High-risk security reports

S

STEM Ústav empirických výzkumů, z.ú.

stem.cz

49

STEM Ústav empirických výzkumů, z.ú. is a Czech non-profit analytical institute established in 1990, specializing in empirical research and analysis of societal trends, attitudes, and public opinion in the Czech Republic. The organization aims to provide high-quality feedback to support democratic development and evidence-based public policy. The website reflects a professional and consistent brand presence with a focus on research dissemination and public engagement. Technically, the website is built on WordPress using the Elementor page builder, enhanced with modern web technologies such as Google Fonts, Font Awesome, and SiteGround Optimizer for performance. The site is mobile-optimized and includes SEO best practices, although accessibility features could be improved. Google Analytics is used for visitor tracking, and a cookie consent mechanism is implemented to comply with privacy regulations. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, but lacks advanced security headers and visible security policies or incident response information. No vulnerabilities or suspicious elements were detected in the content or linked domains. The absence of WHOIS data due to privacy protection is common for non-profit entities and does not detract from the site's legitimacy. Overall, STEM's website presents a trustworthy and professional digital presence suitable for its research and public policy mission. Strategic improvements in security headers, accessibility, and transparency of privacy and security policies would further enhance its posture.

N

National Sample

nationalsample.com

48

National Sample is a market and social research sample provider specializing in Central and Eastern Europe and Thailand. The company offers panel management and sample provision services to researchers and businesses seeking reliable respondent sources. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. It supports multiple languages and regional partner sites, indicating a broad geographic reach. The business is relatively new, founded in 2024, with transparent domain registration and a clear market focus. Technically, the site uses modern web technologies including Google Tag Manager and reCAPTCHA for security and analytics. While HTTPS is properly configured, the site lacks some security headers and a cookie consent mechanism, which are areas for improvement. The absence of explicit incident response or vulnerability disclosure policies suggests a moderate security maturity level. Overall, the website presents a trustworthy and professional image with strong business credibility and good content quality. However, privacy compliance could be enhanced by adding cookie consent and publishing security policies. The domain registration and WHOIS data align well with the business claims, supporting legitimacy. Strategic security and compliance improvements would further strengthen the company's digital posture.

C

CONFESS Research s.r.o.

confess.cz

43

CONFESS Research s.r.o. is a Czech-based innovative and research agency specializing in consumer insights and market research with over 20 years of experience. The company offers a broad range of services including advertising measurement, brand perception studies, e-commerce research, and innovation workshops. Their market position is strong within the Czech Republic and Central European markets, targeting businesses seeking to understand consumer behavior and develop innovative products and services. The website is professionally designed, content-rich, and well-structured, supporting their business credibility. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Owl Carousel. It integrates Google Tag Manager, Google Analytics, and Leady tracking for marketing and analytics purposes. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security-wise, HTTPS is enforced, but the absence of key security headers and a formal incident response or vulnerability disclosure page indicates room for improvement. The security posture is solid but not exemplary, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is addressed with a comprehensive privacy policy and cookie policy, though a cookie consent mechanism is lacking. Contact information is clearly provided, enhancing trust. The missing WHOIS data is a concern for domain legitimacy and should be investigated further. Overall, CONFESS Research presents a professional and trustworthy online presence with a mature technical infrastructure. Strategic improvements in security headers, privacy consent mechanisms, and domain registration transparency would enhance their security posture and trustworthiness.

S

Super muži – magazín moderního muže

supermuzi.cz

43

Supermuzi.cz is a Czech language online magazine targeting modern men with content spanning automotive, housing, finance, health, and lifestyle advice. The website operates on WordPress with a moderate technical infrastructure including jQuery and Redux frameworks. The site is well structured with good mobile optimization and clear navigation, providing relevant and quality content for its niche audience. However, it lacks visible privacy and cookie policies, security headers, and incident response information, which are critical for compliance and security posture. The domain registration is consistent and appropriate for the business age, indicating legitimacy. Overall, the website is accessible without WAF or blocking mechanisms and contains safe content suitable for general audiences.

S

Home - styl doma

styldoma.cz

44

The website styldoma.cz is a Czech language lifestyle and home-related content platform, launched in late 2021. It targets a general audience interested in home styling, hobbies, and advice. The site is built on WordPress using the Newspaper theme and Yoast SEO plugin, indicating a moderate level of digital maturity with SEO optimization and mobile responsiveness. The technical infrastructure includes common web technologies such as jQuery and Google Fonts, hosted likely with Wedos, a Czech hosting provider. Security posture is basic, with no advanced security headers or policies detected, and no visible privacy or cookie policies, which may expose the site to compliance risks. The domain registration data is consistent with the website's regional focus and language, supporting legitimacy. Overall, the site is functional and professionally presented but lacks critical privacy and security features.

