High-risk security reports

M

Metallbau Karásek s.r.o.

zamecnictvi-znojmo.cz

38

Metallbau Karásek s.r.o., operating under the brand Zámečnictví Znojmo, is a small manufacturing company specializing in locksmith and metal fabrication services including stainless steel, galvanized, and powder-coated constructions. With over 20 years of experience, the company serves the regional market around Znojmo, Czech Republic, offering custom metalworks such as staircases, railings, balconies, and shelters. The website reflects a professional and consistent brand image with clear service descriptions and contact information, supported by social media channels on Instagram and YouTube. Technically, the website is built on WordPress and utilizes common libraries such as jQuery and Bootstrap, with Google Tag Manager implemented for analytics. The site is mobile-optimized and has good SEO practices, though accessibility features are basic. Performance is moderate, and the site is fully accessible without any WAF or blocking mechanisms detected. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks important security headers and does not provide privacy or cookie policies, which are compliance gaps. There is no visible vulnerability disclosure or incident response information. The WHOIS data aligns well with the business information, indicating legitimacy and consistency. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to improve its security posture and regulatory adherence.

P

POVED - Plzeňský organizátor veřejné dopravy

idpk.cz

49

The website www.idpk.cz serves as the official portal for POVED - Plzeňský organizátor veřejné dopravy, the integrated public transportation organizer for the Plzeň region in the Czech Republic. It provides comprehensive information on public transport schedules, fare calculations, service updates, and related news. The site targets residents and visitors of the region seeking reliable transit information. The business operates as a regional transportation authority with a medium-sized footprint and a focus on public service. Technically, the website employs modern web technologies including HTTPS, Google Analytics, Google Tag Manager, and Cookiebot for cookie consent management. The site is well-structured with good mobile optimization and basic accessibility features. Performance is moderate with no significant technical debt detected. The use of reCAPTCHA indicates attention to bot mitigation. From a security perspective, the site enforces HTTPS and uses a Content-Security-Policy header to upgrade insecure requests. Cookie consent is actively managed, and tracking scripts are loaded with user consent. However, additional security headers such as HSTS, X-Frame-Options, and Referrer-Policy could enhance security posture. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website demonstrates a solid security and privacy posture appropriate for a public transportation service. The lack of WHOIS data is likely due to privacy protection and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility compliance to further strengthen trust and compliance.

C

CIRA Advisory s.r.o.

cirkularniakademie.cz

39

Cirkulární akademie, operated by CIRA Advisory s.r.o., is a specialized educational center focused on circular economy, sustainability, and ESG topics. It offers a comprehensive program of courses, workshops, and mentoring aimed at business managers, individuals, and public institutions in the Czech Republic. The website is professionally designed, well-structured, and provides clear contact information and partnership details, positioning it as a credible and authoritative source in its niche. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and uses Google reCAPTCHA v3 for form security. It employs HTTPS with a valid SSL certificate, ensuring secure communications. However, some security best practices like security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and protection. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of WHOIS data limits the ability to fully verify domain legitimacy. The website does not publish explicit security policies or incident response contacts, which could be beneficial for transparency and trust. Overall, the website presents a low-risk profile with strong business credibility and technical implementation, but it would benefit from enhanced privacy compliance features and improved security headers to reach a higher security maturity level.

The website mojevizenula.cz represents a Czech non-profit initiative named 'Moje vize nula' focused on reducing road fatalities and serious injuries through an annual student competition. The project is organized by Tým silniční bezpečnosti and Platforma VIZE 0, with co-financing from the Czech Insurance Bureau's damage prevention fund. The site provides information about the competition, project registration, mentoring, and contact details for coordinators. It targets students, educators, and road safety professionals, aiming to foster innovative projects that improve traffic safety. Technically, the site uses modern JavaScript libraries such as jQuery, Foundation, Slick Carousel, and Lightbox2, with Google Analytics and Facebook Pixel integrated for analytics and marketing, controlled by a cookie consent mechanism that defaults to denying tracking until user consent. Security posture is moderate with no visible security headers or published security policies, and no vulnerability disclosure mechanisms are present. The domain registration is consistent and transparent, supporting the legitimacy of the project. Overall, the website is professionally designed, content-rich, and trustworthy, though it lacks some formal privacy and security documentation.

The website 'Učme se přežít' is an educational platform focused on motorcycle safety and road safety awareness primarily in the Czech Republic. It offers various training courses, publications, and organizes events aimed at improving motorcycle handling skills and safety knowledge. The site is supported by partnerships with government agencies and safety organizations, enhancing its credibility within its niche market. Technically, the website employs modern web technologies such as the Svelte framework and ES modules, providing a responsive and user-friendly experience. However, the absence of privacy and cookie policies indicates a gap in compliance with data protection regulations. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks visible security headers and formal incident response contacts. The missing WHOIS data reduces domain trustworthiness, though the content and partnerships suggest legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security practices.

The website 'Člověk VS silnice' operated by Tým silniční bezpečnosti is a Czech Republic based non-profit platform focused on road safety education and awareness. It targets general road users, motorcyclists, and safety advocates by providing educational content on topics such as first aid, seatbelt usage, and reaction times. The site maintains partnerships with various organizations to support its mission. Technically, the website uses modern JavaScript libraries including jQuery, Foundation Sites framework, and integrates Google Analytics and Facebook Pixel for analytics and marketing. The site is mobile optimized and provides a cookie consent mechanism compliant with GDPR principles, although it lacks explicit privacy policy and terms of service pages. Security posture is moderate with HTTPS enabled but missing security headers and explicit incident response contacts. Overall, the domain registration data supports legitimacy with consistent WHOIS information and an appropriate domain age. The website is safe for general audiences with no adult or questionable content detected.

