High-risk security reports

D

DT-EXPERT s.r.o.

dtexpert.cz

47

DT-EXPERT s.r.o. is a Czech Republic based interior design and fit-out company with over 25 years of experience specializing in commercial, public, and residential interior projects. Their website presents a professional portfolio of services including workspace consulting, space planning, custom production, and installation services. The company targets commercial and residential clients seeking comprehensive interior project realization. Technically, the website is built on WordPress using modern frameworks like Bootstrap and integrates Google Analytics and Facebook Pixel for marketing insights. Security posture is solid with HTTPS and reCAPTCHA implemented, though lacking published security policies and incident response contacts. Overall, the website is professional, trustworthy, and well-structured, supporting the company's established market position.

C

Chalupa Pod Šerovnou

podserovnou.cz

45

Chalupa Pod Šerovnou is a small hospitality business offering stylish apartment and cottage rentals in the South Bohemia region near Šumava, Czech Republic. The website targets families, groups, and active tourists seeking nature and relaxation. The business is newly established in 2023 and positions itself as a niche provider with a strong local appeal. The website is well designed, mobile optimized, and provides clear navigation and contact information. Social media integration and guest reviews enhance trust and credibility. Technically, the site runs on WordPress with modern plugins and self-hosted fonts, hosted by a regional hosting provider. Security posture is good with HTTPS and no visible vulnerabilities, but lacks some security headers and incident response information. Privacy compliance is partial due to absence of cookie consent mechanisms. Overall, the site is professional, trustworthy, and suitable for its business purpose.

The website dovolenachorvatsko.org is a Czech language travel portal focused on providing information and listings for affordable private accommodation in Croatia. It targets tourists interested in Croatian regions and promotes cultural, historical, and natural attractions. The business operates as a small niche informational platform with a focus on vacation rentals from private owners. Technically, the site uses basic HTML, CSS, and JavaScript with jQuery 1.6.1 and the Nivo Slider plugin. It is hosted on HostMonster servers. The site lacks modern security practices such as HTTPS enforcement and security headers, and it does not provide privacy or cookie policies, which impacts compliance and user trust. Google Analytics is used for tracking without visible consent mechanisms. The domain is privacy protected but long-standing since 2011, consistent with the business type. Overall, the site is functional but basic in design and security, with room for improvement in privacy compliance and technical modernization.

D

DEBANT, s.r.o.

debant.cz

43

DEBANT, s.r.o. is a small family-owned Czech company established in 1992, operating the largest Czech online portal for private accommodation in Croatia, UBYTOVANIvCHORVATSKU.cz. The company also manages real estate rentals and domain sales, targeting travelers and property renters primarily in the Czech Republic and Croatia. Their market position is strong in the Central European travel niche, with a significant volume of unique inquiries annually. Technically, the website uses a traditional tech stack with jQuery, Bootstrap, and various JavaScript libraries, but some components like jQuery are outdated, posing security risks. The site is mobile-optimized and well-structured but lacks modern security headers and visible HTTPS enforcement in the provided data. Security posture is moderate with room for improvement, especially in updating libraries and implementing security best practices. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but should address security and compliance gaps to enhance user trust and regulatory adherence.

The website travelguide.sk is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, specifically an ASN block (error 1005). This prevents any meaningful content or business information from being retrieved or analyzed. The domain is well-established, registered since 2003, and uses DNSSEC with Cloudflare as its security and performance provider. However, the lack of accessible content means no privacy, cookie, or terms of service policies are visible, nor any contact or security policies. The technical infrastructure relies on Cloudflare services, but no CMS or additional frameworks are detectable. The security posture cannot be fully assessed due to the block, but the domain registration data is consistent and legitimate. Overall, the site is currently non-functional for external visitors from the blocked ASN, resulting in a very low AI score and limited insights.

S

SALANSKY & CO., s.r.o.

salansky.studio

49

Salansky is a small creative studio based in the Czech Republic specializing in artistic glass design, bespoke lighting, and exclusive tableware collections. The company positions itself as a niche luxury brand targeting design enthusiasts and clients seeking unique, handcrafted glass creations. The website reflects a professional and artistic brand image with a focus on visual storytelling and product showcases. Technically, the site uses modern web technologies including Bootstrap and Fancyapps UI, with Google Analytics and Google Ads for tracking. The site is mobile optimized and performs moderately well. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers, and does not provide visible privacy or cookie policies, which are compliance gaps. Overall, the domain registration is consistent and trustworthy, though the domain is newly registered in 2024, which aligns with a new or rebranded business. The site is safe for general audiences with no adult content detected.

