High-risk security reports

N

Nameshift.com

wfa.be

48

Nameshift.com operates a domain name marketplace and escrow service designed to facilitate safe and fast domain transfers without additional fees to buyers. The company targets individuals and businesses seeking secure domain acquisition with escrow protection. The website is built using modern web technologies such as SvelteKit and serves content via a CDN, indicating a contemporary technical infrastructure. However, the site currently shows mostly placeholder content, suggesting it may be under development or loading dynamically. From a security perspective, the website uses HTTPS for asset delivery but lacks visible security headers and formal security policies. There are no privacy or cookie policies, and no contact emails or phone numbers are provided, which limits transparency and user trust. The domain is very recently registered in May 2024, which may be appropriate for a new business but reduces historical trust indicators. The footer provides company registration and VAT details consistent with a Dutch entity. Overall, the website presents a basic but functional domain purchase service with escrow, but it lacks comprehensive privacy, security, and contact information. The technical implementation is modern but could benefit from improved accessibility, SEO, and security best practices. The risk level is moderate due to the new domain age and limited transparency. Strategic recommendations include adding privacy and cookie policies, publishing security and incident response information, providing clear contact channels, and enhancing content completeness and accessibility to improve trust and compliance.

O

OBALOVÝ INSTITUT SYBA, s.r.o.

alianceprorecyklaci.cz

46

Aliance pro podporu recyklace is a Czech-based alliance focused on promoting the use of recycled and recyclable packaging materials. Founded in 2022, it brings together stakeholders from the circular economy, including retailers, manufacturers, recyclers, and other industry players, to develop practical and consumer-oriented solutions for sustainable packaging. The alliance emphasizes collaboration across the supply chain to increase the use of recyclates and improve recycling technologies. The website is professionally designed using Orchard CMS and modern web technologies, providing good user experience and clear navigation. Security posture is adequate with HTTPS and CSRF protections, though some security headers and explicit privacy policies could be improved. The domain registration data is consistent with the business claims, enhancing trustworthiness. Overall, the site serves as a credible platform for sustainability advocacy in packaging within the Czech Republic.

O

Obalový institut SYBA

klubobalovychmanazeru.cz

43

Klub obalových manažerů is a professional networking and educational platform focused on the packaging industry in the Czech Republic and Slovakia. It operates under the Obalový institut SYBA, a well-established organization dedicated to improving packaging quality and sustainability. The club facilitates informal meetings, knowledge sharing, and industry collaboration through events, excursions, and discussions. The website reflects a small but important entity serving packaging professionals with a focus on career development, networking, and industry insights. Technically, the website is built on Orchard CMS and uses jQuery 1.9.1, indicating a somewhat dated technology stack. The site is mobile optimized and has a good design quality, but lacks advanced SEO and accessibility features. Hosting appears to be with Active24, a known provider. No blocking or WAF mechanisms were detected, and the site is fully accessible. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. The use of an outdated jQuery version may expose the site to vulnerabilities. No incident response or vulnerability disclosure information is present. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and relevant to its niche but requires improvements in security posture and privacy compliance to meet modern standards and build greater trust with users.

E

European Packaging Institutes Consortium

epic-packaging.eu

47

The European Packaging Institutes Consortium (EPIC) is a pan-European organization representing national packaging institutes and their members, including retailers and raw material manufacturers. Established in 2002, EPIC focuses on fostering cooperation, education, innovation, and information exchange within the packaging industry to promote sustainable and responsible packaging practices. The consortium is a member of the World Packaging Organisation and operates primarily from Czechia. The website serves as an informational and networking platform for members and stakeholders in the packaging sector. Technically, the website is built on the Orchard CMS platform and utilizes modern front-end technologies such as jQuery, Bootstrap, Owl Carousel, and Animate On Scroll libraries. The site demonstrates good mobile optimization and SEO practices but lacks some advanced accessibility features. Performance is moderate, with no critical technical issues detected. The website is fully accessible without any WAF or security blocking mechanisms. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML content. However, it lacks visible security headers and explicit security or privacy policies. No incident response or vulnerability disclosure information is provided. Contact information is clearly presented, enhancing business credibility. Overall, the security posture is adequate but could be improved by implementing additional security headers and formal policies. The overall risk assessment indicates a trustworthy and professional website with minor gaps in privacy compliance and security best practices. Strategic recommendations include adding comprehensive privacy and cookie policies with consent mechanisms, enhancing security headers, and publishing incident response contacts to improve trust and compliance.

P

První obalová

prvni-obalova.cz

47

První obalová is a Czech Republic-based manufacturing company specializing in custom and standard packaging solutions. Established since 1998, the company offers comprehensive packaging services including development, construction, testing, export packaging, and sales of packaging materials. The website reflects a professional business presence with clear service offerings and partnerships with leading European packaging firms such as Jiffy Packaging. The technical infrastructure is based on Joomla CMS with UIkit framework, incorporating modern analytics tools like Google Analytics and Google Tag Manager. The website is mobile-optimized and well-structured, providing a good user experience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy or cookie policies. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency. Overall, the domain age and WHOIS data support the legitimacy of the business, with no suspicious patterns detected.

