High-risk security reports

A

Agrokompas

agroserver.cz

42

Agrokompas.cz is a Czech Republic-based agricultural information portal specializing in real-time commodity prices, agricultural news, and market reports. The website targets agricultural professionals, commodity traders, and farmers seeking up-to-date market data and personalized reporting services. The business operates as a small-sized entity focused on providing niche market data and news services within the agricultural sector. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Google services, offering a responsive and user-friendly experience. Security measures include HTTPS and Google reCAPTCHA integration, alongside a cookie consent mechanism, though explicit security headers and detailed security policies are absent. The WHOIS data is unavailable, which limits domain trust assessment, but the website's professional content and contact information mitigate some concerns. Overall, the site demonstrates moderate digital maturity with room for improvement in security and compliance documentation.

I

Informační centrum Polná

infocentrumpolna.cz

43

The website infocentrumpolna.cz serves as the official information center for the town of Polná in the Czech Republic. It provides residents and visitors with local news, event listings, tourist information, and contact services. The site is positioned as a local government portal, focusing on community engagement and public service. The business model is non-commercial, aimed at supporting local administration and tourism. The website content is well-structured, regularly updated, and presented primarily in Czech with multilingual support via Google Translate.

Graf Barf, operated by LeDaNo, s.r.o., is a Czech-based small retail business specializing in raw dog food diets (BARF). The company offers a variety of frozen raw meat products and accessories through an e-commerce platform complemented by a physical store in Jihlava. Their business model focuses on delivering natural, balanced nutrition for dogs, developed in collaboration with veterinary and nutritional experts. The website is professionally designed with clear navigation and good mobile optimization, supporting a positive user experience. Technically, the site uses a modern stack including Bootstrap, jQuery, and various JavaScript libraries, though no CMS is explicitly detected. Security posture is moderate with HTTPS in use and cookie consent implemented, but lacks advanced security headers and anti-CSRF protections. Privacy compliance is good with clear policies and GDPR adherence. However, the absence of WHOIS data reduces domain trustworthiness and transparency. Overall, the site is functional, trustworthy, and well-positioned in its niche but could improve security and domain registration transparency.

The website veselysenior.cz currently serves only a 404 Not Found error page, indicating that the site content is inaccessible or not yet published. The domain is newly registered in June 2023 with minimal WHOIS data and no privacy protection, suggesting a nascent or inactive business presence. There is no visible metadata, contact information, or business-related content to analyze. Technically, the site lacks any detectable technologies, scripts, or security headers, and no HTTPS status is provided. The absence of privacy, cookie, or terms of service policies further indicates an incomplete or placeholder website. Security posture cannot be properly assessed due to lack of content and configuration data. Overall, the site presents a low trust profile and minimal digital maturity.

The website www.sportli.cz is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block that denies access based on the visitor's ASN. This results in a lack of any accessible content, metadata, or business information, preventing a thorough analysis of the site's offerings or market position. The domain WHOIS data is unavailable, which raises concerns about domain registration transparency and legitimacy. Technically, the site uses Cloudflare for security and performance, but no further technology stack details or CMS information can be determined due to the block. Security posture cannot be properly evaluated, and no privacy or cookie policies are detectable. Overall, the site appears to be poorly accessible and lacks publicly available trust or compliance indicators.

B

BestForm.cz

bestform.cz

48

BestForm.cz is a Czech-based e-commerce retailer specializing in fitness apparel, offering a wide range of products from popular and exclusive fitness brands. The website demonstrates a solid market position within the Czech Republic and neighboring countries, supported by sister sites in Slovakia and Hungary. The business model focuses on online retail with fast delivery and customer-friendly policies such as free returns. Technically, the site employs a modern tech stack with multiple tracking and marketing tools integrated, including Google Analytics, Facebook Pixel, and Glami piXel, indicating a mature digital marketing approach. Security posture is generally good with HTTPS enforced and secure forms, though the absence of security headers and lack of WHOIS data are notable gaps. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences, but domain registration transparency should be improved to enhance trust.

A

angenehme gestaltung

angenehme-gestaltung.de

46

Angenehme Gestaltung is a small communication design service provider based in Germany, offering specialized design solutions. The website is built on WordPress using Elementor and integrates modern technologies such as Matomo Analytics and Real Cookie Banner for privacy compliance. Security is enhanced by the Wordfence plugin and HTTPS enforcement, reflecting a good security posture. However, the site lacks explicit security policies and incident response information, which could be improved to enhance trust and compliance. Overall, the website is professional, GDPR compliant, and serves its niche audience effectively.