B

Bratislava Region Tourism

bratislavaregion.travel

47

Bratislava Region Tourism operates as the official regional tourism organization for the Bratislava self-governing region in Slovakia. The organization focuses on promoting tourism development, cultural events, and regional attractions through marketing, event organization, and advisory services. The website serves as a comprehensive portal for tourists, offering information on events, activities, accommodations, and transport within the region. Supported by governmental bodies, it maintains a credible market position as a key promoter of regional tourism. Technically, the website employs modern frontend technologies including Bootstrap and jQuery, with embedded YouTube video content and social media integration. The site is responsive and optimized for mobile devices, providing a good user experience and clear navigation. However, no explicit CMS or hosting provider information is evident, suggesting a custom or proprietary platform. From a security perspective, the domain is registered transparently without privacy protection, with a clientTransferProhibited status enhancing domain security. While HTTPS usage is implied via embedded content, explicit security headers and policies are not detected. The site implements a cookie consent mechanism but lacks visible privacy policy and terms of service pages, indicating room for compliance improvement. Overall, the website is professionally designed and trustworthy, with a focus on regional tourism promotion. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, enabling DNSSEC, and providing clear incident response contacts to strengthen security posture and regulatory compliance.

P

pekne.net

pekne.net

47

pekne.net is a Slovak e-commerce website specializing in traditional woolen and linen clothing inspired by folk embroidery, targeting customers interested in authentic Slovak cultural garments. The site offers a range of products including knitted accessories, embroidered dresses, and gift packaging. The business operates in the retail sector with a niche market focus, maintaining consistent branding and a professional online presence. Technically, the website employs common web technologies such as jQuery, Font Awesome, and Google Analytics, but uses an outdated jQuery version which poses some security risks. The site is mobile optimized and SEO friendly with clear navigation and good content quality. Security posture is moderate; HTTPS is implied but no security headers were detected, and no explicit security or incident response policies are published. Privacy compliance is basic with GDPR-related policies and cookie consent implemented. Overall, the website is trustworthy for general audiences with no adult or questionable content detected.

L

LUKRENA a.s.

sadynebilovy.cz

47

Sady Nebílovy is a Czech agricultural business specializing in the cultivation and sale of various fruits including apples, pears, plums, cherries, blueberries, and strawberries. Operated by LUKRENA a.s., the company offers value-added services such as fruit drying, cider production, and a distillery for fruit growers. The website presents a professional and well-structured digital presence with clear product information, contact details, and compliance with GDPR and cookie regulations. Technically, the site is built on WordPress with modern plugins and optimization tools, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. The absence of WHOIS data slightly reduces domain trust but does not detract from the overall legitimacy of the business. No adult or questionable content is present, making the site safe for general audiences.

O

Obec Tlučná

obec-tlucna.cz

49

Obec Tlučná operates an official municipal website serving the local community of Tlučná in the Czech Republic. The site provides comprehensive information about local government, public services, institutions, community events, and contact details. It targets residents and visitors seeking official municipal information. The website is well-structured, localized in Czech, and includes social media integration with Facebook and YouTube channels. Technically, the website uses a custom CMS platform with common JavaScript libraries such as jQuery, Bootstrap, Highslide, and Swiper. The site is mobile-optimized and demonstrates moderate performance. Privacy and cookie policies are implemented with consent mechanisms, indicating GDPR compliance. However, no explicit security or incident response policies are publicly available. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities in the HTML content. Security headers could be improved by adding CSP and other recommended headers. The absence of WHOIS data for the domain is a concern and reduces trustworthiness, though the website content and official contact information suggest legitimacy. Overall, the website is a reliable and professional municipal portal with good content quality and privacy compliance. Verification of domain registration status is recommended to enhance trust and business credibility.

S

SILTUMELEKTROPROJEKTS

sep.lv

46

SEP (SILTUMELEKTROPROJEKTS) is a leading architecture, engineering, and construction firm based in Latvia, serving the Baltic region with a comprehensive range of services including biogas solutions. The company employs over 50 experts and leverages modern technologies such as BIM for project management. Their market position is strong, supported by ISO certifications and a professional digital presence. Technically, the website is built on WordPress with Elementor, featuring modern SEO and performance optimizations, though some security headers are missing. The security posture is good with HTTPS and reCAPTCHA in place, but could be improved with additional headers and explicit security policies. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

MedaBarf is a Czech Republic-based e-commerce retailer specializing in premium BARF (Biologically Appropriate Raw Food) products for dogs and cats. The company offers a range of frozen and dry BARF products, supplements, and treats, targeting pet owners who seek high-quality, natural pet nutrition. The website is built on the Shoptet platform and employs standard web technologies including jQuery and Facebook SDK for marketing and tracking purposes. The site is well-structured with clear navigation, product information, and pricing, supporting a positive user experience. Security posture is adequate with HTTPS enforced and CSRF protections in place, though additional security headers and incident response information are lacking. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting good privacy practices. However, the absence of WHOIS registrant data limits domain trust verification. Overall, MedaBarf presents a professional and trustworthy online presence within its niche market.

