High-risk security reports

The website www.photo-atelier.cz represents a small professional photography business specializing in interior, exterior, Airbnb, food, and product photography primarily serving clients in the Czech Republic. The business appears to be operated by or associated with Akrij Design Studio, as indicated by metadata. The site content is focused and relevant to hospitality and real estate sectors, targeting businesses and individuals seeking quality photography services. The market position is local/regional with a service-oriented business model. Technically, the website uses legacy technologies such as jQuery 1.12.4 and Google Analytics, with basic design and navigation. Mobile optimization and accessibility are basic but functional. Security posture is weak due to lack of visible HTTPS confirmation, absence of security headers, and outdated libraries. Privacy compliance is poor with no visible privacy or cookie policies. WHOIS data is missing, which raises concerns about domain legitimacy and trust. Overall, the site is functional but requires improvements in security, privacy, and technical modernization.

The website akrij.com appears to represent Akrij Design Studio, a small entity with a domain registered since 2001. The site is minimalistic and primarily serves as a CMS platform but currently suffers from visible PHP errors and warnings, indicating poor maintenance and technical issues. The technology stack is outdated, relying on jQuery 1.10.2 and Fancybox, with no modern frameworks or CMS platforms detected. Hosting is provided by Gransy, s.r.o., a known registrar. From a security perspective, the website lacks HTTPS information and security headers, exposing it to potential risks. The presence of PHP errors and SQL-related warnings publicly visible indicates poor error handling and potential vulnerabilities. No privacy, cookie, or terms of service policies are present, and no contact information or forms are available, which negatively impacts trust and compliance. Overall, the website's risk profile is elevated due to technical and security shortcomings. The domain registration is consistent and longstanding, which supports legitimacy, but the website's poor content quality and security posture reduce confidence. Strategic improvements in security, privacy compliance, and technical modernization are recommended to enhance trustworthiness and user experience.

P

Levné Letenky Praha – Praha Levné Letenky Pelikán – Rezervujte si nejlevnější akční letenky do celého světa. Rezervace hotelů, aut a cestovního pojištění. Nejlevnější letenky od více jak 800 společností.

praha-letenky.cz

41

The website praha-letenky.cz is a Czech-language travel affiliate platform specializing in offering cheap flight tickets from Prague, alongside vacation packages, hotel bookings, car rentals, and travel insurance. It aggregates offers from over 800 companies and targets budget-conscious travelers primarily in the Czech Republic. The business model is based on affiliate marketing, leveraging partnerships with multiple travel-related domains and services. The site is relatively new, with domain registration in 2022, and positions itself as a convenient portal for affordable travel options. Technically, the site is built on WordPress 6.8.2 with Bootstrap and jQuery frameworks, incorporating a Pelikan affiliate flight widget. The design is professional and mobile-optimized, though accessibility and SEO optimizations are basic. Performance is moderate, with no significant technical issues detected. The site lacks advanced analytics or tracking scripts beyond affiliate integrations. From a security perspective, the site enforces HTTPS but lacks important security headers such as Content-Security-Policy and HSTS. No privacy, cookie, or terms of service policies are present, indicating compliance gaps with GDPR and other regulations. No contact information or incident response channels are provided, which may affect user trust and regulatory compliance. No WAF or blocking mechanisms are detected, and the domain registration data is consistent and legitimate. Overall, the site is functional and professionally presented but requires improvements in privacy compliance, security hardening, and transparency to enhance trustworthiness and regulatory adherence.

CK Lehátko is a small Czech travel agency specializing in organizing day and multi-day leisure trips, including transportation, accommodation, and access to thermal spas. The website is professionally designed using WordPress with the Astra theme and integrates marketing tools like MailerLite. The business collaborates with Dopravou Mniší for transportation services, indicating a partnership ecosystem. The site targets general audiences interested in travel and relaxation. Technically, the site uses modern WordPress plugins and is mobile optimized, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy compliance documentation. Overall, the domain registration aligns well with the business profile, supporting legitimacy.

Herbol is a well-established paint manufacturer with a rich history dating back to 1844, currently operating under the AkzoNobel group. The company offers a comprehensive range of paint and coating products for facades, interiors, wood, metal, and floors, targeting professional painters and consumers in the Czech Republic. The website reflects a professional and consistent brand image with clear product categories and technical advisory services. Technically, the site uses modern web technologies including Next.js and React, with integration of Google Tag Manager and reCAPTCHA for analytics and security. The security posture is solid with HTTPS enforcement and standard security headers, though explicit security and incident response policies are not published. Privacy compliance is addressed with cookie consent and a comprehensive privacy policy. Overall, the website is trustworthy and professionally maintained, though the absence of WHOIS data limits domain registration transparency.

P

PRIMALEX

primalex.cz

43

PRIMALEX is a well-established Czech brand specializing in the manufacturing and retail of high-quality paints and coatings. The company operates under the parent company PPG and offers a broad range of products including interior paints, facade paints, surface preparation materials, and specialty collections. The website targets general consumers and professionals interested in paint solutions, providing tools such as a color designer application and extensive product categories. The brand is recognized in the market, evidenced by its Superbrands 2025 accolade and active social media presence. Technically, the website employs a modern but somewhat dated technology stack including AngularJS and jQuery, supported by various third-party analytics and marketing tools such as Google Analytics, Hotjar, and Facebook Pixel. The site is hosted likely by Active24, consistent with the domain registration data. Performance and mobile optimization are moderate, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, aligning with basic GDPR requirements. However, it lacks explicit privacy policies, terms of service, and security headers, which are important for comprehensive compliance and security posture. No critical vulnerabilities or suspicious content were detected, and the domain registration data supports the legitimacy and trustworthiness of the business. Overall, PRIMALEX's website is professional and trustworthy, with a solid business foundation and moderate technical maturity. Strategic improvements in privacy documentation, security headers, and accessibility would enhance compliance and user trust.

