High-risk security reports

S

Skypartners

skypartners.cz

42

Skypartners is a Czech-based company specializing in the design, construction, and maintenance of photovoltaic power plants, electromobility charging stations, and monitoring services. Established since 2011, they serve primarily business and public sector clients, leveraging partnerships with research institutions and a strategic merger with Energylink s.r.o. Their website reflects a professional business with clear service offerings and reputable client logos. Technically, the site is built on WordPress with the Divi theme, using standard plugins and scripts. Security posture is moderate with HTTPS enabled but lacking security headers and formal privacy or cookie policies. WHOIS data is unavailable, which limits domain legitimacy verification. Overall, the company appears credible with room for improvement in compliance and security transparency.

B

Bauer CZ

bauerhockey.cz

36

Bauer CZ operates a professional e-commerce website specializing in hockey equipment and apparel targeted primarily at hockey players and enthusiasts in the Czech Republic. The company offers a wide range of products including hockey sticks, skates, helmets, gloves, protective gear, training equipment, and clothing. The website demonstrates a consistent brand presence and good content quality, supporting its position as a recognized retailer in the hockey sports sector. Technically, the website employs modern web technologies such as jQuery, Google Tag Manager, Cookiebot for cookie consent, and Facebook SDK for social media integration. The site is HTTPS secured and uses structured data (JSON-LD) to enhance SEO and provide clear business information. Mobile optimization and user experience are good, with a clear navigation structure and search autocomplete features. From a security perspective, the website enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service pages in the provided content. Overall, Bauer CZ presents a trustworthy and professional online retail platform with moderate to good security posture and technical implementation. Strategic improvements in privacy policy publication, security headers, and incident response transparency would enhance compliance and trustworthiness.

N

Nadace města Karlovy Vary

nadace-karlovyvary.cz

41

Nadace města Karlovy Vary is a non-profit foundation established by the statutory city of Karlovy Vary, Czech Republic. The foundation focuses on supporting cultural, sports, health, social, educational, architectural, and tourism-related initiatives within the city and its surroundings. The website serves as an informational portal providing details about the foundation's mission, supported areas, partners, and grant opportunities. The target audience includes local residents, cultural organizations, and potential grant applicants. Technically, the website is built using HTML5, CSS3, and JavaScript with jQuery 1.8.3 and RequireJS, likely generated by Adobe Muse. Mobile optimization is basic with separate mobile and tablet pages. Security posture is moderate but weakened by the use of outdated JavaScript libraries and lack of visible security headers or privacy policies. No forms or direct contact information are present on the main page, limiting user engagement and transparency. Overall, the site is functional and professional but requires updates to improve security and compliance.

T

TV – FOCUS – Regionální televize Chomutov, Jirkov, Kadaň a Klášterec

tv-focus.cz

38

TV - FOCUS is a small regional television broadcaster serving the Czech localities of Chomutov, Jirkov, Kadaň, and Klášterec. The website provides basic information about the station, including a YouTube channel for video archives and a service for LED screen advertising in Kadaň. The business model centers on regional media content delivery and local advertising. The website is built on WordPress with standard plugins and uses HTTPS for secure communication. However, it lacks comprehensive privacy, cookie, and terms of service policies, and no direct contact information is provided on the site. WHOIS data is unavailable, which reduces domain trustworthiness but does not necessarily indicate malicious intent.

Z

ZAK TV

zaktv.cz

48

ZAK TV is a regional television broadcaster serving the Plzeňský and Karlovarský regions of the Czech Republic. The website offers live streaming of current broadcasts, an archive of programs, and services such as advertising and studio rental. The business operates as a small media entity with a consistent brand presence and active social media channels. Technically, the site uses a mix of legacy and modern web technologies including jQuery, Fancybox, AOS, and Clappr for video playback, supported by Google Analytics and Hotjar for analytics and user behavior tracking. While the site is accessible and professionally designed, it lacks critical privacy and cookie policies, which impacts GDPR compliance. Security posture is moderate with no visible security headers and no explicit SSL/TLS configuration details provided. Overall, the site is functional and credible but would benefit from enhanced security and privacy measures.

T

Tiskárna GARMOND spol. s r.o.

garmond-tisk.cz

44

Tiskárna GARMOND spol. s r.o. is a small Czech printing company established in 1992, offering comprehensive printing services including prepress preparation, offset and digital printing, surface finishing, embellishments, bookbinding, and delivery. The company emphasizes in-house production capabilities and minimal external subcontracting, positioning itself as a reliable regional provider with specialized binding services. The website is professionally designed using WordPress with multilingual support, optimized for SEO and mobile devices, reflecting a mature digital presence. Security posture is good with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal privacy/cookie policies, indicating areas for compliance improvement. Overall, the business demonstrates legitimacy and professionalism with clear contact information and client testimonials, but should enhance privacy compliance and security best practices to strengthen trust and regulatory adherence.

