High-risk security reports

W

Web Design Company & Digital Marketing Agency, Bali

celax.de

42

Indonesia Digital Marketing & BiruDaun Web Studio is a small, established digital marketing and web design agency based in Bali, Indonesia, with over 25 years of experience. They specialize in ecommerce sales, performance marketing, SEO, web design, and analytics, targeting businesses seeking to improve their online presence and direct sales. The website is professionally designed using WordPress with Elementor and Astra theme, featuring good mobile optimization and SEO practices. Security posture is solid with HTTPS and privacy-focused analytics (Matomo), but lacks formal privacy and cookie policies, and no visible security or incident response policies. WHOIS data for the domain is missing, which raises some concerns about domain registration legitimacy. Overall, the site is trustworthy and professional but would benefit from improved compliance documentation and security headers.

K

KAFKA TRANSPORT a.s.

kafkatransport.cz

49

KAFKA TRANSPORT a.s. is a Czech transportation company with over three decades of experience, providing a broad range of logistics and transport services including international and domestic freight, parcel delivery, storage, vehicle repair, washing, and rental services. The company targets businesses and individuals requiring reliable transport solutions and maintains an active presence on social media platforms to engage with its audience. The website is professionally designed, mobile-optimized, and includes essential business information and GDPR-compliant privacy and cookie policies. Technically, the website leverages modern web technologies such as Google Analytics, Bootstrap, FontAwesome, and Google Fonts, and is built on the Pagebuilder CMS platform. It employs HTTPS for secure communication and includes a cookie consent mechanism, reflecting a moderate level of digital maturity. However, some security best practices like explicit security headers are missing, and no incident response or security policy information is publicly available. From a security perspective, the site shows good baseline protections but lacks advanced security disclosures and headers. The absence of WHOIS data for the domain is a notable concern, as it limits the ability to verify domain legitimacy and registration details. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, the site presents a moderate security posture with room for improvement in transparency and technical security hardening. The overall risk assessment is moderate; the business appears legitimate and professional, but the missing WHOIS data and lack of explicit security policies reduce trust. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving domain registration transparency to strengthen trust and compliance.

M

Media One s.r.o.

mediaone.cz

45

Media One s.r.o. is a Czech media agency specializing in producing television shows, advertising formats, and event organization, with a strong focus on the Czech TV market. The company collaborates with major broadcasters such as TV Prima, Česká televize, and Canal+ Sport, offering clients integrated media campaigns and branded content solutions. Their website showcases a professional portfolio of current and past projects, client logos, and a detailed team section, reflecting a mature business presence established since 2011. Technically, the website employs modern frontend technologies including jQuery, Bootstrap, Owl Carousel, and Flickity, ensuring a responsive and interactive user experience. While the site is well-structured and mobile-optimized, some security best practices such as implementing security headers and privacy policies are missing. The contact form collects user data via POST but lacks visible anti-CSRF protections. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, the absence of privacy and cookie policies indicates compliance gaps with GDPR requirements. No incident response or security policy information is published, which could be improved to enhance trust. The domain registration data aligns well with the business claims, showing a consistent and legitimate presence in the Czech media sector. Overall, Media One presents a credible and professional media agency with solid business credibility and a good technical foundation. Addressing privacy compliance and enhancing security headers would improve their security posture and regulatory adherence.

C

Calta Elektro

caltaelektro.cz

42

Calta Elektro is a well-established Czech retailer specializing in premium electrical appliances from brands such as Miele, Jura, Liebherr, and Bora. Founded in 1990, the company operates physical stores and showrooms in Milevsko and Písek, alongside an e-commerce platform. Their business model focuses on retail sales supported by kitchen studio and lighting services, targeting consumers seeking high-quality branded products. The website reflects a professional and consistent brand image with clear navigation and relevant content for their audience. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Analytics, and Google reCAPTCHA v3, hosted likely by REG-ZONER. The site is mobile-optimized and uses secure HTTPS connections. However, some security best practices such as security headers and published privacy/cookie policies are missing, indicating room for improvement in compliance and security posture. From a security perspective, the site shows good practices like HTTPS and CAPTCHA usage but lacks explicit security headers and incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data is consistent with the business claims, showing a long-standing domain registration that supports legitimacy. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security hardening to meet modern standards and regulations.

O

ON BOARD

on-board.cz

48

ON BOARD is a Czech Republic based small business founded in 2019 that specializes in helping companies present their services, products, and themselves more attractively, clearly, and profitably. Their key offerings include visual work, web development, marketing 360, sales strategies, organizational efficiency, LinkedIn consulting, and ESG services. The website is built on WordPress using the Astra theme and integrates modern marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The technical infrastructure is solid with HTTPS enforced and Cloudflare DNS, though some security headers could be improved. Privacy compliance is basic with a cookie consent mechanism but lacks explicit privacy policy and terms of service pages. Overall, the website is professional and trustworthy with moderate security posture and good business credibility.