A

ALTIMA LZ s.r.o.

altima.cz

47

ALTIMA LZ s.r.o. operates the website altima.cz, specializing in the retail of reflective safety products such as bands, vests, and patches designed to enhance visibility and safety for pedestrians, cyclists, children, and pets. The company holds a strong market position in the Czech Republic, emphasizing product quality and compliance with European safety standards. The website is well-structured, mobile-optimized, and integrates modern technologies including jQuery, Bootstrap, Google Analytics, and Facebook SDK, supported by a comprehensive cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are absent. The lack of WHOIS data for the domain reduces trustworthiness and should be investigated further. Overall, the site presents a professional and trustworthy e-commerce platform with room for improvement in transparency and security documentation.

R

RENGL, s.r.o.

rengl.cz

43

RENGL, s.r.o. operates a large network of poster advertising sites across Czech Republic, Slovakia, and Poland, offering poster posting and printing services. The company targets businesses and organizations seeking outdoor advertising solutions, positioning itself as a leading regional provider with a network of 5,000 poster sites in 170 cities. The website is professionally designed, mobile optimized, and provides clear service descriptions and contact information. Technically, the site uses modern JavaScript libraries for UI enhancements but lacks some advanced security headers and cookie consent mechanisms. The WHOIS data is missing, which reduces domain trust, but the website content and contact details appear legitimate and consistent with the business claims. Overall, the site scores well on content quality and business credibility but could improve privacy compliance and security posture.

The website for Asociace krajů České republiky, a government association representing Czech regional governments, is currently non-functional due to a missing template error. The site runs on a Django 3.2.20 framework with a MySQL backend and is hosted on an AlmaLinux server with Apache and mod_wsgi. Despite using HTTPS and some security headers, the site exposes detailed debug information and internal paths due to DEBUG mode being enabled, which is a significant security risk. No privacy, cookie, or terms of service policies are present, and no contact information is available on the homepage. The site lacks advertising and analytics integrations, indicating minimal user tracking.

Tým silniční bezpečnosti (TSB) is a Czech non-profit organization operating under Bezpečně na silnicích o.p.s. since 2010, focused on reducing serious traffic accidents through preventive programs and educational activities. The organization targets a broad audience including children, seniors, and cyclists, delivering road safety education and awareness campaigns. The website reflects a well-established brand with multiple projects and partnerships with reputable entities such as Škoda Auto and the Czech Police. Technically, the site uses modern web technologies including jQuery, Foundation framework, and integrates Google Analytics and Facebook Pixel for analytics and marketing purposes. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR principles, although explicit privacy and terms of service documents are not found. Security posture is good with HTTPS enforced and consent revocation scripts, but lacks visible security headers and formal incident response information. Overall, the domain registration aligns with the organization's profile, supporting legitimacy and trustworthiness.

S

Sladký Méďa s.r.o.

sladkymeda.cz

46

Sladký Méďa s.r.o. operates a confectionery and café business located in Olomouc, Czech Republic, with a strong local presence and over a decade of experience. The company offers a variety of freshly made pastries, macarons, savory snacks, and specialty coffee, complemented by family-friendly amenities such as a children's play area and outdoor seating. They also provide custom cake orders for special occasions, positioning themselves as a trusted local hospitality provider. Technically, the website is built on a modern stack including jQuery, Bootstrap, and Google services, managed via the Eliška CMS platform. The site is mobile-optimized and includes essential SEO and accessibility features. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA v3 for form protection, and implements a cookie consent mechanism compliant with GDPR. However, the absence of WHOIS registration data and missing security headers slightly reduce trustworthiness. Overall, the website is professional, secure, and user-friendly, serving its target audience effectively.

C

Císařské sklepy Horák

cshorak.cz

38

Vinařství Horák is a small Czech winery with a rich historical background dating back to the Holy Roman Empire era. The business focuses on producing and selling quality wines, including white, red, and rosé varieties, through an e-commerce platform and local wine tastings. The website is professionally designed using WordPress and WooCommerce, featuring modern plugins such as LayerSlider and WPBakery Page Builder. The presence of an age verification gate aligns with the nature of the business selling alcoholic beverages. Security posture is adequate with HTTPS enabled, but could be improved by adding security headers and a cookie consent mechanism. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the website presents a trustworthy and professional image suitable for its target audience of wine consumers and enthusiasts.

