Medium-risk security reports
99,066 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,186001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
31,151–31,200 of 99,066
iDNES.czidnes.cz
Media · Czech Republic
55Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
iDNES.cz is a leading Czech news portal established in 1998, offering comprehensive news coverage, premium subscription content, video, weather, and ticket sales services. It operates under the parent company Mafra, a.s., and targets a broad general audience in the Czech Republic. The website demonstrates a mature digital infrastructure with integration of multiple advertising and analytics technologies, including Google Tag Manager, Gemius, and Piano paywall. Security posture is solid with HTTPS enforcement and consent management, though some security headers could be improved. The absence of WHOIS data limits domain registration trust assessment but the strong brand presence and business information support legitimacy. Overall, the site is professional, content-rich, and well-optimized for user experience and advertising monetization.
- MMAFRA, a.s.
jenprocasopisy.cz
Media · Czech Republic
68Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
JenProČasopisy.cz is a Czech media subscription platform operated by MAFRA, a.s., offering printed magazine subscriptions targeted at women, men, children, and lifestyle audiences. The website provides a broad catalog of magazine titles, digital edition access, and customer support including SMS ordering. The business model centers on subscription sales with a clear market position in the Czech media sector. Technically, the site employs modern analytics and advertising technologies such as Google Tag Manager, Google Analytics, Gemius, and Maileon Analytics, alongside a consent management platform to comply with GDPR requirements. The site is accessible, mobile-optimized, and well-structured with good navigation and content relevance. Security posture is moderate with HTTPS enforced and consent mechanisms in place, but lacks explicit security headers and published security policies. WHOIS data is unavailable, which impacts domain trust assessment negatively. Overall, the site is professional and trustworthy from a business and user perspective but could improve transparency and security practices.
MAFRA, a.s.mfdnes.cz
Media · Czech Republic
65Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
MF DNES is a major Czech media company offering subscription-based access to daily newspapers and thematic magazines in both digital and print formats. The website provides clear subscription options, loyalty programs, and regional news coverage, targeting a broad audience interested in news and lifestyle content. The business is positioned as one of the largest media outlets in the Czech Republic with a professional editorial team and consistent branding. Technically, the website employs modern tracking and analytics technologies including Google Tag Manager, Google Analytics, Gemius, and a consent management platform (Didomi) to ensure GDPR compliance. The site is well-structured with good mobile optimization and SEO practices, although some security headers are not explicitly detected. The SSL configuration is excellent, and secure login forms with client-side validation are implemented. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and consent management but lacks publicly available security policies or incident response contacts. The absence of WHOIS data is a notable anomaly that reduces domain registration trustworthiness, although the website content and business information strongly indicate legitimacy. No vulnerabilities or adult content were detected, and the site is fully accessible without WAF blocking. Overall, the website is professional, secure, and compliant with privacy regulations, but improvements in domain transparency and security policy publication are recommended to enhance trust and security posture.
MAFRA a.s.mafraprint.cz
Media · Czech Republic
56Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
MAFRAPRINT is a large-scale printing company operating as part of the Czech media group MAFRA a.s., specializing in printing newspapers, magazines, leaflets, and other print formats. The company leverages advanced coldset offset printing technology and finishing services to serve both internal media brands and external clients. Their market position is strong within the Czech Republic, supported by strategic locations in Prague and Olomouc and integration with other media assets such as radio and television. Technically, the website employs modern tracking and marketing tools with a consent management platform, indicating a mature digital presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the website is professional, well-branded, and trustworthy, with comprehensive contact information and clear business focus.
Other · Czech Republic
56Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website trackad.cz currently presents only minimal content, consisting of a single dot in the body with no metadata, scripts, or visible business information. The domain is registered since 2015 with a Czech registrar and uses cloudns.net name servers, indicating a stable registration. However, the lack of accessible content and absence of privacy, cookie, or terms of service policies severely limit the ability to assess the business or security posture. The technical infrastructure appears minimal with no detectable CMS or frameworks. Security posture cannot be evaluated due to missing HTTPS and security headers information. Overall, the site appears either blocked, under construction, or abandoned, resulting in a low trust and credibility score.
Inspectletinspectlet.com
Technology
51Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Inspectlet is a technology company providing advanced website visitor session recording and analytics services. Their platform enables website owners and marketers to understand user behavior through video recordings, heatmaps, A/B testing, feedback surveys, error logging, and form analytics. The company targets digital businesses seeking to optimize user experience and conversion rates. The website demonstrates a professional and consistent brand presence with multimedia content and customer testimonials from notable companies, indicating a solid market position. Technically, the website employs modern web technologies including AngularJS, Pure CSS, Animate.css, and integrates analytics tools such as Google Analytics and Segment. The site is mobile optimized and performs moderately well. However, explicit security headers and privacy compliance disclosures are missing, which are important for trust and regulatory adherence. Security posture is generally good with HTTPS usage and no visible vulnerabilities or exposed sensitive data. The lack of WHOIS data transparency is a concern, though the website content and external trust signals mitigate this somewhat. Privacy and cookie policies are not evident, which may pose compliance risks. Overall, Inspectlet presents a credible and professional online presence with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen trust and regulatory alignment.
MEDIA CLUB, s.r.o.media-club.tv
Media · Czech Republic
50Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
MEDIA CLUB, s.r.o. operates as a media representation and advertising sales company affiliated with the Prima Group in the Czech Republic. The company leverages its extensive knowledge of the advertising market and represents over forty media outlets. The website serves as a professional platform to communicate news, services, and contact information to advertisers and media buyers. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and presents content clearly with good navigation and branding consistency. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business, indicating legitimacy and trustworthiness.
