High-risk security reports

T

Tepelné hospodářství Hradec Králové, a.s.

thhk.cz

40

Tepelné hospodářství Hradec Králové, a.s. is a municipal energy company providing heating and hot water services primarily in the Hradec Králové region. The company is fully owned by the city and positions itself as a responsible distributor focused on price comfort and reliable supply. The website reflects a medium-sized enterprise with a clear business model centered on energy supply and community support. Technically, the site is built on ASP.NET Web Forms with Telerik UI components, indicating a somewhat dated but stable infrastructure. The site is accessible, mobile-optimized, and contains comprehensive business and legal information, including GDPR and ISMS policies. Security posture is moderate with HTTPS usage but lacks advanced security headers and modern vulnerability mitigations. No WHOIS data was retrievable, which limits domain legitimacy verification, but the website content and business information appear consistent and trustworthy. Overall, the site scores well on content quality and business credibility but could improve technical and security aspects.

T3H is a specialized web hosting provider focusing on TYPO3, WordPress, CS-Cart, and GIS solutions, operating since 2003. The company offers flexible hosting plans emphasizing speed, security, and scalability, targeting businesses and developers requiring reliable and specialized hosting services. Their market position is that of a niche provider with a loyal customer base and a strong focus on customer support and security. Technically, the website is built on WordPress with the Avada theme, uses modern web technologies including HTTPS, HTTP/2, Redis, and Matomo analytics, and is hosted at ServerPark. The security posture is strong with SSL encryption, active monitoring, and regular backups, though there is room for improvement in publishing security headers and formal privacy policies. Overall, the website is professional, trustworthy, and well-optimized, but the absence of WHOIS data and privacy policies slightly reduces compliance and trust scores.

R

REST Countries

restcountries.com

44

REST Countries is an open source project providing a free RESTful API for country data, inspired by the original restcountries.eu. The service targets developers and organizations needing country information and offers multiple endpoints for querying data such as names, currencies, languages, and regions. The project is community-driven and funded through donations via Patreon and PayPal. Technically, the website uses older JavaScript libraries like jQuery 1.9.1 and Flatdoc for documentation rendering, hosted on DigitalOcean with DNS managed by DigitalOcean name servers. Performance and mobile optimization are basic but functional. Security posture is moderate with domain protections in place but lacks DNSSEC and security headers. No privacy or cookie policies are present, and no contact or incident response information is provided, which limits compliance and trust. Overall, the site is accessible and functional but would benefit from enhanced security and privacy practices.

The website at mymight.cz currently presents an empty HTML page with no visible content, metadata, or interactive elements. The domain is registered since June 2020 with a Czech registrar, indicating a small or new business presence. Due to the lack of content, no business description, services, or contact information can be derived. The technical infrastructure cannot be assessed beyond the domain registration data. Security posture is poor with no evidence of HTTPS or security headers, and no privacy or cookie policies are present. Overall, the site appears inactive or under construction, resulting in a very low trust and credibility score.

The website at mymight.com currently presents no accessible content, with an empty HTML body and no metadata, scripts, or visible business information. The domain is registered since 2011 with a reputable registrar, CSL Computer Service Langenbach GmbH d/b/a joker.com, but the lack of website content suggests the site is inactive or a placeholder. There are no privacy, cookie, or terms of service policies, nor any contact information or security policies visible. Technically, the site lacks any detectable technology stack, security headers, or HTTPS configuration data, indicating a very low digital maturity level. Security posture is poor due to absence of HTTPS and security best practices, and no compliance indicators are present. Overall, the site poses minimal risk but also offers no trust signals or business credibility. Strategic recommendations include enabling HTTPS, adding essential policies, and populating the site with meaningful content to improve trust and compliance.

A

Aupark Hradec Králové

aupark.cz

46

Aupark Hradec Králové operates as a modern retail shopping center located near the main train station in Hradec Králové, Czech Republic. The website showcases a variety of stores, restaurants, events, and a loyalty program targeting local residents and visitors. The business positions itself as a regional lifestyle and shopping hub with a medium-sized market presence. Technically, the site is built on WordPress with modern plugins and libraries, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers are missing and no incident response information is provided. The absence of WHOIS data reduces domain trustworthiness but the professional site content and active social media presence support legitimacy. Overall, the site is well-structured and user-friendly, serving its retail audience effectively.

The website e-obec.cz appears to be a minimal and outdated site, likely related to Czech local government or municipal services given the domain and language. The site contains only a centered logo image and lacks any substantive content, metadata, or user interaction elements. The domain is registered since 2006 with a Czech registrar and uses Forpsi nameservers, indicating a legitimate and consistent registration. However, the website itself shows very low digital maturity with no modern technologies, no privacy or cookie policies, and no contact or security information. The security posture is weak due to lack of HTTPS and security headers, and the site does not demonstrate compliance with GDPR or other privacy regulations. Overall, the site is accessible but provides minimal value or trust signals to users.

