High-risk security reports

UvexStore.cz is a specialized e-commerce platform focused exclusively on selling UVEX brand helmets and goggles for cycling and skiing. It operates as part of the ZebraStores.cz group, offering a professional online shopping experience with detailed product information and customer support via phone and email. The website targets both recreational and professional athletes in the Czech Republic and Slovakia. Technically, the site is built on the Kentico CMS platform, utilizing modern JavaScript libraries and marketing tools such as Google Analytics and Facebook Pixel. Security is adequate with HTTPS and secure login forms, but lacks some advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance. The absence of WHOIS data for the domain is a notable concern, though the professional presentation and group affiliation support legitimacy. Overall, the site is well-positioned in its niche with good usability and marketing integration.

ZebraStore is a Czech Republic-based e-commerce retailer specializing in sports equipment, footwear, clothing, and accessories. The website targets sports enthusiasts primarily in the Czech and Slovak markets, offering a wide range of branded products such as Under Armour, Merrell, and Wilson. The platform features a well-structured navigation system and seasonal promotions, positioning itself as a reputable regional player in the sports retail sector. Technically, the website employs modern JavaScript frameworks including Vue.js, utilizes lazy loading for images, and integrates multiple third-party analytics and advertising services such as Google Analytics, Facebook Pixel, and Targito marketing tools. The site is mobile-optimized and demonstrates moderate performance with good SEO practices. However, it lacks visible privacy and cookie policies, which is a compliance gap. From a security perspective, the site enforces HTTPS and includes standard security headers, indicating a good baseline security posture. No exposed sensitive data or vulnerabilities were detected in the HTML content. Nevertheless, the absence of publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms limits transparency and preparedness. Overall, ZebraStore presents a professional and trustworthy online retail presence with room for improvement in privacy compliance and security transparency. Addressing these gaps will enhance user trust and regulatory adherence.

MizunoStore.cz is a specialized e-commerce retailer focused exclusively on Mizuno brand footwear and sports apparel, serving the Czech Republic market. It operates as part of the ZebraStores.cz group, offering a wide product range including running shoes, trail shoes, indoor sports shoes, sportswear, thermal underwear, and accessories. The website provides a seamless shopping experience with a centralized cart shared across multiple related e-shops, fast shipping from its own warehouse, and customer support via phone and email. The presence of a physical showroom and clear contact details enhance customer trust. Technically, the site is built on ASP.NET WebForms with a custom CMS platform managed by ZebraStores.cz. It integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Heureka widgets. The site is mobile-optimized and demonstrates good SEO practices. Security is well implemented with HTTPS and secure login forms, though it lacks some advanced security headers and explicit cookie consent mechanisms. From a security and compliance perspective, the site shows no signs of blocking or WAF interference, and no vulnerabilities were detected in the content. However, the absence of a cookie consent banner and explicit privacy policy details indicates room for improvement in GDPR compliance. WHOIS data is unavailable, likely due to privacy protection, but the site’s legitimacy is supported by its authorized reseller status, physical presence, and professional presentation. Overall, MizunoStore.cz is a credible and professionally managed e-commerce platform with a solid business model and good technical infrastructure. Strategic improvements in privacy compliance and security headers would further enhance its trustworthiness and regulatory adherence.

TevaStore.cz is a specialized e-commerce retailer focused exclusively on TEVA brand footwear, offering a wide range of products for men, women, and children targeting outdoor and water sports enthusiasts primarily in the Czech Republic. The website is part of the ZebraStores.cz group, which operates multiple specialized online stores, indicating a solid market presence and business model centered on niche retail. The digital infrastructure is built on the Kentico CMS platform with modern JavaScript libraries and integrates common marketing and analytics tools such as Google Analytics, Facebook Pixel, and Heureka widgets. Security posture is moderate with HTTPS usage and secure login forms, but lacks advanced security headers and published security policies. Privacy compliance is partial, with no visible cookie consent mechanism and limited GDPR indicators. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for retail businesses. Overall, the website is professional, trustworthy, and well-positioned in its market segment.

MerrellStore.cz is a specialized e-commerce retailer focused exclusively on Merrell brand footwear and accessories, serving primarily the Czech and Slovak markets. The site offers a comprehensive catalog of outdoor, hiking, lifestyle, and fashion shoes with detailed product information, promotions, and customer support channels including phone and email. The business operates under the parent company ZebraStores.cz, which manages multiple specialized sports and outdoor e-shops. The website demonstrates a mature digital presence with modern technologies and a user-friendly interface.

WilsonStore.cz is a specialized e-commerce retailer focused exclusively on Wilson and Luxilon tennis equipment, operating as a premium authorized partner in the Czech Republic. The business offers a comprehensive range of tennis products including rackets, bags, balls, strings, clothing, and footwear, complemented by certified racket stringing services. The company is part of the ZebraStores.cz group, which manages multiple specialized sports e-shops, enhancing its market presence and operational scale. The website targets tennis players and sports enthusiasts primarily in the Czech and Slovak markets, providing both online shopping and physical showroom services in Kroměříž. Technically, the site is built on the Kentico CMS platform with a legacy ASP.NET WebForms architecture, integrating common marketing and analytics tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. The site demonstrates good content quality, clear navigation, and mobile optimization, though performance is moderate. Security posture is adequate with HTTPS enforced and secure form handling, but lacks modern security headers and cookie consent mechanisms, which are recommended for GDPR compliance. Overall, the domain registration and business information are consistent and legitimate, supporting a trustworthy online retail presence.

