High-risk security reports

The website mt-nabytek.cz currently serves as a placeholder indicating that the domain is registered, with no substantive content or business information presented. The domain has been registered since 2009, suggesting a stable registration history, but the lack of content limits the ability to assess the business or its market position. The site uses Google Analytics and Google Tag Manager for tracking, indicating some level of digital infrastructure, but no privacy or cookie policies are present to inform users about data collection or compliance with GDPR. From a technical perspective, the site includes basic tracking scripts but lacks visible security headers or HTTPS status information, which raises concerns about security posture. The minimal content and absence of contact or business details reduce trustworthiness and business credibility. No forms, social media links, or contact information were found, limiting user engagement and transparency. Security-wise, the absence of HTTPS and security headers, combined with no visible privacy or cookie policies, indicates a low security maturity level. There are no indications of incident response policies or vulnerability disclosures. The WHOIS data is consistent and legitimate, with no privacy protection or suspicious patterns detected. Overall, the website is in an early or inactive state, with critical gaps in content, security, and compliance. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, providing clear contact information, and enhancing website content to improve trust and user experience.

S

SNOWBOARD ZEZULA – Vybavení na snowboard, splitboard, wakeboard, bike

snowboard-zezula.cz

43

Snowboard Zezula operates as a specialized e-commerce and physical retail business focused on snowboarding, wakeboarding, biking, longboarding, and skateboarding equipment primarily serving customers in the Czech Republic. The website presents a comprehensive product catalog with detailed navigation and a professional design, targeting sports enthusiasts and active lifestyle consumers. Technically, the site employs modern JavaScript libraries, Google Tag Manager, Microsoft Clarity, Facebook SDK, and Sentry for error tracking, indicating a mature digital infrastructure. However, the absence of WHOIS data and lack of visible privacy and cookie policies reduce overall trust and compliance posture. Security-wise, the site uses HTTPS and some best practices but lacks important security headers and explicit incident response or vulnerability disclosure information. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security transparency to improve trustworthiness and regulatory adherence.

A

artLab poskytuje služby v oblasti vizuální komunikace

artlab.cz

41

artLab.cz is a small Czech Republic based visual communication service provider specializing in logo design, corporate visual identity, website creation, advertising, print materials, and presentations. The website is minimalistic, consisting of a single image and basic descriptive metadata, lacking interactive elements, contact information, or policy documents. The technical infrastructure appears basic with no detected CMS or advanced technologies, hosted on vas-hosting.com, and shows no evidence of HTTPS or security headers in the provided data. Security posture is weak due to absence of HTTPS, security policies, and privacy compliance indicators. The domain is well-established since 2007, indicating legitimacy and stability. Overall, the site is functional but lacks modern web standards, security best practices, and user engagement features.

S

Sdružení pro iLiteraturu, z. s.

ilipodcast.cz

46

The website www.ilipodcast.cz represents a cultural and educational podcast project operated by Sdružení pro iLiteraturu, z. s., a Czech non-profit organization. The platform focuses on literary discussions, exploring how literature reflects contemporary societal issues. It targets literature enthusiasts, academics, and students, providing podcast episodes funded by cultural grants and European funds. The site is well-branded, professionally designed, and offers rich, relevant content with a clear navigation structure. Technically, the site employs modern JavaScript libraries such as jQuery and Owl Carousel, integrates analytics tools like Matomo and Google Tag Manager, and implements a cookie consent mechanism. The site is mobile-optimized and performs moderately well, though accessibility features could be enhanced. The absence of a CMS or hosting provider details limits deeper infrastructure insights. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks visible security headers and formal privacy or security policies. No WHOIS data is available, which reduces domain trustworthiness, though the website content and organizational details suggest legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site presents a low-risk profile with good content quality and moderate technical maturity. Strategic improvements include publishing privacy and terms of service policies, enhancing security headers, and improving accessibility compliance to strengthen trust and compliance posture.

The website www.estaregistrierung.org is a German-language service focused on assisting travelers from Visa Waiver Program countries with their ESTA (Electronic System for Travel Authorization) applications for entry into the United States. It provides detailed information about the ESTA process, requirements, costs, and FAQs, along with an online application form and status checking service. The site targets German-speaking travelers seeking a streamlined and supported ESTA application experience. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript with jQuery, and integrates third-party services such as Tawk.to for live chat support and Google Analytics for visitor tracking. The site is mobile-optimized and structured for good SEO and user navigation. Security-wise, while HTTPS is implied, the site lacks visible security headers and explicit cookie consent mechanisms, which are areas for improvement. The WHOIS data for the domain is not publicly available, indicating privacy protection, which is common but reduces transparency. Overall, the site presents a professional and trustworthy front for its niche service but could enhance its security posture and privacy compliance to increase user trust and regulatory alignment.

A

A Plus Hostel & Hotel

aplus-hostel.cz

48

A Plus Hostel & Hotel operates a budget accommodation service located in the heart of Prague, Czech Republic. The business targets individual travelers, families, groups, and school trips, offering affordable rooms ranging from single to eight beds with shared bathroom facilities. The hostel emphasizes convenience with 24/7 reception, Wi-Fi, kitchen facilities, luggage storage, and paid parking options. The website reflects a small hospitality business with a focus on accessibility and customer convenience. Technically, the website is built on WordPress using the Elementor page builder and several plugins including Rank Math SEO and Complianz GDPR compliance tools. It integrates Google Analytics for visitor tracking and Google Maps for location display. The site is mobile-optimized and includes structured data for enhanced SEO. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, indicating GDPR compliance. However, explicit security headers are not evident, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is unavailable, likely due to privacy protection, but the domain and website content align with the claimed business location and industry. Overall, the website presents a professional and trustworthy online presence for a small hospitality business. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and publishing security policies to improve trust and compliance.