I

Instytucja Kultury Ars Cameralis Silesiae Superioris

industriada.pl

42

INDUSTRIADA is a well-established cultural festival focused on industrial heritage in the Silesian region of Poland. It is coordinated by the Muzeum Górnictwa Węglowego w Zabrzu and supported by regional institutions and public transport partners. The website serves as an information portal for the festival, providing event details, news, and partner information. The site is built on WordPress with common industry-standard technologies and integrates Google and Facebook tracking for analytics and marketing purposes. The content is professionally presented, targeting residents and visitors interested in industrial culture and history. Security posture is solid with HTTPS and DNSSEC enabled, though additional HTTP security headers and published security policies could improve trust. Privacy compliance is basic but includes a privacy policy and cookie consent mechanism. Overall, the website is credible, trustworthy, and serves its business purpose effectively.

Ś

ŚLĄSKA ORGANIZACJA TURYSTYCZNA

zabytkitechniki.pl

45

Szlak Zabytków Techniki is a regional cultural tourism portal managed by the Śląska Organizacja Turystyczna, promoting the Industrial Monuments Route in the Silesian region of Poland. The website offers a variety of services including educational materials, event listings, travel planning tools, and detailed information about cultural heritage sites. It targets tourists, educators, and cultural enthusiasts, positioning itself as a key regional player in cultural tourism and education. The business model is non-profit and focused on regional promotion and education.

O

Szlak Orlich Gniazd

orlegniazda.pl

42

The website 'Szlak Orlich Gniazd' serves as a regional tourism portal focused on the Silesian region of Poland, providing comprehensive information about tourist routes, attractions, events, and multimedia content. It targets tourists interested in cultural heritage, outdoor activities, and regional experiences. The site is supported by a consistent branding strategy and integrates modern web technologies such as Bootstrap, jQuery, and analytics tools like Google Tag Manager and Hotjar. Hosting is provided by home.pl S.A., a reputable Polish hosting provider. Technically, the website demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit security policies. Privacy compliance is limited due to the absence of a clear privacy policy and terms of service, though a cookie consent mechanism is present. Overall, the domain registration data aligns well with the website's regional focus and longevity, supporting its legitimacy. However, the lack of direct contact information and formal privacy/security documentation represents areas for improvement. Strategic enhancements in security headers, privacy disclosures, and contact transparency would strengthen trust and compliance.

S

Śląskie Smaki

slaskiesmaki.pl

44

The website slaskiesmaki.pl serves as a regional culinary tourism platform focused on the Silesian region of Poland. It offers a rich collection of traditional recipes, culinary trails, festival information, and promotion of local products. The site targets tourists and culinary enthusiasts interested in regional culture and gastronomy. The business model is informational and promotional, supporting regional tourism and cultural heritage. The domain is well-established since 2008, indicating a mature presence in its niche. Technically, the site employs a modern tech stack including jQuery, Bootstrap, Font Awesome, Google Tag Manager, and Hotjar for analytics and user behavior tracking. The CMS appears to be SonataCore or a similar Symfony-based system. Hosting is provided by OVH SAS, a reputable provider. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured navigation. From a security perspective, HTTPS is enabled, and no sensitive data is exposed in the HTML. However, DNSSEC is not enabled, and no security headers were detected in the provided data, which are areas for improvement. The cookie consent mechanism is present, but no explicit privacy policy or terms of service were found, which may impact GDPR compliance. No contact emails or phone numbers were found on the main page, limiting direct user communication. Overall, the site is safe, professional, and trustworthy for general audiences interested in culinary tourism. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing clear privacy and terms policies, and providing direct contact information to enhance trust and compliance.

C

CHAPS spol. s r.o.

chaps.cz

43

CHAPS spol. s r.o. is a Czech IT company specializing in the development, maintenance, and operation of software applications and systems primarily for the personal transportation sector, including rail and road transport. Established in 1997, the company holds a solid market position supported by partnerships with major transportation entities such as České dráhy and regional public transport companies. Their business model focuses on B2B software solutions, including timetable data management and ticketing systems. The website reflects a professional and consistent brand image with clear business information and active social media presence. Technically, the website employs legacy JavaScript libraries like jQuery 1.9.1 and jQuery UI, indicating potential modernization opportunities. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. SEO practices are adequately implemented with proper meta tags and Open Graph data. Hosting and domain registration are consistent with the company's history and location. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. The use of outdated JavaScript libraries may expose the site to vulnerabilities. No forms or sensitive data exposure were detected on the homepage, reducing immediate risk. The domain's WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the security posture is moderate but could benefit from enhancements in headers, consent management, and library updates. The overall risk assessment is low with no critical issues detected. Strategic recommendations include implementing security headers, updating JavaScript libraries, adding cookie consent banners, and publishing security and incident response policies to enhance trust and compliance. These steps will improve the company's digital maturity and security resilience while maintaining its strong market credibility.

D

DigiDay

uredni-deska.eu

46

DigiDay Czech, s.r.o. operates the website uredni-deska.eu, specializing in manufacturing and servicing electronic official notice boards primarily targeted at municipalities and local governments in the Czech Republic and Slovakia. The company positions itself as a market leader with over nine years of experience, offering high-quality, CE-certified digital signage solutions with advanced LEDWARE software for automated content management. They provide flexible financing options including 0% interest installment plans, and emphasize customer support with 24/7 monitoring and maintenance services. Technically, the website is built on a modern WordPress platform using Bootstrap for responsive design, jQuery, and Swiper for interactive elements. It integrates Google Tag Manager, Google Analytics, and reCAPTCHA for security and analytics, alongside a GDPR-compliant cookie consent mechanism via the Complianz plugin. The site demonstrates good SEO practices, mobile optimization, and accessibility at a basic level. From a security perspective, the site uses HTTPS with proper SSL configuration and employs standard security practices such as CAPTCHA on forms and cookie consent management. However, it lacks advanced security headers and explicit incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations, providing a positive user experience and clear business information. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and improving accessibility features to further strengthen compliance and trust.

