High-risk security reports

T

TLAČOVÁ A INFORMAČNÁ KANCELÁRIA ZÁHORIE

ozahori.sk

40

The website ozahori.sk operates as a regional eMagazín providing news, cultural, historical, and event information focused on the Záhorie region and Myjavské kopanice area in Slovakia. It serves a local audience interested in regional developments and cultural heritage, positioning itself as a small but important media outlet within its niche. The business model centers on content publishing and regional information dissemination, supported by partnerships with related regional sites. Technically, the site is built on WordPress CMS with a modern tech stack including Bootstrap, jQuery, and various UI libraries. It is hosted on vaswebhosting.sk and uses HTTPS for secure communication. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in speed and technical modernization. From a security perspective, the site benefits from HTTPS and up-to-date WordPress core but lacks important security headers such as Content-Security-Policy and HSTS. No cookie consent mechanism is present despite GDPR compliance documentation, indicating a compliance gap. No critical vulnerabilities or exposed sensitive data were detected, but security posture could be enhanced by implementing recommended headers and consent mechanisms. Overall, the site is trustworthy and professional with clear contact information and a consistent brand presence. The domain registration is stable and consistent with the business history. Strategic recommendations include adding cookie consent, improving security headers, and enhancing accessibility to strengthen compliance and security posture.

Z

Zahorie.eu /Záhorie.eu/ sprievodca regiónom – správy z regiónu Záhorie a oblastí Myjavské kopanice a Záhorská Bratislava

zahorie.eu

43

Zahorie.eu is a regional informational portal dedicated to the Záhorie region of Slovakia, providing comprehensive cultural, historical, and tourism-related content. The website serves residents and visitors by offering news, event calendars, and detailed guides on castles, churches, museums, nature, and recreational activities. It maintains partnerships with several regional sites to enhance its content and reach. Technically, the site is built on WordPress with a modern tech stack including Bootstrap and jQuery, delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled, though it lacks some security headers and cookie consent mechanisms, which are recommended for improved compliance and protection. Overall, the site is trustworthy and professionally maintained, with clear contact information and a privacy policy aligned with GDPR requirements.

O

Občianska informačná komisia Bohunice

oik.sk

49

Oik Bohunice is a Slovakian civic information commission focused on improving public awareness in the region surrounding the nuclear facilities at Jaslovské Bohunice. It operates as part of the ZMO regional organization and collaborates with key nuclear and energy companies. The website provides information about the organization’s mission, events calendar, and contact details, targeting local residents and stakeholders concerned with nuclear energy and environmental impact. The business model is non-profit and community-oriented, emphasizing transparency and regional engagement. Technically, the website uses a custom CMS with common JavaScript libraries such as jQuery, Bootstrap, PhotoSwipe, and Highslide for UI and media handling. The site is mobile-optimized and accessible, with a cookie consent mechanism implemented. Performance is moderate, and SEO is basic but functional. No advanced analytics or tracking tools were detected, indicating a privacy-conscious approach. From a security perspective, the site enforces HTTPS and has a cookie consent banner, but lacks explicit security headers and published privacy or security policies. No vulnerabilities or exposed sensitive data were found. The WHOIS data aligns well with the website’s stated purpose and location, supporting legitimacy. Overall, the security posture is adequate but could be improved with formal policies and enhanced headers. The overall risk is low given the nature of the organization and content. Strategic recommendations include publishing a privacy policy and terms of service, adding security headers, and considering a vulnerability disclosure policy to enhance trust and compliance.

M

Malokarpatské partnerstvo

mpmas.sk

41

Malokarpatské partnerstvo is a local action group organization based in Slovakia, established around 2019. The website serves as an informational portal about the partnership, targeting a general audience interested in local development and community activities. The business model appears to be non-profit and community-focused, with no commercial services explicitly detailed on the site. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a moderate level of digital maturity. The site is accessible, mobile-optimized, and has basic SEO features but lacks advanced technical and security implementations. Security posture is weak due to the absence of security headers, privacy policies, and incident response information. There are no detected vulnerabilities or exposed sensitive data, but compliance with GDPR and other privacy regulations is insufficient. Overall, the website is safe for general audiences but requires improvements in privacy, security, and contact transparency to enhance trust and compliance.

M

Město Plasy

plasy.cz

40

Město Plasy operates an official municipal website serving the residents and visitors of Plasy, Czech Republic. The site provides comprehensive information about local government, social services, education, tourism, and community events. It is positioned as a local government portal with a focus on transparency and public service. The website demonstrates a moderate level of digital maturity, employing modern web technologies such as Bootstrap, jQuery, and GSAP for animations, ensuring a responsive and accessible user experience. Privacy and cookie policies are well implemented, reflecting compliance with GDPR requirements. However, the absence of WHOIS data limits domain legitimacy verification, which slightly impacts trustworthiness. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and incident response information are recommended.