L

loudmark

loudmark.cz

41

Loudmark is a Czech-based comprehensive graphic and digital studio established in 2010, specializing in identity creation, web development, campaigns, and video production for both Czech and international clients. The website showcases a professional portfolio with numerous projects, reflecting a strong market presence in the creative media sector. Technically, the site is built on WordPress, utilizing modern web technologies including Google Analytics and Mailchimp integration, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced, but lacks important security headers and explicit privacy and incident response policies. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency. Overall, the site is professional and trustworthy from a content perspective but would benefit from enhanced security and privacy compliance measures.

V

Všehrd - Spolek Českých Právníků

vsehrd.cz

42

Všehrd is a historic Czech student legal association primarily operating within the Faculty of Law at Charles University. It focuses on organizing lectures, educational events, moot court competitions, and providing a platform for student projects. The website reflects a well-established non-profit organization with a clear educational mission and a strong presence in the Czech legal student community. Technically, the website uses a traditional jQuery-based stack with additional UI components and social media integrations, offering a moderate performance and good mobile optimization. Security-wise, the site uses HTTPS but lacks visible security headers and privacy policies, which are areas for improvement. The absence of WHOIS data reduces domain trust verification, but the website content and partner listings suggest legitimacy. Overall, the site is professional and functional but could enhance compliance and security transparency.

NOMOS Lawyers International is a European legal network comprising member law firms dedicated to delivering comprehensive and cost-effective legal advice. The network emphasizes practical results and client partnership, serving businesses and legal professionals seeking cross-border legal expertise. The website presents member firms across multiple European countries and highlights recent meetings and events, reflecting an active and collaborative network. Technically, the website is built on CMS Made Simple, employs HTTPS, and integrates Google Analytics for visitor tracking. The site is moderately optimized for mobile and accessibility, with a clean design and clear navigation. However, it lacks advanced SEO features and security headers, which could be improved to enhance security and search visibility. From a security perspective, the site enforces HTTPS but does not implement common security headers or publish privacy and cookie policies, indicating gaps in compliance with GDPR and best practices. No incident response or vulnerability disclosure information is provided. The WHOIS data is not publicly available due to EURid privacy restrictions, which is typical for .eu domains and justified for professional entities. Overall, the website is professional and trustworthy with good business credibility but would benefit from enhanced privacy compliance and security hardening to reduce risk and improve user trust.

V

VŠEM

eshopvsem.cz

44

The website eplatbyvsem.cz functions as an official payment and administrative portal for VŠEM, a Czech educational institution. It provides students and staff with access to tuition payment, study administration, educational literature, professional courses, campus information, and academy programs. The site is well-branded and consistent with the parent institution's identity, targeting primarily students and affiliates of VŠEM. The business model revolves around supporting educational services through digital payment and administrative tools. Technically, the website is built on the Contao Open Source CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. No advanced analytics or tracking scripts were detected, indicating a minimal user tracking approach. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie consent mechanisms, which are important for GDPR compliance. No WHOIS data is publicly available, which reduces transparency but does not necessarily indicate illegitimacy. The site links to official VŠEM domains and social media channels, reinforcing trustworthiness. Overall, the website presents a moderate risk profile with room for improvement in security headers, privacy compliance, and WHOIS transparency. Strategic recommendations include implementing security headers, adding cookie consent, publishing clear privacy and security policies, and improving accessibility features to enhance user trust and regulatory compliance.

N

NProduction

npp.marketing

49

NProduction (NPP) is a Czech marketing and production agency specializing in creating sustainable growth strategies for brands. Their services include full marketing, UX/UI design, branding, business development, and production. The company targets businesses and brands seeking creative and comprehensive marketing solutions, positioning itself as a niche player with a focus on partnership and diversity. Technically, the website is built on Webflow CMS, leveraging modern web technologies such as Google Fonts and jQuery, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced but lacks advanced security headers and visible privacy compliance mechanisms. Overall, the website is professional and trustworthy but could improve privacy and security transparency. The WHOIS data is unavailable due to privacy protection, which is common and justified for this business type. The domain is actively maintained, supporting legitimacy. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and enhancing accessibility and incident response information.

A

Art D – Grafický atelier Černý, s. r. o.

tiskjednoduse.cz

46

Art D – Grafický atelier Černý, s. r. o. operates the website tiskjednoduse.cz, providing online printing services including offset, digital, and large format printing with additional binding and installation options. Established since 1997, the company targets businesses and individuals seeking professional printing solutions in the Czech Republic. The website features interactive price calculators and an e-shop, supporting a user-friendly experience. Technically, the site uses legacy jQuery 1.8 alongside modern analytics and marketing tools such as Google Analytics, Hotjar, and AddThis. Cookie consent is implemented to comply with GDPR regulations. Security posture is moderate with HTTPS usage implied but lacks visible security headers and explicit incident response policies. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and business information appear professional and credible. Overall, the site is well-designed, content-rich, and suitable for its target audience.