S

SELA DTP Studio, s. r. o.

sela.cz

45

SELA DTP Studio, s. r. o. is a small Czech company specializing in desktop publishing, printing, and promotional items. The website showcases a portfolio of their work and provides clear contact information for various company representatives. The business targets local clients in Olomouc and surrounding areas seeking professional DTP and printing services. Technically, the website is built on WordPress with standard plugins and uses Google Analytics for visitor tracking. HTTPS is enforced via a client-side redirect, but no advanced security headers are present. Privacy and cookie policies are missing, indicating compliance gaps with GDPR and related regulations. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is not uncommon for small businesses. Overall, the site is professional and functional but could improve in security and compliance aspects.

A

AN Riepas - Riepu tirdzniecība

autoriepas.lv

44

The website autoriepas.lv is a Latvian-based tire retailer and service provider offering a wide range of new tires for various vehicles, including wholesale and retail sales. They also provide professional tire mounting services and have a related partner site for steel wheel repair and painting in Riga. The site targets vehicle owners and businesses in Latvia, positioning itself as a local trusted supplier with competitive pricing and customer support. Technically, the website is built on the Bitrix CMS platform and integrates Bitrix24 CRM and live chat for customer interaction. It uses common analytics tools such as Google Analytics and Facebook Pixel for tracking and marketing purposes. Security-wise, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The WHOIS data is unavailable due to query limits, limiting the ability to fully verify domain legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

R

RSTheme

reobiztheme.com

47

Reobiz is a professionally developed WordPress theme focused on consulting and business niches, created and maintained by RSTheme, an Elite Author on Themeforest. The website offers a comprehensive set of demos, extensive documentation, and integration with popular plugins like Elementor and WooCommerce, targeting small businesses and consultants. The technical infrastructure is modern, leveraging Bootstrap, jQuery, and WordPress CMS, hosted by HOSTINGER operations, UAB. The site is well-optimized for mobile and SEO, with a clean and professional design. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced DNSSEC and security headers. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism. Overall, the site is trustworthy and reliable for its business purpose.

R

RSTheme

fixherotheme.com

48

Fixhero is a specialized WordPress theme designed for handyman and repair service businesses, developed by RSTheme, an Elite Author on the Themeforest marketplace. The website offers a comprehensive product with multiple demos, Elementor integration, and premium plugins bundled for free. The business model revolves around theme sales via Envato platforms, targeting small to medium-sized handyman service providers. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Tag Manager, hosted by Hostinger operations, UAB. The site is mobile-optimized and SEO-friendly with good content quality and user experience. Security posture is moderate with HTTPS implied but lacks explicit security headers and published security policies. Privacy compliance is basic with privacy and terms linked externally but no cookie consent mechanism. Overall, the site is trustworthy and professional with room for security and privacy improvements.

K

Keen IT Solutions

keenitsolutions.com

45

Keen IT Solutions is a small technology company based in Bangladesh specializing in web design and development services, primarily using Joomla, WordPress, and PHP technologies. The company offers a range of services including theme and plugin development, e-commerce solutions, and website redesign, targeting businesses seeking professional web solutions. Their market position is that of a niche provider with over 5 years of experience, supported by a consistent domain registration dating back to 2015. Technically, the website is built on Joomla CMS with modern web technologies such as Bootstrap, jQuery, and Font Awesome. Hosting is provided by SiteGround, a reputable hosting provider. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Google Analytics is used for visitor tracking, but no cookie consent mechanism or privacy policies are present, indicating gaps in privacy compliance. From a security perspective, the site uses HTTPS with a locked domain status to prevent unauthorized transfers or updates. However, DNSSEC is not enabled, and no explicit security headers are detected in the HTML content. There is no published security policy, incident response information, or vulnerability disclosure mechanism, which are areas for improvement. Overall, the website is professional and trustworthy with moderate security posture and technical implementation. The lack of privacy and cookie policies and absence of security headers reduce the privacy compliance score. Strategic improvements in these areas would enhance the site's security and compliance standing.

Linguaschools is a well-established network of Spanish language schools located in Spain and South America, founded in 2005. The company offers a variety of Spanish courses including intensive, combined, individual, semi-intensive, exam preparation, and online options, targeting students seeking high-quality language education combined with cultural immersion. The website is professionally designed, mobile-optimized, and provides rich content in Italian with multiple language versions available. Technically, the site uses modern web technologies such as Google Tag Manager, Google Maps API, and a cookie consent tool, ensuring GDPR compliance and user tracking transparency. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and formal policies are missing. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the site is trustworthy, user-friendly, and well-positioned in the education sector.