G

Geosa spol. s r.o.

geosa.cz

47

Geosa spol. s r.o. is a Czech Republic-based construction company established in 1994, specializing in roofing, steel constructions, ventilation, and sandwich panel cladding. The company targets construction industry clients and businesses requiring specialized roofing and steel structure services. It maintains a solid market position with longstanding partnerships and ISO 9001:2000 certification, reflecting a commitment to quality. The website presents clear business information, contact details, and partner affiliations, supporting its credibility. Technically, the website uses common web technologies such as jQuery, Slick Carousel, Bootstrap, and Google Analytics. It is moderately performant with good mobile optimization and basic accessibility. SEO practices are adequate with proper meta tags and structured navigation. However, no CMS or hosting provider details are evident, and security headers are missing, indicating room for technical security improvements. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The presence of a cookie consent banner and privacy policy indicates basic GDPR compliance. However, the absence of security headers and incident response information suggests potential gaps in security maturity. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is justified for this business type. Overall, the website is professional, trustworthy, and business-focused with no adult or questionable content. Strategic recommendations include implementing security headers, publishing a security policy or incident response contact, and auditing third-party scripts to enhance security and compliance.

A

Autokomplex Menčík

autokomplex.cz

44

Autokomplex Menčík is a reputable automotive dealership specializing in Škoda vehicles, operating primarily in the Czech Republic with two main branches in Prague and Benátky nad Jizerou. The company offers a comprehensive range of services including new and used car sales, servicing, fleet management, insurance, and car washing. Their market position is that of a regional authorized dealer with a strong local presence and partnerships with various sports and community organizations. Technically, the website employs modern front-end technologies such as jQuery, Bootstrap, and Owl Carousel, providing a good user experience with mobile optimization and clear navigation. However, the absence of WHOIS data and security headers slightly diminishes the overall trustworthiness and security posture. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. Overall, the website is professional, content-rich, and well-branded, though improvements in security practices and domain registration transparency are recommended.

R

RÁDIO MB

radiomb.cz

47

RÁDIO MB is a small local radio station serving the Mladá Boleslav region in the Czech Republic. The website provides radio streaming, event promotion, and local news content tailored to its community audience. The business operates primarily as a media outlet with a focus on local engagement and broadcasting. Technically, the site is built on WordPress with a modern plugin stack including SEO and GDPR compliance tools. The infrastructure is hosted by a Czech hosting provider, ensuring regional consistency. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks some advanced security headers and explicit privacy policies. Overall, the site is accessible, professionally designed, and functional with room for improvement in privacy and security documentation.

M

MEDIA CLUB, s.r.o.

kiss.cz

41

Radio Kiss is a well-established Czech radio station operated by MEDIA CLUB, s.r.o., part of the FTV Prima media group. The station targets a broad audience with a focus on music from the 90s and contemporary hits, complemented by events such as Kissparty and an online merchandise shop. The website demonstrates a solid digital presence with modern technologies, including responsive design, multimedia streaming, and integrated social media. Privacy compliance is robust, featuring a comprehensive GDPR-aligned consent management platform. Security posture is good with HTTPS and content security policies, though additional headers could enhance protection. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional content and clear company information. Strategic recommendations include enhancing security headers, maintaining up-to-date libraries, and conducting regular security audits to mitigate risks.

S

Homepage | Sportovní hala Fortuna

sportovnihalafortuna.cz

42

Sportovní hala Fortuna is a sports and event venue located in Prague-Bubeneč, Czech Republic, offering rental services for sports activities, concerts, and cultural events. The website provides an event calendar and information about the venue, targeting general public and event organizers. The business operates primarily in the hospitality and media sectors with a medium-sized local market presence. Technically, the website uses modern frontend libraries such as jQuery, Splide.js, and Lightbox.js, and is mobile optimized with a good user experience and navigation clarity. However, the site lacks visible privacy, cookie, and terms of service policies, and no contact emails or phone numbers are provided, only a physical address.

L

Ler digital studio s.r.o.

lerstudio.cz

41

Ler digital studio s.r.o. is a well-established Czech digital and branding agency founded in 2013, specializing in web development, graphic design, and online marketing services. The company targets both Czech and international clients, offering tailored digital solutions including website creation, e-commerce, branding, and marketing consultancy. Their market position is reinforced by multiple partnerships with recognized entities such as Google, Wix, Meta, and industry associations, reflecting a strong reputation and trustworthiness in the digital services sector. Technically, the website employs a modern technology stack including Laravel backend, jQuery, Bootstrap, and various front-end libraries for animations and user experience enhancements. The site is hosted by Wedos, a Czech hosting provider, and demonstrates good mobile optimization and SEO practices. Analytics and tracking tools are extensively used, including Google Analytics, Microsoft Clarity, Facebook Pixel, and retargeting services, indicating a mature digital marketing infrastructure. From a security perspective, the site enforces HTTPS and includes CSRF tokens for form security. However, it lacks explicit security headers and a formal security or incident response policy. Cookie usage is disclosed but lacks an explicit consent mechanism, which may be a compliance gap. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, Ler studio presents a professional, trustworthy, and technically competent digital agency with room for improvement in security best practices and privacy compliance mechanisms. Strategic enhancements in security headers, incident response transparency, and cookie consent would further strengthen their security posture and regulatory compliance.