M

www.motyleksiazkowe.pl | Dystrybucja wyjątkowych książek - www.motyleksiazkowe.pl

motyleksiazkowe.pl

45

The website www.motyleksiazkowe.pl is a Polish online bookstore specializing in the distribution and sale of niche and unique books. It targets Polish-speaking customers looking for interesting books for themselves or as gifts, with a broad catalog covering various literary genres and educational materials. The business operates on an e-commerce model using the PrestaShop CMS platform, offering detailed product listings, pricing, and discounts. The site includes standard e-commerce features such as a shopping cart, wishlist, and category navigation. Technically, the site employs modern JavaScript libraries including jQuery, Google Analytics, Google Tag Manager, and Facebook SDK, indicating a moderate level of digital maturity. The website is mobile-optimized and has good SEO practices, though accessibility features are basic. Security-wise, the site uses HTTPS and has a cookie consent banner, but lacks visible security headers and explicit privacy or terms of service pages, which are important for compliance and user trust. WHOIS data for the domain is unavailable from the official .pl registry, which reduces trustworthiness slightly but may be due to registry policies or query timing. Overall, the site presents a professional and trustworthy e-commerce presence but would benefit from enhanced transparency and security disclosures.

The website kalendarvh.cz is a specialized archival project by the Václav Havel Library, providing detailed day-by-day programs of Václav Havel's presidency from 1989 to 2003. It serves historians, students, journalists, and the general public interested in Czech modern history. The project is non-commercial and educational, with a niche market position focused on cultural heritage preservation. Technically, the site uses a simple stack including jQuery 2.2.4, Google Fonts, and Google Analytics, hosted on a Czech hosting provider. The site is accessible, with moderate performance and basic mobile optimization. Security posture is moderate with HTTPS enabled but lacks security headers and explicit privacy or cookie policies. No contact or incident response information is provided, limiting transparency and user trust. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening.

B

Kaisar888 Link Terpercaya Penghasil Rupiah, Gacor Bosku

bayarearanchweddings.com

48

The website bayarearanchweddings.com hosts content promoting Kaisar888, an online slot gambling affiliate service targeting Indonesian users. The domain name is unrelated to the content, indicating possible domain repurposing or misuse. The site uses AMP technology for fast mobile delivery but lacks fundamental business and compliance information such as privacy policies, terms of service, or contact details. The domain is very recently registered (March 2024) and does not align with any established business history, reducing trustworthiness. Technically, the site is lightweight and mobile-optimized but lacks security best practices such as DNSSEC, security headers, and visible HTTPS enforcement. Overall, the security posture is weak, and the site exhibits suspicious patterns including use of URL shorteners for critical links.

J

Jednota tlumočníků a překladatelů

jtpunion.org

47

Jednota tlumočníků a překladatelů (JTP) is a Czech non-profit professional association representing translators, interpreters, and audiovisual translators. The organization provides a membership platform, professional directories, events, training, and advocacy for its members. The website serves as a resource for clients seeking qualified language service providers and for professionals interested in joining the association. The site is well-branded and clearly targets the Czech professional translation and interpreting community. Technically, the website is built on WordPress using the Kadence theme and several professional plugins including Advanced Custom Fields Pro and The Events Calendar. The site is mobile-optimized, uses HTTPS, and includes structured data for SEO and event promotion. Performance is moderate with good accessibility and SEO practices. From a security perspective, the site enforces HTTPS and uses secure forms but lacks some advanced security headers and a cookie consent mechanism. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected or unavailable, but the domain age and content consistency support legitimacy. Overall, the website is professional, secure, and compliant with basic privacy regulations. Strategic improvements include adding cookie consent, security headers, and publishing security policies to enhance trust and compliance.

L

Language school AJODA

ajoda.eu

41

Language school AJODA is a small educational institution specializing in Czech language courses, particularly summer courses for foreigners in the Bohemian-Moravian Highlands. The website is built on WordPress using the Divi theme and incorporates common web technologies such as Google Analytics and Google Tag Manager for tracking. The site is accessible without any WAF or security challenges, indicating good availability. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership. Security posture is moderate with HTTPS enabled but lacks important security headers and privacy compliance documentation. Overall, the website presents a professional and focused educational service but would benefit from enhanced security and compliance measures.

A

Art D – Grafický ateliér Černý s.r.o.

art-d.cz

45

Art D – Grafický ateliér Černý s.r.o. is a Czech family-owned printing company with over 28 years of experience, specializing in both small and large format printing, finishing, and packaging services. The company targets business clients primarily in the Czech Republic and Slovakia, offering comprehensive printing project services from design to delivery. The website is built on the Webflow platform, integrating Google Tag Manager and reCAPTCHA for analytics and security. While the site is professionally designed and content-rich, it lacks explicit privacy and cookie policies, and no WHOIS domain registration data is available, which raises concerns about domain legitimacy. Security posture is moderate with HTTPS and form protections but missing security headers and incident response information. Overall, the site presents a credible business front but requires improvements in compliance and domain registration transparency.

N

Nadace Sekyra Foundation

sekyrafoundation.cz

44

Nadace Sekyra Foundation is a Czech non-profit organization founded by entrepreneur Luděk Sekyra, focusing on supporting human rights, liberal values, philosophical and critical thinking, and intergenerational dialogue about planetary responsibility. The foundation collaborates with prestigious academic institutions and civil society organizations internationally, positioning itself as a reputable entity in the non-profit educational sector. The website is built on WordPress with modern JavaScript libraries and includes multimedia content such as videos and event information, reflecting a mature digital presence. Security posture is good with HTTPS and no visible vulnerabilities, but lacks some security headers and formal privacy and cookie policies. WHOIS data is unavailable, which slightly reduces trust but is mitigated by the professional site and transparent business information. Overall, the foundation demonstrates a strong commitment to its mission with a well-structured online presence.