Linguaschools is a well-established education company specializing in Spanish language immersion programs in Spain and Latin America. The company operates a network of quality language schools and offers a variety of courses tailored to different student needs, including intensive, combined, individual, and online options. Their market position is strong within the niche of cultural and language immersion, supported by accreditations such as the Institut Cervantes and a multilingual website presence. Technically, the website employs modern web technologies including Google Tag Manager and Google Maps API, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and security headers, though the absence of a public security policy and incident response information is noted. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. However, the lack of WHOIS data transparency slightly reduces overall trustworthiness. Overall, Linguaschools presents a professional, trustworthy, and user-friendly digital presence aligned with its educational mission.

Linguaschools operates as a well-established network of high-quality Spanish language schools located in Spain and Latin America, targeting language learners and cultural travelers. Founded in 2005, it offers a broad range of Spanish courses including intensive, combined, individual, semi-intensive, exam preparation, and online options, complemented by cultural activities such as surfing and dance. The company positions itself as a leading provider in its niche with a strong emphasis on cultural immersion and quality education. Technically, the website employs modern web technologies including Google Tag Manager, Google Maps API, and a cookie consent tool, hosted on a provider indicated by the nameservers yourwebhoster.com and yourwebhoster.nl. The site is mobile-optimized with good SEO practices and moderate performance. Multilingual support is robust, enhancing accessibility for international users. From a security perspective, the site uses HTTPS with no visible critical vulnerabilities or exposed sensitive data. Cookie consent mechanisms and privacy policies align with GDPR requirements. However, security headers are not explicitly detected and could be improved. No incident response or vulnerability disclosure policies are found, suggesting room for enhancement in security governance. Overall, Linguaschools presents a professional, trustworthy, and user-friendly online presence with strong business credibility and compliance posture. Strategic improvements in security headers and incident response readiness would further strengthen its security stance.

Linguaschools is a reputable network of Spanish language schools operating primarily in Spain and Latin America, offering a wide range of Spanish courses including intensive, combined, individual, semi-intensive, exam preparation, and online classes. The company emphasizes cultural immersion alongside language learning, targeting students and travelers seeking authentic experiences. The website is professionally designed, multilingual, and provides comprehensive information about courses, destinations, and staff, reflecting a mature digital presence. Technically, the website employs modern tracking and analytics tools such as Google Tag Manager and Google Analytics, integrates Google Maps for location visualization, and uses a cookie consent tool to comply with privacy regulations. The site is mobile-optimized and loads with moderate performance. However, some security headers are not explicitly detected, suggesting room for improvement in security hardening. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, indicating good privacy compliance. No critical vulnerabilities or suspicious patterns were detected. The lack of WHOIS data limits domain registration analysis, but the overall trust signals and business consistency support legitimacy. Overall, Linguaschools presents a low-risk profile with strong business credibility and good privacy practices. Strategic improvements in security headers and incident response disclosures could further enhance their security posture.

Linguaschools is a well-established provider of Spanish language travel and education services, operating a network of high-quality language schools in Spain and Latin America. The company offers a wide range of Spanish courses including intensive, combination, individual, semi-intensive, exam preparation, and online courses, complemented by cultural activities such as surfing, flamenco, and tango. The website is professionally designed, multilingual, and targets students and individuals seeking immersive Spanish learning experiences abroad. Technically, the site uses modern web technologies including Google Tag Manager and Google Maps API, with good mobile optimization and moderate performance. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit security policies. Privacy compliance is adequate with a comprehensive privacy policy but no visible cookie consent mechanism. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

Sacit is a well-established brand specializing in welding safety equipment and tools, operating under the Trafimet Group Spa. The company offers a comprehensive range of products designed for professional welders, emphasizing quality, safety, and Italian design. The website reflects a mature digital presence with clear business information, certifications, and compliance with privacy regulations. Technically, the site is built on WordPress with modern plugins and tracking tools, providing a good user experience and mobile optimization. Security posture is strong with HTTPS, consent mechanisms, and CAPTCHA protections, though some security headers could be improved. The absence of WHOIS data for the domain is a notable anomaly that requires external verification to confirm domain legitimacy. Overall, the site presents a trustworthy and professional front for its business operations.

R

Realitní kancelář Metr2 Reality Olomouc

metr2reality.cz

47

Realitní kancelář Metr2 Reality Olomouc is a traditional real estate agency based in Olomouc, Czech Republic, operating since 2006 with a stable team of 15 members. The company offers a broad range of real estate services including sales, rentals, property management, and new residential and commercial projects. Their market position is that of a well-established local agency with a comprehensive portfolio targeting individuals and businesses seeking properties in the Olomouc region. Technically, the website employs modern web technologies such as Google Fonts, Google Tag Manager, Facebook SDK, and retargeting services. The site is mobile optimized, uses structured data for SEO, and integrates multiple marketing and analytics tools. Performance is moderate with good navigation and content quality. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, which could be improved. No vulnerabilities or exposed sensitive data were found. The absence of WHOIS data for the domain is a concern for transparency but does not necessarily indicate malicious intent. Overall, the website presents a professional and trustworthy front for the real estate business, with good privacy compliance and marketing practices. The main risk lies in the lack of domain registration transparency and minor security header omissions. Strategic recommendations include enhancing security headers, verifying domain registration details, and maintaining privacy compliance.

