Medium-risk security reports

The website www.avprofis.cz is a small-scale business site built on the Wix platform. The site content is minimal and primarily technical, with no visible business descriptions, contact information, or policies. The lack of WHOIS data and domain registration details raises concerns about the domain's legitimacy and transparency. Technically, the site uses standard Wix scripts and polyfills but lacks advanced security headers and privacy compliance features. The security posture is basic with no evident vulnerabilities but also no strong security practices. Overall, the site appears to be either under development or a placeholder with limited business presence and low trust indicators.

Techmania Science Center is a well-established interactive science and educational center located in the Czech Republic, founded in 2006. The website presents a professional and comprehensive digital presence showcasing their interactive exhibits, 3D planetarium, science shows, and educational workshops. The business targets families, schools, and science enthusiasts, positioning itself as a regional leader in science education and entertainment. Technically, the website employs modern web technologies including JavaScript, Bootstrap, Google reCAPTCHA, and Cookiebot for consent management, ensuring a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS and session management cookies, though some security headers could be improved. Privacy compliance is strong with a clear GDPR-compliant privacy and cookie policy and active consent mechanisms. Overall, the website is trustworthy, well-maintained, and suitable for its audience.

Autoslužba TAXI Plzeň is a small, established taxi service provider operating since 1990 in Plzeň and across the Czech Republic. The company offers a variety of transport services including 24/7 taxi rides, drink service for safe transport after alcohol consumption, courier deliveries, event transportation, minibus services, and car towing. The website presents clear contact information, including phone numbers and an email address, and emphasizes reliability and local presence. The business model focuses on direct customer engagement via phone orders and partnerships with local hotels and businesses. Technically, the website uses common web technologies such as jQuery and Google Tag Manager, and implements a cookie consent banner to comply with basic privacy requirements. However, no dedicated privacy policy or terms of service pages were found, which limits full GDPR compliance. Security posture is moderate with HTTPS enabled but lacking security headers and incident response information. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact details appear consistent and professional. Overall, the site is well designed, mobile-optimized, and trustworthy for its target audience.

ŠMT a.s. is a well-established Czech manufacturer specializing in heavy horizontal boring, milling machines, and lathes, serving a global industrial market with over 100 years of experience. The company offers a broad range of heavy machining equipment and related services including modernization and repairs, targeting industrial manufacturers and engineering firms worldwide. Their market position is strong with customers in over 40 countries and partnerships with major industrial brands. Technically, the website is built on Joomla CMS with Gantry 5 framework, employing modern frontend technologies and providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data limits domain trust verification, but the website content and business information appear professional and credible. Overall, the site demonstrates a mature digital presence aligned with the company's industrial manufacturing business.

The website www.rybsvaz.cz appears to be a portal titled 'RIS Portál' with minimal visible content in the provided HTML. The lack of WHOIS data and absence of registrant information limit the ability to verify domain legitimacy and business identity. The technical infrastructure shows use of modern CSS frameworks such as Tailwind CSS and PrimeVue, indicating some level of digital maturity. However, the absence of privacy policies, contact information, and security headers suggests a low security posture and limited compliance with privacy regulations. Overall, the website presents a low trust profile with minimal business credibility signals.

Stone Gallery is a Czech Republic-based specialist retailer and installer of stone, brick, ceramic, plaster, and concrete cladding and flooring materials. With over 20 years of experience, the company offers a broad product range including custom stone products and construction chemicals, targeting both professional builders and end consumers. The website reflects a mature e-commerce platform with a physical store presence in Prague, supported by certifications such as dTest and Heureka, enhancing customer trust. Technically, the site uses modern JavaScript libraries and tracking tools like Google Tag Manager, Facebook Pixel, and Hotjar, with a CMS likely based on the Nette Framework. Security posture is good with HTTPS enforced and secure forms, though some improvements like security headers and cookie consent mechanisms are recommended. The absence of WHOIS data reduces domain trustworthiness, but the overall business and website professionalism remain high.

ABADIA a.s. is a Czech manufacturing and trading company specializing in steel constructions, locksmith elements, suspended balconies, and technological equipment. Established in 2006, the company has a medium-sized team and a strong market presence in the Czech Republic and neighboring countries. Their website reflects a professional business with clear service offerings and client testimonials. Technically, the site is built on Drupal CMS, uses modern JavaScript libraries, and integrates Google Analytics and other tracking tools with a compliant cookie consent mechanism. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the website is well-structured, mobile-optimized, and trustworthy, supporting the company's credibility and business goals.