Blogosvět.czblogosvet.cz
Media · Czech Republic
63Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Blogosvět.cz is a Czech media platform providing an open space for bloggers and authors to freely express their opinions. It hosts a variety of articles covering political, social, and cultural topics, targeting a general Czech-speaking audience. The platform partners with established media companies such as SPM MEDIA and Echo24.cz, enhancing its credibility within the local media landscape. Technically, the website is built using modern web technologies including React and Next.js, offering good mobile optimization and user experience. Security posture is adequate with HTTPS enforced and secure forms, but lacks some advanced security headers and explicit privacy compliance mechanisms. The absence of WHOIS data for the domain raises concerns about domain registration transparency, which impacts trustworthiness. Overall, the platform is functional and professional but would benefit from improved privacy and security disclosures.
- Radio Prostor
radioprostor.cz
Media · Czech Republic
59Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Radio Prostor is a Czech media outlet providing a platform for information, politics, economy, business, sports, culture, and modern lifestyle content. It operates a live radio streaming service alongside a rich collection of news articles and interviews, targeting a broad audience interested in current affairs and cultural topics. The website demonstrates a professional and consistent brand presence with active social media engagement and accessible contact information. Technically, the site is built on modern web technologies including React and Next.js, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, though additional security headers and explicit policies could enhance protection. The absence of WHOIS data reduces domain transparency and trust slightly, but the overall content quality and business credibility remain high. Strategic recommendations include improving security headers, publishing incident response information, and monitoring domain registration status to ensure ongoing legitimacy.
- CCoolpany SE
coolpany.com
Media · Czech Republic
68Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Coolpany SE is a media company operating multiple media outlets and publications primarily in the Czech Republic. The website currently is under construction and serves as a landing page linking to various associated media projects such as Echo24, Týdeník Echo, and Radio Prostor. The business model focuses on media publishing and content distribution targeting a general audience. The company appears to have been founded in 2013 and maintains a medium-sized presence in the media sector. Technically, the website is built using modern JavaScript frameworks including Next.js and React, indicating a contemporary digital infrastructure. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. However, the site content is minimal and lacks advanced technical configurations such as security headers or analytics integrations. From a security perspective, the site uses HTTPS but lacks visible security headers and privacy compliance documentation. No forms or data collection mechanisms are present, reducing immediate data exposure risks. The WHOIS data is missing or inaccessible, which raises concerns about domain registration legitimacy and trustworthiness. No privacy or cookie policies are published, which impacts compliance with GDPR and other regulations. Overall, the website presents a basic digital presence with moderate technical maturity but significant gaps in security posture and compliance. Strategic recommendations include improving security headers, publishing privacy and cookie policies, verifying domain registration legitimacy, and enhancing transparency with contact and incident response information.
Finance · Czech Republic
62Medium
NIS2 2 · GDPR 55
NIS2 2 · GDPR 55
Asociace českých pojišťovacích makléřů (AČPM) is a professional association representing insurance brokers in the Czech Republic. Established in 1998, it serves as a key industry body advocating for members' interests, promoting ethical standards, and enhancing the professionalism of insurance brokerage. The association is active in both national and European contexts, being a member of the European federation BIPAR. Its services include member support, education, ethical guidance, and organizing industry events and competitions such as 'Pojišťovna roku'. Technically, the website employs modern JavaScript libraries including jQuery, TinyMCE, and Slick Carousel, and integrates Facebook SDK for social media functionality. The site is mobile-optimized with a cookie consent mechanism compliant with GDPR principles, although it lacks a formal privacy policy and terms of service pages. The technical implementation is solid but could benefit from enhanced security headers and accessibility improvements. From a security perspective, the site uses HTTPS and secure forms with CSRF tokens, but no explicit security headers were detected. The absence of WHOIS data limits domain trust verification, though the website content and professional presentation support legitimacy. No critical vulnerabilities or adult content were found, and the site maintains a safe content rating. Overall, the website is professional and trustworthy but would benefit from publishing comprehensive privacy and security policies, improving security headers, and clarifying domain registration details to enhance trust and compliance.
Český olympijský týmdualcareer.cz
Government · Czech Republic
57Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website www.olympijskytym.cz is the official portal for the Czech Olympic Team, providing comprehensive information about Olympic games, athlete support programs such as the Dual Career program, and educational initiatives. It serves as a national authoritative platform for Olympic-related content in the Czech Republic, targeting athletes, sports enthusiasts, and the general public interested in Olympic sports. The site demonstrates consistent branding and a professional presentation aligned with its governmental and non-profit nature. Technically, the website employs modern web technologies including HTML5, CSS3, and JavaScript, with integrations of tracking and analytics tools such as Google Tag Manager, Facebook SDK, Pinterest tracking, and Hotjar. The site is mobile optimized and accessible, with good SEO practices evident from meta tags and structured navigation. However, no explicit CMS or hosting provider information was identified. From a security perspective, the site uses HTTPS and shows no signs of exposed sensitive data or vulnerable libraries. Some standard security headers are not explicitly detected, and there is no visible security policy or incident response information. Privacy compliance is basic, with a cookie consent mechanism present but no clear privacy or terms of service pages found in the analyzed content. The WHOIS data is unavailable, likely due to privacy protection, which is common and justified for such an organization. Overall, the website is trustworthy and professional, with moderate to good scores in content quality, technical implementation, and security posture. Strategic improvements include publishing clear privacy and security policies, enhancing contact information visibility, and implementing additional security headers to strengthen the security posture.