P

Profi Economy s.r.o.

profieconomy.cz

35

Profi Economy s.r.o. is a Czech-based accounting and tax services firm offering personalized professional services primarily to small and medium-sized businesses as well as multinational companies. The company emphasizes its 15 years of experience, membership in the Chamber of Tax Advisors, and certifications in international accounting standards. Their business model focuses on providing reliable accounting and tax advisory services with a customer-centric approach, including a guarantee of a free first month if clients are unsatisfied. Technically, the website is built on WordPress using Elementor page builder, Bootstrap CSS, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and presents a professional design with clear navigation. However, the technical implementation lacks some modern security headers and explicit privacy and cookie policies, which are important for compliance and trust. From a security perspective, the site uses HTTPS with good SSL configuration and includes an opt-out mechanism for Google Analytics tracking. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain is a concern for domain legitimacy and trustworthiness, although the website content and certifications support the business's credibility. Overall, the website is professional and trustworthy from a business and content perspective but would benefit from improved privacy compliance, security headers, and domain registration transparency to enhance its security posture and user trust.

B

BK Zubři Bystřice nad Pernštejnem

bkzubribystrice.cz

44

BK Zubři Bystřice nad Pernštejnem is a local Czech ice hockey club providing community sports services including training, match schedules, and youth recruitment. The website serves as an information portal for players, parents, and fans, featuring news articles, team information, and social media integration. The club appears to be a small-sized organization founded in 2015, with a focus on local engagement and sponsorships. Technically, the website is built on WordPress and uses common web technologies such as jQuery and Fancybox, hosted by Wedos, a Czech hosting provider. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. However, it lacks advanced technical frameworks or modern frontend technologies. From a security perspective, the site uses HTTPS but lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response channels are explicitly provided, limiting transparency and user trust. The site integrates Facebook social plugins but does not appear to use extensive tracking or analytics services. Overall, the website is functional and serves its purpose as a local sports club portal but requires improvements in privacy compliance, security best practices, and contact transparency to enhance trust and regulatory adherence.

Z

ZŠ a MŠ Dolní Třešňovec

zsdolnitresnovec.cz

41

Škola Dolní Třešňovec is a small educational institution in the Czech Republic providing preschool and elementary education services. The website serves as an information portal for parents, students, and the community, highlighting the school's educational philosophy, events, and community engagement. The site is built on WordPress with common plugins and integrates Facebook for social media presence. The technical infrastructure is modern and hosted on Microsoft Online services, ensuring reliable availability. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible privacy compliance documentation. The site does not expose sensitive data and maintains a professional appearance with good content relevance and navigation. Overall, the website reflects a trustworthy and community-focused educational institution.

The website realityjordan.cz is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content. The domain is registered with REG-WEDOS, a Czech registrar, since 2019, indicating a small local business presence. Due to the lack of accessible content, no business description, contact information, or policies can be extracted or analyzed. The technical infrastructure details are minimal, with no visible CMS, scripts, or security headers. The security posture cannot be properly assessed, but the absence of HTTPS and security policies is a concern. Overall, the site presents a low trust profile due to inaccessibility and lack of transparency.

D

DaR – Centrum pro dítě a rodinu, o.p.s.

darops.cz

41

DaR – Centrum pro dítě a rodinu, o.p.s. is a Czech non-profit organization dedicated to supporting children and families by providing care, security, and assistance in challenging life situations. The organization operates primarily in the Pardubice region and offers services such as family support, child care assistance, and social counseling. The website serves as an informational platform to communicate their mission, services, and contact details to the public. Technically, the website is built on WordPress using the Make theme and WPBakery Page Builder, incorporating standard web technologies like PHP, jQuery, and Font Awesome. The site is hosted likely via Active24, a Czech hosting provider, and uses HTTPS to secure communications. The site is moderately optimized for mobile devices and has a good design quality with clear navigation, although accessibility features are basic. From a security perspective, the website benefits from HTTPS but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There are no visible vulnerabilities or exposed sensitive data, but the absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and security posture. Overall, the website is trustworthy and professional, serving its non-profit mission effectively. However, to improve compliance and security maturity, the organization should implement privacy and cookie policies, add security headers, and consider publishing incident response and vulnerability disclosure information.

Z

ZŠ a MŠ Dolní Třešňovec

skoladolnitresnovec.cz

42

The website skoladolnitresnovec.cz represents an educational institution named ZŠ a MŠ Dolní Třešňovec, providing kindergarten and elementary school services in the Czech Republic. The site offers detailed information about school philosophy, events, and community engagement, targeting parents, children, and educators in the local area. The business model is that of a small educational provider with a focus on community and individualized child development. Technically, the website is built on WordPress 5.8.10, utilizing common plugins such as Contact Form 7, Google Calendar Events, and Bootstrap for responsive design. Hosting appears to be via Microsoft Online services, indicated by the nameservers. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact information is minimal, with no direct emails or phone numbers found, though a Facebook page is integrated. Overall, the site is trustworthy and professional for its educational purpose but would benefit from improved privacy compliance and security best practices to enhance user trust and regulatory adherence.

