High-risk security reports

S

Slaneebeer s.r.o.

pivovarantos.cz

44

Pivovar Antoš is a small Czech brewery with a rich historical background dating back to 1518, reestablished in 2010. The company operates two brewing facilities and offers a range of traditional and modern beers, supported by a brewery restaurant and an e-shop for direct sales. The website is built on WordPress using Elementor and related plugins, providing a good user experience with clear navigation and mobile optimization. Security posture is moderate with HTTPS enabled but lacks visible security headers and privacy compliance documentation. Contact information is clearly provided, enhancing business credibility. Overall, the site reflects a legitimate and regionally recognized craft brewery with room for improvement in privacy and security practices.

W

Wild Creatures

wildcreatures.cz

43

Wild Creatures is a small Czech craft brewery specializing in wild fermentation beers, offering both on-site visits and online sales through their e-shop. The website is professionally designed with good navigation and mobile optimization, targeting adult beer enthusiasts. The technical infrastructure includes standard web technologies and Google Analytics for tracking, but lacks advanced security headers and privacy compliance features. The security posture is moderate, with an age gate implemented to restrict underage access, but missing privacy and cookie policies reduce compliance. WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not directly impact the legitimacy of the business as presented on the site. Overall, the website is functional and trustworthy for its business purpose but could improve in security and privacy compliance.

P

Pivovar Volt

pivovarvolt.cz

40

Pivovar Volt is a Czech craft brewery established in 2017, specializing in a wide variety of beers including traditional Czech styles and innovative ales. The business operates a brewery, restaurant, and pension, targeting beer enthusiasts and local customers. The website reflects a well-structured and professional digital presence with detailed product information and active social media engagement. Technically, the site uses established libraries such as jQuery and Bootstrap, and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and Hotjar. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and credible but would benefit from enhanced compliance and security measures.

D

DEK a.s.

klubrozpoctaru.cz

47

Klub rozpočtářů is a professional association focused on construction cost estimators in the Czech Republic, operated under DEK a.s. The website provides information about membership benefits, workshops, certifications, and events. It targets professionals and students interested in cost estimation and budgeting in construction. The technical infrastructure uses modern web technologies including Bootstrap, jQuery, and Nette Framework, with integrations for analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity. Security posture is moderate with HTTPS implied but lacks explicit security headers and published security policies. Privacy compliance is addressed with clear cookie consent and privacy policy documents. Business credibility is strong with clear contact information, partner affiliations, and member testimonials. However, the absence of WHOIS data reduces domain trust assessment. Overall, the website is professional, functional, and serves its niche audience effectively.

K

KODAP

kodap.eu

42

KODAP is a professional services firm specializing in tax advisory, accounting, payroll, legal services, and audits primarily serving enterprises and entrepreneurs in the Czech Republic and international markets. The company holds a strong market position, evidenced by its award as Tax Advisory Firm of the Year 2024 and memberships in multiple professional chambers and the ETL Global network. Their business model focuses on comprehensive, tailored services leveraging modern technologies to enhance client experience and operational efficiency. Technically, the website is built on WordPress with modern JavaScript libraries and SEO plugins, ensuring good performance and mobile optimization. The presence of multilingual support and cookie consent mechanisms indicates a mature digital infrastructure. Analytics and marketing tools are used moderately with privacy considerations. From a security perspective, the site enforces HTTPS and uses reCAPTCHA and cookie consent scripts, but lacks explicit security headers and published security or incident response policies. No vulnerabilities or suspicious patterns were detected, and WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is professional, trustworthy, and well-structured, though improvements in privacy policy publication and security documentation are recommended to enhance compliance and user trust.

K

KODAP

kodap.de

38

KODAP is a professional services firm specializing in tax consulting, auditing, accounting, payroll, and legal advisory services primarily targeting companies and entrepreneurs in the Czech Republic and the broader EU region. The company is recognized for its comprehensive and tailored approach, leveraging modern technologies to deliver efficient and user-friendly services. It holds memberships in several professional chambers and has received the prestigious Steuerberatungskanzlei des Jahres 2024 award, underscoring its market credibility and expertise. Technically, the website is built on WordPress 6.7.2 with a modern tech stack including jQuery, Google Tag Manager, reCAPTCHA, and cookie consent mechanisms. SEO is well implemented with Yoast SEO plugin and structured data. The site is mobile-optimized and performs moderately well, though some accessibility improvements could be made. Security practices include HTTPS enforcement and form protection, but lack explicit security policy disclosures and advanced security headers. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of published incident response contacts and vulnerability disclosure policies suggests room for improvement in transparency and readiness. Privacy compliance is basic, with cookie consent implemented but no visible privacy policy or terms of service pages in the provided content. Overall, KODAP presents a trustworthy and professional online presence aligned with its business focus. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing accessibility, and formalizing incident response and vulnerability disclosure mechanisms to strengthen compliance and trust.