D

DigiDay Czech s.r.o.

digitalninosice.cz

45

DigiDay Czech s.r.o. operates the website digitalninosice.cz, specializing in the sale and rental of digital LED advertising displays and electronic notice boards. The company targets B2B customers in the Czech Republic, offering innovative digital signage solutions with a strong market presence in the Moravia region. Their services include hardware sales, rental, technical support, and content management software. The website is professionally designed with clear navigation and good content relevance, supporting their business model effectively. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Google reCAPTCHA v3, hosted by Active24. Security posture is adequate with HTTPS and spam protection but lacks advanced security headers and incident response disclosures. Privacy compliance is addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website reflects a credible and trustworthy business with room for security and compliance enhancements.

S

Śląskie. Informacja Turystyczna Województwa Śląskiego

slaskie.travel

47

The website slaskie.travel serves as the official tourism information portal for the Silesian Voivodeship in Poland. It provides comprehensive information on regional attractions, cultural heritage, nature, events, accommodation, and gastronomy, targeting tourists and visitors interested in this region. The site is well-structured with multiple language options and accessibility features, indicating a mature digital presence. Technically, it employs modern web technologies including Bootstrap, jQuery, and various analytics and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy policy or terms of service detected. Overall, the domain age and country alignment support the legitimacy of the site as a regional government-affiliated portal.

Wewillweb.it is a small, specialized technology service provider focused on creating high-quality WordPress websites, online shops, and providing SEO and UX audits along with brand identity and graphic design services. The company emphasizes partnership with clients and serves Polish and European markets. The website is built on WordPress using the Salient theme and WPBakery Page Builder, with modern web technologies and good mobile optimization. Security posture is solid with HTTPS and DNSSEC enabled, though some advanced security headers and privacy compliance features are missing. No blocking or WAF challenges were detected, allowing full content analysis. Overall, the site presents a professional and trustworthy image with client testimonials and portfolio references.

I

IOB EV

iob-ev.com

43

IOB EV is an international non-profit organization dedicated to promoting natural swimming ponds and biological water treatment worldwide. Founded in 2009 and based in Bremen, Germany, it serves as an umbrella organization for 14 national associations and approximately 600 members globally. The organization focuses on education, quality management, research support, and organizing international congresses to advance the field of natural bathing waters. The website reflects a professional and consistent brand image, targeting experts, planners, and enthusiasts in the natural swimming pond sector. Technically, the website is built on a modern WordPress platform with a suite of plugins including WooCommerce, Contact Form 7, and Yoast SEO, ensuring good SEO and user experience. The site is mobile-optimized and uses Google reCAPTCHA v3 for form security. While performance is moderate, the site benefits from structured data and cookie consent mechanisms that comply with GDPR requirements. From a security perspective, the site uses HTTPS and implements reCAPTCHA for spam prevention. However, DNSSEC is not enabled and security headers are not explicitly detected, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were found. Privacy and cookie policies are comprehensive and clearly presented, supporting strong compliance. Overall, IOB EV presents a trustworthy and professional online presence with a solid business model and international reach. Strategic recommendations include enhancing DNS security with DNSSEC, adding security headers, and publishing a formal security policy to further strengthen trust and compliance.

F

FLORA URBANICA, s.r.o.

floraurbanica.com

45

Flora Urbanica is a Czech company specializing since 2013 in sustainable green infrastructure solutions including green roofs, green walls, and interior green walls. The company targets urban developers, architects, and environmentally conscious customers, offering both services and products through an e-commerce platform. Their market position is that of an established niche provider focused on ecological urban solutions. Technically, the website is built on WordPress with WooCommerce and uses modern tools like Google Tag Manager and reCAPTCHA, reflecting a moderate to good digital maturity. Security posture is solid with HTTPS and anti-bot measures, though some security headers and DNSSEC are missing. Privacy compliance is good with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the site is professional, trustworthy, and well-structured, supporting business credibility and user engagement.

Optigrün international AG is a well-established European leader in green roofing and roof garden solutions, boasting 50 years of expertise. The company offers a comprehensive range of innovative products and services aimed at enhancing urban ecological balance and sustainability. Their target audience includes architects, project planners, and specialized firms seeking professional green roof systems and consulting services. Technically, the website is built on TYPO3 CMS with Bootstrap framework, incorporating modern analytics and bot protection tools such as Matomo and Google reCAPTCHA. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, HTTPS is enforced and cookie consent mechanisms are in place, though explicit security policies and vulnerability disclosures are absent, suggesting room for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, but the lack of WHOIS data and domain registration transparency slightly reduces trust from a domain legitimacy perspective.