R

Rozběháme Česko

jdubehat.cz

46

Jdu běhat is a Czech Republic based project focused on providing running courses and training primarily for women. The website offers a variety of running courses for beginners and advanced runners, both in-person and online, supported by a community and professional trainers. The project is positioned as a specialized fitness and community initiative within the Czech market, leveraging multiple partner sites and social media channels to engage its audience. Technically, the website uses a custom CMS with AJAX and JavaScript components, integrates Google Analytics and Facebook Pixel for tracking, and enforces HTTPS with cookie consent mechanisms. Security posture is solid with no critical vulnerabilities detected, though security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable platform for its target audience.

R

Rozbeháme Slovensko | Bežecký svet

rozbehameslovensko.sk

47

Rozbeháme Slovensko is a Slovak community-oriented project focused on promoting healthy lifestyles through running and canicross activities. It organizes free running events, educational courses, and charity runs across Slovakia, targeting sports enthusiasts and the general public interested in fitness and social engagement. The website reflects a regional community project with consistent branding and cooperation with Czech partner projects. Technically, the site uses a custom CMS with modern JavaScript components, integrates Google Analytics and Facebook Pixel for tracking, and implements cookie consent mechanisms. The site is mobile responsive and well-structured, providing a good user experience. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is good with accessible privacy and cookie policies. Overall, the domain registration data aligns well with the website content, indicating legitimacy and consistency. The site is safe for general audiences and does not contain adult or explicit content.

L

Leskros | Závod Rozběháme Česko

leskros.cz

46

Leskros.cz is a Czech website dedicated to organizing and promoting a series of running events under the Rozběháme Česko project. The site targets runners and sports enthusiasts primarily in the Czech Republic, offering event registration, team challenges, charity runs, and running camps. The business operates as a small-scale event organizer with a niche focus on community sports activities. Technically, the website employs modern JavaScript frameworks, AJAX for dynamic content, and integrates Google Analytics and Facebook Pixel for tracking. The site is mobile-optimized and uses HTTPS for secure communications. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks visible advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy and cookie banner present in Czech language. Overall, the website is professionally maintained with consistent branding and partner relationships, though WHOIS data is unavailable, likely due to privacy protection. The site poses low risk and is safe for general audiences.

I

IRS Tech Services, s.r.o.

irstech.cz

43

IRS Tech Services, s.r.o. is a Czech Republic based small technology company specializing in installation and consulting of monitoring technologies for retail, pharmacy, and gastronomy sectors. Their services include analysis of temperature, humidity, energy consumption, and device performance to optimize operations and prevent faults. The company targets B2B customers, including key retail chains and gastronomy businesses, positioning itself as a niche provider with reputable clients such as Albert, Coop, and Kaufland. The website is professionally designed using Joomla CMS with modern frameworks and provides clear contact information and client references. However, it lacks a privacy policy and terms of service pages, which are important for compliance and trust.

I

Integrated retail solutions s.r.o.

irs.cz

41

Integrated retail solutions s.r.o. operates a business platform focused on integrating complex resource management concepts, primarily in water, energy, and technology sectors. The company targets businesses seeking efficient resource management solutions, positioning itself as a niche provider within the Czech market. The website reflects a professional and consistent brand image, with clear contact information and subsidiary references, supporting its business credibility. Technically, the website employs modern tracking technologies such as Google Analytics and Google Tag Manager, uses HTTPS with good SSL configuration, and includes responsive design elements for mobile optimization. However, it lacks advanced security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security best practices. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data due to privacy protection limits external trust verification, but the website's professional presentation and consistent business information mitigate concerns. Overall, the site is safe for general audiences and does not contain any adult or questionable content. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, publishing a vulnerability disclosure or security.txt file, and enhancing GDPR compliance mechanisms. These steps will improve the site's security posture, regulatory compliance, and user trust.

