High-risk security reports

Baltic Legal operates a specialized immigration and legal consultancy website focused on residence permits and immigration services in Latvia and the broader European Union. The company offers services including residence permits via real estate investment, business investment, and bank deposits, alongside legal assistance in corporate and immigration law. The website is well-structured, multilingual, and provides detailed information about immigration policies, visa requirements, and investment options. Technically, the site uses standard web technologies with Google Analytics and Tag Manager for tracking, but lacks advanced security headers and cookie consent mechanisms. The WHOIS data is fully redacted as per EURid policy, which is typical for .eu domains and does not raise immediate concerns. Overall, the site presents a professional image with moderate technical maturity and some room for security and privacy improvements.

The website kul.ee is registered to Haridus- ja Teadusministeerium (EENet), an Estonian government entity, with a domain age dating back to 2010. The site is currently inaccessible due to a Cloudflare security challenge page requiring human verification, which blocks access to actual website content. Consequently, no business description, contact information, or user-facing content is available for analysis. The technical infrastructure relies on Cloudflare services for security and performance, including the Turnstile captcha and Cloudflare Insights for analytics. Security posture cannot be fully assessed due to the blocked content, but the use of Cloudflare indicates a baseline security approach. Privacy and cookie policies are not detectable on the challenge page, and no forms or data collection mechanisms are visible beyond the security verification. Overall, the domain registration data supports legitimacy as a government entity website, but the lack of accessible content limits comprehensive evaluation.

K

Kultuurkapital

kulka.ee

49

Kultuurkapital is a key Estonian non-profit government-related institution dedicated to supporting culture and cultural heritage through targeted funding and grants. The website provides extensive information about various cultural programs, expert groups, and funding opportunities, primarily targeting Estonian cultural organizations and artists. The domain is well-established since 2010 and registered with a reputable Estonian registrar, supporting the legitimacy of the organization. Technically, the website uses the Voog CMS platform and integrates Google Analytics and Tag Manager for user tracking. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and professional design. However, explicit privacy and cookie policies are missing, and no contact emails or phone numbers are directly visible in the HTML content, which may impact user trust and privacy compliance. Security headers are not detected, indicating room for improvement in security posture. Overall, the website is professional and trustworthy but could enhance privacy compliance and security best practices.

R

Rollmer OÜ

rollmer.ee

41

Rollmer OÜ is an established Estonian company specializing in the sale of industrial accessories including bearings, seals, and power transmission products. The company operates both retail and wholesale channels with physical stores located in Tallinn and Tartu, targeting industrial, agricultural, forestry, service, and retail businesses. The website reflects a professional presence with clear product categories and consistent branding, supporting its market position as a regional supplier. Technically, the site is built on WordPress using the Enfold theme and Yoast SEO plugin, indicating moderate digital maturity. However, the absence of HTTPS enforcement and security headers represents a significant security gap. Privacy compliance is weak, with no visible privacy or cookie policies and no consent mechanisms. The site lacks active analytics tracking despite plugin presence, suggesting limited user data collection. Overall, the security posture is moderate but requires improvements to meet modern standards. Strategic recommendations include implementing HTTPS, adding security headers, establishing privacy and cookie policies, and enhancing incident response capabilities to strengthen trust and compliance.

E

Eesti Olümpiakomitee

eok.ee

35

Eesti Olümpiakomitee is the official umbrella organization for sports and Olympic activities in Estonia, providing support to athletes, organizing events, and promoting sports culture nationally. The website reflects a well-established non-profit entity with strong partnerships and sponsorships, targeting the Estonian sports community and general public interested in Olympic sports. Technically, the site uses a modern stack including Bootstrap, jQuery, and Voog CMS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some improvements in security headers and library updates are recommended. Privacy compliance is moderate with a clear cookie consent mechanism but lacking explicit privacy policy and terms of service pages. Overall, the site is professional, trustworthy, and functional with room for technical and compliance enhancements.

E

Eesti Antidopingu ja Spordieetika Sihtasutus

eadse.ee

43

Eesti Antidopingu ja Spordieetika Sihtasutus is a government-affiliated non-profit organization dedicated to promoting fair play, anti-doping measures, and ethical conduct in sports within Estonia. The organization provides education, prevention, and regulatory oversight services to athletes, sports organizations, and the public. The website serves as an informational and educational platform with resources, news, and training offerings related to sports ethics and anti-doping. Technically, the website is built on WordPress using the Avada theme and integrates modern plugins such as Yoast SEO and Revolution Slider. It employs Google Analytics for visitor tracking but lacks visible cookie consent mechanisms and privacy policy disclosures, which are critical for GDPR compliance. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but security headers and incident response information are absent. Overall, the website is professional, well-branded, and trustworthy, though it would benefit from enhanced privacy compliance and explicit contact details.