Internet Index Czech, s.r.o.adulto.cz
E-commerce · Czech Republic
63Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Adulto.cz is a Czech-based company specializing in online age verification services for e-commerce platforms selling age-restricted products such as tobacco, alcohol, and adult goods. Founded in 2023 and operated by Internet Index Czech, s.r.o., the company has quickly established itself as a leading provider in the Czech and Slovak markets, serving over 450 e-shops and performing millions of verifications. Their service integrates multiple verification methods including bank identity and MojeID, ensuring compliance with Czech laws and protecting minors from restricted product sales. The website is professionally designed, mobile-optimized, and provides comprehensive information and customer testimonials, reinforcing trust and credibility.
Government · Czech Republic
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website web4ukraine.org is a small-scale advocacy platform focused on opposing Russian military aggression against Ukraine. It provides a JavaScript tool that is actively used on over 9,000 websites to delay Russian user visits, demonstrating a niche but impactful service. The site is hosted via Cloudflare and uses modern front-end technologies such as Bootstrap and Google Fonts, with Google Analytics integrated for visitor tracking. The content is clear, relevant, and professionally presented, targeting website owners and administrators who wish to participate in the campaign. From a technical perspective, the website employs a modern tech stack with good mobile optimization and moderate performance. However, it lacks some security best practices such as DNSSEC and security headers, which could be improved. The site uses HTTPS properly, ensuring encrypted communication. Privacy compliance is weak due to the absence of privacy and cookie policies, and no consent mechanisms are present. Security posture is moderate; no critical vulnerabilities or exposed sensitive data were detected, but the lack of security headers and DNSSEC reduces the overall security score. The WHOIS data is consistent with the website's origin and purpose, with no suspicious patterns. Overall, the website is trustworthy but could benefit from enhanced privacy and security measures. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies with consent mechanisms, and establishing incident response contacts to improve compliance and trustworthiness.
Informační turistické centrum Železná Rudaeshop-itc.cz
Retail · Czech Republic
54Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.eshop-itc.cz represents the online e-commerce platform of the Information Tourist Center Železná Ruda, focused on selling local souvenirs, books, and gifts related to the Šumava region in the Czech Republic. It targets tourists and local customers interested in regional products, operating as a small retail business with a niche market position. The site offers a catalog of products with customer ratings, a shopping cart system, and contact options including phone, email, and a contact form. Privacy and cookie policies are present, indicating GDPR compliance. Technically, the website uses a traditional jQuery-based stack with additional libraries such as Owl Carousel and FancyBox for UI components. The platform appears custom-built or proprietary, with moderate performance and good mobile optimization. SEO and accessibility features are basic but functional. No advanced analytics or tracking services were detected. From a security perspective, the site uses HTTPS and implements a cookie consent banner, but lacks visible security headers and vulnerability disclosure mechanisms. No WHOIS data was available for the domain, which reduces transparency and trustworthiness. The absence of security.txt or incident response contacts indicates room for improvement in security posture. Overall, the website is functional and serves its business purpose well, but would benefit from enhanced security practices, improved domain transparency, and more comprehensive privacy and incident response disclosures to strengthen trust and compliance.
Obecní úřad Chanovicechanovice.cz
Government · Czech Republic
51Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website www.chanovice.cz is the official municipal portal for the village of Chanovice in the Czech Republic. It serves as a comprehensive information hub for residents and visitors, offering details on local government, tourism, events, community services, and practical information. The site is well-structured with clear navigation and a focus on regional partnerships and community engagement. Technically, the site employs common web technologies such as jQuery, Flexslider, and Fancybox, and integrates Google Analytics and Google Custom Search for enhanced user experience and data insights. Security-wise, the site uses HTTPS and a cookie consent mechanism that defaults to denying ad and analytics storage, reflecting a privacy-conscious approach. However, the absence of a published privacy policy and WHOIS registration data limits full trust assessment. Overall, the site is professional, trustworthy, and serves its public service role effectively.
Obec Pačejovpacejov.cz
Government · Czech Republic
62Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Obec Pačejov operates as the official municipal government authority for the Pačejov area in the Czech Republic, providing essential public services, local news, and administrative support to citizens and businesses. The website serves as a comprehensive portal for local government information, including contact details, official documents, and community updates. The target audience primarily consists of local residents and entrepreneurs seeking municipal information and services. Technically, the website employs a traditional web stack with jQuery, Google Analytics, Font Awesome, and Fancybox for UI enhancements. The site is moderately optimized for mobile devices and accessibility, with a clear navigation structure and cookie consent mechanisms in place. However, the absence of visible HTTPS confirmation and security headers indicates room for improvement in security hardening. From a security perspective, the site demonstrates basic compliance with privacy regulations through cookie consent but lacks explicit privacy policies and security headers. The WHOIS data is unavailable, which raises concerns about domain registration transparency but does not necessarily indicate malicious intent given the official nature of the content. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced security practices and clearer privacy documentation. Strategically, the site should prioritize implementing HTTPS, adding security headers, and publishing comprehensive privacy and terms of service documents to improve trust and compliance. These steps will strengthen the site's security posture and align it with modern web standards, ensuring continued service reliability and user confidence.