HeadStore.cz is an authorized Czech e-commerce retailer specializing exclusively in Head brand sports equipment for tennis, squash, and skiing. The company offers a comprehensive product range and certified racket stringing services, positioning itself as a trusted specialist within the Czech sports retail market. The website is part of the ZebraStores.cz group, enhancing its market credibility. Technically, the site uses a mature ASP.NET WebForms platform with modern JavaScript libraries and integrates multiple marketing and analytics tools, reflecting a solid digital infrastructure. Security posture is good with HTTPS and secure forms, though improvements are recommended in security headers and privacy compliance. Overall, the site is professional, user-friendly, and trustworthy, with clear contact channels and business legitimacy.

BabolatStore.cz is a specialized e-commerce retailer focused on tennis and badminton equipment, primarily from the Babolat and Tretorn brands. The company operates under the ZebraStores.cz group and has established itself as the largest Babolat seller in the Czech Republic from 2010 to 2022. Their offerings include rackets, shoes, bags, balls, and accessories, complemented by professional racket stringing services certified by the European Racket Stringers Association. The website targets sports enthusiasts in the Czech and Slovak markets, providing a comprehensive product catalog and customer support via phone and email. Technically, the website is built on ASP.NET Web Forms with a custom CMS platform likely provided by ZebraStores. It uses modern JavaScript libraries such as jQuery and integrates multiple marketing and analytics tools including Google Analytics, Google Tag Manager, Facebook Pixel, and Heureka widgets. The site is mobile-optimized with good navigation and content quality, though accessibility features are basic. Performance is moderate, and HTTPS is enforced ensuring secure data transmission. From a security perspective, the site demonstrates good practices such as secure login forms and no visible sensitive data exposure. However, it lacks explicit security headers and a cookie consent mechanism, which impacts GDPR compliance. No vulnerability disclosure or incident response information is provided. The domain registration data is consistent with the business claims, showing a long-standing presence since 2009, enhancing trustworthiness. Overall, BabolatStore.cz presents a professional and trustworthy online retail platform with solid business credibility and technical implementation. To improve, the company should implement GDPR-compliant cookie consent, enhance security headers, and publish clear privacy and security policies to strengthen compliance and user trust.

T

TAOX s.r.o.

taox.cz

43

TAOX s.r.o. is a Czech-based advertising and digital studio specializing in custom web design, e-commerce solutions, video production, print design, mobile applications, and marketing services. Established since 1999, the company serves a diverse clientele primarily in the Czech Republic, offering tailored digital solutions with a strong emphasis on SEO and usability. Their portfolio demonstrates a broad range of projects including complex web applications, e-shops, and multimedia content. Technically, TAOX employs modern web technologies such as Laravel PHP framework, Bootstrap, and integrates Google Analytics and Tag Manager for marketing insights. The website is well-designed, mobile-optimized, and provides comprehensive contact information, enhancing business credibility. Security posture is solid with HTTPS and CAPTCHA on forms, though lacks published security policies and some security headers. Privacy compliance is limited due to absence of privacy and cookie policies. WHOIS data is unavailable, which slightly impacts domain trust assessment but the website content and business information support legitimacy. Overall, TAOX presents as a professional, established digital agency with room for improvement in privacy and security transparency.

V

V okno s.r.o.

vokno-plastova-okna.cz

47

V okno s.r.o. is a well-established Czech manufacturer and supplier of plastic and aluminum windows and doors, operating since 1998. The company serves a broad customer base including residential and commercial clients, offering manufacturing, installation, and servicing of windows and doors along with accessories. Their market position is strong regionally with multiple branches and a reputation for quality and customer service. The website reflects a professional and consistent brand image with comprehensive product information and customer testimonials. Technically, the website uses a custom CMS with a technology stack including jQuery, Google Maps API, and popular UI libraries like Nivo Slider and Owl Carousel. It is mobile-optimized and SEO-friendly, though some modernization of JavaScript libraries is advisable. The site employs HTTPS with good SSL configuration and integrates Google Analytics and Leady for tracking, indicating moderate user tracking. Security posture is solid with HTTPS and no exposed sensitive data, but lacks explicit security headers and incident response information. Privacy and cookie policies are present and GDPR compliance is indicated, though more detailed security policies could enhance trust. Overall, the site is safe, professional, and trustworthy with no signs of malicious content or blocking mechanisms. The domain WHOIS data aligns well with the business claims, showing consistent registration details and domain age appropriate to the company's history, supporting legitimacy. Strategic recommendations include enhancing security headers, adding incident response contacts, and updating libraries to maintain security and compliance.