The website kalabrie.net is a small, Czech-language travel guide focused on the Calabria region of southern Italy, providing detailed information about beaches, accommodation, travel tips, and local attractions. It targets tourists interested in vacationing in Calabria, leveraging affiliate marketing links to travel booking platforms to monetize its content. The site has been active since 2008, indicating a stable presence in its niche market. Technically, the site is built with static HTML, CSS, and JavaScript, hosted on servers associated with Gigaserver.cz, and lacks modern CMS or frameworks. The design is basic and not optimized for mobile devices, which may limit user experience on smartphones and tablets. Security posture is weak due to lack of HTTPS enforcement, absence of security headers, and no DNSSEC enabled on the domain. Privacy compliance is minimal, with no visible privacy or cookie policies, which is a concern given GDPR requirements for European users. Contact information is provided, including an email and physical address, enhancing business credibility. Overall, the site is functional and informative but requires significant improvements in security, privacy compliance, and technical modernization to meet current standards.

P

Plaváček webdesign

plavacek.net

41

Plaváček webdesign is a small Czech Republic-based web design service provider that appears to have ceased active web design operations, as indicated by the website footer message. The website offers minimal content focused on web design and development services, targeting a general audience interested in modern website creation. The technical infrastructure relies on legacy JavaScript libraries such as jQuery and Highslide, with no detected CMS or modern frameworks. The site lacks mobile optimization and advanced accessibility features, and performance is moderate. Security posture is weak, with no HTTPS detected and absence of security headers or privacy policies. The WHOIS data indicates the domain is unregistered or expired, which raises significant legitimacy concerns despite the website being accessible. Overall, the site demonstrates basic digital maturity but requires substantial improvements in security, privacy compliance, and technical modernization.

A

Alcedo Media, s.r.o.

ubytovanichorvatsko.cz

45

Ubytovanichorvatsko.cz is a Czech-language online travel accommodation portal specializing in Croatian holiday rentals. Operated by Alcedo Media, s.r.o., the site aggregates apartment and villa listings from multiple sources, providing users with a centralized search and booking experience. The portal also offers travel guides and practical information to assist tourists in planning their trips. The business targets Czech-speaking tourists seeking affordable and diverse accommodation options in Croatia, positioning itself as a niche regional player in the hospitality sector. Technically, the website employs a traditional web stack including jQuery, Bootstrap, and Google Maps API, with moderate performance and basic mobile optimization. Security posture is adequate but could be improved by updating outdated libraries and implementing security headers. Privacy compliance is partially addressed through cookie consent mechanisms and a cookie policy page, though a dedicated privacy policy and terms of service are lacking. Overall, the site is professional and trustworthy, with room for technical and security enhancements.

The website krasycech.cz is a small, niche travel and nature photography platform focused on showcasing the natural beauty of the Czech Republic. It provides photographic content and travel tips targeting tourists and nature enthusiasts interested in Czech landscapes. The business model relies primarily on affiliate marketing partnerships with accommodation and travel service providers. The website has been active since 2009, indicating a stable presence in its niche. From a technical perspective, the website uses basic HTML and CSS without modern frameworks or CMS detected. The design is dated and lacks mobile optimization and accessibility features. No analytics or tracking technologies are present, suggesting minimal user data collection. Performance is moderate but could be improved with modernization. Security posture is weak, with no HTTPS detected in the provided data and absence of security headers. There are no privacy or cookie policies, indicating non-compliance with GDPR and related regulations. No forms are present, reducing data input risks but also limiting user interaction. Contact information is provided clearly in the footer, enhancing business credibility. Overall, the website is functional for its purpose but requires significant improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user experience. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving mobile responsiveness, and adopting security best practices.

Fotografové.info is a Czech Republic-based online directory and informational portal dedicated to professional and amateur photographers. Established in 2008, it serves as a niche community platform offering a comprehensive directory of over 800 photographers, categorized by specialties such as landscape, wedding, portrait, and commercial photography. The site also features a photo of the week, magazine articles, and listings for photography workshops and expeditions, targeting photography enthusiasts and clients within the Czech market. The business model revolves around providing visibility and networking opportunities for photographers, supplemented by partner advertising and service referrals. Technically, the website is built using basic HTML and JavaScript without a modern CMS or advanced frameworks. Hosting is provided by Gigaserver.cz, as indicated by the nameservers. The site shows moderate performance but lacks mobile optimization and accessibility features, reflecting a dated design. SEO is basic with meta descriptions but no advanced structured data or Open Graph tags detected. No analytics or tracking scripts were found in the provided content. From a security perspective, the site lacks visible HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. There are no privacy or cookie policies, nor any incident response or vulnerability disclosure information, indicating compliance gaps with GDPR and modern data protection standards. Contact information is clearly provided, including a company email and physical address, supporting business credibility. No forms or data collection mechanisms were detected on the main page, reducing immediate data exposure risks. Overall, Fotografové.info presents as a legitimate, small-scale media business with a focused niche audience. However, it requires significant improvements in security posture, privacy compliance, and technical modernization to enhance trustworthiness and user experience. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies with consent mechanisms, improving mobile responsiveness, and adopting security best practices to safeguard visitors and comply with regulations.

G

429 Too Many Requests

glami.gr

49

The website www.glami.gr is currently inaccessible due to an HTTP 429 Too Many Requests error, indicating that the server is rate limiting or blocking access. As a result, no meaningful content, metadata, or business information could be extracted or analyzed. The lack of accessible content prevents assessment of the company's business model, technical infrastructure, security posture, or compliance status. Without access to the website's pages, no evaluation of privacy policies, contact information, or security practices is possible. This significantly limits the ability to provide a comprehensive security and compliance analysis.