ŠumavaNet.CZsumava.net
Hospitality · Czech Republic
63Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
ŠumavaNet.CZ operates a regional information portal focused on the Šumava region and surrounding areas, providing comprehensive tourism, accommodation, and cultural information. The website serves as a key resource for visitors and locals seeking lodging options, event calendars, and travel tips. It maintains a strong regional presence with partnerships and social media engagement. Technically, the site uses common web technologies including jQuery, Google Analytics, and Cookie Script, with a responsive design and good SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security headers are lacking. The absence of WHOIS data reduces domain registration trust but does not detract from the site's apparent legitimacy. Overall, the site is a well-maintained regional portal with moderate technical sophistication and good privacy compliance.
Obec Bezděkovbezdekov.cz
Government · Czech Republic
62Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
The website www.bezdekov.cz serves as the official municipal portal for the village of Bezděkov in the Czech Republic. It provides comprehensive information about the municipality, including history, local institutions, tourism, events, and community services. The site targets local residents and tourists interested in the region. The content is well-structured, primarily in Czech, and includes features such as event calendars, photo galleries, and links to local government resources. Technically, the site employs a traditional web stack with jQuery, Google Analytics, Google Custom Search, and third-party widgets like ElfSight for Instagram feeds. The site includes a cookie consent mechanism compliant with GDPR, indicating awareness of privacy regulations. However, no advanced security headers were detected, and HTTPS status could not be confirmed from the data provided. Security posture is moderate; the site does not expose sensitive data and uses consent management, but lacks visible security headers and explicit incident response or vulnerability disclosure mechanisms. The absence of WHOIS data reduces domain trustworthiness, though the website content and structure align with a legitimate local government entity. Overall, the site is functional and informative but would benefit from enhanced security practices, clearer contact information, and improved transparency regarding domain registration and security policies.
Město Hartmanicemuhartmanice.cz
Government · Czech Republic
62Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Město Hartmanice operates as a local government authority providing essential public services and information to its citizens and entrepreneurs. The website serves as an official portal for municipal administration, offering contact details, public notices, event calendars, and tourism information. The site targets local residents and visitors, positioning itself as a trusted source of community and governmental information within the Czech Republic. Technically, the website employs standard web technologies including jQuery, Google Analytics, and Google Custom Search Engine, with a focus on accessibility and mobile responsiveness. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though it lacks explicit security headers and a published privacy policy page. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's legitimacy given the official nature and comprehensive contact information. Overall, the website is professional, trustworthy, and functional, serving its intended audience effectively.
Úřad městyse Čachrovcachrov.net
Government · Czech Republic
57Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
The website www.cachrov.net/cachrov/ serves as an informational portal for the municipality of Čachrov in the Czech Republic, focusing on local tourism, history, municipal services, and community events. It targets local residents and tourists interested in the Šumava region, providing comprehensive content such as event calendars, photo galleries, and official municipal information. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the site employs common web technologies including jQuery, Google Analytics, and third-party widgets for Instagram feeds and cookie consent management. However, there is no explicit evidence of HTTPS enforcement or advanced security headers, which could be improved to enhance security posture. The WHOIS data for the domain is missing or unavailable, raising concerns about domain registration legitimacy despite the official nature of the content. Privacy compliance is well addressed with a detailed GDPR page and cookie consent mechanisms. Overall, the site is functional and trustworthy from a content perspective but requires improvements in security and domain registration transparency.
Informační server ŠumavaNet.CZstachy.net
Other · Czech Republic
58Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
The website www.stachy.net/stachy/ serves as a regional information and tourism portal for the town of Stachy and its surroundings in the Czech Republic. It provides visitors with comprehensive information on local attractions, events, accommodation, webcams, and cultural activities. The site is developed and hosted by SumavaNet.CZ in cooperation with the local municipal office, indicating a community-focused information service. The target audience is general public interested in tourism and local culture. Technically, the site uses standard web technologies including jQuery, Flexslider, and Google Analytics, with a cookie consent mechanism compliant with GDPR principles. The website is accessible, mobile-friendly, and well-structured with good SEO practices. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the active and consistent content suggests legitimate use. Security posture is moderate with HTTPS enabled but lacking advanced security headers. No contact emails or phone numbers are visible, which may affect user trust and business credibility.
ŠumavaNet.CZklatovynet.cz
Hospitality · Czech Republic
51Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
ŠumavaNet.CZ operates a regional information portal dedicated to the Šumava and Pošumaví regions in the Czech Republic, focusing on accommodation listings, tourism, events, and local business promotion. The website serves as a valuable resource for tourists and local businesses, offering comprehensive content including event calendars, photo and video galleries, and a large accommodation catalog. It holds a recognized position as a partner of the Plzeňský kraj and has historical recognition as a top regional server. Technically, the site uses common web technologies such as jQuery, Google Analytics, and Google Tag Manager, with a responsive design and good navigation. Privacy and cookie policies are implemented with consent mechanisms, reflecting basic GDPR compliance. However, the absence of WHOIS data and security headers indicates areas for improvement in transparency and security. Overall, the site is professional, content-rich, and trustworthy for its target audience.
Zemědělská akciová společnost Kolovečdopravniznacky.info
Transportation · Czech Republic
58Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.dopravniznacky.info represents Zemědělská akciová společnost Koloveč, a small Czech company specializing in the manufacturing and sale of traffic signs and related accessories. The business model revolves around direct sales via an e-shop platform combined with personalized customer service and consultation. The company emphasizes quality, tradition, and customer satisfaction, targeting organizations and businesses requiring traffic signage solutions. Technically, the site is built on the inPage CMS platform, leveraging common web technologies such as jQuery and Bootstrap, with additional tools like Smartlook for session recording and Google Analytics for traffic analysis. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site uses HTTPS but lacks visible advanced security headers and explicit privacy or security policies, which could be improved. The WHOIS data is unavailable, limiting domain trust verification, but the site content and contact information appear legitimate. Overall, the website is functional and professional but could benefit from enhanced security and compliance documentation.