MYTECH s.r.o. is a specialized Czech company focused on the construction, repair, and manufacturing of cooling towers and their components. The company operates primarily in the energy and manufacturing sectors, serving both domestic and international markets. It benefits from a manufacturing partnership with its parent company MYPLAST s.r.o., which provides technological products for cooling towers. The website presents a professional image with clear contact information and multilingual support, targeting industrial clients requiring cooling tower solutions. Technically, the website uses legacy JavaScript libraries such as jQuery 1.10.1 and Modernizr 2.6.2, along with common plugins like Fancybox and Font Awesome. Google Analytics and Google Tag Manager are implemented for user tracking. The site shows moderate performance and basic mobile optimization but lacks modern security headers and updated libraries, which could expose it to vulnerabilities. From a security perspective, the site uses HTTPS but does not implement advanced security headers or privacy policies, indicating gaps in GDPR compliance and security best practices. The absence of WHOIS registration data reduces domain trustworthiness, although the website content and contact details appear legitimate. No signs of WAF or blocking mechanisms were detected, and the content is safe for general audiences. Overall, MYTECH s.r.o. demonstrates a solid business presence with room for improvement in technical modernization, security posture, and privacy compliance to enhance trust and resilience in the digital environment.

A

ALMEO s.r.o.

tvojereklama.cz

41

ALMEO s.r.o. is a Czech-based small technology company specializing in web development, internet solutions, software development, and related services such as graphic design and marketing. The company targets businesses and organizations seeking professional internet presence and software solutions. Their website is built on a custom CMS called WEBIDEAL and provides clear contact information and service descriptions. However, the domain WHOIS data is unavailable, which raises concerns about domain registration legitimacy. The website is accessible without any WAF or blocking mechanisms, but lacks modern security features such as HTTPS enforcement and security headers. Privacy compliance is basic with no visible cookie consent mechanisms. Overall, the site is functional and professional but could benefit from technical and security improvements.

A

ALMEO s.r.o.

pretorien.cz

42

ALMEO s.r.o. is a Czech-based small technology company specializing in web development, internet solutions, and software services. Their website presents a professional business offering including web applications, e-commerce platforms, software development, graphic design, and technical hosting solutions. The company targets businesses and organizations seeking comprehensive internet and software services within the Czech Republic. The site content is well-structured and informative, with clear navigation and contact details, supporting a moderate market position as a local service provider. Technically, the website is built on the WebIdeal CMS platform, utilizing standard web technologies such as JavaScript, CSS, and HTML. While the site is accessible and functional, it shows room for improvement in mobile optimization, accessibility, and modern security practices. No advanced frameworks or analytics tools are detected, indicating a relatively simple technical infrastructure. From a security perspective, the site includes basic anti-spam measures on forms but lacks visible HTTPS confirmation and security headers, which are critical for protecting user data and enhancing trust. The absence of explicit privacy and cookie consent mechanisms suggests potential GDPR compliance gaps. The WHOIS data is unavailable, which raises concerns about domain registration transparency but does not directly contradict the legitimacy of the business as presented on the site. Overall, ALMEO s.r.o. demonstrates a solid business presence with professional offerings but should prioritize enhancing security posture, privacy compliance, and technical modernization to improve trust and resilience against cyber risks.

E

EVMAPA

evmapa.cz

42

EVMAPA.cz operates a specialized platform focused on supporting the electric vehicle ecosystem in the Czech Republic by providing a comprehensive map of charging stations, payment, information, monitoring, and navigation services. The platform targets EV users and charging station operators, offering tools to facilitate immediate charging and station management. The website is well-structured with multilingual support and integrates mapping technology via OpenLayers. The business appears established since 2015, with a clear niche in the energy and transportation sectors within the Czech market. Technically, the site uses standard web technologies and Google Analytics for traffic analysis, with moderate performance and good mobile optimization. Security posture is moderate; while HTTPS is assumed, no explicit security headers or incident response policies are visible, and no direct contact emails or phone numbers are provided. Privacy compliance is basic with cookie consent and terms of service present but no detailed privacy policy or GDPR compliance statements. Overall, the site is professional and trustworthy but could improve security and compliance transparency.

The website www.webkrom.cz is currently under reconstruction, providing minimal content with a clear notice and basic contact information including a phone number and email address. The site uses WordPress CMS with WooCommerce and Elementor plugins, indicating an e-commerce or business intent, but no active business content or services are currently presented. The technical infrastructure is modern with HTTPS enabled and integration of Google AdSense and tracking tools, but lacks advanced security headers and privacy policies. The absence of WHOIS data raises concerns about domain registration legitimacy and trustworthiness. Overall, the site is in an early or transitional phase with limited business presence and low content maturity.

C

C-Tech Club

c-techclub.org

45

C-Tech Club is a global, not-for-profit community dedicated to founders and CEOs of construction technology startups. It serves as a platform for knowledge exchange, industry advocacy, and promotion of innovative construction technologies. The website reflects a professional and consistent brand presence with a clear focus on its target audience of construction tech founders. Technically, the site is built on WordPress using the Divi theme, with standard plugins for cookie consent and popups, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy and well-maintained, with no signs of malicious activity or content blocking.

D/DOCK operates Furnify, a specialized sustainable interior design initiative focused on circular economy principles, founded in 2011. The website presents a professional and consistent brand image with clear messaging about sustainability and circular design. Technically, the site is built on WordPress with modern SEO and analytics tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. The absence of WHOIS data is a minor concern but does not detract significantly from overall trust given the professional presentation and active social media presence. Privacy compliance is well addressed with GDPR-aligned policies and consent management.