B

BVA BikeMedia GmbH

radmarkt.de

48

RadMarkt is a well-established German trade magazine focused on the bicycle industry, providing news, tips, and industry updates to professionals and enthusiasts. The website is part of BVA BikeMedia GmbH, a medium-sized media company with several related subsidiary sites and magazines. RadMarkt operates a subscription and advertising-based business model targeting the bicycle retail and manufacturing sectors. The site demonstrates a professional digital presence with good content quality and consistent branding.

B

BVA BikeMedia

bva-bikemedia.de

45

BVA BikeMedia is a well-established German media company specializing in cycling-related content, including print magazines, books, maps, and digital media. With a history spanning over 130 years, it serves a broad audience of cycling enthusiasts from casual riders to professionals. The company operates multiple specialized publications and cycling clubs, positioning itself as a key player in the cycling media sector in Germany. Technically, the website is built on WordPress with modern plugins and offers a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

O

Okresní hospodářská komora Jihlava

hkjihlava.cz

48

Okresní hospodářská komora Jihlava is a regional economic chamber in the Czech Republic focused on supporting business development, economic stability, and providing services such as certification, export consultancy, and training seminars. The website is professionally designed with good content quality and clear navigation, targeting local businesses and entrepreneurs. Technically, the site uses modern JavaScript libraries and Google Analytics for tracking, with a cookie consent mechanism implemented. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit privacy policies. WHOIS data is missing, which impacts domain trustworthiness, but the website content and contact information appear legitimate and consistent with a professional organization. Overall, the site is safe, business-focused, and provides valuable resources to its members and visitors.

F

Foodmaker

thefoodmaker.com

43

Foodmaker is a well-established healthy food company founded in 2003, operating in Belgium and neighboring countries. They provide a variety of services including meal delivery, healthy food restaurants, retail food bars, and a lifestyle brand called FDMKR. The website is professionally designed with good content quality and consistent branding. Technically, the site uses modern frameworks and multiple third-party marketing and analytics tools, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and explicit security headers. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the business appears credible and trustworthy with a solid digital presence.

3nicom websolutions s.r.o. is a small Czech Republic-based technology company specializing in web development, e-commerce solutions, graphic design, and internet marketing services. Their website targets local businesses and organizations seeking professional web presence and digital marketing support. The company demonstrates a moderate level of digital maturity with use of common JavaScript libraries, integration of marketing tools like Facebook chat and WhatsHelp.io, and Google Analytics for user tracking. However, the site lacks modern security headers and privacy compliance mechanisms, which are critical for GDPR adherence and user trust. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and contact information appear professional and consistent with a legitimate business. Overall, the security posture is moderate but could be improved with updated libraries, security headers, and privacy policies.

A

ANDONE s.r.o.

jerabyvysocina.cz

39

ANDONE s.r.o. operates the website jerabyvysocina.cz, providing specialized crane and heavy load transportation services primarily in the Vysočina region of the Czech Republic. Their offerings include autojeřábnické práce with Liebherr cranes, transportation of construction materials, machinery, and containers, targeting construction companies and industrial clients. The company maintains a professional web presence with detailed equipment descriptions, customer references, and clear contact information, positioning itself as a trusted regional service provider. Technically, the website is built using the Mobirise CMS platform with Bootstrap and jQuery frameworks, incorporating modern web technologies and responsive design. Google Analytics and iMedia retargeting scripts are used for user tracking and marketing. While the site performs moderately well and is mobile-optimized, it lacks advanced accessibility features and security headers, indicating room for technical improvements. From a security perspective, the site uses HTTPS but does not implement common security headers, and no privacy or cookie policies are present, which impacts GDPR compliance. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness, although the website content and contact details appear genuine. Overall, the security posture is moderate but could be enhanced by adding security policies, headers, and transparency documents. The overall risk assessment suggests the business is operational and credible but should address domain registration transparency and privacy compliance to improve trust and reduce potential legal risks. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, and verifying domain registration details.