Ostrava Towers Complex is a real estate development project by RT TORAX, s.r.o., focused on creating a vibrant urban center in Ostrava, Czech Republic. The project integrates residential and multifunctional towers with public spaces, aiming to connect historic and new city areas. The website presents detailed architectural concepts and company vision, targeting residents, investors, and local businesses. Technically, the website uses standard web technologies with a clean design and good mobile optimization but lacks advanced security headers and privacy compliance features. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the website content and branding appear professional and consistent with the business. Overall, the site demonstrates moderate digital maturity with room for security and compliance improvements.

A

adria-chorvatsko.cz

adria-chorvatsko.cz

48

adria-chorvatsko.cz is a Czech language travel and lifestyle website focused on providing guides, tips, and news about the Croatian coast. The site targets general audiences interested in travel and culture related to Croatia, operating primarily as a content publishing platform monetized through advertising. The website is relatively new, with domain registration in 2024, and hosts a variety of articles across multiple categories such as finance, technology, society, and health. The business model centers on content delivery with ad revenue as a key income source. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with analytics powered by Matomo and advertising via Google Adsense. The hosting provider is identified as vas-hosting.com. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with no major errors or broken elements detected. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers such as Content-Security-Policy and X-Frame-Options. No security policy or incident response information is published, and no vulnerability disclosure or security.txt file is present. Privacy compliance is partial; a privacy policy and terms of use exist, but no cookie consent mechanism is implemented, which is a GDPR compliance gap. Contact information is limited to a contact form, with no direct emails or phone numbers provided. Overall, the website presents a moderate risk profile with no critical security issues detected but room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing cookie consent, adding security headers, publishing security policies, and enhancing contact transparency to improve trust and compliance.

Potrubí Seidler s.r.o. is a small Czech company specializing in the installation of large-dimension piping systems including steam, hot water, gas, and water pipelines, as well as related construction and maintenance services. Founded in 2007 with roots dating back to 1995, the company serves industrial and construction clients primarily in the energy and manufacturing sectors. The website presents a clear overview of their services and company history but lacks modern digital maturity features such as privacy policies and updated technology stacks. Technically, the site uses older JavaScript libraries and lacks visible security headers or confirmed HTTPS enforcement, which poses security risks. The absence of WHOIS data reduces domain trustworthiness, although the site content and contact information appear legitimate. Overall, the security posture is weak, and compliance with GDPR is not evident. Strategic improvements in security, privacy compliance, and technology modernization are recommended to enhance trust and operational resilience.

LAMBUS is a small Czech transportation company specializing in high-quality bus services including international, domestic, and occasional charter transportation across Europe. The company positions itself as a reliable European carrier with a modern fleet and professional service, catering to groups such as sports clubs and corporate clients. The website reflects a professional digital presence built on WordPress with modern frontend technologies, though it uses an outdated jQuery version which poses some security risks. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published security policies. WHOIS data is unavailable, limiting domain legitimacy verification. Overall, the website is functional, user-friendly, and trustworthy for its business scope.

L

LUXMAX

luxmax.com

49

LUXMAX is a Czech Republic based company specializing in professional lighting systems, energy-saving solutions, and modernization services with over 15 years of market presence. Their business model focuses on B2B clients, providing comprehensive lighting audits, installations, and photovoltaic solutions. The website reflects a medium-sized enterprise with a consistent brand and clear market positioning in the energy sector. Technically, the site is built on WordPress using common plugins and libraries such as jQuery and Swiper.js, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is transparent and comprehensive, supporting business credibility. Overall, the website is professional and trustworthy but could improve in privacy and security practices.

J

Jan Maria

jan-maria.cz

47

Hotel Jan Maria is a small hospitality business located in Ostrava, Czech Republic, offering hotel accommodation, restaurant services, bowling, and event hosting. The hotel is situated in a historic building with a strategic location near the city center and key attractions. The website is professionally designed, featuring clear navigation, online reservation capabilities, and active social media channels. The technical infrastructure relies on older but functional JavaScript libraries and a CMS called NetNews Publisher. Security posture is generally good with HTTPS and cookie consent mechanisms, but lacks some modern security headers and updated libraries. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate. Privacy compliance is partial, with cookie consent but no dedicated privacy policy page. Overall, the site presents a trustworthy and professional front for a local hospitality business.

B

BOCHEMIE a.s.

bochemie.cz

48

BOCHEMIE a.s. is a specialized chemical manufacturing company based in the Czech Republic, focusing on advanced materials and chemical preparations. The company serves over 1,100 industrial customers worldwide, particularly in energy storage, wood protection, metal surface treatment, textile metallization, and cleaning/disinfection sectors. Their business model is primarily B2B, emphasizing innovation and quality solutions. The website reflects a professional and consistent brand presence with comprehensive product and corporate information. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and Nette Framework, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though security headers could be improved. The absence of WHOIS data reduces domain trust signals but does not detract from the overall legitimacy of the business. Privacy compliance is well addressed with GDPR-aligned policies and cookie management. Overall, the website is a reliable digital representation of a medium-sized industrial chemical company with a strong market position and good digital maturity.