S

sitour Italia Srl

sitour.it

47

sitour Italia Srl is a specialized company providing innovative advertising and technological solutions tailored for mountain and ski resort environments in Italy. The company holds a strong market position with over 200 clients annually and is part of a broader international network. Their services include Out-of-Home advertising, digital and analog signage, interactive multimedia systems, and safety-oriented solutions for alpine tourism. The website reflects a mature digital presence built on modern technologies such as Astro and integrates Google Tag Manager for analytics and marketing. Security posture is solid with HTTPS and cookie consent mechanisms in place, although explicit security policies and incident response contacts are absent. Overall, the site is professional, compliant with GDPR, and trustworthy, supporting the company's credibility in its sector.

S

sitour - werbe gmbh

sitour.de

49

sitour - werbe gmbh is a leading specialist in advertising and technology solutions across over 1,000 alpine destinations worldwide. The company focuses on combining brand presence, visitor experience, and safety through innovative and sustainable concepts. With decades of experience in Out-of-Home advertising and interactive multimedia solutions, sitour offers a unique platform reaching up to 200 million sports and outdoor enthusiasts. The website reflects a mature digital infrastructure built on modern technologies such as Astro and integrates video streaming and consent management effectively. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are absent. Overall, the site is professional, well-branded, and trustworthy, supporting sitour's market leader position in alpine advertising and technology.

S

sitour International

sitour.international

49

sitour International is a leading specialist in advertising and technology solutions focused on alpine mountain regions. The company offers innovative concepts that combine brand presence, visitor experience, and safety, serving a target audience of advertisers and brands aiming to reach sports and mountain enthusiasts. Their business model centers on providing Out-of-Home and Digital Out-of-Home advertising, as well as interactive multimedia and information systems in ski resorts and mountain areas. The website demonstrates a mature digital presence with multi-language support and a professional design. Technically, the site is built using modern frameworks such as Astro, incorporates Google Tag Manager for analytics, and uses video streaming technologies like Shaka Player. The website is fast, mobile-optimized, and accessible, with good SEO practices. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, indicating GDPR adherence. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers and a published security policy or incident response page suggests room for improvement. The WHOIS data is unavailable publicly, which slightly reduces trust but is mitigated by the professional and consistent website content. Overall, sitour International presents a trustworthy and professional online presence suitable for its business sector, with recommendations to enhance security transparency and WHOIS data availability to further strengthen trust and compliance.

E

ELTON hodinářská, a.s.

elton.cz

41

ELTON hodinářská, a.s. is a Czech-based manufacturer and retailer specializing in watches and clocks, including the well-known PRIM brand. The company operates a professional e-commerce platform targeting general consumers interested in quality timepieces and related accessories. Their market position is that of an established medium-sized manufacturer with a strong local presence and a parent company affiliation with Czechoslovak Group. The website offers a comprehensive product catalog, including watches, clocks, accessories, and custom production services. Technically, the site is built on a custom ASP.NET WebForms platform, utilizing modern JavaScript libraries such as jQuery and Bootstrap, with integrated analytics and marketing tools like Google Tag Manager and Mailkit for newsletters. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No critical vulnerabilities or suspicious content were detected, and WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website is trustworthy, compliant with GDPR, and professionally maintained.

Czecot.pl is a Polish-language tourism blog focused on travel and architectural attractions in the Czech Republic. The website provides informative articles and travel guides targeting general audiences interested in Czech tourism. The business operates as a small content-driven blog founded around 2019, with no evident commercial or e-commerce activities. Technically, the site is built on WordPress CMS with common plugins such as Yoast SEO, LayerSlider, and Contact Form 7, hosted by OVH SAS. The site is moderately optimized for mobile and SEO, with Google Analytics and Tag Manager integrated for visitor tracking. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is good with a privacy policy and cookie consent banner implemented. However, no contact information, terms of service, or incident response policies are present, limiting business credibility. Overall, the site is legitimate, safe, and functional but could improve security and transparency aspects.

H

Heidelberg Materials, a.s.

transportbeton.cz

45

Heidelberg Materials CZ operates as a major provider of transport concrete and related construction materials across the Czech Republic. The company offers comprehensive services including production, delivery, and pumping of concrete, as well as manufacturing of various mortars and screeds. It is part of the larger Heidelberg Materials group, which is a recognized leader in the building materials industry. The website reflects a professional corporate presence with clear branding and a focus on serving construction professionals such as builders, developers, and architects. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and a proprietary CMS, delivering a moderately fast and mobile-optimized experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the strong corporate branding and content quality. Overall, the site is well-positioned to support the company's business objectives and maintain trust with its audience.