- HHotel Jenišov
hoteljenisov.cz
Hospitality · Czech Republic
58Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Hotel Jenišov is a small family-run hotel located near Lipno lake in the Czech Republic, offering accommodation and leisure services such as cycling, fishing, and winter sports. The website presents a clear business focus on regional tourism and family-friendly services. Technically, the site is built on ASP.NET WebForms with legacy JavaScript libraries and includes common tracking and advertising scripts. Security posture is moderate with HTTPS enabled but lacks modern security headers and explicit privacy policies. Cookie consent is implemented, but privacy compliance could be improved. Overall, the website is functional and professional but would benefit from technical and compliance enhancements.
Prácheňsko zájmové sdružení právnických osobprachensko.org
Government · Czech Republic
50Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Prácheňsko is a regional association of legal entities based in Horažďovice, Czech Republic, focused on promoting and developing the Prácheňsko region, including cultural heritage, tourism, and community activities. The website serves as an information portal for local municipalities and visitors, offering details on regional attractions, activities, and administrative matters. The organization operates as a non-profit entity with a clear local focus and a stable presence since 2009. Technically, the website employs a modern JavaScript stack including jQuery, Flexslider, and CookieScript for consent management, hosted by a reputable registrar and hosting provider. Security posture is good with HTTPS enabled and cookie consent implemented, though some security headers could be improved. Privacy compliance is well addressed with a clear cookie policy and GDPR-aligned consent mechanisms. Contact information is transparent and easily accessible, enhancing business credibility. Overall, the site is professional, trustworthy, and well-suited for its target audience.
ARKO-CONSULT s.r.o.aparthotel-teddy.com
Hospitality · Czech Republic
58Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Aparthotel Teddy Kvilda is a small hospitality business operating family apartments and wellness services in the Šumava National Park region of the Czech Republic. The company, ARKO-CONSULT s.r.o., provides 25 fully equipped apartments with wellness facilities, targeting families and couples seeking nature and relaxation. The website is professionally designed using WordPress with the Divi theme and integrates modern booking and marketing tools. Privacy compliance is well addressed with GDPR and cookie policies, and contact information is clearly presented. Security posture is good with HTTPS and cookie consent, though some security headers could be improved. WHOIS data is unavailable, which slightly reduces trust but the overall business presentation is credible and professional.
AUTOSPOL PLUS spol. s r.o.autospolplus.cz
Transportation · Czech Republic
63Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
AUTOSPOL PLUS spol. s r.o. operates as an authorized Škoda Auto dealer in the Czech Republic, providing new and used vehicle sales, authorized servicing, financing, insurance, and accessories. The website is professionally designed with consistent Škoda branding and targets both individual consumers and corporate clients interested in Škoda vehicles and related services. The business model focuses on automotive retail and aftersales services, leveraging Škoda's brand and product portfolio. Technically, the site uses modern web technologies including Kentico CMS, Vue.js, and integrates analytics and marketing tools such as Google Tag Manager and Hotjar. The site is mobile-optimized and accessible, with good SEO practices. Security posture is strong with HTTPS enforced and security headers present, though explicit privacy and cookie policies are not found, which is a compliance gap. WHOIS data is unavailable, limiting domain trust assessment, but the site content and branding strongly indicate legitimacy. Overall, the site is functional, professional, and secure but would benefit from enhanced privacy compliance and clearer contact information.
Czech Free Media s.r.o.klostermannovachata.cz
Hospitality · Czech Republic
53Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Klostermannova chata is a small hospitality business operating a hotel and restaurant in the Šumava region of the Czech Republic. The website presents a well-structured and professionally designed platform targeting tourists, families, and corporate clients with accommodation, dining, and leisure services. The business emphasizes its long history and local presence. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Google Analytics, with a cookie consent mechanism supporting GDPR compliance. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency. Security posture is moderate with no detected security headers and no explicit incident response or vulnerability disclosure policies. Overall, the website is functional and trustworthy from a user perspective but would benefit from improved domain transparency and enhanced security practices.
- Vodafone Czech Republic a. s.
oskarta.cz
Telecommunications · Czech Republic
67Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Oskarta.cz is a Czech Republic-based prepaid mobile telecommunications service brand operated under Vodafone Czech Republic a. s. The website primarily serves as an informational and redirect portal, informing users that Oskarta prepaid services are now available through Vodafone's main website. The business targets prepaid mobile users seeking affordable calling and SMS options without contractual obligations. The site provides essential service information, pricing, and links to terms, privacy, and cookie policies, reflecting a professional and user-focused approach. Technically, the website employs established JavaScript libraries such as jQuery and Modernizr, and integrates enterprise-grade analytics tools like Adobe Omniture and Tealium, indicating a mature digital infrastructure. Hosting and domain management appear to be under Vodafone's control, although WHOIS data is unavailable, possibly due to privacy protection or domain status issues. Security posture is generally good with enforced HTTPS and cookie consent mechanisms; however, explicit security headers and incident response information are absent, representing areas for improvement. Overall, the website is trustworthy and professionally maintained, but the lack of WHOIS transparency and some security best practices slightly reduce its trust score.