N

navuzticibas.com

navuzticibas.com

46

The website www.navuzticibas.com is a Latvian language platform that allows users to submit and browse complaints about individuals and companies. It serves as a niche community-driven site focused on sharing negative experiences and warnings, primarily targeting Latvian consumers seeking trustworthiness information. The site’s business model revolves around user-generated content without clear monetization or corporate backing. Technically, the site uses basic web technologies including jQuery and Google Fonts, with minimal SEO and accessibility features. The site lacks HTTPS and security headers, indicating a weak security posture. No privacy or cookie policies are present, and no verified contact emails or phone numbers are provided, which reduces business credibility. The WHOIS data is missing or unavailable, raising concerns about domain legitimacy. Overall, the site is functional but basic, with significant security and compliance gaps.

C

Centrum pro rodinu a sociální péči

sluzbypestounum.cz

43

Centrum pro rodinu a sociální péči (CRSP) operates the website sluzbypestounum.cz, providing specialized services to foster families in the Czech Republic. Established in 1992 and supported by the Biskupství brněnské, CRSP offers educational, counseling, and leisure programs to support foster care and family well-being. The website is well-structured, professionally designed, and optimized for accessibility and SEO, reflecting a mature digital presence. Technically, it leverages WordPress with modern plugins such as Elementor, Yoast SEO, and Complianz for GDPR compliance, ensuring a good user experience and privacy adherence. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be enhanced. The absence of WHOIS data limits domain trust analysis, but the website content and business information strongly indicate legitimacy. Overall, the site is safe, trustworthy, and serves a clear social mission.

C

Centrum pro rodinu a sociální péči (CRSP)

efektivnirodicovstvi.cz

35

Centrum pro rodinu a sociální péči (CRSP) operates the Efektivní rodičovství® website, providing family support, educational courses, and counseling services primarily in the Czech Republic. Established in 1992 and affiliated with the Biskupství brněnské, CRSP is a reputable non-profit organization focused on parenting education and social care. The website serves as a portal for their courses, counseling, and community engagement, targeting families and individuals seeking parenting support. Technically, the website is built on WordPress using modern plugins such as Elementor, Yoast SEO, and Complianz GDPR for privacy compliance. It employs Google Analytics and Jetpack for traffic analysis and statistics. The site is mobile-optimized with good SEO and accessibility basics, though some security headers could be improved. The cookie consent mechanism is robust and GDPR compliant. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data limits domain registration trust verification. The website content and business information are consistent and professional, indicating a trustworthy entity. No adult or questionable content is present, making it safe for general audiences. Overall, the website demonstrates a mature digital presence for a small non-profit organization with good privacy and security practices. Strategic improvements in security headers and incident response documentation could enhance trust and compliance further.

C

Centrum pro rodinu a sociální péči

neklidne-deti.cz

44

Centrum pro rodinu a sociální péči operates the website ADHD neklidné děti, providing comprehensive support programs for children with ADHD and their families since 1999. The organization offers educational programs, counseling, and collaborates with schools to improve mental health and daily life management for affected children. The website is well-structured, professionally designed, and optimized for accessibility and SEO, reflecting a mature digital presence. Technically, it is built on WordPress with modern plugins such as Elementor, Yoast SEO, and Complianz for GDPR compliance. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data limits domain legitimacy verification, but the business information and trust signals on the site support its credibility. Overall, the site is a reliable resource for its target audience with room for technical security enhancements.

S

Scaserv

leseni-bedneni.cz

47

Scaserv operates a Czech Republic-based business specializing in the rental of construction equipment including scaffolding, formwork, mobile fencing, stairs, walkways, waste chutes, mobile toilets, and containers. The company targets construction professionals and individuals requiring temporary building structures, offering both short- and long-term rental options with online inquiry capabilities and multiple physical branches in major Czech cities. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, enhancing user experience and trust. Technically, the website employs modern JavaScript libraries such as jQuery, integrates Google Tag Manager and Analytics for tracking, and uses Google reCAPTCHA v3 for bot protection. Cookie consent mechanisms are implemented in compliance with GDPR, and the site uses HTTPS with a presumably strong SSL configuration. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates good practices with encrypted connections and user consent for cookies, but lacks detailed security policies and incident response contacts. The absence of WHOIS data for the domain reduces trust from a domain registration standpoint, though the website content and contact details appear legitimate and professional. Overall, the site presents a solid business presence with good technical implementation and privacy compliance, but would benefit from improved transparency in security policies and domain registration information to enhance trustworthiness and security posture.

The website moraviaconvention.cz currently presents no accessible content, with an empty HTML body and no metadata, scripts, or contact information. The domain WHOIS data is suspicious due to a creation date set in the future (April 21, 2025), which undermines trust and legitimacy. The hosting appears to be via redirect.host, suggesting the domain may be parked or not actively used. There is no evidence of privacy, cookie, or terms of service policies, nor any security or incident response information. Overall, the site lacks any business or branding information, making it impossible to assess its market position or services. Technically, the site shows no modern technologies or CMS usage and lacks basic SEO and accessibility features.