M

MyCoiner s.r.o.

mycoiner.cz

43

MyCoiner s.r.o. operates a modern Czech cryptocurrency exchange and wallet platform offering crypto-to-crypto and crypto-to-FIAT transactions with transparent fees and user-friendly services. The company targets Czech crypto users and investors, positioning itself as a trustworthy and secure local exchange. The website is well-designed, mobile-optimized, and uses modern JavaScript frameworks and analytics tools to deliver a good user experience. Security is emphasized with 2FA, SMS confirmation, and AI-based fraud prevention, although some security best practices like explicit security headers and incident response policies are missing. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the platform demonstrates a solid technical and business foundation with room for improvement in privacy compliance and security transparency.

A

adfocus GmbH

getback.app

35

Getback, operated by adfocus GmbH, is a Swiss-based technology company specializing in conversion optimization and web-push notification solutions tailored for e-commerce businesses. Their platform leverages onsite behavioral analytics to increase conversion rates through targeted campaigns, lead generation, upselling, and gamification. The company serves a range of clients including prominent retail brands, positioning itself as a trusted partner in performance marketing. Technically, the website is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager for tracking. The site is well-structured, mobile-optimized, and provides multilingual support. Security-wise, HTTPS is enforced and forms include anti-spam measures, but the absence of explicit security headers and cookie consent mechanisms indicates room for improvement. Overall, the website reflects a professional and credible business with a solid digital presence.

K

Katholisches Medienzentrum

kath.ch

49

kath.ch is a well-established Catholic news portal serving the German-speaking Swiss audience with current and relevant content on religion, politics, and society. It operates as a non-profit media service under the Catholic Media Center on behalf of the Roman Catholic Church in Switzerland. The website offers diverse content including news articles, podcasts, videos, job listings, and event information, positioning itself as a leading Catholic media outlet in Switzerland. The site maintains consistent branding and provides clear contact information, reinforcing its trustworthiness and professional standing. Technically, the website is built on WordPress 6.7.1 with a modern tech stack including Bootstrap, jQuery, and various plugins for enhanced user experience. It integrates multiple analytics and tracking tools such as Matomo, Google Tag Manager, Facebook Pixel, and Mouseflow, enabling moderate user tracking. The site is mobile-optimized with good navigation clarity and SEO practices, although accessibility features are basic. From a security perspective, kath.ch enforces HTTPS with strong SSL configuration and implements several security headers. It uses reCAPTCHA v3 to protect forms and avoids exposing sensitive data. However, it lacks a cookie consent mechanism and publicly available security or incident response policies, which are areas for improvement. No vulnerabilities or suspicious activities were detected. Overall, kath.ch demonstrates a strong business credibility and security posture suitable for its non-profit media role. Strategic recommendations include implementing explicit cookie consent, publishing security policies, and enhancing accessibility to further improve compliance and user trust.

C

Cevi Region Basel

cevibasel.ch

49

Cevi Region Basel is a well-established Christian non-profit organization focused on children, youth, and adult community work in the Basel region of Switzerland. Founded in 1889, it offers a wide range of programs including youth camps, sports activities, educational courses, and community events. The organization maintains a strong regional presence with a professional website that effectively communicates its mission and services. The site is supported by certifications such as ZEWO, enhancing its trustworthiness. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Slider Revolution, and Google Analytics. It demonstrates good digital maturity with responsive design, SEO optimization, and integration of security features like HTTPS and Google reCAPTCHA. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and provides cookie consent mechanisms aligned with GDPR. However, it lacks explicit security policies and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture for a non-profit organization. Overall, Cevi Region Basel presents a low-risk profile with strong business credibility and compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility to further strengthen its digital presence and trust.

F

Founders4Founders is under construction

founders4founders.cz

48

Founders4Founders.cz is a website currently under construction, targeting investors and startups in the Czech Republic. The site appears to be a small-scale project or startup founded in 2021, with minimal public-facing content and no active business services visible. The website uses WordPress with an under construction plugin and basic frontend technologies such as Bootstrap and Font Awesome. Hosting is likely provided by Forpsi, a Czech hosting provider, as inferred from the nameservers. The technical infrastructure is basic, with no advanced frameworks or analytics detected. Security posture is weak, with no visible HTTPS confirmation, security headers, or privacy policies. There is no contact information or forms, limiting user engagement and trust. Overall, the site is not yet operational and lacks critical compliance and security features.

D

Digitální a Inovační Hub Ostrava

edihostrava.cz

49

EDIH Ostrava is a European Digital Innovation Hub focused on supporting the adoption and utilization of digital technologies primarily by small and medium-sized enterprises (SMEs) and public organizations in the Czech Republic. The organization offers services such as high-tech technology testing, improving digital readiness and skills, and assistance in finding investments and partners. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, jQuery, and Google reCAPTCHA for security. SEO and privacy compliance are well implemented, with clear cookie consent mechanisms and GDPR adherence. However, explicit contact information and security policies are not prominently published, which could be improved to enhance trust and transparency.