Alpiro s.r.o.ssls.cz
Technology · Czech Republic
62Medium
NIS2 2 · GDPR 33
NIS2 2 · GDPR 33
SSLS.cz is an established Czech online reseller specializing in SSL certificates and digital security products. Operated by Alpiro s.r.o., it holds a strong market position as the largest SSL certificate provider in the Czech Republic, offering a wide range of certificates from multiple trusted certificate authorities. The website provides comprehensive services including SSL certificates by brand and validation type, wildcard and multidomain certificates, digital signatures, code signing, CSR generation, and API integration for automation. The business model focuses on competitive pricing and extensive product selection targeting businesses and individuals seeking web security solutions in the Czech market. Technically, the website employs standard web technologies such as JavaScript and jQuery, with responsive design and good SEO practices. While performance is moderate, mobile optimization is good, and accessibility is basic. The site includes a cookie consent mechanism and secure login options, including certificate-based authentication, indicating a reasonable level of digital maturity. However, the absence of explicit security headers and a formal security policy page suggests room for improvement in security hardening. From a security perspective, the site enforces HTTPS and offers secure user authentication methods. No vulnerabilities or exposed sensitive data were detected in the content. The lack of WHOIS data reduces transparency and slightly impacts trustworthiness, but the overall security posture is solid for an e-commerce platform of this nature. Privacy compliance is supported by a privacy policy and cookie consent, aligning with GDPR requirements. Overall, SSLS.cz presents a professional and trustworthy platform for SSL certificate procurement with a strong local market presence. Strategic enhancements in security headers, incident response transparency, and WHOIS data availability would further strengthen its security and compliance profile.
Lidllidl.cz
Retail · Czech Republic
74Medium
NIS2 25 · GDPR 100
NIS2 25 · GDPR 100
Lidl.cz is the Czech Republic online presence of Lidl, a major European discount supermarket chain. The website offers retail grocery and consumer goods services with a focus on promotional offers and online shopping convenience. The site is professionally designed with consistent branding and targets a general audience. Technically, the site employs modern JavaScript libraries, cookie consent management, and integrates third-party services such as YouTube and Google Analytics. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected. Privacy compliance is robust, with a comprehensive privacy policy and GDPR adherence clearly indicated. Overall, the site presents a low risk profile with no signs of blocking or suspicious activity.
Garmondi CZ s.r.o.garmondi.cz
Retail · Czech Republic
58Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Garmondi CZ s.r.o. is a Czech Republic-based company specializing in retail and e-commerce distribution, primarily focusing on food, beverages, baby products, and cosmetics. Established in 2000, it holds a solid market position as a professional distributor and marketer of quality brands. The website reflects a well-structured business with clear product categories and brand representation, targeting retailers and consumers interested in quality products. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Cookiebot, indicating a mature digital infrastructure. The presence of Google Tag Manager and Google Analytics shows active marketing and analytics efforts. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks visible security headers and explicit privacy or security policies, which are areas for improvement. The absence of WHOIS data reduces domain trust verification, though the website's professional presentation supports legitimacy. Overall, the site scores well on content quality, technical implementation, and business credibility but should enhance privacy and security transparency.
- DDeva Nutrition a.s.
deva.cz
Manufacturing · Czech Republic
65Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Deva Nutrition a.s. is a well-established European manufacturer specializing in private label baby food and infant drinks. With over 75 years of experience, the company positions itself as a leader in food safety, product quality, and manufacturing efficiency. Their product portfolio includes a comprehensive range of fruit-based, natural, and organic baby food products, targeting private label markets and retailers. The website reflects a professional and consistent brand image with clear contact information and trust indicators such as VAT number and whistleblowing policy.
COVITAR s.r.o.covitar.cz
Manufacturing · Czech Republic
53Medium
NIS2 22 · GDPR 25
NIS2 22 · GDPR 25
COVITAR s.r.o. is a Czech-based supplier specializing in natural raw materials such as dried fruits, nuts, additives, and semi-finished fruit products for the food industry. The company emphasizes natural delicacies and organic quality products, catering primarily to food manufacturers and businesses seeking natural ingredient solutions. Their business model includes dropshipping, private label services, and fulfillment, positioning them as a versatile supplier in their niche market. The website reflects a professional and consistent brand image with clear contact channels and EU co-financing trust indicators. Technically, the site uses modern web standards with good mobile optimization and SEO practices, though it lacks advanced frameworks or CMS indications. Security posture is adequate with HTTPS and CAPTCHA-protected forms but lacks security headers and formal privacy or cookie policies, indicating room for compliance improvements. WHOIS data is unavailable, which slightly impacts domain trustworthiness, but overall, the site presents a credible and professional business presence.
Coffee Sourcecoffeesource.eu
E-commerce · Czech Republic
68Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Coffee Source is a Czech-based specialty coffee roastery and e-commerce retailer offering high-quality coffee beans sourced directly from farmers. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Bold Subscriptions and Rivo Loyalty to enhance customer engagement and retention. The site targets coffee enthusiasts primarily in the Czech Republic and surrounding European markets, emphasizing quality and direct-from-farmer sourcing. Technically, the site employs a robust tech stack with multiple analytics and marketing tools, ensuring detailed tracking of user interactions and e-commerce events. Security posture is strong with HTTPS enforced and appropriate security headers, though privacy and cookie policies are notably absent, which impacts compliance and user trust. Overall, the site is professional and functional with room for improvement in privacy transparency and contact information availability.