A

Asociace sportu pro radost, z.s.

roadclassics.cz

46

Road Classics is a Czech Republic-based organization focused on organizing premium amateur road cycling events and community activities. The website showcases a series of cycling monuments, community engagement, educational content, and premium services such as VIP hospitality and merchandise sales. The organization partners with several reputable companies and maintains an active presence on social media platforms to engage its target audience of amateur cyclists. Technically, the website employs modern web technologies including Bootstrap, jQuery, Swiper.js, and integrates third-party services like SmartEmailing for newsletters and Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a published security policy or vulnerability disclosure program. No critical vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain trust assessment, but the presence of multiple trusted partners and clear contact information supports legitimacy. Overall, the website presents a professional and trustworthy front for its business, with moderate technical and security maturity. Strategic improvements in security headers, incident response transparency, and WHOIS data verification are recommended to enhance trust and compliance.

A

Asociácia športu pre radosť, o.z.

behajlesmi.sk

43

Behaj lesmi is a Slovak non-profit organization focused on organizing a series of trail running events across Slovakia. The website serves as a central hub for event information, registration, and community engagement. It targets trail runners and outdoor enthusiasts, providing detailed race schedules, partner information, and news updates. The business model revolves around event management supported by sponsorships and partnerships with local and regional organizations. Technically, the website uses a modern JavaScript stack including jQuery, Swiper.js, and Google Tag Manager, hosted on Active24 with DNSSEC enabled, ensuring a secure and reliable infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policies. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

B

Behej.com s.r.o.

bezkuj.com

47

bezkuj.com is a Czech Republic-based niche media platform focused on cross-country skiing and related winter sports. It offers a variety of content including articles, race calendars, training diaries, forums, and photo galleries targeting skiing enthusiasts primarily in the Czech and Slovak regions. The site is part of a network including behej.com and triatlony.com, indicating a focused sports media ecosystem. Technically, the site uses a custom CMS with a tech stack including jQuery, Leaflet.js for maps, Moment.js for date handling, and integrates multiple third-party analytics and advertising services such as Google Analytics, Facebook Pixel, Hotjar, and Google AdSense. The website is moderately optimized for performance and mobile use, with good SEO practices and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, but the use of an outdated jQuery version and lack of security headers are notable vulnerabilities. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness, although the website content and partner domains suggest operational legitimacy. Privacy compliance is basic with no explicit privacy or terms of service pages detected, and no contact information or data protection officer details are provided. Overall, the site is functional and content-rich but would benefit from improved security practices, clearer privacy disclosures, and verified domain registration to enhance trust and compliance.

B

Behej.com s.r.o.

triatlony.com

48

The website triatlony.com is a Czech language sports media and community platform focused on triathlon, running, cycling, and swimming. It offers news articles, race calendars, training diaries, forums, and photo galleries targeting endurance sports enthusiasts primarily in the Czech Republic and Slovakia. The site is professionally designed with consistent branding and good content quality, supported by active social media channels and RSS feeds. Technically, it uses a mix of older and modern JavaScript libraries including jQuery 1.8.2, Leaflet.js, Moment.js, and integrates Google Analytics, Facebook Pixel, Hotjar, and Google Tag Manager for analytics and marketing. However, the use of an outdated jQuery version and absence of explicit security headers are notable security concerns. The site employs HTTPS and cookie consent mechanisms but lacks a visible privacy policy or terms of service pages, indicating partial privacy compliance. The WHOIS data for the domain is missing or unavailable, which is inconsistent with the active and professional nature of the website, suggesting a need for verification of domain registration status. Overall, the site is functional and credible but would benefit from enhanced security practices and clearer privacy documentation.

Les Deux Messieurs operates as a French bakery and café with physical locations in Munich and Wiesbaden, Germany. The business focuses on offering authentic French baked goods and café dining experiences, targeting customers who appreciate French culinary culture. The website is professionally designed, mobile-optimized, and includes strong accessibility features, enhancing user experience for diverse audiences. Technically, the site uses modern web technologies and HTTPS, ensuring secure communication. However, the absence of explicit privacy, cookie, and terms of service policies indicates gaps in compliance and transparency. Security posture is generally good, but could be improved by adding security headers and incident response contacts. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

G

Groupe point chaud

pointchaud.be

38

Point Chaud is a Belgian bakery and quick-service food chain specializing in boulangerie, viennoiserie, pâtisserie, and sandwicherie products. The company operates multiple points of sale and offers franchise opportunities and a loyalty program, positioning itself as a recognized regional player in the retail food sector. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content about products, company values, and services. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and reCAPTCHA for security and marketing purposes. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. WHOIS data is restricted, limiting transparency but the website's contact details and social media presence support legitimacy. Overall, the site is trustworthy and well-maintained with room for security enhancements.