K

Kaljanų Baras

kaljanubaras.lt

45

Kaljanų Baras operates a private hookah lounge and hookah rental service primarily in Vilnius, Lithuania, targeting adult customers interested in hookah experiences and private event hosting. The business offers a cozy environment for hookah sessions, event rentals with hookah masters, and related services. The website is professionally designed using WordPress with a focus on clear navigation, multilingual support, and integrated reservation forms. The technical infrastructure includes modern web technologies such as jQuery, Google Fonts, and Forminator for forms, supported by Google Analytics for visitor tracking. Security posture is adequate with HTTPS enforced and nonce tokens in forms, though improvements in HTTP security headers are recommended. Privacy compliance is addressed with a privacy policy and cookie consent mechanisms, reflecting GDPR awareness. Overall, the website presents a trustworthy and professional image with clear contact information and partner affiliations.

T

TopHosts

tophosts.net

48

TopHosts is a Russian-language online platform specializing in hosting provider ratings, reviews, and comparison tools. It targets Russian-speaking users seeking reliable hosting services, offering detailed information on VPS, shared hosting, dedicated servers, and related services. The platform leverages affiliate partnerships with hosting providers, providing promo codes and referral links to monetize its service. Technically, the website uses a modern JavaScript stack including jQuery, DataTables, and integrates analytics tools such as Google Analytics and Yandex Metrika. The site is mobile-optimized with good navigation and content relevance. Security-wise, the site enforces HTTPS and includes CSRF tokens but lacks explicit security headers and detailed privacy or cookie policies, which are areas for improvement. Overall, the website is accessible, professional, and trustworthy, with moderate security posture and some compliance gaps.

P

Baltic Probiotics | probiotikai ūkiui, pramonei, gyvūnams

probiotikai.com

36

The website www.probiotikai.com represents a small business focused on providing probiotic products for farms, industry, and animals, primarily targeting the Lithuanian market. The business operates an e-commerce platform built on WordPress with WooCommerce and Elementor, offering natural and eco-friendly probiotic solutions. The site demonstrates good content quality and professional design, catering to a niche agricultural and industrial audience. Technically, the site uses modern web technologies and integrates analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enabled, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy page. WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and ownership transparency. Overall, the website is functional and professional but would benefit from enhanced security practices and compliance documentation.

M

Marcato

marcatopasta.fr

48

Marcato France official website is a professionally designed e-commerce platform specializing in the sale of pasta machines and related accessories. The site targets general consumers interested in fresh pasta making, offering a range of manual and electric machines, as well as various pasta shaping tools. The business operates primarily in France and presents itself as the official French distributor for Marcato products, emphasizing Italian manufacturing quality and durability. Technically, the site is built on the PrestaShop CMS platform, integrating modern marketing and analytics tools such as Google Tag Manager, Google Analytics, and Brevo (Sendinblue). The presence of secure payment processing via PayPlug and cookie consent mechanisms indicates a mature digital infrastructure. Security posture is good with HTTPS enforced and secure form handling, though some security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not detract from the site's legitimacy based on content and branding. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements.

The website at partneribas.lv is currently inaccessible, returning a 403 Forbidden error page with no accessible content. Due to this, no business information, metadata, or technical details about the site could be extracted. The WHOIS lookup failed due to query limits, preventing extraction of domain registration details. This lack of data severely limits the ability to assess the company's market position, services, or digital maturity. Technically, the site lacks HTTPS and security headers, indicating a weak security posture. Overall, the site appears either restricted or misconfigured, resulting in a low trust and credibility score.

G

Glassman-Lassalle Zen-Linie

zen-glassman-lassalle.ch

48

The website zen-glassman-lassalle.ch represents a small-scale spiritual and educational business focused on Zen meditation, retreats, and training in the Glassman-Lassalle tradition, primarily targeting a general European audience with a focus on Switzerland. The site offers information about courses, meditation sessions, and Zen teachings without commercial e-commerce features or extensive contact details beyond a contact form. Technically, the site is built on the Cloudrexx CMS platform and uses older JavaScript libraries such as jQuery 1.6.1, which may pose security risks. The site is moderately optimized for mobile and SEO, with a clear navigation structure and good content relevance. However, it lacks modern security headers and visible privacy or cookie policies, which impacts its privacy compliance and security posture. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences.

A

Adelante Grupa SIA

websoft.lv

36

Websoft.lv is a Latvian web development company operating under Adelante Grupa SIA, with over 20 years of experience in creating and maintaining modern websites. Their services include website development, hosting, email services, and SEO monitoring tools designed to help clients track their website performance daily. The company targets small and medium enterprises, budget institutions, schools, and libraries primarily within Latvia. The website is professionally designed, content-rich, and provides clear contact information and client testimonials, indicating a trustworthy business presence. Technically, the website uses a mix of legacy and modern technologies including jQuery 1.4.2, Bootstrap CSS, Google Analytics, and Swiper sliders. While the site is mobile-optimized and SEO-friendly, the use of an outdated jQuery version and lack of visible HTTP security headers present security concerns. The site is served over HTTPS with a valid SSL configuration and includes a cookie consent mechanism, demonstrating basic privacy compliance. Security posture is moderate; the site lacks advanced security headers and uses outdated libraries, which could expose it to vulnerabilities. No WHOIS data was retrievable due to query limits, limiting domain trust verification. However, the business information and website content appear consistent and professional. Overall, the site is functional and trustworthy but would benefit from technical and security updates. Strategic recommendations include updating JavaScript libraries, implementing comprehensive HTTP security headers, enhancing login form security, and improving WHOIS transparency to strengthen domain trustworthiness.