A

Architekten Venus

architektenvenus.de

42

Architekten Venus is a German architecture firm specializing in designing and planning innovative spaces for living and working. The company showcases a diverse portfolio including urban planning, revitalization, residential, office, industrial, and public projects. Their website reflects a professional presence with clear branding and a focus on architectural innovation and ESG-compliant real estate consulting. Technically, the site is built on WordPress with modern libraries like jQuery and is mobile optimized with good SEO practices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response or security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professional but could improve in security and privacy transparency.

D

DER PUNKT GmbH

scriptrocker.de

39

DER PUNKT GmbH is a medium-sized digital and classical media agency based in Karlsruhe, Germany, specializing in web development, TYPO3 CMS integration, PHP programming, and video-based content management systems. The company serves a diverse client base ranging from local businesses to large corporations such as BASF and Commerzbank. Their website targets experienced developers for recruitment and showcases their portfolio of projects. Technically, the site uses a modern stack including PHP, MySQL, JavaScript, and integrates Google Analytics and Facebook SDK for marketing and analytics. However, the absence of HTTPS is a significant security gap. The site implements GDPR-compliant cookie consent via Klaro but lacks explicit security policies or incident response information. Overall, the website is professional and trustworthy but requires improvements in security and technical implementation to enhance user trust and compliance.

DER PUNKT GmbH operates the website marketing-videomagazin.de, presenting an interactive marketing video magazine called PUNKTUELL. The company provides rich video content focused on marketing, modern media, and digital communication, targeting marketing professionals and SMEs primarily in Germany. The website features a newsletter subscription, multiple video episodes dating back to 2014, and professional branding consistent with the company's identity. The business model centers on content marketing and digital media production services. Technically, the site uses TYPO3 CMS, integrates Google Analytics and Tag Manager for analytics, and employs cookie consent mechanisms to comply with GDPR. Hosting appears to be provided by kasserver.com, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers are not explicitly detected. Privacy compliance is strong with a comprehensive privacy policy and cookie consent banner. Contact information and legal imprint details are clearly provided, enhancing business credibility. Overall, the site is professional, trustworthy, and well-maintained.

C

coronakanal.de

coronakanal.de

47

coronakanal.de is a regional video magazine based in Karlsruhe, Germany, providing information and support for small and medium-sized enterprises (SMEs) during the Corona crisis. The website offers video content primarily hosted on YouTube, focusing on topics such as financial aid, legal advice, digital tools, and societal impacts related to COVID-19. The target audience is the Mittelstand in Germany, particularly in the Karlsruhe region. The business operates as a media content provider with a focus on crisis communication and SME assistance. Technically, the website is built on WordPress using the Uncode theme and integrates common web technologies such as Google Analytics, FontAwesome, and Yoast SEO. Hosting is provided by kasserver.com, and the site uses HTTPS with a good SSL configuration. The site is moderately optimized for performance and mobile devices, with basic accessibility features and good SEO practices. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, explicit security headers and a formal security policy or incident response contacts are absent. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data shows structured domain registration without privacy protection, consistent with the website's business nature. Overall, coronakanal.de presents a professional and trustworthy online presence for its niche audience. Strategic improvements include publishing a privacy policy and terms of service, enhancing security headers, and providing clear incident response contacts to strengthen compliance and trust.

J

Jobimeo

jobimeo.de

38

Jobimeo is a German technology platform offering a free video application creation tool for job seekers. The website provides users with the ability to record webcam videos, upload resumes, and receive tips to enhance their job applications. The platform targets individuals seeking to differentiate themselves in the job market through personalized video presentations. Technically, the site uses JavaScript and Matomo analytics, with a moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is partially met with a GDPR-compliant privacy policy but no cookie banner. Overall, the site is professional and trustworthy but could improve in security and compliance transparency.

D

DER PUNKT GmbH − Agentur für Design & Lösung

arbeitgeberleben.de

41

Arbeitgeberleben is a German-based small media agency specializing in employer branding and HR communication through authentic storytelling and multimedia content production. The company operates under DER PUNKT GmbH and offers services including workshops, video and photo production, and social media content management to help companies present themselves attractively to potential employees. The website is professionally designed with good content quality and clear navigation, targeting businesses seeking to enhance their employer brand digitally. Technically, the site uses modern web standards, Google Tag Manager for analytics, and Klaro for cookie consent, hosted on kasserver.com. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and published security policies. WHOIS data is transparent and consistent with the business claims, supporting legitimacy. Overall, the site scores well on business credibility and privacy compliance but could improve security practices and formal policies.

C

CENTROTHERM Mladá Boleslav, a.s.

centrothermmb.cz

44

CENTROTHERM Mladá Boleslav, a.s. is a Czech energy company specializing in the supply and management of thermal energy, serving over 14,000 residential and commercial customers in Mladá Boleslav and Kosmonosy. The company operates a hot water distribution system with a total capacity of 152 MW, sourcing heat from the ŠKO-ENERGO plant. The website reflects a medium-sized local energy supplier with a focus on reliability, safety, and cost-effective energy delivery. Technically, the website is built on WordPress with a variety of plugins and frameworks such as Bootstrap and jQuery, offering a moderate level of performance and mobile optimization. Security posture is basic, with HTTPS enabled and a cookie consent mechanism in place, but lacking critical security headers and updated libraries. The absence of a privacy policy and WHOIS data reduces trust and compliance confidence. Overall, the website is functional and professional but would benefit from enhanced security measures and clearer compliance documentation.