P

PD Instore

neoinstore.com

43

NEO Retail Displayware is a specialized retail merchandising company offering innovative pegboard hardware and signage solutions under the patented neoPEGS™ brand. Their products target retail businesses seeking modern, customizable, and cost-effective displayware. The website is built on WordPress using WPBakery Page Builder and includes standard web technologies such as jQuery and FontAwesome. The technical infrastructure is moderate in performance with good mobile optimization but basic accessibility and SEO features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy but would benefit from improved privacy and security practices.

R

Restaurace Mincovna

restauracemincovna.cz

45

Restaurace Mincovna is a well-established restaurant located in the prestigious Staroměstské náměstí in Prague, offering traditional Czech cuisine with a modern twist and a selection of wines and Pilsner tank beer. The business targets both tourists and local patrons, leveraging its historic ambiance and prime location to maintain a strong market position in the hospitality sector. The website reflects a professional digital presence with clear branding and comprehensive business information. Technically, the website is built on WordPress with modern analytics and marketing tools integrated, including Google Analytics 4 and Google Tag Manager. The site implements a robust cookie consent mechanism aligned with GDPR requirements, enhancing privacy compliance. Performance and mobile optimization are good, though accessibility features are basic. No significant technical vulnerabilities were detected, but security headers could be improved. From a security perspective, the site uses HTTPS and employs cookie consent management, but lacks visible security headers and a public security or incident response policy. The absence of WHOIS data limits domain trust verification, though the website content and business details appear legitimate. Overall, the site demonstrates a moderate to good security posture with room for enhancement in transparency and technical security controls. Strategically, the business should focus on improving security headers, publishing incident response and vulnerability disclosure policies, and obtaining verifiable WHOIS data to enhance trust. Continued investment in privacy compliance and user experience will support sustained market credibility and customer trust.

V

VeKaPa s.r.o.

utelleru.cz

48

Restaurant U Tellerů is a small hospitality business located in Prague, Czech Republic, specializing in modern Czech cuisine and charcoal-grilled steaks. The restaurant emphasizes quality dining experiences with a focus on local specialties and beverages such as Pilsner Urquell beer. The website supports reservations and offers gift vouchers, targeting local and tourist diners seeking authentic Czech culinary experiences. The business maintains an active presence on social media platforms including Facebook, Instagram, Pinterest, and TripAdvisor, enhancing its market visibility and customer engagement. Technically, the website is built on WordPress CMS, utilizing common plugins for analytics, cookie consent, and responsive design. It integrates Google Analytics 4, Facebook Pixel, and Google Tag Manager for marketing and tracking purposes, with a compliant cookie consent mechanism in place. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement in loading speed and security headers. From a security perspective, the site enforces HTTPS and employs cookie consent with opt-in features, reflecting a good privacy posture. However, the absence of security headers and a published privacy policy or incident response information indicates areas for enhancement. The WHOIS data is unavailable, which raises concerns about domain registration transparency but does not directly impact the website's operational legitimacy. Overall, the website presents a professional and trustworthy front for the restaurant business, with recommendations to improve security practices, publish comprehensive privacy and security policies, and verify domain registration details to strengthen trust and compliance.

B

Bloom Robbins SI

bloomrobbins.si

47

Bloom Robbins SI is a Slovenian e-commerce business specializing in vitamins and supplements aimed at supporting hair health and growth. The company operates primarily through a Shopify-based online store, targeting consumers interested in hair care products. The website is professionally designed with consistent branding and good content quality, focusing on product benefits and customer engagement. The business appears to be relatively new, with domain registration dating from early 2023, and is part of a broader network of regional sister sites serving multiple European countries. Technically, the website leverages modern e-commerce technologies including Shopify's Dawn theme, Google Tag Manager, Facebook Pixel, and Klaviyo for marketing automation and analytics. Hosting is managed via Cloudflare, ensuring good performance and security. The site includes GDPR-compliant cookie consent mechanisms and a clear privacy policy, reflecting a mature approach to privacy and data protection. However, some standard legal pages such as terms of service and security policies are missing, and no direct contact information is readily available on the site. From a security perspective, the site enforces HTTPS and employs consent management for tracking and marketing scripts. While no critical vulnerabilities or exposed sensitive data were detected, the absence of explicit security headers and incident response information suggests room for improvement. The domain registration is consistent and transparent, with no privacy protection masking registrant details, which supports legitimacy. Overall, Bloom Robbins SI presents a solid e-commerce presence with good technical and privacy compliance foundations. Strategic enhancements in security policies, contact transparency, and legal documentation would further strengthen trust and compliance posture.

