High-risk security reports

B

Budějovický Budvar, n.p.

masne-kramy.cz

44

Masné krámy is a well-established restaurant located in České Budějovice, Czech Republic, operating since 1954 and closely associated with the Budějovický Budvar brewery. The business focuses on traditional Czech cuisine and beer, serving both local residents and tourists. The website reflects a professional hospitality business with clear branding and comprehensive service offerings including group events, brewery tours, and private lounges. Technically, the website uses a classic jQuery-based stack with additional UI libraries and a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent but lacks visible advanced security headers and explicit privacy policies. The absence of WHOIS data due to privacy protection slightly reduces trust but is common for this business type. Overall, the site is safe, mature audience-oriented, and professionally maintained.

K

Krmiva Ritta

krmivaritta.cz

41

Krmiva Ritta is a Czech Republic-based small e-commerce retailer specializing in premium pet food and accessories for dogs and cats. The company emphasizes high-quality, super-premium, and bio-quality products, avoiding fillers and additives, and has been operating for approximately 12 years. Their market position is that of a niche retailer focused on quality and customer satisfaction, serving pet owners seeking trusted nutrition and pet care products. The website is built on the PrestaShop platform, utilizing technologies such as jQuery and Google Analytics, and features a moderate performance with good mobile optimization and basic accessibility. Security posture is adequate with HTTPS enforced and secure tokens in forms, but lacks advanced security headers and cookie consent mechanisms, indicating partial GDPR compliance. The absence of WHOIS data for the domain raises concerns about domain legitimacy, though the website content and business information appear professional and trustworthy. Overall, the site scores well on business credibility and content quality but has room for improvement in privacy compliance and security best practices.

L

LAD.CZ

pracujnalodi.cz

40

Pracujnalodi.cz is a specialized employment agency focused on providing job placement services for positions on river and ocean cruise ships, primarily in hospitality and service roles. The website targets job seekers interested in maritime employment, offering job listings, CV submission, and updates on seasonal opportunities. The business operates from the Czech Republic and maintains partnerships with recognized cruise and travel companies, enhancing its market credibility. Technically, the website employs a modern tech stack including Bootstrap 4, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. While the site is well-structured and mobile-optimized, it lacks some advanced accessibility features and security headers that could improve its overall robustness. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and obfuscates email addresses to reduce spam. However, it lacks explicit privacy and cookie policies, security headers, and a vulnerability disclosure mechanism, which are important for compliance and trust. The WHOIS data aligns well with the business claims, showing transparency and legitimacy. No adult or questionable content is present, making the site safe for general audiences. Overall, Pracujnalodi.cz presents a professional and credible platform for maritime job seekers but should enhance its privacy compliance and security posture to meet modern standards and increase user trust.

Natural Fitness is a small Czech Republic-based business with a website currently under reconstruction. The site provides minimal information, primarily contact phone numbers and an email address, with no detailed business description or services outlined. The domain is registered since 2013 with a consistent WHOIS record, indicating legitimacy but limited digital maturity. Technically, the website uses minimal JavaScript and lacks modern CMS or frameworks, hosted on websupport.cz. Security posture is weak due to absence of HTTPS information, security headers, and privacy policies. No forms or analytics are present, limiting data collection and tracking. Overall, the site is low in content quality and professionalism, which impacts user trust and business credibility.

The website ladcz.cz serves primarily as a notification page indicating that the labor agency activities have been taken over by DATA JOBS CZ s.r.o., directing visitors to datajobs.cz. The business focus is on employment agency services within the Czech Republic, targeting job seekers and employers. The domain is well-established since 2010 and registered with a reputable Czech registrar, consistent with the business context. Technically, the site is minimalistic, using basic HTML and Google Fonts, with no advanced frameworks or CMS detected. Security features are minimal, with no visible HTTPS enforcement or security headers, and no privacy or cookie policies present. There are no forms or contact details on the site, limiting user engagement and trust signals. Overall, the site functions as a simple redirect/notification page rather than a full business website.

S

South Bohemia Convention Bureau

sbcb.cz

44

South Bohemia Convention Bureau is a regional organization dedicated to supporting event organizers in the South Bohemia region of the Czech Republic. It provides independent assistance in planning and executing conferences, congresses, and incentive events. The website reflects a professional and regionally focused business model, targeting event planners and corporate clients seeking venues and programs in South Bohemia. The organization positions itself as a key regional player with partnerships and a clear service offering.

The website www.venkov21stoleti.cz/venkov21/ serves as a regional tourism information portal for three local action groups in the Czech Republic: MAS Pošumaví, MAS Železnohorský region, and MAS Region Kunětické hory. It provides visitors with information about these regions, targeting tourists, families, and cyclists interested in exploring these areas. The site is professionally designed with clear navigation and multilingual support, enhancing user experience. Technically, it employs common JavaScript libraries such as jQuery, Flexslider, and Fancybox, and integrates Google Analytics for visitor tracking. However, the site lacks explicit privacy and cookie policies, which is a notable compliance gap. Security-wise, HTTPS usage is implied but not fully confirmed, and no advanced security headers are detected, indicating room for improvement in security posture. Overall, the website is functional and credible but would benefit from enhanced privacy compliance and security hardening.