F

Felix a spol. AK, s.r.o.

akf.cz

44

Felix a spol. AK, s.r.o. is a well-established Czech law firm with over 30 years of experience, offering comprehensive legal services in multiple languages including Czech, English, German, and Polish. The firm positions itself as a trusted partner to clients, emphasizing expertise in GDPR compliance, legal education through Moot Court events, and pro bono work. Their market position is strengthened by memberships in international legal networks and active participation in legal community events. Technically, the website is built on WordPress with modern plugins and integrates Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is evident with dedicated GDPR and cookie policy pages, and contact information is clearly provided. Overall, the website reflects a credible and professional legal services provider with a solid digital footprint.

D

Dřevoterm, s.r.o.

drevoterm.cz

46

Dřevoterm, s.r.o. is a Czech manufacturing company specializing in shading technology and wood products including planed wood and construction timber. The company targets construction professionals and carpenters within the Czech Republic, offering a broad product range and related services such as impregnation and drying. The website is professionally designed with clear navigation and relevant business content, supporting its market presence as a regional manufacturer. Technically, the website employs legacy JavaScript libraries such as jQuery 1.7.1 and uses common UI plugins like Fancybox and Tooltipster. While the site is accessible and uses HTTPS, it lacks modern security headers and cookie consent mechanisms, indicating room for improvement in security and privacy compliance. The site is moderately optimized for performance and mobile devices but could benefit from modernization. From a security perspective, the site shows basic good practices such as HTTPS usage but lacks explicit security policies, incident response information, and updated libraries, which could expose it to vulnerabilities. The absence of WHOIS data limits domain trust evaluation, though the presence of company registration details and contact information supports legitimacy. Overall, the website presents a trustworthy business front with moderate technical maturity and security posture. Strategic improvements in security headers, privacy compliance, and technology updates are recommended to enhance trust and resilience.

P

Pejskar & spol., spol. s r.o.

pejskar-uzeniny.cz

44

Pejskar & spol., spol. s r.o. is a well-established Czech company specializing in the production of traditional fermented meat products, including one of the first fermented salamis named Poličan. The company has a strong heritage dating back to 1887 and holds multiple national and regional quality certifications. The website serves as a digital storefront and informational portal targeting consumers interested in traditional Czech meat products. Technically, the site uses modern JavaScript libraries and Google services, providing a moderate performance and good mobile optimization. However, the absence of privacy and cookie policies indicates compliance gaps. Security posture is moderate with HTTPS usage but lacks advanced security headers and explicit vulnerability disclosure mechanisms. The missing WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

M

Město Broumov

broumov.net

38

Město Broumov operates an official municipal website serving residents and visitors with comprehensive local government information, news, cultural events, and public services. The site is positioned as the authoritative digital presence for the city of Broumov in the Czech Republic, targeting local citizens and tourists. Key services include municipal updates, event calendars, contact details for city offices, and online forms for administrative requests. The business model is typical for a government entity, focusing on public information dissemination and community engagement. Technically, the website employs a modern CMS platform (vismoWeb5) with integration of Google services such as Analytics, reCAPTCHA, and Translate. The site is HTTPS secured and includes cookie consent mechanisms compliant with GDPR. The design is responsive and accessible, with good SEO practices and clear navigation. However, some security best practices like HTTP security headers are not visibly implemented. From a security perspective, the site demonstrates a moderate security posture with HTTPS enforcement and form protections via reCAPTCHA. There is no evidence of exposed sensitive data or vulnerable libraries. However, the absence of a published security policy, incident response contacts, or vulnerability disclosure reduces transparency and preparedness. The missing WHOIS data for the domain is a concern for domain legitimacy verification, though the official content and contact details support authenticity. Overall, the website is a well-maintained municipal portal with good content quality and user experience. The main risks relate to incomplete domain registration transparency and minor security hardening opportunities. Strategic recommendations include improving security headers, publishing security policies, and verifying domain registration details to enhance trust and compliance.

A

AnalogStore.cz

analogstore.cz

49

AnalogStore.cz is a specialized e-commerce retailer focused on analog photography products including cameras, films, photo printers, and accessories. The company positions itself as an authorized reseller of FUJIFILM products, targeting photography enthusiasts and analog camera users primarily in the Czech Republic. The website offers additional services such as photo scanning, printing, framing, and camera rentals, enhancing its value proposition in the niche analog photography market. Technically, the site is built on the Shoptet e-commerce platform, leveraging modern JavaScript libraries and third-party analytics tools with a cookie consent mechanism to comply with GDPR. Security posture is adequate with HTTPS enforced and secure login forms, though explicit security headers and a public security policy are absent. WHOIS data is not publicly available, indicating privacy protection, which is common for retail businesses but limits domain age and registrant verification. Overall, the site is professional, trustworthy, and safe for general audiences.