X

X-Kabel, s.r.o.

x-kabel.cz

43

X-Kabel, s.r.o. is a Czech manufacturing company specializing in cable assembly production with over 20 years of industry experience. The company offers comprehensive services including large series production, processing of flat and circular cables, crimping, soldering, stripping, shielding adjustment, and testing. Their market position is supported by the use of advanced technologies such as Komax and Schleuniger and certifications like ISO 9001:2016. The website reflects a professional business model targeting industrial clients requiring custom cable assemblies. Technically, the website is built on WordPress with common plugins for sliders, search, and translation. The infrastructure is hosted likely by WEDOS, consistent with the registrar data. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal vulnerability disclosure mechanisms. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data. However, it lacks privacy and cookie policies, which are important for GDPR compliance. Contact information is clearly presented, enhancing business credibility. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website is a credible and professional representation of the business but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

O

OptoNet Communication, spol. s r.o.

optonet.cz

46

OptoNet Communication, spol. s r.o. is a Czech-based technology company specializing in internet connectivity, server hosting, cloud services, and optical infrastructure. Established in 2005, the company operates a modern data center in the Vysočina region and offers services targeting residential, corporate, and government clients. The website reflects a mature business with a clear market position in telecommunications and IT infrastructure services. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and Font Awesome, hosted on Websupport infrastructure, and built on the VOX.AREA CMS platform. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, but lacks some advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy, supporting the company's credibility and market presence.

M

Město Třešť

trest.cz

48

Město Třešť operates an official municipal website serving as the primary digital portal for residents, visitors, and stakeholders. The site provides comprehensive information about the town, local government services, social and educational offerings, cultural events, and tourism. It targets local citizens and tourists, supporting community engagement and public service delivery. The business model is typical for a government entity, focusing on transparency and accessibility rather than commercial revenue. The domain's long-standing registration since 1999 supports its legitimacy and established presence. Technically, the website uses a traditional HTML/CSS/JavaScript stack with the Vismo CMS platform. It integrates Google services such as reCAPTCHA for form security and Google Translate for multilingual support. The site demonstrates moderate performance and good mobile optimization but could improve accessibility and SEO features. Hosting and domain registration are consistent with a Czech municipal entity. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, which is positive. However, it lacks advanced security headers and explicit incident response or vulnerability disclosure policies. Privacy compliance is basic, with a privacy policy and cookie information present but no active consent mechanism. No critical vulnerabilities or suspicious content were detected, and the site is accessible without WAF blocking. Overall, the website is a trustworthy, well-maintained municipal portal with good business credibility and moderate technical sophistication. Strategic improvements in security headers, privacy consent, and accessibility would enhance its posture. The risk level is low, but ongoing attention to security best practices is recommended.

K

Kolpingovo dílo ČR z.s.

kolping.cz

46

Kolpingovo dílo ČR z.s. is a Czech non-profit organization dedicated to addressing social needs and supporting individuals through various community and social services. The organization is inspired by Adolph Kolping's philosophy and operates multiple facilities and programs including family centers, addiction counseling, prevention centers, and therapeutic communities. The website reflects an established presence with EU project backing and a focus on community engagement. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms. Security posture is generally good with HTTPS enforced and privacy plugins in use, though additional HTTP security headers could enhance protection. The absence of WHOIS data limits domain trust assessment, but the website's transparency and contact information support legitimacy. Overall, the site is professional, trustworthy, and serves a broad general audience with safe content.

K

KPŽ - Knoflíkářský průmysl Žirovnice

kpzas.cz

47

KPŽ - Knoflíkářský průmysl Žirovnice is a well-established Czech manufacturing company specializing in plastic components for the automotive industry, particularly lighting technology. With a history spanning over 161 years, the company serves numerous global automotive brands and maintains a medium-sized workforce. Their website reflects a professional and consistent brand image, targeting automotive clients and partners. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Tag Manager and CookieScript for analytics and compliance. The site is mobile-optimized and provides clear navigation and relevant content. Security-wise, the website enforces HTTPS and includes a cookie consent mechanism, but lacks some advanced security headers which could be improved. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the company. Contact information is clearly presented, facilitating communication. No critical security or compliance issues were detected.

S

Sklárna Janštejn, s.r.o.

janstejn.cz

45

Sklárna Janštejn, s.r.o. is a historic Czech glass manufacturing company specializing in hand-blown lighting glass products with a tradition dating back to 1809. The company holds a strong artisanal reputation and serves both domestic and international markets, including a notable partnership with BROKIS. Their website reflects a medium-sized manufacturing business with a professional online presence, including social media engagement and detailed company information. Technically, the website is built on WordPress using Elementor and several plugins, offering a good user experience with moderate performance and mobile optimization. Security posture is solid with HTTPS and security headers implemented, though privacy and cookie policies are lacking, which impacts compliance. The absence of WHOIS data reduces domain trustworthiness but does not detract from the legitimacy of the business as presented online. Overall, the site is safe, professional, and well-structured, serving its target audience effectively.