- Blendea
blendea.cz
Healthcare · Czech Republic
73Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Blendea.cz is a Czech e-commerce website specializing in premium natural dietary supplements and functional foods aimed at supporting overall health, energy, and vitality. The site targets health-conscious consumers in the Czech Republic and offers a broad range of products categorized by health goals and product types. The business model is retail-focused, leveraging an online platform to reach its audience. The website presents a professional and consistent brand image with good content quality and clear navigation.
Non-profit · Belgium
57Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The European Food Information Council (EUFIC) is a well-established non-profit organization focused on providing science-based, practical information on food, health, and nutrition to European citizens. Their mission centers on empowering healthier and more sustainable lifestyle choices through educational content and participation in European projects. The website is professionally designed with clear navigation, multilingual support, and regularly updated content including articles, news, and resources. The organization maintains active social media profiles and provides clear contact information including a physical address in Brussels and a company email. Technically, the website employs modern analytics and tracking tools such as Google Analytics, Matomo, and Hotjar, alongside Google Tag Manager and Typeform for forms and surveys. The site is HTTPS secured with CSRF protection on forms, indicating a good security baseline. However, some security best practices like security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and user trust. The WHOIS data is incomplete and malformed, lacking registrar and registrant details, which slightly reduces domain trustworthiness. Despite this, the website content and professional presentation strongly support the legitimacy of EUFIC as a reputable non-profit entity. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, EUFIC's website demonstrates strong content quality, good technical implementation, and a solid security posture with room for improvement in privacy compliance and transparency. Strategic enhancements in security headers, cookie consent, and publishing a security policy would further strengthen their digital maturity and user trust.
Ministerstvo zemědělstvíviscojis.cz
Government · Czech Republic
65Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website viscojis.cz is a Czech government-affiliated informational platform focused on food, health, nutrition, and food safety. It serves as an educational resource providing detailed content on nutrients, healthy eating habits, food safety practices, and nutrition-related diseases. The site targets the general public interested in nutrition and food safety, positioning itself as an authoritative source backed by the Ministry of Agriculture of the Czech Republic. Key services include educational articles, food safety guidelines, and health-related nutrition information. Technically, the website is built on WordPress 6.8.3 with standard web technologies such as jQuery and Bootstrap Icons. It demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The site uses HTTPS, ensuring secure communication, but lacks some security headers and privacy compliance features such as privacy and cookie policies. No advertising or tracking technologies were detected, indicating a privacy-conscious approach. From a security perspective, the site benefits from HTTPS and secure form handling but could improve by implementing security headers and publishing vulnerability disclosure information. The absence of privacy and cookie policies represents a compliance gap, especially under GDPR. Contact information is clearly provided, enhancing trust and credibility. WHOIS data confirms the domain's legitimacy and consistency with the government affiliation. Overall, viscojis.cz is a trustworthy, well-structured government resource with good content quality and technical implementation. Strategic improvements in privacy compliance and security headers would enhance its security posture and regulatory adherence.
- Česká spořitelna a.s.
tradergo.cz
Finance · Czech Republic
70Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
TraderGO is a modern online trading platform operated under the Česká spořitelna brand, offering professional investment services including trading in stocks, commodities, currencies, and other assets. The platform targets retail and professional investors primarily in the Czech Republic, providing a multi-device accessible application and educational resources. The website is well-branded, professionally designed, and integrates secure login and demo account features. Technically, the site uses modern web technologies including JavaScript modules, Google Tag Manager, and ElasticSearch for search functionality, hosted likely on Erste Group infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be further verified. The absence of WHOIS data is a notable gap but does not significantly detract from trust due to the strong brand presence. Overall, the site demonstrates good digital maturity and compliance with privacy regulations.
- Erste Premier
erstepremier.cz
Finance · Czech Republic
74Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Erste Premier is a premium banking service under the Česká spořitelna and Erste Group umbrella, targeting demanding clients with personalized financial care and exclusive benefits. The website presents a professional and well-structured digital presence, leveraging modern web technologies and frameworks to deliver a responsive and accessible user experience. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data is typical for financial institutions prioritizing privacy. Overall, the site reflects a trustworthy and credible financial service provider with a clear focus on client engagement and premium offerings.
- WPCodeBox
wpcodebin.com
Technology
60Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
WPCodeBin is a niche technology platform offering a free service for sharing WordPress code snippets, targeting WordPress developers and users. The website is built using modern web technologies including React and Next.js, hosted with DNS managed by Cloudflare and domain registered via NameCheap. The platform is relatively new, founded in 2022, and operates under the parent brand WPCodeBox. The site demonstrates good technical infrastructure with responsive design and moderate performance. Security posture is decent with HTTPS enabled and some security headers indicated in code snippets, though DNSSEC is not enabled and no explicit security or privacy policies are published. The absence of privacy and cookie policies represents a compliance gap. No contact information or incident response details are provided, limiting direct communication channels. Overall, the site is professional and trustworthy within its niche but could improve compliance and security transparency.
Soflyybreakdance.com
Technology
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Breakdance.com is the official website for Breakdance, a modern visual website builder for WordPress developed by Soflyy. The company positions itself as a powerful and easy-to-use alternative to popular WordPress builders like Elementor and Divi, targeting WordPress creators, developers, and agencies. The site offers extensive features including WooCommerce integration, form and popup builders, dynamic data handling, and AI-powered content creation. The business model is subscription-based with an unlimited site license offered annually. The website demonstrates a mature digital presence with professional design, comprehensive tutorials, and active social media engagement.