D

Dřevoplast Ludvík s.r.o.

drevoplast.com

45

Dřevoplast Ludvík s.r.o. is a Czech family-owned manufacturing company specializing in plastic packaging and components, with over 30 years of experience serving diverse industrial sectors including automotive, food, chemical, cosmetic, healthcare, and beekeeping. The company operates both manufacturing and e-commerce channels, offering custom production and a range of plastic products. The website is professionally designed, mobile-optimized, and provides clear contact information and social media presence, reflecting a mature digital presence. Technically, the website uses modern JavaScript and CSS technologies with Google Tag Manager for analytics. It is served over HTTPS with cookie consent mechanisms in place, demonstrating good privacy compliance. However, the absence of security headers and lack of a dedicated security policy or incident response information indicate areas for improvement in security posture. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy and consistency with the company's claimed long history. Despite this, the website content and business information appear credible and trustworthy. Overall, the site scores well on content quality, privacy compliance, and business credibility but should address domain registration transparency and enhance security headers. Strategic recommendations include implementing security headers, publishing security and incident response policies, verifying domain registration details, and continuing to enhance privacy and security practices to strengthen trust and compliance.

D

DIXI, výroba plastových obalů a.s.

dixi.cz

47

DIXI, výroba plastových obalů a.s. is a Czech manufacturing company specializing in the production of plastic packaging including bottles, canisters, and containers. With over 30 years of market presence, the company offers both stock products and custom manufacturing solutions, supported by in-house tooling and design capabilities. The website reflects a medium-sized enterprise with a strong focus on quality and customer customization, supported by ISO 9001 and HACCP certifications. Technically, the website uses a modern CMS (Animato), integrates Google Analytics and Tag Manager for tracking, and employs common JavaScript libraries such as jQuery and Photoswipe. The site is mobile-optimized and provides clear navigation and professional content. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit incident response information. WHOIS data is unavailable, which impacts trustworthiness and requires further verification. Overall, the website is professional, content-rich, and compliant with privacy regulations, serving industrial and commercial clients in the manufacturing sector.

W

Williams & Cruise trading s.r.o.

nemovitostinahorach.cz

42

Williams & Cruise trading s.r.o. operates the website nemovitostinahorach.cz, specializing in real estate sales and rentals in mountain regions of the Czech Republic. The company targets individuals and families seeking properties in these areas, offering services that simplify property search and purchase. The website is professionally designed using WordPress with the Divi theme, featuring good SEO practices and structured data for enhanced search visibility. The technical infrastructure is modern and includes common plugins for galleries and GDPR compliance. Security posture is adequate with HTTPS enabled, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages found. Overall, the website presents a trustworthy and professional image consistent with a small real estate business.

R

Residence Sova s.r.o.

ostrov-byty.cz

42

Residence Sova s.r.o. operates a real estate project website focused on offering residential properties in the city of Ostrov, Czech Republic. The website presents a professional and consistent brand image, targeting local clients interested in acquiring housing in a prime location. The business model centers on real estate development and sales, with a relatively new domain registered in 2022, aligning with the project's timeline. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a modern and SEO-conscious infrastructure. The site is hosted likely by WEDOS, a known Czech hosting provider, and employs HTTPS with a cookie consent mechanism, reflecting basic compliance with privacy regulations.

W

Williams & Cruise trading s.r.o.

skivillage.cz

43

SkiVillage.cz is a Czech real estate website offering 12 modern mountain apartments located in Loučná pod Klínovcem in the Krušné hory region. The business operates under the company Williams & Cruise trading s.r.o., founded in 2019, targeting individuals interested in mountain property investments or vacation homes. The website is built on WordPress using the Divi theme, enhanced with SEO and GDPR compliance plugins, reflecting a moderate level of digital maturity. The site is well-structured with comprehensive metadata and cookie consent mechanisms, supporting privacy compliance. Security posture is adequate with HTTPS enabled, though security headers and explicit policies are absent. Overall, the site presents a professional and trustworthy front for a small real estate business with room for security and compliance enhancements.

C

CEELMDirect

ceelmdirect.com

43

The website CEELMDirect.com presents minimal content with no visible business description, contact information, or policies. The domain is registered with GoDaddy.com, LLC since early 2022, indicating a relatively new presence. The site uses modern web technologies such as React and Google Fonts but lacks substantive content or SEO optimization. Security posture is weak with no security headers or privacy policies implemented, and no evidence of GDPR compliance. The absence of contact details and business information reduces trust and credibility. Overall, the site appears to be underdeveloped or a placeholder with limited digital maturity and security readiness.

The website www.espaceshop.cz is an e-commerce platform currently unavailable due to maintenance. The site uses ineShop version 8.9.5.27 as its CMS. The content is minimal, consisting only of a maintenance notice in Czech and English, with no interactive elements or business information visible. The WHOIS data is unavailable, indicating privacy protection or lack of public registration data. This limits the ability to verify ownership or legitimacy. Technically, the site lacks visible security headers, HTTPS information, or privacy policies, which are critical for e-commerce trust and compliance. Overall, the site shows low digital maturity and poor content quality.