J

Jihlavan

jihlavan.cz

45

Jihlavan is a Czech aerospace manufacturing company specializing in the development, production, and servicing of aircraft hydraulic assemblies and electromechanical components. With a 70-year tradition, the company positions itself as a regional leader and trusted partner for major aerospace clients such as Airbus and L39. The website reflects a professional and well-structured digital presence, supporting their business model focused on manufacturing and servicing aerospace components. Technically, the site is built on WordPress with modern plugins for SEO, multilingual support, and GDPR compliance, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit incident response policies could enhance their security maturity. Overall, the website is trustworthy, professional, and compliant with privacy regulations, though the absence of WHOIS data slightly impacts domain trust verification.

M

Město Polná

mesto-polna.cz

44

The website mesto-polna.cz serves as the official online portal for the town of Polná, Czech Republic. It provides residents and visitors with municipal news, official documents, event calendars, and contact information. The site is positioned as a local government service platform, targeting the community and stakeholders of Polná. The business model is governmental, focusing on public service and information dissemination. The website content is well-structured, professionally presented, and consistent with the town's branding and identity. Technically, the site uses a specialized CMS (Vismo) tailored for municipal websites, leveraging standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google services like reCAPTCHA for form security and Google Translate for multilingual support. The site is mobile-optimized and accessible, with good SEO practices. Performance is moderate, with no significant technical debt or outdated components detected. From a security perspective, the website enforces HTTPS and uses reCAPTCHA to protect forms from abuse. However, it lacks explicit security headers such as Content Security Policy or HSTS, and does not provide a dedicated security policy or incident response contact. Privacy and cookie policies are present but lack active consent mechanisms. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is trustworthy, safe, and professionally maintained, suitable for its governmental purpose. Strategic improvements in security headers, privacy consent, and incident response transparency would enhance its security posture and compliance. The domain registration data aligns well with the website's official nature, supporting its legitimacy and long-standing presence since 2001.

F

Foodmaker

fdmkr.be

45

FDMKR is an e-commerce retailer specializing in active lifestyle and cycling apparel, operating under the Foodmaker brand. The company targets consumers interested in stylish, performance-oriented clothing for sports and lifestyle activities. The website demonstrates a consistent brand identity and offers limited edition collections tied to cycling events such as the Tour de France. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and popular analytics tools like Google Analytics and Facebook Pixel, hosted under a reputable registrar. Security posture is moderate with HTTPS enabled but lacks some important security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The site is safe for general audiences with no adult content detected.

L

Léonard Web Solutions

lws.be

41

Léonard Web Solutions (LWS) is a small web agency based in Heusy (Verviers), Belgium, specializing in website creation, graphic design, custom development, social media management, and SEO services. The company targets local businesses and individuals seeking professional digital presence solutions. The website is built on WordPress with modern SEO and performance optimizations, including Yoast SEO and WP Rocket plugins, and integrates Google Tag Manager and Microsoft Clarity for analytics. The site is well-structured, mobile-optimized, and provides a good user experience with consistent branding and relevant content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and a published privacy policy are missing. WHOIS data is not publicly available, likely due to privacy protection, which is common for small businesses but reduces transparency. Overall, the website presents a professional and trustworthy digital presence for a small technology service provider.

F

Fédération des Parcs naturels de Wallonie

parcsnaturelsdewallonie.be

42

The Fédération des Parcs naturels de Wallonie operates as a non-profit federation dedicated to managing and promoting natural parks in the Wallonia region of Belgium. The organization focuses on nature conservation, sustainable tourism, environmental education, and regional development. Their website serves as an informational and promotional platform targeting the general public interested in nature and sustainable practices. The federation holds a key regional position as a coordinator of natural parks and related projects. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO and W3 Total Cache, and hosted by One.com A/S. The site demonstrates good design quality, mobile optimization, and SEO practices, although accessibility features are basic. Security posture is solid with HTTPS enforced and secure form handling, but lacks advanced security headers and incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced compliance and security transparency.