AnalyticsWPanalyticswp.com
Technology
65Medium
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
AnalyticsWP is a recently launched technology company offering a lightweight, privacy-focused WordPress analytics plugin designed for site owners, agencies, and developers. The product emphasizes accurate, first-party tracking and user journey insights, with native WooCommerce integration. The website is professionally designed using WordPress and related technologies, with good SEO and mobile optimization. However, it lacks visible privacy and cookie policies, which impacts privacy compliance scores. Security posture is decent with HTTPS and domain protections but could be improved by enabling DNSSEC and adding security headers. The domain registration is transparent and consistent with the business claims, enhancing legitimacy. Overall, AnalyticsWP presents a credible and professional offering in the WordPress analytics market but should improve privacy disclosures and security best practices.
WP All Importwpallimport.com
Technology
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
WP All Import is a specialized WordPress plugin provider focused on enabling users to import and export data in XML, CSV, Excel, and Google Sheets formats into WordPress and WooCommerce environments. The company holds a strong market position with over 200,000 active installs and a large number of positive reviews, targeting developers, agencies, and businesses that require flexible data management solutions. Their website demonstrates a mature digital infrastructure with modern technologies, SEO optimization, and mobile responsiveness. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly available. The absence of WHOIS registration data introduces some uncertainty about domain legitimacy, but the professional presentation and market presence mitigate this risk. Overall, WP All Import presents as a credible and professional business with room for improvement in transparency and security disclosures.
- MVM Zrt.
mvm.hu
Energy · Hungary
73Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
MVM Zrt. is a leading Hungarian energy group with a long-established presence since 1996. The company operates across multiple sectors of the energy industry including production, storage, transmission, retail, and related services. The website reflects a mature corporate digital presence with detailed information about the group and its subsidiaries, targeting a broad audience including customers, investors, and partners. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, and is well optimized for mobile devices. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit incident response contact channels. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.
- ViennaLab Diagnostics GmbH
viennalab.com
Healthcare · Austria
56Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
ViennaLab Diagnostics GmbH is a specialized healthcare company focused on developing and manufacturing in vitro diagnostic assays for genetic disorders, pharmacogenetics, cancer, and microbiome analysis. Established in 2000 and headquartered in Austria, it operates as part of the BioVendor Group, leveraging a niche market position with a strong emphasis on genetic variant detection. The website reflects a professional and consistent brand image targeting healthcare professionals and laboratories. Technically, the site is built on Joomla CMS with modern frontend technologies such as jQuery and Bootstrap, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and domain transfer protection, though improvements like DNSSEC and security headers are recommended. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, indicating GDPR awareness. Overall, the site is trustworthy and professionally maintained, though it lacks visible contact emails and phone numbers on the homepage and does not provide terms of service or explicit security policies. Strategic enhancements in security transparency and contact accessibility would further strengthen its digital maturity.
PragueBest s.r.o.praguebest.cz
Technology · Czech Republic
61Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
PragueBest s.r.o. is a well-established Czech digital agency founded in 2002, specializing in custom website and e-commerce development tailored to client needs. The company serves a diverse client base including retail, transportation, and lifestyle sectors, with a strong portfolio of notable clients and industry awards. Their business model focuses on delivering bespoke digital solutions integrating modern technologies and ERP systems. Technically, the website demonstrates a mature digital infrastructure with modern JavaScript libraries, Google reCAPTCHA v3, and cookie consent management, reflecting a high level of digital maturity and user experience optimization. Security posture is strong with HTTPS enforced and secure form handling, though explicit security headers and policies could be improved. Privacy compliance is robust, with clear GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized, though the lack of WHOIS data slightly impacts domain trust assessment.
Selltoroselltoro.com
Technology
70Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Selltoro is a small technology company specializing in automated advertising solutions that guarantee returns without fixed fees, targeting businesses seeking to increase orders and grow. The website is built using modern web technologies including Framer, Google Tag Manager, Microsoft Clarity, and Facebook Pixel, indicating a moderate level of digital maturity. The technical infrastructure is adequate with good mobile optimization and basic SEO, though some improvements in accessibility and performance could be made. Security posture is moderate; HTTPS is enabled and cookie consent is implemented, but the absence of DNSSEC and security headers reduces overall security. No privacy policy or terms of service pages were found, and contact information is not publicly available, which may impact trust and compliance. Overall, the site is professional and safe for general audiences but would benefit from enhanced security and compliance documentation.
Acceptable Adsacceptableads.com
Technology
57Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Acceptable Ads is a technology-focused organization established in 2011 by the creators of AdBlock Plus, aiming to promote a sustainable and user-friendly online advertising ecosystem. The website serves as a platform to engage publishers, advertisers, and ad-filtering users by offering a standard for light and nonintrusive advertising. The business is positioned as a trusted intermediary in the online advertising space, with recognition from major media outlets and a clear focus on improving user experience. Technically, the website is built on WordPress using modern frameworks such as Elementor and Astra theme, with integration of Google Analytics for visitor insights. The site demonstrates good SEO practices, mobile optimization, and basic accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though there is room for improvement in security headers and explicit incident response documentation. No critical vulnerabilities or suspicious content were detected. The domain registration is consistent with the business history and geographic location, enhancing trustworthiness. However, the absence of explicit contact emails and phone numbers, as well as missing terms of service and security policy pages, slightly reduce the overall credibility. Strategically, Acceptable Ads should focus on enhancing transparency by publishing detailed security and incident response policies, enabling DNSSEC, and providing clear contact channels for security and abuse reporting. These steps will strengthen trust and compliance posture, supporting their role as a leader in ethical online advertising.