V

VulkaTec Riebensahm GmbH

vulkatec.de

49

VulkaTec Riebensahm GmbH is a German-based company specializing in the manufacture and distribution of volcanic plant substrates for sustainable greening projects, including urban landscaping, roof greening, and gardening. Positioned as a market leader in Europe with over 35 years of experience, the company combines high-quality product manufacturing with advanced logistics solutions, including their own silo fleet and pneumatic transport technology. Their business model includes both B2B services and a private customer online shop, targeting professional landscapers and private gardeners alike. Technically, the website is built on the Shopware CMS platform, leveraging modern web technologies and integrating Google Analytics 4 and a comprehensive cookie consent management system. The site is well-optimized for SEO, accessibility, and mobile responsiveness, providing a professional user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No signs of malicious content or blocking mechanisms were detected, and the WHOIS data aligns well with the business claims, indicating a legitimate and trustworthy domain registration. The company maintains active social media channels and provides clear contact information, enhancing credibility and customer engagement. Overall, VulkaTec demonstrates a mature digital presence with strong business credibility, good technical implementation, and compliance with privacy regulations, making it a reliable and professional online platform for their industry.

S

SedumTop

sedumtop.cz

42

SedumTop is a specialized company focused on cultivating plants for green roofs, primarily serving the Czech Republic market. Their offerings include pre-grown sedum carpets, cassettes, cuttings, and plants in multiplates, positioning them as a niche supplier in the green roofing industry. The website is professionally designed using WordPress with the Divi theme, indicating a moderate level of digital maturity. The technical infrastructure includes standard web technologies and Google Analytics for tracking. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy and cookie policies, which are critical for compliance and user trust. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security practices.

On The Green Move is an environmental advocacy movement focused on promoting Living Green through nature and social responsibility. The website presents a professional and consistent brand image with clear messaging about their mission and partner collaborations. Technically, the site uses modern frontend technologies such as Bootstrap and jQuery, providing a responsive and user-friendly experience. However, there is no evidence of a CMS or advanced backend infrastructure. Security posture is moderate with no visible vulnerabilities but lacks HTTPS confirmation and security headers. Privacy and cookie policies are absent, which impacts compliance and user trust. The WHOIS data is missing, raising concerns about domain legitimacy and longevity. Overall, the site is functional and informative but requires improvements in security, privacy compliance, and domain registration transparency.

S

Stichting Yuverta

platformurbangreening.eu

47

The European Platform for Urban Greening is a European educational and collaborative initiative focused on enhancing vocational skills and knowledge in urban greening, climate resilience, biodiversity, and well-being. It connects multiple Centres of Vocational Excellence across Europe, supported by Erasmus+ funding and coordinated by Stichting Yuverta in the Netherlands. The platform offers curricula development, training, and experience centers to promote sustainable urban landscaping practices. The target audience includes vocational education professionals, researchers, policy makers, and businesses involved in urban greening. Technically, the website is built on WordPress with modern web technologies, including lazy loading and Google Tag Manager for analytics with IP anonymization, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly with good content quality and navigation. Security posture is adequate with HTTPS enforced but lacks visible security headers and explicit security policies. Privacy compliance is supported by a cookie policy with consent mechanisms, though no dedicated privacy policy or terms of service pages were found. Overall, the domain registration aligns with the project timeline and shows no suspicious patterns, supporting legitimacy. The website is safe for general audiences and professionally presented.

První pozice s.r.o. is a Czech Republic based small technology company specializing in creating successful websites and e-shops, along with SEO and marketing services. The company targets local businesses seeking professional digital presence and marketing support. Their website demonstrates a professional design with clear navigation and relevant content focused on their core services. The technical infrastructure includes modern analytics and tracking tools such as Google Analytics, Facebook Pixel, and Smartlook, indicating a moderate level of digital maturity. However, the absence of WHOIS registration data for the domain www.prvnipozice.com raises concerns about domain legitimacy and ownership, which impacts overall trust. Security posture is moderate with HTTPS usage implied but lacking visible security headers and explicit security policies. Privacy compliance is basic with a privacy policy and cookie consent mechanism present but no terms of service or incident response information publicly available. Overall, the website is functional and professional but would benefit from enhanced security practices and clearer domain registration transparency.

J

Jakub Křibík

jakubkribik.cz

39

Jakub Křibík operates as a freelance programmer and coder specializing in custom internet websites, e-shops, and tailored projects, with additional operation of an online glass piggy bank shop. The business is small-scale, based in the Czech Republic, and has been active since 2007 with programming experience dating back to 2000. The website presents a professional image with clear service offerings, client references, and contact information, targeting businesses and individuals seeking bespoke web development solutions. Technically, the website uses a custom CMS (PIXCMS) and e-commerce platform (PIXSHOP), hosted on PIXHOST. The technology stack includes PHP, MySQL, jQuery, and Google Analytics for tracking. The site is mobile optimized and SEO friendly, though some technical improvements are recommended, such as updating jQuery and adding security headers. Performance is moderate, and accessibility is basic. From a security perspective, the site enforces HTTPS and uses reCAPTCHA in its contact form, but lacks explicit security headers and uses an outdated jQuery version, which could pose risks. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact information is comprehensive, enhancing business credibility. Overall, the website is trustworthy and professional but would benefit from enhanced security practices and privacy compliance to reduce risk and improve user trust.