B

Biskupství českobudějovické

bcb.cz

48

Biskupství českobudějovické is a regional religious organization serving the Českobudějovice diocese in the Czech Republic. The website functions as an information hub providing news, events, and resources related to the diocese's activities. It targets the general public interested in religious and community matters. The organization operates as a non-profit entity with a focus on community engagement and religious services. Technically, the website is built on WordPress with modern SEO plugins like Yoast and integrates Google Analytics and Tag Manager for visitor tracking. The site is mobile-optimized and demonstrates good content quality and navigation clarity. However, some accessibility features could be improved. The website uses HTTPS with a strong SSL configuration but lacks some security headers that could enhance protection. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. Cookie consent mechanisms are implemented, but the absence of a clear privacy policy and incident response contacts indicates room for improvement in compliance and transparency. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profit organizations. Overall, the website is professional, trustworthy, and serves its community well. Strategic improvements in privacy documentation, security headers, and incident response information would enhance its security and compliance standing.

M

MUDr. Marie Ládová

internacb.cz

38

The website represents a small specialized medical clinic in České Budějovice, Czech Republic, focusing on internal medicine and hematology services. It offers patient consultations, blood testing, and online appointment booking. The business is positioned locally with contractual relationships with major Czech health insurance companies, indicating a stable client base and professional service offering. The website content is clear, professionally presented, and targeted at local patients seeking specialized medical care. Technically, the website uses legacy JavaScript libraries such as jQuery 1.8.6 and jQuery UI, with Google Analytics for visitor tracking. The site lacks modern CMS indicators and does not display advanced frameworks or hosting details. Performance and mobile optimization are basic but functional. There is no evidence of advanced accessibility or SEO optimization beyond basic meta tags. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which are critical for GDPR compliance given the use of Google Analytics. The WHOIS data is missing, which reduces domain trustworthiness and raises concerns about domain registration transparency. The email address is obfuscated via JavaScript, indicating some attention to spam protection. No incident response or security policy information is published. Overall, the website is functional and professional but requires improvements in security posture, privacy compliance, and domain registration transparency to enhance trust and regulatory adherence.

P

Povoda s.r.o.

povoda.cz

46

Povoda s.r.o. operates a specialized travel agency focused on water sports vacations, including canoeing and kayaking trips primarily in Central Europe. Their offerings include family-friendly tours, school courses, and corporate events, positioning them as a niche player in the hospitality and outdoor adventure market. The website demonstrates a good level of digital maturity with modern JavaScript frameworks and tracking technologies, alongside GDPR and cookie compliance mechanisms. However, the absence of WHOIS data and security headers slightly diminishes the overall trustworthiness. Security posture is adequate with HTTPS and consent management but lacks formal incident response and vulnerability disclosure policies. Overall, the site is professional, user-friendly, and safe for general audiences.

Posázaví o.p.s. is a non-profit organization focused on destination management and tourism promotion in the Posázaví region of the Czech Republic. The website serves as a comprehensive portal for tourists, offering detailed information on local events, tourist attractions, active tourism activities, services, and regional products. The organization appears well-established since 2004 and maintains partnerships with regional and national tourism bodies, enhancing its market position as a key regional tourism information provider. Technically, the website employs modern JavaScript libraries such as jQuery, jQuery UI, Swiper, and Plupload, alongside Google Analytics and Google Tag Manager for visitor tracking. The site uses the Apollo publishing system, indicating a professional content management approach. The website is moderately performant, mobile-optimized, and provides good navigation and content relevance, although accessibility features could be improved. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a cookie consent mechanism, which are important for GDPR compliance and enhanced security posture. No vulnerabilities or malicious content were detected. The WHOIS data for the subdomain is unavailable, which is typical, but the main domain's legitimacy is supported by the website's content and partnerships. Overall, the site is a trustworthy and professional tourism portal with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing security policies, and improving accessibility to strengthen user trust and regulatory compliance.

A

Asociace vodní turistiky a sportu z.s.

avts.cz

43

Asociace vodní turistiky a sportu z.s. is a Czech non-profit association dedicated to representing and protecting the interests of water tourists and water sports enthusiasts in the Czech Republic. Founded in 2019, it serves a broad community of over 54,000 members including clubs, associations, companies, and individuals. The association actively participates in legislative processes, water management proceedings, and safety standardization to ensure sustainable and safe water tourism. It also engages in educational and advocacy projects to promote water sports and river accessibility. The website provides comprehensive information about the association's goals, members, and current activities, targeting water sports enthusiasts and related organizations.

M

Muuza

muuza.cz

43

Muuza is a small Czech interior design studio specializing in personalized design and realization of residential and commercial interiors. The website presents a professional portfolio with detailed service descriptions, client testimonials, and media references, positioning the company as a trusted niche service provider in the Czech Republic. Technically, the site is built on WordPress using modern JavaScript libraries such as jQuery and Glide.js, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy or cookie policies, which are compliance gaps. The absence of WHOIS data limits domain legitimacy verification, but the website content and contact information suggest a legitimate business. Overall, the site is well-designed and trustworthy but would benefit from enhanced security and privacy compliance measures.