The website www.davidsport.cz is currently inaccessible, displaying a minimal HTML page with the message 'Too many connections', which strongly suggests the presence of a Web Application Firewall (WAF) or server-side rate limiting. Due to this, no meaningful content, metadata, or business information could be extracted. The WHOIS query returned no registration data, indicating either privacy protection or domain registration issues. This lack of data prevents verification of domain ownership, age, or legitimacy. The absence of privacy policies, contact information, and security headers further limits the ability to assess compliance and security posture. Overall, the website's digital maturity appears low, with critical gaps in accessibility, security, and transparency.

V

Vojtěch Kulhánek s.r.o.

vseprositi.cz

45

Vojtěch Kulhánek s.r.o. operates the website vseprositi.cz, a specialized e-commerce platform focused on selling sewing machines, textiles, and related accessories. Established in 1991, the company has a long-standing presence in the Czech retail market, offering both online and physical store services including product sales, servicing, and installment payment options. The website is well-structured, professionally designed, and targets hobbyists and professionals interested in sewing and textile crafts. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and Google Tag Manager, with a good level of mobile optimization and SEO. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though it lacks some advanced HTTP security headers and published security policies. The absence of WHOIS data for the domain is a notable gap, slightly reducing trustworthiness, but the overall business credibility remains high due to transparent contact information and customer trust signals. Recommendations include enhancing security headers, publishing incident response information, and adding a security.txt file to improve transparency and security readiness.

V

Vojtěch Kulhánek s.r.o.

vseprokolo.cz

49

Vseprokolo.cz is an established Czech retail business specializing in the sale and servicing of bicycles, e-bikes, and cycling accessories. Operating since 1991 with an online presence since 2005, the company offers a wide range of products from well-known brands and provides additional services such as bicycle maintenance and installment payment options. The website is professionally designed with good navigation and content relevance, targeting cycling enthusiasts, families, and children. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager, ensuring a responsive and user-friendly experience. Security posture is moderate with HTTPS enabled and a cookie consent mechanism in place, but lacks visible security headers and a published privacy policy, which are areas for improvement. WHOIS data is unavailable, which impacts domain trustworthiness, but the business information on the site appears consistent and credible. Overall, the site is safe for general audiences and demonstrates a solid e-commerce retail presence in the cycling sector.

G

Gabriela Schenelová

ge-style.cz

43

GE-style.cz is a Czech Republic-based small retail business specializing in stylish women's clothing, operating both an online e-commerce platform and a physical store in Rohatec. The website offers a variety of women's fashion products including dresses, tops, skirts, and accessories, targeting female customers interested in fashionable apparel. The business presents clear contact information, including email and physical addresses, and maintains active social media profiles on Facebook and Instagram, enhancing customer engagement and trust. Technically, the website is built on a custom or proprietary e-commerce platform, utilizing modern frontend technologies such as JavaScript, CSS, and HTML5, with frameworks like Bootstrap and Tiny Slider. The site is mobile-optimized with good SEO practices and includes cookie consent mechanisms compliant with GDPR. Performance is moderate, and accessibility features are basic but functional. From a security perspective, the website enforces HTTPS and employs cookie consent for privacy compliance. However, it lacks visible security headers and does not provide incident response or vulnerability disclosure information, which are areas for improvement. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, although the website content and business information appear legitimate and consistent with a small retail operation. Overall, GE-style.cz demonstrates a solid business and technical foundation with good privacy compliance but could enhance its security posture and domain transparency to improve trust and resilience against potential threats.

C

Cyklodiskont.cz

cyklodiskont.cz

49

Cyklodiskont.cz is an established Czech e-commerce retailer specializing in bicycles, electric bikes, and cycling accessories. The company emphasizes over 20 years of experience in the cycling industry, offering a wide range of products with fast delivery and free shipping over a certain order value. The website is professionally designed with clear navigation, product categorization, and integration of modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Ecomail. The technical infrastructure includes HTTPS, Bootstrap framework, and CDN usage, indicating a mature digital presence. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Security posture is generally good with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published privacy or security policies. Overall, the site presents a trustworthy shopping experience for cycling enthusiasts in the Czech Republic, but would benefit from improved transparency and compliance documentation.

B

Bikers Crown

bikerscrown.cz

43

Bikers Crown is a well-established motorcycle retail and wholesale company operating primarily in the Czech Republic and neighboring countries. With over 25 years of experience, it offers a wide range of motorcycle clothing, accessories, spare parts, and related products through both physical stores and an e-commerce platform. The company holds a strong market position as a leading distributor and retailer in Central and Eastern Europe, supported by official distributorships and a broad brand portfolio. Technically, the website is built on Joomla CMS with a modern tech stack including jQuery, Bootstrap, and Google Analytics. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. Cookie consent mechanisms are implemented, reflecting some level of privacy compliance, although explicit privacy and terms of service pages are missing. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and formal security policies. No critical vulnerabilities or WAF blocking were detected. The WHOIS data confirms the domain's legitimacy and long-term operation, consistent with the company's stated history. Overall, the website presents a professional and trustworthy front for Bikers Crown, though improvements in privacy policy transparency and security headers would enhance compliance and security posture.