P

PIXHOST s.r.o.

pixhost.cz

40

PIXHOST s.r.o. is a Czech Republic-based professional webhosting service provider offering reliable hosting solutions with free domain registration (.CZ, .EU). The company targets small to medium businesses and individuals seeking dependable web presence with features such as certified servers, daily backups, and uptime guarantees. The website demonstrates a consistent brand identity and provides clear contact information, supporting its credibility in the local market. Technically, the site uses a custom CMS (PIXCMS) and common JavaScript libraries like jQuery and Fancybox, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies, indicating room for compliance improvements. WHOIS data is unavailable, which slightly reduces trust but does not negate the legitimacy suggested by the website content and contact details. Overall, PIXHOST presents as a professional and trustworthy webhosting provider with a solid foundation but could enhance security and privacy transparency.

P

PIXMEDIA s.r.o.

pixmedia.cz

42

PIXMEDIA s.r.o. is a Czech Republic-based company specializing in professional web development, e-commerce solutions, custom programming projects, graphic and advertising services, and web hosting. The company targets businesses and individuals across the Czech Republic, offering tailored digital solutions with a focus on quality and customer satisfaction. Their market position is that of a well-established regional service provider with a comprehensive portfolio including proprietary platforms such as PIXCMS, PIXSHOP, and PIXHOST. Technically, the website demonstrates a mature digital infrastructure using modern JavaScript libraries like jQuery, Fancybox, and Swipe.js, integrated with Google Analytics and Google Tag Manager for analytics and marketing. The site is hosted on PIXHOST and runs on their proprietary CMS, PIXCMS. The website is mobile-optimized and SEO-friendly, with good accessibility features, though performance is moderate. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks visible security headers and published security or incident response policies, which are areas for improvement. The absence of privacy and cookie policies also indicates gaps in privacy compliance. Overall, the website is professional, trustworthy, and content-rich, but the lack of WHOIS data and privacy-related policies slightly reduces its trustworthiness. Strategic improvements in security headers, privacy compliance, and domain registration transparency are recommended to enhance the company's digital trust and security posture.

E

Elite Solutions

elitesolutions.cz

42

Elite Solutions is a Czech-based creative agency specializing in content marketing, creative campaigns, and digital marketing services. With over 13 years of experience, the company serves a diverse client base including banks, energy companies, and media brands. Their service portfolio includes content creation, copywriting, video production, mobile app development, and social media management. The website reflects a mature and professional business with a strong market presence in the Czech Republic and Slovakia. Technically, the site is built on October CMS and leverages modern web technologies such as Google Analytics, Facebook Pixel, and Google Tag Manager, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers could enhance protection. Overall, the site is well-designed, mobile-optimized, and provides clear contact information, supporting a trustworthy user experience.

E

Elite | Monday Lovers

elitesolutions.sk

40

Elite | Monday Lovers is a Slovak full-service advertising agency with approximately 15 years of experience, specializing in strategy, identity, campaigns, print, web design, social media, mobile applications, and PR. The company targets businesses seeking comprehensive marketing solutions and maintains a strong regional presence with notable clients and projects. Their website is professionally designed, multilingual, and showcases a portfolio of campaigns and client references. Technically, the site is built on OctoberCMS, uses modern web technologies including Google Tag Manager and Google Maps API, and is mobile optimized with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers are missing and no explicit security policy or vulnerability disclosure is present. Overall, the website is trustworthy, compliant with GDPR, and free of adult or questionable content.

VisionWorks is a small Czech Republic-based web development business with over 25 years of experience in creating websites, e-commerce platforms, and business systems. The website currently serves as a farewell message from the owner, indicating that no new projects are being accepted but existing clients will continue to receive support. The technical infrastructure is minimal, relying on legacy technologies such as jQuery 1.10.1 and Google Fonts, with no modern CMS or advanced frameworks detected. Security posture is weak, with no DNSSEC, no security headers, and use of outdated libraries. The website lacks privacy and cookie policies, and no contact forms or phone numbers are provided except for an email in the meta author tag. Hidden spammy adult links embedded in the HTML reduce trustworthiness and may negatively impact reputation. Overall, the site is functional but basic, with moderate business credibility but poor privacy and security compliance.

The website www.zaraguza-fb.cz is currently inaccessible, returning a 403 Forbidden error page which blocks access to any content. The lack of accessible content prevents any meaningful analysis of the business, its services, or its digital presence. The WHOIS lookup failed to return any registration data, suggesting the domain may be unregistered, expired, or protected by privacy services. This absence of registration information combined with the access restriction severely limits the ability to assess the legitimacy or trustworthiness of the domain. Technically, the site lacks visible security headers or HTTPS enforcement, and no metadata or scripts were detected. Overall, the website appears inactive or restricted, resulting in a very low trust and security posture score.