The website www.byty-dobrany.cz represents a small real estate business focused on selling residential apartments in Dobřany, Czech Republic. The business targets young adults seeking starter apartments and seniors looking for comfortable housing. The site is professionally designed using the Wix platform and provides clear information about the property offerings, including apartment sizes and location benefits. However, the absence of WHOIS data limits the ability to fully verify domain ownership and legitimacy. Technically, the site uses modern web technologies and includes Google Analytics and Tag Manager for tracking, but lacks advanced security headers and privacy compliance features. The security posture is moderate with HTTPS enabled but missing key headers and policies. Overall, the site is functional and trustworthy for its business purpose but would benefit from enhanced privacy and security measures.

PRIMA STRAKONICE is a Czech construction company operating since 1993, specializing in general contracting and real estate development in the South Bohemia region. The company offers a wide range of services including construction, carpentry, locksmithing, electrical installations, equipment rental, and transportation. Their website reflects a medium-sized regional business with a professional online presence built on WordPress and Elementor. The site is well-structured, mobile-optimized, and includes essential contact information and cookie consent mechanisms, indicating GDPR compliance. However, the absence of WHOIS domain registration data limits the ability to fully verify the domain's legitimacy and age. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and explicit security policies. Overall, the website presents a trustworthy and professional image suitable for its target audience.

AGRICO s.r.o. is a well-established Czech company specializing in manufacturing and supplying stable technologies and agricultural equipment, including products for pig, poultry, cattle, and horse breeding, as well as fishery supplies and grain storage solutions. The company positions itself as a traditional and trusted supplier with over 35 years of experience, supported by multiple ISO certifications and quality awards. Their business model includes direct sales through an online catalog and e-shop, targeting farmers and agricultural enterprises primarily in the Czech Republic. Technically, the website employs modern frontend technologies such as Bootstrap 5, jQuery, and PhotoSwipe, with responsive design and good SEO practices. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks advanced security headers and explicit incident response information. WHOIS data is missing, which reduces domain trustworthiness, but the website content and certifications support legitimacy. Overall, the site is professional, user-friendly, and trustworthy with room for security improvements.

The website solarnisystemy-ceskebudejovice.cz is currently inaccessible, displaying only a minimal placeholder message 'site not found'. There is no visible business content, metadata, or contact information to analyze. The domain is registered since 2011 with the registrar REG-KRAXNET and uses the name server ns.kraxnet.com, indicating a legitimate registration but no active website presence. The lack of content and security features such as HTTPS and security headers indicates a very low digital maturity and security posture. No privacy or cookie policies are present, and no business or contact details are available, which severely limits trust and credibility. Overall, the site appears offline or abandoned, posing a high risk for users seeking information or services from this domain.

ACOND a.s. is a leading Czech manufacturer specializing in heat pumps, air conditioning, and floor heating solutions. With over 12,000 installations, the company serves residential and commercial customers primarily in the Czech Republic and abroad. Their business model focuses on manufacturing, direct sales, installation, and servicing, supported by a strong partner network and comprehensive customer support. The website reflects a professional and trustworthy brand with clear communication of product offerings, warranties, and customer testimonials. Technically, the website is built on the Webflow platform, leveraging modern JavaScript libraries and analytics tools such as Google Analytics, Microsoft Clarity, and Adform. It employs a consent management platform (Usercentrics) to ensure GDPR compliance. The site is mobile-optimized, fast-loading, and well-structured, providing an excellent user experience. From a security perspective, the site uses HTTPS and integrates consent mechanisms for privacy compliance. However, it lacks visible security headers and does not publish an incident response or vulnerability disclosure policy, which are areas for improvement. The absence of WHOIS data limits domain legitimacy verification, but the overall digital footprint and business information suggest a legitimate and established entity. Overall, the website demonstrates a mature digital presence with strong content quality and privacy compliance, though it would benefit from enhanced security practices and transparent domain registration information.

The website uzkokolejky.cz serves as an informational and e-commerce platform dedicated to the Jindřichohradecké narrow-gauge railways in the Czech Republic. It targets railway enthusiasts and tourists interested in this niche transportation sector. The site uses WordPress with WooCommerce and Amelia Booking plugins, indicating a moderate level of digital maturity with integrated booking and sales capabilities. The technical infrastructure is solid, leveraging modern CMS and SEO tools, hosted likely with Microsoft Online DNS services. Security posture is adequate with HTTPS enabled and GDPR cookie consent implemented, though it lacks published privacy and terms of service policies. Overall, the site is professional and trustworthy but could improve compliance and transparency aspects.