A

Assistant Pro

assistant.pro

46

Assistant Pro is a specialized SaaS platform targeting WordPress developers, freelancers, and agencies by providing cloud storage and a community-driven marketplace for page builder templates. The platform aims to streamline website creation by enabling users to save, share, and import design assets across multiple WordPress sites. The business is positioned as a niche productivity tool with a clear value proposition and a consistent brand presence. Technically, the website is built on WordPress, hosted on DigitalOcean, and leverages modern web technologies including JavaScript, jQuery, and SEO plugins like Yoast. The site demonstrates good mobile optimization and SEO practices, though accessibility is basic. Security posture is adequate with HTTPS and domain-level protections, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism detected despite use of tracking scripts. Overall, the site is professional, trustworthy, and safe for general audiences.

V

Vallon Metallveredlung GmbH

vallon-mv.de

47

Vallon Metallveredlung GmbH is a specialized manufacturing company based in Germany, offering a comprehensive range of galvanic and surface finishing services including galvanic zinc plating, nickel plating, copper plating, phosphating, tin plating, aluminum conversion coatings, silver plating, and hydrogen embrittlement heat treatment. As part of the Adelhelm Group, Vallon positions itself as a reliable one-stop-shop for functional surface technologies targeting industrial clients. The website is professionally designed, well-structured, and provides clear navigation and contact information, supporting a positive user experience. Technically, the site is built on the Contao CMS platform, uses modern JavaScript libraries such as jQuery and Mmenu, and employs Matomo analytics for privacy-conscious user tracking. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is addressed with a clear privacy policy, cookie consent, and GDPR considerations. Overall, the site reflects a trustworthy and credible business presence with good digital maturity.

P

Privacy service provided by Withheld for Privacy ehf

indieweb.org

46

IndieWeb.org is a community-driven platform promoting independent personal websites as an alternative to the corporate web. It provides resources, standards, and events to empower individuals to own their online identity and content. The website is built on MediaWiki and hosted on Linode, featuring a clean, accessible design with good navigation and mobile optimization. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and serves a niche technology community focused on decentralization and personal web ownership.

The website optools.pl is a newly registered domain (June 2024) with minimal content consisting solely of a meta refresh redirect to https://www.tiforyou.pl/op-cookie. There is no substantive business information, contact details, or policies presented on the site. The domain is registered through a Polish registrar, consistent with the presumed country of operation. Technically, the site lacks modern security headers, privacy compliance mechanisms, and any visible analytics or tracking technologies. The security posture is basic with no advanced protections or vulnerabilities detected, but also no strong security practices implemented. Overall, the site appears to be in an early stage or placeholder status, limiting its business credibility and user trust. Strategic recommendations include adding comprehensive privacy and cookie policies, providing clear contact information, enabling DNSSEC, and improving website content and security configurations.

H

Hidroizolatii Soprema

soprema.ro

49

Soprema România is a medium-sized manufacturing business specializing in advanced waterproofing, thermal insulation, and durable roofing solutions tailored for the construction industry in Romania. Established in 2004, the company positions itself as a provider of superior protection for sustainable and efficient building projects. The website reflects a professional digital presence built on WordPress with WooCommerce and Elementor, indicating a moderate level of digital maturity. The site includes a comprehensive cookie consent mechanism, demonstrating awareness of privacy regulations, although explicit privacy and terms of service policies are not found in the provided content. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response information. Overall, the domain registration data supports the legitimacy and consistency of the business identity.

S

SOPREMA Polska Sp. z o.o.

soprema.pl

49

SOPREMA Polska Sp. z o.o. is a well-established manufacturer and distributor of advanced thermal and waterproofing insulation materials, operating since 1996 as part of the global SOPREMA Group. The company serves the construction sector in Poland with a broad product portfolio including bituminous membranes, synthetic membranes, green roof systems, and construction chemicals. Their market position is strong, supported by a modern production facility near Warsaw and presence in over 90 countries globally. Technically, the website is built on Joomla CMS with modern frontend libraries and integrates Google Analytics and Tag Manager for user tracking. The site is mobile-optimized and provides comprehensive content and navigation. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response disclosures are recommended. WHOIS data is unavailable, which slightly impacts trust but is mitigated by clear business information and contact details on the site. Overall, the website reflects a professional and credible business with good digital maturity.

S

Soprema

soprema.com.br

48

Soprema is a leading global waterproofing group with a strong presence in Brazil, specializing in manufacturing and distributing waterproofing and construction chemical products. Their website targets construction professionals, applicators, technical experts, and consumers seeking waterproofing solutions. The company emphasizes quality certifications and offers extensive product lines and technical content to support their customers. Technically, the website uses a modern JavaScript stack including jQuery and Google Analytics, hosted on Gandi.net infrastructure. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and secure forms, though some security headers and incident response disclosures are missing. Overall, the website is professional, trustworthy, and compliant with basic privacy and cookie policies. No blocking or WAF mechanisms hinder access.

