High-risk security reports

L

Lipea s.r.o.

lipea.cz

44

Lipea s.r.o. is a specialized supplier and installer of clinker bricks, facing bricks, and ceramic paving materials primarily serving the Czech Republic and Slovakia. Established in 1995, the company offers a broad range of products with a focus on quality, color variety, and frost resistance. Their market position is that of a trusted, traditional supplier with over 30 years of experience, targeting construction professionals, architects, and end customers seeking durable and aesthetic building materials. The website reflects a professional business presence with detailed product catalogs, references, and contact options. Technically, the site uses a moderately modern stack including jQuery, Materialize CSS, and FontAwesome, with good mobile optimization and user experience. Security posture is adequate with HTTPS usage and secure forms, but lacks visible security headers and explicit security policies. Privacy compliance is partially addressed through a cookie consent mechanism, though a dedicated privacy policy page is missing. WHOIS data is unavailable, which impacts domain trustworthiness, but the website content and contact information support legitimacy. Overall, the site is functional, professional, and business-focused with room for security and compliance improvements.

P

Projekty LK s.r.o.

projekty-lk.cz

48

Projekty LK s.r.o. is a small Czech Republic-based company specializing in architectural project documentation, construction supervision, and consulting services primarily in the Česká Lípa and Liberec regions. The company offers services including project documentation, technical supervision, property purchase consulting, and building passports. The website presents a professional and consistent brand image with clear contact information and customer testimonials, positioning itself as a trusted local service provider in the real estate and construction sector. Technically, the website uses modern frontend technologies such as UIkit and jQuery, with responsive design and good SEO practices. The site includes a cookie consent mechanism indicating some level of privacy compliance, though no explicit privacy policy page was found. Security headers and detailed SSL configuration could not be verified but HTTPS is used. No analytics or tracking services were detected, suggesting minimal user tracking. From a security perspective, the site shows basic good practices but lacks advanced security headers and explicit incident response or data protection officer information. The WHOIS data is missing, which raises concerns about domain registration transparency and trustworthiness, although the website content itself appears legitimate and professional. Overall, Projekty LK s.r.o. demonstrates a solid business presence with a well-structured website suitable for its target audience. However, improvements in privacy policy transparency, security header implementation, and domain registration clarity are recommended to enhance trust and compliance.

The website iki-institut.cz currently serves only a standard HTTP 404 error page indicating that the requested resource is not found. There is no accessible content, metadata, or business information available on the site. The domain is registered since 2009 with a Czech registrar and uses Czech name servers, suggesting a legitimate registration and a Czech business origin. However, the lack of website content and absence of security or privacy policies significantly limit the ability to assess the company's operations or digital maturity. The technical infrastructure appears minimal with no detected CMS, frameworks, or analytics tools. Security posture cannot be evaluated due to missing data and lack of HTTPS information. Overall, the site is non-functional from a user perspective and presents a high risk due to lack of transparency and content.

G

gutentor

gutentor.com

42

Gutentor is a WordPress plugin company specializing in advanced page building blocks for the Gutenberg editor. The company targets designers, developers, freelancers, agencies, marketers, and entrepreneurs seeking a modern, easy-to-use page builder integrated with WordPress core. The website positions Gutentor as a feature-rich, fast, and flexible solution with a growing user base of over 38,000 active installations. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google Fonts, FontAwesome, and Litespeed cache optimizations. The site is mobile optimized and SEO friendly, with good use of structured data and meta tags. Security posture is strong with HTTPS enforced and security headers present, but lacks published security policies or incident response information. The absence of WHOIS data reduces trust somewhat, but the active community presence and professional site design support legitimacy. Overall, the site demonstrates a mature digital presence with room for improvement in transparency and security disclosures.

T

Thermona, spol. s r.o.

thermona.by

46

Thermona, spol. s r.o. is a well-established Czech manufacturer specializing in gas and electric boilers, including cascade boiler systems, with a history dating back to 1990. The company has a strong international presence, exporting to 21 countries and maintaining a medium-sized business profile. Their website reflects a professional and consistent brand image, targeting both residential and commercial heating markets. Technically, the site uses legacy jQuery and common UI libraries, with moderate performance and basic mobile optimization. Security posture is moderate but lacks critical security headers and visible HTTPS enforcement, which should be addressed to enhance trust and compliance. Privacy and cookie policies are absent, representing a compliance gap. Overall, the website is content-rich and trustworthy but would benefit from improved security and privacy practices.

Henry SYSTEM is a Czech-based technology platform developed by WebConsult.cz - Internet & Marketing s.r.o., offering integrated business case and data management solutions. The platform centralizes project lifecycle management, calculations, document control, planning, production visualization, and CRM functionalities, targeting businesses seeking digital transformation and process efficiency. The website is professionally designed with clear navigation and relevant business content, primarily in Czech with English language support. Technically, it uses jQuery and custom JavaScript but lacks advanced security headers and privacy compliance features. No WHOIS data is available, which limits domain trust verification. Contact information and company registration details are clearly provided, enhancing business credibility.