M

Mlýny J. Voženílek, spol. s r.o.

mlynyvozenilek.cz

47

Mlýny J. Voženílek, spol. s r.o. is a Czech milling company with over 100 years of tradition, specializing in the production of high-quality wheat and rye flour as well as animal feed. Positioned as one of the largest mill product manufacturers in the Czech Republic, the company serves both professional bakers and households, emphasizing natural, additive-free products. The website reflects a medium-sized manufacturing business with a clear focus on quality and tradition, supported by multiple certifications and a professional online presence. Technically, the website employs modern web technologies including Google Analytics for tracking and Google reCAPTCHA for form security. The site is mobile-optimized with good SEO practices and a moderate performance profile. However, it lacks some advanced security headers and comprehensive privacy and cookie policies, which are critical for GDPR compliance and user trust. From a security perspective, the site uses HTTPS and basic form protections but does not expose security policies or incident response contacts. The absence of WHOIS data limits domain legitimacy verification, although the business content and certifications suggest a legitimate operation. Overall, the security posture is moderate with room for improvement in privacy compliance and security best practices. Strategically, the company should focus on publishing clear privacy and cookie policies, enhancing security headers, and providing incident response information to improve trust and compliance. Verifying and publishing domain registration details would also strengthen legitimacy. These steps will help align the digital presence with the company's strong business reputation and support long-term growth and security.

S

Střední škola řemesel a Základní škola, Hořice

ouhorice.cz

48

The website www.ouhorice.cz represents Střední škola řemesel a Základní škola, Hořice, a its associated educational institutions including a secondary vocational school, primary schools, boarding facilities, and a canteen. The institution serves students and parents primarily in the Czech Republic, providing a range of educational services with a focus on crafts and basic education. The site is well-structured with clear navigation and consistent branding, targeting local community members and prospective students. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Google Fonts, and Slick Slider for UI elements. The site is mobile-optimized and uses HTTPS, indicating a reasonable level of digital maturity. However, no CMS or hosting provider information was detected, and performance is moderate. Accessibility features are basic, and SEO optimization is good. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance and user trust. The WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency and trustworthiness. No WAF or blocking mechanisms were detected, and no vulnerabilities or exposed sensitive data were found in the provided content. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and transparent domain registration information to strengthen trust and security posture.

A

A-Sport

a-sport.cz

48

A-Sport is a Czech Republic-based entertainment and hospitality business operating since 2005, specializing in bowling, ricochet, restaurant services, and event hosting. The website presents a professional and user-friendly interface with clear navigation and multiple reservation forms that collect personal data with GDPR consent and reCAPTCHA protection. The business targets local customers seeking leisure and corporate event services. Technically, the site uses modern web technologies including Google reCAPTCHA and jQuery, with good mobile optimization and SEO practices. Security posture is moderate with HTTPS enforced and form protections, but lacks explicit security headers and published privacy or cookie policies. WHOIS data is unavailable, limiting domain legitimacy verification. Overall, the site is functional and trustworthy but would benefit from enhanced compliance and security transparency.

ASAT svět hodinek is a small retail business operating physical stores in Hradec Králové and Prague, Czech Republic, specializing in the sale and servicing of watches from various renowned brands. The website provides clear information about their product offerings, store locations, and contact details, targeting general consumers interested in purchasing quality watches. Technically, the website is built on the MYOB CMS platform, uses jQuery and Google Analytics for tracking, and is served over HTTPS, ensuring secure connections. However, the site lacks privacy and cookie policies and does not implement security headers, indicating room for improvement in compliance and security practices. The absence of WHOIS data due to privacy protection reduces transparency but is not uncommon for small retail businesses. Overall, the website is functional, moderately optimized, and trustworthy for its business purpose.

A

Akzente4you - Marion Sieber - Webdesign- / Internet Agentur in Offenburg

kuscheluniversum.de

48

Akzente4you is a small, professional internet agency based in Offenburg, Germany, specializing in web design, web development, SEO, and e-commerce solutions primarily for small businesses in the local region. The company offers fixed-price website packages and personalized consulting services, emphasizing responsive and modern website design. Their market position is that of a trusted local service provider with a focus on affordability and quality. Technically, the website is built on WordPress with a modern theme and plugins, including cookie consent management, and is hosted likely by 1&1 IONOS. The site is mobile-optimized and SEO-friendly, with structured data and social media integration. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. Recommendations include enhancing security headers, publishing security policies, and adding a vulnerability disclosure mechanism.

J

Jiráskův Hronov

jiraskuvhronov.eu

45

Jiráskův Hronov is a well-established cultural festival focused on amateur theatre with international participation, held annually in Hronov, Czech Republic. The website serves as an information portal for the 95th edition of the festival scheduled for 2025, providing program details, news, and educational seminar information. The festival targets theatre enthusiasts, participants, and cultural audiences, positioning itself as a significant event in the Czech amateur theatre scene. Technically, the website employs a traditional tech stack including jQuery 1.10.2, Google Tag Manager, Google Analytics, and UI libraries such as Fancybox and BxSlider. The site is mobile-optimized with good SEO practices and structured data markup, although some technologies like jQuery are outdated and could pose security risks. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site uses HTTPS with good SSL configuration and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security policies, incident response contacts, and modern security headers. No vulnerabilities or exposed sensitive data were detected in the HTML content. The privacy policy is present but basic, and no terms of service or vulnerability disclosure information is found. Overall, the website is professional, trustworthy, and safe for general audiences. It demonstrates good privacy compliance and business credibility but could improve its security posture and transparency by adding dedicated security and incident response information. Strategic updates to technology and security headers would enhance resilience and trust.