O

Obec Břežany

obecbrezany.cz

48

Obec Břežany is the official website of the municipality of Břežany in the Czech Republic, providing residents and visitors with local government information, news, events, and tourist guidance. The site is well-structured, mobile-optimized, and uses modern JavaScript libraries to enhance user experience. It offers clear contact details and accessibility certification, reflecting a commitment to inclusivity. However, the absence of WHOIS registration data and lack of explicit privacy and security policies reduce the overall trustworthiness from a domain registration and compliance perspective. The website employs HTTPS and cookie consent mechanisms but lacks advanced security headers and incident response information.

P

Pivovar Chříč – založen 1567, obnoven 2015

pivovarchric.cz

39

The website represents Pivovar Chříč, a small craft brewery located in the north Pilsen Region of the Czech Republic, with a historical tradition dating back to 1567. The brewery produces traditional Czech lager beers, seasonal specials, and flavored sodas, and operates as a sheltered workshop employing mentally disabled individuals. The business targets general and mature audiences interested in craft beer and local hospitality. Technically, the site is built on WordPress with jQuery and LESS CSS, featuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy or cookie policies. No WHOIS data is available, which limits domain trust verification. Overall, the site is professional and content-rich but could improve privacy compliance and security practices.

N

National Heritage Institute

zamek-manetin.cz

45

The website represents the official online presence of the Manětín chateau, a Baroque cultural heritage site managed by the National Heritage Institute of the Czech Republic. It provides comprehensive visitor information including tours, opening hours, admission, and contact details, targeting tourists and cultural heritage enthusiasts. The site is well-branded and consistent with government heritage management standards. Technically, the website employs a modern tech stack including jQuery, Leaflet.js for maps, Google Analytics and Tag Manager for analytics, and integrates fonts from Typekit and Google Fonts. The site is mobile optimized, accessible, and performs moderately well, hosted under a reputable registrar. Cookie consent is implemented with granular user controls, reflecting good privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site lacks a dedicated security policy or incident response contact information, and no vulnerability disclosure mechanism is present. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness. The risk assessment is low with no critical issues detected. Strategic recommendations include publishing a security policy, incident response contacts, and a vulnerability disclosure page to enhance transparency and security maturity.

O

Obec Nečtiny

nectiny.cz

48

Obec Nečtiny operates an official municipal website serving the local community of Nečtiny in the Czech Republic. The site provides essential information about the municipality, contact details, and a search function for visitors and residents. It positions itself as a local government portal with a focus on transparency and accessibility to municipal services. The website uses a moderate technology stack including jQuery, Bootstrap, and Photoswipe, indicating a standard but somewhat dated technical infrastructure. The site is mobile optimized and includes a cookie consent mechanism, reflecting some awareness of privacy compliance requirements. Security posture is moderate with HTTPS enforced but lacking advanced security headers and explicit privacy or terms of service documentation. The absence of WHOIS data reduces domain trustworthiness, but the presence of official contact information and consistent branding supports legitimacy. Overall, the website is functional and serves its purpose but would benefit from enhanced security and compliance measures.

DATA JOBS CZ is a Czech Republic based personnel agency specializing in job placement and recruitment services within the Czech Republic and the broader EU region. The company operates a professionally designed website offering job listings, consulting, and CV submission services targeting job seekers and employers. The business is small-sized, founded in 2017, and maintains a consistent brand presence with partner logos and active social media channels. Technically, the website leverages modern web technologies including Bootstrap 4, jQuery, and Google Analytics, hosted by WEDOS, a Czech hosting provider. The site is mobile optimized and SEO friendly, providing a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and cookie consent mechanisms indicates room for improvement in compliance and security best practices. No signs of WAF or content blocking were detected, allowing full content accessibility. WHOIS data aligns well with the business profile, supporting legitimacy. Overall, the website scores a solid 78 out of 100, reflecting good content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture.

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) that displays when a website cannot be loaded. The page includes embedded JavaScript and CSS for the offline dinosaur game but contains no actual website content, business information, or external links. As such, it does not represent a public website or business entity. The technical infrastructure is limited to Chromium's internal resources and scripts. Security posture is minimal due to the nature of the page being a local error page with no external exposure. Privacy and compliance policies are absent, as expected for an internal browser page. Overall, this is not a website but a browser-generated error page with embedded game code.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which is displayed when the browser cannot load external website content. This page includes embedded JavaScript and CSS for the Chrome offline dinosaur game, but contains no actual business or website content. There are no privacy policies, cookie notices, terms of service, or contact information present. The page is not a public website but a browser-generated error page, thus no business or security policies are applicable. The technical infrastructure is limited to embedded Chromium scripts and canvas-based game code. Security posture is minimal due to the nature of the page, with no security headers or policies detected. Overall, this is not a legitimate website but a browser error page with embedded game functionality.

Š

Škola interiéru

skola-interieru.cz

42

Škola interiéru is a Czech-based educational institution specializing in practical interior design courses. The website showcases a well-structured offering of courses taught by experienced professionals who actively work in the design industry. The business targets aspiring and practicing interior designers, students, and related professionals seeking practical skills. Technically, the website is built on WordPress, uses modern web technologies, and implements HTTPS with some security best practices. However, the absence of WHOIS data and explicit privacy and cookie policies slightly reduce trust and compliance confidence. The site features strong branding, detailed course information, and positive testimonials, indicating a reputable and professional operation.