The website www.merkur-eshop.cz appears to be a minimal landing page promoting a demo version of the Merkur eShop electronic commerce platform developed by WebConsult.cz - Internet & Marketing s.r.o. The site content is very basic, with no detailed business or contact information, and primarily serves as a gateway to a demo subdomain. The domain WHOIS data is missing, indicating the domain may not be registered or is inactive, which raises concerns about the legitimacy and operational status of the site. Technically, the site uses basic HTML and includes Google Analytics tracking but lacks modern security and privacy features such as HTTPS, security headers, and cookie consent mechanisms. Overall, the digital maturity is low, and the site does not provide sufficient information to establish trust or compliance.

Z

ZLIN.CZ s.r.o.

luhacovice.cz

49

Luhačovice.cz is a well-established local tourism portal focused on the spa town of Luhačovice in the Czech Republic. The website provides comprehensive information about local attractions, accommodation, dining, events, and practical tips for visitors. It serves as an independent tourist guide and features partnerships with local businesses and tourism entities. The site is professionally designed with good content quality and consistent branding, targeting tourists and visitors interested in the region. The business is small-sized, founded in 1997, and operated by ZLIN.CZ s.r.o., reflecting a stable market presence.

S

Střední škola gastronomie a obchodu Zlín

gaozl.cz

41

Střední škola gastronomie a obchodu Zlín is a well-established secondary educational institution located in the heart of Zlín, Czech Republic, founded in 1958. The school specializes in gastronomy, culinary arts, hospitality, and related fields, offering both vocational and maturita (high school graduation) programs. It maintains strong partnerships with local businesses and provides practical training opportunities, including catering events and specialized courses for students with special educational needs. The website reflects a professional and regionally respected educational entity with a clear focus on student engagement and practical skills development. Technically, the website employs a custom CMS with modern frontend technologies such as jQuery and Owl Carousel for interactive elements. It is served over HTTPS with a valid SSL certificate, includes a cookie consent mechanism compliant with GDPR, and demonstrates good mobile responsiveness and SEO practices. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site shows a solid baseline with HTTPS and cookie consent but lacks advanced security headers and formal incident response contacts. The absence of WHOIS data limits domain trust evaluation, though the website content and contact information support legitimacy. No vulnerabilities or malicious content were detected. Overall, the site is safe, professional, and suitable for its educational purpose. Strategically, the school should enhance its security posture by implementing recommended HTTP security headers, publishing clear security policies, and improving WHOIS transparency to strengthen trust. Continued focus on GDPR compliance and user privacy is evident and should be maintained.

D

DF Partner

dfpartner.cz

37

DF Partner is a Czech-based company specializing in the manufacturing and distribution of automotive chemicals and cosmetics, serving primarily Czech and Slovak markets. The company positions itself as a trusted leader with well-known brands such as SHERON, offering a broad product range including oils, lubricants, operational fluids, and automotive accessories. Their business model targets both B2B and B2C customers including gas stations, transport companies, auto service providers, and individual motorists. The website reflects a professional and consistent brand image with clear communication channels and social media presence. Technically, the website is built on the Kentico CMS platform, utilizing modern web technologies such as Google Tag Manager for analytics and tracking. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is strong with HTTPS enforced and secure form handling, though some security headers are missing. Privacy compliance is evident with GDPR policy and cookie consent mechanisms in place. The WHOIS data is unavailable due to privacy protection, which is common and justified for commercial entities in the EU. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website demonstrates a mature digital presence with good security and privacy practices, supporting the company's market position as a reliable automotive chemical supplier.

A

AVONET, s.r.o.

avonet.cz

49

AVONET, s.r.o. is a well-established Czech telecommunications company founded in 1997, providing high-speed internet, IPTV, mobile tariffs, and related hardware primarily in the Zlínský kraj region. The company positions itself as a regional ISP with a strong local customer base and a focus on quality service and modern technology. Their website reflects a professional and customer-oriented approach with clear service offerings and support channels. Technically, the site uses modern JavaScript libraries and tracking tools with appropriate consent mechanisms, indicating digital maturity. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. Overall, the website is trustworthy, compliant with GDPR, and provides a good user experience.

The website www.helios.cz serves primarily as a transitional landing page informing visitors about the rebranding of the company EMi, spol. s r.o. to EMI Lighting, effective from January 1, 2019. The business specializes in lighting and lighting management systems targeted at commercial and institutional clients such as stores, manufacturing halls, sports fields, schools, and streets. The site content is minimal and directs users to the new brand website emilighting.cz for full information. The company maintains consistent contact details and trademark ownership, indicating a legitimate business presence in the energy sector within the Czech Republic. Technically, the site employs common web technologies including Google Analytics, Facebook SDK, and Smartlook for analytics and user behavior tracking. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. No CMS or hosting provider information is discernible. Security headers and explicit security policies are absent, though HTTPS usage is implied by the Open Graph URL pointing to a secure domain. From a security perspective, the site shows moderate maturity with no visible vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, lack of incident response contacts, and missing WHOIS data reduce trust and compliance posture. The WHOIS query returned no data, which is unusual and negatively impacts domain legitimacy scoring. This may be due to privacy protection or registry issues but warrants further investigation. Overall, the site is safe with no adult or questionable content, but it is limited in content and security transparency. Strategic recommendations include adding comprehensive privacy and cookie policies, improving mobile and accessibility features, implementing security headers, and clarifying domain registration details to enhance trust and compliance.