E

equal.brussels

equal.brussels

46

equal.brussels is an official regional public service platform dedicated to promoting equality of opportunity and combating discrimination in the Brussels-Capital Region. The website serves as an information hub presenting the organization's missions, campaigns, and resources aimed at various social themes including gender, handicap, LGBTQIA+, racism, and gender-based violence. The platform targets citizens, stakeholders, and public policy makers interested in inclusive policies and social justice. Technically, the website is built on WordPress with modern frameworks such as Elementor and Bootstrap, ensuring a responsive and accessible user experience. Security measures include HTTPS enforcement, Google reCAPTCHA integration, and GDPR-compliant cookie consent mechanisms, although explicit security headers and incident response policies are not publicly documented. Overall, the site demonstrates a strong security posture and high content quality, reflecting its role as a trusted government entity.

P

Home - Plein Publiek

pleinpubliek.be

39

Pleinpubliek.be is a website established since 2015, likely representing a small business or organization. The site uses WordPress CMS with a custom theme and integrates modern web technologies including YouTube Iframe API and Google Tag Manager for analytics and tracking. Cookie consent is managed through Cookiebot, with a default configuration denying ad and analytics storage, indicating a privacy-conscious approach. However, no explicit privacy policy or terms of service were found in the analyzed content, which is a gap in compliance and transparency. The website is accessible without any WAF or security challenge, and no blocking mechanisms were detected. Security headers and advanced security policies are not evident, suggesting room for improvement in security posture. Overall, the site presents a professional design and good SEO practices but lacks visible business contact information and formal security or privacy documentation.

L

Laurent Gerbaud Chocolatier

chocolatsgerbaud.be

39

Laurent Gerbaud Chocolatier is an artisan chocolate maker and ice-cream producer based in Brussels, recognized as the best chocolatier in Brussels in 2021 by Gault&Millau. The company offers a range of unique chocolates combining sweet and savory ingredients, spices, and exotic fruits, targeting gourmet consumers and chocolate enthusiasts. Their business model includes retail shops, workshops, corporate gifting, and an online shop hosted on a dedicated subdomain. The website is built on WordPress with modern plugins and provides a professional user experience with good mobile optimization and SEO. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy or cookie policies, indicating compliance gaps. WHOIS data is restricted, limiting domain transparency, but the website content and branding suggest a legitimate and established business. Strategic improvements in privacy compliance, security headers, and incident response information are recommended to enhance trust and security maturity.

P

Prádelna a čistírna Jihlava, s.r.o.

pradelnaji.cz

48

Prádelna a čistírna Jihlava, s.r.o. is a Czech Republic-based company specializing in laundry and dry cleaning services, primarily serving hotels, accommodation, catering facilities, and industrial enterprises. The company emphasizes quality service, sustainability, and customer satisfaction, leveraging modern washing technology. The website reflects a medium-sized business with a strong local presence and a history of 60 years in the market. Technically, the website uses modern JavaScript libraries and Google Analytics with a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent but lacks explicit security headers and incident response information. The absence of WHOIS data reduces transparency and trustworthiness, though the website content and contact information are professional and comprehensive. Overall, the site is safe, well-structured, and business-focused.

Ateliér AJV, s.r.o. is a Czech family-run architectural and engineering studio specializing in project design, engineering activities, industrial construction, developer projects, engineering networks, and heritage reconstruction. With over 33 years of experience and more than 1000 completed projects, the company serves a diverse clientele including industrial firms, developers, and public institutions. Their website reflects a professional and consistent brand image with detailed service descriptions and client testimonials, positioning them as a trusted regional player in the real estate and construction sector. Technically, the website is built on Joomla CMS with modern web technologies such as Bootstrap and jQuery, and includes Google Analytics for visitor tracking. The site is mobile-optimized and provides a cookie consent mechanism, though it lacks a dedicated privacy policy and terms of service pages, which are important for GDPR compliance. Security posture is moderate with HTTPS enabled and email obfuscation implemented, but missing security headers and incident response information suggest room for improvement. WHOIS data is unavailable, limiting domain legitimacy verification, but the presence of company contact details and consistent branding supports credibility.