T

TESCO

tesco.cz

39

TESCO.cz is a Czech-based technology business specializing in servers and workstations, primarily offering Intel platform servers, server components, custom configurations, and maintenance services. The website presents a straightforward informational portal targeting businesses requiring reliable IT infrastructure hardware. The domain has a long history dating back to 1997, supporting the company's established market presence. Technically, the website uses jQuery and Google Analytics but lacks modern CMS or advanced frameworks. The site is basic in design and functionality, with limited mobile optimization and accessibility features. Security posture is moderate but lacks visible HTTPS confirmation and security headers, and no privacy or cookie policies are present, indicating compliance gaps. Contact information is clearly provided, but no forms or social media links are available. Overall, the site is functional but would benefit from enhanced security, privacy compliance, and technical modernization.

The website kidparentpower.com is currently inaccessible due to an invalid SSL certificate on the origin server, as indicated by Cloudflare error 526. This prevents any meaningful content from being served to visitors, resulting in a complete lack of visible business information, policies, or contact details. The domain is registered with GoDaddy.com, LLC since 2020, which suggests a legitimate registration, but the absence of a valid SSL certificate severely impacts trust and security posture. Technically, the site uses Cloudflare as a CDN and WAF, but the origin server's SSL misconfiguration negates these benefits. No metadata, structured data, or analytics scripts are present, indicating low digital maturity. Security posture is poor due to the SSL issue and lack of security headers or policies. Overall, the site is not compliant with privacy or cookie regulations, and no business credibility signals are available.

The website didiksugiarto.com is currently inaccessible due to a Cloudflare error 526 indicating an invalid SSL certificate on the origin server. This prevents any meaningful content from being displayed to visitors. The domain is registered with NameCheap since 2021 and uses Cloudflare DNS services. No business or contact information is available on the site, and no privacy or cookie policies are present. The technical infrastructure relies on Cloudflare but lacks a valid SSL certificate, which is a critical security flaw. Overall, the website's digital maturity is low, with poor content quality, minimal technical implementation, and weak security posture. Immediate remediation of the SSL certificate issue is necessary to restore accessibility and trust.

The website arizzitano.com is currently inaccessible due to an invalid SSL certificate on the origin server, as indicated by Cloudflare's Error 526. This prevents any meaningful content or business information from being displayed to visitors. The domain is registered with NameCheap, Inc. since 2021 and uses Cloudflare DNS services, but the lack of a valid SSL certificate severely impacts trust and security posture. No privacy, cookie, or terms of service policies are present, and no contact or business details are available on the landing page. Technically, the site relies on Cloudflare but lacks modern SEO, accessibility, and performance optimizations. Overall, the site is in a poor state of readiness for public or business use.

The website tokoblog.net is currently inaccessible due to an invalid SSL certificate on the origin server, resulting in a Cloudflare Error 526. This prevents any meaningful content or business information from being accessed or analyzed. The domain is registered with NameCheap, Inc. since 2021 and uses Cloudflare DNS services, but lacks DNSSEC and a valid SSL certificate, which significantly impacts its security posture and trustworthiness. No privacy, cookie, or terms of service policies are present, and no contact information or business details are available on the error page. The technical infrastructure relies on Cloudflare as a CDN and security provider, but the SSL misconfiguration undermines the site's availability and security. From a security perspective, the primary concern is the invalid SSL certificate that blocks user access and may expose visitors to risks if bypassed. The absence of security headers and policies further weakens the site's security maturity. Business credibility and privacy compliance cannot be assessed due to lack of accessible content. Overall, the site scores very low on content quality, privacy compliance, and business credibility, with a moderate score on security posture limited by the SSL issue. Strategic recommendations include immediate installation of a valid SSL certificate on the origin server, enabling DNSSEC, and implementing standard security headers. Additionally, publishing privacy and cookie policies and providing clear contact information would improve compliance and trust. Monitoring and maintaining SSL certificates and security configurations will enhance availability and user confidence.

The website dubaifestival.info is currently inaccessible due to an invalid SSL certificate on the origin server, as indicated by Cloudflare's Error 526. This prevents any meaningful content from being served to visitors, resulting in a complete lack of business or contact information on the site. The domain is registered through NameCheap with privacy protection enabled, providing no public registrant details. The site appears to be either misconfigured or inactive, with no visible privacy policies, cookie notices, or terms of service. Technically, the site relies on Cloudflare for CDN and security services but fails to maintain a valid SSL certificate, which is a critical security flaw.