Spirit Radar is a specialized online platform catering to rum and whisky collectors, providing comprehensive tools for tracking bottle prices, availability, auction data, and collection valuation. The platform targets collectors, investors, e-shops, bottlers, insurers, and brand representatives, positioning itself as a niche market leader with a substantial database and active user testimonials. Technically, the website is built on WordPress with modern JavaScript libraries and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity. The site demonstrates good mobile optimization and SEO practices but lacks some advanced accessibility features. Security-wise, the site enforces HTTPS and uses anti-spam measures and cookie consent mechanisms; however, it lacks explicit security headers and a vulnerability disclosure policy. The absence of WHOIS domain registration data raises concerns about domain legitimacy, although the website content and professional presentation suggest a legitimate business. Overall, the site scores well on content quality and business credibility but should improve transparency and security practices.

Kubota.cz represents the Czech Republic branch of Kubota Corporation, a globally recognized manufacturer of agricultural and industrial machinery. The website showcases a comprehensive product range including tractors, lawn mowers, and accessories, targeting agricultural professionals and municipal service providers. The company emphasizes sustainability and environmental responsibility, supported by a long corporate history and recent acquisitions such as Kverneland and Great Plains. Technically, the website employs modern frameworks like Bootstrap and jQuery, with integrated analytics and cookie consent mechanisms, reflecting moderate digital maturity. Security posture is adequate with cookie consent and no visible vulnerabilities, though security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting Kubota's strong market position in the manufacturing sector.

AZS 98, s.r.o. is a Czech Republic-based company specializing in construction waste recycling, demolition, concrete production, and real estate leasing and sales. The company operates multiple subsidiaries and maintains a professional online presence with comprehensive service offerings targeting construction and industrial clients. Their website demonstrates a solid digital infrastructure built on WordPress with Elementor, enhanced by SEO and GDPR compliance plugins. The company actively engages customers through multiple contact channels and social media platforms. Security posture is generally good with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data is a notable gap in domain legitimacy verification but does not detract significantly from the overall business credibility. Strategic recommendations include enhancing security policies, publishing incident response contacts, and implementing security.txt for vulnerability disclosures.

Údolí Svratky a.s. operates as a regional tourism promoter focused on the Vysočina region of the Czech Republic, offering a broad range of services including accommodation, dining, sports activities, cultural events, and e-commerce for local edible souvenirs. The company targets tourists and visitors interested in nature, culture, and active leisure in this region. The website is professionally designed with good content quality and clear navigation, supporting the business model effectively. Technically, the site uses modern web technologies including Google Fonts, YouTube API, and Google Maps API, hosted likely by a Czech hosting provider. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks explicit security headers and published security policies. WHOIS data is unavailable, which reduces domain trustworthiness and warrants further verification. Overall, the website presents a trustworthy and professional front for the company with room for security and compliance improvements.

Decathlon.cz is the Czech Republic localized e-commerce and retail website of Decathlon, a major international sporting goods retailer. The site offers a wide range of sports equipment, apparel, and accessories for over 70 sports, targeting general consumers interested in sports and fitness. The business model includes direct sales, marketplace partner sales, product rental, buy-back programs, and a loyalty program, positioning Decathlon as a large player in the retail sports sector in the Czech market. Technically, the website is built on a custom platform with modern JavaScript frameworks and integrates multiple third-party services for privacy management, analytics, and payment processing. The site is well optimized for desktop and mobile, with good SEO and accessibility features. The use of HTTPS and security headers indicates a strong security posture, although explicit security policies and incident response information are not publicly detailed. Security-wise, the site demonstrates good practices including secure payment options and cookie consent mechanisms. No vulnerabilities or exposed sensitive data were detected in the analysis. However, the absence of WHOIS data limits domain registration transparency, though this is likely due to registry privacy policies rather than malicious intent. Overall, Decathlon.cz presents a professional, secure, and user-friendly online presence consistent with a large retail brand. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure information, and enhancing visible contact channels for security matters to further strengthen trust and compliance.

Továrna Vír is a project focused on the revitalization of the former Rotter factory area in Vír, Czech Republic. The website presents a multifaceted business model combining real estate redevelopment, hospitality, cultural and sporting activities, and sustainable farming. The project targets visitors, local community members, investors, and businesses seeking unique event spaces and coworking facilities. The site is professionally designed with clear navigation and good mobile optimization, reflecting a medium-sized enterprise with a strong local presence. Technically, the website employs modern web technologies including jQuery, Google Fonts, and Google Analytics, hosted likely on a Czech hosting provider with a CMS platform inferred as WebSynergy. Performance and SEO are moderate to good, with room for improvement in accessibility and security headers. The site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent but lacks advanced security headers and explicit incident response or security policy documentation. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain trustworthiness, though the website content and social media presence support legitimacy. Overall, the website scores well in content quality, technical implementation, and privacy compliance but should improve transparency in domain registration and security policies to enhance trust and compliance.