Š

Školní jídelny Praha 10

sjp10.cz

43

Školní jídelny Praha 10 is a public organization managing school meal services for multiple educational institutions and municipal employees in Prague 10. The organization operates 14 canteen facilities serving approximately 10,000 diners daily, emphasizing quality nutrition, compliance with Czech school food regulations, and continuous staff training. The website is professionally designed using WordPress and related plugins, providing comprehensive information about services, contact details, certifications, and organizational structure. HTTPS is enforced, and security best practices are partially implemented, with room for improvement in security headers and cookie consent mechanisms. The absence of WHOIS data limits domain trust analysis, but the website content and certifications indicate a legitimate and credible public entity.

Z

Základní škola s mateřskou školou Tlučná

skolatlucna.cz

46

Základní škola s mateřskou školou Tlučná operates as a local educational institution in the Czech Republic, providing elementary and kindergarten education along with related services such as a school cafeteria and after-school care. The website serves as an official communication channel for parents, students, and the local community, offering news updates, school calendar information, and contact details. The business model is public education with a focus on community engagement and transparency. Technically, the website is built on WordPress using the Gantry 5 framework and several plugins enhancing content management and user experience. The site is mobile-optimized and uses HTTPS, ensuring secure communication. However, some security best practices like security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site shows a good baseline with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the presence of official contact information and consistent branding supports trustworthiness. Privacy compliance is supported by a comprehensive privacy policy, though cookie consent is lacking. Overall, the website is a well-maintained, professional platform for a small educational institution with room for improvement in security headers and privacy mechanisms. The risk level is low, but enhancing security and compliance features would strengthen trust and protect user data.

O

Obecní knihovna Tlučná

knihovnatlucna.cz

44

Knihovna Tlučná is a small public library serving the community of Tlučná, Czech Republic. The website provides information about library services, events, and resources for local readers including children and youth. It acts as a community hub for culture, education, and social engagement. The site is built on WordPress with Elementor and hosted by WEDOS, a reputable Czech hosting provider. Social media integration includes Facebook and Instagram, enhancing community outreach. Google Analytics is used for visitor tracking. Security posture is good with HTTPS and security headers implemented, but privacy and cookie policies are missing, which is a compliance gap. The domain is newly registered in 2024, consistent with the website's recent launch. Overall, the site is professional, trustworthy, and serves its community purpose well.

T

Taneční klub Tlučná

tktlucna.cz

41

Taneční klub Tlučná is a well-established dance club based in the Czech Republic, offering dance education and activities for children from 3 years old through adults. The club specializes in various dance styles including standard, Latin-American, Caribbean, and fitness dance, and actively participates in national and international competitions. The website provides comprehensive information about training schedules, events, and achievements, supported by multimedia content such as videos and photo galleries. Technically, the website is built with standard HTML and CSS, embedding YouTube videos for engagement, and is mobile-friendly with good SEO practices. However, the absence of WHOIS data and lack of explicit privacy and cookie policies indicate areas for improvement in transparency and compliance. Security posture is moderate with assumed HTTPS but missing security headers and vulnerability disclosures. Overall, the site reflects a credible and community-focused organization with room to enhance privacy and security measures.

J

Junák, středisko Krokodýl Tlučná

junak-tlucna.cz

37

Junák, středisko Krokodýl Tlučná is a local Czech scouting non-profit organization focused on youth development through scouting activities, summer camps, and community events. The website serves as an informational portal for members and the public, providing schedules, news, and event details. The organization targets children, youth, parents, and local community members interested in scouting. Technically, the website is built on Joomla CMS with Bootstrap and jQuery, featuring moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms. The absence of WHOIS data reduces domain trustworthiness, though the website content and structure indicate legitimacy. Overall, the site is safe, professional, and functional but would benefit from improved privacy and security practices.

F

Ferrum Igni

ferrumigni.cz

45

Ferrum Igni is a small, local Czech performance group specializing in fire and light shows for events and festivals primarily in Plzeň and surrounding areas. Their business model focuses on providing unique entertainment experiences combining dance, juggling, fire, and pyrotechnics. The website is built on WordPress using Elementor and Astra theme, reflecting a modern and maintainable technical infrastructure. The site is mobile-optimized and includes structured data to enhance search engine visibility. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies. Contact information is clearly presented, including phone, email, and physical address, along with social media links on Facebook and Instagram. Overall, the site is professional and trustworthy for its scale and market niche.