B

Best Transport a.s.

best-transport.cz

39

Best Transport a.s. is a Czech-based transportation and forwarding company with nearly 30 years of experience, specializing in furniture transport and logistics services primarily across Central Europe. The company emphasizes quality, reliability, and environmental responsibility, serving business clients with regional freight forwarding, warehousing, and distribution. The website reflects a professional and consistent brand image with detailed contact information and shareholder transparency documents. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and WPML for multilingual support. It employs modern web fonts and scripts, integrates Google reCAPTCHA for form security, and uses Google Tag Manager for analytics. The site is mobile-optimized with good navigation and performance, though accessibility and SEO could be improved. From a security perspective, the site uses HTTPS with a valid SSL certificate and includes reCAPTCHA to protect forms. However, it lacks explicit security headers and formal privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS data reduces domain trust verification, though the website content and business information appear legitimate and professional. Overall, the website presents a credible business front with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

G

Globe Media Group

globelink.ca

47

Globe Media Group is a Canadian media and marketing company operating under The Globe and Mail Limited. The company specializes in providing advertisers with content marketing solutions and advertising platforms targeting ambitious Canadians, business decision makers, and affluent households. The website demonstrates a strong market position with claims of #1 reach to key Canadian demographics and offers a suite of marketing capabilities including data intelligence, programmatic advertising, and creative services. Technically, the site is built on WordPress with a modern theme and plugins, leveraging Google Analytics and Facebook Pixel for tracking. The site is mobile optimized and SEO friendly but lacks explicit privacy and cookie policies, which impacts privacy compliance scores. Security posture is good with HTTPS and domain transfer protections, but DNSSEC is not enabled and security headers are not evident. Overall, the site is professional and trustworthy but would benefit from enhanced privacy disclosures and security policies.

T

Tourismusverband Ostbayern e.V.

goldsteig-wandern.de

41

The website www.goldsteig-wandern.de serves as the official portal for the Goldsteig hiking trail, a prominent 660 km long trail in Bavaria and Bohemia, Germany. Operated by the Tourismusverband Ostbayern e.V., it provides comprehensive information on hiking routes, accommodations, events, and booking services. The site targets hiking enthusiasts and tourists seeking outdoor experiences in the region, positioning itself as a key player in regional tourism with recognized affiliations such as the Top Trails of Germany. Technically, the site employs modern web technologies, including JavaScript and CSS, and integrates third-party services like Google Translate and CCM19 for cookie consent management. The website is mobile-optimized, accessible, and SEO-friendly, offering a professional user experience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and incident response contact information. Overall, the domain and website content are consistent and legitimate, with no signs of blocking or WAF interference.

C

Community Wealth Partners

communitywealth.com

48

Community Wealth Partners is a nonprofit consulting firm specializing in capacity building, strategy development, and grantmaker services. They focus on partnering with nonprofits to shift power and resources to communities closest to the issues, aiming for sustainable and meaningful impact. The organization has an established market presence with a domain dating back to 1998, indicating longevity and trust in the nonprofit sector. Their website targets nonprofits and grantmakers, offering services that extend organizational capabilities and foster equity. Technically, the website is built on WordPress with a modern tech stack including jQuery, Gravity Forms, and Yoast SEO. The site is mobile optimized and uses several plugins for enhanced user experience, such as sliders and popups. Performance is moderate with good SEO practices but lacks some advanced security headers and DNSSEC. Security posture is adequate with HTTPS enabled and domain transfer protection, but DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable gap given GDPR and other regulations. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and enhanced security measures. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, and publishing security and incident response information to strengthen trust and compliance.

T

Time Toasters - Time Toasters

timetoasters.cz

40

The website www.timetoasters.cz currently appears inaccessible or blocked, with WHOIS data indicating no registration entries found. This lack of domain registration information and minimal accessible content severely limits the ability to analyze the business or technical infrastructure. No metadata, privacy policies, contact information, or security configurations were detected, indicating a very low digital maturity and security posture. The absence of SSL or security headers further compounds the risk profile. Overall, the site presents a high risk due to lack of transparency and accessibility, and no trust signals are evident.

L

Lamael

lamael.cz

46

Lamael.cz is a business-focused website representing Lamael, a company founded in 2017 that offers a mobile application for business management. The website targets business users seeking efficient management tools, positioning itself as a niche player in the technology sector within the Czech Republic. The site is built on WordPress using the Thrive Theme and incorporates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity, indicating a mature digital marketing strategy. Security measures include HTTPS and reCAPTCHA, but lack explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the website is professional and well-branded, though it could improve transparency and security posture.