APB - PLZEŇ a.s. is a Czech company specializing in earthworks, demolition, construction, transport, and crane services, operating since 1991. The company positions itself as a leading regional provider with a strong portfolio of projects and a focus on technological capabilities. The website is professionally designed, primarily targeting business clients in the construction and transportation sectors within the Czech Republic. Technically, the site uses a custom CMS by BARTON STUDIO, with legacy JavaScript libraries and integration of Google services such as Analytics and reCAPTCHA. Security posture is moderate with HTTPS enabled and cookie consent implemented, but outdated libraries and missing security headers present areas for improvement. The absence of WHOIS data reduces domain trust, though the website content and business information appear legitimate and comprehensive. Contact details and certifications are clearly presented, supporting business credibility.

Impel AI is a leading enterprise-grade AI Operating System designed specifically for the automotive industry, enabling dealerships and OEMs to unify and automate the entire customer lifecycle. The platform offers modular AI services including Sales AI, Chat AI, Service AI, Marketing AI, and Merchandising AI, aimed at improving operational efficiency, customer experience, and sales conversions. With a strong market position supported by OEM partnerships and a global customer base, Impel AI targets automotive retailers seeking to leverage AI for competitive advantage. Technically, the website is built on WordPress and integrates a modern tech stack including Google Tag Manager, Google Analytics, Hotjar, Facebook Pixel, and Auth0 for authentication. Hosting is inferred to be on AWS, with DNS managed via AWS Route 53. The site demonstrates excellent performance, mobile optimization, and SEO practices, supported by comprehensive metadata and structured data. From a security perspective, the site enforces HTTPS, employs multiple security headers, and uses enterprise-grade authentication services. However, DNSSEC is not enabled, and no explicit vulnerability disclosure or incident response contacts are published. Privacy and cookie policies are present with consent mechanisms, indicating good privacy compliance. Overall, the website presents a professional, trustworthy, and technically mature digital presence with strong business credibility. Strategic recommendations include enabling DNSSEC, publishing a vulnerability disclosure policy, and providing explicit incident response contacts to further enhance security posture and trust.

Městys Čachrov operates as a small municipal government entity providing administrative and public services to its local citizens and entrepreneurs. The website serves as an official portal for information dissemination, including contact details, official notices, and local governance documentation. The site positions itself as a trusted local authority within the Czech Republic, focusing on transparency and community engagement. Technically, the website employs a mix of legacy and modern web technologies, including jQuery, Google Analytics, and a cookie consent management system. The site is hosted by ŠumavaNet.CZ and demonstrates moderate performance with good mobile optimization and accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy policies, which are areas for improvement. The cookie consent mechanism is robust, indicating awareness of privacy compliance, though GDPR-specific documentation is absent. The WHOIS data is incomplete, limiting domain trust evaluation, but the website content and contact information suggest legitimacy. Overall, the website is functional and professional for its purpose but would benefit from enhanced security practices, clearer privacy documentation, and improved domain registration transparency to strengthen trust and compliance.

The website worldtbook.com operates as an online slot gambling platform branded as DOLLY4D, targeting an Indonesian audience interested in online slot games with high RTP and popular providers. The business model centers on online gambling services, but lacks clear company information, contact details, and compliance documentation. Technically, the site uses modern JavaScript frameworks such as React and Next.js, hosted behind Cloudflare DNS and utilizing DigitalOcean Spaces CDN. However, security best practices are not fully implemented, with no DNSSEC, no visible security headers, and unclear SSL status. The WHOIS data is suspicious due to a future domain creation date and minimal registrant information, which raises concerns about legitimacy and trustworthiness. Overall, the site presents moderate technical maturity but poor security and compliance posture, with significant risks related to business credibility and regulatory adherence.