N

Neznámé Krkonoše

neznamekrkonose.cz

46

Neznámé Krkonoše is a small regional tourism website focused on promoting lesser-known locations in the Krkonoše mountains of the Czech Republic. The site provides travel tips, accommodation listings, event information, and partners with regional organizations to enhance visitor experience. The business model centers on content provision and partner sponsorships, targeting tourists interested in exploring this specific region. Technically, the website is built on WordPress with common plugins such as Modern Events Calendar Lite and Contact Form 7, enhanced by Google reCAPTCHA and Google Analytics for security and analytics respectively. The site is hosted likely by WEDOS, a Czech hosting provider, and uses HTTPS with good SSL configuration. Security posture is moderate with HTTPS and spam protection but lacks advanced security headers and explicit security policies. Privacy compliance is basic, with a cookie consent banner but no visible privacy policy or terms of service pages. Overall, the website is functional and professional for its niche but could improve in privacy and security transparency.

S

Statutární město Hradec Králové

hk800.cz

49

The website hk800.cz is the official digital platform for the 800th anniversary celebrations of the city of Hradec Králové in the Czech Republic. It serves as a comprehensive resource for cultural events, exhibitions, and community engagement activities related to the milestone. The site is operated by the city government, providing authoritative and trustworthy information to residents and visitors. The business model is centered on governmental and cultural event promotion, supported by partnerships with local businesses and media. The website demonstrates a consistent brand identity aligned with the city’s heritage and celebration theme. Technically, the site is built on Joomla CMS with a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience such as carousels and lazy loading. It integrates Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing purposes, all managed with a cookie consent mechanism ensuring GDPR compliance. Hosting and domain registration are consistent with Czech providers, and the site shows good mobile optimization and SEO practices. From a security perspective, the website enforces HTTPS and uses cookie consent banners to comply with privacy regulations. While explicit security headers are not fully visible in the provided data, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website’s purpose and geographic location, indicating legitimacy. However, the site lacks explicit security policies or incident response contacts, which could be improved. Overall, the website is a well-structured, professional, and trustworthy platform for the city’s anniversary celebrations. It balances user experience, privacy compliance, and technical soundness effectively, though there is room for enhancement in security policy transparency and advanced security headers implementation.

V

Vermoont s.r.o.

mojehradiste.cz

40

MojeHradiště.cz is a municipal portal serving the residents of Mnichovo Hradiště, Czech Republic. It functions primarily as an online gateway providing links to various official municipal services, including citizen portals, reservation systems, financial transparency tools, and local event information. The portal is operated by Vermoont s.r.o. and was established in 2020, aligning with the domain registration date. The website targets local citizens seeking convenient access to municipal resources and information. Technically, the website employs a modest technology stack including jQuery and Modernizr, with Google Analytics for visitor tracking. The site is hosted under a Czech registrar (REG-WEDOS) and uses HTTPS, although explicit SSL configuration details and security headers are not evident from the HTML content. The site demonstrates good mobile optimization and a clear, consistent design, but lacks advanced accessibility features and comprehensive SEO optimization. From a security perspective, the portal shows basic adherence to best practices, such as HTTPS usage and absence of visible vulnerable forms on the homepage. However, it lacks explicit security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is present, and no contact information is provided for security or general inquiries. The site’s content is safe, non-adult, and appropriate for a general audience. Overall, the website is a functional and trustworthy municipal information portal with room for improvement in privacy compliance, security hardening, and user contact transparency. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

The website 'Tajemství Zvířetického trezoru' is a professionally designed platform promoting a seasonal interactive treasure hunt game for families and tourists at the Zvířetice castle ruins in the Czech Republic. It is organized by the local Tourist Information Center and supported by the city of Bakov nad Jizerou. The site effectively communicates the event's story, schedule, and contact information, targeting families with children and local visitors interested in cultural heritage and educational activities. Technically, the site uses standard web technologies including jQuery and the Mapy.cz API for map integration, though the map API version is deprecated, posing a technical risk. The site is moderately optimized for mobile and accessibility but lacks advanced SEO and performance optimizations. Security posture is basic with no visible security headers and no privacy or cookie policies, indicating compliance gaps. No blocking or WAF mechanisms were detected, and the domain registration data aligns well with the website's local business focus, supporting legitimacy. Overall, the site is functional and trustworthy but would benefit from improved security and privacy compliance measures.