M

Moravskoslezské inovační centrum Ostrava, a.s.

innoverse.cz

49

InnoVerse is a Czech-based conference platform organized by Moravskoslezské inovační centrum Ostrava, a.s., focusing on innovation, business, and technology sectors including startups, mobility, health, and digitalization. The platform serves as a nexus for business professionals, researchers, and innovators to collaborate and explore emerging trends. The website is professionally designed, mobile-optimized, and provides comprehensive event information, speaker profiles, and partner details. Technically, it leverages WordPress CMS with modern JavaScript frameworks and integrates analytics and marketing tools such as Google Tag Manager and LinkedIn Insight. Security posture is strong with HTTPS enforced and GDPR compliance evident through cookie consent mechanisms and a detailed privacy policy. However, explicit security policies and incident response contacts are not present. Overall, the site demonstrates a mature digital presence with good privacy and security practices, supporting its role as a reputable event organizer in the Czech innovation ecosystem.

M

Moravskoslezské inovační centrum (MSIC)

rismsk.cz

45

The website rismsk.cz represents the Regional Innovation Strategy for the Moravian-Silesian Region in the Czech Republic. It serves as a platform to connect universities, companies, and innovators to foster a technology-driven ecosystem supporting sustainable regional growth. The site is maintained using WordPress with modern plugins and themes, ensuring a good user experience and mobile optimization. The presence of GDPR-compliant cookie consent mechanisms and privacy policies indicates a strong commitment to privacy compliance. Security posture is solid with HTTPS enforced, though there is room for improvement in implementing security headers and publishing explicit security policies. Overall, the website is professional, trustworthy, and well-aligned with its regional development mission.

W

Westmetall GmbH & Co. KG

westmetall.com

47

Westmetall GmbH & Co. KG operates as a specialized supplier and trader of non-ferrous metals, including primary metals, wires, cables, semi-finished products, and scrap metals. The company targets businesses in the metal trading and recycling sectors, offering direct access to international metal markets with a focus on price advantages and risk reduction. The website presents a professional and consistent brand image with clear navigation and relevant business content. Technically, the website is built using depage-cms v2.6.1 with standard HTML, CSS, and JavaScript. The site shows moderate performance and basic mobile optimization. SEO practices are adequately implemented with proper meta tags and keywords. However, no advanced analytics or tracking technologies are detected, indicating a minimal user tracking approach. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. The WHOIS data is missing, which raises concerns about domain legitimacy and trustworthiness. No contact emails or phone numbers are explicitly provided on the homepage, limiting direct communication channels. Overall, the website is functional and business-appropriate but would benefit from enhanced security measures, improved privacy compliance, and clearer contact information to strengthen trust and credibility.

The website vkx.cz is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content or metadata. The domain is registered since June 2022 with a Czech registrar and uses Czech name servers, indicating a legitimate registration but a very recent domain age. Due to the lack of accessible content, no business description, contact information, or security policies are available for analysis. The technical infrastructure appears minimal with no detectable scripts, frameworks, or CMS. Security posture cannot be assessed properly due to missing data and lack of HTTPS information. Overall, the site appears either under development, restricted, or misconfigured, resulting in a low trust and credibility score.

A

Asental Group

asental.cz

44

Asental Group operates as a medium-sized real estate company specializing in commercial and industrial property development, sales, and leasing primarily in the Czech Republic. Their website showcases multiple real estate projects including office complexes and industrial parks, targeting investors and businesses seeking property solutions in the region. The company maintains a professional online presence with clear navigation, project details, and compliance with privacy regulations. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and Google Maps API, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS usage and cookie consent mechanisms, though explicit security headers and incident response information are absent. Overall, the site is trustworthy and well-maintained, with room for security enhancements.

L

Lázně Darkov

lazne-darkov.cz

48

Lázně Darkov is a spa and wellness service provider based in the Czech Republic, offering therapeutic and wellness treatments. The website presents basic information about the business but lacks detailed business and contact information. The technical infrastructure includes usage of Google Tag Manager and Font Awesome for UI and analytics, indicating some level of digital maturity. However, the absence of WHOIS data and security policies reduces transparency and trust. Security posture is weak with no detected security headers or privacy compliance mechanisms. Overall, the website is accessible and safe but requires improvements in security, privacy, and business transparency to enhance trust and compliance.

R

RISJK

risjk.cz

47

RISJK is a regional innovation strategy platform focused on supporting the development of innovation in the South Bohemian Region of the Czech Republic. It serves as a foundational concept for regional economic competitiveness and value creation through innovation adoption. The website provides access to strategic documents, information about innovation ecosystems, and support programs such as Smart Accelerator initiatives. The target audience includes regional stakeholders, research organizations, startups, and government entities. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and Google Tag Manager for analytics. It is mobile-optimized and presents a professional design with clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though it lacks advanced security headers and published security policies. WHOIS data is unavailable, which reduces domain trust verification, but the website content and partner affiliations strongly indicate legitimacy. Overall, the site is a credible regional government-related resource with moderate technical maturity and good content quality.