The website www.minipos.cz represents QUITEC s.r.o., a small technology company focused on providing a simple and effective point of sale software solution named miniPOS. The business targets small and medium-sized enterprises, particularly in the Czech Republic, offering a niche product in the retail and service sectors. The website content is professionally presented with consistent branding and good quality, supporting the company's market positioning as a specialized software provider. Technically, the site is built on WordPress using the Thrive Theme and leverages jQuery libraries and the Yoast SEO plugin, indicating a moderate level of digital maturity. Mobile optimization and SEO practices are adequately implemented, though accessibility features are basic. Security posture is limited based on the available data; no security headers were detected, and SSL configuration details are not provided. The absence of privacy, cookie, and terms of service policies suggests compliance gaps, particularly regarding GDPR. WHOIS data is unavailable, which reduces domain trustworthiness and complicates legitimacy verification. Overall, the site is functional and business-focused but would benefit from enhanced security and compliance measures.

Stonožka is a Slovak online book retailer that is ceasing its direct online sales operations by the end of 2024. The website serves primarily as an announcement and redirect page, guiding customers to the partner platform www.bux.sk for future purchases. The business model is focused on e-commerce retail of books, targeting Slovak-speaking customers. The site content is minimal and primarily informational, with no interactive elements or advanced technical features. Technically, the website uses basic HTML and CSS with Google Fonts, but lacks modern CMS or frameworks. Security posture is weak, with no visible HTTPS confirmation, security headers, or privacy policies. Contact information is provided but limited to email and phone for complaints. Overall, the site is functional for its limited purpose but lacks comprehensive security and compliance features.

The website 'Danteho verejný zápisník' is a Slovak personal/public blog focused on literary content, including book reviews, quotes, and personal reflections. It operates primarily as a content publishing platform with affiliate marketing partnerships, notably with Martinus.sk, a Slovak book retailer. The site targets a general audience interested in literature and related topics. Technically, the site is built on WordPress 6.7.2, utilizing common plugins such as Yoast SEO and MonsterInsights for analytics. Cookie consent is managed via Cookiebot, indicating some level of privacy compliance. The site is served over HTTPS with good SSL configuration but lacks explicit security headers and formal privacy or terms of service pages. No contact information or security incident response details are provided, which limits business credibility and compliance transparency. Overall, the site is well-structured, mobile-optimized, and provides good user experience, but could improve in security and compliance documentation.

M

MIDOCAR Logistic, s.r.o

dopravomat.cz

49

Dopravomat.cz is a Czech-based platform operated by MIDOCAR Logistic, s.r.o, founded in 2020, specializing in group transportation services. The website enables users to submit transportation requests for groups and receive competitive offers from a network of verified transport providers across the Czech Republic. The business model focuses on transparency, no hidden fees, and payment only after service completion, positioning itself as a trusted intermediary in the transportation sector. The platform targets groups needing various transport sizes, from personal cars to large buses, emphasizing convenience and cost-effectiveness. Technically, the website employs a custom-built infrastructure leveraging modern web technologies including Google Maps API for location autocomplete, jQuery and jQuery UI for UI components, and integrates multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized with good navigation and user experience, though some accessibility features are basic. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and uses secure form inputs but lacks visible security headers and published security policies. There is no cookie consent mechanism, which may impact privacy compliance. No incident response or vulnerability disclosure information is available. The WHOIS data is consistent with the business identity, indicating legitimacy. Overall, the security posture is adequate but could be improved with additional best practices. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in privacy compliance, security headers, and transparency around security policies would enhance trust and reduce risk. The platform is well-positioned in its niche with a clear value proposition and solid business credibility.

Bohemiasoft s.r.o. operates a Czech-language website offering a suite of integrated online business tools tailored for small and medium entrepreneurs. Their services include online invoicing, email hosting on custom domains, e-commerce solutions, website creation, and digital office integration, positioning them as a comprehensive SaaS provider in the Czech market. The website is professionally designed with clear navigation and good content relevance, targeting entrepreneurs seeking centralized business management solutions. Technically, the site is built on WordPress with modern JavaScript libraries and includes analytics and social media integrations, reflecting a moderate level of digital maturity. Security posture is adequate but could be improved by implementing additional security headers and anti-spam measures on forms. Privacy and terms of service documents are provided, indicating a commitment to compliance, though cookie consent mechanisms are lacking. Overall, the domain registration is consistent with the business claims, showing a long-standing presence since 2008. Strategic recommendations include enhancing security headers, adding bot protection, and improving privacy compliance mechanisms to strengthen trust and security.

D

DRONTE s.r.o.

dronte.cz

45

DRONTE s.r.o. operates a specialized boat rental and water sports service primarily in the Czech Republic, focusing on rivers such as Berounka, Hron, Ohře, Otava, Sázava, Lužnice, Vltava, and Malý Dunaj. The company offers rentals of kayaks, rafts, and canoes, organizes water sports events, and provides accredited courses through its water sports school. The business also engages in boat manufacturing and sales, targeting outdoor enthusiasts and tourists interested in water activities. The website reflects a small but established regional player with a clear focus on water recreation and tourism. Technically, the website employs a moderately modern tech stack including jQuery, Nette Framework, and various UI libraries. It integrates multiple third-party analytics and advertising tools such as Google Analytics, Google Tag Manager, Google Ads, and Seznam Retargeting. The site is mobile-optimized with good navigation and content quality, though accessibility features are basic. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies. Cookie consent is implemented, indicating some privacy compliance. No incident response or vulnerability disclosure information is publicly available. The absence of WHOIS data limits domain trust verification, though the website content and business information appear consistent and legitimate. Overall, the security posture is average with room for improvement in headers, policies, and transparency. The overall risk assessment is moderate. The business appears credible and operational, but the lack of WHOIS transparency and limited security policies suggest caution. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, auditing third-party scripts, and improving accessibility and privacy compliance to strengthen trust and security culture.