V

Výstaviště Flora Olomouc, a.s.

flora-ol.cz

47

Výstaviště Flora Olomouc, a.s. is a regional exhibition and event management company based in Olomouc, Czech Republic. The company operates multiple subdomains dedicated to exhibitions, services, and park management, targeting general public visitors interested in cultural, botanical, and event experiences. Their market position is strong regionally, offering a variety of services including event hosting, park maintenance, and rentals. The website is professionally designed with clear navigation and multilingual support, reflecting a mature digital presence. Technically, the site uses modern frameworks such as Bootstrap, integrates Google Tag Manager, Facebook Pixel, and Google reCAPTCHA for analytics and security, and implements GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though security headers and incident response information are lacking. The absence of WHOIS data is a concern for domain legitimacy verification but does not detract from the professional presentation and contact transparency. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

Daňový poradce Brno - Marek Hanáček is a small, locally focused tax advisory and accounting service provider operating primarily in Brno and Uherské Hradiště, Czech Republic. The business offers a comprehensive range of tax and accounting services including tax return preparation, accounting management, payroll processing, and client representation before tax authorities. The website reflects a professional service with clear contact information and a user-friendly design. Technically, the site is built on WordPress using Elementor and Astra theme, with integration of Google Analytics, Tag Manager, and reCAPTCHA for security on contact forms. Security posture is good with HTTPS and reCAPTCHA, but lacks some advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and well-positioned for its target market.

G

GLOB-TRADE td, s.r.o.

globetrade.cz

44

GLOB-TRADE td, s.r.o. is a Czech-based company specializing in the sale, installation, and servicing of garage doors, entrance gates, barriers, and related parking systems, primarily as an authorized dealer of Hörmann products since 2002. The company targets both residential and commercial customers within the Czech Republic, offering a comprehensive product range including garage doors, industrial doors, gates, shutters, and custom locksmith metalwork. Their business model combines direct sales, professional consultation, and after-sales service, supported by an e-commerce platform. The website reflects a medium-sized enterprise with a consistent brand presence and recognized certifications such as ISO 9001.

I

ISOTRA a.s.

isotra.cz

49

ISOTRA a.s. is a well-established Czech manufacturer specializing in interior and exterior shading solutions including blinds, roller shutters, pergolas, and related products. With over 30 years in the market and exports to 46 countries, ISOTRA holds a strong position as a technological leader in its industry. The company emphasizes quality, innovation, and environmental sustainability, supported by its own tooling and component manufacturing facilities. The website reflects a professional and comprehensive digital presence, targeting both B2B and end consumers with multilingual support and configurator tools. Technically, the site uses modern JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear GDPR policies and cookie consent mechanisms. Overall, ISOTRA demonstrates a mature digital infrastructure aligned with its business stature.

M

MTM Transport a.s.

mtmtransport.cz

44

MTM Transport a.s. is a medium-sized Czech freight forwarding and logistics company specializing in international and domestic transport services, with a strong focus on Northern and Eastern Europe, particularly Scandinavia and the Baltic states. The company offers comprehensive logistics solutions including full truck loads, consolidated shipments, warehousing, customs clearance, and real-time GPS tracking. Established since 2004, MTM Transport has built a reputation for professionalism and reliability, supported by experienced staff and a modern fleet. The website infrastructure is built on the Webflow platform, leveraging modern web technologies such as Google Tag Manager, reCAPTCHA, and Cookiebot for consent management. The site is well-optimized for performance and mobile responsiveness, with clear navigation and professional design. Security measures include HTTPS enforcement and form protection via reCAPTCHA, although additional security headers could enhance the security posture. While the WHOIS data for the domain is unavailable, which slightly reduces trustworthiness, the website content, contact information, and GDPR compliance statements indicate a legitimate and professional business. No critical security vulnerabilities or suspicious content were detected. Overall, the site demonstrates a solid digital presence aligned with the company's business operations. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and maintaining regular audits of third-party scripts to further strengthen security and compliance.

H

Hotel Kraví Hora

kravihora.cz

49

Hotel Kraví Hora is a small hospitality business located in Bořetice, Czech Republic, specializing in accommodation, dining, conference hosting, wellness, and wine tourism services. The website presents a professional and consistent brand image targeting corporate teams, sports clubs, couples, families, and groups interested in wine and leisure experiences in the South Moravian region. The business leverages partnerships with local wine producers and regional tourism organizations to enhance its market position. Technically, the website uses a custom CMS by ActiveMedia and incorporates modern JavaScript libraries such as jQuery and Google Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Cookie consent and privacy policies are implemented in compliance with GDPR, reflecting a good level of digital maturity. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms but lacks publicly available security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data due to privacy protection limits transparency but is typical for small hospitality businesses. Overall, the website is trustworthy and professionally maintained, with recommendations to enhance security posture by publishing security policies, incident response information, and adding security headers. Continued monitoring of third-party scripts and compliance with privacy regulations is advised.

A

Auto Yetti s.r.o.

autoyetti.eu

49

Auto Yetti s.r.o. operates as a Czech-based used car dealership offering a broad selection of pre-owned vehicles, car purchase services, and financing options. The company targets consumers in the Czech Republic seeking reliable and affordable used cars, positioning itself as a trusted local player with a professional online presence. The website is built on WordPress with common plugins and includes a modern design, clear navigation, and mobile optimization. Privacy and cookie policies are well implemented, reflecting GDPR compliance. Security posture is adequate with HTTPS and cookie consent, though additional security headers and incident response information could enhance trust. WHOIS data is privacy protected, which is typical for small businesses but reduces transparency. Overall, the site is professional, trustworthy, and serves its business purpose effectively.