J

Jihočeský vědeckotechnický park, a.s.

jihoczech.cz

44

Jihočzech is a regional entrepreneurial competition organized by Jihočeský vědeckotechnický park, a.s., aimed at supporting innovative business ideas and startups in the South Bohemian region of the Czech Republic. The website provides detailed information about the competition phases, prizes, and useful resources for new entrepreneurs. It targets aspiring entrepreneurs seeking professional coaching, networking, and potential investment opportunities. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing, with a responsive design optimized for mobile devices. Security posture is adequate with HTTPS enforced and cookie consent mechanisms implemented, though explicit security headers are not detected and no formal security policy or incident response information is published. The absence of WHOIS data for the domain reduces transparency and trustworthiness from a domain registration perspective. Overall, the site is professional, content-rich, and user-friendly, serving its business purpose effectively.

Ś

Śląska Organizacja Turystyczna

silesia-sot.pl

39

The website www.silesia-sot.pl represents the Śląska Organizacja Turystyczna, a regional tourism organization focused on promoting the Silesia region in Poland. The site provides information likely aimed at tourists and visitors interested in regional attractions and events. The business model appears to be non-profit or governmental, focusing on tourism promotion rather than commercial sales. The website uses WordPress with the Divi theme, indicating a standard CMS-based infrastructure suitable for small to medium organizations. Technical maturity is moderate with basic mobile optimization and SEO, but lacks advanced security headers and privacy compliance features. Security posture is limited due to missing security headers and lack of visible incident response or security policies. WHOIS data is unavailable, likely due to privacy protection, which reduces trust signals but is common for such organizations. Overall, the site is safe with no adult or questionable content detected, but improvements in privacy, security, and contact transparency are recommended.

W

Web Design Company & Digital Marketing Agency, Bali

indonesiadigitalmarketing.id

42

Indonesia Digital Marketing & BiruDaun Web Studio is a small, established digital marketing and web design agency based in Bali, Indonesia, with over 25 years of experience. They specialize in ecommerce sales, performance marketing, SEO, web design, and analytics, targeting businesses seeking to improve their online presence and direct bookings. The website is professionally designed using WordPress and Elementor, with good mobile optimization and SEO practices. However, the absence of privacy and cookie policies and missing WHOIS domain registration data raise compliance and legitimacy concerns. The security posture is generally good with HTTPS and no exposed sensitive data, but security headers and incident response information are lacking.

B

BiruDaun Web Studio

indonesia-digital-marketing.com

42

BiruDaun Web Studio, operating under the brand Indonesia Digital Marketing, is a Bali-based digital marketing and web design agency with a strong focus on ecommerce sales, performance marketing, and SEO services. Established since 1994, the company positions itself as a leader in website performance and digital marketing solutions in Indonesia, targeting SMEs, brands, and hospitality sectors. Their service portfolio includes web design, apps, analytics, booking engines, and loyalty program engines, supported by a professional and content-rich website. Technically, the site is built on WordPress with Elementor and Astra theme, leveraging Matomo analytics for privacy-conscious tracking. Security posture is good with HTTPS enabled, though additional security headers and policies could enhance protection. The absence of privacy and cookie policies and missing WHOIS data are notable gaps that impact trust and compliance. Overall, the website is professional, well-structured, and safe for general audiences, but the domain registration inconsistency warrants further verification.

The website jungschar-gelterkinden.ch represents a small, community-focused non-profit youth organization named Cevi Gelterkinden, affiliated with the local church and regional Cevi Basel association. It offers regular youth activities for children from kindergarten through 7th grade, including games, crafts, and camps. The site content is well-structured and relevant to its target audience of children and their parents, with consistent branding and clear program information. Technically, the site uses basic HTML, CSS, and JavaScript without advanced frameworks or CMS, resulting in moderate performance and basic mobile optimization. Security posture is average, with no HTTPS or security headers explicitly detected in the provided data, and no forms or sensitive data collection present. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the domain registration aligns well with the website's community focus, indicating legitimacy and trustworthiness.

Q

Quickpage

quickpage.ch

44

Quickpage is a Swiss-based software provider offering subscription-based website solutions tailored for church communities and parishes. The platform enables event management, contact person administration, and content publishing with a focus on responsive design and ease of use for church staff. It holds a solid market position with over 100 church clients and partnerships with established church communication organizations. Technically, the website is built on WordPress with modern plugins and frameworks, ensuring a good user experience and mobile optimization. Security measures include HTTPS and Google reCAPTCHA integration, though the absence of published privacy and cookie policies and security headers indicates room for improvement in compliance and security posture. Overall, the website is professional, trustworthy, and well-aligned with its target audience, but should enhance privacy compliance and security best practices to strengthen its risk profile.

B

Bundesverband Naturkost Naturwaren e.V.

n-bnn.de

48

BNN e.V. is a German non-profit association dedicated to promoting ecological and sustainable practices in the organic food and natural products sector. The website serves as an information hub for members and the public, offering news, policy positions, quality assurance services, and market data. The organization maintains a strong presence in the organic food industry with active engagement through social media and regular updates. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be improved. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

The website europ.pl is currently inaccessible, returning a 403 Forbidden error page with no accessible content. This prevents any meaningful analysis of the business, services, or technical infrastructure. The domain is registered since 2002 with AZ.pl Sp. z o.o., a reputable Polish registrar, indicating a legitimate and long-standing domain ownership. However, the lack of accessible content and absence of security or privacy policies significantly limit the ability to assess the website's digital maturity or security posture. The site does not present any metadata, scripts, or business information, and no contact details or compliance documentation are available. Overall, the website appears to be either restricted or misconfigured, resulting in a poor user experience and low trustworthiness.