Š

Šumavaprodukt s.r.o.

regionalnispeciality.cz

42

Šumavaprodukt s.r.o. operates an e-commerce platform specializing in regional specialty food products from the Šumava region and surrounding areas in the Czech Republic. The website offers a variety of local products including meats, dairy, bakery items, beverages, and other traditional foods, targeting consumers interested in authentic regional specialties. The business model focuses on online retail with a curated selection of local producers and suppliers, positioning itself as a niche regional food retailer. Technically, the website is built on the PrestaShop CMS platform, utilizing common web technologies such as jQuery, Google Analytics, and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. Performance is moderate, and the site uses HTTPS to secure communications. From a security perspective, the site implements basic best practices including HTTPS and cookie consent mechanisms compliant with GDPR. However, no advanced security headers were detected, and there is no visible security policy or incident response contact information. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness, although the website content and business information appear professional and consistent. Overall, the website presents a trustworthy and functional e-commerce platform for regional specialty foods but would benefit from enhanced security measures, clearer contact information, and domain registration transparency to improve trust and compliance.

E

Europe Direct

europedirect.cz

48

Europe Direct is a public information service providing comprehensive information about the European Union to all citizens, primarily targeting the Czech Republic audience. The website offers services including general EU information, advisory support, and organizing events, lectures, and discussions. It maintains a professional online presence with clear navigation, social media integration, and a cookie consent mechanism compliant with GDPR. Technically, the site uses modern web technologies such as Google Maps API and CookieYes for consent management, though some performance and security header enhancements are recommended. Security posture is moderate with no critical vulnerabilities detected but lacks explicit security headers and incident response information. Overall, the site is trustworthy and serves as a reliable EU information portal, though the absence of WHOIS data slightly reduces domain trustworthiness.

T

TETRONIK - výrobní družstvo Terezín, družstvo

qtcloud.cz

48

QTCloud is a Czech Republic-based technology company specializing in cloud-based queue management system enhancements. Founded in 2017, it offers modular applications including reservation systems, statistics, central kiosk management, mobile apps, and monitoring tools. The company targets both private sector businesses and public sector offices, with notable clients such as T-Mobile and government agencies. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the site uses modern frameworks like Bootstrap and jQuery, hosted likely on Wedos infrastructure, and integrates Google services for analytics and spam protection. Security posture is solid with HTTPS and reCAPTCHA, but lacks published privacy and cookie policies, which impacts compliance. Overall, the site is accessible, well-structured, and trustworthy, though improvements in privacy transparency and security headers are recommended.

M

Město Klatovy

vetrovna.cz

46

The website www.vetrovna.cz represents a municipal real estate development project by the city of Klatovy, Czech Republic. It aims to attract investors and architects to collaborate on an innovative and sustainable residential complex called Větrovna. The site provides detailed project information, schedules, contact details, and downloadable documentation to support stakeholder engagement. The project is positioned as a significant urban development initiative within the region, leveraging the city's historical and natural assets. Technically, the website employs common web technologies including jQuery, Flexslider, and Fancybox, with Google Fonts and Font Awesome for styling. It integrates tracking tools such as Google Analytics and Facebook SDK, indicating moderate digital maturity. The site is responsive and offers a good user experience, though some accessibility and SEO optimizations could be improved. From a security perspective, HTTPS usage is implied but not explicitly confirmed in the data. No security headers were detected, and no privacy or cookie policies are present, which are compliance gaps especially under GDPR. The WHOIS data is unavailable, limiting domain legitimacy verification, but the presence of official contact information and city branding supports trustworthiness. Overall, the website is a professional municipal project portal with good content quality and business credibility but requires enhancements in privacy compliance and security best practices to strengthen its risk posture.

B

Big Flow Production

bigflowproduction.com

46

Big Flow Production is a small Czech-based company specializing in creating online personal branding solutions including websites, photography, videos, social media content, and online marketing. Their market position is focused on delivering fast, quality, and client-tailored services to individuals and small businesses seeking to enhance their online presence. The website is built on WordPress with Elementor and optimized for SEO and mobile devices, reflecting a moderate to good level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though improvements such as DNSSEC and security headers are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting a positive business credibility profile.