Poper is a technology company specializing in AI-powered onsite engagement tools such as smart popups, widgets, notifications, and gamification features designed to enhance user interaction and increase conversion rates for websites and e-commerce platforms. The company positions itself as a modern SaaS provider serving over 2000 brands, focusing on delivering personalized and dynamic engagement solutions. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency, targeting website owners and marketers seeking to boost engagement and sales. Technically, the website leverages modern web technologies including React and Next.js, ensuring fast performance, mobile optimization, and good SEO practices. The presence of structured data and social media integration further enhances its digital maturity. Security-wise, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data, reflecting a solid security posture. However, explicit security policies and incident response contacts are not publicly available, which could be improved. Overall, the website and business demonstrate a high level of professionalism and trustworthiness, with privacy policies and cookie consent mechanisms in place indicating compliance with GDPR. The WHOIS data is privacy protected but shows no suspicious patterns, consistent with a legitimate tech startup. The risk profile is low, with recommendations to enhance transparency around security and incident response. Strategic recommendations include publishing a dedicated security policy, establishing a vulnerability disclosure program, and providing direct security contact information to strengthen trust and compliance further.

KLEE s.r.o. is a Czech construction company specializing in earthworks and water infrastructure projects, operating primarily in the Třebíč region and surrounding areas. Founded in 2000, the company has a medium-sized workforce and a fleet of machinery, offering services such as excavation, pipeline installation, and vehicle repair. The website presents basic but relevant business information and certifications, indicating a credible and established market presence. Technically, the website uses legacy HTML and JavaScript with limited modern features, lacks HTTPS, and does not provide privacy or cookie policies despite using Google Analytics, which impacts its security and privacy posture. The security posture is weak due to missing HTTPS and security headers, and the site lacks accessibility and mobile optimization. Overall, the site is functional but requires modernization and improved security and privacy compliance to enhance trust and user experience.

The website sazkovekancelare.cz is currently inaccessible due to a Cloudflare security challenge page employing Turnstile CAPTCHA, which blocks direct access to the site's content. This prevents extraction of any meaningful business, compliance, or contact information. The domain was registered in 2018 with REG-ACTIVE24 and uses Cloudflare nameservers, indicating a standard setup for security and performance. Due to the blocking, no privacy policies, cookie consent mechanisms, or terms of service are detectable. The technical infrastructure relies on Cloudflare's security platform, but no further details on CMS or frameworks are available. The security posture cannot be fully assessed given the lack of accessible content, but the presence of Cloudflare WAF and CAPTCHA indicates a baseline security measure. Overall, the site cannot be fully analyzed, and the risk assessment is limited by the lack of accessible data.

The website www.ruik.cz is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct content access. No business-related content, contact information, or policies are available for analysis. The domain WHOIS data is unavailable, indicating either privacy protection or lack of registration, which limits trust and legitimacy assessment. The technical infrastructure relies on Cloudflare for security and performance, but no further technology or CMS details are discernible. Security posture is limited to the presence of Cloudflare's WAF, but no additional security headers or configurations are visible. Overall, the site lacks transparency and content, resulting in a low trust and credibility score.

The International Bowling Federation (IBF) operates as the global governing body for the sport of bowling, providing governance, event management, anti-doping education, and resources for athletes and member federations worldwide. The website serves as a central hub for information on upcoming championships, anti-doping guidelines, and organizational structure, targeting athletes, sports officials, and bowling enthusiasts. The business model is typical of a non-profit sports federation, focusing on community engagement and sport development. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and several plugins for event management and media handling. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO could be improved. Hosting details are not explicit, but DNS uses Microsoft Online name servers. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy linked externally and no explicit GDPR compliance statements. Contact information is limited to email and physical address, with no phone numbers or incident response contacts. Overall, the website is professional, trustworthy, and well-positioned within its niche. Strategic improvements in security headers, privacy transparency, and accessibility would enhance its posture and compliance.

Česká bowlingová asociace (ČBA) is the national amateur bowling association in the Czech Republic, representing bowling players of all skill levels and ages. It serves as the official representative of the Czech Republic in European and international bowling federations and organizes national competitions, leagues, and player registrations. The website provides comprehensive information about bowling events, rankings, news, and media content targeted at the Czech bowling community. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates analytics tools such as Matomo and Google Tag Manager. The site is mobile-optimized with good navigation and content quality. Security posture is solid with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable, which slightly impacts trust but the professional content and official partnerships support legitimacy. Overall, the site is a well-maintained digital presence for the Czech bowling community with room for improvement in privacy compliance and security headers.

VallonEnd Beachfront Villa is a small hospitality business offering three private self-catered apartments in Seychelles, targeting travelers seeking beachfront accommodation with ocean views and snorkeling opportunities. The website is professionally designed with clear navigation, good content quality, and consistent branding. It leverages modern web technologies including lazy loading, carousels, and tracking tools such as Google Analytics and Facebook Pixel. Privacy and cookie policies are implemented with GDPR compliance and consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are absent. Overall, the website presents a trustworthy and professional online presence suitable for its business model.