P

Prabos plus a.s.

prabos.cz

47

Prabos plus a.s. is a Czech manufacturer specializing in the production and sale of safety and professional footwear, with a heritage dating back to 1860. The company targets professionals and workers requiring durable and secure footwear for extreme conditions. Their market position is supported by direct sales through their website, complemented by after-sales services and warranty support. The website reflects a mature digital presence with modern technologies and integration of multiple marketing and analytics tools. Security posture is solid with HTTPS and secure forms, though there is room for improvement in security headers and explicit security policies. The absence of WHOIS data is a notable gap in domain legitimacy verification, but the overall business credibility remains high based on website content and trust signals. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to improve trust.

Y

YATE

yate.cz

40

YATE is a well-established Czech brand specializing in outdoor, camping, fitness, and archery equipment, with over 30 years of market presence. The company operates both a physical store and an e-commerce platform, manufacturing some products and distributing several partner brands. Their website is professionally designed, mobile-optimized, and provides a good user experience with clear navigation and comprehensive product offerings. Technically, the site uses a modern e-commerce platform (Shoptet) and integrates multiple analytics and marketing tools with user consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and CSRF protections, though some security headers could be improved. The absence of WHOIS data is a notable gap, slightly impacting trustworthiness but not detracting from the overall legitimacy of the business. Strategic recommendations include enhancing security headers, maintaining up-to-date libraries, and verifying domain registration details.

The website smart.link currently serves as a placeholder page with minimal content indicating an 'Unlisted Smartlink' and requesting users to retry later. The page title and minimal metadata reference Kochava, a company specializing in mobile conversion tracking and optimization, suggesting the domain is intended for use in mobile marketing analytics. However, the lack of substantive content, absence of privacy or cookie policies, and no contact information limit the ability to fully assess the business or service. The technical infrastructure shows use of Google Cloud DNS and Google Fonts, but no advanced frameworks or CMS are detected. Security posture is weak due to missing security headers and no visible HTTPS confirmation in the provided data. WHOIS data reveals privacy protection via Domains By Proxy, LLC, which is common and justified for technology companies but reduces transparency. Overall, the site appears to be temporarily unavailable or under construction, resulting in a low AI score and limited trustworthiness.

O

Obec Smolenice

kinozora.sk

47

Kino Zora is a local cinema operated by Obec Smolenice, providing cultural entertainment through scheduled film screenings and online ticket sales. The website serves the local community in Slovakia, offering a user-friendly platform for event information and ticket purchasing. The business leverages Ticketware SE's software for ticketing and GoPay for payment processing, indicating a reliance on established third-party services to streamline operations. The site is well-branded and consistent with its community-focused mission. Technically, the website uses legacy but stable technologies such as jQuery and jQuery UI, integrated with Facebook SDK for social features. The site is mobile-optimized and provides basic accessibility and SEO features. Performance is moderate, with room for improvement in modernizing the tech stack and enhancing security headers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No critical vulnerabilities or suspicious content were detected. Privacy compliance is basic, with a comprehensive terms and privacy policy available but no explicit GDPR statements or data protection officer information. Overall, Kino Zora presents a trustworthy and professional online presence for a small local cinema. Strategic improvements in security headers, privacy transparency, and technical modernization would enhance its posture and user trust.

C

Ľudovo-Umelecké Čičmany | cicmany.net

cicmany.net

48

The website cicmany.net represents a small local business focused on traditional Slovak folk art, retail of handmade products, hospitality services including a restaurant and accommodation, and an online shop via a partner domain. The business targets tourists and visitors interested in cultural and artisanal experiences in the Čičmany region. The website is well-structured with good content quality and user experience, featuring clear navigation and mobile optimization. Technically, it uses older but functional JavaScript libraries and includes Google Analytics for visitor tracking. Security posture is moderate with HTTPS assumed but lacking explicit security headers and privacy policies. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration consistency, which impacts overall trustworthiness. No adult or questionable content is present, making the site safe for general audiences.

Z

Cestovný ruch regiónu Záhorie a oblastí Myjavské kopanice, Záhorská Bratislava

zahorie.info

42

The website zahorie.info serves as a regional tourism portal focused on the Záhorie region and surrounding areas in Slovakia. It provides comprehensive information about cultural, historical, natural, and recreational attractions, targeting tourists and visitors interested in exploring the region. The site features event calendars, accommodation and dining recommendations, and detailed descriptions of local points of interest. The business model is informational and promotional, supporting regional tourism development. Technically, the website is built on WordPress 5.7.12 with common libraries such as jQuery, Bootstrap, and FontAwesome. It uses plugins for rating and live news features. The hosting and domain registration are stable and consistent with the site's age and purpose. Performance is moderate with good mobile optimization and basic accessibility. SEO practices are basic but present. From a security perspective, the site uses HTTPS and has domain transfer protection enabled. However, it lacks DNSSEC and important security headers, which could improve its security posture. No incident response or security policy pages are found, and no cookie consent mechanism is implemented despite GDPR policy presence. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the site is safe, professional, and trustworthy for its intended audience. Recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and maintaining up-to-date software to enhance security and compliance.