D

Dave Design

davedesign.cz

43

Dave Design is a Czech-based graphic and web design studio established in 1998, specializing in custom web design, graphic design, corporate identity, SEO, e-shops, and related digital services. The company serves a diverse client base ranging from small businesses to large corporations such as Vítkovice Steel. Their website reflects a professional and consistent brand image with a portfolio showcasing various projects and client references. Technically, the website uses traditional web technologies including HTML, CSS, JavaScript, and jQuery, supplemented by Google Analytics and Tag Manager for tracking. While the site is functional and well-structured, it lacks modern security headers and privacy compliance features such as a privacy policy or cookie consent mechanism. Security posture is moderate with room for improvement, especially in enforcing HTTPS and updating outdated libraries. Overall, the website is trustworthy and credible but would benefit from enhanced security and privacy practices.

O

Obchodní a technologický holding a.s.

otholding.cz

40

Obchodní a technologický holding a.s. is a Czech investment holding company focused on technology and startups. The company provides a portfolio of services including lead management, mobile app development, web notifications, LED panel rentals, and digitalization solutions for municipalities. Their market position is that of an innovator and quality leader in their sectors, targeting businesses and startups primarily in the Czech Republic and Slovakia. The website content is professional and well-structured, supporting their business model and market positioning. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and popular libraries such as jQuery, Swiper.js, and BaguetteBox.js. Google Analytics and Google Tag Manager are used for tracking, but no explicit privacy or cookie policies are present, indicating a gap in privacy compliance. The site shows moderate performance and basic mobile optimization. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, no security headers were detected, and there is no visible incident response or security policy information. The lack of WHOIS data reduces trust and transparency, which is a concern for legitimacy. Overall, the security posture is moderate but could be improved with better privacy compliance and security best practices. The overall risk assessment suggests a generally trustworthy and professional business website with some compliance and transparency gaps. Strategic recommendations include implementing privacy and cookie policies, adding security headers, improving mobile and accessibility features, and enhancing contact and incident response information to strengthen trust and security posture.

I

IKAR

kniznykompas.sk

44

The website podcast.kniznykompas.sk is a media platform dedicated to podcasts about books and reading, operated by IKAR, the largest Slovak publishing and book distribution company. It offers literary content including book tips, interviews, bestseller rankings, and contests, targeting book readers and podcast listeners. The site integrates with multiple popular podcast platforms, enhancing accessibility and reach. Technically, the site uses a modern tech stack including Google Analytics, Facebook SDK, Adform tracking, and the Yii PHP framework, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and CSRF tokens but lacks important security headers and a published security policy. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

Z

Knižnica | ziveknihy.sk

ziveknihy.sk

47

The website ziveknihy.sk serves as a Slovak digital literary platform offering book excerpts, audiobooks, author readings, and related multimedia content. It targets Slovak-speaking readers interested in literary content and provides free access to a broad range of books and audiobooks. The business model appears to rely on advertising and partnerships, with a niche market position in Slovakia. Technically, the site is built on Drupal 7 with Bootstrap 3 for responsive design, integrating common web technologies such as jQuery and Google Analytics for tracking. The site demonstrates moderate digital maturity with good mobile optimization and basic SEO. Security posture is adequate with HTTPS enabled and IP anonymization in analytics, but lacks advanced security headers and cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site is trustworthy and professionally presented but could improve privacy compliance and security hardening.

K

Knihomola

knihomola.sk

44

Knihomola.sk is a Slovak-based online platform dedicated to aggregating quality book reviews from Slovak and Czech bloggers, readers, and reviewers. Established in 2017, it serves a niche audience passionate about literature, offering book discovery, blog hosting, and a widget for embedding book reviews. The website maintains a consistent brand presence and targets readers seeking curated literary content. Technically, the site employs a modern tech stack including jQuery, Bootstrap, Owl Carousel, Google Analytics, and Facebook SDK, hosted on Webglobe servers. The site is mobile-optimized with good SEO practices and moderate performance. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks advanced security headers and published security policies. No critical vulnerabilities or suspicious content were detected, and WHOIS data confirms domain legitimacy and consistency. Overall, the site is professional, trustworthy, and well-positioned within its niche.

K

KASI, spol. s.r.o.

kasi.cz

49

KASI, spol. s.r.o. is the largest Czech manufacturer specializing in cast iron sewer products, with a strong presence in the European market. The company operates its own development, foundries, concrete plant, and engineering production, positioning itself as a leader in innovation and quality within its niche. The website reflects a professional manufacturing business targeting industrial clients and infrastructure developers. Technically, the site is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable digital infrastructure. The presence of cookie consent and privacy policies demonstrates compliance with GDPR regulations. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Overall, the website is trustworthy, well-structured, and provides clear contact information and business details, although WHOIS data is unavailable, likely due to privacy protection.

N

NexGen IT, s.r.o.

developersky-marketing.cz

47

NexGen IT, s.r.o. operates a professional website focused on providing comprehensive online marketing and digital solutions tailored for real estate developers. Their services include web design, branding, 3D visualizations, CRM systems, and virtual tours, positioning them as a specialized B2B service provider in the Czech Republic's real estate and technology sectors. The website demonstrates a good level of digital maturity with modern technologies, responsive design, and clear navigation. Privacy and cookie policies are well implemented, reflecting GDPR compliance. However, the absence of WHOIS data raises concerns about domain registration legitimacy, which should be verified to ensure trustworthiness. Security posture is moderate with room for improvement in HTTP security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and well-structured, serving its target audience effectively.