B

Boost IT - Posouváme váš růst v online světě

boostit.cz

47

Boost IT is a small Czech technology service provider specializing in custom web development, e-commerce solutions, web applications, domain and server management, and graphic design. The company positions itself as a partner to businesses seeking to grow their online presence with tailored IT solutions and quality branding. The website reflects a professional and modern digital presence built on WordPress, leveraging SEO and cookie consent tools to enhance user experience and compliance. The technical infrastructure is solid, hosted with WEDOS, and includes modern fonts and Google Tag Manager for analytics. Security posture is good with HTTPS enabled and cookie consent implemented, though the absence of explicit privacy and terms of service pages and missing security headers suggest room for improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Vodovody a kanalizace Božanov, s.r.o. is a small municipal utility company operating the water supply and sewage infrastructure for the municipality of Božanov in the Czech Republic. The company focuses on the production and distribution of potable water, wastewater collection, and treatment, as well as maintenance and emergency repairs of water and sewage networks. The website reflects a local utility service provider with a clear business focus and municipal ownership. Technically, the website is built on WordPress using the Sydney theme and Elementor page builder, with Google Analytics integrated for visitor tracking. The site is mobile-optimized and provides a good user experience, although it lacks comprehensive privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. WHOIS data is unavailable, limiting domain trust verification. Overall, the website is functional and professional but would benefit from improved privacy compliance and security practices.

T

Technické služby Police nad Metují, s.r.o.

tspolice.cz

45

Technické služby Police nad Metují, s.r.o. is a municipal service organization responsible for maintaining cleanliness, infrastructure, and public utilities in the city of Police nad Metují, Czech Republic. Their services include road maintenance, public lighting, green area upkeep, wastewater treatment, and housing management. The company operates primarily as a local government service provider with a small organizational size and a domain age consistent with its founding in 2010. The website provides relevant business information and contact details, targeting local citizens and stakeholders. Technically, the website uses legacy JavaScript libraries such as jQuery 1.10.2 and jQuery UI, along with Google Analytics and Google Tag Manager for tracking. The site appears to be custom-built without a known CMS and shows basic mobile optimization and accessibility. SEO is basic but functional, with proper meta tags and structured data for organization and website schema. From a security perspective, the site uses HTTPS but lacks visible security headers and advanced security policies. No critical vulnerabilities or exposed sensitive data were detected, but the use of outdated libraries and absence of cookie consent mechanisms are notable gaps. GDPR compliance is partially addressed with a dedicated GDPR page but no cookie banner or explicit privacy policy link on the homepage. Contact information is clearly presented, but no incident response or security policy details are available. Overall, the website is functional and trustworthy for its municipal service purpose but would benefit from technical and security improvements to enhance compliance, user experience, and protection against emerging threats.

Muzeum Merkur is a small cultural museum located in Police nad Metují, Czech Republic, dedicated to the history and exhibition of Merkur construction sets and related historical artifacts. The museum attracts visitors interested in historical toys and regional tourism, offering exhibitions, play areas, and information about local attractions. The website is built on WordPress and uses common web technologies and plugins, providing a generally good user experience with clear navigation and mobile optimization. However, it lacks explicit privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The WHOIS data is unavailable, likely due to privacy protection, which is common for small entities but slightly reduces transparency. Overall, the website is functional and informative but could improve its security posture and privacy compliance to enhance trust and regulatory adherence.

M

Muzeum náchodska

muzeumnachod.cz

46

Muzeum Náchodska is a cultural institution operating one of the oldest museums in the Czech Republic, managing multiple heritage sites in the Náchod region. The website reflects a professional presence with a focus on museum exhibitions and public education. The technical infrastructure is based on WordPress CMS with standard plugins and modern web fonts, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though security headers and explicit privacy policies are missing. The absence of WHOIS data limits domain legitimacy verification, but the website content and social media presence support its authenticity. Overall, the site is suitable for general audiences with safe content and moderate tracking.

K

Knihovna města Police nad Metují

knihovna-police.cz

47

Knihovna města Police nad Metují is a municipal library serving the local community in Police nad Metují, Czech Republic. The website provides comprehensive information about library services, events, children's programs, and access to an online catalog. It targets a general audience including children and adults, positioning itself as a key local educational and cultural resource. The business model is typical for a public library, likely funded by local government and public funds. Technically, the website uses a modern frontend stack including jQuery, Bootstrap, Swiper.js, and mmenu.js, built on the Galileo CMS platform. It is mobile optimized and accessible, with a good user experience and clear navigation. Performance is moderate, with no major technical issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks visible security headers and published privacy or terms of service pages. No WHOIS data is available, which reduces domain trustworthiness. No incident response or vulnerability disclosure information is provided. Overall, the security posture is adequate but could be improved with additional headers and transparency. The overall risk assessment is moderate. The site appears legitimate and trustworthy based on content and contact information, but the absence of WHOIS data and privacy documentation are notable gaps. Strategic recommendations include publishing privacy and terms policies, adding security headers, and providing incident response contacts to enhance trust and compliance.