S

Sportmedia s.r.o.

surfmagazin.sk

48

Surfmagazin is a Slovak-based niche media website specializing in water sports such as windsurfing, kiteboarding, SUP & surfing, and wakeboarding. Operated by Sportmedia s.r.o., it offers news, articles, travel guides, equipment reviews, and classifieds, targeting water sports enthusiasts primarily in Slovakia and the Czech Republic. The site leverages WordPress CMS with modern JavaScript libraries and integrates advertising and analytics tools to monetize and analyze user engagement. The website is well-structured, mobile-optimized, and provides clear contact information and cookie consent, reflecting a professional digital presence. Security measures include HTTPS, reCAPTCHA, and cookie consent, though there is room for improvement in incident response transparency and security policy publication. Overall, the site demonstrates a solid security posture with no blocking or WAF interference detected, and the domain registration aligns with the business identity, indicating legitimacy and trustworthiness.

C

Kempy Chorvatsko

chorvatskokaravany.cz

40

Kempy Chorvatsko is a small informational website focused on providing tourists, primarily from Czech Republic and Slovakia, with detailed information about camping sites and accommodation options in Croatia. The site offers a comprehensive list of campsites, travel tips, and weather information to assist visitors in planning their holidays. The business model is informational, targeting a niche market of camping enthusiasts and travelers interested in Croatian destinations. Technically, the website uses basic web technologies including XHTML 1.0 Transitional, CSS, JavaScript, and jQuery, with a simple design and moderate performance. Mobile optimization and accessibility are basic, and SEO practices are minimal but present. Security posture is weak due to lack of HTTPS information, absence of security headers, and missing privacy and cookie policies. No contact or incident response information is provided, and WHOIS data is unavailable, which raises concerns about domain legitimacy and transparency. Overall, the site is functional and content-rich but requires significant improvements in security, privacy compliance, and trust signals to enhance credibility and user confidence.

K

Kempy Chorvatsko

kempychorvatsko.cz

40

Kempy Chorvatsko is a Czech informational website focused on providing detailed listings and information about camping sites in Croatia. The site targets Czech and Slovak tourists interested in camping vacations, offering a comprehensive table of campsites by location and name. The business model appears to be informational with potential monetization through affiliate links and advertising partnerships with related Croatian accommodation sites. Technically, the site uses basic XHTML 1.0 Transitional markup, jQuery, and CSS, hosted on HostMonster with domain registration via REG-WEDOS. The site lacks modern security features such as HTTPS and security headers, and does not provide privacy or cookie policies, indicating compliance gaps. No contact information or incident response channels are provided, limiting user trust and support options. Overall, the site is functional with good content relevance but requires significant improvements in security and privacy compliance to meet modern standards.

The website www.korutany.org is a small-scale WordPress-based travel information portal focused on the Austrian region of Carinthia (Korutany). It provides content about vacation opportunities, accommodation, and local attractions, targeting tourists interested in winter and summer holidays in this region. The site leverages affiliate marketing for accommodation bookings and offers multilingual support via GTranslate. Technically, the site uses WordPress 6.8.2 with standard web technologies but lacks advanced performance and accessibility optimizations. Security posture is basic with HTTPS enabled but no advanced security headers or policies detected. The absence of privacy, cookie, and terms of service policies, along with missing contact information, reduces compliance and trustworthiness. WHOIS data is unavailable or malformed, limiting domain legitimacy verification. Overall, the site is functional for its niche but requires improvements in security, privacy compliance, and business transparency.

The website predpoved-pocasi.com is a Czech language weather forecast portal providing current and long-term weather predictions primarily for the Czech Republic. It offers weather information for cities such as Prague and Brno, integrates third-party weather widgets, and displays weather-related news. The business model relies on advertising revenue, mainly through Google Adsense. The site has been operational since 2009, indicating a stable presence in its niche market. Technically, the website uses standard web technologies including HTML, CSS, and JavaScript, with integration of Google Adsense and weatherwidget.io scripts. Hosting is provided via HostMonster as indicated by the nameservers. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. There is no CMS or modern web framework detected. From a security perspective, the site lacks DNSSEC, security headers, and serves some ad scripts over HTTP, which introduces mixed content risks. No privacy, cookie, or terms of service policies are present, indicating poor privacy compliance. No contact information or incident response channels are provided, limiting transparency and user trust. The domain is well aged and registered with a reputable registrar, supporting legitimacy. Overall, the website is functional and provides relevant weather content but requires improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user experience.