A

AGROFERT, a.s.

famyfakta.cz

49

The website famyfakta.cz serves as a corporate communication and media fact-checking platform for AGROFERT, a large Czech conglomerate. It aims to clarify misinformation and provide official company positions on various topics. The site is well-branded, consistent, and targets a general audience interested in media facts and corporate transparency. Technically, it is built on WordPress using Elementor and other modern plugins, hosted by Active24, and employs standard analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers could enhance protection. No direct contact information or explicit security policies are published, which could be improved for transparency and trust. Overall, the site is professional, compliant with GDPR, and trustworthy, with a strong connection to its parent company AGROFERT.

A

AGROFERT, a.s.

pribehjmenemagrofert.cz

43

Agrofert, a major Czech conglomerate founded in 1993, operates across agriculture, chemical production, food processing, and media sectors. The website showcases a detailed 30-year corporate history, emphasizing its growth through acquisitions and diversification. The company holds a significant market position in Central and Eastern Europe, employing over 30,000 people and managing numerous subsidiaries. Technically, the website uses modern JavaScript libraries and Google Tag Manager for analytics and marketing, with a cookie consent mechanism ensuring GDPR compliance. Security posture is moderate, with HTTPS implied but lacking explicit security headers and published security policies. WHOIS data is missing, which impacts transparency but does not negate the evident legitimacy from the website content and social media presence. Overall, the site is professionally designed, content-rich, and user-friendly, targeting business partners, employees, and the public interested in Agrofert's corporate story.

S

Sdružení agentur pro výzkum trhu a veřejného mínění SIMAR

simar.cz

48

SIMAR.cz is the official website of the Sdružení agentur pro výzkum trhu a veřejného mínění SIMAR, a Czech association representing market research and public opinion agencies. The site serves as a portal for industry news, standards, events, and resources targeted at market research professionals and clients. It holds a strong market position as a leading association in the Czech Republic, with partnerships including ESOMAR and multiple reputable member agencies. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, and integrates Google Analytics with user consent. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though it lacks explicit security policies or incident response contacts. Overall, the site is trustworthy, compliant with GDPR, and well-maintained, supporting the association's mission and business credibility.

K

KMVS, advokátní kancelář, s.r.o.

kmvs.cz

49

KMVS, advokátní kancelář, s.r.o. is a well-established Czech law firm operating since 2006, specializing in legal services across healthcare, pharmaceuticals, advertising, intellectual property, and data protection sectors. The firm serves primarily business clients and offers additional educational services such as workshops and webinars. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site uses jQuery, Google Fonts, and Google Analytics, and is built on the WebRedakce CMS platform. Cookie consent is actively managed via KookieCheck, indicating attention to privacy compliance, although no explicit privacy policy or terms of service pages were found. Security posture is moderate with HTTPS usage implied but lacking visible security headers and detailed incident response information. WHOIS data is unavailable, which reduces transparency and trustworthiness from a domain registration perspective.

Event&promotion, s.r.o. operates a specialized Czech-language portal focused on event marketing and sales promotion. The website provides news, articles, a company catalog, and event agency services targeting marketing professionals and companies organizing corporate and private events. The business model combines content publication with advertising and service offerings. Technically, the site uses a custom CMS with legacy JavaScript libraries such as jQuery 1.11 and Bootstrap 3, along with common tracking tools like Google Analytics and Facebook Pixel. However, the site lacks HTTPS in the provided content, which is a significant security concern. The absence of WHOIS data limits domain trust assessment, but the website presents professional contact information and active social media presence. Privacy compliance is minimal, with no visible cookie consent mechanisms.

R

Respect APP s.r.o.

respectapp.com

42

Respect APP s.r.o. is a Slovak advertising agency specializing in comprehensive marketing strategies, television spots, logo design, and corporate identity services. The company positions itself as a creative agency that brings ideas to life, serving businesses seeking to enhance or maintain their brand image. The website content is professional and showcases a portfolio of works, awards, and client references, indicating a solid market presence in Slovakia. Technically, the website is built on WordPress with modern plugins and libraries, including jQuery, Slick Carousel, and Gravity Forms, and uses HTTPS with valid SSL certificates. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. Security posture is moderate with HTTPS and secure forms but lacks security headers and explicit privacy and terms policies. Overall, the site is safe, well-designed, and credible but would benefit from improved compliance and security transparency.

E

Elite | Monday Lovers

eliteml.sk

40

Elite | Monday Lovers is a Slovak full-service advertising agency with approximately 15 years of experience, specializing in strategy, identity, campaigns, print, web design, social media, mobile applications, and PR. The company targets businesses seeking comprehensive marketing solutions and maintains a strong portfolio with notable clients. Their market position is that of an established regional player with a consistent brand presence and a medium-sized team. Technically, the website is built on OctoberCMS, leveraging modern web technologies such as Google Tag Manager and Google Maps API, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and secure forms, though explicit security and incident response policies are not publicly available. Overall, the site is professional, trustworthy, and compliant with GDPR cookie consent requirements.

A

applepie

applepie.sk

36

applepie.sk is the website of applepie, a Slovak advertising agency established in 2004. The company focuses on creative development and empathy-driven advertising solutions, targeting a general audience primarily in Slovakia. The website showcases video content and highlights strategic, creative, and trend-driven approaches to advertising. Technically, the site is built on WordPress with modern plugins like Yoast SEO and uses Vimeo for video hosting. The site is mobile-optimized and has good SEO practices but lacks visible privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices.