T

TEKACABLE s.r.o.

tekacable.com

45

TEKACABLE s.r.o., formerly known as TEKABEN, is a Czech manufacturing company specializing in the production of electrical wires, cables, and cable assemblies. The company serves primarily manufacturing firms and wholesalers, offering customized cable solutions and project-based production. It holds ISO 9001 certification and participates in EU co-financed innovation and sustainability projects, reflecting a commitment to quality and modernization. The website is professionally designed using WordPress, with basic mobile optimization and standard SEO practices. Social media presence on Facebook and LinkedIn supports its market engagement. Security posture is adequate with HTTPS and cookie consent mechanisms, though additional security headers and vulnerability disclosure policies could enhance protection. Overall, the domain registration and business information are consistent and legitimate, supporting a medium-sized manufacturing entity with a stable market position.

K

Kabelovna Děčín Podmokly, s.r.o.

kabelovna.cz

49

Kabelovna Děčín Podmokly, s.r.o. is a well-established Czech manufacturer specializing in optical and metallic cables, with a history dating back to 1909. The company is part of the Wilms Group and positions itself as a technologically advanced European cable producer offering customized cable solutions. Their website reflects a professional business presence with detailed product categories, certifications, and active social media engagement. Technically, the website is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile responsiveness. The presence of structured data and cookie consent mechanisms indicates a mature digital infrastructure. Security posture is solid with HTTPS and privacy compliance, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data is a notable gap, impacting domain trustworthiness. However, the overall site content, certifications, and contact information support the legitimacy of the business. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure and incident response details, and verifying domain registration information to improve trust and compliance.

O

OP Cable, s. r. o.

opcable.cz

41

OP Cable, s. r. o. is a Czech manufacturing company specializing in the production of metallic cables primarily for automation, telecommunication systems, and security devices. Founded in 2014, the company has established itself as a significant partner across Europe, serving B2B clients in industrial and telecommunications sectors. The website reflects a professional and consistent brand presence with clear business information and contact details. Technically, the site is built on WordPress with modern frontend technologies such as jQuery, Slick Carousel, and Tailwind CSS, hosted by Active24, a reputable Czech hosting provider. The site is mobile-optimized and performs moderately well with good SEO practices.

K

Kablo Vrchlabí s.r.o.

kablovrchlabi.cz

46

Kablo Vrchlabí s.r.o. is a traditional Czech manufacturer specializing in cables for the automotive industry, flexible cables, and special cables tailored to customer specifications. The company offers a diverse product range including automotive cables with high temperature resistance, harmonized flexible cables, and special cables compliant with American UL standards. Their market position is that of an established medium-sized manufacturing business serving industrial and automotive sectors primarily in the Czech Republic. The website is professionally designed, multilingual, and provides comprehensive business and contact information, supporting a B2B business model focused on manufacturing and sales. From a technical perspective, the website is built on WordPress and employs modern web standards including HTTPS, Google Fonts, and responsive design. The site performs moderately well with good mobile optimization and basic accessibility features. SEO is adequately addressed with proper meta tags and structured data. However, there is room for improvement in security headers and cookie consent mechanisms to enhance compliance and security posture. Security-wise, the site benefits from HTTPS encryption and does not expose sensitive data or vulnerable libraries. Nonetheless, the absence of explicit security headers and incident response information suggests a moderate security maturity level. The lack of WHOIS data is a notable concern, reducing trust in domain legitimacy. No signs of malware, phishing, or other critical vulnerabilities were detected. Overall, the website presents a trustworthy and professional front for Kablo Vrchlabí s.r.o., but improvements in domain registration transparency, security policies, and privacy compliance mechanisms are recommended to strengthen its security posture and regulatory adherence.

A

ABADIA a.s.

balkony-a-lodzie.cz

43

ABADIA a.s. is a Czech-based company specializing in the manufacturing and installation of suspended balconies and lodžies, primarily targeting panel houses. Established in 2012, the company has built a strong market presence in the Czech Republic and Slovakia, with some projects in Germany. Their services include design proposals, static assessments, 3D visualizations, manufacturing, and installation, positioning them as a leading supplier in their niche. The website reflects a professional business with clear contact information and a portfolio of completed projects, supporting their credibility. Technically, the website employs common marketing and analytics tools such as Google Tag Manager, Google Analytics, Facebook SDK, and CookieYes for cookie consent management. The site appears to be custom-built without a known CMS and is hosted via Active24. While the site has moderate performance and basic mobile optimization, some technical improvements are needed, particularly regarding HTTPS enforcement and security headers to enhance security posture. From a security perspective, the site implements a detailed cookie consent mechanism aligned with GDPR principles but lacks visible privacy policies, terms of service, or incident response information. The absence of HTTPS on some resources introduces mixed content risks. No critical vulnerabilities or blocking mechanisms were detected, but security best practices could be improved to protect user data and enhance trust. Overall, the website is functional and professional but would benefit from enhanced security measures, explicit privacy documentation, and technical modernization to improve user trust and compliance.