O

Obecní dům, a.s.

obecnidum.cz

44

Obecní dům, a.s. operates a prominent cultural venue located in the center of Prague, specializing in hosting concerts, exhibitions, and renting halls for various events. The website reflects a well-established presence with a focus on classical music and cultural programming, targeting both local and international visitors. The business model centers on event hosting and venue rental, positioning itself as a key player in Prague's hospitality and cultural sector. Technically, the website is built on WordPress with modern frameworks like Bootstrap and includes SEO optimizations and mobile responsiveness. Security posture is solid with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms, though some security policy documentation and incident response details are absent. The absence of WHOIS registrant data due to privacy protection slightly impacts transparency but does not detract from the overall legitimacy and professionalism of the site. Strategic recommendations include enhancing contact transparency, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance.

G

Global Legal Chronicle

globallegalchronicle.com

47

Global Legal Chronicle is a specialized media platform focused on delivering legal and financial news globally, targeting legal professionals and business stakeholders. The website operates on a subscription-based model with premium content gated behind membership tiers, supplemented by advertising revenue. Technically, the site is built on WordPress with a modern tech stack including Google Analytics and multiple ad networks, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and consent management but lacks advanced security headers and DNSSEC. Privacy compliance is partial with cookie consent but missing explicit privacy and terms policies. Overall, the domain is legitimate with consistent WHOIS data and a mature registration history. Strategic improvements in privacy transparency and security policies would enhance trust and compliance.

W

Weinhold Legal, s.r.o. advokátní kancelář

weinholdlegal.com

47

Weinhold Legal is a prominent Czech and Slovak business law firm specializing in a broad range of legal services including banking, finance, corporate law, compliance, cyber security, and dispute resolution. The firm positions itself as a partner to its clients, delivering imaginative and flexible legal solutions to support business success. It holds a strong market position supported by multiple legal awards and rankings in prestigious directories such as Legal 500 and Chambers Europe. Technically, the website is built on WordPress with a modern tech stack including jQuery and Google Analytics. The site is moderately optimized for performance and mobile devices, with good SEO practices and clear navigation. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site enforces HTTPS and uses Google Analytics with an opt-out mechanism, but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the professional content and contact information mitigate this risk. Overall, the website demonstrates a solid business credibility and professional presentation but should enhance its security posture and privacy compliance to align with best practices and regulatory requirements.

D

Domena.pl sp. z o.o.

emkielce.pl

41

Radio eM Kielce operates as a regional media and radio broadcasting platform serving the Kielce area and the Świętokrzyskie region in Poland. The website provides a broad range of local news, sports, cultural events, and community information, targeting local residents and listeners. The business model is primarily advertising-supported, with additional engagement through social media and patronage. The domain is well-established since 2014, indicating a mature presence in the local media market. Technically, the website is built on Joomla CMS, utilizing common web technologies such as jQuery and Video.js, and integrates multiple advertising and analytics services including Google Analytics, Google Tag Manager, and InMobi CMP. The site is mobile-optimized with a responsive design and clear navigation, though accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. However, it lacks explicit security headers and DNSSEC is not enabled, which are areas for improvement. No security policy or incident response information is published, which could enhance trust and preparedness. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is professional, trustworthy, and suitable for a general audience with no adult or questionable content. The domain registration is consistent and legitimate, supporting the site's credibility. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing security and incident response policies to strengthen security posture and user trust.

A

AV studio d.o.o.

av-studio.si

47

AV studio d.o.o. is a well-established Slovenian creative agency specializing in marketing, branding, digital campaigns, and multimedia production. With over 40 years of experience, the company serves a diverse client base ranging from small to large businesses, emphasizing innovation, creativity, and strong client relationships. The website reflects a professional and consistent brand image, targeting businesses seeking comprehensive marketing solutions. Technically, the site is built on WordPress with modern tools such as Visual Composer, Google Tag Manager, and multiple analytics platforms, demonstrating a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with detailed cookie policies and consent management. Overall, the domain registration and WHOIS data support the legitimacy and trustworthiness of the business.

W

Wohin reisen trotz Corona? Wohin dürfen die Österreicher noch reisen?

wohinreisen.at

45

Wohinreisen.at is a niche travel advisory website focused on providing Austrian travelers with up-to-date information about travel restrictions and safety during the COVID-19 pandemic. The site offers travel safety tips, a travel light system (Reiseampel), flight affiliate calendars, and relevant travel articles. It targets Austrian users seeking reliable travel guidance during uncertain times. The business model relies on content marketing and affiliate partnerships with flight booking platforms. Technically, the site is built on WordPress with popular plugins such as LayerSlider, Revolution Slider, and WPBakery Page Builder, integrating Google Tag Manager and Analytics for tracking. The site is mobile optimized and has a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled but lacks security headers and incident response transparency. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns with the website's Austrian focus and shows no suspicious patterns.