A

Agrostis Trávníky s.r.o.

agrostisobchod.cz

48

Agrostis Obchod is an e-commerce website operated by Agrostis Trávníky s.r.o., specializing in the sale of lawn seed mixtures, fertilizers, and garden machinery primarily targeting gardeners and agricultural professionals in the Czech Republic. The website presents a professional and consistent brand image with a clear product catalog and user-friendly navigation. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Analytics, Facebook Pixel, Hotjar, and Smartsupp Chat, built on the oXyShop platform. It supports HTTPS and implements cookie consent mechanisms, indicating a baseline level of privacy compliance. However, the absence of WHOIS registration data and lack of explicit security headers or direct contact information slightly reduce the overall trustworthiness. No security incidents or vulnerabilities were detected in the content, and the site does not contain any adult or questionable content, making it safe for general audiences.

M

MAS Vyškovsko, z.s.

masvyskovsko.cz

43

MAS Vyškovsko, z.s. is a local action group operating in the Vyškov region of the Czech Republic, focusing on community development, regional projects, and facilitating access to grants and subsidies. The organization targets local residents, community stakeholders, and project applicants, positioning itself as a key regional development facilitator. The website provides comprehensive information on local initiatives, funding opportunities, and community engagement activities, supported by clear contact details and social media presence. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, Swiper.js, and PhotoSwipe, indicating a moderate level of digital maturity. The site is mobile optimized and accessible, with a custom CMS platform likely used for content management. Performance is moderate, with good SEO and accessibility practices observed. However, some security best practices like security headers are missing. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, but lacks explicit privacy policy and terms of service pages, which are important for compliance. No WHOIS data is available, which raises concerns about domain registration transparency and trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, MAS Vyškovsko, z.s. presents a professional and trustworthy online presence for a small non-profit community organization. Strategic improvements in privacy documentation, security headers, and domain registration transparency would enhance trust and compliance.

The website mitkamjit.cz serves as a portal for sharing activities, ideas, and educational content primarily targeted at leisure centers and children's homes across the Czech Republic. It is affiliated with the Sdružení pracovníků domů dětí a mládeže v ČR, a Czech association supporting these institutions. The portal offers categorized content by age and activity type, fostering community collaboration and resource sharing. The site has been operational since 2003, indicating a mature presence in its niche educational sector. Technically, the website employs a standard web technology stack including jQuery, Bootstrap, Font Awesome, and Google Analytics for tracking. The site is moderately optimized for mobile devices and offers a clear navigation structure. However, it lacks advanced accessibility features and comprehensive SEO optimizations. Hosting and domain registration are consistent and stable, with no signs of privacy protection or suspicious WHOIS data. From a security perspective, the site uses HTTPS for external resources but does not explicitly show security headers or detailed security policies. There is no visible privacy or cookie policy, which is a compliance gap, especially under GDPR. No contact or incident response information is provided, limiting transparency. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website is a functional, niche educational platform with moderate technical maturity and some gaps in privacy and security compliance. Strategic improvements in privacy policy publication, security header implementation, and contact transparency would enhance trust and compliance.

F

Fermeria

fermeria.de

49

Fermeria is a well-established online platform specializing in connecting caregivers, household helpers, tutors, and specialist professionals with clients across multiple European countries, primarily targeting the German market. The platform offers free profile creation and facilitates communication through symbolic fees, serving over 40,000 users since its founding in 2012. Its multi-country presence and professional design position it as a trusted intermediary in the healthcare and education sectors. Technically, the website employs modern web technologies including Google reCAPTCHA, Google Tag Manager, and CookieHub for privacy compliance, hosted by websupport.sk. The site is mobile-optimized and SEO-friendly, although accessibility features are basic. Security posture is solid with HTTPS enforced and anti-bot measures in place, but lacks explicit security headers and published security policies. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences.

F

Fermeria

fermeria.hu

46

Fermeria is a well-established online platform based in Hungary that connects individuals seeking or offering caregiving, tutoring, and home assistance services across multiple European countries. The platform supports a broad user base with over 40,000 users and offers services including elderly care, childcare, pet care, home help, tutoring, and specialized professions. The website is professionally designed with consistent branding and clear navigation, targeting a general audience interested in caregiving and related services. Technically, the site leverages modern web technologies such as Google reCAPTCHA, Google Tag Manager, Facebook Pixel, and the Nette PHP framework, ensuring a secure and user-friendly experience. The platform supports GDPR compliance with comprehensive privacy and cookie policies and employs consent mechanisms for data collection. Security posture is good with HTTPS enforced and secure form handling, though some security headers could be improved and explicit security policies are absent. Overall, Fermeria presents a trustworthy and professional digital presence with moderate technical performance and good privacy compliance.