E

emro s.r.o.

emro.cz

49

emro s.r.o. is a small Czech Republic-based company specializing in electrical installations, including low voltage security systems, residential and industrial power distribution, and production of electrical switchboards. Established originally in 2003 and restructured as a legal entity in 2010, the company serves commercial and residential clients with a focus on quality electrical infrastructure projects. The website reflects a basic but functional online presence built on the Yola CMS platform, with moderate mobile optimization and basic design quality. Technical infrastructure includes common web technologies such as jQuery and Google Maps integration, hosted via Active24. Security posture is limited, with no visible HTTPS enforcement or security headers, and no published privacy or cookie policies, indicating compliance gaps. Tracking scripts from Yola and SiteWit are present without user consent mechanisms. Overall, the site is legitimate and consistent with the business but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

R

Renot s.r.o.

renot.cz

43

Renot s.r.o. is a Czech-based small manufacturing and retail company specializing in the production and renovation of alternative toner and ink cartridges, as well as providing 3D printing equipment and filament sales. The company holds ISO 9001 and ISO 14001 certifications, indicating a commitment to quality and environmental standards. Their market position is that of a regional player serving both business and consumer segments with a focus on printing supplies and 3D printing solutions. The website is professionally designed with clear navigation and good content relevance, targeting customers interested in printing and 3D printing products and services. Technically, the website is built on the aPilot CMS platform and uses modern technologies including Google Tag Manager, Google Analytics, and Google reCAPTCHA for form security. The site is mobile optimized and performs moderately well, though some accessibility features could be improved. Security posture is good with HTTPS enforced and use of CAPTCHA, but lacks important security headers and published incident response or vulnerability disclosure policies. The WHOIS data is unavailable or privacy protected, which reduces transparency but is not uncommon for small businesses. The site includes a privacy policy in PDF form and terms of service, but lacks a cookie consent mechanism. Overall, the site demonstrates a solid business credibility and moderate privacy compliance, with room for improvement in security best practices and transparency. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, publishing security and incident response policies, and enhancing privacy compliance to build greater trust and security maturity.

S

SILKO s.r.o.

silko-ji.cz

49

SILKO s.r.o. is a Czech Republic-based small enterprise specializing in thin-layer road surface modifications, maintenance, and repairs. Established in 1995, the company offers a range of services including micro-surfacing, slurry seal, patchmatic repairs, bituminous surfaces, and road cleaning. The company holds an ISO 9001:2016 quality certification, indicating a commitment to quality management. The website presents a professional image with clear service descriptions and contact information, targeting municipalities and contractors in the transportation sector. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, and the Nette framework, providing a responsive and user-friendly experience. However, the site lacks advanced SEO and accessibility features and does not display privacy or cookie policies, which are important for compliance and user trust. No forms or email contacts are present, limiting direct user engagement. From a security perspective, the site uses HTTPS but lacks visible security headers and vulnerability disclosures. The absence of WHOIS data due to privacy protection reduces transparency but is common for small businesses. No WAF or blocking mechanisms were detected, and the site content is safe with no adult or questionable material. Overall, SILKO s.r.o. maintains a moderate digital maturity with room for improvement in privacy compliance, security hardening, and transparency. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

D

DITON s.r.o.

diton.cz

47

DITON s.r.o. is a well-established Czech manufacturer specializing in concrete products for outdoor architecture, including paving stones, palisades, curbs, stairs, fences, and garden architecture. With over two decades of experience since 1999, the company holds a strong market position in the manufacturing sector, targeting construction professionals and end consumers seeking durable and aesthetically pleasing concrete solutions. The website reflects a professional and comprehensive digital presence, showcasing product catalogs, virtual tours, and customer support services. Technically, the site is built on WordPress with modern plugins and tracking technologies, ensuring good SEO and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain trust verification, but the business information and certifications support legitimacy. Overall, the site is secure, compliant, and professionally maintained, supporting DITON's market credibility.

DCOMP s.r.o. is a Czech telecommunications and retail company offering internet, IPTV, TV, and retail technology products primarily serving the Jihlava region. The company operates a physical store, an e-shop partner site, and provides customer portals for service management. Their market position is that of a regional service provider with a focus on local customers. Technically, the website uses modern web technologies including Bootstrap, jQuery, Google Analytics, and Facebook SDK, indicating a moderate level of digital maturity. The site is mobile responsive and includes privacy and cookie consent mechanisms, reflecting awareness of GDPR compliance. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks visible security headers and explicit security policies. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with a small business. Overall, the site is professional and trustworthy with room for security and compliance improvements.