G

Gymnázium Broumov

gybroumov.cz

42

Gymnázium Broumov is a public multi-year secondary school located in Broumov, Czech Republic, providing education primarily to local students. The website serves as an information portal for students, parents, and staff, offering news, schedules, educational programs, and contact points. The institution maintains a presence on social media platforms such as Facebook and YouTube, enhancing community engagement. The business model is typical of a public educational institution, focusing on delivering quality secondary education and related student activities. Technically, the website employs legacy JavaScript libraries such as jQuery 1.7.1 and jQuery UI, along with plugins like Fancybox and Tooltipster. While the site is functional and moderately optimized for mobile, it lacks modern security headers and cookie consent mechanisms, which are important for compliance and security. The website's SEO and accessibility are basic but sufficient for its audience. Hosting and CMS details are not explicitly identified. From a security perspective, the site uses HTTPS as indicated by URLs, but no security headers were detected in the provided data. The absence of a cookie consent banner and detailed privacy policy reduces GDPR compliance confidence. No incident response or vulnerability disclosure information is present. The WHOIS data is missing, which limits domain trust verification, but the website content and external references suggest legitimacy. Overall, the website is a functional and trustworthy educational resource with room for improvement in security posture and privacy compliance. Strategic enhancements in security headers, privacy policies, and updated technology stacks would strengthen its digital maturity and trustworthiness.

M

Město Broumov

broumov-mesto.cz

48

The website www.broumov-mesto.cz serves as the official digital presence of the town of Broumov, Czech Republic. It provides residents and visitors with municipal news, cultural event information, public service announcements, and contact details for various city departments. The site is well-structured, accessible, and includes features such as a search function, event calendar, and subscription form for newsletters. Social media integration with Facebook and YouTube enhances community engagement. Technically, the site uses the Vismo CMS platform, integrates Google Analytics for visitor insights, and employs Google reCAPTCHA to protect forms from abuse. The presence of a cookie consent mechanism and a detailed privacy policy indicates good privacy compliance. However, the absence of WHOIS data for the domain raises questions about domain registration transparency, which slightly impacts trustworthiness. No explicit security policy or incident response information is published, which could be improved to enhance security posture. Overall, the site is professional, secure, and serves its governmental function effectively.

B

Benediktinské opatství sv. Václava v Broumově

opatstvibroumov.cz

40

Benediktinské opatství sv. Václava v Broumově is a historic Benedictine monastery located in Broumov, Czech Republic, serving as a cultural and religious heritage site. The website provides comprehensive information about the monastery's history, visitor services including tours, accommodation, and event calendars. It targets tourists, cultural visitors, and the religious community, positioning itself as a regional cultural monument with national significance. The business model is non-profit, focusing on heritage preservation and public engagement. Technically, the website is built on WordPress using the Elementor page builder, incorporating modern web technologies such as jQuery, Swiper.js, and Google Fonts. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Performance is moderate, with room for improvement in accessibility and SEO. From a security perspective, the site enforces HTTPS and uses secure forms with validation. However, it lacks important security headers and a cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data limits domain trust assessment, but the website content and structure appear legitimate and consistent with its stated purpose. Overall, the website demonstrates a solid digital presence for a non-profit cultural institution but would benefit from improved privacy compliance features and enhanced security headers to strengthen trust and regulatory adherence.

P

Premium OOH, a.s.

premiumooh.com

45

Premium OOH, a.s. operates a premium digital out-of-home advertising network focused on innovative 3D billboards located in prime locations in Prague, Czech Republic. The company targets brands seeking high-impact advertising solutions in Central Europe. Their website reflects a modern, professional digital presence built on Nuxt.js and Tailwind CSS, offering good mobile optimization and user experience. Contact and company information is clearly presented, supporting business credibility. However, the absence of WHOIS data raises questions about domain registration legitimacy and age. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies, which are compliance gaps. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security transparency.

I

Ing. Kvasnička Jan

kvasnickajan.cz

30

Jan Kvasnička operates a professional website offering specialized services in usability analysis, conversion rate optimization, affiliate marketing, domain consulting, and mentoring. The business targets clients seeking to improve their online presence and e-commerce performance, positioning itself as a niche expert with a portfolio of satisfied clients. The website content is well-structured, professional, and consistent with the business focus. Technically, the website employs standard web technologies including Google Analytics and Twitter widgets. However, there is no evidence of HTTPS usage or advanced security headers, which limits the security posture. The site lacks privacy and cookie policies, which are important for GDPR compliance. Performance and mobile optimization are moderate, with room for improvement in accessibility and modern web standards. Security-wise, the absence of HTTPS and security headers is a significant concern. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The missing WHOIS data reduces trust in domain legitimacy, although the website content itself appears professional and business-oriented. Overall, the site demonstrates moderate risk with recommendations to improve security and compliance. Strategically, the business should prioritize implementing HTTPS, adding privacy and cookie policies, and enhancing security headers to protect user data and improve trust. Regular audits and updates to third-party scripts and tracking tools are also advised to maintain security and privacy standards.

The website www.multihub.cz is currently inaccessible beyond a maintenance placeholder page indicating that the site is undergoing maintenance. The only active content is a message in Czech stating 'Probíhá údržba webu' (Website under maintenance) with a link to the company PSHK s.r.o. No WHOIS registration data is available, which raises concerns about the domain's registration status or privacy protection. The lack of privacy policies, contact information, and security headers indicates a very low digital maturity and security posture. The site does not provide any business or service information, limiting the ability to assess market position or business model. Overall, the site appears inactive or in transition, with minimal technical implementation and no visible security or compliance measures.