The website 'TestSite' hosted on dvoraksystems.com is a small-scale educational platform built on WordPress using the Sydney Pro theme and Tutor LMS plugin. It appears to target students and instructors interested in online courses, offering basic e-commerce functionality for course purchases. However, the site content is minimal, primarily consisting of default WordPress placeholder content, indicating it may be under development or not actively maintained. The business model likely revolves around online course delivery and instructor/student management, but lacks detailed information or branding to establish a strong market position. Technically, the site uses a modern WordPress CMS with common plugins and frameworks such as jQuery, Bootstrap, and Elementor. The hosting and domain registration are stable, with the domain created in 2017 and registered through Tucows Domains Inc. The site is HTTPS enabled, ensuring encrypted communication, but lacks advanced security headers and DNSSEC, which are recommended for enhanced security. Performance and mobile optimization are moderate to good, but accessibility and SEO optimizations are basic. From a security perspective, the site shows basic security posture with HTTPS but no visible security policies, incident response contacts, or vulnerability disclosures. No privacy or cookie policies are present, which is a compliance gap especially under GDPR. No contact information or business trust indicators are provided, reducing business credibility and user trust. No WAF or blocking mechanisms are detected, and no suspicious WHOIS patterns are found, indicating a legitimate but minimal online presence. Overall, the site is safe for general audiences but lacks comprehensive content, security, and compliance features. Strategic recommendations include adding privacy and cookie policies, implementing security headers, providing clear contact and incident response information, and enriching site content to improve professionalism and trustworthiness.

M

Město Mšeno

mestomseno.cz

46

Město Mšeno operates an official municipal website serving residents, visitors, and local businesses with comprehensive information about the town, local government, services, events, and tourism. The site is well-structured, professionally designed, and provides key services such as news updates, public notices, payment portals, and contact mechanisms. The target audience includes local citizens and tourists interested in the region. Technically, the website uses modern web technologies including Google Fonts, reCAPTCHA v3, and a proprietary CMS (Vizus CMS). It is mobile-optimized and employs HTTPS for secure communications. Security posture is solid with HTTPS and bot protection, but lacks some security headers and formal security policies. Privacy compliance is partially addressed with a cookie consent banner but lacks a dedicated privacy policy page. WHOIS data is unavailable, which reduces domain registration transparency and trustworthiness. Overall, the website is functional, trustworthy, and serves its government role effectively, but could improve in privacy and security documentation.

M

Město Benátky nad Jizerou

benatky.cz

48

Město Benátky nad Jizerou operates an official municipal website serving residents and visitors with comprehensive information about city services, news, events, and public notices. The website is well-structured, featuring detailed navigation and content relevant to local governance and community engagement. Technically, the site employs modern frontend technologies including jQuery, Bootstrap, and Swiper, along with an AI chatbot integration, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and privacy compliance evident through GDPR and cookie consent implementations, though improvements are recommended in security headers and incident response transparency. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, but the website content and official branding strongly support its authenticity as a government portal.

Město Bělá pod Bezdězem operates an official municipal website serving residents, visitors, and local stakeholders by providing comprehensive information about the town, including news, administrative documents, tourism, and public services. The site positions itself as a trusted local government resource with clear contact details and compliance with European data protection regulations. Technically, the website is built on WordPress using common plugins such as WPBakery, Redux Framework, and GDPR compliance tools, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and well-structured, supporting the municipality's communication and service delivery objectives.

M

Městský úřad Dobrovice

dobrovice.cz

49

The website dobrovice.cz serves as the official municipal portal for the town of Dobrovice in the Czech Republic. It provides residents and visitors with comprehensive information about local government services, contacts, public notices, events, and community resources. The site is well-structured and targets local citizens and stakeholders interested in municipal affairs. The business model is that of a government service portal, focusing on transparency and public communication. The domain age and WHOIS data confirm the legitimacy and long-standing presence of the site as a trusted local government resource. Technically, the website uses a CMS platform called vismo, with standard web technologies including HTML5, CSS3, and JavaScript. It incorporates Google reCAPTCHA for form security and includes a smart app banner for mobile users. The site is mobile-optimized and accessible, with good SEO practices evident. Performance is moderate, with room for optimization. No major technical risks or vulnerabilities were detected. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were found. Privacy compliance is basic but present, with a privacy policy and cookie policy linked clearly. Contact information is prominently displayed, enhancing trust. Overall, the site scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility. It is a safe, professional, and trustworthy municipal website with minor areas for improvement in security policy transparency and technical headers. No adult or questionable content is present, making it suitable for a general audience.

Fytofarm Ltd. is a small research company established in 1994 specializing in applied research, development, and production of plant nutrition and protection products based on natural regulation systems. Their offerings include pheromone protection systems, bark beetle control, repellents, and specialty chemicals targeting forestry and agricultural sectors. The company positions itself as a niche player with a focus on environmentally friendly pest control solutions. Technically, the website is built on NUSTEP CMS 3.0 and uses JavaScript and jQuery with Google Analytics for tracking. The site is accessible and well-structured but shows basic mobile optimization and accessibility features. Security posture is limited with no evident HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating gaps in compliance and security best practices. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional appearance and ISO certifications displayed. Overall, the website scores moderately in content quality and business credibility but poorly in privacy compliance and security, suggesting the need for improvements in these areas to enhance trust and regulatory adherence.

The website memberzone.cz is a newly registered membership portal focused on fitness and wellness services, including activities such as badminton, massages, personal training, and group classes like Zumba. The site is built using ASP.NET Web Forms technology and hosted likely by Webglobe, as indicated by the registrar and name servers. The content is basic and primarily serves as a login and navigation portal for members. There is no evidence of privacy or cookie policies, nor terms of service, which limits compliance and trustworthiness. The site lacks contact information and modern web features such as mobile optimization and accessibility enhancements. Security posture is weak, with no visible HTTPS confirmation or security headers, and some client-side JavaScript errors are present.