A

Autosklo Hleďa

autosklo-hleda.cz

42

Autosklo Hleďa is a regional automotive service provider based in the Czech Republic, specializing in automotive glass repair and replacement, air conditioning servicing, tire services, general vehicle repairs, and vehicle rental. The company operates multiple branches across the Střední Morava region, including Vyškov, Kroměříž, Prostějov, and Šumperk, and maintains partnerships with numerous insurance companies, enhancing its market credibility. The website presents a professional and user-friendly interface with clear navigation and comprehensive contact information, targeting vehicle owners in the region. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Owl Carousel, and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and includes GDPR-compliant forms and cookie consent mechanisms, reflecting awareness of privacy regulations. However, the absence of explicit security headers and lack of published security policies suggest room for improvement in security posture. Security-wise, the site uses HTTPS and secure forms with GDPR consent notices, but no advanced security policies or incident response contacts are evident. The WHOIS data is missing, which reduces domain trustworthiness, but the website content and business information appear legitimate and consistent with a small regional service provider. Overall, the website is functional, professional, and compliant with basic privacy requirements, but it would benefit from enhanced security measures and transparency regarding domain registration details to improve trust and resilience against potential threats.

O

OSIGENO s.r.o.

profilzadavatele-vz.cz

44

The website profilzadavatele-vz.cz serves as a certified electronic tool for public procurement tenders in the Czech Republic, operated by OSIGENO s.r.o. It provides a platform for public contracting authorities and suppliers to manage and access public tenders, with a focus on compliance with Czech procurement laws. The site targets government entities, suppliers, and the general public interested in public contracts. The business is positioned as a trusted provider of electronic tendering services with official certifications and audit compliance. Technically, the site uses legacy JavaScript libraries such as jQuery and CKEditor, with a custom CMS and basic mobile and accessibility features. Security posture is moderate, with password-protected login forms but lacking advanced security headers and cookie consent mechanisms. No blocking or WAF challenges were detected, and the domain is well established since 2011, consistent with the business history. Overall, the site is functional and trustworthy but could improve in security and privacy compliance aspects.

I

Mobilní app

inforymarov.cz

44

The website 'inforymarov.cz' is a Czech language site titled 'Mobilní app' that appears to be a small-scale business or project with a domain registered since 2013. The site uses a modern Angular 7.1.4 frontend framework and integrates several third-party services including Google Analytics, Google Tag Manager, Google Identity Services, and Packeta widget for logistics or shipping. The technical infrastructure is moderately modern but lacks visible backend or CMS indicators. Security posture is basic with no detected security headers or published security policies, and no contact or privacy information is provided, which limits trust and compliance. The site content is minimal and lacks descriptive business information, contact details, or legal policies, which impacts business credibility and user trust. Overall, the site is accessible without WAF or blocking mechanisms, but improvements in privacy compliance, security headers, and business transparency are recommended.

VirtualTravel.cz is a Czech-based platform operated by Panoramas s.r.o. that offers the largest database of virtual tours worldwide, focusing on tourist destinations, cities, municipalities, companies, and institutions. The website leverages advanced imaging technologies such as 360-degree virtual tours, gigapixel images, and 360 videos to provide immersive experiences. It also offers services to create virtual tours for clients, promoting their businesses or locations with high photographic quality and extensive online visibility. The platform targets tourists, businesses, and local governments seeking to enhance their digital presence and attract visitors. Technically, the website uses modern web technologies including Bootstrap for responsive design, Leaflet.js for mapping, Google Fonts, Google Adsense for advertising, and Google Tag Manager for analytics and tracking. The site is mobile-optimized with good SEO practices and moderate performance. However, it lacks some security headers and explicit privacy policies, which could be improved to enhance security and compliance. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. There are no signs of vulnerabilities or malicious content, but the absence of security headers and detailed privacy policies indicates room for improvement. The WHOIS data is unavailable, likely due to privacy protection, but the website's consistent branding, long operational history, and professional content support its legitimacy. Overall, VirtualTravel.cz presents a professional and trustworthy platform with a strong business model in virtual tourism. Strategic recommendations include implementing comprehensive privacy and security policies, adding security headers, and providing clearer contact and incident response information to strengthen trust and compliance.

A

Aquavparku Kyjov s.r.o.

aquavparku.cz

45

Aquavparku Kyjov s.r.o. operates a family-oriented aquatic leisure and wellness center in Kyjov, Czech Republic. The website showcases a variety of services including indoor pools, sauna world, summer outdoor areas, wellness treatments, relaxation massages, and swimming courses. The business targets families and individuals seeking recreational water activities and wellness experiences. The company offers online ticket sales and has an active social media presence, positioning itself as a local leader in aquatic leisure services. Technically, the website employs modern JavaScript libraries such as GSAP, Swiper, and LightGallery, indicating a contemporary and interactive user experience. The site is mobile-optimized with good navigation and SEO practices. However, no explicit CMS or hosting provider information was detected. Performance is moderate, with room for improvement in accessibility features. From a security perspective, HTTPS is implied but no detailed security headers or policies were found. The absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. No vulnerability disclosures or incident response contacts are provided, which could impact security readiness. The missing WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness. Overall, the website is professional and content-rich, serving its business purpose well. However, improvements in privacy compliance, security hardening, and domain registration transparency are recommended to enhance trust and regulatory adherence.