Půjčovna lodí Samba s.r.o. operates a specialized water sports equipment rental service focusing on canoe, raft, and kayak rentals across several Czech rivers including Sázava, Otava, Lužnice, Morava, and Ohře. The company targets water sports enthusiasts, families, schools, and corporate groups, offering additional services such as baggage transport and theft insurance. The website is well-structured, professionally designed, and provides clear contact information and service descriptions, positioning the company as a trusted regional provider in the water sports rental market. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and retargeting scripts from Seznam, with responsive design and embedded widgets for real-time river conditions. While the site uses HTTPS and cookie consent mechanisms, it lacks explicit security headers and a formal security policy page, which could be improved to enhance security posture. Security-wise, the site shows good practices such as encrypted connections and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, though the website content and contact details appear authentic and professional. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security headers and transparency around vulnerability disclosure would further strengthen trust and security posture.

The website qw.cz represents a hosting server service with minimal online presence. The domain is long-established since 2001 and registered with a Czech hosting registrar, REG-WEDOS, indicating a stable business foundation. The site content is extremely limited, consisting mainly of a title, a brief description, and a contact email, with no additional business or security information provided. Technically, the site lacks modern features such as HTTPS, security headers, or any form of privacy or cookie policies, which significantly impacts its security posture and user trust. There are no visible analytics or advertising tools, and no forms or interactive elements, suggesting a very basic web presence. Overall, the site appears to be a simple informational placeholder for a hosting service without advanced digital maturity or security measures.

M

MOLDAVITES.COM

moldavites.com

37

The website moldavites.com serves as an informational resource focused on Moldavites, a type of natural glass formed by meteorite impacts, along with related tektites and meteorites. It targets collectors, enthusiasts, and researchers interested in these geological specimens. The site provides detailed scientific and historical content, including electron microprobe analyses and descriptive information about Moldavites' origin and characteristics. The business model appears to be primarily educational with possible ancillary sales or inquiries through contact forms, though no direct e-commerce functionality is evident. From a technical perspective, the website is built using basic HTML and CSS without modern frameworks or CMS platforms. Hosting is provided by WEDOS Internet, a Czech provider, consistent with the domain's geographic focus. The site lacks mobile optimization and accessibility features, and SEO is basic. No analytics or tracking technologies are detected, indicating minimal data collection. Security posture is weak, with no evidence of HTTPS enforcement, security headers, or DNSSEC. The WHOIS data is transparent and consistent with the website's theme and location, supporting legitimacy. However, the absence of privacy, cookie, and terms of service policies indicates non-compliance with GDPR and other privacy regulations. No incident response or vulnerability disclosure information is provided. Overall, the website is a niche informational resource with moderate trustworthiness but requires significant improvements in security, privacy compliance, and technical modernization to enhance user trust and regulatory adherence.

M

Městská knihovna Písek

knih-pi.cz

40

Městská knihovna Písek is a municipal public library serving as a cultural and educational hub in the city of Písek, Czech Republic. The website provides comprehensive information about library services, including book lending, access to online catalogs, public internet, educational courses, and cultural events such as exhibitions and workshops. The library targets a broad audience including children, students, researchers, and the general public. The site is professionally designed with consistent branding and multilingual support, enhancing accessibility and user experience. Technically, the website is built on WordPress CMS with WPBakery Page Builder and uses common web technologies such as jQuery, Google Fonts, and Owl Carousel for interactive content. Google Analytics and Google Tag Manager are employed for user tracking and analytics. The site is served over HTTPS, ensuring secure communication, but lacks some recommended security headers and a cookie consent mechanism, which are areas for improvement. From a security perspective, the site shows good practices like HTTPS enforcement and no visible sensitive data exposure. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness, although the website content and branding strongly indicate a legitimate municipal institution. No signs of adult or inappropriate content were found, making the site safe for general audiences. Overall, the website is a well-maintained digital presence for a public library with room for enhancements in privacy compliance and security headers. The missing WHOIS data should be investigated to confirm domain registration status. Strategic recommendations include implementing security headers, adding cookie consent, publishing a security policy, and verifying domain registration to strengthen trust and compliance.

M

MUDr. Marie Ládová

osteoambulance.cz

39

The website www.osteoambulance.cz represents a small healthcare provider specializing in osteology and densitometry services located in České Budějovice, Czech Republic. The business is led by MUDr. Marie Ládová and offers medical consultations and diagnostic services with an online appointment booking feature. The site content is professional and targeted at local patients seeking specialized bone health care. Technically, the site uses legacy JavaScript libraries such as jQuery 1.8.6 and jQuery UI, with Google Analytics integrated for visitor tracking. The site is accessible over HTTPS but lacks modern security headers and privacy disclosures, which are important for compliance and trust. No WHOIS data was retrievable, which limits domain legitimacy verification but does not necessarily indicate malicious intent given the professional nature of the site content. Overall, the site is functional and informative but would benefit from technical and compliance improvements.