F

Fermeria

fermeria.cz

48

Fermeria.cz is an established online platform focused on connecting individuals seeking or offering caregiving, household help, and tutoring services primarily in the Czech Republic and other European countries. The platform supports multiple service categories including senior care, childcare, pet care, and specialized professions, serving over 40,000 users across 8 countries. The business model revolves around free profile creation with paid communication features, positioning Fermeria as a regional multi-country service marketplace. Technically, the website employs modern web technologies including Google reCAPTCHA, Google Tag Manager, Facebook Pixel, and Hotjar for analytics and user experience enhancement. The site is built on the Nette Framework and uses Bootstrap and Select2 for UI components, ensuring good mobile optimization and moderate performance. Security-wise, the site enforces HTTPS and uses bot protection and cookie consent mechanisms but lacks explicit security headers and published incident response policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and multi-country presence suggest legitimacy. Overall, the site is professional, GDPR compliant, and safe for general audiences.

I

IDEAL – Trade Service, spol. s r.o.

hivision.cz

39

The website hivision.cz represents a Czech-based company IDEAL – Trade Service, spol. s r.o., offering industrial control systems under the HiVision brand. Their core business focuses on providing modular, remote-controllable technology solutions primarily for manufacturing sectors such as coating and painting lines. The company positions itself as an experienced and regionally recognized player with a registered trademark in the European Union and a parent company ITS Brno. The website content is professionally presented, targeting manufacturing companies seeking efficiency and energy savings through advanced control systems. Technically, the site is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various UI enhancement plugins. It employs Google Tag Manager for analytics and tracking. The site is mobile-optimized and SEO-friendly, with good navigation and content quality. However, no hosting provider or server details were identified, and performance is moderate. From a security perspective, the site uses HTTPS with no visible exposed sensitive data. Security headers are not explicitly detected, and no vulnerability disclosures or incident response policies are published. Privacy and cookie policies are present and GDPR compliant, but contact information such as emails or phone numbers is not explicitly provided on the site. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and branding indicate a legitimate business. Overall, the site demonstrates a solid business and technical foundation with room for improvement in security transparency and contact accessibility. The lack of WHOIS data is a concern that should be addressed to enhance trust and legitimacy.

P

Průmyslové kompresory

its-kompresory.cz

41

ITS Kompresory is a Czech-based small business specializing in the sale, service, and maintenance of industrial compressors and related equipment such as air dryers, filters, industrial cooling systems, and nitrogen generators. The company targets industrial clients requiring compressed air technology and offers 24/7 service support. Their market position is that of a supplier and service provider within the Czech Republic and Slovakia, leveraging recognized brands like Ingersoll Rand and Zephyr. The website is professionally designed using WordPress and Elementor, with a clear structure and good mobile optimization, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and published security policies indicates room for improvement. Privacy compliance is partial, with a cookie consent mechanism present but lacking a published privacy policy or terms of service. Overall, the website is trustworthy and functional, supporting the company's business credibility.

L

Liana

lianasro.sk

44

Liana is a Slovak e-commerce business specializing in quality Slovak food products, baking supplies, and household kitchen equipment. The website presents a professional and well-structured platform with a focus on product sales and recipe sharing, targeting consumers interested in Slovak culinary products. The technical infrastructure uses modern web technologies including Google Tag Manager, Pinterest tracking, and Smartsupp chat, ensuring a responsive and moderately performant user experience. Security posture is good with HTTPS enforced and some security headers present, but lacks explicit privacy and cookie policies and incident response contacts, which are important for compliance and trust. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

K

Kudu Creative

wearekudu.com

47

Kudu Creative is a small, professional branding and interactive marketing agency based in Easton, Pennsylvania, established in 2014. The company focuses on immersive brand strategies and digital design to help businesses grow by enhancing their creative equity. Their market position is that of a local/regional agency with a clear focus on client-centric marketing solutions. The website reflects a consistent and professional brand image with good content quality and clear navigation. Technically, the website is built on WordPress, utilizing common plugins such as Yoast SEO and MonsterInsights for SEO and analytics respectively. Hosting is provided by DreamHost, and the site uses HTTPS with a valid SSL certificate. Performance and mobile optimization are moderate to good, though accessibility features are basic. The site lacks advanced security headers and DNSSEC is not enabled, which are areas for improvement. From a security perspective, the site demonstrates basic good practices such as HTTPS and domain registration locks but lacks published security policies, incident response information, and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious content were detected. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanisms, which could pose regulatory risks. Overall, the website is trustworthy and professional with a solid business foundation but would benefit from enhanced privacy compliance and security hardening to improve its risk posture and regulatory adherence.