L

Leube Beton s.r.o.

leube.cz

46

Leube Beton s.r.o. is a Czech-based manufacturing company specializing in sustainable concrete products with a heritage dating back to 1838. The company emphasizes quality, reliability, and family values, serving primarily construction and infrastructure sectors. Their website reflects a professional and consistent brand image with clear contact information and a focus on customer support throughout project lifecycles. Technically, the site uses modern web technologies including jQuery, Tailwind CSS, and Google Analytics, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking advanced security headers and published security policies. WHOIS data is unavailable, which slightly reduces trustworthiness but the website content and business information appear legitimate. Overall, the site is well-structured, safe, and compliant with GDPR requirements.

A

Auto Dobrovolný, s.r.o.

autodobrovolny.cz

46

Auto Dobrovolný, s.r.o. is a medium-sized family-owned automotive dealership and service company operating primarily in the Czech Republic with branches in Velké Meziříčí, Jihlava, and Znojmo. The company offers a broad range of services including new and used car sales, vehicle servicing, leasing, and rental. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeting car buyers and service customers in the region. Technically, the site is built on the xartCMS platform, leveraging modern JavaScript libraries and analytics tools, and is mobile optimized with good SEO practices. Security posture is adequate with HTTPS enforced and some obfuscation of contact emails, but lacks advanced security headers and explicit privacy and cookie policies, which are critical for GDPR compliance. The absence of WHOIS data reduces transparency and trustworthiness, although the website content and business operations appear legitimate. Strategic improvements in privacy compliance, security policies, and WHOIS transparency are recommended to enhance trust and regulatory adherence.

Andone s.r.o. is a Czech-based company specializing in commodities trading, feed production, wastewater treatment and biogas, chemical manufacturing, laboratory services, and transport and storage solutions. The company targets industrial and agricultural sectors with a diversified portfolio of products and services. The website presents a professional business image with clear contact information and a structured service offering, although it lacks privacy and cookie policies. Technically, the site uses older JavaScript libraries and common web technologies like jQuery and Bootstrap, with moderate performance and basic mobile optimization. Security posture is limited due to missing HTTPS verification in the data, absence of security headers, and outdated libraries. The WHOIS data is unavailable, which raises concerns about domain legitimacy and trust. Overall, the site is functional and business-focused but requires improvements in security and compliance to enhance trust and protect user data.

M

M – KOVO s.r.o. / KOVORAN s.r.o.

m-kovo.cz

47

M – KOVO s.r.o. / KOVORAN s.r.o. is a Czech Republic-based medium-sized manufacturing company specializing in metalworking services such as CNC machining, grinding, turning, milling, cutting, and galvanizing. The company has a longstanding history dating back to 1991 and is engaged in projects aimed at improving energy efficiency and sustainability. Their target audience primarily consists of industrial clients requiring precision metal fabrication. The website is built on WordPress and employs common web technologies, providing a professional and navigable user experience. However, the absence of privacy and cookie policies, as well as missing WHOIS data, slightly detracts from the overall trustworthiness. Security posture is moderate with HTTPS enabled but lacking security headers and incident response information.

A

A V E N T I N, spol. s r.o.

aventin.cz

47

Aventin Shopping is a Czech Republic-based developer specializing in retail parks. The company has developed five retail parks totaling 58,000 square meters, focusing on a unified and modern retail concept. Their website reflects a professional and consistent brand image targeting retail customers and tenants within the Czech market. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response information are missing. Overall, the site is trustworthy and well-maintained, though the absence of WHOIS data slightly reduces transparency.

Auto Vysočina is a well-established automotive dealership and service provider in the Czech Republic with over 25 years of market presence. The company specializes in sales and servicing of VW, Škoda, DWA, and KIA vehicles, operating multiple physical locations in Jihlava and Loket. The website serves as a brand and informational portal with links to vehicle offers, social media, and partner sites. Technically, the website is built with standard HTML, CSS, and JavaScript, featuring responsive design elements and embedded animations via iframes. However, it lacks modern security headers, privacy and cookie policies, and active analytics tracking, indicating room for improvement in digital maturity and compliance. Security posture is basic with no visible vulnerabilities but missing key security best practices such as HTTPS confirmation and security headers. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security measures to improve trust and regulatory adherence.