B

brno-prorodiny.cz

brno-prorodiny.cz

46

brno-prorodiny.cz is a Czech language online magazine targeting parents and families in the Brno region, providing practical advice, tips, and inspiration for family well-being. The site covers a broad range of topics including health, finance, law, technology, and local activities. It operates primarily as a content publishing platform monetized through Google Adsense advertising. The website demonstrates a good level of content quality and user experience with clear navigation and mobile optimization. Technically, it uses standard web technologies including HTML5, CSS, JavaScript, Google Adsense, and Matomo analytics, hosted on vas-hosting.com. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. WHOIS data shows inconsistencies with domain creation date in the future, which may indicate placeholder data or require further verification. Overall, the site is professional and safe for general audiences but could improve in privacy and security transparency.

C

Centrum pro rodinu a sociální péči

crsp.cz

46

CRSP Brno is a well-established non-profit organization based in the Czech Republic, dedicated to supporting families through educational, counseling, leisure, and spiritual programs. Founded in 1992 and affiliated with the Brno Diocese, it serves a broad audience including families, parents, and individuals facing challenging life situations. The organization offers a diverse range of services including courses, family support, and facility rentals, positioning itself as a trusted community resource. Technically, the website is built on WordPress using modern tools such as Elementor and Nimble Builder, with SEO and analytics integrations like Yoast SEO, Google Analytics, and Facebook Pixel. The site demonstrates good mobile optimization, accessibility, and performance, with proper use of HTTPS and security headers enhancing its security posture. Security-wise, the site follows best practices with encrypted connections and cookie consent mechanisms, though it lacks publicly available security policies or incident response contacts. The absence of WHOIS data reduces transparency but does not significantly detract from the site's legitimacy given its content and affiliations. Overall, the website presents a professional, trustworthy, and user-friendly platform for its target audience. Strategic improvements could include publishing explicit security and incident response policies, enhancing direct contact information, and addressing the WHOIS data gap to improve trust and compliance.

S

SCASERV a.s.

scaserv.cz

48

SCASERV a.s. is a well-established Czech company specializing in the sale and rental of scaffolding, formwork, and construction site equipment. With a history linked to companies active since 1992 and formal establishment in 2012, SCASERV holds a leading position in the Czech and Slovak markets. The company offers a comprehensive range of products and services including transport, assembly, and project support, targeting both business clients and private individuals. The website reflects a professional digital presence with clear navigation, rich content, and multiple contact points. Technically, the site uses modern JavaScript libraries, Google reCAPTCHA for form security, and a cookie consent mechanism ensuring GDPR compliance. However, the absence of WHOIS data and security headers slightly reduces trustworthiness. Overall, the security posture is good with HTTPS enforced and no visible vulnerabilities, but there is room for improvement in publishing explicit security policies and enhancing HTTP security headers.

S

Společenské a kulturní centrum Kuřim, příspěvková organizace

kulturakurim.cz

46

Společenské a kulturní centrum Kuřim is a public cultural institution serving the Kuřim community in the Czech Republic. It provides a variety of cultural services including event hosting, cinema screenings, library access, museum exhibitions, and senior club activities. The website is well-structured, professionally designed, and targets a broad audience including families, seniors, and local residents. The business model focuses on community engagement and cultural enrichment, positioning itself as a key local cultural hub. Technically, the website is built on Drupal 8 CMS, utilizing modern JavaScript libraries such as jQuery Cycle2 for slideshows and CookiesJSR for cookie consent management. It integrates Google Analytics for visitor tracking and Facebook SDK for social media interaction. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain trust analysis, but the presence of official contact information and local partnerships supports legitimacy. Overall, the website demonstrates a solid digital presence with good content quality, technical implementation, and business credibility. Strategic improvements include enhancing security headers, publishing security and incident response policies, and maintaining up-to-date CMS and modules to mitigate risks.

S

Společenské a kulturní centrum Kuřim, příspěvková organizace

kamvkurimi.cz

48

The website 'Kam v Kuřimi' serves as a cultural and social event portal for the town of Kuřim, Czech Republic. It is managed by the Společenské a kulturní centrum Kuřim, a public cultural organization. The site provides comprehensive event listings including concerts, theater, cinema, sports, and workshops, targeting local residents and visitors interested in community activities. The business model focuses on event promotion and community engagement, supported by local government partnerships.

Město Mnichovo Hradiště operates an official municipal website providing comprehensive information and services to residents and visitors. The site offers news, event calendars, public service details, and tourism information, positioning itself as the primary digital gateway for the city. The business model is focused on government communication and community engagement, targeting local citizens and tourists. The website reflects a small-sized government entity with consistent branding and good content quality. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Analytics, and Nette Framework components. It is mobile optimized and accessible, with moderate performance. The site uses HTTPS and implements cookie consent mechanisms, demonstrating awareness of privacy compliance. However, some security best practices such as security headers and incident response disclosures are missing. From a security perspective, the site maintains a good posture with encrypted connections and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data is a notable anomaly, reducing domain registration trustworthiness, but the official contact information and consistent content strongly support legitimacy. Privacy policies and cookie management are well implemented, aligning with GDPR requirements. Overall, the website is professional, trustworthy, and serves its purpose effectively. Strategic improvements in security headers, incident response transparency, and domain registration visibility would enhance trust and resilience. The risk level is low, with no critical issues detected.