B

BRALEP s.r.o.

bralep.cz

48

BRALEP s.r.o. is a well-established Czech manufacturer specializing in professional construction chemicals, with a strong market presence spanning 29 years. The company offers comprehensive system solutions tailored for various construction and flooring professionals, supported by in-house research, development, and a dedicated distribution network. Their business model integrates manufacturing with direct customer service, including technical consulting and free delivery for qualifying orders. The website reflects a professional and consistent brand image, targeting construction professionals and retail partners within the Czech Republic.

H

HASOFT VELKOOBCHOD, s.r.o.

hasoft.cz

46

HASOFT VELKOOBCHOD, s.r.o. is a Czech-based manufacturer and wholesaler specializing in construction materials, including special mortars, adhesive tapes, and construction fittings. Established since 1999, the company targets construction professionals and DIY enthusiasts, offering a broad product range through its website and e-shop. The website is well-structured, with clear product categories and detailed descriptions, supporting its market position as a niche supplier in the construction sector. Technically, the site uses standard web technologies such as HTML5, CSS3, JavaScript, jQuery, and Modernizr, with responsive design for mobile users. However, no CMS or advanced frameworks are detected, indicating a possibly custom or lightweight platform. Security-wise, the site uses HTTPS and secure form methods but lacks visible advanced security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no dedicated privacy or terms of service pages. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

G

Georg Fritzmeier GmbH & Co. KG

fritzmeier.de

47

The Fritzmeier Group is a large German manufacturing company specializing in the production of customized vehicle components and environmental technology solutions for the Off-Highway and On-Highway industries. With approximately 2,200 employees, the company operates through four main business units: CABS, COMPOSITE, TECHNOLOGIE, and UMWELTTECHNIK, serving sectors such as construction machinery, agriculture, automotive, and municipal vehicles. The website reflects a professional corporate presence with detailed product and service descriptions, targeting B2B customers in specialized manufacturing sectors. Technically, the website is built on TYPO3 CMS, utilizing modern JavaScript libraries and responsive design techniques to ensure good mobile optimization and user experience. The site loads with moderate performance and includes structured navigation and SEO-friendly metadata. Analytics are implemented via Umami, indicating a privacy-conscious approach with minimal user tracking. From a security perspective, the site uses HTTPS (implied though not explicitly confirmed in HTML), but lacks visible security headers and cookie consent mechanisms. No incident response or vulnerability disclosure information is provided, which could be improved. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data shows standard domain registration with no privacy protection, consistent with a legitimate business. Overall, the Fritzmeier Group website demonstrates a solid business and technical foundation with room for improvement in security best practices and privacy compliance. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

S

Staeg, spol. s.r.o.

staegstavby.cz

49

Staeg Stavby is a well-established Czech construction and facility management company with over 26 years of experience. The company operates primarily within the Czech Republic, offering services across ground construction, facility management, and real estate development. The website reflects a strong market position supported by multiple ISO certifications and a clear commitment to security and compliance. The company maintains a professional digital presence with consistent branding and comprehensive service information. Technically, the website uses a modern technology stack including jQuery, Bootstrap, GSAP, and Google Maps API, indicating a mature digital infrastructure. Security measures such as HTTPS, cookie consent management, and email obfuscation are implemented, though some security headers are missing. The absence of WHOIS data for the domain is a notable concern, impacting trust and legitimacy scores. Overall, the website is professional, secure, and compliant, serving its target audience effectively.

V

Vertical Images s.r.o.

verticalimages.cz

40

Vertical Images s.r.o. is a Czech Republic-based company specializing in geospatial data services including drone data collection, laser scanning, AI-driven analysis, and custom solution development. Established in 2013, the company serves industrial, governmental, and facility management sectors with advanced digital modeling and BIM implementation services. Their market position is supported by notable clients such as Škoda and Siemens, reflecting a solid regional presence. The website is professionally designed using WordPress with modern plugins, offering good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though lacking advanced security headers and explicit security policies. No blocking or WAF challenges were detected, allowing full content access. Contact information is clearly provided, but privacy and terms policies are missing, which could be improved for compliance. Overall, the site is trustworthy and business credible with room for enhanced security and privacy compliance.

T

Templatespare

crearesitointernet.net

45

The website 'Creare Sito Internet' is a WordPress-based platform offering a vast library of over 999 ready-to-use and fully accessible website templates and themes. It targets WordPress users, bloggers, businesses, and eCommerce site owners seeking fast and flexible site building solutions without coding. The business model revolves around plugin distribution for demo imports and membership plans for premium theme access. Technically, the site is built on WordPress 6.8.2 with modern technologies including React and jQuery, hosted on SiteGround, and optimized for mobile and accessibility. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. The WHOIS data shows a suspicious future domain creation date, reducing trustworthiness. Overall, the site is professional and functional but would benefit from enhanced security and compliance transparency.