S

Spanvall

spanvall.fr

45

Spanvall is a medium-sized, family-owned business specializing in the manufacturing and global distribution of high-quality animal bedding products tailored for various livestock including poultry, cattle, horses, and pigs. With over five decades of industry experience, the company maintains a strong market position supported by patented products and a commitment to sustainability and animal welfare. The website is professionally designed, multilingual, and provides clear contact and product information, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and tracking tools, ensuring good performance and user experience. Security measures include HTTPS and reCAPTCHA integration, though there is room for improvement in security headers and explicit incident response policies. Overall, Spanvall demonstrates a credible and trustworthy online presence aligned with its business operations.

S

Spanvall

spanvall.pl

48

Spanvall is a Denmark-based company specializing in the production and import of animal bedding products for various livestock, with a strong focus on poultry bedding. The company serves customers domestically and internationally, emphasizing flexible delivery options and quality assurance. The website is professionally designed, multilingual, and provides clear contact information, supporting its market presence and credibility. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good performance and mobile optimization. Security measures include HTTPS, reCAPTCHA, and cookie consent, though explicit security headers are not detected. The absence of WHOIS data slightly impacts trust but does not overshadow the overall legitimacy indicated by the website content and contact details.

P

PLASTIKATI.lv

plastikati.lv

35

PLASTIKATI.lv is a Latvian-based e-commerce retailer specializing in plastic products, greenhouses, garden supplies, construction materials, and related outdoor equipment. The website offers a comprehensive product catalog with multi-language support targeting consumers and businesses in Latvia and nearby regions. Technically, the site uses modern web technologies including HTTPS, Google reCAPTCHA, and responsive design, providing a good user experience and moderate performance. However, the absence of WHOIS data due to query limits restricts domain legitimacy verification. Security practices are partially implemented with HTTPS and CSRF tokens, but lack of security headers and privacy policies indicate room for improvement. Overall, the site is safe for general audiences and professionally presented but would benefit from enhanced privacy compliance and clearer business contact information.

S

Sapori & Tradizioni

sapori-tradizioni.it

45

Sapori & Tradizioni is a small Italian company specializing in the production and retail of extra virgin olive oil and spices, with a focus on traditional and regional products from Cilento, Italy. The company operates an e-commerce enabled website built on WordPress and WooCommerce, targeting Italian-speaking customers interested in specialty food products. The website is professionally designed with good content quality, clear navigation, and mobile optimization. The technical infrastructure leverages popular WordPress plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, but lacks advanced security headers and explicit security policies. The domain registration data is consistent with the business claims and shows no suspicious patterns, supporting the legitimacy of the website. Overall, the site presents a trustworthy and professional online presence for a niche food retail business.

A

Asociación Español en Andalucia

aeea.org

43

Asociación Español en Andalucia operates as a regional non-profit association focused on the Spanish community in Andalucia. The website is multilingual, targeting Spanish speakers and international visitors interested in Andalucia. The site is built on WordPress using the Divi theme and hosted on SiteGround, indicating a moderate level of technical infrastructure. SEO is supported by Yoast SEO, and social media integration is present via Facebook SDK. However, the site lacks explicit privacy and terms of service policies, which impacts compliance and trust. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Google Analytics plugin is installed but not configured, limiting analytics effectiveness. Overall, the site is functional and safe but requires improvements in privacy compliance and security best practices.

F

FEDELE

fedele.org

47

FEDELE is a well-established federation of Spanish language schools in Spain, founded in 2002, providing accreditation, certifications, and educational resources. The website demonstrates a mature digital presence with multilingual support, professional design, and comprehensive content targeting students, teachers, and agencies involved in Spanish language education. Technically, the site is built on WordPress with the Divi theme and uses modern plugins for SEO, accessibility, and cookie compliance. Security posture is good with HTTPS and clientTransferProhibited domain status, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site is trustworthy and professionally managed, serving as a key resource in its educational niche.

F

Forus Training

forustraining.ie

49

Forus Training is an established Irish education provider specializing in QQI accredited courses delivered through online, blended, and classroom formats. The company targets adult learners seeking professional development in areas such as Special Needs Assisting, Healthcare, and other vocational training. Their market position is solid with a broad course catalog and regional classroom presence, supported by a professional website with good content quality and branding consistency. Technically, the website is built on WordPress with integrations for marketing and analytics via HubSpot and Google Tag Manager, hosted by Blacknight Solutions. The site demonstrates good SEO and mobile optimization but has moderate performance and basic accessibility features. Security posture is adequate with HTTPS and some security best practices, though DNSSEC is not enabled and advanced security headers are not evident. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy and professional, with no signs of malicious activity or content safety concerns.