Pošumavská odpadová, s.r.o. is a regional waste management company operating primarily in the Czech Republic, serving over 48 municipalities and more than 53,000 residents. The company provides comprehensive waste services including mixed municipal waste, sorted waste, hazardous waste, bulk waste, and bio waste management. They operate multiple collection yards across several towns including Klatovy, Sušice, Kašperské Hory, and Kolinec. The website reflects a regional service provider with a focus on public and municipal waste management needs. Technically, the website uses legacy HTML with windows-1250 charset and includes common JavaScript libraries such as jQuery and Google Analytics for tracking. The site lacks modern CMS indicators and advanced frameworks, suggesting a basic but functional technical infrastructure. Performance and mobile optimization are moderate to basic, with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and includes Google site verification, but lacks visible security headers and privacy or cookie policies, indicating gaps in compliance and security best practices. No WHOIS data is available, which reduces transparency and trustworthiness. The site does not appear to be blocked or protected by a WAF, and no forms collecting sensitive data are present. Overall, the website is functional and provides relevant business information but requires improvements in privacy compliance, security posture, and technical modernization to enhance trust and user experience.

K

komunitko1415.cz

komunitko1415.cz

49

Komunitko 1415 is a Czech community center website established in 2024, focused on providing a space for social gatherings, volunteering, creative workshops, and support for foreigners including Czech language courses. The website targets local community members and foreigners in need, offering cultural and educational activities. The business operates as a small non-profit entity with EU co-financing support, emphasizing social inclusion and community engagement. Technically, the site is built on WordPress 6.8.1 with a modern tech stack including popular plugins for event management and UI enhancements. The site is mobile optimized and SEO friendly, with good content quality and clear navigation. Security posture is solid with HTTPS enforced and privacy-respecting analytics (Piwik PRO) used, but lacks some security headers and cookie consent mechanisms. No direct contact emails or phone numbers are published; contact is via forms. Overall, the site is trustworthy and professionally presented, suitable for its community-oriented mission.

J

Jihočeská centrála cestovního ruchu

zlatoustezkou.cz

40

The website 'Zlatá stezka' is a regional tourism promotion platform managed by Jihočeská centrála cestovního ruchu, focusing on the historical Golden Trail in the Czech Republic. It provides comprehensive information about the trail, including route details, attractions, maps, and multimedia content, targeting tourists and outdoor enthusiasts interested in cultural and natural heritage. The business operates as a small non-profit entity promoting regional tourism. Technically, the site is built on WordPress with common libraries such as jQuery, Google Analytics, Facebook Pixel, and OpenLayers for mapping. The site is moderately optimized for performance and mobile use, with good SEO practices implemented via Yoast SEO. Security posture is adequate with HTTPS enforced and some security plugins in use, but lacks important security headers and formal privacy and cookie policies, which are compliance gaps. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences. The domain registration data is consistent and supports the legitimacy of the site. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

L

LGS Furth im Wald 2025

furth2025.de

48

LGS Furth im Wald 2025 is a regional event organizer hosting the Bavarian Landesgartenschau 2025, a cultural and nature-focused garden show in Furth im Wald, Germany. The website serves as an information portal for visitors, offering event details, ticketing, and sponsorship opportunities. The site is built on a modern WordPress infrastructure using Elementor and Yoast SEO, indicating a good level of digital maturity. Security measures include HTTPS, reCAPTCHA for forms, and GDPR-compliant cookie consent mechanisms. However, some security headers could be improved, and no explicit security or incident response policies are published. Overall, the website is professional, trustworthy, and well-optimized for its audience.

V

Visit Rokycansko

visitrokycansko.cz

46

Visit Rokycansko is a regional tourism website dedicated to promoting the Rokycansko area in the Czech Republic. It offers visitors information on trips, cultural sites, events, and interactive guides, targeting tourists interested in nature, history, and local culture. The website is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable technical infrastructure. It uses HTTPS and integrates Google Analytics and Facebook Pixel for visitor tracking. However, the site lacks explicit privacy and cookie policies, which is a compliance gap. No direct contact information or security incident channels are provided, limiting transparency and trust. Overall, the site is professionally designed and content-rich but would benefit from improved privacy compliance and clearer business contact details.

P

PICCASO

piccasoawards.ca

48

PICCASO Awards Canada is a niche awards platform celebrating excellence in privacy and security within the Canadian market. The website serves as a hub for nominations, event promotion, and community engagement, targeting privacy professionals and organizations committed to data protection. The platform leverages modern web technologies such as Svelte and integrates HubSpot forms for user engagement. Cookie consent is managed via Cookiebot, reflecting a commitment to privacy compliance, although explicit privacy and terms of service pages are missing. The domain registration is recent but consistent with the business launch, and no suspicious indicators were found. Security posture is solid with HTTPS and cookie consent mechanisms, but could be improved with additional policies and disclosures.

