primarily in the Czech Republic, Slovakia, and Poland. The company leverages modern cloud technologies and automation to reduce client costs and improve efficiency, positioning itself as a trusted partner with over 20 years of experience. Their key services include accounting and reporting, payroll and personnel management, tax consulting, AI accounting, and virtual CFO solutions. The website reflects a professional and modern digital presence with comprehensive client testimonials and partner integrations. Technically, the site is built on WordPress with Elementor and optimized for performance and SEO, including the use of Google Tag Manager and reCAPTCHA for security. Security posture is strong, supported by ISO 27001 certification and HTTPS enforcement, although WHOIS data is unavailable, which slightly impacts trust metrics. Overall, the company demonstrates a mature digital infrastructure and a solid market position in the finance sector.

K

KODAP

kodap.cz

45

KODAP is a well-established Czech professional services firm specializing in tax consulting, legal, accounting, payroll, and audit services. With over 30 years of experience and a large team of professionals, including tax advisors, auditors, and lawyers, KODAP serves businesses and entrepreneurs primarily in the Czech Republic and the EU. The company operates multiple offices across the country and maintains a strong market presence supported by memberships in key professional chambers and partnerships such as ETL Global. Technically, the website is built on WordPress with modern technologies including jQuery, Google Tag Manager, Google Analytics, and reCAPTCHA for security. The site is mobile-optimized, SEO-friendly, and uses cookie consent mechanisms compliant with GDPR requirements. Hosting details are consistent with the domain registrar REG-ZONER, and the domain age aligns with the company's claimed history. From a security perspective, the site uses HTTPS and implements basic security best practices such as CAPTCHA and cookie consent. However, it lacks explicit published security policies, incident response contacts, and vulnerability disclosure mechanisms. HTTP security headers could be enhanced for better protection. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, KODAP's website reflects a professional and trustworthy business with good technical implementation and moderate security posture. To improve, the company should publish comprehensive privacy and security policies and enhance security headers. These steps will strengthen compliance and trust with clients and partners.

MATRIX a.s. is a well-established Czech holding company with diversified operations spanning wood processing, automotive surface treatment solutions, automotive sales and servicing, window manufacturing, and hospitality services. The company has a strong regional presence with multiple specialized subsidiaries and a history dating back to 1991. Their website reflects a professional and consistent brand image targeting construction firms, automotive industry clients, and private customers. Technically, the site uses modern JavaScript libraries and Google Analytics for tracking, with a cookie consent mechanism in place, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent but lacks explicit security policies and advanced security headers. Overall, the site is trustworthy and professionally maintained, with room for improvement in security transparency and accessibility.

A

ARROWS, advokátní kancelář

arws.cz

48

ARROWS is a Czech-based law firm specializing in business and real estate legal services with an international footprint covering the Czech Republic, EU, Asia, Africa, and America. The firm is recognized for its expertise in AI and tax services, holding multiple prestigious awards including 'Právnická firma roku' from 2016 through 2024 and recognition by Legal 500. Their website reflects a professional and consistent brand image targeting business clients and real estate professionals. The firm emphasizes comprehensive legal and tax advisory services under one roof, facilitating efficient client service.

G

GAS - TM s.r.o.

gas.cz

48

GAS - TM s.r.o. operates the website gas.cz as a specialist retailer and service provider in heating and cooking technology, primarily serving the Czech and Slovak markets. The company offers a broad product catalog including gas boilers, stoves, water heaters, and related accessories, supported by physical retail presence and multiple partner pickup locations. The website demonstrates a mature e-commerce model with integrated customer support and installation services. Technically, the site employs a modern tech stack with Bootstrap, jQuery, and various marketing and analytics tools, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS, cookie consent management, and CAPTCHA protections, though some security headers are missing and older jQuery versions are used. Privacy compliance is well addressed with clear GDPR and cookie policies. The absence of WHOIS data slightly impacts trust but is mitigated by transparent contact information and business legitimacy indicators. Overall, the site is professional, secure, and trustworthy with room for technical and security enhancements.