HANDBALL CLUB MILEVSKO is a local sports organization based in Milevsko, Czech Republic, focused on promoting handball among youth and adult players. The website serves as a community hub for news, events, tournaments, and team information. The club appears to be a small-scale, community-driven entity without commercial business operations. Technically, the website uses legacy JavaScript libraries such as jQuery 1.12.4 and jQuery UI 1.12.1, hosted on the eStránky CMS platform. The site includes Facebook integration and Google Fonts for styling. However, there is no evidence of modern security practices such as HTTPS enforcement or security headers. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. The WHOIS data is unavailable, which reduces domain trustworthiness but may be due to registry policies rather than malicious intent. Overall, the website is functional and informative for its target audience but requires improvements in security, privacy, and contact transparency.

F

FC ZVVZ Milevsko

fcmilevsko.cz

47

FC ZVVZ Milevsko is a local Czech football club with an active online presence focused on providing information about its teams, matches, news, and partners. The website is built on WordPress using the Elementor page builder, hosted by Wedos, and employs HTTPS for secure communication. The site targets football fans and the local community, offering media content and partner information to engage its audience. Technically, the site uses modern web technologies and plugins but lacks some advanced security headers and explicit privacy policies. Security posture is moderate with room for improvement in transparency and incident response readiness. Overall, the site is functional, well-branded, and trustworthy for its intended audience.

H

HC Milevsko 1934

hcmilevsko1934.cz

45

HC Milevsko 1934 is a Czech ice hockey club with a digital presence focused on providing club information, team rosters, match schedules, news, and partner promotion. The website targets local and regional ice hockey fans and community members. The domain was registered in 2021, supporting a relatively recent online presence for a club with historical roots dating back to 1934. The site is well-branded and consistent, with active social media integration and regular content updates. Technically, the site uses common JavaScript libraries such as jQuery, Slick Carousel, and LightGallery, and appears to be hosted by REG-ZONER, a Czech hosting provider. The site is mobile-optimized and has good navigation and content relevance. Security-wise, the site implements a cookie consent mechanism but lacks visible security headers and explicit privacy or security policies. No contact emails or phone numbers are directly visible, which may impact user trust and compliance. Overall, the site is functional and professional but could improve in security and privacy transparency.

D

DRUMEXTRA s.r.o.

mapex.cz

45

Mapex, operated by DRUMEXTRA s.r.o., is a Czech-based company specializing in the manufacturing and retail of drums, drum hardware, and accessories. Established in 2007, the company offers a range of percussion instruments targeting musicians and music stores. The website presents a professional and consistent brand image with clear navigation and relevant content for its niche market. The technical infrastructure includes common web technologies such as jQuery and Google Tag Manager, indicating moderate digital maturity with room for improvement in performance and SEO. Security posture is adequate with HTTPS usage but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic, with a privacy policy implied under terms of use but no cookie consent mechanism detected. Overall, the website is functional and trustworthy but could benefit from enhanced security and privacy features.

D

Drumextra, s.r.o.

anatolian.cz

43

Anatolian is a Czech-based company specializing in the manufacturing and wholesale distribution of high-end cymbals, targeting drummers and music professionals. The website presents a professional and consistent brand image with clear contact information and a focus on quality musical instruments. The company appears to have a history dating back to 2000, although domain registration details could not be verified due to missing WHOIS data. Technically, the website uses modern web technologies including Google Tag Manager and Typekit fonts, with a responsive design and moderate performance. However, there is a lack of advanced security headers and no visible privacy or cookie policies, which indicates room for improvement in compliance and security posture. From a security perspective, the site is accessible without WAF or blocking mechanisms, but the absence of WHOIS data and security policies reduces trustworthiness. No vulnerabilities or exposed sensitive data were detected, but the site would benefit from implementing security best practices such as security headers and GDPR-compliant policies. Overall, the website is functional and professional but has gaps in privacy compliance and domain transparency. Strategic improvements in security and compliance would enhance trust and reduce risk.

ABX Music, operated by FAST ČR, a.s., is a Czech Republic-based retailer specializing in musical instruments such as electric guitars, bass guitars, cymbals, and accessories. The company targets musicians ranging from beginners to advanced players, offering quality products at affordable prices. The website reflects a small retail business with a focus on product presentation and partner collaborations. Technically, the site uses legacy JavaScript libraries like jQuery 1.7.2 and Modernizr, with Google Analytics for visitor tracking. The site lacks modern CMS indicators and advanced frameworks, suggesting a basic technical infrastructure. Security posture is limited, with no visible HTTPS enforcement or security headers in the provided data, and outdated libraries that may pose risks. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. Contact information is limited to phone and physical address, with no email or social media presence detected. WHOIS data is unavailable, reducing domain legitimacy verification and trust. Overall, the site is functional but requires improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

C

CRAFTER Co., LTD.

crafterguitars.com

47

Crafter Guitars is a well-established Korean guitar manufacturer with a history dating back to 1972. The company focuses on handcrafted guitars combining traditional craftsmanship with modern design and technology. Their website reflects a medium-sized manufacturing and retail business targeting musicians and guitar enthusiasts, with a consistent brand presence and active social media engagement. Technically, the website uses modern JavaScript libraries and frameworks such as jQuery, GSAP, and Swiper.js, hosted on Cafe24 infrastructure, with good mobile optimization and SEO practices. Security posture is adequate with enforced HTTPS and no exposed sensitive data, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and safe for general audiences.