The website mapy.biz represents a small publishing entity named RAFFFAEL-art, registered to Petr Teichman in the Czech Republic since 2004. The site content is minimal, primarily consisting of images and links, with no textual descriptions, contact information, or policy documents. The technical infrastructure appears basic with no detected CMS, scripts, or modern web technologies. Security posture is weak due to lack of HTTPS and security headers, and no privacy or cookie policies are present. Overall, the site has low digital maturity and limited online presence, which impacts trust and credibility.

J

JRWN

jerewan.cz

42

JRWN is a small, flexible web design and development agency based in Brno, Czech Republic, specializing in custom websites, e-shops, and graphic design. They emphasize a full-service approach including design, development, hosting, and automation using their own CMS platform. The website is professionally designed with clear navigation and good mobile optimization, targeting a broad client base from small to large businesses across various industries. Technically, the site uses modern web technologies including Google Tag Manager and Google Fonts, but lacks visible security headers and explicit privacy or terms of service pages. The security posture is moderate with cookie consent implemented but missing other key security policies and disclosures. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and contact information appear legitimate and professional. Overall, the site scores well on content quality and business credibility but should improve privacy compliance and security practices.

L

LK Brno-střed

kinobude.cz

42

The website kinobude.cz represents a local cultural event organizer operating an open-air summer cinema in Brno-střed, Czech Republic. The business focuses on providing outdoor film screenings during the summer season, targeting general audiences in the local community. The site is built on WordPress with a modern tech stack including Bootstrap and jQuery, and it supports multilingual content in Czech and English. The website is well-structured with good design quality and clear navigation, although it lacks some compliance documentation such as privacy and cookie policies. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but it lacks advanced security headers and incident response information. Overall, the domain registration is consistent with the business profile, indicating legitimacy and trustworthiness.

D

Daruj Kelímek | Veřejná sbírka

darujkelimek.cz

49

The website www.darujkelimek.cz is a Wix-built site with minimal accessible content and no identifiable business or contact information. The absence of WHOIS data and domain registration details limits the ability to verify the legitimacy or history of the domain. Technically, the site uses standard Wix platform scripts and polyfills but lacks advanced security headers and privacy compliance mechanisms. No forms, analytics, or marketing tools are detected, indicating a low level of digital maturity. Security posture is weak due to missing security headers and lack of HTTPS verification in the provided data. Overall, the site appears to be either under development or not actively maintained, with limited trust indicators and poor content quality.

A

AIKON - Creative City s.r.o

aikon.cz

41

AIKON - Creative City s.r.o operates a Czech AI platform focused on accelerating content creation, marketing, and sales through advanced AI tools including templates, editors, assistants, and translators. The platform targets businesses, creators, and public sector entities, offering a comprehensive SaaS solution that promises up to 20x faster workflows. The website is professionally designed using WordPress and Elementor, with SEO optimization and Google Analytics integration, hosted on AWS infrastructure. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and privacy compliance measures are lacking. The domain is newly registered in early 2025, consistent with a recent business launch. Overall, the site presents a credible and modern technology offering with room for improvement in privacy and security transparency.

The website for mntzco.com is currently non-functional, returning a 404 error with a JSON message indicating no project found for the domain. The domain is newly registered in August 2023 and hosted on Amazon AWS infrastructure. There is no visible content, metadata, or business information on the site, which suggests the business is either in a very early stage or the website is not yet deployed. The lack of privacy, cookie, or terms of service policies and absence of contact information limits the ability to assess compliance or business credibility. Security posture cannot be evaluated due to missing HTTPS and security headers. Overall, the site presents a high risk from a trust and security perspective due to minimal content and lack of transparency.

P

PRO POPULO Poprad, s.r.o.

propopulo-poprad.sk

48

PRO POPULO Poprad, s.r.o. is a Slovak company established in 1991, managing forestry and agricultural lands owned by the Roman Catholic Diocese of Spišské Podhradie since 1994. The company focuses on sustainable forestry, hunting management, research collaborations, and holds FSC certification, positioning itself as a trusted regional entity in land stewardship. The website is built on WordPress with Elementor, featuring a professional design and clear navigation, optimized for mobile devices. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and published privacy or cookie policies, indicating room for compliance improvement. Contact information is clearly provided, including a company email and physical address, enhancing business credibility. Overall, the site is safe, professional, and trustworthy, with minimal user tracking and no signs of malicious activity.