ASPP (Asociace stavitelů plynovodů a produktovodů z.s.) is a professional association established in 1998 in the Czech Republic, focused on setting quality standards and certifying companies involved in the construction and reconstruction of gas and product pipelines. The association currently comprises 42 member companies employing approximately 2,500 workers with a significant annual turnover, operating both domestically and internationally. The website serves as an informational and educational platform for members and interested parties, offering documentation, membership details, and training programs. Technically, the site is built on WordPress 4.7.31 with common libraries like jQuery and Bootstrap, and uses Google Analytics for visitor tracking. While the site is functional and professionally presented, it uses outdated software versions and lacks advanced security headers and cookie consent mechanisms, which are areas for improvement. Security posture is moderate with HTTPS enabled but could benefit from updates and enhanced security practices. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

A

agropocasi.cz

agropocasi.cz

48

Agropocasi.cz is a Czech Republic based agrometeorological service providing weather forecasts and meteorological data primarily for farmers and public administration. The website is a collaborative project involving the Czech University of Life Sciences Prague (ČZU) and the Czech Hydrometeorological Institute (ČHMÚ), offering data from hundreds of measuring stations and daily forecasts. The site is built on WordPress with modern plugins and frameworks, delivering a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled and no major vulnerabilities detected, though some improvements in security headers and incident response information are recommended. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, serving a niche government and agriculture sector audience.

O

OLYMP CSMV

olympcsmv.cz

45

OLYMP CSMV is an official government sports center under the Ministry of Interior of the Czech Republic, established in 2009. The website serves as a portal for sports-related news, results, and organizational information targeting athletes, sports departments, and the general public interested in sports activities related to the Ministry. The site is built on a modern WordPress platform using Elementor and Yoast SEO, indicating a reasonable level of digital maturity. Social media integration is present, enhancing outreach and engagement. Security posture is solid with HTTPS enabled and nonce usage, but lacks some security headers and formal privacy/cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

S

SNOW.CZ

snow.cz

41

SNOW.CZ is a well-established Czech media portal focused on skiing, snow conditions, and winter sports. Founded in 2002, it offers a broad range of content including news articles, weather forecasts, ski resort reports, equipment reviews, and community forums. The site targets skiing enthusiasts and families interested in winter sports primarily in the Czech Republic and Central Europe. Its business model includes content publishing, e-shop sales, magazine subscriptions, and advertising revenue. The website demonstrates consistent branding and a professional online presence with active social media integration.

I

Innova Healthcare a.s.

i-hc.cz

42

Innova Healthcare a.s. is a Czech healthcare group providing a broad range of specialized medical services including gynecology, orthopedics, ophthalmology, radiology, and assisted reproduction. The company operates multiple clinics and healthcare facilities across the Czech Republic, targeting patients seeking modern, professional, and comprehensive healthcare. Their market position is supported by a network of subsidiaries and partner clinics, with a focus on quality and patient-centered care. Technically, the website is built on WordPress with a modern tech stack including jQuery, Swiper.js, and various analytics and marketing tools such as Google Analytics, Facebook Pixel, Smartlook, and Hotjar. The site is mobile-optimized, SEO-friendly, and includes cookie consent mechanisms compliant with GDPR. Hosting and domain registration are consistent with the company's Czech location. Security posture is good with HTTPS enforced and use of reCAPTCHA on forms, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear policies and consent mechanisms. Contact information is comprehensive and transparent. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for a healthcare provider. Strategic recommendations include enhancing security headers, publishing a formal security policy, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

S

Spaneco ltd.

spaneco.com

43

Spaneco ltd. is a technology service provider specializing in the development of multilingual websites, online configurators, and content management systems catering to a diverse clientele ranging from freelancers to international corporations. The company positions itself as a provider of comprehensive digital solutions with a focus on multilingual and multimedia web development. The website demonstrates a professional design with good navigation and mobile optimization, leveraging modern technologies such as Google Analytics, Google Tag Manager, and Google reCAPTCHA v3 to enhance user experience and security. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security measures are partially implemented with HTTPS and CAPTCHA, but additional security headers and policies are recommended to strengthen the security posture. Privacy compliance is basic, with a cookie consent mechanism present but lacking explicit privacy and terms of service documentation. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation to improve trustworthiness and compliance.