1

10dencehispahard, S.L.

thexdoor.com

47

TheXDoor.com is a Spanish-based small business specializing in escape room entertainment services located in Valencia. The website offers immersive escape room experiences with cinematic special effects and themed ambientations, targeting a general audience interested in leisure and entertainment. The business has been established since 2014, supported by consistent domain registration data and localized content. Technically, the website is built on WordPress using Elementor and several popular plugins such as Yoast SEO and LayerSlider, indicating a moderate level of digital maturity. The site is mobile-optimized and includes SEO best practices, although accessibility features are basic. Security-wise, the site uses HTTPS and Google reCAPTCHA for form protection, but lacks DNSSEC and important security headers, which are recommended to enhance security posture. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

E

Escape World Σπύρος Παπανικολάου

escapeworld.gr

46

Escape World, established in 1991 and operated by Σπύρος Παπανικολάου, is a specialized retail business in Greece focusing on fishing, diving, hunting, and nautical equipment. It holds the exclusive representation of SEAC SUB in Greece, positioning itself as a key player in the niche market of underwater and outdoor sports equipment. The website serves as both an e-commerce platform and a brand presence, targeting consumers interested in these specialized products. The business model is retail-centric, leveraging both online and telephone sales channels, supported by clear contact information and a physical store location in Ηλιούπολη, Greece. Technically, the website is built on the PrestaShop platform, utilizing a variety of modules and modern web technologies including jQuery, Google Tag Manager, and Google Analytics 4. The site demonstrates good mobile optimization, SEO practices, and a moderate performance profile. The presence of cookie consent mechanisms and GDPR-compliant privacy policies indicates a mature approach to privacy and regulatory compliance. From a security perspective, the site enforces HTTPS with secure cookie attributes and includes a comprehensive cookie consent banner. However, explicit security policies and incident response contacts are not found, and there is no security.txt or vulnerability disclosure page. The site does not show signs of WAF or blocking mechanisms, allowing full content accessibility. Overall, the security posture is good but could be enhanced with additional transparency and advanced security headers. The overall risk assessment is low, with the site appearing trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic recommendations include implementing a security.txt file, adding incident response contact information, and enhancing accessibility and security headers to further strengthen the security posture and user trust.

Your Escape is a small hospitality business based in Leiden, Netherlands, specializing in interactive escape room experiences. The website presents a professional and engaging platform for customers to learn about and book their escape room adventures. The business has been operational since 2017, with a consistent domain registration and active online presence. Technically, the site is built on WordPress, leveraging popular plugins and analytics tools such as Google Analytics and Hotjar, indicating a moderate level of digital maturity. The website is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks some advanced security headers and explicit security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and well-maintained, suitable for its target audience of general consumers seeking entertainment.

E

Entered

entered.be

44

Entered is a small Dutch company specializing in immersive real-life horror games that provide intense, interactive storytelling experiences. Their website is professionally designed, multilingual, and optimized for SEO, reflecting a mature digital presence. The technical infrastructure is based on WordPress with modern plugins and performance optimizations, ensuring fast and mobile-friendly user experience. Security posture is good with HTTPS and reCAPTCHA implemented, though explicit security policies and incident response contacts are absent. Overall, the website is trustworthy and well-positioned in its niche market, targeting adult audiences seeking unique horror entertainment.

B

Brainiac

brainiac.gr

38

Brainiac.gr is a Greek-based entertainment business specializing in Escape Rooms experiences. The website is built on WordPress using the Divi theme and several related plugins, indicating a moderate level of technical maturity. The site is accessible without any WAF or security challenges and uses HTTPS, ensuring basic transport security. However, the absence of privacy and cookie policies, contact information, and security headers suggests gaps in compliance and security best practices. The content is primarily in Greek and targets a general audience interested in entertainment and team-building activities. Overall, the website presents a basic but functional online presence for a small business in the hospitality sector.

S

Start Play

startplay.es

48

Start Play is a specialized entertainment company based in Murcia, Spain, offering immersive live games such as Escape Rooms, Real Games, Murder Parties, and Escape Boxes. Established in 2020, the company targets a broad audience interested in interactive and social entertainment experiences. Their market position is that of a local niche provider with a focus on quality and customer engagement, supported by certifications like Calidad Turística and active social media presence. Technically, the website is built on WordPress with a modern tech stack including WooCommerce for e-commerce capabilities, and integrates SEO and analytics tools to enhance digital presence. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS, employs standard security headers, and uses GDPR-compliant cookie management, reflecting a solid security posture with no critical vulnerabilities detected. Overall, the website demonstrates a mature digital infrastructure suitable for its business model, with room for improvement in formal security policies and incident response documentation.

D

DarkPark

darkpark.com

46

DarkPark is a Dutch company specializing in high-quality escape room experiences located in Delft and Zoetermeer, with additional offerings of home adventure games. The website presents a professional and well-branded digital presence built on WordPress with WooCommerce for e-commerce functionality. The company targets escape room enthusiasts and general entertainment seekers, positioning itself as a top-tier provider in the hospitality and entertainment sector within the Netherlands. Technically, the site uses modern web technologies and includes GDPR-compliant cookie consent mechanisms, although it lacks a publicly accessible privacy policy and terms of service pages. Security posture is solid with HTTPS enforced and no obvious vulnerabilities detected in the content, but security headers could be improved. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and social media presence suggest an active and legitimate business. Overall, the site scores well on content quality and technical implementation but should address privacy and domain registration transparency to enhance trust and compliance.