C

CIKLEA

ciklea.fr

40

CIKLEA is a French accounting and consulting firm established in 2017, operating multiple offices in Paris, Aulnay-sous-Bois, and Cesson. The company offers a range of professional services including accounting, analysis and consulting, social and payroll services, legal and fiscal advice, and wealth and social protection. The website positions CIKLEA as a mid-sized firm combining agility with the resources of a larger entity, targeting businesses seeking expert financial and advisory services. The digital presence is supported by a modern WordPress infrastructure with integrated marketing and analytics tools such as HubSpot, and includes user-friendly features like cookie consent and reCAPTCHA for security.

A

Asklepion Lab

asklepionlab.com

46

Asklepion Lab is a dental laboratory service provider based in the Czech Republic, operating a website primarily in Czech language. The business appears to be small-sized and focused on dental laboratory services. The website uses WordPress CMS with Yoast SEO plugin and includes multimedia content such as background video. However, the website content is minimal and lacks critical business contact information and compliance policies. Technically, the site uses standard web technologies including jQuery and WordPress core scripts, but lacks visible security headers and privacy mechanisms. The WHOIS data for the domain is unavailable or the domain appears unregistered, which raises concerns about the legitimacy and trustworthiness of the domain registration. Overall, the website presents basic digital maturity but requires improvements in security, privacy compliance, and business transparency.

D

Dentis

dentis-implant.com

45

Dentis is a global dental implant manufacturer with over 20 years of experience, focusing on innovative and reliable dental solutions. The website targets dental professionals and clinics, offering a broad range of implant products certified internationally. Technically, the site is built on WordPress with modern plugins like Elementor and Yoast SEO, providing good SEO and mobile optimization. Security posture is solid with HTTPS and GDPR-compliant cookie consent, though some security headers and policies are missing. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness despite professional content and compliance features. Overall, the site presents a credible business but requires verification of domain registration and improved transparency in contact and security policies.

S

SELM

spolecnost-esteticke-mediciny.cz

45

The website represents SELM, a professional Czech medical society focused on aesthetic and laser medicine. It serves both medical professionals and patients by providing educational resources, membership information, and expert advice. The site is well-structured and content-rich, targeting a specialized healthcare audience with a clear business model centered on professional development and information dissemination. Technically, the website is built on WordPress using Oxygen Builder and WP Grid Builder plugins, incorporating modern web technologies such as jQuery and Google Fonts. The site is mobile-optimized and performs moderately well, with good SEO practices evident in meta tags and structured data. However, there is room for improvement in accessibility and performance optimization. From a security perspective, the site uses HTTPS, which is a strong positive. However, the absence of security headers and privacy/cookie policies indicates gaps in security best practices and privacy compliance. The lack of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which should be addressed to enhance trust. Overall, the website is professional and trustworthy in content and design but would benefit from enhanced security measures, privacy compliance, and domain registration transparency to improve its risk profile and user trust.

The website recenzeahodnoceni.cz is a newly registered domain (January 2024) hosted with WEDOS registrar and name servers. The site currently contains no content, metadata, or visible business information, indicating it is either a placeholder or under construction. There are no privacy, cookie, or terms of service policies present, nor any contact details or forms. Technically, the site lacks any detectable technologies, scripts, or security headers, and no HTTPS information is available from the provided data. The absence of content and security features results in a very low security posture and poor digital maturity. Overall, the site is not currently functional or trustworthy for users or business partners.

S

SALANSKY & CO., s.r.o.

salansky.cz

48

Salansky & Co., s.r.o. operates a professionally designed website showcasing their expertise in artistic glass design, bespoke lighting, and exclusive tableware collections. The company targets design enthusiasts and clients seeking unique, high-end glass creations. Their market position is niche and luxury-focused, with a small company size based in the Czech Republic. The website employs modern frontend technologies including Bootstrap, Vue.js, and Fancyapps UI, and integrates Google Analytics and Google Ads for marketing and tracking. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is functional, visually appealing, and moderately secure, but could improve compliance and security practices.