O

OBALOVÝ INSTITUT SYBA, s.r.o.

obalovaakademie.cz

48

OBALOVÁ AKADEMIE is a Czech Republic-based educational initiative specializing in seminars, workshops, and certification programs within the packaging industry. It serves a broad professional audience including packaging technicians, purchasing managers, quality and ecology managers, and logistics specialists. The project is operated by OBALOVÝ INSTITUT SYBA, s.r.o., an established entity since 2013, with a strong network of industry partners and media collaborators. The website is professionally designed, bilingual (Czech and English), and provides comprehensive information about its offerings and partners. Technically, the site is built on Orchard CMS, employs modern JavaScript libraries such as jQuery and Bootstrap, and integrates Google Tag Manager for analytics and marketing purposes. Security posture is solid with HTTPS enforced and a GDPR-compliant cookie consent mechanism, although some security headers and explicit incident response policies are absent. Overall, the site demonstrates a mature digital presence with good privacy compliance and trustworthy business information.

L

LOGIK, s.r.o.

log.cz

48

LOGIK, s.r.o. is a well-established Czech printing company operating since 2000, specializing in offset and digital printing, packaging, and visual communication services. The company holds recognized certifications such as ISO 9001:2016, ISO 14001:2016, FSC, and PEFC, positioning itself as a leading printing complex in the Czech Republic. The website reflects a professional business presence with good content quality and clear navigation, targeting business clients seeking comprehensive printing solutions. Technically, the site uses modern frontend technologies including Bootstrap and jQuery, with moderate performance and good mobile optimization. Security measures include Google reCAPTCHA and a cookie consent mechanism, but lack explicit security headers and published security policies. Overall, the site is trustworthy and safe, with no adult or questionable content detected.

M

MLÝN HERBER spol. s r.o.

mlynherber.cz

40

MLÝN HERBER spol. s r.o. is a Czech milling company with a rich history dating back to 1362, currently operating modern and traditional milling facilities producing wheat and rye flour as well as feed products. The company has invested significantly in modernization and ecological programs, holding multiple certifications such as FSSC 22000 and HACCP, which underscore its commitment to quality and safety. The website reflects a professional and consistent brand image, targeting both industrial and retail customers. Technically, the site is built on WordPress with modern plugins and offers good mobile optimization and user experience, though some improvements in security headers and privacy compliance are recommended. The security posture is moderate with HTTPS enabled and no visible vulnerabilities, but lacks explicit security policies and headers. Overall, the domain registration and website content are consistent and legitimate, supporting a medium-sized manufacturing business in the Czech Republic.

K

KAVALIERGLASS, a.s.

kavalier.cz

43

Kavalierglass, a.s. is a well-established Czech manufacturer specializing in borosilicate glass products with a history spanning approximately 180 years. The company offers a diverse product portfolio including household glassware under the SIMAX HOME brand, professional laboratory glassware under SIMAX PROFESSIONAL, and design collections under KAVALIER DESIGN. Their market position is strong within Europe, targeting both consumer and professional segments. The website reflects a professional and consistent brand image with multilingual support and clear navigation.

H

Hotel Veba Broumov

hotelveba.cz

47

Hotel Veba Broumov is a boutique historic hotel located in Broumov, Czech Republic, housed in a villa built in 1927. It offers accommodation, a renowned restaurant, wellness, congress facilities, and leisure amenities targeting business and family clientele. The website is professionally designed with clear navigation and multilingual support, integrating modern booking and analytics technologies. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security headers. Privacy policy and cookie management are present but basic. WHOIS data is unavailable, likely due to privacy protection, which limits domain ownership verification but does not detract from the site's professional appearance and trustworthiness. Overall, the site presents a credible and user-friendly digital presence for the hospitality business.

Základní škola a mateřská škola Jetřichov is a small local educational institution in the Czech Republic providing primary and preschool education. The school is municipally operated and offers various educational and community services including school dining and after-school care. The website presents comprehensive information about the school, its projects, and contact details, targeting parents and the local community. Technically, the site uses a standard web stack with Bootstrap 3 and jQuery, hosted by Active24. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. No forms or tracking scripts are present, reducing privacy risks. Overall, the site is professional and trustworthy but would benefit from improved privacy compliance and security best practices.

T

Trockenmann s.r.o.

trockenmann.com

48

Trockenmann s.r.o. is a Czech Republic based marketing agency offering comprehensive marketing services including web design, graphic design, photo and video production, online and offline marketing, and SEO. The company targets businesses seeking to build their brand and increase client acquisition and revenue. The website is professionally designed using WordPress with Elementor and Bootstrap frameworks, demonstrating a modern and responsive digital presence. The technical infrastructure includes standard industry tools such as Google Tag Manager and complies with GDPR through a comprehensive cookie consent mechanism and privacy policy. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Overall, the website reflects a trustworthy and credible marketing agency with good digital maturity.

K

KASPER GROUP

kaspergroup.cz

39

KASPER GROUP is a Czech holding company overseeing family-owned businesses in the construction and manufacturing sectors, with subsidiaries specializing in metalworking, construction, and engineering. The company positions itself as a regional player with international product distribution, emphasizing industrial design and innovation. The website reflects a professional brand image with consistent subsidiary links and partnerships, such as with the EPO1 contemporary art center. Technically, the site uses common web technologies including jQuery, Google Analytics, and Typekit fonts, but relies on an outdated jQuery version which may pose security risks. The site is mobile-optimized with good navigation and content relevance but lacks explicit privacy, cookie, and terms of service policies, which impacts compliance and user trust. Security posture is moderate with HTTPS usage but no visible security headers or incident response contacts. WHOIS data is unavailable, reducing domain legitimacy verification confidence. Overall, the site is functional and professional but requires improvements in security, privacy compliance, and transparency to enhance trust and reduce risk.