The website at ctnsnet.com currently serves only a default nginx welcome page, indicating that the site is not yet configured or actively maintained. There is no business-related content, contact information, or policies present, which severely limits the ability to assess the company's market position or services. The domain is registered since 2012 with Name.com, Inc., but the lack of active content suggests the website is either under development or abandoned. From a technical perspective, the site uses the nginx web server, but no further technologies, CMS, or frameworks are detected. The hosting provider is Name.com, Inc., and DNSSEC is not enabled. No security headers or HTTPS configuration details are available, which raises concerns about the security posture. The absence of privacy and cookie policies also indicates non-compliance with GDPR and related regulations. Security-wise, the site shows no evidence of security best practices or incident response mechanisms. The lack of HTTPS and security headers, combined with no visible contact or business information, results in a low security score. There are no signs of vulnerabilities or malicious content, but the minimal content and configuration represent a risk if the site were to be used for business purposes without proper setup. Overall, the website is currently non-functional as a business or service platform. It is recommended to fully configure the site with secure HTTPS, implement privacy and cookie policies, add clear business and contact information, and apply security best practices to improve trust and compliance.

Machart Marine is a Czech-based company specializing in the sale, servicing, and rental of boats and boat motors, with additional offerings including boating courses and custom metal fabrication for marine infrastructure. The company positions itself as a trusted dealer for major motor brands such as Honda, Suzuki, and Yamaha, targeting boating enthusiasts and professionals in the Czech Republic. Their website is built on WordPress with Elementor, featuring a modern design and good mobile optimization. The site includes clear contact information and basic privacy and cookie policies, though GDPR compliance could be improved. Security posture is moderate with HTTPS enabled but lacking some advanced security headers and incident response details. The absence of WHOIS data for the domain is a notable concern for trust and legitimacy verification. Overall, the website presents a professional and trustworthy front for a small transportation sector business.

Č

Česká obec sokolská

sokol.eu

48

Česká obec sokolská is a large, well-established non-profit organization in the Czech Republic focused on promoting sports, culture, and community engagement. With a membership base of approximately 160,000 across more than 1,000 units, it offers a wide range of sports and cultural activities, educational programs, and community events. The website reflects this mission with rich content, event calendars, and project descriptions. Technically, the site uses modern web technologies including Bootstrap, jQuery, and integrates Google Analytics and Facebook SDK for tracking and marketing. It is served over HTTPS with cookie consent mechanisms in place, indicating a moderate level of digital maturity. However, the absence of a privacy policy and terms of service pages represents a compliance gap. Security posture is generally good with HTTPS and some best practices, but lacks explicit security headers and vulnerability disclosure information. Overall, the site is professional and trustworthy but would benefit from improved privacy and security documentation.

M

Město Týn nad Vltavou

tnv.cz

46

The website tnv.cz serves as the official online portal for the municipal government of Týn nad Vltavou, Czech Republic. It provides comprehensive information and services related to city administration, public notices, cultural events, and citizen resources. The site targets local residents, businesses, and visitors, offering a range of municipal services including contact forms, public procurement details, and tourism information. The domain is well-established since 2002, reflecting a mature digital presence for the city government. Technically, the website employs a traditional HTML/CSS/JavaScript stack with the Vismo CMS platform. It integrates Google services such as reCAPTCHA for form security and Google Translate for multilingual support. The site is hosted under a Czech registrar and uses HTTPS, ensuring secure communications. Performance and mobile optimization are adequate, with good accessibility and SEO practices observed. From a security perspective, the site demonstrates good baseline practices including HTTPS enforcement and anti-bot measures on forms. However, it lacks explicit security headers and formal incident response or vulnerability disclosure policies. Privacy compliance is addressed with GDPR references and cookie policy disclosures, though no active consent mechanism is present. The WHOIS data aligns well with the website content, indicating legitimacy and trustworthiness. Overall, the website is a reliable and professional municipal portal with solid content and technical implementation. Security posture is adequate but could be enhanced with additional headers and formal policies. Privacy compliance is basic but sufficient for the site’s scope. Strategic recommendations include improving security headers, adding incident response contacts, and implementing cookie consent mechanisms to strengthen compliance and trust.

The website pivovar-regent.cz represents a brewery business likely focused on alcoholic beverages, as indicated by the age verification prompt. However, the site content is minimal, lacking substantive business information, contact details, or policies. The technical infrastructure uses the Dojo JavaScript framework and external font/icon libraries but lacks modern CMS or hosting details. Security posture is weak due to missing HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. The WHOIS data is unavailable, which raises concerns about domain legitimacy and trustworthiness. Overall, the site appears to be a small-scale brewery with limited digital maturity and security compliance.