S

Stravování Pecha

stravovanipecha.cz

43

Stravování Pecha is a small, family-owned food production and catering business based in Jihlava, Czech Republic, with a long tradition dating back to 1993. The company specializes in preparing and delivering ready meals to corporate clients and individuals within the Vysočina region, offering services such as meal delivery, corporate catering, and an on-site canteen. Their modern kitchen facilities and EU co-financed energy efficiency projects demonstrate a commitment to quality and sustainability. The website reflects a professional and consistent brand image, targeting local businesses and residents seeking reliable food services. Technically, the website is built on WordPress using the Divi theme, incorporating common web technologies such as jQuery, Google Fonts, and Google Maps API. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Security-wise, HTTPS is enforced, and the contact form uses nonce tokens for protection, but the absence of security headers and privacy policies indicates room for improvement. Google Analytics is used for user tracking without visible cookie consent mechanisms, which may raise privacy compliance concerns. The security posture is moderate with no visible vulnerabilities or exposed sensitive data, but the lack of WHOIS data transparency and missing privacy documentation reduce overall trust. The company provides clear contact information, including a company domain email, phone number, and physical address, enhancing business credibility. No WAF or blocking mechanisms were detected, allowing full content access for analysis.

D

Doucha s.r.o.

doucha.cz

48

Doucha s.r.o. is a Czech manufacturing company specializing in the production of electrical switchboards and metal fabrication services. Founded in 1991 as a family business and restructured in 2006, the company offers a range of services including CNC laser cutting, sheet metal processing, welding, and powder coating. Their market position is that of an established regional manufacturer serving industrial clients with certified products compliant with CE ČSN standards. The website reflects a professional digital presence built on WordPress with SEO optimization and mobile responsiveness. However, the absence of WHOIS data limits domain trust verification. Security posture is moderate with HTTPS enforced but lacking security headers and privacy compliance documentation. Contact information is clearly presented, enhancing business credibility.

T

TRIMA NEWS, s.r.o.

jihlavskadrbna.cz

49

Jihlavská Drbna is a regional news media portal focused on delivering authentic news and stories from Jihlava and the Vysočina region in the Czech Republic. Operated by TRIMA NEWS, s.r.o., the website offers a broad range of news categories including local news, crime, sports, culture, and business, supported by advertising and premium subscription models. The site targets a general audience interested in regional developments and community stories. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, Facebook Pixel, and multiple advertising networks to monetize content. It is mobile-optimized with responsive design and uses HTTPS for secure communications. The site integrates privacy and cookie policies with consent mechanisms, reflecting basic GDPR compliance. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and secure form handling, though it lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data raises concerns about domain registration transparency, which should be monitored. Overall, Jihlavská Drbna presents a professional and trustworthy regional news platform with solid technical infrastructure and privacy awareness. Strategic improvements in security headers and domain registration transparency would enhance its security posture and trustworthiness.

2

2score s.r.o.

chnliga.cz

46

Chance Národní Liga is a well-established Czech football league media platform providing comprehensive information about the second highest football league in the Czech Republic. The website offers match schedules, team and player statistics, news updates, and live streaming links, targeting football fans and sports enthusiasts primarily in the Czech Republic. The business operates in the media and sports sector with a medium-sized presence and a history dating back to at least 2013. Technically, the site uses modern web technologies including JavaScript, Typekit fonts, and integrates Google Analytics and Facebook Pixel for tracking, with a cookie consent mechanism to comply with privacy regulations. Security posture is moderate with HTTPS usage implied but lacks visible security headers and published privacy policies, which are areas for improvement. Overall, the site is professional, user-friendly, and trustworthy, with strong social media engagement and official partnerships. However, the absence of WHOIS data limits domain registration insights, though privacy protection appears justified. Strategic recommendations include publishing privacy and terms policies, enhancing security headers, and providing clear contact information to improve compliance and trust.

D

Dizen design

dizen.cz

48

Dizen design is a small, professional graphic design studio based in Jihlava, Czech Republic, specializing in visual identities, web design, packaging and book design, typography, and architectural graphics. They also operate a bookbinding workshop offering workshops for children and adults. The website presents a well-structured portfolio showcasing diverse projects, indicating a strong local market presence and expertise in creative design services. Technically, the site is built on WordPress with modern technologies such as Bootstrap 5, GLightbox, and Masonry.js, optimized for mobile devices and fast loading. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks explicit security headers and privacy compliance documentation. WHOIS data is unavailable, which slightly reduces trust but does not detract significantly from the professional presentation. Overall, the site is trustworthy and well-maintained but would benefit from enhanced privacy and security disclosures.