E

eSports.cz s.r.o.

hc-slavia.cz

45

HC Slavia Praha is a well-established Czech ice hockey club with a strong local presence and active fan engagement. The website serves as a comprehensive portal for news, match schedules, ticket sales, youth programs, and partner information. The site is professionally designed with good navigation and mobile optimization, targeting hockey fans and the local community. Technically, the site uses a custom CMS with common libraries like jQuery and Bootstrap, hosted likely by REG-ZONER. Security posture is adequate with HTTPS and cookie consent mechanisms, though some improvements are recommended such as updating libraries and publishing explicit security policies. Overall, the site is trustworthy and functional but lacks some formal privacy and terms documentation.

B

BPR - Bohemia Public Relation s.r.o.

sportmarketingservice.cz

47

SPORT Marketing Service is a Czech sports marketing agency specializing in representing prominent Czech athletes and sports clubs. The company focuses on enhancing the brand value, media presence, and business partnerships of athletes across various sports including football, hockey, motosurfing, and drifting. Their services include marketing strategy, PR, social media management, event organization, and concierge services such as legal and travel assistance. The agency is closely linked with BPR - Bohemia Public Relation s.r.o., which manages their marketing and communication activities. Technically, the website employs modern web technologies including Bootstrap and jQuery, and integrates Google Analytics and Google Tag Manager for tracking. The site is mobile-optimized with good navigation and professional design. Hosting and domain registration are managed by Wedos, a reputable Czech provider. However, the site lacks explicit privacy and cookie policies and does not implement visible security headers, indicating room for improvement in security and compliance. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent with the business profile, showing a domain age appropriate for the company's founding date. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy compliance and security best practices. Strategically, the company should prioritize implementing comprehensive privacy and cookie policies, security headers, and incident response contacts to improve trust and compliance. Enhancing transparency around data collection and user consent will also align the site better with GDPR requirements.

MAPIS is a small retail business based in Prague, Czech Republic, specializing in outdoor and mountain equipment sales and soon equipment rental services. The website primarily serves as an informational portal announcing a temporary store closure for renovation and upcoming service expansions. The business targets outdoor enthusiasts and alpine club members, positioning itself as a niche local retailer. Technically, the website is simple, using Bootstrap for styling but lacking advanced SEO, accessibility, and security features. There are no privacy or cookie policies, no contact emails or phone numbers, and no forms for user interaction. Security posture is minimal with no detected security headers or incident response information. The domain is well-established since 2006, registered with a Czech registrar, indicating legitimacy. Overall, the website is functional but basic, with room for significant improvements in privacy, security, and user engagement.

A

ALPY, spol. s r.o.

festivalalpinismu.cz

48

The website festivalalpinismu.cz represents the International Festival of Alpinism held in Prague, organized by ALPY, spol. s r.o. The festival is a well-established event with a history dating back to 2009, featuring top climbers, safety symposiums, and mountain film screenings. The site targets outdoor enthusiasts, climbers, and professionals interested in mountain safety. Technically, the site is built on Drupal 8 with Bootstrap and jQuery, offering a responsive and user-friendly experience. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though security headers are missing and privacy compliance is lacking. The site integrates tracking tools like Google Tag Manager and Facebook Pixel but does not provide cookie consent mechanisms or privacy policies, indicating compliance gaps. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

A

ALPY spol. s.r.o.

alpenverein.cz

49

Alpenverein.cz represents the Czech section of the Austrian Alpine Club (ÖAV), operated by ALPY spol. s.r.o., a small-sized company with a long-standing presence since 2001. The organization focuses on serving mountain and outdoor enthusiasts by offering memberships, insurance products, courses, publications, and organized trips. The website is well-structured, professionally designed, and targets a general audience interested in alpine activities. Technically, the site runs on Drupal 8 with Bootstrap and integrates Google Analytics with IP anonymization, reflecting moderate digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formalized privacy and incident response policies. Overall, the site is trustworthy and functional but could improve compliance and security transparency.

The website itapply.eu currently presents a security challenge page that blocks direct access to its content, indicating the presence of a Web Application Firewall (WAF) or similar security mechanism, powered by BitNinja.IO. The visible content is minimal, showing a redirect countdown and a browser integrity check script. The site uses outdated CMS technologies such as Joomla 1.5 and WordPress 2.5, which are known to have security vulnerabilities and are no longer supported. No privacy, cookie, or terms of service policies are present, and no contact or business information is available on the page. This limits the ability to assess the business model or market positioning. The WHOIS data shows the domain is registered with SIA Area IT, a legitimate registrar, but no further registrant details or domain age information is provided.