Kapela Severka is a small music band based in the Czech Republic, with a website primarily serving as an informational and promotional platform. The site provides basic details about the band, including history, concerts, photo galleries, and partner information. The target audience is general public and fans interested in the band's activities. The business model is focused on band promotion and event announcements. Technically, the website is built with basic HTML, CSS, and JavaScript, including Google Analytics for visitor tracking. There is no detected CMS or advanced frameworks. The site shows moderate performance and basic mobile optimization but lacks modern security and privacy features. From a security perspective, the website lacks HTTPS enforcement and security headers, exposing it to potential risks. There are no privacy or cookie policies, nor any contact information for security incidents or data protection officers. Google Analytics is used without visible consent mechanisms, indicating poor privacy compliance. Overall, the website presents a low to moderate risk profile but requires improvements in security posture, privacy compliance, and contact transparency to enhance trustworthiness and user safety.

Nadoraz.cz is the official website of a Czech music band named Nadoraz, based in Hradec Králové, with a history spanning nearly four decades. The band offers live music performances across various genres including swing, dixieland, country, rap, funky, and rock, and participates in numerous festivals and events both domestically and internationally. Their business model centers on entertainment services, music sales, and event appearances targeting Czech-speaking music fans and event organizers. The website provides detailed band member information, upcoming event dates, and contact details for bookings. Technically, the website is built with basic HTML5, CSS, and JavaScript technologies including jQuery and Modernizr. The site has a moderate performance profile with basic mobile optimization and accessibility features. However, it lacks modern CMS integration and advanced technical frameworks. SEO optimization is basic with minimal meta tags and no structured data or Open Graph tags. From a security perspective, the site lacks HTTPS enforcement and security headers, and does not provide privacy or cookie policies, which are critical for GDPR compliance. No vulnerability disclosure or incident response information is present. The absence of analytics and tracking scripts indicates minimal user tracking, which is positive for privacy but also suggests limited marketing insights. Overall, the security posture is weak and needs improvement to protect user data and enhance trust. The overall risk assessment indicates a low to moderate risk profile primarily due to missing security best practices and compliance documentation. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and establishing vulnerability disclosure mechanisms to improve security and compliance posture.

O

OMEGA WEB Czech

omegaczech.cz

42

OMEGA WEB Czech is a Czech Republic-based small technology company specializing in custom web design, development, SEO, e-commerce solutions, and IT outsourcing services. Established since 1998, it serves a broad client base across the Czech Republic with a focus on professional and comprehensive web solutions. The website demonstrates a mature digital presence with Joomla CMS, modern frontend technologies, and integration of Google Analytics and reCAPTCHA for security and analytics. Security posture is solid with HTTPS and consent mechanisms, though lacking advanced security headers and formal incident response disclosures. The absence of WHOIS data reduces domain trust but the website content and contact information are consistent and professional. Overall, the company presents a trustworthy and competent profile in the local web services market.

U

Univerzita Hradec Králové

mojeuhk.cz

44

Univerzita Hradec Králové operates a well-structured and professionally designed website targeting prospective and current students interested in higher education in the Czech Republic. The site presents multiple faculties and study programs, enriched with student testimonials and social media integration, reflecting a strong engagement with its audience. The business model is that of a public university providing educational services with a medium-sized presence in the regional education sector. Technically, the website leverages modern web technologies including Bootstrap, jQuery, and Laravel framework, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, CSRF protection, and reCAPTCHA integration, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site is trustworthy, safe, and professionally maintained.

R

Rytíři Kladno, eSports.cz s.r.o.

rytirikladno.cz

46

Rytíři Kladno is an established Czech ice hockey club with a strong online presence through its official website. The site provides comprehensive information about the club's activities, including news, match schedules, ticket sales, youth programs, and fan engagement initiatives. The business model focuses on sports entertainment, community engagement, and merchandising, supported by partnerships with notable sponsors. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, and Slick Carousel, with a custom CMS backend likely based on PHP. The site is mobile responsive and optimized for user experience, though performance is moderate. Security posture shows awareness with cookie consent and GDPR compliance, but lacks explicit security headers and documented incident response policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and stability.

H

HC VÍTKOVICE RIDERA

hc-vitkovice.cz

48

HC VÍTKOVICE RIDERA operates an official website serving as the primary digital platform for the Czech ice hockey club. The site provides comprehensive information including news articles, match schedules, team rosters, ticket sales, and fan engagement features. It targets hockey fans and the local community, positioning itself as a reputable sports club with a medium-sized presence in the Czech Republic. Technically, the website employs modern web standards with responsive design, custom fonts, and JavaScript libraries such as Swiper.js for interactive elements. Security-wise, the site enforces HTTPS, includes cookie consent mechanisms, and implements standard security headers, reflecting a good security posture. However, explicit security policies and incident response contacts are not publicly available, indicating room for improvement in transparency and compliance. Overall, the website is professional, trustworthy, and well-maintained, with no signs of blocking or malicious content.