I

IT BŘECLAV

itbv.cz

39

IT BŘECLAV is a small, local IT service provider based in the Czech Republic, specializing in comprehensive IT management, computer repair, Apple device servicing, IT outsourcing, and online marketing services including SEO and web design. The company targets small and medium businesses and individual clients primarily in the Břeclav region. Their website is built on WordPress using the Divi theme, demonstrating a moderate level of technical maturity with good mobile optimization and SEO practices. Marketing efforts include the use of Facebook Pixel for user tracking and retargeting. Security posture is solid with HTTPS enforced and standard security headers present, though there is room for improvement in privacy compliance, particularly regarding cookie consent mechanisms. The absence of WHOIS data reduces domain trustworthiness, but the website content and service offerings appear professional and legitimate.

M

Město Vodňany

vodnany.eu

47

Město Vodňany operates an official municipal website serving the residents and visitors of Vodňany, Czech Republic. The site provides comprehensive information about the town, including its history, development plans, municipal office services, cultural events, sports, and partner cities. The website targets local citizens and tourists seeking official and practical information about the town. The business model is a government-operated public information portal, positioning itself as the authoritative source for municipal data and services in Vodňany. Technically, the website employs a modern frontend stack including Bootstrap 5, jQuery, Highslide JS, and Swiper JS, ensuring responsive design and good user experience across devices. The site is hosted securely with HTTPS enabled and includes a cookie consent mechanism, reflecting a moderate level of digital maturity. However, no advanced analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers such as CSP or HSTS, which could enhance protection against common web attacks. No privacy policy or terms of service pages were found, which is a compliance gap especially under GDPR regulations. The WHOIS data is privacy protected by EURid, typical for European domains, and no suspicious patterns were detected. Overall, the site demonstrates a good security posture for a municipal website but could improve transparency and security best practices. The overall risk assessment is low, with the main recommendations focusing on publishing privacy and terms policies, implementing security headers, and establishing a vulnerability disclosure process. These steps would enhance trust and compliance, ensuring the site meets modern security and privacy standards.

M

Město Blatná

mesto-blatna.cz

40

Město Blatná operates an official municipal website providing comprehensive information and services to its citizens, businesses, and visitors. The site covers city history, governance, public notices, COVID-19 updates, and contact information, positioning itself as a trusted local government resource. The website is well-structured with clear navigation and modern web technologies, including jQuery, Bootstrap, and Swiper.js, ensuring a good user experience and mobile optimization. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, although the website content and external links strongly indicate a legitimate municipal entity. Strategic recommendations include publishing a privacy policy, enhancing security headers, and verifying domain registration details to improve trust and compliance.

S

SOLROOF CZ, s.r.o.

solroof.cz

48

SOLROOF CZ, s.r.o. is a Czech-based company specializing in innovative integrated photovoltaic roofing systems combining solar energy technology with steel roofing materials. The company positions itself as a modern, sustainable energy solutions provider targeting roofing professionals, distributors, architects, and end customers seeking clean energy solutions. Their business model focuses on product sales, installation services, and customer support including monitoring and state subsidy assistance. Technically, the website is built on WordPress with a modern tech stack including SEO and multilingual support, offering a professional and user-friendly experience. Security posture is solid with HTTPS, reCAPTCHA Enterprise, and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy. The site is free from adult or questionable content and maintains high content quality and trust indicators.

The website rocketship.cloud currently serves as a placeholder with minimal content, indicating that the site is under development or not yet launched. The domain is registered to Designated Agent LTD, a company based in Sweden, with a domain age consistent with the registration date in 2017. There is no business description or service information available on the site, limiting insights into the company's market position or business model. The lack of contact information and policies further reduces the site's credibility. From a technical perspective, the website uses basic HTML with no detected CMS or advanced frameworks. The hosting provider is Name SRS AB, and DNSSEC is not enabled, which is a security improvement opportunity. The site lacks mobile optimization, accessibility features, and SEO best practices. No analytics, advertising, or tracking technologies are detected, indicating minimal digital maturity. Security posture is basic with HTTPS likely enabled (inferred from domain), but no security headers or policies are present. The absence of privacy, cookie, or terms of service policies indicates non-compliance with GDPR and other privacy regulations. No incident response or vulnerability disclosure information is available, which is a risk for security incident handling. Overall, the website presents a low-risk profile due to minimal content and no suspicious elements but also shows a low maturity level in business, technical, and security aspects. Strategic recommendations include developing full website content, implementing privacy and security policies, enabling DNSSEC, and improving technical and security configurations to enhance trust and compliance.