The website www.mybox.pro currently serves only as a redirect to https://www.mybox.eco/, providing no direct content or business information. The lack of accessible content and absence of metadata, contact details, or security policies indicates a very low digital maturity level. The WHOIS data is malformed and does not provide any registrar or registrant information, which further diminishes trust and transparency. Technically, the site lacks HTTPS enforcement and security headers, exposing it to potential security risks. Overall, the site presents a minimal security posture with no visible vulnerabilities but also no protective measures. The risk assessment is high due to the lack of transparency and security best practices. Strategic recommendations include implementing HTTPS, publishing clear privacy and cookie policies, adding business contact information, and improving website content and technical SEO to enhance trust and compliance.

W

Woodcote.sk

baustore.sk

49

Woodcote.sk operates as the largest online retailer of building materials and sanitary products in Slovakia, serving both consumers and businesses with a wide range of construction and home improvement products. The website emphasizes fast delivery from 36 warehouses across Slovakia, targeting the Slovak market with a strong e-commerce business model. The platform is professionally designed with good content quality and consistent branding, supporting its market position as a leading supplier in its sector. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, Microsoft Clarity, and Bing Ads for analytics and marketing. The site is mobile-optimized and performs moderately well, though it lacks explicit CMS identification and some advanced accessibility features. The hosting provider is not explicitly identified from the data. From a security perspective, the site uses HTTPS and reputable third-party analytics but lacks visible security headers and publicly disclosed security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no accessible privacy policy or terms of service pages. Contact information is not clearly presented on the main page, which may impact user trust and compliance. Overall, Woodcote.sk presents a professional and functional e-commerce platform with room for improvement in privacy compliance, security transparency, and contact accessibility. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

Kino Crystal is a local cinema business based in Česká Lípa, Czech Republic, operating since 2004. The website provides information about movie screenings, ticket reservations, and cinema services, targeting local cinema-goers. The business model is focused on entertainment and hospitality, offering digital 3D cinema experiences. The site is modest in design and content, reflecting a small business with a local community focus. Technically, the website uses basic XHTML and CSS with minimal external dependencies, including a Facebook Like Box iframe. There is no detected CMS or advanced frameworks. Performance and mobile optimization are basic, with no evident accessibility features. SEO is minimal but includes meta tags and structured navigation. From a security perspective, the site uses HTTPS but lacks important security headers and published privacy or cookie policies, indicating low compliance with modern privacy regulations such as GDPR. No incident response or vulnerability disclosure information is provided. The absence of forms limits exposure to input-based vulnerabilities but also reduces user engagement capabilities. Overall, the website is functional and trustworthy for its purpose but requires improvements in privacy compliance, security headers, and user data protection to enhance its security posture and regulatory adherence. The domain WHOIS data supports the legitimacy and long-term operation of the business.

F

FORNAL trading s.r.o.

fornal.cz

46

FORNAL trading s.r.o. is a Czech Republic based manufacturer specializing in vehicle superstructures and modifications, established in 2002. The company positions itself as a leading manufacturer in the transportation sector, targeting businesses requiring specialized vehicle modifications. The website is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with basic mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and shows minor backend PHP errors. Privacy compliance is weak due to the absence of a clear privacy policy and terms of service, though a cookie consent mechanism is present. Overall, the website is functional and business-focused but would benefit from improved security practices and clearer compliance documentation.

S

SAKER spol. s r.o.

saker.cz

41

SAKER spol. s r.o. is a well-established Czech company specializing in the processing and recycling of non-ferrous metals and the production of aluminum alloys, with a strong presence in the Czech and Slovak markets. The company operates multiple subsidiaries and employs around 200 people, generating a consolidated annual turnover near 100 million EUR. Their business model focuses on industrial recycling and alloy production, serving sectors such as automotive and electrotechnical industries. The website reflects a professional and consistent brand image with detailed business information and contact data. Technically, the site is built on WordPress using common plugins and includes Google Analytics for tracking, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is limited due to absence of visible privacy and cookie policies. Overall, the website is trustworthy and business credible but could improve in privacy and security transparency.

Z

Zlínský krajský fotbalový svaz

kfszlin.cz

46

Zlínský krajský fotbalový svaz operates as the regional football association for the Zlín region in the Czech Republic, providing official communications, competition results, referee delegations, and contact information for clubs and commissions. The website serves as an information hub for football stakeholders in the region, including clubs, referees, coaches, and fans. It maintains partnerships with national and regional sports organizations, enhancing its credibility and reach. Technically, the website is built on Joomla CMS with the Gantry 5 framework, utilizing common JavaScript libraries such as jQuery and MooTools. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and consistent branding. However, it lacks advanced SEO and accessibility features, and no analytics or tracking scripts were detected. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible security headers and a vulnerability disclosure policy. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR. The absence of WHOIS data limits domain trust assessment, though the website content and external official links support legitimacy. Overall, the site is functional and professional for its purpose but would benefit from enhanced security measures, privacy compliance, and technical optimizations to improve trust and user experience.