The website mamarazzinyc.com is currently inaccessible due to an invalid SSL certificate, resulting in a Cloudflare Error 526. This prevents any meaningful content or business information from being accessed or analyzed. The domain is registered with NameCheap since 2021 and uses Cloudflare DNS services, indicating a legitimate registration but poor SSL management. No privacy, cookie, or terms of service policies are present, and no contact information or forms are available on the error page. The technical infrastructure relies on Cloudflare as a CDN and security provider, but the origin server's SSL misconfiguration severely impacts the site's security posture and user trust. Overall, the site is currently non-functional from a user and security perspective, requiring immediate remediation of SSL issues to restore accessibility and enable further analysis.

The website weihnachtsmotive.info is currently inaccessible due to an invalid SSL certificate on the origin server, resulting in a Cloudflare error 526 page blocking all content. No business or contact information is available on the site, and no privacy or cookie policies are present. The domain is registered through NameCheap with privacy protection enabled, providing no public registrant details. The technical infrastructure relies on Cloudflare for DNS and security, but the SSL misconfiguration severely impacts accessibility and trust. Overall, the site exhibits poor digital maturity and security posture, with critical vulnerabilities that prevent normal operation.

S

Sport in place

sport-in-place.com

48

Sport in place is a French-language website focused on fitness, musculation, dance, yoga, and overall well-being lifestyle content. It targets French-speaking fitness enthusiasts seeking advice and methods to improve their sports lifestyle. The site uses WordPress with the Elegant Themes Extra theme and integrates plugins for multilingual support and email subscriptions. The technical infrastructure is modern and supports good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit incident response or security policies. The absence of WHOIS data raises concerns about domain legitimacy and trustworthiness, which impacts the overall risk profile. Strategic recommendations include improving privacy compliance, adding security headers, and verifying domain registration details to enhance trust.

The website pokiesonlinenz.co.nz is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents any meaningful content or business information from being retrieved or analyzed. The domain is registered since 2014 with a reputable registrar and uses Cloudflare for DNS and security services. However, the lack of accessible content, absence of privacy and cookie policies, and no visible contact or business data significantly limit the ability to assess the company's market position or services. Technically, the site relies on Cloudflare but lacks DNSSEC and visible security headers, which could be improved. The security posture is unclear due to the block, but the presence of a WAF indicates some level of protection against attacks. Overall, the site scores very low on content quality, technical implementation, security, privacy compliance, and business credibility due to the block and missing information.

N

Nameshift.com

weglot.eu

49

The website weglot.eu currently serves as a domain sales landing page operated by Nameshift.com, a domain brokerage and escrow service based in the Netherlands. The platform offers domain purchase services with an emphasis on safe, fast, and fee-free domain transfers for buyers. The business model focuses on domain resale with escrow facilitation to ensure secure transactions. The target audience includes domain investors and buyers seeking a trusted intermediary for domain acquisitions. The website content is minimal and primarily transactional, reflecting its purpose as a domain sales portal rather than a full business site. Technically, the site is built using modern web technologies including SvelteKit and JavaScript, hosted on a CDN associated with Nameshift.com. The site demonstrates moderate performance and basic mobile optimization. However, SEO and accessibility features are basic, and there is no evidence of a CMS or extensive platform integrations. The site uses external scripts for analytics and Trustpilot reviews, indicating some level of marketing and trust-building efforts. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, it lacks explicit security headers such as Content Security Policy or HSTS, and no privacy or cookie policies are present, which are critical for GDPR compliance. There is no visible incident response or security contact information. The domain registration data is consistent with the business purpose, registered via a known registrar without privacy protection, supporting legitimacy. Overall, the site presents a low-risk profile but has significant gaps in privacy compliance and security best practices. Strategic improvements in policy disclosures, security headers, and contact transparency would enhance trust and compliance. The site’s limited content and basic design reflect its narrow business focus but also limit user engagement and SEO potential.

SPWeb s.r.o. is a well-established Czech technology company specializing in custom web development, e-commerce solutions, SEO, PPC marketing, and IT infrastructure services primarily serving the Brno region. The company has a strong market position supported by over a decade of experience, positive client testimonials, and Google Partner certification. Their website reflects a professional and modern digital presence with comprehensive service offerings and clear contact information. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Google Fonts, and multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Microsoft Clarity, and Smartlook. The site is mobile-optimized, fast-loading, and SEO-friendly, demonstrating a mature digital infrastructure. Hosting and DNS services are managed via Cloudflare, enhancing performance and security. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policies, incident response contacts, and security headers, which are recommended to enhance its security posture. No vulnerabilities or exposed sensitive data were detected, indicating a generally secure environment. Overall, SPWeb s.r.o. presents a credible, trustworthy, and professional business with a strong online presence. The website scores highly on content quality, technical implementation, security, privacy compliance, and business credibility, making it a reliable partner for clients seeking web and IT services.