S

SIA "Jaunrota" - Veikals Rota Alūksne

jaunrota.lv

39

SIA "Jaunrota" operates the website jaunrota.lv, a local retail flower and gift shop based in Alūksne, Latvia. The company offers a variety of products including seasonal and cut flowers, bouquets, indoor plants, clay products, jewelry, teas, sweets, and gift wrapping services. The website targets general consumers looking for quality floral and gift products with convenient delivery options. The business appears to be a small-sized local retailer with a focus on customer service and product quality. Technically, the website is built on WordPress using common plugins such as Yoast SEO, Slider Revolution, and GDPR Cookie Compliance. It employs jQuery and Bootstrap frameworks for responsive design and user experience. The site is moderately optimized for performance and SEO, with good mobile responsiveness and basic accessibility features. From a security perspective, the site uses HTTPS with a good SSL configuration and implements GDPR-compliant cookie consent mechanisms. However, it lacks advanced security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected in the analysis. The absence of WHOIS data limits domain registration trust verification, but the website content and business information appear consistent and legitimate. Overall, jaunrota.lv presents a professional and trustworthy online presence for a local retail flower and gift business. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance trust and security posture further.

X

XSERVER Inc.

unwto-ap.org

44

The website represents the UN Tourism Asia-Pacific Regional Support Office, a governmental/non-profit entity focused on tourism development and sustainability in the Asia-Pacific region. It provides information about the organization, member countries, events, research, and publications. The site targets government agencies, tourism professionals, researchers, and affiliate members. The business model is informational and supportive, aligned with UNWTO's mission. Technically, the site is built on WordPress using the Newspaper theme and several plugins, including Mailchimp Campaign Manager. It employs modern JavaScript libraries like jQuery and integrates Google Analytics and Tag Manager for tracking. Hosting is provided by XSERVER Inc. in Japan. The site is mobile-optimized with good navigation and content quality. Security posture is moderate with HTTPS enabled and domain transfer protection. However, DNSSEC is not enabled, and no security headers were detected. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. No incident response or vulnerability disclosure information is available. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and enhanced security configurations to align with best practices.

M

Mikroelektronika s. r. o.

pracujvmikrosce.cz

47

Mikroelektronika s. r. o. is a well-established Czech company founded in 1991 specializing in the development and manufacturing of ticketing systems for public transport and custom electronics. The website pracujvmikrosce.cz serves as a recruitment portal targeting potential employees interested in working in the microelectronics sector. The company maintains a stable market position with exports to over 40 countries, reflecting a solid international presence. The site is professionally designed, mobile-optimized, and provides clear information about the company, benefits, and open positions, enhancing its appeal to job seekers. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Slick Carousel, and is built on the Fork CMS platform. It integrates Google Analytics and Google Tag Manager for traffic analysis and marketing purposes. The site uses HTTPS and implements a cookie consent mechanism, demonstrating basic privacy compliance. However, security headers and advanced security policies are not evident, indicating room for improvement in security posture. From a security perspective, the site shows good practices such as secure form handling with CSRF tokens and no visible sensitive data exposure. The absence of a published security policy or incident response contacts suggests limited transparency in security governance. The domain registration data aligns well with the company's Czech business identity, supporting legitimacy and trustworthiness. Overall, the website is a credible and professional recruitment platform with good content quality and technical implementation. Strategic enhancements in security policies, incident response transparency, and security headers would further strengthen its security posture and compliance standing.

The website infocislo.sk operates as a regional phone number lookup service targeting Slovak and Czech users. It offers users the ability to identify unknown phone numbers, supported by user testimonials and additional informational content such as emergency call numbers and international dialing codes. The business model appears to rely primarily on advertising revenue, with Google Adsense integrated throughout the site. The site is relatively small in scale, founded in 2016, and hosted by WEDOS, a known hosting provider. The content is well structured and mobile optimized, providing a good user experience for its target audience. From a technical perspective, the site uses standard web technologies including HTML5, CSS, Bootstrap framework, Font Awesome icons, and Google Fonts. Advertising scripts and Google Funding Choices are present, indicating some level of user tracking for ad personalization. The site is mobile responsive and includes basic SEO meta tags but lacks advanced SEO and accessibility features. Hosting is stable with consistent domain registration data. Security posture is moderate; HTTPS is implied but no explicit security headers such as CSP or HSTS were detected in the provided data. There is no published security policy or incident response information, and no vulnerability disclosure or security.txt file was found. Privacy compliance is limited, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Contact information is minimal, with no clear company phone numbers or physical addresses, and only a hidden email address found in the source code. Overall, the website is functional and provides a useful service within its niche but would benefit from enhanced security practices, improved privacy compliance, and clearer business contact information to increase trustworthiness and compliance with modern standards.

S

Smile Taxi

babytaxi.lv

37

Smile Baby Taxi is a niche taxi service operating in Latvia, specializing in safe and comfortable transportation for parents with children. The company emphasizes child safety by equipping vehicles with child seats and offering services such as transporting children without parental accompaniment. The website reflects a small, locally focused business with nearly a decade of operation and a clear target audience of families in Latvia. Technically, the website uses basic HTML, CSS, and JavaScript with tracking via Google Analytics and Yandex Metrika. The site lacks advanced CMS or frameworks and shows basic mobile optimization and accessibility. Security posture is moderate with no visible HTTPS verification or security headers in the provided data, and no privacy or cookie policies are published, indicating compliance gaps. WHOIS data is unavailable due to query limits, limiting domain trust analysis. Overall, the website is functional and provides clear contact information but would benefit from improved security and privacy compliance measures.