P

PubExchange

pubexchange.com

48

PubExchange operates as a niche media technology platform facilitating traffic exchange partnerships among publishers. The platform enables publishers to promote each other's content via widgets, social media, and direct links, with a focus on click-for-click traffic reciprocity. The website presents a professional and consistent brand image, supported by partnerships with known media brands, and offers real-time analytics and sponsored post services. Technically, the site uses a modern JavaScript stack including jQuery, BigPicture.js, Google Tag Manager, and monitoring tools like Cronitor, hosted likely behind Cloudflare. Security posture is solid with HTTPS, CSRF protections, and no visible vulnerabilities, though some security headers and policies could be improved. Privacy compliance is partial, with a clear privacy policy but lacking cookie consent mechanisms. WHOIS data is missing, which raises concerns about domain legitimacy despite the professional site presence. Overall, the site is functional, secure, and business credible but would benefit from enhanced transparency and compliance documentation.

S

SCRAEGG GmbH

scraegg.com

43

SCRAEGG GmbH operates an e-commerce platform specializing in food products such as perfect scrambled eggs, porridge, and soups, targeting both private consumers and gastronomy businesses primarily in Germany. The website is professionally designed with clear navigation, multilingual support (German and English), and active social media engagement, positioning the company as a niche player in the retail food sector. The business model focuses on direct online sales complemented by recipe content and newsletter marketing to engage customers. Technically, the website leverages modern web technologies including Google Analytics, Google Tag Manager, and MailChimp for marketing automation. The underlying CMS appears to be Shopware, a popular e-commerce platform. The site is mobile-optimized and implements cookie consent mechanisms compliant with GDPR, reflecting a mature digital infrastructure. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and manages cookies responsibly with user consent. However, there is room for improvement by enabling DNSSEC, adding security headers, and publishing formal security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, SCRAEGG presents a trustworthy and professional online presence with solid business credibility and compliance posture. Strategic enhancements in security transparency and technical hardening would further strengthen its risk profile and customer trust.

Karlínská HolKa is a small hospitality business operating a restaurant located in Prague's Karlín district. The website offers information about their lunch, dinner, and weekend breakfast services, along with beverage and wine menus, and provides online reservation capabilities. The business targets local customers and visitors seeking dining experiences in the area. Technically, the website is built on WordPress using the Elementor page builder and Astra theme, incorporating modern web technologies and analytics tools such as Google Analytics and Tag Manager. The site is mobile-optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and trust. WHOIS data is unavailable, limiting domain legitimacy verification, but the active social media presence and business content support its legitimacy. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security hardening.

N

Neapolská — Z Neapole do Hradiště

neapolska.it

40

Neapolská — Z Neapole do Hradiště is a small hospitality business operating a restaurant specializing in authentic Neapolitan pizza, fresh pasta, and desserts located in Uherské Hradiště, Czech Republic. The website serves as a digital storefront providing menu information, online ordering via a partner domain, and table reservation capabilities. The business targets local customers and visitors seeking genuine Italian cuisine experiences. Technically, the website is built on WordPress using the Elementor page builder and Astra theme, incorporating modern web technologies and basic SEO optimizations. Google Analytics is present but not fully configured, and the site is mobile optimized with good user experience and navigation clarity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

M

Mazel

mazel-vinohrady.cz

42

Mazel is a small hospitality business operating a restaurant located in the Vinohrady district of Prague, Czech Republic. The restaurant offers a unique botanical dining experience with a focus on both meat and vegetarian cuisine, targeting local food lovers and visitors. The website is professionally designed using WordPress with Elementor and Astra theme, featuring multimedia content and online reservation capabilities. The technical infrastructure is modern and mobile-optimized, with moderate performance and good SEO practices. Security posture is adequate with HTTPS enabled, but lacks some security headers and explicit privacy policies. The absence of WHOIS data limits full trust verification, but the active social media presence and business content support legitimacy. Strategic improvements include adding privacy and cookie policies, security headers, and explicit contact information for incident response.

The website im-apps.net appears to serve as a technical endpoint hosting privacy sandbox attestation files within an Amazon S3 bucket environment, utilizing Akamai DNS services. The domain is registered since 2013 with Amazon Registrar, Inc., indicating a stable registration history. However, the website content is minimal, consisting primarily of XML data listing files related to privacy sandbox attestations, with no visible business or marketing content, contact information, or user-facing pages. This suggests the site functions more as a data repository or backend service rather than a traditional commercial website. From a technical perspective, the site uses Amazon Registrar and Akamai name servers but lacks DNSSEC and visible HTTPS or security headers in the provided data, indicating potential security hardening opportunities. No scripts, analytics, or marketing tools were detected, and no privacy or cookie policies are present, which limits compliance with GDPR and other privacy regulations. Security posture is weak due to the absence of HTTPS confirmation, security headers, and incident response contacts. The domain status locks provide some protection against unauthorized changes, but the lack of visible security best practices and policies reduces trustworthiness. No adult or questionable content was detected, and the site is safe for general audiences. Overall, the website is low in content quality and business credibility, with minimal technical implementation and privacy compliance. Strategic improvements should focus on enhancing security configurations, publishing privacy and cookie policies, and providing clear business and contact information to improve trust and compliance.