H

HOCKEY CLUB DYNAMO PARDUBICE a.s.

hcdynamo.cz

44

HC Dynamo Pardubice is a Czech hockey club with an official website primarily serving fans and followers of the team. The site provides basic information about the club and includes links to ticket sales and partner sites. The business is positioned as a regional sports entity with a medium-sized presence and is supported by a parent company, eSports.cz s.r.o. The website uses modern web technologies such as Bootstrap and FontAwesome, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing purposes. However, the site content is minimal on the cover page, and lacks visible contact information and formal privacy or terms of service documents. Security posture is adequate with HTTPS and consent management but could be improved with additional security headers and published policies. Overall, the site is safe, professional, and trustworthy but basic in content and compliance.

B

BK Mladá Boleslav

bkboleslav.cz

46

BK Mladá Boleslav operates a professional and content-rich website serving as the official digital presence of the Czech ice hockey team. The site offers comprehensive information including team news, match schedules, ticket sales, merchandise, and fan engagement features. The business model focuses on sports entertainment and community engagement with a strong local and national fan base. Technically, the website employs modern web technologies such as Bootstrap and jQuery, integrates Google Analytics for user tracking, and maintains good mobile responsiveness and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The WHOIS data aligns well with the website's identity, supporting legitimacy and trust. Overall, the site is professional, trustworthy, and well-maintained, serving its audience effectively.

S

Sabiedriba ar ierobezotu atbildibu "Lafivents"

lafi.lv

38

LAFI is a leading Latvian company specializing in building climate and technical solutions, with nearly 30 years of experience in the local and international markets. Their core services include installation and maintenance of heating, ventilation, and sewage systems, as well as building management. The company operates multiple subsidiaries, enhancing its service portfolio and market reach. The website reflects a professional and consistent brand image, targeting Latvian businesses and property owners seeking technical building solutions. Technically, the site is built on WordPress with modern SEO and analytics tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

M

Muzeum a galerie Orlických hor v Rychnově nad Kněžnou

moh.cz

46

Muzeum a galerie Orlických hor is a regional cultural institution based in Rychnov nad Kněžnou, Czech Republic, dedicated to preserving and showcasing the art and history of the Orlické Mountains region. The website offers comprehensive information about permanent and temporary exhibitions, educational programs, and services such as research and archival access. The institution targets a broad audience including tourists, students, researchers, and local visitors. Technically, the website is built on a CMS platform (likely Fork CMS), uses modern JavaScript libraries, and integrates analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and reCAPTCHA for security. The site is mobile optimized, accessible, and SEO friendly with structured data markup.

H

Hostinec U Hubálků

uhubalku.cz

49

Hostinec U Hubálků is a Czech hospitality business specializing in traditional Czech cuisine, accommodation, event hosting, and catering services. The website presents a professional and comprehensive digital presence, showcasing menus, events, booking options, and an e-shop for homemade products. The business targets local and regional customers seeking quality dining and event experiences. Technically, the site is built on WordPress with the Divi theme and WooCommerce, integrating modern tools like Google Tag Manager and Facebook SDK for analytics and marketing. Security measures include HTTPS and Google reCAPTCHA on forms, though some security headers could be improved. Privacy compliance is strong with clear cookie consent and privacy policies. The absence of WHOIS data reduces domain trust but the website content and certifications support legitimacy. Overall, the site is well-designed, user-friendly, and trustworthy for its business domain.

SPORT PROFI spol. s r. o. operates the Deštné v Orlických horách recreational and ski center, providing winter and summer outdoor activities including ski lifts, trails, bike rentals, and disc golf. The company targets tourists and outdoor enthusiasts in the Czech Republic region, offering online skipass sales and comprehensive visitor information. The website reflects a well-established regional business with a domain age dating back to 1998, indicating a mature market presence. Technically, the site is built on Angular 19.1.4 with integration of Google Tag Manager, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The design is professional, mobile-optimized, and content-rich, supporting a positive user experience. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers are not detected and no explicit security or incident response policies are published. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the site demonstrates a solid digital maturity with room for security enhancements.

H

Hotel Studánka

hotelstudanka.cz

44

Hotel Studánka is a well-established hospitality business located in the Czech Republic, offering a comprehensive range of services including accommodation, wellness treatments, restaurant dining, conference facilities, and event hosting such as weddings and cultural performances. The website reflects a strong regional market position with a focus on quality and customer experience. Technically, the site is built on WordPress with modern plugins and technologies, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and GDPR compliance evident through cookie consent mechanisms and privacy policies, although some security headers could be improved. Overall, the site presents a professional and trustworthy digital presence with clear contact information and active social media engagement.

A

ADVENTURE DEŠTNÉ s.r.o.

adventuredestne.cz

40

Adventure Deštné s.r.o. operates a specialized outdoor adventure and sports rental business located in Deštné in the Orlické Mountains, Czech Republic. The company offers a variety of adventure activities including terrain quad bikes, terrain scooters, rollerblades, mountain bikes, adventure golf, football golf, pumptrack, workout playground, climbing wall, and multi-purpose sports fields. They also provide guided tours and corporate teambuilding events with catering and transport services. The business targets general audiences interested in outdoor recreational activities and adventure sports in a scenic mountain environment. The company is relatively young, founded in 2020, and maintains a local market presence with partnerships and social media engagement.