I

Industria AC a.s.

industriaac.cz

48

Industria AC a.s. is a Czech company specializing in electrical installation and technical distribution services primarily for the industrial and energy sectors. Founded in 2005, the company offers a range of services including high and low voltage installations, project design, photovoltaic power plants, inspection activities, and reserved technical equipment for high voltage networks. The website presents a professional image with clear service offerings and contact information, targeting industrial and energy businesses in the Czech Republic. Technically, the website uses modern web technologies such as Bootstrap and Google Fonts, with a responsive design and cookie consent mechanisms in place. However, there is no evidence of advanced security headers or explicit privacy policies, and the WHOIS data for the domain is missing, which raises some concerns about domain transparency. The site is accessible without any WAF or blocking mechanisms detected. From a security perspective, the site demonstrates basic compliance with cookie consent but lacks visible security headers and privacy documentation. No forms or user input fields are present on the main page, reducing attack surface. The absence of WHOIS data and registrant information lowers trustworthiness but the professional presentation and contact details mitigate some risk. Overall, the site is moderately secure but could improve in transparency and security best practices. The overall risk is moderate with recommendations to enhance security headers, publish privacy and security policies, and clarify domain registration details to improve trust and compliance.

HARKO s.r.o. is a small Czech company specializing in plumbing, heating, and gas services with over 25 years of operational history. The company offers a range of services including installations, sales, consulting, and subsidy processing, targeting residential and commercial customers primarily in the Czech Republic. The website reflects a basic but functional online presence with clear contact information and references to relevant subsidy programs. Technically, the site uses older JavaScript libraries and a CMS called WebIdeal, with no evidence of modern frameworks or advanced SEO and accessibility features. Security posture is moderate but weakened by outdated libraries, lack of visible HTTPS enforcement, and missing security headers. Privacy and cookie policies are absent, indicating non-compliance with GDPR best practices. Overall, the website is legitimate and trustworthy but would benefit from technical and security improvements.

K

Koupelny Kostrůnek

koupelny-kostrunek.cz

36

Koupelny Kostrůnek is a small retail and service business specializing in bathroom products and renovation services based in Kroměříž, Czech Republic. The website showcases a broad catalog of bathroom product series and offers services such as 3D graphic design, non-binding cost calculations, expert consulting, and turnkey bathroom core reconstructions. The site is built on WordPress with WooCommerce and Elementor, indicating a modern and flexible technical infrastructure. The website is accessible without any WAF or security challenges, uses HTTPS, and loads resources from trusted external domains. However, the absence of WHOIS data and lack of privacy and cookie policies indicate gaps in compliance and domain transparency. Security headers are not detected, suggesting room for improvement in security posture. Overall, the site presents a professional and business-focused online presence but would benefit from enhanced privacy compliance and security best practices.

F

Fyzioterapie Židlíková s.r.o.

fyzioterapiezidlikova.cz

45

Fyzioterapie Židlíková s.r.o. is a small, established private healthcare provider specializing in physiotherapy and rehabilitation services in the Czech Republic. With nearly 30 years of tradition, the company offers a wide range of therapeutic services including classical massages, laser therapy, mobilization, and specialized treatments such as rázová vlna and kineziotaping. The website reflects a professional and consistent brand image targeting patients seeking quality rehabilitation care. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile-optimized and uses Google Analytics for visitor tracking. Hosting and domain registration are managed by a reputable Czech provider, WEDOS, ensuring regional consistency and reliability. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is available, which could be improved to enhance trust and security posture. Overall, the website is functional, professional, and trustworthy for its business purpose but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

S

Sportovní zařízení města Kroměříže, příspěvková organizace

szmk.cz

44

Sportovní zařízení města Kroměříže, příspěvková organizace, is a municipal organization managing various sports facilities in Kroměříž, Czech Republic. Their services include operation of an ice stadium, swimming pools, football stadium, tennis courts, and a sports hall, targeting local residents and sports enthusiasts. The website reflects a local government entity with clear business information and public service orientation. Technically, the site uses a custom CMS (SPR-Machine-1.0), jQuery, Google Analytics, and Typekit fonts, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and privacy policy documentation. WHOIS data is unavailable, which limits domain legitimacy verification, but the website content and contact details support a trustworthy profile. Overall, the site is functional and professional but could improve privacy compliance and security best practices.

Z

ZebraStores.cz

zebrastores.cz

42

ZebraStores.cz operates as a prominent Czech e-commerce platform specializing in sports and outdoor equipment. The company manages a network of brand-specific online stores, offering products from well-known brands such as Merrell, Teva, Babolat, Stiga, and New Balance. Their business model focuses on retail sales through multiple specialized e-shops, supported by a physical showroom and service offerings like racket stringing and running diagnostics. The website targets sports enthusiasts and outdoor activity participants within the Czech Republic, positioning itself as a leading authorized retailer with a strong market presence. Technically, the website is built on ASP.NET WebForms with a custom CMS likely provided by Bluesoft. It integrates common web technologies including jQuery, bxSlider, Google Tag Manager, Google Analytics, and Facebook SDK for marketing and analytics purposes. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks advanced security headers such as Content-Security-Policy and X-Frame-Options, and does not provide explicit privacy or cookie policies, which are critical for GDPR compliance. No vulnerability disclosure or incident response information is available, indicating room for improvement in security transparency and readiness. Overall, ZebraStores.cz presents a professional and trustworthy online presence with a solid business foundation and technical infrastructure. The main risks relate to privacy compliance and security best practices, which if addressed, would enhance user trust and regulatory adherence. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and establishing a vulnerability disclosure program.