U

UpDown Media, s.r.o

koupani.cz

46

Koupani.cz is a Czech media portal specializing in swimming and bathing information, including pools, natural bathing spots, aquaparks, and related news. The site is operated by UpDown Media, s.r.o, a small media company based in Prague, with a domain registered since 2000, indicating a well-established presence. The website offers articles, location guides, and maps targeting general audiences interested in swimming and outdoor water activities. Technically, the site runs on WordPress CMS with common libraries such as jQuery, Google Analytics, and Facebook SDK, providing a modern and responsive user experience. Security posture is solid with HTTPS enforced, though lacking advanced security headers and a formal vulnerability disclosure mechanism. Privacy compliance is basic with a privacy policy and terms of service present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-positioned within its niche.

UpDown Media, s.r.o. is a small Czech media company operating since 2009, specializing in outdoor and regional news internet portals such as Horydoly.cz, Desítka.cz, Koupání.cz, and NašeBrdy.cz. The company provides editorial content, advertising services, and custom content production for print and broadcast media. Their target audience includes outdoor enthusiasts and regional readers, with a business model focused on content publishing and advertising revenue. Technically, the website uses basic HTML, CSS, and JavaScript with an embedded RSS feed widget but lacks modern CMS or advanced frameworks. The site is not mobile optimized and shows basic SEO and accessibility features. Security posture is weak due to lack of HTTPS enforcement, missing security headers, and absence of privacy or cookie policies, which also impacts GDPR compliance. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional but requires significant improvements in security and privacy compliance to meet modern standards.

A

Alpy, spol. s. r.o.

alpy.cz

48

Alpy, spol. s. r.o. is a Czech travel agency specializing in organizing tours and accommodation primarily in the Alps and Nepal regions, with over 30 years of experience. The company also represents the Austrian Alpenverein in the Czech Republic and publishes related magazines, positioning itself as a trusted and established player in the hospitality and travel sector. Their services cater to a broad audience including seniors, small groups, and large collectives, offering customized travel experiences with or without arranged transportation. Technically, the website is built on Drupal 9 with Bootstrap 3.4.1 for responsive design, integrating Google Analytics and Google Tag Manager for user tracking and marketing insights. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The domain is well aged and consistent with the business history, enhancing credibility. From a security perspective, the site uses HTTPS with good SSL configuration and anonymizes IP addresses in analytics. However, it lacks visible security headers and does not implement a cookie consent mechanism, which are areas for improvement. No incident response or vulnerability disclosure policies are published, indicating a moderate security maturity level. Overall, the website is professional, trustworthy, and content-rich, serving its target market effectively. Strategic improvements in privacy compliance and security hardening would enhance its posture and user trust.

The website kieroads.cz presents a minimal online presence with only a single line of text on its homepage and no additional content or metadata. The domain was registered in early 2020, indicating a relatively recent establishment, but the lack of substantive content suggests the site may be under development or inactive. No contact information, privacy policies, or security features are present, limiting the ability to assess the business comprehensively. Technically, the site lacks modern web standards such as HTTPS and security headers, which are critical for user trust and data protection. The absence of forms, scripts, or analytics further indicates a very basic or placeholder site. Overall, the security posture is weak due to missing HTTPS and security best practices, and the site does not demonstrate compliance with privacy regulations such as GDPR.

S

Stopka

stopka.cz

47

Stopka is a well-established interior design and realization company based in the Czech Republic, with over 35 years of experience in premium residential and commercial projects. The company offers tailored interior design services, showroom sales, and partnerships with renowned global brands. Their website reflects a high level of professionalism, showcasing their projects, product categories, and brand collaborations. Technically, the site uses modern web technologies including lazy loading, video content, and cookie consent mechanisms, hosted by Active24. Security posture is good with HTTPS and consent mechanisms, though improvements can be made by adding security headers and explicit privacy policies. Overall, the website is trustworthy and well-positioned in its market niche.