M

Martin Winkler

martinwinkler.cz

45

Martin Winkler is a seasoned freelance web developer based in Brno, Czech Republic, offering professional web design, responsive HTML coding, WordPress CMS development, and custom e-shop creation services. With 17 years of experience, the business emphasizes reliability, speed, and clarity in delivering client projects. The website showcases a comprehensive portfolio of completed projects and client references, positioning the company as a trusted local expert in web development services. Technically, the website is built on WordPress with modern web technologies including HTML5, CSS3, JavaScript, and SVG graphics. It integrates Google Analytics for visitor tracking and Google reCAPTCHA for form security. The site is well-optimized for mobile devices, fast loading, and includes a cookie consent mechanism compliant with GDPR principles, although no explicit privacy policy page was found. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements best practices such as automated backups and quarterly manual updates. However, explicit security headers are not detected, and no published security or incident response policies exist. The absence of WHOIS data limits domain registration transparency but does not detract from the professional presentation and trustworthiness of the business. Overall, the website demonstrates a high level of professionalism, technical maturity, and security awareness suitable for a small freelance business. Strategic improvements include publishing privacy and security policies, enhancing security headers, and improving transparency around domain registration to further strengthen trust and compliance.

M

m-ARK Marketing a reklama, s.r.o

m-ark.cz

44

m-ARK Marketing a reklama, s.r.o is a Czech Republic based marketing and advertising agency established since 1991. The company offers a range of services including brand marketing, creative design, photo and video production, and publishes travel-related magazines. The website reflects a professional and consistent brand image targeting businesses seeking marketing and creative services. The domain age and WHOIS data confirm a long-standing market presence, supporting business credibility. Technically, the website uses modern web technologies such as Google Fonts, Google reCAPTCHA for form security, and a responsive design with a slider component. However, no CMS or advanced frameworks are explicitly detected. Performance is moderate with basic SEO and accessibility features. The site lacks explicit security headers and privacy/cookie policies, which are important for compliance and user trust. From a security perspective, HTTPS is implied and Google reCAPTCHA is implemented, indicating some security awareness. However, the absence of security headers and privacy policies represents compliance and security gaps. No incident response or vulnerability disclosure information is provided. No WAF or blocking mechanisms are detected, and no suspicious content is found. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced security practices and privacy compliance to improve its security posture and user trust.

A

Asociace nestátních otevřených památek, z.s.

asociacepamatek.cz

45

Asociace nestátních otevřených památek (ANOPA) is a Czech non-profit association founded in 2021 to represent and support operators of non-state open heritage sites. The organization focuses on advocacy, marketing support, and knowledge sharing among its members. The website reflects a professional and consistent brand image targeting cultural heritage stakeholders and enthusiasts in the Czech Republic. Technically, the site uses modern web technologies including Google Tag Manager and a CMS platform, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and secure forms, though it lacks some security headers and explicit incident response policies. Privacy compliance is addressed with GDPR-aligned policies and cookie consent mechanisms. The absence of WHOIS data reduces domain trust but the website content and contact information support legitimacy. Overall, the site is well-positioned as a niche non-profit entity with room for security and transparency improvements.

The website www.ticketmaster.cz is currently inaccessible due to a bot detection and security challenge page that blocks normal browsing activity. This prevents access to the actual website content, including business information, policies, and contact details. The domain WHOIS query returned no registration data, indicating either privacy protection or an unregistered domain, which limits trust assessment. The site uses Google Tag Manager and Google reCAPTCHA Enterprise for tracking and bot mitigation, but no other technical or business details are available. Overall, the website's digital presence is currently blocked, resulting in a low confidence security and business analysis.

M

Městské informační centrum Kolín

kolinzije.cz

49

Kolín žije is an official municipal portal dedicated to tourism, culture, and leisure activities in the city of Kolín, Czech Republic. It provides comprehensive information about local events, gastronomy, accommodation, and practical tips for visitors and residents. The website is operated by the city's information center and serves as a key digital touchpoint for promoting local culture and tourism. The portal maintains a consistent brand identity aligned with the city and integrates social media channels to enhance community engagement. Technically, the site is built on the Vismo CMS platform, leveraging modern web technologies including Google Tag Manager, Google Analytics, and OpenWeatherMap API for weather updates. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a good user experience across devices. Security-wise, the website enforces HTTPS, implements cookie consent mechanisms compliant with GDPR, and avoids exposing sensitive data. However, it lacks a published security policy and incident response contacts, which are recommended for enhanced trust and compliance. Overall, the site demonstrates a solid digital presence with moderate tracking and good privacy practices, suitable for its government and tourism-focused mission.

C

Uherský Brod - Informační a turistický portál města

cojevbrode.cz

47

The website www.cojevbrode.cz serves as the official informational and tourist portal for the city of Uherský Brod in the Czech Republic. It provides residents and visitors with local news, event calendars, tourist tips, and service information. The site is positioned as a municipal government service portal, targeting local citizens and tourists interested in the city’s cultural and recreational offerings. Key services include event promotion, local news dissemination, and tourist information. The website is well-branded and consistent with municipal identity, featuring official contact details and social media presence. From a technical perspective, the site employs modern frontend technologies including the Foundation framework, jQuery, Google Analytics, Facebook Pixel, and Google Custom Search Engine. It is mobile-optimized with good navigation and content relevance. However, some SEO and accessibility features could be improved. The site loads scripts asynchronously to enhance performance, but no CMS or hosting provider details were identified. Performance is moderate with room for optimization. Security posture is moderate; HTTPS is implied but no explicit security headers were detected in the provided data. The site uses reCAPTCHA to mitigate bot activity and includes tracking pixels for analytics and marketing. However, there is a lack of explicit privacy and cookie policies, which is a compliance gap. No vulnerabilities or exposed sensitive data were found in the analysis, but security best practices such as security headers and privacy disclosures should be implemented. Overall, the site is a legitimate municipal portal with good content and user experience but has gaps in privacy compliance and domain registration transparency. The missing WHOIS data reduces trust from a domain registration standpoint, though the website content and official references support its legitimacy. Strategic improvements in security headers, privacy policies, and WHOIS transparency are recommended to enhance trust and compliance.