The website czechkrumlov.com serves as a comprehensive travel guide focused on Cesky Krumlov, a historic town in the Czech Republic. It provides detailed information about the town's history, attractions, dining options, transportation, and practical visitor tips. The site targets tourists and travelers interested in exploring this UNESCO World Heritage site. The business model appears to be informational with revenue generated through advertising and affiliate marketing. The website has been active since 2008, indicating a stable presence in its niche. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Vegas.js for slideshow effects. Hosting is provided by HostMonster, as indicated by the nameservers. The site performance is moderate with basic mobile optimization and accessibility features. SEO is adequately addressed with proper meta tags and structured content. From a security perspective, the site lacks advanced security headers and DNSSEC is not enabled, which are areas for improvement. There is no visible HTTPS enforcement information, and no privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. No contact information or incident response channels are provided, limiting transparency and trust. Overall, the website is functional and informative but would benefit from enhanced security measures, privacy compliance, and clearer business contact information to improve trustworthiness and user confidence.

S

Symphony Digital

symphony-digital.cz

48

Symphony Digital is a Czech-based small digital agency specializing in creating professional websites and e-commerce solutions, complemented by internet marketing services such as SEO, SEM, and social media marketing. The company targets businesses and individuals seeking to establish or improve their online presence. Their portfolio includes various local Czech clients, indicating a focused regional market position. Technically, the website is built on WordPress with modern integrations like Google Analytics, Tag Manager, and reCAPTCHA, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and anti-bot measures but lacks some advanced security headers and published policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security documentation.

GRENA, a.s. is a Czech manufacturing company specializing in insulating vermiculite boards and fire-resistant materials, serving industrial and commercial sectors with a well-established market presence since 1999. Their website offers product information, e-commerce capabilities, and company news, targeting primarily Czech-speaking customers with some English support. The technical infrastructure uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager, with a custom CMS by FlexiSystems. The site is mobile-optimized and SEO-friendly, though accessibility could be improved. Security posture is solid with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit security policies. WHOIS data confirms domain legitimacy and long-term operation. Overall, the website is professional, trustworthy, and business-focused.

R

Ronald McDonald House Charities

rmhcdemo.com

48

The website rmhcdemo.com serves as a demo platform for a Ronald McDonald House Charities chapter, focusing on providing support and housing for families with sick children. It presents a professional and consistent brand image aligned with the RMHC mission, targeting families, donors, and volunteers. The site offers information on key services such as housing, scholarships, fundraising, and family rooms, positioning itself as a medium-sized non-profit organization with a clear community focus. The domain age and registration details support the legitimacy of the demo site, with no privacy protection used and domain locked against unauthorized changes. Technically, the site is built on WordPress using common plugins like WPBakery Page Builder and Yoast SEO, with good mobile optimization and accessibility features. The performance is moderate, and SEO practices are adequately implemented. Security posture is reasonable with HTTPS enforced and no exposed sensitive data, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the security posture is adequate for a demo non-profit site but could benefit from enhanced DNS security and security headers. The site does not expose critical vulnerabilities or sensitive data. Business credibility is high due to clear branding, trust indicators like Charity Navigator and BBB logos, and consistent content quality. No adult or explicit content is present, making it safe for general audiences. Strategic recommendations include enabling DNSSEC, implementing security headers, adding a cookie consent mechanism, and providing clearer contact information to enhance trust and compliance. These improvements will strengthen the site's security and privacy posture while maintaining its professional and trustworthy image.

T

Teslacarport.eu – Modern carport with solar panels

teslacarport.eu

44

Teslacarport.eu is a website dedicated to offering modern solar carports integrated with solar panels, inverters, and optional electric vehicle chargers. The business targets environmentally conscious homeowners seeking to generate clean energy and protect their vehicles while reducing their carbon footprint. The website is built on a WordPress platform using Elementor, providing a visually appealing and mobile-optimized user experience. However, the site lacks key privacy and cookie policies, which impacts its compliance posture. Security measures such as security headers and incident response information are also absent, indicating room for improvement in security maturity. Overall, the website presents a professional business offering with clear contact information and product details but requires enhancements in privacy and security compliance to strengthen trust and regulatory adherence.

S

SIA Tesla

tesla.lv

42

SIA Tesla is a Latvian company specializing in electrical construction, power network design up to 20 kV, railway infrastructure construction, and solar power plant design and installation. With over 16 years of experience, it holds ISO 9001, 14001, and 45001 certifications and serves both state and private sector clients. The company maintains a professional online presence with multilingual support and clear service offerings focused on energy and transportation sectors. Technically, the website is built on WordPress with Elementor and WooCommerce, integrating modern SEO and analytics tools such as Google Tag Manager and Facebook Pixel. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the domain registration and website content are consistent and trustworthy, reflecting a mature business with good market positioning.

B

Barkotex

barkotex.cz

46

Barkotex is a Czech family-owned business specializing in high-quality interior products such as flooring, wallpapers, and kitchens. With over 30 years of experience, the company serves both individual customers and professional clients including architects and developers. The website reflects a mature digital presence with a professional design, clear product categorization, and active social media engagement. Technically, the site is built on Joomla CMS using modern frontend technologies and includes a cookie consent mechanism indicating some level of privacy compliance. Security posture is good with HTTPS enforced and CSRF protection in AJAX calls, though additional security headers could enhance protection. The absence of WHOIS data reduces transparency and trustworthiness from a domain registration perspective, but the overall business credibility remains high based on website content and social presence.