Jánošíkov golf is a small hospitality business located in Slovakia offering adventure golf experiences targeted at families, corporate groups, and couples. The website presents a professional and consistent brand image with clear navigation and relevant content describing their services. Technically, the site uses modern JavaScript libraries and Google services for analytics and user interaction, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and reCAPTCHA integration, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with GDPR-aligned cookie and privacy policies. Overall, the domain registration and business information are consistent and trustworthy, supporting a positive legitimacy assessment.

Jánošíkov wellness is a small hospitality business operating a wellness center located in the Malá Fatra region of Slovakia. The company offers a variety of relaxation and wellness services including saunas, private baths, and wellness packages, targeting both local and international tourists seeking quality wellness experiences in a family-friendly environment. The website is professionally designed with multilingual support and clear navigation, reflecting a good level of digital maturity. Technically, the site uses modern JavaScript libraries and Google services for analytics and security, ensuring a moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers could be added to enhance protection. Privacy compliance is addressed with a GDPR-compliant privacy and cookie policy and a consent mechanism. Overall, the business information is transparent and consistent with domain registration data, supporting a high legitimacy score. No critical security or compliance issues were detected.

SOHO1 Wellness is a small hospitality business located in Žilina, Slovakia, specializing in modern wellness and spa services including sauna access, massages, cryotherapy, and private whirlpool baths. The website presents a professional and user-friendly interface with clear navigation and comprehensive service descriptions, targeting general wellness customers seeking relaxation and rejuvenation. Technically, the site employs modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers are lacking and could be improved. Privacy compliance is strong with a dedicated GDPR policy and cookie management. Overall, the domain registration aligns well with the business claims, supporting legitimacy and trustworthiness.

Wellness Holešky is a small hospitality business located in Prague, Czech Republic, specializing in wellness and relaxation services including a rustic Finnish sauna, massages, private baths, and wellness stay packages. The website presents a professional and well-structured digital presence with clear navigation, rich content, and compliance with GDPR and cookie consent regulations. The technical infrastructure leverages modern JavaScript libraries and tracking tools, ensuring a good user experience and moderate performance. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers and incident response information suggests room for improvement. The lack of WHOIS data is a notable gap that impacts domain trustworthiness, but the overall website and business information appear legitimate and trustworthy.

SOHO1 Caffé Bistro is a modern hospitality business located in Žilina, Slovakia, offering restaurant dining, café services, brunch, catering, food delivery, and event hosting. The website reflects a small but professional local business with a focus on fresh ingredients and a pleasant atmosphere. The digital infrastructure uses modern web technologies including JavaScript modules, Google Fonts, Google Analytics, and Facebook Pixel, indicating a moderate level of digital maturity. The site is mobile optimized and provides clear navigation and content relevant to its target audience. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. WHOIS data confirms the legitimacy of the business with consistent registration details. Overall, the website is trustworthy and professionally maintained, though improvements in security transparency and content hygiene are recommended.

Absolutum Wellness Hotel is a boutique wellness hotel located in Prague 7, offering modern accommodation, a wellness center, a stylish restaurant, and conference facilities. The hotel targets tourists and business travelers seeking comfort and wellness services in a convenient location near public transport. The website reflects a medium-sized hospitality business with a professional online presence and clear service offerings. Technically, the site employs modern web technologies including Google reCAPTCHA, analytics, and marketing pixels, ensuring a secure and user-friendly experience. Security posture is strong with HTTPS and form protection, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with comprehensive GDPR and cookie policies. Overall, the website is trustworthy and professionally maintained, though WHOIS data is unavailable, likely due to privacy protection.

UniBind is a specialized manufacturer and provider of innovative thermal binding systems and professional binding technology, targeting businesses and professionals who require high-quality document presentation solutions. The company emphasizes speed, durability, and customizable design in their products, offering a range of binding machines and covers. The website is built on Joomla CMS with the Gridbox builder, incorporating modern web technologies such as Bootstrap and jQuery, and includes embedded video content and e-commerce links. Security posture is generally good with HTTPS and reCAPTCHA usage, but lacks explicit privacy and cookie policies, which are important for GDPR compliance. The site is fully accessible without WAF or blocking mechanisms, and WHOIS data confirms legitimacy and consistency with the business claims.