O

Online lab

onlinelab.cz

29

Online lab is a small Czech Republic based freelance web development collective founded in 2019. The website presents a professional and clean design using modern technologies such as Bootstrap and Google Fonts. The business focuses on collaborative web development services provided by over 20 specialists. The domain registration data aligns well with the business founding date and hosting provider, supporting legitimacy. However, the site lacks critical compliance documents such as privacy and cookie policies, and no contact email or forms are provided, limiting user engagement options. Technically, the website uses a modern front-end stack with Bootstrap 5 and Google Fonts, indicating a moderate level of digital maturity. The site appears mobile optimized and has good design and navigation clarity. However, no CMS or advanced platforms are detected, suggesting a simpler infrastructure. Performance is moderate, and accessibility is basic. Security posture is weak due to lack of visible HTTPS confirmation, absence of security headers, and no published security policies or incident response information. From a security perspective, the website does not expose any obvious vulnerabilities or sensitive data but lacks essential security best practices and compliance documentation. The absence of privacy and cookie policies and no GDPR compliance indicators are notable gaps. No analytics or tracking scripts are detected, which reduces privacy concerns but also limits business intelligence capabilities. Overall, the website is functional and professional for a small freelance collective but requires improvements in security, privacy compliance, and contact options to enhance trust and user confidence. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, adding security headers, and providing clear incident response contacts.

PORCELANOSA Grupo Czech Republic website serves as the official representation of the global luxury brand specializing in high-end bathroom and kitchen products. The site offers comprehensive product information, inspiration, and contact channels targeting architects and discerning customers. The business is positioned as a medium-sized retail and distribution entity within the luxury home furnishing sector, supported by a strong global parent company. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and translation widgets, running on the Estofan CMS platform. While the site is well-designed and user-friendly with good SEO and mobile optimization, it lacks visible advanced security headers and explicit security policies. The absence of WHOIS data for the domain is a notable concern, impacting trust and legitimacy assessments. Privacy and cookie policies are present with consent mechanisms, aligning with GDPR requirements. Overall, the website presents a professional and trustworthy front but would benefit from enhanced security transparency and domain registration clarity.

M

Miroslav Kopunec

alkalizujvodu.cz

47

Alkalizujvodu.cz is a Czech Republic based small e-commerce business specializing in the sale of alkaline water-related products such as filtration pitchers, travel bottles, water filters, and alkaline bath salts. Founded in 2018, the company targets health-conscious consumers seeking to improve their wellbeing through alkaline water consumption. The website is built on WordPress with WooCommerce and Elementor, providing a modern and user-friendly shopping experience. The presence of affiliate marketing and tracking tools like Google Analytics and Facebook Pixel indicates a mature digital marketing strategy. Security posture is solid with HTTPS and GDPR-compliant cookie consent, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

L

Lamael

lamael.com

49

Lamael is a small technology company offering a simple and visually appealing CRM platform designed to help businesses manage projects, tasks, and contacts efficiently. The website is professionally designed using WordPress and integrates multiple marketing and analytics tools, indicating a moderate level of digital maturity. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and external linked domains suggest an active and legitimate business. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the website presents a functional and user-friendly CRM service but would benefit from improved security and compliance practices.

E

Energy Systems

sg-es.sk

42

Energy Systems is a Czech Republic-based company specializing in heating, ventilation, photovoltaics, and other building technologies, targeting primarily builders and homeowners. The company claims over 26 years of market presence and offers comprehensive services from technical consultation to turnkey project realization. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Yoast SEO, Google Tag Manager, and multiple analytics platforms. Security measures include HTTPS, Google reCAPTCHA on forms, and a cookie consent mechanism via OneTrust. However, the absence of WHOIS data limits domain trust verification, and no explicit privacy policy or contact emails were found, which slightly reduces privacy compliance and business credibility scores. Overall, the website presents a good security posture and professional business presence.

E

espray

espray.gr

41

Espray.gr is a Greek-based company specializing in the sale and support of industrial spraying and coating machinery, including airless spray machines, polyurea systems, insulation, and laser cleaning equipment. The company positions itself as a leading provider in Greece with exclusive representation of several international brands and a strong focus on technical support, training, and service. The website is built on the PrestaShop platform, featuring a professional design with good navigation and mobile optimization. Structured data and Open Graph tags are properly implemented to enhance SEO and social media presence. Security posture is solid with HTTPS and security headers in place, though privacy compliance could be improved by adding explicit cookie consent and GDPR statements. No blocking or WAF challenges were detected, allowing full content access and analysis.

S

Slavia pojišťovna a.s.

2coffee.cz

49

2coffee is a modern insurance product offered by Slavia pojišťovna a.s., a well-established Czech insurance company. The website promotes affordable insurance coverage for personal belongings and liability, with additional optional coverage and assistance services. The business model is subscription-based with monthly payments, targeting individuals seeking simple and accessible insurance solutions. The site is professionally designed, mobile optimized, and provides clear contact information and links to official insurance terms.