E

Escaperoom Katwijk

escaperoomkatwijk.com

47

Escape Room Katwijk is a Dutch-based entertainment business specializing in immersive escape room experiences. The company offers multiple themed rooms inspired by popular series and original stories, targeting a broad audience including friends, families, and corporate groups. The website reflects a well-established local presence with multiple industry awards and positive customer testimonials, indicating strong market positioning within the hospitality sector. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern SEO tools like Yoast and tracking via Google Analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers, and no privacy or cookie policies are published, indicating compliance gaps. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening.

E

EXIT19.PL - Escape Room Wrocław

exit19.pl

47

EXIT19.PL is a small hospitality business operating an escape room entertainment service in Wrocław, Poland. The company offers thrilling escape room games targeting a general audience seeking fun and team-building activities. The website is built on WordPress and integrates modern technologies such as Google Tag Manager, Google Analytics, reCAPTCHA, and Cookiebot for consent management. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service pages found. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

E

Escaperoom

escaperoom.nl

45

Escaperoom.nl is a professionally operated Dutch escape room business established in 2013, offering immersive real-life escape room experiences primarily in the Utrecht province. The company positions itself as the market leader in the Netherlands with award-winning rooms and a strong reputation supported by thousands of positive reviews. Their services include multiple themed escape rooms, corporate event hosting, gift vouchers, and meeting facilities. The website is multilingual and designed with a modern WordPress CMS using the Divi theme, integrating advanced analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Mouseflow. Security posture is solid with HTTPS and DNSSEC enabled, though the site lacks visible cookie consent mechanisms and published security policies. Overall, the site demonstrates high professionalism and trustworthiness, with room for improvement in privacy compliance and security transparency.

T

The City Escape Room

thecityescaperoom.com

45

The City Escape Room is a small hospitality business offering physical escape room entertainment experiences in three major Spanish cities: Madrid, Barcelona, and Valencia. The website serves as a landing page directing users to city-specific subpages. The business appears to be relatively new, with domain registration dating back to early 2022, consistent with the business's likely founding date. The company targets a general audience interested in leisure and entertainment activities in Spain. Technically, the website is built using modern web technologies including Next.js and React, with DNS managed via Cloudflare. The site is moderately optimized for mobile devices and has a basic but consistent design. However, the website lacks visible privacy, cookie, or terms of service policies, and no contact information or social media links are present in the provided homepage HTML. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site does not show evidence of security headers or DNSSEC, and SSL configuration details are unknown but likely present given modern hosting practices. The absence of privacy and cookie policies and contact information reduces compliance and trustworthiness. No forms or data collection mechanisms were found on the homepage, minimizing immediate data protection concerns. Overall, the website is functional and safe for general audiences but would benefit from enhanced privacy compliance, improved security headers, and more transparent contact and business information to increase trust and regulatory adherence.

Escaparium is a small regional entertainment business specializing in premium escape room games with multiple locations in Quebec, Canada. The website presents a professional and consistent brand image with clear navigation and relevant content focused on team building and group activities. The technical infrastructure uses modern frontend technologies such as Bootstrap, jQuery, and Google Analytics, hosted on SiteGround. While the website is accessible and functional, it lacks critical compliance elements such as privacy and cookie policies, and no contact information is explicitly provided, which may impact user trust and regulatory compliance. Security posture is moderate with domain protections in place but missing DNSSEC and security headers. Overall, the website is suitable for its business purpose but requires improvements in privacy, security, and contact transparency.

The website roemhild.de serves as a minimalistic personal domain dedicated exclusively to email and XMPP chat communications. It does not operate as a commercial business but rather as a private communication channel, emphasizing privacy and voluntary communication. The site explicitly states that no personal data, log files, IP addresses, cookies, or analytics tools are used, reflecting a strong privacy stance. The provision of an OpenPGP key further supports encrypted communication, indicating a privacy-conscious user or owner. From a technical perspective, the website is simple, built with basic HTML and CSS, without any detected CMS, frameworks, or advanced technologies. There are no forms, scripts, or tracking mechanisms, which reduces the attack surface but also limits functionality. The site appears to have moderate performance and basic mobile optimization but lacks SEO and accessibility enhancements. No security headers or HTTPS status were provided, suggesting room for improvement in security hardening. Security-wise, the site demonstrates good privacy practices by not collecting user data and encouraging encrypted communication. However, the absence of formal privacy and cookie policies, security headers, and incident response information indicates gaps in compliance and security posture. The WHOIS data is minimal but consistent with the domain's personal use, showing no suspicious patterns. Overall, the site is low risk but could benefit from improved security and compliance documentation. Strategically, the site is a personal or small-scale communication platform with limited business relevance. Recommendations include implementing HTTPS, publishing formal privacy and cookie policies, adding security headers, and considering incident response contacts to enhance trust and compliance.

U

UnicanCzech s.r.o. and New Czech Education s.r.o.

educan.eu

46

Educan.eu operates as an educational platform offering free Czech language courses for foreigners residing in the Czech Republic. The courses are accredited by the Ministry of Education of the Czech Republic and financially supported by the Employment Service (Úřad práce). The business model focuses on providing accessible language education through in-person and online formats, targeting foreigners seeking integration and employment opportunities. The website demonstrates a solid market position within its niche, supported by government funding and official accreditations. Technically, the website is built on WordPress 6.8.1 using the Avada theme, complemented by standard plugins such as Complianz for GDPR compliance and Google Analytics for traffic monitoring. The site is mobile-optimized, accessible, and performs moderately well. The presence of cookie consent mechanisms and privacy policies indicates a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS and employs cookie consent banners, but lacks advanced security headers and publicly available security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is privacy protected, which is common for EU domains, and the domain appears legitimate based on business registration and website content. Overall, Educan.eu presents a trustworthy and professional online presence for an educational service with good compliance and security posture. Strategic improvements could include enhancing security headers and publishing explicit security policies to further strengthen trust and resilience.