K

Kramářova chata

suchak.cz

40

Kramářova chata is a small hospitality business located in the Orlické Mountains, Czech Republic, offering accommodation, wellness services, and a restaurant. The website provides detailed information about their offerings including wellness packages, gastronomic experiences, and local attractions. The business targets tourists, families, and wellness seekers looking for a peaceful mountain retreat. Technically, the website is built on CMS Bakery and uses common JavaScript libraries such as jQuery and Colorbox, with integrated Google Analytics and advertising retargeting scripts. The site is moderately optimized for performance and mobile use, with good SEO practices but basic accessibility features. Security posture is moderate with HTTPS usage but lacks visible security headers and cookie consent mechanisms. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear professional and legitimate. Overall, the site is functional and informative but could improve in privacy compliance and security best practices.

M

Město Vamberk

vamberk.cz

49

Město Vamberk operates an official municipal website serving the residents and visitors of the town of Vamberk in the Czech Republic. The site provides comprehensive local government information including news updates, official documents, event calendars, and contact details for municipal offices. It also links to several managed organizations and local services, reinforcing its role as a central information hub for the community. The website is well-structured with clear navigation and is optimized for mobile devices, reflecting a moderate level of digital maturity. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Swiper.js, hosted on a CMS platform likely provided by GC System. The site uses HTTPS and includes a cookie consent mechanism, indicating attention to privacy compliance. However, the absence of WHOIS data and lack of explicit security policies or incident response information suggest areas for improvement in transparency and security governance. From a security perspective, the site benefits from HTTPS and some security best practices but lacks comprehensive security headers and a vulnerability disclosure policy. No critical vulnerabilities were detected in the visible content. The cookie consent banner and privacy policy indicate GDPR awareness, but further enhancements in security documentation and incident response readiness are recommended. Overall, the website is a trustworthy and professional municipal portal with good content quality and user experience. The missing WHOIS data is a concern but does not detract significantly from the site's legitimacy given its official nature. Strategic improvements in security policies and transparency would enhance trust and compliance.

M

Město Letohrad

letohrad.eu

48

The website letohrad.eu serves as the official online presence for the town of Letohrad, Czech Republic. It provides comprehensive information about municipal services, news, events, public administration, and community resources. The site targets residents, visitors, and local businesses, offering a centralized portal for accessing city-related information and services. The business model is that of a government entity focused on public service and community engagement. Technically, the site is built on a proprietary CMS platform (vismo) common among Czech municipalities, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google Translate for multilingual support and maintains a moderate performance profile with good mobile optimization. Accessibility features are basic but present, and SEO practices are adequate for the site's purpose. From a security perspective, the website enforces HTTPS and uses secure form submissions but lacks advanced security headers and explicit incident response or security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy and cookie policy present but no active consent mechanism. Contact information is clearly provided, enhancing trust and credibility. Overall, the site is a well-maintained municipal portal with a good balance of content quality, usability, and security. Strategic improvements in security headers, privacy consent, and incident response documentation would further enhance its posture and compliance.

O

Obec Deštné v Orlických horách

obec-destne.cz

48

The website www.obec-destne.cz serves as the official online presence for the municipality of Deštné v Orlických horách in the Czech Republic. It provides residents and visitors with essential information about local government activities, news, events, and public services. The site is well-structured, featuring an event calendar, official notices, contact details, and links to local institutions, supporting effective community engagement. Technically, the site employs a modern tech stack including jQuery, Bootstrap, and Swiper, built on the Ocelot CMS platform, ensuring a responsive and accessible user experience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, though it lacks some advanced security headers. The absence of WHOIS data suggests privacy protection, which is common and justified for municipal domains. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements.

O

Obec Orlické Záhoří

orlickezahori.eu

46

The website www.orlickezahori.eu is the official municipal site for the village of Orlické Záhoří in the Czech Republic. It serves as a comprehensive information portal for residents, visitors, and local businesses, providing news, event calendars, administrative contacts, public tenders, and tourism-related content including virtual tours. The site is positioned as a local government resource with a focus on community engagement and transparency. Technically, the website is built on Joomla CMS with Bootstrap 5 for responsive design, integrating third-party libraries such as Awesomplete for search and the Facebook SDK for social media integration. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security practices include HTTPS and CSRF tokens, but the absence of security headers and privacy/cookie policies indicates room for improvement. From a security perspective, the site shows a basic security posture with no critical vulnerabilities detected in the content. The domain WHOIS data is privacy protected, which is typical for .eu domains, and does not raise trust concerns given the official nature of the site. However, the lack of explicit privacy and cookie policies may pose compliance risks under GDPR. Overall, the site is trustworthy and professionally maintained, serving its intended audience well. Strategic recommendations include enhancing privacy compliance, implementing security headers, and improving accessibility and SEO to strengthen the site's security and user experience.