The domain mrtns.sk currently hosts a website that is inaccessible beyond a standard 404 Not Found error page served by nginx. There is no visible content, metadata, or business information available on the site. The domain is relatively new, registered in January 2023, and uses Cloudflare name servers, indicating a legitimate registration but minimal digital presence. Due to the lack of content and policies, the website's technical maturity and security posture cannot be properly assessed. No security headers or HTTPS status were provided, and no privacy or cookie policies are present. Overall, the site is non-functional from a user perspective and lacks any trust or business credibility indicators.

G

Global payments Europe s.r.o.

gpwebpay.cz

44

Global payments Europe s.r.o. operates the GP webpay payment gateway, a modern and secure system enabling card payments on the internet, primarily serving Czech e-commerce merchants. The company holds a strong market position as the most widespread payment gateway in the Czech Republic, supporting major card brands such as Mastercard, VISA, Diners Club, and American Express. The website reflects a professional business model focused on providing fast, secure, and convenient payment processing services with integration support for popular e-shop platforms. Technically, the site is built on WordPress with modern libraries and SEO optimizations, delivering a good user experience with mobile responsiveness and clear navigation. Security posture is strong with HTTPS enforced and compliance with card security standards, although some improvements are recommended in cookie consent and security headers. Overall, the website and business appear legitimate and trustworthy, with clear contact information and consistent branding.

S

Svaz českých knihkupců a nakladatelů

nejlepsiknihydetem.cz

43

The website nejlepsiknihydetem.cz is operated by the Svaz českých knihkupců a nakladatelů, a Czech non-profit association focused on recommending contemporary Czech literature for children and youth. It serves as a catalog and resource for booksellers, libraries, schools, parents, and the general public interested in children's literature. The platform is well-positioned in the Czech educational and literary market as an authoritative source for children's books. Technically, the site uses common web technologies including Google Analytics and Facebook SDK for tracking, Google Fonts for typography, and a carousel library for product display. The site is mobile responsive and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS but lacks explicit security headers and a visible privacy policy page, which are areas for improvement. The absence of WHOIS data limits domain trust assessment, but the presence of official contact details and consistent branding supports legitimacy. Overall, the site is safe, professional, and focused on educational content for a general audience.

G

GRASPO CZ, a.s.

graspo.com

43

GRASPO CZ, a.s. is a well-established European printing company specializing in high-quality full-color printing and comprehensive bookbinding services. The company emphasizes its long tradition and expertise, serving clients from the Czech Republic to international markets. Their offerings include digital, offset, and rotary printing, along with custom diary and planner production and branding services. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website employs modern JavaScript libraries such as jQuery, Swiper.js, and GSAP, along with Google Tag Manager and Analytics for tracking. It integrates reCAPTCHA for bot protection and uses a cookie consent mechanism, indicating awareness of privacy regulations. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. From a security perspective, HTTPS is enabled, and reCAPTCHA is implemented, but there is a lack of security headers and no published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data for the domain is a concern, reducing trust slightly, but the website content and business information appear legitimate and professional. Overall, the website presents a solid business presence with moderate technical maturity and a good security posture, though improvements in transparency and security best practices are recommended to enhance trust and compliance.

A

AUROTON COMPUTER, spol. s r.o.

auroton.cz

41

AUROTON COMPUTER, spol. s r.o. is a Czech Republic-based company specializing in biometric security solutions, including facial recognition systems and sophisticated monitoring technologies. The company targets organizations requiring advanced access control and surveillance capabilities. Their website reflects a small-sized technology business with a focus on security certifications and IT services. Technically, the site is built on WordPress with standard plugins and moderate performance, but it uses an outdated jQuery version and lacks modern security headers. The security posture is adequate with HTTPS enabled but could be improved with additional headers and updated libraries. Privacy compliance is weak due to the absence of privacy and cookie policies. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trustworthiness. Overall, the website is functional but would benefit from enhanced security and compliance features.

E

EURead

euread.com

49

EURead is a European network of 38 organizations across 27 countries dedicated to promoting reading and literacy. The website serves as an informational and advocacy platform highlighting member activities, campaigns, and research. The network operates as a non-profit entity focused on societal impact through literacy promotion. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google services for analytics and reCAPTCHA for form security. The site is hosted by One.com and uses HTTPS with a valid SSL certificate, although DNSSEC is not enabled. Security practices include cookie consent management and CAPTCHA protection, but there is room for improvement in security headers and DNS security. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, with no signs of blocking or malicious content.

M

Mateřská škola Chudenice – příspěvková organizace

mschudenice.cz

47

Mateřská škola Chudenice is a small, local contributory organization providing preschool education services in the Czech Republic. The website serves as an informational portal for parents, offering details about the school, events, and enrollment. The site is built on WordPress using the Astra theme and several plugins focused on accessibility, GDPR compliance, and enhanced content presentation. The technical infrastructure is modern and well-maintained, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site demonstrates a responsible approach to privacy and user experience, suitable for its educational purpose.