The website kodakprofessional.com currently returns an error page due to a backend API timeout, rendering the site content inaccessible. This prevents extraction of business, contact, or policy information. The domain is registered through a reputable corporate registrar since 2018, indicating a legitimate business presence. However, the lack of accessible content and security metadata limits the ability to assess the site's digital maturity and security posture comprehensively. The site shows no evidence of privacy or cookie policies, contact information, or security best practices in the provided data. Overall, the site is currently non-functional from a user perspective, which poses significant risks to business credibility and user trust.

KYOCERA Document Solutions Czech Republic operates a professional website offering document management and business optimization solutions targeted at Czech businesses. The site is well-branded and uses modern technologies such as Adobe Experience Manager and Google reCAPTCHA, indicating a mature digital infrastructure. However, the absence of WHOIS data and lack of visible contact or privacy policies reduce overall trust and compliance posture. Security measures like reCAPTCHA are in place, but security headers and SSL configuration details are not visible, suggesting room for improvement. Overall, the website presents a credible business front but would benefit from enhanced transparency and compliance documentation.

Mikroregion Voticko is a small regional non-profit organization serving local municipalities in the Czech Republic. The website provides community services, social work coordination, educational development, and tourism information targeted at residents, schools, and local governments. The organization maintains a professional online presence with clear contact information and regular news updates, positioning itself as a trusted regional entity. Technically, the site is built on CMS Made Simple with legacy JavaScript libraries and uses Bootstrap and Owl Carousel for UI components. While functional and moderately optimized, the site lacks modern security headers and uses outdated libraries, posing potential security risks. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. The site employs Google Analytics and Tag Manager for user tracking without visible consent mechanisms. Overall, the website is safe, professional, and relevant to its audience but requires improvements in security and privacy compliance to enhance trust and resilience.

Linka bezpečí is a well-established Czech non-profit organization providing free and anonymous counseling services primarily for children and students up to 26 years old. The website serves as a comprehensive platform offering telephone helpline, online chat, email support, educational resources, and multimedia content focused on mental health and social issues. The organization has a strong market position as a trusted helpline with a long history since 1994 and a domain registered since 1998. Technically, the website is built on the Liferay CMS platform, utilizing modern web technologies and third-party analytics and marketing tools, ensuring good performance, accessibility, and SEO. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with clear contact information and active social media presence.

Správa železnic is a Czech state organization responsible for managing the national railway infrastructure. The website serves multiple audiences including passengers, suppliers, carriers, and contractors, providing comprehensive information about projects, services, and organizational structure. It holds a significant market position as the primary railway infrastructure manager in the Czech Republic. The site is well-branded and professionally maintained, reflecting its government entity status. Technically, the website is built on the Liferay CMS platform and uses modern JavaScript libraries such as jQuery, Slick Carousel, and Unite Gallery. It integrates analytics tools including Google Analytics and Facebook Pixel for user tracking and marketing purposes. The site is mobile-optimized with good navigation and SEO practices, although accessibility features could be enhanced. From a security perspective, the website enforces HTTPS and includes important security headers. It publicly documents its cybersecurity policies and incident response capabilities, including a CSIRT team. However, the absence of a vulnerability disclosure policy and security.txt file is noted. WHOIS data is unavailable, which limits domain registration trust analysis, but the official domain and content suggest legitimacy. Overall, the website demonstrates a solid security posture and compliance with GDPR, with clear contact and privacy information. The risk level is moderate due to missing WHOIS transparency and minor technical improvements needed. Strategic recommendations include implementing a vulnerability disclosure program, enhancing accessibility, and maintaining updated domain registration information.

Ring of Fury is a Czech-based combat sports event organizer specializing in celebrity fights across boxing, K1, Muay Thai, and MMA with small gloves. The organization targets combat sports fans and entertainment seekers, offering live events, PPV streaming, and merchandise. The website is professionally designed with good content quality and clear navigation, supported by active social media channels. Technically, it uses modern JavaScript libraries and Google Tag Manager for analytics, but lacks some security headers and formal privacy documentation. The absence of WHOIS data raises some trust concerns, though the visible business presence and partner sponsorships support legitimacy. Overall, the site is functional and engaging but would benefit from enhanced security and compliance documentation.

BB media productions s.r.o. is a Czech audiovisual production company specializing in comprehensive marketing services including video production, photography, social media, web, and graphic design. The company targets businesses and individuals seeking professional marketing content, offering both large-scale and low-budget production services with licensed drone footage capabilities. Their market position is supported by a portfolio of diverse projects and client logos, indicating a stable presence in the local media production sector. Technically, the website employs a mix of legacy and modern web technologies such as jQuery, Swiper.js, and Typekit fonts, delivering a moderate performance and good mobile optimization. Security posture is moderate with HTTPS usage but lacks visible security headers and updated libraries, and privacy compliance is weak due to missing policies. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy measures.