E

Eco friendly Hotel Dália

hoteldalia.sk

47

Eco friendly Hotel Dália is a small hospitality business located in Košice, Slovakia, specializing in eco-friendly and sustainable tourism. The hotel offers accommodation, restaurant services, conference and wedding facilities, and innovative features such as 24/7 contactless check-in and electric vehicle charging stations. It holds certifications like Ecolabel and is recognized on platforms such as TripAdvisor and HolidayCheck. The website is professionally designed with good content quality and clear navigation, targeting eco-conscious travelers and business clients. Technically, the site uses modern JavaScript libraries and tracking tools, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though security headers and incident response policies are absent. Privacy compliance is basic with a privacy policy and cookie consent mechanism present but no explicit GDPR statements. Overall, the domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.

The website represents a small Czech non-profit organization named Asociace rozvoje invencí a duševního vlastnictví o.s., focused on the development of inventions and intellectual property. It provides services such as news updates, research, consulting, training, and cooperation primarily targeting inventors and intellectual property professionals within the Czech Republic. The site content is primarily in Czech and links to reputable intellectual property and regional government organizations, indicating a niche but credible market position. Technically, the website is built using basic HTML, CSS, and JavaScript without modern frameworks or CMS. It is hosted by Active24, a known Czech hosting provider. The site lacks mobile optimization and accessibility features, and the performance is moderate. No advanced analytics, tracking, or advertising technologies are detected, indicating a low digital maturity level. From a security perspective, the site lacks HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. There are no privacy or cookie policies, no contact information, and no incident response or vulnerability disclosure mechanisms, which are significant compliance and security gaps. The absence of forms reduces attack surface but also limits user engagement. Overall, the website is functional but basic, with moderate trustworthiness due to its association with reputable partners and domain age. However, it requires urgent improvements in security, privacy compliance, and technical modernization to reduce risk and enhance user trust.

R

https://www.hradkarlstejn.cz/aktuality/?more=116

rhkhradec.cz

44

The website www.hradkarlstejn.cz presents minimal content focused on a children's costume product listing and a large collection of company data boxes (datové schránky) with various company names and addresses. There is no clear business identity or detailed company information on the site. The technical infrastructure includes Cloudflare Insights for analytics but lacks advanced CMS or frameworks. Security posture is weak due to absence of security headers, privacy policies, and contact information. The domain WHOIS data is unavailable, which raises concerns about domain legitimacy and trust. Overall, the site appears to be a small-scale retail or informational site with limited digital maturity and security controls.

L

Ladislav Kvasnička

esluzby.net

46

The website www.esluzby.net represents a small Czech business specializing in web development, domain registration and hosting, and graphic design including printed materials. The company provides professional services tailored to local businesses and organizations, with a portfolio of regional clients. The technical infrastructure is basic but functional, leveraging jQuery and custom scripts, hosted in a Prague data center. The site is accessible, with a cookie consent mechanism implemented, but lacks advanced security headers and formal privacy or terms of service documentation. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional appearance of the website and clear business contact information. Overall, the site demonstrates moderate digital maturity with room for improvement in security and compliance.

E

EPS Financial

epspayments.net

47

EPS Financial operates the e-Pay Solutions website, providing payment processing services primarily targeting tax professionals. Their offerings include debit and credit card processing, ACH processing, and related equipment sales. The company positions itself as a competitive payment processor with low fees and flexible options, emphasizing ease of use and financial risk reduction. The website is professionally designed, mobile-optimized, and includes customer testimonials and clear contact information, supporting a credible market presence. Technically, the site is built on WordPress with modern analytics and cookie consent tools, though some security headers are not detected. The SSL configuration is strong, and the site is fully accessible without WAF or blocking mechanisms. However, the WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency. Privacy policy presence is weak, though cookie consent is implemented. Overall, the site demonstrates a solid business and technical foundation but would benefit from enhanced transparency and security practices.

E

EPS Financial

epsfinancial.net

44

EPS Financial operates a professional website offering tax-related financial products including refund transfer programs, taxpayer advance loans, tax office loans, and merchant services tailored for independent tax offices. The company positions itself as a low-cost industry leader with a large customer base of over 43,000 tax offices. The website is built on WordPress with modern technologies and integrates marketing and analytics tools such as Google Analytics, Google Tag Manager, and Marketo. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks visible security headers and explicit privacy policies. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy. Overall, the website is professional and trustworthy in appearance but would benefit from improved transparency in domain registration and enhanced security practices.

2

2BCognitus

2bcognitus.com

47

2BCognitus is a Slovak-based company specializing in strategic and project management training, consulting, and certification preparation, notably for PRINCE2® and IPMA® standards. Established in 2006 and operating under MARLOW, s.r.o., it serves business professionals and organizations seeking to enhance management competencies. The website reflects a mature business with a consistent brand and professional content tailored to its target audience. Technically, the site runs on Joomla CMS with common libraries like jQuery and Bootstrap, offering a responsive and user-friendly experience. Security posture is adequate with HTTPS and domain protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-positioned in its niche.