M

Městský úřad Klatovy

klatovy.cz

48

Městský úřad Klatovy is the official municipal government authority for the city of Klatovy in the Czech Republic. The website serves as a comprehensive information portal for citizens and local businesses, providing access to official documents, social services, urban development plans, and public notices. It also offers practical services such as online reservations and contact details for various municipal departments. The site is well-positioned as a trusted local government resource with consistent branding and relevant content tailored to its audience. From a technical perspective, the website employs a modern technology stack including jQuery, Flexslider, and Fancybox for UI enhancements, along with Google Analytics and Tag Manager for visitor tracking. Hosting and web design are provided by ŠumavaNet.CZ. The site is mobile-optimized and accessible, with good SEO practices and a cookie consent mechanism in place, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and explicit security or privacy policies suggests room for improvement. The lack of WHOIS data for the domain is a notable concern, reducing trustworthiness from a domain registration perspective, though the website content and official contact information strongly indicate legitimacy. Overall, the site is a reliable municipal resource with good content quality and user experience. Strategic recommendations include enhancing security headers, publishing clear privacy and security policies, and verifying domain registration details to improve trust and compliance.

S

Studio3D

studio3d.se

47

Studio3D is a Sweden-based creative studio specializing in visualization and marketing services, targeting businesses seeking high-quality visual content and marketing solutions. Established in 2013, the company positions itself as more than a visualization agency, emphasizing creativity and adaptability to marketing challenges. The website is professionally designed, mobile-optimized, and built on WordPress, leveraging modern technologies such as Cookiebot for cookie consent and Google Tag Manager for analytics. Security posture is solid with HTTPS enabled and no exposed sensitive data, though improvements are recommended in security headers and formal security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy and terms of service. Overall, the website reflects a trustworthy and professional business presence with room for enhanced compliance and security documentation.

W

Weber

weberpas-mixer.cz

41

The website 'Weberpas mixer' is a newly launched digital platform associated with the Weber brand, specializing in construction materials such as facades, plasters, coatings, insulation, flooring, and waterproofing. It serves primarily construction professionals and consumers in the Czech Republic, offering product-related tools and links to related Weber services. The site is part of the Saint-Gobain group, indicating a strong market position in the manufacturing sector. Technically, the site is built on Angular 10.1.6, with a modern frontend but limited backend or CMS indications. The site is mobile-optimized with basic accessibility and SEO features but lacks advanced analytics or tracking.

S

Studio QUIN.cz

quin.cz

39

Studio QUIN.cz is a Czech-based creative digital agency specializing in web design, SEO, marketing, advertising, and media production services. Established in 2000, it serves a diverse client base with a full range of internet and media solutions including custom web applications, video production, and 3D modeling. The company positions itself as an innovative and technology-driven service provider focused on business clients seeking comprehensive digital marketing and creative services. Technically, the website uses legacy technologies such as jQuery 1.10.2 alongside Google Analytics and Google Maps APIs, hosted likely via WEDOS, a Czech hosting provider. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. Security-wise, the site uses HTTPS and obfuscates email addresses to reduce spam but lacks explicit security headers and uses outdated JavaScript libraries, which could pose risks. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms despite tracking scripts. Overall, the website is professional and trustworthy but would benefit from security and privacy improvements.

D

Destinační společnost Píseckem, s.r.o.

piseckem.cz

45

Destinační společnost Píseckem, s.r.o. operates a comprehensive regional tourism portal for the South Bohemian region, focusing on promoting cultural, natural, and family-friendly attractions. The website serves as a key information hub for tourists, offering details on events, museums, nature, and activities, supported by local municipalities and regional grants. The business model centers on destination marketing and tourism promotion with strong local government partnerships. Technically, the website employs modern web technologies including Bootstrap 5, jQuery, Select2, and Fancybox, with integrated analytics via Google Analytics and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Cookie consent mechanisms are implemented, reflecting attention to privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks visible security headers, which could be improved. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern for domain transparency and trustworthiness, though the website content and local government backing mitigate this risk. Overall, the website is a well-structured, professional tourism portal with good content quality and technical implementation. Strategic improvements in domain registration transparency, security headers, and explicit privacy policy publication would enhance trust and compliance.

T

Town of Písek

pisek.eu

46

The website www.pisek.eu serves as the official tourism portal for the Town of Písek, Czech Republic. It provides comprehensive information about the town's historical landmarks, cultural heritage, natural surroundings, and tourist services. The site targets tourists and visitors seeking cultural and outdoor experiences, including families. The business model is government-supported tourism promotion, positioning the site as a trusted regional resource. Technically, the site uses modern web technologies including Bootstrap 5 and jQuery, with a responsive design and cookie consent mechanisms in place. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and privacy policies are lacking. Overall, the site is professional, trustworthy, and well-structured, but could improve compliance and security transparency.