D

DATALAN, a.s.

digitalnemesto.sk

46

Digitálne mesto is a Slovak online portal providing electronic services primarily for municipalities and citizens. Operated by DATALAN, a.s., the platform offers a range of e-services and information relevant to local governments and residents. The website is professionally designed, targeting Slovak municipalities with a clear focus on government digital transformation. The company holds recognized ITAPA awards, indicating a reputable market position in the regional government technology sector. Technically, the site uses standard web technologies including jQuery, Font Awesome, and Google Fonts, with a custom CMS or platform. While the site is functional and moderately optimized for mobile, there is room for improvement in accessibility and performance. Security posture is adequate with HTTPS assumed, but lacks explicit security headers and policies. Privacy compliance is partial, with no cookie consent mechanism or detailed privacy policy visible. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security transparency.

B

Behnshop

behnshop.de

47

Behnshop is a German e-commerce retailer specializing in a wide range of alcoholic beverages, including spirits, liqueurs, and regional classics. The website positions itself as a trusted source for well-known brands and offers a comprehensive online shopping experience targeting mature consumers interested in quality spirits. The business appears to be medium-sized with a history dating back to 2014, likely affiliated with the Waldemar Behn GmbH brand portfolio. Technically, the site employs modern web technologies such as jQuery, Font Awesome, and integrates an advanced accessibility tool (digiaccess) to enhance usability for users with disabilities. The platform is likely built on a commercial e-commerce CMS, possibly Shopware, and is hosted with domain control services provided by GoDaddy.

B

Behn Getränke

behn-getraenke.de

42

Behn Getränke is a regional beverage wholesaler and retailer operating in Schleswig-Holstein, Germany, with a long-standing family business history dating back to 1892. The company offers beverage markets in multiple locations and provides gastronomy consulting and event inventory services. The website is built on WordPress with common plugins such as Yoast SEO and WPBakery Page Builder, indicating a moderate level of digital maturity. Accessibility is a strong focus, with an advanced accessibility tool integrated to support various user needs. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

S

Stabsstelle Prävention - Fachstelle gegen sexualisierte Gewalt der Nordkirche

kirche-gegen-sexualisierte-gewalt.de

47

The website represents the Stabsstelle Prävention, a specialized non-profit church-affiliated organization focused on prevention, intervention, and support related to sexualized violence within the Evangelical Church in Northern Germany (Nordkirche). It provides resources, contact points, and educational materials for affected individuals and church staff. The site is positioned as a trusted regional authority with clear church ties and a focus on transparency and support. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries like jQuery and stickybits for UI enhancements. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced, but lacks some advanced security headers and explicit incident response contacts. Privacy compliance is mostly met with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its mission. The domain WHOIS data is limited but does not raise significant concerns. No blocking or WAF interference was detected, allowing full content access and analysis.

T

Travelbakers

travelevo.cz

45

The website www.travelevo.cz represents TravelEVOlution, a niche event focused on sustainable and authentic travel experiences held in Brno, Czech Republic. The event is organized by Travelbakers and targets professionals and enthusiasts in the travel and tourism sector. The site provides detailed program information, workshops, and partner collaborations, reflecting a well-structured and professional business model in the hospitality industry. Technically, the site is built on Drupal 10, uses modern web technologies, and integrates Google Tag Manager for analytics. The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS enabled, but lacks some security headers and visible privacy or cookie policies, which are recommended for compliance and trust. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for small businesses. Overall, the site is professional, content-rich, and trustworthy with room for improvement in privacy compliance and security transparency.

C

CTP

ctp.cz

49

CTP is a leading European real estate company specializing in the development and management of logistics and industrial properties across 10 countries. The website reflects a mature, professional business with a strong market position and comprehensive service offerings tailored to commercial clients. The technical infrastructure leverages WordPress CMS with modern performance and multilingual enhancements, ensuring a fast and accessible user experience. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates high professionalism and trustworthiness, supporting CTP's brand as a major player in the real estate sector.

C

Cykloserver.cz

cykloserver.cz

39

Cykloserver.cz is a well-established Czech cycling news and community platform founded in 2000, serving hobby cyclists and enthusiasts primarily in the Czech Republic and Slovakia. The site offers a variety of content including cycling news, event calendars, trip tips, and an online cycling atlas, supported by partnerships with relevant cycling organizations. The business model appears to be content-driven with advertising and partner promotions. Technically, the website uses standard web technologies with HTTPS and Google Analytics integration, hosted by a Czech hosting provider. While the site is functional and content-rich, it lacks formal privacy and cookie policies and does not implement advanced security headers, which are areas for improvement. The security posture is moderate with secure forms and HTTPS but missing some best practices. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

V

VšĮ „Mėlyna ir geltona“

dronatonas.lt

44

DRONATONAS is a Lithuanian non-profit initiative organized by VšĮ „Mėlyna ir geltona“ focused on supporting Ukraine by raising funds to purchase and send drones to Ukrainian forces. The website serves as a campaign platform providing information about donation methods, events like marathons and velomarathons, and merchandise sales. It targets both private individuals and businesses interested in contributing to the cause. The organization maintains a clear and consistent brand presence with professional content and active social media channels. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and LiteSpeed Cache, ensuring good performance and SEO optimization. The site is mobile-friendly and accessible with a cookie consent mechanism compliant with GDPR regulations. Security posture is adequate with HTTPS enforced, though some security headers could be improved. No incident response or security policy information is provided. WHOIS data aligns with the website's Lithuanian identity and non-profit nature, though domain creation date appears anomalous. Overall, the site is trustworthy, professional, and well-positioned within its niche of charitable support for Ukraine.