E

Elektrické kúrenie

elektricke-kurenie.sk

42

Elektrické kúrenie is a Slovak-based e-commerce company specializing in the retail of electric heating products including heating foils, mats, cables, convectors, infrared panels, thermostats, and air conditioning units. Established in 2009, it holds a leading market position in Slovakia with a comprehensive product range and a professional online presence. The website is well-structured, mobile-optimized, and provides clear navigation and multiple customer contact channels. Technically, the site is built on the Nette Framework and integrates modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and CookieHub for GDPR-compliant cookie consent. Security posture is strong with HTTPS enforced and secure form handling, though additional security headers could enhance protection further. No blocking or WAF mechanisms interfere with accessibility, and the domain registration details align well with the business claims, indicating high legitimacy. Overall, the site demonstrates a mature digital infrastructure suitable for its business model and target market.

C

Commando.sk

commando.sk

45

Commando.sk is a Slovak-based e-commerce retailer specializing in military, airsoft, outdoor, and self-defense equipment. Established since 2010, it operates both online and through physical stores, targeting outdoor enthusiasts, airsoft players, hunters, and security personnel. The website offers a comprehensive product catalog with detailed descriptions and a blog providing relevant content to its audience. Technically, the site employs modern JavaScript libraries, Google Analytics, Google Tag Manager, and a live chat service, hosted behind Amazon Cloudfront CDN, ensuring moderate performance and good mobile optimization. Security posture is strong with HTTPS enforced and privacy-compliant cookie consent mechanisms, although some security headers could be improved. The site shows no signs of blocking or WAF interference, and WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

S

Sagitarius, s.r.o.

kuchyneshop.sk

44

Sagitarius, s.r.o. operates the website kuchyneshop.sk, a Slovak-based e-commerce platform specializing in kitchen furniture, kitchen doors, sinks, faucets, and related home appliances. The company targets both wholesale and retail customers, offering a broad product range with a focus on kitchen solutions and some niche products like beekeeping supplies. The website demonstrates a consistent brand presence and clear navigation, supporting a positive user experience. Technically, the site uses common JavaScript libraries such as jQuery and Owl Carousel, integrates Google Analytics and Facebook SDK for tracking, and employs Google reCAPTCHA for form security. The site is mobile optimized and performs moderately well in terms of speed and SEO. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

F

Fermeria

fermeria.sk

47

Fermeria is a well-established Slovak online platform founded in 2012 that connects individuals seeking caregiving, household help, and tutoring services with professionals offering these services. The platform operates across multiple European countries, serving over 40,000 users, and provides a free profile creation model with paid communication features. The website is professionally designed, mobile-optimized, and offers clear navigation and relevant content tailored to its target audience. Technically, it employs modern web technologies including Google reCAPTCHA, Google Tag Manager, Facebook Pixel, and Hotjar for analytics and user experience enhancement. Security posture is strong with HTTPS enforced and secure login mechanisms, though some security headers could be improved. Privacy compliance is robust, with clear GDPR policies and cookie consent mechanisms in place. Overall, the website demonstrates high professionalism, trustworthiness, and digital maturity.

H

Hľadám majstra

hladammajstra.sk

44

Hľadám majstra is a Slovak online marketplace platform that connects customers with skilled craftsmen and companies offering construction, repair, and related services. The platform features a broad range of service categories, customer reviews, and facilitates service requests, positioning itself as a trusted intermediary in the local market. The website is well-structured, mobile-optimized, and provides clear navigation and relevant content for its target audience of individuals and businesses seeking reliable service providers. Technically, the website is built on the Nette Framework with integrations of Google Analytics, Google reCAPTCHA, and Google Maps API, indicating a moderate level of digital maturity. The site uses HTTPS with good SSL configuration, though it lacks some security headers and a cookie consent mechanism, which are areas for improvement. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but it lacks explicit security policies and incident response information. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent banner. Business credibility is strong, supported by consistent domain registration data, contact information, and customer trust signals. Overall, the website presents a moderate risk profile with good business credibility and technical implementation but would benefit from enhanced security headers, privacy compliance improvements, and formalized security policies to strengthen its security posture and user trust.

G

GRASS, spol. s r.o.

darujkvet.sk

45

DarujKvet.sk is a Slovakian e-commerce retailer specializing in flower delivery services primarily targeting customers in Prešov and its surroundings. Operated by GRASS, spol. s r.o., the website offers a variety of floral products including custom bouquets and funeral decorations, supported by a network of physical stores for personal pickup. The business positions itself as the first online flower delivery service in the region, leveraging over 25 years of market experience. The website is professionally designed with clear navigation and relevant content tailored to its target audience. From a technical perspective, the site employs modern web technologies such as Google reCAPTCHA for bot protection, Facebook Pixel for marketing analytics, and Google Fonts for typography. The site is mobile optimized and demonstrates good SEO practices, although no explicit CMS or hosting provider details are evident. Performance is moderate with room for improvement in accessibility features and security headers. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies and incident response information suggests areas for enhancement. Privacy compliance is well addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Contact information is clearly presented, enhancing business credibility. Overall, DarujKvet.sk presents a trustworthy and professional online presence with a strong local market focus. Strategic improvements in security headers, accessibility, and incident response transparency would further strengthen its security and compliance posture.