WHITE TRANS s.r.o. operates a professional transportation and logistics business based in the Czech Republic, offering international refrigerated freight, parcel services, passenger bus transport, and warehousing solutions. The company has a solid market presence with a history dating back to 2004 and domain registration since 2002, indicating established operations. Their fleet includes modern vehicles compliant with emission standards and GPS tracking, supported by secure warehousing facilities with 24/7 monitoring. Technically, the website is built on WordPress with Elementor, employing common analytics tools like Google Analytics and Tag Manager. While the site is generally well-structured and mobile-optimized, it lacks visible privacy and cookie policies, and some plugin errors are present in the HTML, which could pose minor security risks. Security posture is moderate with HTTPS enabled but missing security headers. Overall, the business credibility is strong, but privacy compliance and security best practices need improvement.

T

TIPA Telekom plus a. s.

tipatelekom.cz

47

TIPA Telekom plus a. s. is a Czech Republic-based company specializing in electrical installation and maintenance services, including silnoproud (high power), slaboproud (low power), security systems, construction, project planning, measurement and regulation, and photovoltaics. With over 30 years of market presence and a workforce of approximately 80 employees, the company serves business clients primarily in the energy sector. The website reflects a professional and consistent brand image with comprehensive service offerings and contact options, including a HelpDesk system. Technically, the site is built on WordPress with modern libraries and plugins, providing good mobile optimization and SEO. Security posture is adequate with HTTPS and privacy compliance, though lacking explicit security headers and incident response information. The absence of WHOIS data is a notable concern for domain legitimacy, but the overall business credibility remains high based on website content and certifications such as ISO 45001.

Základní škola Eden is a Czech primary educational institution with a focus on sports and a long-standing tradition. The website serves students, parents, and the local community by providing school news, class information, and resources. The school positions itself as a community-centric institution emphasizing education through sports. Technically, the website uses a modern but somewhat dated technology stack including jQuery 3.0.0, jQuery UI, Owl Carousel, Google reCAPTCHA, and Matomo analytics, running on the IPO CMS platform. The site is mobile responsive and includes privacy and cookie compliance mechanisms. Security posture is generally good with HTTPS enforced and reCAPTCHA protecting forms; however, some security headers are missing and the jQuery version is outdated, which could pose risks. WHOIS data is unavailable, which slightly reduces trust but the website content and contact information strongly indicate legitimacy. Overall, the site is professional, trustworthy, and well-maintained with room for security improvements.

P

Piráti Chomutov z.s.

piratichomutov.cz

45

Piráti Chomutov is a Czech ice hockey club with an official website providing comprehensive information about the team, ticketing, fan engagement, and youth development. The site targets local fans and hockey enthusiasts, offering news, schedules, and merchandise. Technically, the website uses common web technologies such as jQuery, Bootstrap, and Google Analytics, with a responsive design suitable for mobile users. Security measures include a cookie consent mechanism, but lack visible HTTP security headers and explicit privacy or security policies. WHOIS data is unavailable, which raises concerns about domain registration transparency. Overall, the site is functional and professional but could improve in security and compliance documentation.

H

HC RT TORAX Poruba

hcporuba.cz

46

HC RT TORAX Poruba is a Czech ice hockey team with an official website providing comprehensive information about the team, including news, match schedules, rosters, ticketing, and partner promotions. The website targets sports fans and the local community, serving as a hub for engagement and information dissemination. Technically, the site uses modern web technologies such as Bootstrap and jQuery, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit privacy policies, terms of service, and security headers, which are areas for improvement. Overall, the site is professional and trustworthy, with a strong business credibility score but moderate privacy compliance.

HC Frýdek-Místek is a Czech ice hockey club with an official website providing comprehensive information about the club, including news, match schedules, team rosters, ticket sales, and fan engagement features. The site targets hockey fans and the local community, offering a professional and consistent brand presence supported by multiple partner and sponsor links. The business model focuses on sports club promotion, fan interaction, and ticketing services. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Slick Carousel, with good mobile optimization and SEO practices. Security-wise, the site includes a cookie consent mechanism and GDPR policy, but lacks visible security headers and explicit incident response contacts. The absence of WHOIS data limits domain trust analysis, but the website content and external references support legitimacy. Overall, the site is well-structured and professional, with moderate security posture and good privacy compliance.