R2B2 a.s. is a Czech-based monetization partner specializing in programmatic advertising solutions for publishers worldwide. Established in 2014, the company operates in 46 countries and collaborates with over 2000 websites and 21 SSPs to maximize advertising revenue. Their services include a broad range of ad formats, technical support, and an analytics platform to optimize publisher earnings. The website is professionally designed, mobile-optimized, and provides comprehensive privacy and cookie policies with GDPR-compliant consent mechanisms. Technically, the site leverages WordPress CMS with Gravity Forms, Yoast SEO, Google Tag Manager, and reCAPTCHA for security and analytics integration. Security posture is strong with HTTPS enforcement and consent management, though explicit security headers could be improved. Overall, the domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.

C

Czech Publisher Exchange

cpex.cz

44

Czech Publisher Exchange (CPEx) is a consortium of leading Czech online media operators providing advertising inventory through Real-Time Bidding (RTB) technology. The website positions itself as a key player in the Czech digital advertising market, targeting advertisers and media buyers seeking programmatic advertising solutions. The business model revolves around aggregating advertising spaces and facilitating efficient ad placements via RTB. The site is professionally designed, mobile-optimized, and uses modern web technologies including WordPress with the Divi theme, Google Tag Manager, and Cxense for advertising and analytics. Security posture is solid with HTTPS enforced and privacy compliance evident through cookie and privacy policies. However, the absence of WHOIS registration data and lack of explicit incident response or security policies publicly available slightly reduce trustworthiness. Overall, the site is credible and functional but would benefit from enhanced transparency in domain registration and security disclosures.

P

PŘEDVÝBĚR.CZ a.s.

predvyber.cz

49

PŘEDVÝBĚR.CZ a.s. is a Czech personnel agency specializing in recruitment services, offering efficient candidate sourcing and selection with a promise to deliver initial candidates within 5 working days. The company targets employers seeking employees and job seekers, operating with a one-time fee model rather than recurring salary-based fees. With over 17 years of market presence, it holds a medium-sized position in the Czech recruitment sector, supported by client testimonials and a broad client base. Technically, the website employs modern frontend technologies such as Bootstrap, AOS, and Swiper, and integrates Google Analytics and Leady tracking for marketing and analytics purposes. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, HTTPS is implied, and cookie consent mechanisms are implemented, but explicit security headers and detailed security policies are absent. WHOIS data is unavailable, which raises some concerns about domain registration transparency, though the website content and business information appear legitimate. Overall, the site scores well in content quality, technical implementation, privacy compliance, and business credibility, with room for improvement in security posture and WHOIS transparency.

The domain glamipixel.com is registered since early 2022 and currently resolves to a minimal website displaying a 404 Not Found error page served by nginx. There is no accessible content, metadata, or business information on the site. The domain uses Cloudflare DNS but does not have DNSSEC enabled. No privacy, cookie, or security policies are present, and no contact information or forms are available. The lack of content and security features indicates the website is either under development or abandoned. The technical infrastructure is minimal with no visible CMS or frameworks. Security posture cannot be fully assessed due to lack of HTTPS and security headers data. Overall, the site presents a low trust profile and minimal digital maturity.

G

GOLDEN ORANGE

goldenorange.cz

47

Golden Orange is a Czech-based digital agency specializing in custom web development, e-commerce, mobile applications, online marketing, bespoke software development, intelligent chatbots, and photography services. The company targets businesses and municipalities seeking tailored digital solutions and has a portfolio featuring municipal clients and corporate testimonials, indicating a solid regional presence. The website is built on Joomla CMS and incorporates modern web technologies such as jQuery, Bootstrap, and Google Analytics, reflecting a moderate level of digital maturity. The presence of an AI chatbot script suggests innovation in service offerings. Security posture is moderate; while HTTPS is presumably enabled (not explicitly confirmed), no security headers were detected, and no privacy policy or terms of service pages were found, indicating areas for compliance improvement. The absence of WHOIS data limits domain trust assessment, but the website content and client references support legitimacy. Overall, the site is professional and functional but would benefit from enhanced security and compliance transparency.