ČAK CZ s.r.o. is a small Czech construction and trading company specializing in water management, engineering networks, transport construction, and earthworks. Founded in 1998 and based in Kroměříž, the company serves municipalities, private companies, and individuals, emphasizing quality and compliance with ISO standards. Their website reflects a professional presence with detailed business descriptions and references to certifications but lacks modern privacy and security features. Technically, the site uses legacy JavaScript libraries and lacks HTTPS enforcement, which poses security risks. No privacy or cookie policies are present, indicating compliance gaps with GDPR. Overall, the security posture is moderate but requires improvements in HTTPS adoption and security headers. The website is safe for general audiences and does not contain adult or questionable content.

S

SolidCAM

imachining4nx.com

46

The website www.imachining4nx.com represents SolidCAM's iMachining technology integrated with Siemens NX, targeting manufacturing professionals seeking advanced CNC milling solutions. The site offers detailed product information, customer testimonials, downloadable brochures, and multimedia content to support user engagement. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates multiple marketing and analytics tools, including Google Analytics, Facebook Pixel, and Usercentrics for consent management. Security posture is solid with HTTPS enforced and privacy compliance evident, though some security headers are missing and no direct contact information is visible, which could impact user trust. The WHOIS data is notably absent or inaccessible, raising concerns about domain registration legitimacy despite the professional presentation and association with SolidCAM. Overall, the site scores well in content quality and technical implementation but should address WHOIS transparency and contact availability to improve business credibility and trust.

N

Nadácia PORFIX

nadaciaporfix.sk

49

Nadácia PORFIX is a Slovak non-profit foundation dedicated to supporting meaningful public benefit projects, particularly in health, sport, education, and community activities. The foundation positions itself as a socially responsible entity aiming to improve quality of life and provide targeted assistance to those in need. The website reflects a clear mission and professional presentation, targeting a general audience including civic activists and beneficiaries of supported projects. Technically, the website uses standard web technologies with good mobile optimization and accessibility, though no advanced frameworks or CMS are explicitly detected. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks visible security policies or incident response information. Privacy compliance is good with GDPR and cookie policies present. Overall, the website is trustworthy and professionally maintained, though it could benefit from enhanced security transparency and contact information.

3

3ks

3ks.de

41

3ks is a German company specializing in construction and renovation products, notably profiles and their own brand arcadia®, including the Pergone® privacy, wind, and noise protection system. The website is primarily in German and targets professionals and customers in the construction and renovation sector. The business operates in a niche market with patented technology, positioning itself as a specialized provider in the real estate industry. Technically, the website uses the Contrexx CMS platform and integrates UserCentrics for cookie consent management, indicating some level of privacy compliance. However, the site lacks explicit privacy policies, terms of service, and contact information, which limits transparency and user trust. Security posture is moderate with HTTPS assumed but no visible security headers or advanced protections. Overall, the website is functional but basic in content quality and technical sophistication.

K

Kantors Creative Club

kantors.cz

45

Kantors Creative Club is a Czech-based creative agency specializing in graphic corporate identity, photography, packaging design, and production services with over 25 years of experience. The website presents a professional portfolio showcasing various projects for notable clients, emphasizing quality and customer service. The business targets organizations seeking creative branding solutions and maintains a consistent brand image across its digital presence. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries such as Video.js and FancyApps UI, and integrates Google Tag Manager for analytics. Hosting is provided by WEDOS, a Czech hosting provider, with domain registration dating back to 2002, supporting the company's long-standing market presence. Security posture is moderate; HTTPS is used, but no explicit security headers or policies are visible, and privacy compliance is lacking due to absence of privacy and cookie policies. No contact information or forms are present on the main page, limiting direct communication channels. Overall, the website is well-designed and functional but could improve in privacy compliance and security transparency.

W

World Association of Chefs' Societies (WORLDCHEFS)

worldchefs.org

48

Worldchefs.org represents the World Association of Chefs' Societies, a globally recognized non-profit organization established in 1928 that serves as a central authority and network for culinary professionals worldwide. The website offers a comprehensive range of services including global culinary certification, events, competitions, training, and membership engagement. The organization maintains a strong market position as a leader in the hospitality and culinary sector, targeting chefs, culinary schools, and hospitality companies globally. Technically, the website is built on a modern WordPress platform utilizing popular plugins such as Elementor for design, Yoast SEO for optimization, and various integrations for donations, marketing, and analytics. The site is hosted with Cloudflare DNS and secured with HTTPS, reflecting a moderate to good level of digital maturity. Performance and mobile optimization are adequate, with good SEO practices in place. From a security perspective, the site employs HTTPS and domain transfer protections but lacks DNSSEC and visible security headers, which are recommended for enhanced security. No critical vulnerabilities or blocking mechanisms were detected. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service found in the analyzed content. Overall, the website is professional, trustworthy, and well-positioned in its industry, though improvements in security headers, DNSSEC, and privacy documentation would strengthen its security posture and compliance standing.

S

Solution Factory, s.r.o.

gastrojobs.cz

45

GastroJobs.cz is a Czech Republic based online job portal specializing in hospitality, gastronomy, spa, and tourism sectors. Established in 2001, it serves as a niche platform connecting job seekers and employers within the hospitality industry. The website offers job listings, candidate and employer registration, and publishes relevant articles to support the industry community. The platform maintains a consistent brand presence and partners with recognized industry organizations, enhancing its market credibility. Technically, the site employs modern web technologies including Bootstrap, jQuery, DataTables, and integrates Google Analytics and Facebook SDK for tracking and marketing purposes. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and secure login forms, though it lacks advanced security headers and explicit security policies. Privacy compliance is basic with cookie consent implemented but no dedicated privacy policy page found. Overall, GastroJobs.cz presents a professional and trustworthy platform with room for improvement in security and privacy transparency.