S

Statutární město Karviná

karvinainfo.cz

45

KarvináInfo is the official municipal information portal for the city of Karviná, Czech Republic, providing residents and visitors with comprehensive information about local events, culture, tourism, and city services. The website serves as a central hub for city news, event calendars, and tourist attractions, supported by official city contact details and social media channels. The business model is focused on public service and community engagement, positioning itself as a trusted source for local information. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Swiper slider, and Choices.js, hosted on a LiteSpeed Web Server. The site is moderately optimized for performance and mobile responsiveness, with a clean and consistent design. However, some scripts are commented out, and no CMS or backend platform is explicitly identified. SEO and accessibility features are basic but functional. From a security perspective, the site lacks explicit security headers and there is no confirmation of HTTPS usage from the provided data. The cookie consent mechanism is implemented with explicit accept and reject options, indicating some level of privacy compliance, but no privacy policy or terms of service pages were found. There is no evidence of a security policy, incident response contacts, or vulnerability disclosure mechanisms, which suggests room for improvement in security maturity. Overall, the website is a professional and trustworthy municipal portal with good content quality and business credibility. The main risks relate to security best practices and privacy compliance documentation. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and security policies, and enhancing compliance with GDPR and related regulations.

Zámek Fryštát is a cultural heritage site owned and operated by the statutory city of Karviná in the Czech Republic. The website serves as an informational portal for visitors, offering detailed descriptions of castle tours, exhibitions, and additional visitor services such as weddings, carriage rides, and photography. The site targets tourists and cultural enthusiasts interested in historical landmarks. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements can be made by adding security headers and publishing a privacy policy. The absence of WHOIS data limits domain trust verification, but the official city ownership and consistent branding support legitimacy. Overall, the website is professional, trustworthy, and serves its purpose effectively.

S

Sportoviště Karviná

sportovistekarvina.cz

38

Sportoviště Karviná is a local sports facility in Karviná, Czech Republic, offering a variety of recreational services including a football field with artificial turf, skatepark, streetball, pumptrack, workout areas, children's playground, and running and inline skating ovals. The website positions itself as a community sports venue with a focus on local users and sports enthusiasts. The business model revolves around facility management and providing sports and recreational services to the public. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a positive user experience. Technically, the website uses a combination of common JavaScript libraries such as jQuery, Fancybox, Swipe.js, and Owl Carousel, hosted on PIXHOST and built on the PIXCMS platform. Google Analytics is implemented for visitor tracking. The site loads with moderate performance and good mobile responsiveness. However, accessibility features are basic and could be improved. SEO is adequately addressed with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. No forms are present on the main pages, reducing attack surface, and no vulnerable libraries were detected. The absence of privacy and cookie policies is a compliance gap, especially under GDPR regulations. WHOIS data is missing, which limits domain trust verification and reduces overall legitimacy confidence. Overall, the website is safe, professional, and functional for its intended audience but would benefit from enhanced privacy compliance, improved security headers, and WHOIS transparency to increase trust and security posture.

P

petrucki.cz – PETR RUCKI – photo, web design, adventure, trips

petrucki.cz

43

The website petrucki.cz serves as a personal portfolio for Petr Rucki, showcasing his photography, web design, and travel adventures. The site targets a general audience interested in visual arts and creative web solutions. It operates as a small-scale personal branding platform without evident commercial or enterprise scale operations. Technically, the site is built on WordPress and utilizes common JavaScript libraries such as jQuery, Swiper.js, and Unite Gallery to deliver a visually appealing and responsive user experience. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security-wise, the site uses HTTPS but does not implement additional security headers or policies, and no privacy or cookie policies are present, indicating limited compliance with data protection regulations. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content itself appears legitimate and professional. Overall, the site scores moderately on content quality and technical implementation but scores low on privacy compliance and business credibility due to missing policies and contact information.

B

BurdaMedia Extra

burdamediaextra.cz

49

BurdaMedia Extra is a large Czech media company specializing in premium content creation, event organization, and advertising campaign management. Their digital presence targets a broad Czech-speaking audience interested in lifestyle, fashion, cooking, and related topics. The website demonstrates a professional design with good navigation and mobile optimization. Technically, it uses modern JavaScript and consent management platforms to ensure GDPR compliance. However, the absence of WHOIS data and explicit contact details slightly reduces trustworthiness from a domain registration perspective. Security posture is moderate with room for improvement in security headers and published policies. Overall, the site is compliant with privacy regulations and provides a good user experience.

První pozice s.r.o. is a Czech-based company specializing in creating successful websites and e-shops, offering services including web development, e-commerce solutions, SEO, and marketing. The company targets businesses seeking to enhance their online presence with modern, responsive, and user-friendly digital solutions. Their market position is supported by client references and certifications, indicating a trusted local presence. Technically, the website employs modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Smartlook, alongside a cookie consent mechanism ensuring GDPR compliance. The site demonstrates good mobile optimization and SEO practices, though some technical aspects like security headers are not evident, suggesting room for improvement. From a security perspective, the site uses HTTPS and cookie consent but lacks visible security headers and explicit incident response or security policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, impacting trustworthiness despite the professional presentation. Overall, the website is well-structured and professional, with moderate technical maturity and privacy compliance. Strategic improvements in security practices and domain registration transparency are recommended to enhance trust and resilience.