M

Město Choceň

chocen-mesto.cz

46

The website www.chocen.cz serves as the official online presence for the town of Choceň, Czech Republic. It provides comprehensive information and services for residents and visitors, including municipal office details, official notices, event calendars, and contact information. The site targets local citizens and stakeholders interested in municipal affairs and community events. The business model is that of a government/public service entity, focusing on transparency and citizen engagement. Technically, the site uses a legacy technology stack including jQuery 1.8.3, Bootstrap 4.3.1, and Font Awesome 4.2.0, hosted on a CMS platform called Vismo. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. External resources are loaded from reputable CDNs and partner domains. From a security perspective, the site uses HTTPS as indicated by canonical links, but lacks visible security headers and uses outdated JavaScript libraries that may pose vulnerabilities. There is no explicit cookie consent mechanism despite the presence of cookie and privacy policies, which may affect GDPR compliance. WHOIS data for the domain is unavailable, which raises concerns about domain registration legitimacy and reduces trustworthiness. Overall, the website is professional and trustworthy in content and presentation but would benefit from technical and security improvements to enhance compliance, security posture, and user trust.

M

Město Rokytnice v Orlických horách

rokytnicevoh.cz

40

Město Rokytnice v Orlických horách is the official municipal government website serving the small city located in the Královéhradecký region of the Czech Republic. The site provides comprehensive information about the city administration, local governance, public services, cultural organizations, and tourism opportunities. It targets residents, visitors, and stakeholders interested in local government activities and community events. The website supports year-round tourism and community engagement through detailed sections on waste management, social services, and local news updates. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Swiper.js, and other JavaScript libraries to deliver a responsive and accessible user experience. The site is mobile-optimized and features clear navigation with structured menus and content sections. Performance is moderate, with no critical errors or broken elements detected. However, the CMS appears to be a custom or proprietary system, which may limit flexibility. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, demonstrating awareness of privacy regulations. However, it lacks explicit privacy policy and security incident response pages, and security headers are not fully implemented. No vulnerabilities or exposed sensitive data were detected, but the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. Overall, the website is professional and trustworthy in content and presentation but would benefit from enhanced transparency regarding privacy policies and domain registration information. Strategic improvements in security headers and incident response disclosures would strengthen its security posture and compliance standing.

The website www.rychnov-city.cz serves as the official municipal portal for the city of Rychnov nad Kněžnou in the Czech Republic. It provides residents and visitors with comprehensive information about city life, administration, social and technical services, cultural events, and public utilities. The site is well-structured and targets local citizens and stakeholders seeking official city information and services. The business model is that of a government entity providing public services and information dissemination. Technically, the website is built on the Vismo CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google services including reCAPTCHA for form security and Google Translate for multilingual support. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some improvements in security headers could be made. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms from abuse. However, no explicit security policies or incident response contacts are published, and no security.txt file is present. The absence of WHOIS data limits the ability to fully verify domain registration legitimacy, though the presence of official contact information and consistent branding supports trustworthiness. Overall, the website is a reliable and professional municipal portal with good content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing security policies, and improving WHOIS transparency to strengthen trust and compliance.

Sdružení obcí Orlicko is a regional association of municipalities in the Czech Republic focused on supporting tourism, transportation, and regional development across 28 communities. The website serves as an information hub for residents and visitors, providing event calendars, news updates, and regional resources. The organization positions itself as a local government partner fostering community growth and tourism promotion. Technically, the website is built on the IPO CMS platform, utilizing jQuery, Owl Carousel, Google reCAPTCHA, and Matomo analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and includes accessibility considerations, though some improvements could be made. Security posture is adequate with HTTPS and form protections but lacks advanced security headers and explicit security policies. The absence of WHOIS data reduces domain trust slightly but the professional presentation and official contact details support legitimacy. Overall, the site is a reliable regional government resource with room for enhanced security and compliance documentation.

T

TAH reklamní agentura, s.r.o.

tah.cz

41

TAH reklamní agentura, s.r.o. is a Czech Republic based advertising and communication agency operating since 2007. The company offers a broad range of services including branding, graphic design, web development, online marketing, PR, animation, and virtual tours. It holds Google certifications and maintains an active online presence, positioning itself as a professional and trusted local agency. The website is well-structured, content-rich, and provides clear contact information and service descriptions. Technically, the site uses ASP.NET WebForms with Telerik controls, Leaflet for mapping, and integrates Google Tag Manager and Analytics for tracking. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks advanced security headers and explicit security policies. WHOIS data is unavailable, which limits domain trust verification, but the website content and business details suggest legitimacy. Overall, the site scores well in content quality, technical implementation, and business credibility, with room for improvement in security and privacy compliance.