M

Monte Bú Restaurant a steakhouse

monte-bu.cz

42

Monte Bú Restaurant a steakhouse is a premium dining establishment located in Brno, Czech Republic, specializing in exclusive steaks from their own dry-aging cellar, grilling, and premium American and Mexican cuisine. The restaurant also offers a unique collection of exclusive rums and rum tastings led by a rum sommelier. The business operates under the Con Gusto Restaurant Group umbrella, indicating a solid partnership and brand backing. Their market position is that of a unique steakhouse with a focus on quality and gourmet experiences, targeting local residents and visitors seeking high-end dining. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, Facebook Pixel, and other JavaScript libraries to deliver a responsive and interactive user experience. The site is mobile-optimized and uses HTTPS with good SSL configuration, though it lacks some security headers and formal privacy documentation. The cookie consent mechanism is implemented, reflecting some level of privacy compliance. From a security perspective, the site benefits from HTTPS and no visible exposed sensitive data. However, the absence of WHOIS data raises concerns about domain registration legitimacy, which impacts overall trust. No privacy policy or terms of service pages were found, which is a compliance gap. The site uses tracking and advertising tools with consent defaults denying ad and analytics storage, indicating some privacy awareness. Overall, Monte Bú presents a professional and trustworthy online presence for a small hospitality business, but improvements in transparency, security headers, and domain registration verification are recommended to enhance trust and compliance.

C

CITY-TOOLS, s.r.o.

citytools.cz

45

CITY-TOOLS, s.r.o. operates a professional outdoor advertising platform in the Czech Republic, offering Citylight, billboard, and adhesive foil advertising solutions. The company targets businesses and individuals seeking effective outdoor marketing channels. The website is well-structured, visually consistent, and provides clear contact information, supporting a positive market presence in the local advertising sector. Technical infrastructure leverages common web technologies such as jQuery, Bootstrap, and Google reCAPTCHA, indicating a moderate level of digital maturity. The site is mobile-optimized and includes cookie consent mechanisms, reflecting awareness of privacy compliance requirements. Security posture is generally good with HTTPS enforced and reCAPTCHA integration; however, the absence of security headers and incident response information suggests room for improvement. The lack of WHOIS data limits domain legitimacy verification, which could impact trust from a security perspective. Overall, the website is professional and functional, with moderate risk due to incomplete domain registration transparency.

W

Wastex, spol s r.o.

wastex.cz

41

Wastex, spol s r.o. is a Czech Republic-based company founded in 1990 specializing in the wholesale and retail distribution of fresh fruit, vegetables, and food products. The company serves a broad range of clients including corporate dining facilities, schools, hotels, restaurants, social care institutions, and retail customers primarily in the Zlín region and surrounding districts. Their business model combines daily deliveries, brick-and-mortar retail, and specialized services such as replacement fulfillment and supplier partnerships. The website reflects a medium-sized regional wholesaler with a professional online presence and clear contact information.

S

StaniOn

stanion.cz

37

StaniOn s.r.o. is a Czech Republic based medium-sized construction company specializing as a general contractor for various building projects including residential, industrial, and infrastructure developments. The company emphasizes quality, innovation, and environmental responsibility, holding ISO certifications and operating since 2009. Their website demonstrates a professional digital presence with clear service offerings, client testimonials, and partner affiliations. Technically, the site is built on WordPress with modern tracking and analytics tools, optimized for mobile and SEO. Security posture is good with HTTPS and no obvious vulnerabilities, though security headers and explicit privacy policies are lacking. The absence of WHOIS data limits domain legitimacy verification but the business content and branding suggest a trustworthy entity. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and compliance.

A

Asociace soukromého zemědělství ČR

asz.cz

47

The website www.asz.cz represents the Asociace soukromého zemědělství ČR, a Czech association dedicated to private farming and family farms. It serves as an information hub providing news, events, advocacy, and educational resources for farmers and agricultural stakeholders in the Czech Republic. The site is professionally designed with a clear navigation structure and regularly updated content, targeting a medium-sized audience within the agricultural sector. Technically, the website employs modern web technologies including Google Tag Manager for analytics, Leaflet.js for mapping, and a consent management platform to comply with cookie regulations. The site is mobile-optimized and performs moderately well, though some accessibility features could be enhanced. Security posture is good with HTTPS enforced, but lacks advanced security headers and explicit security policies. From a security and compliance perspective, the site does not expose sensitive data and uses a consent mechanism for cookies, but lacks visible privacy policy and terms of service pages, which could be improved for better GDPR compliance. No WHOIS data is available, likely due to privacy protection, but the website content and structure indicate a legitimate and established organization. Overall, the website is a trustworthy and professional platform for its target audience, with recommendations to enhance security headers, publish clear privacy and security policies, and provide incident response contacts to strengthen its security posture and compliance.