Advency is an independent French digital agency specializing in Drupal-based web development, mobile applications, and custom digital solutions. Founded in 2013 and based in Toulouse and Paris, the agency offers a comprehensive suite of services including UX/UI design, maintenance, hosting, and strategic consulting. Their client portfolio includes notable organizations such as Météo France and Airbus, indicating a strong market position in the technology sector. The website reflects a professional and user-centric approach with rich content and clear navigation.

Mon Alba s.r.o. is a small Czech company specializing in IT services and construction consulting. Their offerings include website and e-shop development, Google Workspace implementation, domain management, and expert consulting on building moisture and structural issues. The company targets local businesses and property owners in Prague and surrounding areas. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a positive user experience. Technically, the site uses modern frameworks such as Bootstrap and integrates Google Analytics and Tag Manager for user tracking. However, the absence of WHOIS data limits domain trust verification, and no cookie consent mechanism was found, which may impact privacy compliance. Security headers are not explicitly detected, suggesting room for improvement in security posture. Overall, the website is functional and professional but could benefit from enhanced security and privacy features.

The website www.1m.cz is an e-commerce platform based in the Czech Republic specializing in mobile phone accessories such as cases, protective covers, screen protectors, batteries, chargers, cables, holders, headphones, speakers, and smart wearables. It also offers a range of household goods and hobby items. The site targets consumers looking for mobile accessories and related products. The business model is retail-focused, leveraging an online storefront with user account management and shopping cart functionality. The market position appears to be that of a specialized retailer with a broad product catalog in its niche. Technically, the website employs modern web technologies including Bootstrap 4, Owl Carousel, Magnific Popup, and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile optimized and includes cookie consent mechanisms, but lacks explicit privacy and terms of service pages in the analyzed content. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities detected, though security headers are not explicitly observed. The absence of WHOIS registrant data limits trust assessment but is likely due to privacy protection or registry policies. Overall, the website presents a professional and functional e-commerce platform with room for improvement in privacy disclosures and security header implementation.

nopCommerce is a well-established, free and open-source eCommerce platform based on ASP.NET Core technology, targeting a broad audience from small and medium businesses to enterprise and global businesses. It offers a rich set of features including multi-store, multi-vendor support, integrations with payment and shipment services, and mobile-friendly solutions. The platform is recognized for its extensibility and strong community support, positioning itself as a leading solution in the ASP.NET eCommerce market. Technically, the website leverages modern web technologies including ASP.NET Core, jQuery, and Owl Carousel, with good SEO and mobile optimization. The presence of Google Analytics and Cloudflare Insights indicates moderate user tracking for analytics purposes. Security-wise, the site enforces HTTPS and claims PCI DSS compliance, but lacks some security headers and explicit cookie consent mechanisms. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high due to strong branding, client testimonials, and partner endorsements.

TwoDo is a small technology company specializing in website, e-commerce, system, and application development with a focus on UX/UI design and custom CMS solutions. Established in 2017, it serves notable clients such as Ensana Hotels, Netflix, and HBO, positioning itself as a professional digital agency with a proprietary CMS platform. The website is built on modern Angular technology, hosted with Cloudflare DNS, and uses Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and provides clear navigation, although it lacks explicit privacy and terms of service documentation. Security posture is moderate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and security headers. Overall, the business credibility is high, but privacy compliance and security policies need enhancement.

Mondossiernotaire.fr is a professional client portal operated by Septeo Notaires, providing French notary clients with a platform to track the progress of their dossiers. The website offers services such as document upload/download, notifications, and appointment scheduling, targeting individuals engaged in real estate and notarial processes. The domain is well-established since 2016, indicating a mature presence in its niche market. Technically, the site is built on ASP.NET MVC with a modern JavaScript stack including jQuery and FontAwesome. It employs HTTPS with anti-forgery tokens for secure login forms, demonstrating a good baseline security posture. However, the absence of explicit security headers and privacy/cookie policies suggests room for improvement in compliance and defense-in-depth. Security-wise, the site shows moderate maturity with secure form handling and encrypted connections but lacks visible incident response contacts or vulnerability disclosure mechanisms. The use of Google Analytics indicates moderate user tracking, but privacy compliance is limited due to missing policies. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy disclosures, security headers, and clearer contact information to improve compliance and user trust.