U

U Rudolfa | Restaurant Hradec Králové

urudolfa.restaurant

44

The website www.urudolfa.restaurant represents a small hospitality business operating a restaurant named 'U Rudolfa' located in Hradec Králové, Czech Republic. The business offers restaurant dining services and catering for events, including romantic dinners. The website content is accessible and well-structured, with a professional design using modern front-end technologies such as Bootstrap and JavaScript libraries. However, the site lacks critical compliance documents such as privacy and cookie policies, and no explicit contact information is found on the site. The WHOIS data is unavailable or protected, which limits the ability to fully verify domain legitimacy and ownership details. HTTPS is enabled, but security headers are missing, which could be improved to enhance security posture.

P

Pivovar Hradecký Klenot

hradeckyklenot.cz

42

Pivovar Hradecký Klenot is a small, regionally focused brewery located in Hradec Králové, Czech Republic, specializing in traditional Czech lagers and specialty beers. The business operates both a physical brewery with hospitality services and an online e-shop for direct sales. The website reflects a professional and consistent brand presence with clear contact information and social media integration. The inclusion of an age verification modal demonstrates compliance with legal requirements for alcohol-related content. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Facebook Pixel, supporting a moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though the absence of security headers and explicit privacy policies indicates room for improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

M

Magnalink, a.s.

magnalink.cz

31

Magnalink, a.s. is a Czech regional internet service provider offering high-speed internet, digital television, VOIP telephony, and camera security systems primarily targeting households and businesses in the Hradec Králové region. The website presents a professional and consistent brand image with clear service offerings and customer testimonials, indicating a stable market position within the telecommunications sector. The technical infrastructure includes modern JavaScript libraries and tracking technologies, with a cookie consent mechanism supporting GDPR compliance. Security posture is adequate with HTTPS enabled, but lacks some recommended security headers, suggesting room for improvement. WHOIS data is unavailable due to privacy protection, which is common and justified for this business type. Overall, the website is trustworthy and functional, with moderate risk due to limited security header implementation and missing explicit privacy policy.

D

Dahasl s.r.o.

dahasl.cz

49

Dahasl s.r.o. is a Czech-based company specializing in the supply and installation of low-voltage technologies and security systems. The company positions itself as a traditional and reliable provider with extensive experience, offering comprehensive services from project design to maintenance and servicing of electrotechnical systems. Their target audience primarily includes businesses and organizations requiring advanced security and technology solutions. The website reflects a medium-sized enterprise with a professional online presence, including client references and statistical indicators of business activity. Technically, the website employs a standard modern technology stack including Bootstrap, jQuery, and various UI libraries, with a cookie consent mechanism and Google Analytics integrated with consent controls. The site is mobile-optimized and well-structured, though no CMS or hosting provider details are evident. Performance is moderate, and SEO practices appear adequate. From a security perspective, the site uses HTTPS (assumed though not explicitly confirmed), includes a cookie consent banner, and loads analytics scripts conditionally based on user consent. However, no explicit security headers or published security policies were detected, and no incident response or vulnerability disclosure information is available. The WHOIS data is unavailable, likely due to privacy protection, which limits transparency but does not inherently indicate risk. Overall, the website is professional and trustworthy with good privacy compliance and business credibility. The lack of WHOIS data and explicit security policies suggests areas for improvement in transparency and security posture. The risk level is moderate with no critical vulnerabilities detected in the analysis.

H

Hradecká kulturní a vzdělávací společnost s.r.o.

hradecko.info

46

The website hradecko.info represents a regional non-profit destination management organization focused on promoting tourism and cultural heritage in the Hradec Králové region of the Czech Republic. The organization operates key tourist attractions such as the White Tower, Bílá věž, and Kostel sv. Mikuláše, and collaborates closely with local government and tourism partners. The business model is centered on sustainable tourism development, funded by membership fees and local tourism taxes. Technically, the website is built on a Joomla CMS platform with a modern front-end stack including Bootstrap, jQuery, and various UI libraries. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features are basic. Hosting is provided by Webglobe, and the domain is relatively new but consistent with the organization's founding date. From a security perspective, the site shows no immediate vulnerabilities or exposed sensitive data, but lacks advanced security headers and DNSSEC is not enabled. HTTPS status is unknown from provided data and should be verified. Privacy compliance is partially addressed with a GDPR document available, and cookie consent mechanisms appear implemented. Contact information is clearly provided, but no incident response or security policy pages are present. Overall, the website is trustworthy and professionally maintained with a clear business purpose. Strategic improvements in security headers, HTTPS enforcement, and explicit security policies would enhance the security posture and compliance. The site is safe for general audiences with no adult or questionable content detected.

Ž

Žurnāls Santa SIA

manizurnali.lv

38

Žurnāls Santa SIA operates the website manizurnali.lv, a Latvian media platform specializing in magazine subscriptions and e-magazines. The company targets Latvian-speaking readers and offers a broad portfolio of magazine titles. The business model is subscription-based, supported by advertising services. The website reflects an established regional media presence with consistent branding and good content quality. Technically, the site is built on Drupal CMS, integrates modern analytics and consent management tools, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and GDPR-compliant consent mechanisms, though formal security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with privacy regulations.