S

Sdružení místních samospráv České republiky, z. s.

smscr.cz

49

Sdružení místních samospráv České republiky, z. s. is a Czech non-profit association representing local self-governments. The website serves as an official portal providing legislative information, working groups, member benefits, media relations, and conference organization. The target audience includes local government officials and municipalities within the Czech Republic. Technically, the website uses modern JavaScript libraries such as jQuery, Bootstrap, and Swiper.js, with a cookie consent mechanism and Google Analytics integration. Security posture is moderate with HTTPS usage and reCAPTCHA, but lacks visible security headers and explicit privacy policies. WHOIS data is unavailable, limiting domain trust verification. Overall, the site is professional, content-rich, and trustworthy for its intended audience.

S

Spolek pro obnovu venkova ČR

spov.org

48

Spolek pro obnovu venkova ČR is a Czech non-profit association dedicated to rural renewal and community development across the Czech Republic. The website serves as the official portal providing information about the association's activities, regional organizations, projects, conferences, and publications. It targets municipalities, local communities, and stakeholders interested in rural development. The site is well-structured with clear navigation and content relevant to its audience. Technically, the website employs modern frontend technologies including jQuery, Bootstrap 4.4.1, Swiper.js for slideshows, and mmenu.js for mobile menus. The site is mobile responsive and includes cookie consent mechanisms indicating GDPR awareness. However, no explicit privacy policy or terms of service pages were found in the provided content. From a security perspective, HTTPS is used, and cookie consent is implemented, but security headers and advanced security policies are not evident. No vulnerability disclosure or incident response information is provided. The WHOIS data for the domain is unavailable, which reduces trustworthiness from a domain registration perspective, though the website content and structure suggest a legitimate organization. Overall, the website is professional, content-rich, and serves its purpose well. Strategic improvements include adding explicit privacy and security policies, enhancing security headers, and verifying domain registration details to improve trust and compliance.

Holidayinfo.cz is a Czech-focused online portal providing comprehensive information about holiday resorts, including ski areas, accommodation, webcams, weather forecasts, and related tourist services. The website targets tourists and visitors interested in Czech recreational destinations, offering seasonal content for both summer and winter activities. The business operates as an information service platform with a niche regional focus, leveraging partnerships with related service providers such as accommodation platforms and ski pass services. The domain's long registration history since 2000 supports its established presence in the market. Technically, the website employs a custom JavaScript-based platform with libraries such as jQuery and Modernizr, integrated with Google Tag Manager and Google Analytics for tracking. The site uses HTTPS and implements a cookie consent banner, indicating basic privacy compliance. However, it lacks visible privacy policy and terms of service pages, and no direct contact information is provided on the homepage. The design is professional and consistent, though mobile optimization and accessibility are basic. From a security perspective, the site benefits from HTTPS and cookie consent mechanisms but lacks published security policies, incident response contacts, and advanced security headers in the HTML content. No vulnerabilities or suspicious patterns were detected. The WHOIS data confirms domain legitimacy and consistency with the website's content and business focus. Overall, Holidayinfo.cz presents a trustworthy and functional information portal with room for improvement in privacy disclosures, security transparency, and contact availability. Strategic enhancements in these areas would strengthen user trust and compliance posture.

S

Sdružení Český ráj

zapovestmiceskehoraje.cz

44

The website 'Za pověstmi Českého ráje' is a regional tourism initiative focused on promoting family-friendly interactive hiking games and storytelling in the Czech Paradise region. It targets families with children and tourists interested in cultural and natural heritage. The site is supported by regional partners and associations, enhancing its credibility and market position. The business model revolves around engaging visitors through gamified experiences and providing practical travel tips and event information. Technically, the website is built on Drupal 10 with modern web technologies including Bootstrap 5 and Google Analytics for tracking. It demonstrates good mobile optimization, accessibility, and SEO practices, providing a positive user experience. However, the hosting provider is not explicitly identified, and performance is moderate. From a security perspective, the site enforces HTTPS and uses best practices for external links but lacks visible security headers and formal privacy or cookie policies, which are compliance gaps. No vulnerability disclosure or incident response information is provided. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, although the website content and partner links suggest a legitimate operation. Overall, the site is professionally designed and trustworthy for its audience but would benefit from improved privacy compliance and enhanced security transparency to strengthen its risk posture and user trust.

O

Omega Design

omegadesign.cz

47

Omega Design is a well-established Czech graphic and marketing design agency specializing in brand creation, graphic design, photography, copywriting, and both offline and online advertising solutions. The company has been operating since 1996 and serves a diverse clientele ranging from small to large brands. Their website reflects a professional and consistent brand image with comprehensive service offerings and a strong digital presence. Technically, the site is built on WordPress with modern tools such as jQuery, Swiper.js, and Google Tag Manager, indicating a mature digital infrastructure. Privacy compliance is well addressed with GDPR-aligned cookie and privacy policies and an opt-in consent mechanism. Security posture is good with HTTPS enforced and no visible sensitive data exposure, though some security headers are missing and no explicit security policies or incident response contacts are published. Overall, the website is trustworthy, well-designed, and business-appropriate, though WHOIS data is unavailable, likely due to privacy protection, which is common for small agencies.