W

Waldorfská škola České Budějovice

waldorfcb.cz

39

Waldorfská škola České Budějovice is a small non-profit educational institution offering Waldorf pedagogy from preschool through high school in the Czech Republic. The website presents clear information about the school's educational offerings and target audience, focusing on reform and humanization of education. Technically, the site uses legacy JavaScript libraries such as jQuery 1.5 and integrates Google Analytics and Tag Manager for visitor tracking. While the site is accessible and well-structured, it lacks modern security headers and uses outdated libraries that pose security risks. No privacy or cookie policies are present, which impacts compliance with GDPR and privacy best practices. The WHOIS data is missing, which reduces domain trustworthiness and raises questions about registration legitimacy. Overall, the site is safe and suitable for general audiences but requires improvements in security, privacy compliance, and technical modernization.

D

Dřevo UM s.r.o.

drevoum.cz

39

Dřevo UM s.r.o. is a traditional Czech manufacturer specializing in wooden doors, euro-windows, staircases, and solid wood furniture. With over 25 years of experience, the company operates two workshops in České Budějovice and Heřmaň, serving both local and national markets. Their product range includes entrance and interior doors, wooden gates, windows, staircases, and custom furniture, complemented by services such as tool sharpening, wood drying, and impregnation. The company targets carpenters, construction firms, and end customers seeking quality wooden products. Technically, the website employs common JavaScript libraries like jQuery and Google Analytics for tracking, but lacks modern CMS or advanced frameworks. The site is moderately optimized for mobile and SEO, with a professional design and clear navigation. Security posture is average, with no visible security headers and unknown SSL status, and no privacy or cookie policies are published, indicating compliance gaps. WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the website is functional and professional but would benefit from enhanced security and privacy compliance measures.

E

Elifin s.r.o.

elifin.cz

39

Elifin s.r.o. is a Czech Republic based small professional services firm specializing in comprehensive consulting services including legal, tax, accounting, and financial controlling. Established in 2006, the company offers a broad range of services such as mergers and acquisitions advisory, crisis management, corporate consulting, asset management, and company liquidation. The firm maintains partnerships with recognized organizations like KODAP and the international ETL group, enhancing its market credibility and reach. Technically, the website employs a custom or legacy CMS with JavaScript libraries such as jQuery and carouFredSel for UI components. Google Tag Manager and Google Analytics are used for tracking, although no explicit cookie consent mechanism or privacy policies are present. The site is moderately optimized for mobile and SEO, with a consistent and professional design. From a security perspective, the site uses HTTPS URLs but lacks visible security headers and published security policies. No vulnerability disclosure or incident response information is provided, which could be improved to enhance trust and compliance. The contact information is clearly presented, supporting business credibility. Overall, the website is safe, professional, and well-aligned with its business purpose. However, it would benefit from enhanced privacy compliance, security best practices, and transparency regarding data protection and incident handling.

V

Vlasový ateliér BONA FIDE

bona-fide.cz

29

Vlasový ateliér BONA FIDE is a small, local hairdressing and beauty service provider based in České Budějovice, Czech Republic. The website serves primarily as an informational platform showcasing the business, its services such as hairdressing and permanent make-up, and contact details. The business appears to have an established local presence since 2010, supported by consistent domain registration data and social media presence on Facebook and Foursquare. Technically, the website uses common JavaScript libraries including jQuery and Google Analytics for visitor tracking, but lacks modern security implementations such as HTTPS and security headers. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. The site design and content quality are basic, with limited mobile optimization and accessibility features.

N

Netpromotion

muzeum-st.cz

45

Muzeum středního Pootaví Strakonice is a regional cultural institution operating under the South Bohemian Region of the Czech Republic. It manages historical exhibitions primarily located in the Strakonice castle complex and the unique water mill in Hoslovice. The museum offers a variety of cultural and educational services including exhibitions, lectures, virtual tours, and special events. The institution benefits from EU funding and government support, positioning it as a key cultural heritage site in the region. The website reflects a professional and consistent brand image with clear navigation and relevant content for tourists, educators, and the general public. Technically, the website is built on WordPress using Elementor and several Jet plugins, integrating modern web technologies such as Google Tag Manager, Facebook SDK, and YouTube API. The site is mobile optimized and includes SEO best practices. Security measures include HTTPS, reCAPTCHA, and cookie consent mechanisms, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid with good privacy compliance, including a comprehensive GDPR policy and cookie consent. However, the site lacks explicit security policies and incident response contacts. Analytics and tracking are moderate, using Google Analytics and Facebook Pixel, with appropriate privacy notices. Overall, the website is trustworthy, well-maintained, and suitable for its audience. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further improve trust and compliance.