V

Vajra & Delibio

delibio.be

45

Vajra & Delibio is a family-owned wholesale distributor specializing in organic (BIO) food products in Belgium, offering a catalog of over 5000 references including fresh and dry goods. The website is professionally designed, leveraging the PrestaShop e-commerce platform, and integrates modern technologies such as Google Maps API and Google Tag Manager for analytics. The site is fully accessible, mobile-optimized, and provides clear navigation through extensive product categories. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policy or incident response contacts are published. WHOIS data is restricted due to registry policy, which is typical for .be domains, but the website content and social media presence support legitimacy. Overall, the site demonstrates a mature digital presence suitable for its B2B wholesale market.

L

La Vie Claire

lavieclaire.com

38

La Vie Claire is a well-established French retail company specializing in organic food and products, with a history dating back to 1948. It operates over 340 stores across France and offers a broad range of organic groceries, cosmetics, and household items. The company emphasizes sustainability, local sourcing, and environmental responsibility, positioning itself as the second largest specialized organic distribution chain in France. The website reflects a mature digital presence with comprehensive content, strong branding, and active social media engagement. Technically, the website is built on WordPress with modern libraries such as Gravity Forms, Swiper.js, and jQuery. It employs SEO best practices, accessibility features, and performance optimizations including WP Rocket. Cookie consent and privacy compliance mechanisms are implemented effectively. However, the WHOIS data for the domain is unavailable, which is unusual for a large retail brand and slightly reduces trust. Security posture is generally good with HTTPS enforced and CAPTCHA protections on forms, but lacks published security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie management are comprehensive and GDPR compliant. Overall, the website is professional, secure, and user-friendly, serving its target audience well. Strategic improvements in transparency around domain registration and security policies would enhance trust and compliance further.

A

ALECO GmbH

aleco.bio

46

ALECO GmbH is a well-established organic supermarket chain operating in the northwest region of Germany, with a history spanning over 25 years since its founding in 1989. The company focuses on providing a fully ecological product range with a strong emphasis on freshness, targeting consumers interested in organic and sustainable products. Their business model centers on retail through multiple physical store locations, supported by customer loyalty programs and active recruitment efforts. Technically, the website employs modern tracking technologies such as Google Tag Manager and Google Analytics, and uses Swiper.js for interactive content. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with no critical technical issues detected. However, no CMS or hosting provider details are explicitly identified. From a security perspective, the website enforces HTTPS and implements a cookie consent banner, indicating awareness of privacy regulations. However, it lacks advanced security headers and does not publish explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to privacy protection or malformed queries, but the website's legitimacy is supported by consistent branding, multiple store locations, and active social media presence. Overall, ALECO GmbH presents a credible and professional online presence with moderate technical maturity and a good security posture. Strategic improvements could include enhancing security headers, publishing security policies, and providing clearer contact information such as phone numbers to further strengthen trust and compliance.

E

ebl-naturkost GmbH & Co. KG

ebl-naturkost.de

49

ebl-naturkost GmbH & Co. KG operates as a regional organic food retailer in Germany, emphasizing sustainable, high-quality, and natural products sourced from regional and biologically certified farms. The company maintains a strong market position within the organic retail sector, offering weekly and monthly promotional offers through both physical markets and an online presence. Their target audience includes consumers seeking organic and regional food products. Technically, the website is built on the Shopware CMS platform, hosted by Timme Hosting, and incorporates modern web technologies with responsive design and SEO best practices. The site uses Google Analytics with IP anonymization and implements a cookie consent mechanism, reflecting a good level of digital maturity and privacy awareness. Security posture is solid with HTTPS enforced, though some security headers and explicit security policies are absent. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with room for improvement in security transparency and incident response readiness.

Alnatura is a retail company operating under the Migros Group in Switzerland, likely specializing in organic or natural products. The website is currently inaccessible, displaying a temporary service unavailable message in multiple languages, indicating a downtime or maintenance state. The site links to other Migros Group companies, showing integration within a larger retail ecosystem. The technical infrastructure and digital maturity cannot be fully assessed due to the lack of accessible content. Security posture evaluation is limited; no security policies, headers, or incident response information are present in the accessible content. Overall, the site shows low content and technical quality at this time, with no privacy or cookie compliance information visible.