Golf Club Lázně Kostelec is a small hospitality and recreation business located in the Czech Republic, offering a comprehensive golf facility including a nine-hole course, driving range, indoor golf, and associated hotel and spa services. The website presents a professional and well-structured digital presence with clear navigation and relevant content targeting golf enthusiasts and visitors seeking leisure and wellness experiences. Technically, the site employs standard web technologies such as jQuery, Google Analytics, and Google Maps API, with HTTPS enabled ensuring secure communications. However, some technical improvements are recommended, including updating libraries and enhancing security headers. The security posture is generally good with no critical vulnerabilities detected, but the absence of cookie consent and security policy pages indicates room for compliance improvements. The lack of WHOIS data reduces domain trustworthiness, but the website content and contact details support legitimacy. Overall, the site is safe, user-friendly, and suitable for its target audience.

T

TRIPOLI RECENT, S.R.O.

tripoli.cz

42

The website www.100chuti.com represents TRIPOLI RECENT, S.R.O., a medium-sized hospitality business operating multiple restaurant locations and catering services in Brno, Czech Republic. The business focuses on traditional cuisine with a modern twist, targeting local residents and visitors seeking quality dining experiences. The site showcases a network of branded restaurants with detailed descriptions, menus, and links to partner sites, reflecting a well-established local market presence. Technically, the website is built on WordPress CMS using common libraries such as jQuery, Bootstrap, and Owl Carousel. It is mobile-optimized with good navigation and content quality. The site uses HTTPS with proper SSL configuration but lacks some security headers and cookie consent mechanisms, indicating room for improvement in security and privacy compliance. Security posture is moderate with no visible vulnerabilities or exposed sensitive data. Privacy policy is present and GDPR compliant, but cookie consent is missing. WHOIS data is unavailable, raising concerns about domain registration legitimacy, though the website content and business information appear professional and consistent. Overall, the site is functional and trustworthy for users, but the lack of WHOIS data and some security best practices suggest the business should verify domain registration and enhance security headers and privacy mechanisms to strengthen trust and compliance.

I

Interhotel Zlín a.s.

hotelmoskva.cz

42

Interhotel Zlín a.s. is a medium-sized hospitality business operating a newly renovated four-star hotel located in the center of Zlín, Czech Republic. The hotel positions itself as the largest congress hotel in the region, offering modern accommodation, conference facilities, multiple restaurants, wellness, and sports amenities. The website reflects a professional and consistent brand image with clear business focus on hospitality and conference services. Technically, the website is built on WordPress CMS using common libraries such as jQuery, Slick Carousel, and FontAwesome, with integration of a third-party booking engine (Bookolo). The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie policy present but no active consent mechanism. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Ž

Žijeme Gastrem s.r.o.

jsemecobrcko.cz

49

Jsem ECO brčko is a Czech-based company specializing in the production and online sale of ecological, biodegradable drinking straws made from natural fibers and wood pulp. The company targets restaurateurs, bars, and individual consumers who seek sustainable alternatives to plastic straws. Their product portfolio includes multiple variants tailored for different drink types, emphasizing environmental responsibility and user comfort. The website is professionally designed, mobile-optimized, and provides clear navigation and e-commerce functionality. Technical infrastructure includes modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Smartsupp chat, alongside security measures like HTTPS and Google reCAPTCHA. However, the absence of WHOIS data limits domain trust verification, and the site lacks explicit privacy policy and terms of service pages. Security headers are also missing, which could be improved to enhance security posture. Overall, the website presents a trustworthy and professional front for a niche ecological retail business.

Venison CZ s.r.o operates a professional e-commerce platform specializing in the purchase, processing, and sale of high-quality game meat sourced from Czech and Slovak forests. The company targets both retail consumers and B2B clients such as restaurants and gastronomy businesses, positioning itself as a regional leader with a modern processing facility in Míškovice. The website reflects a well-structured business model with clear product offerings including fresh game meat, dried meat, delicacies, and sausages. Technically, the site is built on WordPress using Elementor, integrating modern analytics and marketing tools such as Google Analytics and Facebook Pixel, alongside security measures like Google reCAPTCHA and cookie consent mechanisms. Security posture is solid with HTTPS enforced, though some security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the website's professional presentation and transparent contact information support business credibility. Overall, the site demonstrates a mature digital presence suitable for its market niche.

The website www.syryzmoravy.cz is currently inaccessible, returning a 503 Service Temporarily Unavailable error page indicating server downtime or capacity issues. Due to the lack of accessible content, no business description, contact information, or security policies can be analyzed. The WHOIS query returned no registration data, which raises concerns about the domain's registration status or privacy protection. The absence of metadata, scripts, or external links further limits the ability to assess the website's technical infrastructure or digital maturity. Security posture cannot be evaluated due to missing data and site unavailability. Overall, the site presents a high risk due to lack of availability and transparency, and no trust or compliance indicators are present.