S

SC MARIMEX KOLÍN

scmarimexkolin.cz

45

SC Marimex Kolín is a Czech ice hockey club competing in the 1st league (Maxa liga). Their official website provides comprehensive information about the team, including news updates, match schedules, ticket sales, and fan engagement through social media. The site targets local sports fans and community members interested in ice hockey. The business model revolves around sports entertainment, merchandising, and community engagement. Technically, the website uses modern web technologies such as Bootstrap 5, jQuery, and Swiper.js for UI components and interactivity. It integrates Google Fonts, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and features a cookie consent mechanism compliant with GDPR principles, although a dedicated privacy policy page is missing. From a security perspective, the site enforces HTTPS and uses cookie consent banners to manage user privacy preferences. However, no advanced security headers were detected, and there is no published security or incident response policy. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, though the website content and social media presence support its legitimacy. Overall, the website is professionally designed and functional but would benefit from enhanced privacy disclosures, security policies, and domain registration transparency to improve trust and compliance.

H

HC ZUBR Přerov

hokejprerov.cz

45

HC ZUBR Přerov is a Czech ice hockey club with a well-established online presence since 2008. The website serves as the official portal for fans and stakeholders, providing comprehensive information on team news, match schedules, ticketing, merchandise, and youth programs. The site targets local and regional sports enthusiasts and operates a business model centered on fan engagement and sports event promotion. Technically, the website employs modern web technologies including jQuery, Google Fonts, Google Analytics, and FancyBox for media display. The hosting appears to be managed by a Czech registrar REG-ZONER, consistent with the domain's registration data. Security-wise, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible advanced security headers and a formal security policy or vulnerability disclosure. Overall, the site is professional, content-rich, and trustworthy, though improvements in privacy policy transparency and security posture are recommended.

S

SK Horácká Slavia Třebíč

hstrebic.cz

44

SK Horácká Slavia Třebíč is a well-established Czech ice hockey club with a strong regional presence and a history dating back to 1928. Their official website serves as a comprehensive portal for fans and stakeholders, offering news, schedules, multimedia content, and fan engagement features. The site is professionally designed with consistent branding and good mobile optimization, targeting primarily ice hockey enthusiasts in the Czech Republic. Technically, the website uses standard web technologies including jQuery, Bootstrap, and Slick Carousel, hosted by a Czech registrar REG-ZONER. While the site includes cookie consent mechanisms and analytics tracking, it lacks explicit privacy policies, terms of service, and direct contact information, which are areas for improvement. Security posture is moderate with no detected WAF or blocking, but missing security headers and unclear SSL configuration suggest room for enhancement. Overall, the domain registration data aligns well with the business, supporting legitimacy and trust.

H

HC Stadion Litoměřice

hclitomerice.cz

45

HC Stadion Litoměřice operates an official website dedicated to providing comprehensive information about the ice hockey team, including match schedules, player rosters, news articles, and fan engagement features such as a fanshop and social media integration. The website targets ice hockey fans and the local community in the Czech Republic, serving as a central hub for team-related content and merchandising. Technically, the site employs modern web technologies including Google Tag Manager, Facebook Pixel, jQuery, and slick carousel for interactive content. The hosting and domain registration are consistent with the Czech Republic location and the business's operational history since 2006. Security-wise, the website uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers and explicit privacy or terms of service pages, indicating room for improvement in compliance and security posture. Overall, the website is professionally designed, mobile-optimized, and provides a good user experience, though it would benefit from enhanced transparency and security best practices.

VHK ROBE Vsetín is a well-established Czech ice hockey club with a strong regional presence and a comprehensive online platform serving fans and community members. The website provides detailed information about the team, schedules, ticket sales, fan shop, and youth development programs, reflecting a mature business model focused on sports entertainment and community engagement. Technically, the site uses a custom CMS with modern web technologies including JavaScript libraries, Google Fonts, and social media integrations, hosted by REG-ZONER. The site is mobile-optimized and offers good user experience with clear navigation and relevant content. Security posture is moderate; while HTTPS is implied and cookie consent mechanisms are implemented, explicit security headers and detailed security policies are absent. Analytics and tracking tools such as Google Analytics and Facebook Pixel are used with user consent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

HC Dukla Jihlava operates as a Czech ice hockey club with an online presence focused on providing information about the team, matches, and related news. The website targets fans and followers of Czech ice hockey, particularly those interested in the Tipsport extraliga league. The business model centers on sports club promotion and fan engagement rather than direct commercial transactions. The site content is minimal but relevant to its audience, with moderate branding consistency and basic content quality. Technically, the website uses legacy versions of jQuery and Bootstrap frameworks, Google Fonts, and Google Analytics for tracking. The site shows basic mobile optimization and SEO practices but lacks modern accessibility features and comprehensive meta data. No CMS or hosting provider details are evident. Performance is moderate with room for improvement in responsiveness and technical modernization. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies despite using analytics scripts, indicating potential compliance gaps. No forms or user input fields reduce attack surface, but the absence of HTTPS information and WHOIS transparency lowers trust. No vulnerabilities or malicious indicators were detected in the content. Overall, the security posture is basic and would benefit from enhanced policies and technical controls. The overall risk is moderate with no critical issues detected. Strategic improvements in privacy compliance, security headers, HTTPS enforcement, and contact transparency are recommended to enhance trust and compliance.