T

TOSIN, s.r.o.

parochne.com

47

Parochne.com is an e-commerce and retail business specializing in wigs, hair extensions, and related hair care products, operating primarily in Slovakia with multiple physical store locations. The website presents a professional and consistent brand image targeting general consumers interested in hair solutions. The technical infrastructure includes modern UI libraries and Google services, with moderate performance and good mobile optimization. Security posture is moderate with use of HTTPS and reCAPTCHA but lacks explicit security headers and privacy policy documentation. WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite active website presence. Overall, the site is functional and trustworthy for retail customers but would benefit from improved transparency and security practices.

Č

České centrum fundraisingu

frin.cz

48

České centrum fundraisingu operates FRIN.cz, an annual acceleration program designed to support Czech charitable organizations in enhancing their fundraising campaigns. The website presents a professional and well-structured platform offering mentoring, training, and resources tailored to non-profits. The organization is well-established, with a domain age dating back to 2001, and maintains partnerships with reputable entities such as Erste Stiftung and Česká spořitelna. Technically, the site leverages WordPress with modern frameworks and plugins, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS, cookie consent, and use of security plugins, though explicit security policies and incident response details are not publicly available. Overall, the site demonstrates high trustworthiness and compliance with GDPR, supported by accessible privacy and cookie policies.

Jiří Pytela operates a small-scale IT service business based in the Czech Republic, specializing in computer and network management, web design, and training services. The website presents clear service offerings and contact information, targeting individuals and small businesses seeking IT support and education. The digital presence is basic but functional, with moderate mobile optimization and use of Google Analytics for visitor tracking. However, the absence of privacy and cookie policies, as well as missing WHOIS registration data, indicates gaps in compliance and trustworthiness. Security posture is limited, with no detected security headers and unknown SSL status, suggesting room for improvement in protecting user data and enhancing site security. Overall, the website serves its purpose as a local IT service portal but would benefit from enhanced security and compliance measures.

HESTEGO a.s. is a Czech company specializing in GDPR compliance and personal data processing services. The website provides comprehensive information about data processing practices, legal bases, data subject rights, and contact details for data protection officers. The company targets businesses and individuals requiring GDPR-related services, positioning itself as a niche provider in the Czech market. The website is professionally designed using Bootstrap and jQuery, with a focus on clarity and compliance information. Technical infrastructure is moderate with standard web technologies and no detected CMS or advanced platforms. Security posture is adequate but could be improved by adding security headers and formal security policies. No cookie policy or terms of service are present, which are recommended for full compliance. Overall, the site is safe, professional, and trustworthy with clear business legitimacy supported by consistent WHOIS data.

The website projekty4g.cz presents an extremely minimal online presence with only a single image and no textual or metadata content. The domain is registered since 2013, indicating some longevity, but the lack of content and contact information suggests the site is either under construction or abandoned. There is no evidence of privacy, cookie, or terms of service policies, nor any security or incident response information. The technical infrastructure is minimal with no detectable CMS, frameworks, or scripts, and no security headers or HTTPS status provided. Overall, the digital maturity is very low, and the site lacks basic security and compliance features.

V

Vertical Images s.r.o.

survia.cz

44

SURVIA, operated by Vertical Images s.r.o., is a specialized service provider offering drone-based data acquisition primarily for precision agriculture, forestry, and scientific research in the Czech Republic. The company provides consulting services to support UAV deployment and decision-making in agricultural contexts. The website presents a professional image with clear service descriptions and contact information, targeting farmers, researchers, and related professionals. Technically, the site uses legacy jQuery, Google Analytics, and Google reCAPTCHA, with responsive design for mobile devices. However, the absence of WHOIS data and missing explicit privacy and cookie policies reduce transparency and privacy compliance. Security posture is moderate with room for improvement in headers and library updates. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

The website www.izic.cz currently serves as a placeholder page indicating that a new website is under preparation. It provides minimal business information limited to a contact phone number and email address. The lack of substantive content, privacy policies, or terms of service suggests the site is not yet operational or publicly launched. The domain WHOIS data is unavailable, indicating the domain may be unregistered, recently registered, or privacy-protected with no public data. This raises concerns about the legitimacy and trustworthiness of the domain at this time. Technically, the site is minimalistic, loading only Google Fonts and basic HTML/CSS. There is no evidence of a CMS, analytics, or security headers. The site is accessible without WAF or security challenges but lacks HTTPS information, which is critical for secure communications. Mobile optimization and SEO are basic at best due to the placeholder nature. From a security perspective, the absence of HTTPS, security headers, and privacy policies represents significant vulnerabilities and compliance gaps. No incident response or security contact information is provided. The site does not collect user data via forms or tracking scripts, reducing immediate risk but also limiting business functionality. Overall, the site scores very low on content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic recommendations include securing the domain registration, implementing HTTPS, developing comprehensive privacy and cookie policies, enhancing website content and structure, and establishing security best practices before public launch.