O

Obec Otovice

otovice.cz

48

The website www.otovice.cz serves as the official municipal portal for the village of Otovice in the Karlovy Vary region of the Czech Republic. It provides residents and visitors with access to local government information, official documents, news updates, cultural events, and contact details for the municipal office. The site is built on the DotNetNuke CMS platform and uses common web technologies such as jQuery and Bootstrap, indicating a moderate level of technical maturity. The content is well-structured and relevant to its target audience, primarily local citizens and government officials. From a security perspective, the site is accessible over HTTPS, which is a fundamental security requirement. However, the absence of visible security headers and lack of published privacy or cookie policies indicate areas for improvement in compliance and security posture. The WHOIS data for the domain is unavailable, which limits the ability to fully verify domain legitimacy and trustworthiness. Despite this, the website content and contact information appear authentic and consistent with a local government entity. Overall, the site demonstrates a good level of professionalism and usability for its intended purpose but would benefit from enhanced security practices, privacy compliance measures, and transparency regarding domain registration. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, and clarifying domain registration details to improve trust and compliance.

O

Obec Křinice

krinice.cz

49

Obec Křinice is the official website of the municipality of Křinice, a small village in the Czech Republic. The site provides residents and visitors with municipal news, event calendars, official documents, contact information, and accommodation options. It serves as a local government portal focused on community engagement and information dissemination. The website is well structured, mobile optimized, and uses modern web technologies such as jQuery and Bootstrap. However, it lacks some compliance elements such as a privacy policy and terms of service pages. The WHOIS data for the domain is missing, which limits the ability to fully verify domain legitimacy, though the website content and contact details appear authentic for a municipal entity.

O

Obec Božanov

obecbozanov.cz

48

Obec Božanov operates an official municipal website serving the local community and visitors with comprehensive information about the village, local government activities, events, and practical information. The site is well-structured, professionally designed, and provides clear contact details and official notices, positioning it as a trusted source for municipal information in the Czech Republic. The technical infrastructure leverages common web technologies such as jQuery, Bootstrap, and Swiper.js, ensuring a responsive and accessible user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data is typical for Czech domains and does not detract from the site's legitimacy. Overall, the website demonstrates a mature digital presence appropriate for a small government entity.

O

Obec Vernéřovice

vernerovice.cz

38

Obec Vernéřovice operates an official municipal website serving the local community in the Czech Republic. The site provides comprehensive information about the municipality, including news, events, official documents, contact details, and community services. It targets residents and visitors seeking local government information and community engagement. The business model is typical for a small government entity focused on public service and communication. Technically, the website uses a modern frontend stack including jQuery, Bootstrap, Swiper.js, and a CMS platform likely Ocelot. The site is mobile optimized and presents a good user experience with clear navigation and relevant content. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site enforces HTTPS and uses common JavaScript libraries without exposing sensitive data. However, it lacks important security headers and does not provide a security.txt or vulnerability disclosure policy. Privacy compliance is weak due to the absence of a privacy policy and terms of service, though a cookie consent mechanism is present. Overall, the website is trustworthy and professional in appearance and content but would benefit from improved security practices and privacy documentation. The lack of WHOIS data reduces domain trust assessment confidence but does not negate the legitimacy suggested by the content and contact information.

S

Úvod | Svicky.cz

svicky.cz

45

Svicky.cz is a Czech Republic based e-commerce website specializing in the retail sale of candles and related products. The website targets general consumers interested in purchasing candles online. The business model is typical of small retail e-commerce, leveraging multiple delivery service integrations such as Packeta, PPL, and Cpost to facilitate product shipment. The website is built using common JavaScript libraries including jQuery, Fancybox, and Slick Carousel, and integrates Google Maps API for location services. Tracking and analytics are implemented via Google Tag Manager and Microsoft Clarity, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and CSRF tokens in place, but lacks comprehensive security headers and formal privacy and terms policies. The absence of WHOIS data reduces trustworthiness from a domain registration perspective, but the website content and technical setup appear legitimate and professional for a small retail business. Strategic recommendations include publishing privacy and terms policies, enhancing security headers, and adding incident response and vulnerability disclosure information to improve compliance and trust.

K

KatMedia s.r.o.

katyd.cz

44

Katolický týdeník is a Czech Catholic weekly news publication operated by KatMedia s.r.o., providing news and cultural content related to the Catholic Church in the Czech Republic and abroad. The website is professionally designed with a clear structure, offering subscription services and advertising opportunities. It targets Czech-speaking audiences interested in religious and societal news. Technically, the site uses modern web technologies including Google reCAPTCHA, Facebook SDK, and a custom or unknown CMS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data reduces domain trustworthiness, but the website content and branding indicate a legitimate media entity. Overall, the site is safe, compliant with GDPR, and provides a positive user experience.