The website www.azsf.cz represents the Svaz zakládání a údržby zeleně (SZÚZ), an independent association of professional companies and organizations focused on green roofs and facades in the Czech Republic. The site serves as an informational portal offering standards, publications, seminars, and membership opportunities. It holds a reputable position within its niche, supported by partnerships with industry players and the Czech Ministry of Environment. Technically, the site uses modern JavaScript libraries such as jQuery and Owl Carousel, integrates Google Analytics and Tag Manager for tracking, and employs a cookie consent mechanism compliant with GDPR. Security posture is moderate with HTTPS usage but lacks visible security headers and explicit incident response policies. The absence of WHOIS data limits domain trust assessment, though the site content and partner references suggest legitimacy. Overall, the site is professionally designed, content-rich, and serves its target audience effectively.

P

Park čtvrtstoletí

parkctvrtstoleti.cz

48

The website 'Park čtvrtstoletí' serves as an informational platform for a park competition in the Czech Republic. It provides basic content focused on promoting the competition with minimal additional business information or contact details. The site uses common web technologies such as Bootstrap, jQuery, Google Tag Manager, and Facebook SDK to enhance user experience and track visitor interactions. A cookie consent mechanism is implemented, indicating some level of privacy compliance. However, the absence of WHOIS data and lack of contact or business registration information limit the ability to fully verify the legitimacy and trustworthiness of the site. Security posture is moderate with HTTPS implied but no explicit security headers detected. Overall, the site is functional but basic in design and content.

S

Svaz zakládání a údržby zeleně (SZÚZ)

casopisinspirace.cz

47

Časopis Inspirace is a specialized Czech magazine focused on gardening and landscape architecture, providing educational and inspirational content for professionals and enthusiasts. The website is professionally designed using WordPress with Elementor and Yoast SEO, ensuring good digital maturity and user experience. It includes a cookie consent mechanism and a comprehensive privacy policy, demonstrating compliance with GDPR requirements. Security posture is adequate with HTTPS and cookie controls, though explicit security headers could be improved. The lack of WHOIS data is mitigated by strong trust signals on the site. Overall, the site is a credible and well-maintained digital presence for the publication.

The ‘Olza’ Association of Development and Regional Cooperation is a well-established non-profit organization focused on supporting local and regional development in the Polish-Czech border area. Founded in 1998, it acts as a voluntary agreement of communities and poviats, promoting cross-border cooperation, tourism, culture, and sports within the Euroregion Śląsk Cieszyński. The website reflects this mission with multilingual content, event information, and links to partner organizations, targeting local governments, regional stakeholders, and tourists. Technically, the website employs modern frontend technologies including Bootstrap 5 and Swiper.js, with Google Fonts and CookieScript for consent management. It is mobile responsive and provides a good user experience with clear navigation and relevant content. Hosting and domain registration are consistent with the business location and history, with the domain registered since 1999 by a reputable Polish registrar. From a security perspective, the site uses HTTPS and implements cookie consent with granular controls, but lacks some advanced security headers and a public security policy. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a privacy policy and cookie banner, indicating GDPR awareness. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a trustworthy and professional digital presence for a regional non-profit association. Strategic improvements in security headers and incident response transparency could further enhance its security posture and compliance.

Z

Zwiazek Gmin i Powiatow Subregionu Zachodniego Wojewodztwa Slaskeigo z siedziba w Rybniku

krainagornejodry.travel

45

Kraina Górnej Odry is a regional tourism website focused on promoting the Upper Odra region in Poland, managed by the Zwiazek Gmin i Powiatow Subregionu Zachodniego Wojewodztwa Slaskeigo z siedziba w Rybniku. The site offers comprehensive information on thematic trails, cultural heritage, events, accommodation, gastronomy, and multimedia resources to attract tourists and visitors interested in the Silesian region. The website is professionally designed with good navigation and mobile optimization, supporting multiple languages including Polish, English, German, and Czech. Technically, it uses a modern tech stack including jQuery, Bootstrap, Font Awesome, and integrates analytics and user behavior tracking tools such as Google Tag Manager and Hotjar. The site is hosted by OVH SAS and uses HTTPS with domain status protections, though DNSSEC is not enabled.

S

Slaska Organizacja Turystyczna

beskidy.travel

48

The website beskidy.travel serves as a regional tourism portal for the Beskidy and Silesian Cieszyn regions in Poland, operated by the Slaska Organizacja Turystyczna. It provides comprehensive information on cultural heritage, tourist trails, events, accommodations, gastronomy, and multimedia content aimed at tourists and visitors interested in exploring the region. The business model focuses on regional tourism promotion and information dissemination, positioning itself as an important regional authority in hospitality and tourism sectors. Technically, the site employs a modern tech stack including Bootstrap, jQuery, Google Tag Manager, and Hotjar, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and DNSSEC. Privacy compliance is limited due to absence of a visible privacy policy, though cookie consent is implemented. Overall, the site is professional and trustworthy with room for improvement in security and privacy transparency.