Fytofarm spol. s.r.o. is a Slovak company specializing in pheromone-based products for forest protection, with a 30-year history and ISO 9001 and 14001 certifications. Their product portfolio includes pheromone lures, insect traps, and related chemical and microbiological services. The website is built on the NUSTEP CMS platform and uses legacy Google Analytics tracking. While the site is accessible and professionally designed with clear navigation, it lacks critical privacy and cookie policies, and no contact emails or phone numbers are visible on the homepage. Security posture is moderate but could be improved by implementing security headers and modern analytics tools.

Hamrsport operates sports and leisure facilities in Prague, offering a variety of services including sports area rentals, tournaments, camps, and an online reservation system. The website targets families and sports enthusiasts, positioning itself as a local provider of recreational activities. The business appears small but well-established since 2014, with partnerships including local government entities. Technically, the website uses common frameworks like Bootstrap and jQuery, integrates Google Analytics and Facebook SDK for tracking, and provides a responsive design with moderate performance. Security posture is basic, with HTTPS implied but lacking explicit security headers and advanced protections. Privacy compliance is minimal, with a cookie consent banner but no visible privacy policy or terms of service. Contact information is comprehensive, including phone numbers, addresses, and a contact form with basic spam protection. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

H

Helix Cleaner s.r.o.

helixaircleaner.eu

47

Helix Cleaner s.r.o. is a Czech company specializing in advanced photocatalytic air purification technology designed for a variety of environments including industrial, healthcare, public, and private spaces. Their patented Helix air purifier uses titanium dioxide photocatalysis activated by UV-A light to effectively eliminate harmful particles, bacteria, viruses, and odors without the need for filters. The website presents a professional and consistent brand image with clear messaging targeting businesses and households seeking high-efficiency air cleaning solutions. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and popular libraries such as Swiper.js and Google Tag Manager. It features responsive design optimized for mobile devices and includes a comprehensive cookie consent mechanism supporting GDPR compliance. The site uses HTTPS with strong SSL configuration, secure forms with CSRF tokens, and no exposed sensitive data, reflecting a good security posture. Security-wise, while the site enforces HTTPS and cookie consent, it lacks explicit security policy or incident response information. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data. The domain is registered with a reputable registrar, and the website content aligns with the business claims, supporting legitimacy. Overall, the website scores well on content quality, technical implementation, security, privacy compliance, and business credibility. Strategic improvements include publishing security and incident response policies, enhancing security headers, and adding a vulnerability disclosure policy to further strengthen trust and compliance.

T

Techtex, s.r.o.

techtex.cz

45

Techtex, s.r.o. is a Czech Republic-based manufacturer specializing in large-span textile-clad halls and comprehensive sport facility constructions. Founded in 1999, the company holds a leading market position in the Czech Republic for sports venue roofing and related manufacturing services. Their offerings include production of steel, wood, and air-supported structures, sport surfaces, party tents, agricultural tarpaulins, and related construction services. The website reflects a medium-sized enterprise with a professional digital presence, leveraging WordPress CMS and multiple analytics tools. Security posture is generally good with HTTPS and standard best practices, though explicit security headers and vulnerability disclosures are absent. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. WHOIS data is unavailable, which slightly reduces trust but does not negate the legitimacy of the business as evidenced by detailed contact information and social media presence.

T

TUkas a.s.

tukas.cz

47

TUkas a.s. is a large, authorized automotive dealership and service provider operating in Prague, Czech Republic. The company represents seven major automotive brands including Kia, Dacia, Renault, Opel, Volvo, ŠKODA, Volkswagen, and Audi. Their business model focuses on new and used car sales, authorized servicing, and operational leasing, targeting both individual consumers and business clients. The website reflects a professional presence with clear branding and multiple partner brand logos, indicating a strong market position within the automotive retail and service sector in the region. Technically, the website is built on WordPress with Bootstrap and jQuery, integrating modern tools such as Google Tag Manager, Hotjar, and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and includes structured data for SEO enhancement. Security measures include HTTPS, Google reCAPTCHA v3, and cookie consent mechanisms, although some security headers could be improved. The absence of WHOIS data limits domain trust verification, but the website content and branding suggest a legitimate and established business. Security posture is moderate with good SSL configuration and use of anti-bot measures, but lacks explicit security policies or incident response information. Privacy compliance is good with visible privacy and cookie policies and GDPR indicators. Overall, the website is safe for general audiences, with no adult or explicit content detected. The site demonstrates a good balance of business credibility, technical implementation, and privacy compliance, though improvements in security headers and WHOIS transparency are recommended. Strategic recommendations include enhancing security headers, maintaining up-to-date software, improving accessibility, and publishing clear security and incident response policies to strengthen trust and compliance.

The website retarget2core.com currently presents no accessible content, returning a minimal 'Not found' message indicative of a 404 error or inactive site. The domain is registered with NameCheap, Inc. since October 2021 and uses Amazon AWS DNS servers, but no further technical or business content is available. Due to the lack of content, metadata, or contact information, the site cannot be evaluated for business operations or market positioning. Technically, the site lacks HTTPS and security headers, and DNSSEC is not enabled, indicating a low security posture. Privacy and cookie policies are absent, and no forms or tracking technologies are detected. Overall, the site appears inactive or under construction, resulting in a low trust and credibility score.