The website trmwidget.eu currently serves as a placeholder with an 'under construction' page and minimal content. There is no business description, contact information, or policies available, which limits the ability to assess the company's market position or services. The domain is registered through a reputable registrar, Key-Systems GmbH, but lacks detailed registrant information. Technically, the site lacks modern features such as HTTPS, security headers, or analytics, indicating a very early stage of digital maturity. Security posture is weak due to absence of SSL and security best practices, and no privacy or cookie policies are present, which raises compliance concerns. Overall, the site presents a low trust profile and minimal business credibility at this time.

J

Jazykové kurzy a školy v ČR

jazykovky.cz

46

Jazykovky.cz is an online directory platform focused on listing language schools and courses in the Czech Republic. It provides users with a comprehensive search and filtering system to find language learning opportunities by language, course type, location, and other criteria. The platform also features student reviews and course comparisons, positioning itself as a valuable resource for language learners in the region. Technically, the website uses legacy JavaScript frameworks such as AngularJS 1.0.6 and jQuery 1.6.1, alongside modern tracking tools like Google Analytics, Facebook Pixel, and Google reCAPTCHA v3. While HTTPS is enforced and cookie consent is implemented, the site lacks visible security headers and uses outdated libraries, which could pose security risks. The absence of WHOIS data reduces domain trustworthiness, but the website content and structure indicate a legitimate educational service. Overall, the site offers good user experience and relevant content but would benefit from technical and security updates.

B

Benefit Group

benefit-plus.eu

48

Benefit Plus is a business-focused website offering cafeteria and e-voucher benefit solutions primarily targeting companies in the Czech Republic and Slovakia. It operates under the umbrella of Benefit Group, which manages multiple related projects and subsidiaries. The website presents a professional and consistent brand image with clear navigation to various service portals. However, it lacks publicly available privacy, cookie, or terms of service policies and does not provide direct contact information, which limits transparency and user trust. Technically, the site uses modern JavaScript modules and CSS with responsive design, providing a good user experience on mobile devices. There is no evidence of CMS usage or third-party analytics and tracking scripts, indicating a minimalistic technical footprint. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site lacks visible security headers and published security policies or incident response contacts. The domain WHOIS data is unavailable due to privacy protection or query failure, which reduces trustworthiness. No critical vulnerabilities or security issues are evident from the content, but improvements in security posture and compliance documentation are recommended. Overall, the website is safe and professional but would benefit from enhanced transparency, published policies, and improved security practices to increase trust and compliance with data protection regulations.

E

Edu Bears

edubears.pl

45

Edu Bears is an educational company specializing in innovative English language teaching methods for children, offering licensed solutions that combine fun and learning. The website positions itself as a niche provider in the education sector, targeting educators and institutions interested in English language acquisition for young learners. The business operates primarily in Poland and has been active since 2017, with a network of related educational brands and partner sites. Technically, the website is built on WordPress, leveraging modern SEO and multilingual plugins, and integrates marketing and analytics tools such as Google Tag Manager and Bing UET. The site is mobile-optimized and provides a cookie consent mechanism, though explicit privacy and terms of service policies are not detected in the provided content. Security posture is adequate with HTTPS enabled, but lacks some security headers and DNSSEC. Overall, the domain registration data is consistent and transparent, supporting the legitimacy of the business.

CTM Academy is a well-established Czech non-profit organization focused on providing individualized academic programs and international education preparation for children and students from early school age through high school graduation. The organization offers a comprehensive suite of services including online courses, Advanced Placement exam preparation, and study abroad support, positioning itself as a leader in talent development within the Czech educational landscape. The website reflects a professional and consistent brand image with strong trust signals such as testimonials and reputable partner logos. Technically, the website employs a mature technology stack including jQuery, Google Analytics, Facebook Pixel, and Hotjar, integrated with cookie consent mechanisms and reCAPTCHA for form security. While the site is mobile-optimized and SEO-friendly, some legacy JavaScript libraries pose potential security risks. The site uses HTTPS and standard security headers but lacks a published security policy or incident response information. From a security perspective, the site demonstrates good baseline practices such as encrypted connections and consent-based tracking but would benefit from modernizing its JavaScript dependencies and enhancing transparency around security policies. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the organization's profile, supporting legitimacy. Overall, CTM Academy's website is a secure, professional, and content-rich platform that effectively supports its educational mission. Strategic improvements in security policy publication and technical updates would further strengthen its security posture and trustworthiness.

P

Pavel Lorenc

pavellorenc.cz

47

Pavel Lorenc operates a specialized educational services website focused on e-learning course creation, LMS system design, and training primarily using Moodle and Articulate Storyline. The business targets corporate, private, and public sectors within the Czech Republic, positioning itself as a niche provider of modern e-learning solutions. The website is professionally designed, SEO optimized, and provides client testimonials to enhance trust. Technically, the site runs on WordPress with common plugins and frameworks, including Yoast SEO and Bootstrap, and uses Google Analytics for visitor tracking. Security posture is adequate with HTTPS enforced but lacks comprehensive security headers and cookie consent mechanisms. WHOIS data is unavailable, which raises concerns about domain registration transparency but does not detract significantly from the site's professional presentation. Overall, the site is safe, well-structured, and credible for its business domain.