G

GroPulse

gropulse.com

36

GroPulse is a specialized provider of Shopify apps and custom themes aimed at simplifying and enhancing eCommerce success for Shopify store owners. The company emphasizes intuitive solutions and tailored services to streamline operations and support business growth. The website positions GroPulse as an experienced player with over 7 years in Shopify development, supported by strong customer reviews and a clear focus on Shopify platform integration. Technically, the website is built on WordPress using modern Gutenberg blocks and premium plugins, hosted with Cloudflare as registrar and DNS provider. The site is moderately optimized for performance and mobile responsiveness, with good SEO practices including structured data and meta tags. Marketing and tracking are implemented primarily via Facebook Pixel. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers. There is no visible privacy policy, cookie consent mechanism, or incident response information, indicating gaps in compliance and security transparency. No critical vulnerabilities or malicious content were detected. Overall, GroPulse presents a credible and professional eCommerce technology business with room for improvement in privacy compliance and security best practices to enhance trust and regulatory adherence.

M

maerz architekten ag

maerz.ag

45

maerz architekten ag is a Swiss architecture firm specializing in architecture, development, spatial planning, and project realization. Operating as a subsidiary of RaumUnion AG, the company serves clients primarily within Switzerland, offering professional architectural services with a focus on quality and regional projects. The website presents a professional portfolio and clear contact information, reinforcing its market presence. Technically, the website is built on WordPress with modern technologies such as Alpine.js and jQuery, optimized for performance and mobile responsiveness. Hosting is provided by Hostpoint AG, inferred from DNS records. Google Analytics is integrated via Google Tag Manager, enabling moderate user tracking. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, indicating potential compliance gaps with GDPR requirements. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and enhanced security measures to strengthen its posture and user trust.

R

raumwerk ag

raumwerkag.ch

28

raumwerk ag is a Swiss-based company specializing in comprehensive and reliable construction processes, including project development, building permit procedures, realization phases, and project handover. As a total contractor and part of the RaumUnion AG group, raumwerk ag emphasizes responsible specialists, customer security, transparency, and quality execution. The company targets clients seeking trustworthy construction project management and related services in the real estate sector. The website reflects a professional and consistent brand image with clear contact information and a focus on service offerings. Technically, the website is built on WordPress with modern JavaScript libraries such as Alpine.js and jQuery. It uses WP Rocket for performance optimization and loads resources efficiently. The site is mobile-optimized and provides a good user experience with clear navigation. However, it lacks advanced SEO and accessibility features and does not implement security headers, which could be improved. From a security perspective, the site uses HTTPS with excellent SSL configuration, but no security headers were detected. There is no visible privacy policy, cookie consent mechanism, or incident response information, which are important for GDPR compliance and user trust. No analytics or tracking scripts were found, indicating minimal user tracking. The WHOIS data is consistent with the business claims, showing legitimacy and domain age appropriate for the company's stated history. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, security best practices, and transparency regarding data protection and incident response to improve its security posture and regulatory adherence.

B

baumanager ag

baumanager.ag

48

baumanager ag is a Swiss-based architectural and construction project management company, operating as a small but specialized service provider. The company emphasizes holistic and innovative architectural solutions, coordinating project quality, costs, and timelines effectively. As a subsidiary of RaumUnion AG, it benefits from a reputable parent company association. The website is professionally designed using WordPress with modern frontend technologies, providing a good user experience and clear business information. However, it lacks privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and vulnerability disclosure mechanisms. Overall, the website is trustworthy and serves its target audience well, but compliance and security enhancements are recommended.

VITON s.r.o. is a Czech manufacturer specializing in industrial coatings and surface treatment products for metals, wood, concrete, and other materials. The company holds ISO 9001 certification and has a market presence of over 20 years, targeting industrial and construction sectors. Their product portfolio includes epoxyester paints, fire-retardant coatings, and protective lacquers, supported by a proprietary toning system vitocolormix®. The website reflects a professional business with clear contact information and product details, although some business history details like founding year are not explicitly stated. Technically, the website employs legacy JavaScript libraries such as jQuery 1.11.3 and jQuery UI, alongside modern tracking tools like Google Analytics and Facebook Pixel. The site is mobile-optimized with good navigation and SEO practices but lacks advanced accessibility features. Security practices include HTTPS usage and client-side form validation, but the absence of security headers and outdated libraries present potential risks. Security posture is moderate; no critical vulnerabilities are evident from the content, but the lack of privacy and cookie policies, combined with missing WHOIS registration data, reduces overall trust. Advertising and tracking scripts are present without explicit consent mechanisms, indicating privacy compliance gaps. The domain WHOIS data is unavailable, which raises concerns about domain legitimacy and registration status. Overall, the website is functional and business-focused but would benefit from improved security practices, updated technical stack, and enhanced privacy compliance to strengthen trust and regulatory adherence.

Č

České houby a.s.

ceskehouby.cz

43

České houby a.s. operates a Czech-language website focused on the sale and promotion of Czech mushrooms and related products. The site includes an eShop, recipe content, and company information targeting consumers interested in culinary uses of mushrooms. The company appears to be a small retail business established in 2001, with a consistent domain registration history and a clear physical presence in the Czech Republic. Technically, the website is built on WordPress using the Divi theme and Slider Revolution plugin, hosted likely by WEDOS, and employs HTTPS with a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and some best practices, but lacks explicit security headers and vulnerability disclosure mechanisms. Privacy compliance is basic, with no clear privacy policy or terms of service pages found. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.