C

Citadele Business Center

citadelebusinesscenter.lv

43

Citadele Business Center operates as a premium office space provider located in Riga, Latvia, offering high-quality office rentals and conference center services. The website is professionally designed, targeting business professionals and companies seeking premium office environments. The business model focuses on commercial real estate leasing with a clear market position in the Latvian real estate sector. Technically, the website is built on WordPress CMS and utilizes modern JavaScript libraries such as jQuery, GSAP, and Slick Carousel. It integrates Google Analytics and Google Tag Manager for user tracking and marketing insights. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. From a security perspective, the website enforces HTTPS and implements a cookie consent mechanism, reflecting basic privacy compliance. However, it lacks explicit security headers and does not provide visible security policies or incident response contacts. No vulnerabilities or suspicious content were detected, indicating a generally secure posture. Overall, the website presents a trustworthy and professional digital presence with moderate technical sophistication and privacy compliance. Strategic improvements in security headers and incident response transparency would enhance its security posture and compliance standing.

G

Gemerské osvetové stredisko

gos.sk

41

Gemerské osvetové stredisko is a Slovak regional cultural and educational institution established by the Košice Self-governing Region. It provides cultural programming, educational activities, and community services focused on traditional culture, astronomy, and crafts. The website reflects a well-structured public institution with clear regional government affiliation and a focus on serving local communities and schools. Technically, the site is built on Drupal 7 with common libraries like jQuery and Bootstrap, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic but present, with a GDPR privacy policy and cookie consent mechanisms. Overall, the site is trustworthy and professional, suitable for its public service role.

S

SNIP&CO

ignisbrunensis.cz

44

Ignis Brunensis is a well-established cultural event organizer based in the Czech Republic, specializing in international fireworks competitions and drone shows held in Brno. The website reflects a professional and consistent brand presence with a focus on event promotion, entertainment, and community engagement. The target audience includes families, tourists, and cultural event enthusiasts. Technically, the site uses modern web technologies including JavaScript frameworks, Google Analytics, and Vimeo for multimedia content, delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks visible security headers and published privacy or security policies. The domain is long-standing since 2001, registered with a reputable Czech registrar, enhancing trustworthiness. Overall, the website is professional and trustworthy but would benefit from improved privacy and security disclosures.

I

IDEAL GRAPHICS s.r.o.

ideal-studio.cz

40

Ideal Studio, operated by IDEAL GRAPHICS s.r.o., is a Czech-based creative agency established in 2003. The company offers a broad range of services including printing, web design, photography, graphic design, 3D visualization, corporate identity, and animation. Their market position is that of a small but established creative service provider with a diverse portfolio and a clear focus on quality and client satisfaction. The website reflects a professional and consistent brand image targeting businesses and individuals seeking creative branding and design solutions. Technically, the website uses modern JavaScript libraries such as jQuery, bxSlider, and Select2, along with Google Fonts, indicating a moderate level of digital maturity. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. However, there is room for improvement in SEO and accessibility. From a security perspective, the site uses HTTPS and implements a cookie consent banner, demonstrating some privacy awareness. However, it lacks published privacy policies, security headers, incident response information, and vulnerability disclosure mechanisms. No obvious vulnerabilities or exposed sensitive data were found, but the absence of these security best practices suggests a moderate security posture. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency. The domain's WHOIS data confirms a long-standing and consistent registration, supporting the legitimacy of the business. Strategic improvements in privacy policy publication, security headers, and incident response readiness would strengthen the site's security and compliance standing.

A

Asociace českých filmových klubů

lfs.cz

43

The website lfs.cz represents the 51st Letní filmová škola Uherské Hradiště, a well-established cultural film festival organized by the Asociace českých filmových klubů. The festival is scheduled for July 25-31, 2025, and the website serves as the primary digital platform for festival information, ticketing, program schedules, and participant guidance. The site targets film enthusiasts, cultural audiences, and industry professionals, positioning itself as a key event in the Czech Republic's media and cultural sector. The business model revolves around event organization, ticket sales, and cultural promotion, supported by partnerships and sponsorships.

The website mojelecbaobezity.cz is a Czech-language informational portal dedicated to obesity treatment, specifically focusing on bariatric surgery. It serves as a resource for patients and interested individuals by providing detailed information about obesity risks, treatment options, patient stories, and expert guidance. The site is operated or supported by PR agency Focus Agency, which is also indicated in the footer. The business model centers on education and patient support within the healthcare sector, targeting individuals seeking surgical obesity treatment information. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Google Analytics, and Facebook Pixel, hosted likely by Active24. The site is mobile-optimized with good SEO and accessibility basics. Security-wise, the site employs cookie consent mechanisms and standard tracking controls but lacks explicit security headers and published security policies. No critical vulnerabilities or suspicious content were detected. Overall, the site is professional, trustworthy, and compliant with GDPR, though it could improve transparency around security policies and incident response.