Z

Zalohujme.cz

zalohujme.cz

48

Zalohujme.cz is a Czech environmental initiative focused on promoting the implementation of a deposit return system for PET bottles and beverage cans in the Czech Republic. The website provides comprehensive information about the benefits of such a system, its operation, and examples from other European countries. It targets the general public, environmental advocates, municipalities, and beverage producers. The platform serves as an educational and advocacy tool to support legislative changes and increase recycling rates. Technically, the website is built on WordPress and employs common web technologies including jQuery, Google Analytics, Google Tag Manager, Facebook Pixel, and Smartlook for user behavior tracking. The site is mobile-optimized with good SEO practices including structured data and meta tags. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks some security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is limited as no explicit privacy or cookie policies or consent mechanisms were found. Contact information is limited to an email address in the header, with no phone numbers or physical addresses provided. Overall, the website is legitimate and professional in its presentation and content, though the absence of WHOIS data and privacy policies slightly reduces trustworthiness. Strategic improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance the site's security posture and user trust.

AIMS (Association of International Marathons and Distance Races) operates a comprehensive website dedicated to global running events, including marathons and ultradistance races. The organization provides race calendars, results, news, and publishes the Distance Running magazine, positioning itself as a key resource for the international running community. The website targets runners, race organizers, and athletics enthusiasts worldwide, offering a membership model and partnerships with sports, photo, registration, and medals partners. Technically, the site uses a mix of JavaScript libraries such as jQuery, Cycle2, Leaflet.js for maps, and Google Analytics for tracking, with a custom or unknown CMS. The site is mobile optimized and has a moderate performance profile.

The website eestikasiinod.ee is currently inaccessible due to a Cloudflare security block, which prevents any meaningful content or business information from being analyzed. The domain is registered since 2013 with NETIM and uses Cloudflare nameservers, indicating a standard setup for security and performance. However, the lack of accessible content means no privacy, cookie, or terms of service policies are visible, nor any contact or business details. The technical infrastructure relies on Cloudflare, but no further technology stack or CMS can be identified. Security posture cannot be evaluated beyond the presence of Cloudflare's WAF blocking access. Overall, the site’s risk assessment is limited by the WAF block, resulting in a low AI score and unknown compliance and trustworthiness.

T

Turundajate Liit ehk TULI

turundajateliit.ee

42

Turundajate Liit ehk TULI is a professional association in Estonia that unites marketing agencies and brands to develop and improve the marketing sector. The organization acts as a connector, promoter, and evaluator within the marketing industry, offering news, events, job postings, training, and competitions such as the Kuldmuna awards. The website reflects a well-established entity with a clear focus on the Estonian marketing community, providing relevant and regularly updated content. Technically, the site is built on WordPress with modern plugins and analytics tools, ensuring good performance and mobile optimization. Security measures include HTTPS, reCAPTCHA on forms, and standard security headers, though explicit security policies and vulnerability disclosures are absent. Overall, the site demonstrates a strong security posture and compliance with privacy regulations, including GDPR. Contact information and social media presence are clearly provided, enhancing business credibility.

AIMS (Association of International Marathons and Distance Races) operates as a recognized global organization dedicated to the promotion and coordination of marathon and long-distance running events worldwide. The website serves as a comprehensive hub for race calendars, news, results, directories, and publishes the Distance Running magazine, targeting runners, race organizers, and athletics enthusiasts globally. The organization is registered in Great Britain under MSC Publishing & Design Limited, with a domain age consistent with its operational history since 2016. Technically, the website employs a mix of legacy and modern web technologies including jQuery 1.12.4, Cycle2 plugins, Leaflet for mapping, and Google Analytics for user tracking with IP anonymization. The site is mobile responsive with good navigation and content quality, though some technical debt is evident in the use of outdated JavaScript libraries. SEO and accessibility are basic but functional. From a security perspective, the site benefits from HTTPS and domain registration protections but lacks DNSSEC and security headers, and uses an outdated jQuery version with known vulnerabilities. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Contact information is limited to a physical address with no emails or phone numbers explicitly provided. No incident response or security policy information is available. Overall, the website is professional and trustworthy with a solid business foundation but requires improvements in privacy compliance, security hardening, and transparency to enhance user trust and regulatory adherence.

Birell.cz is the official website of Birell, a leading Czech non-alcoholic beer brand owned by Asahi CE & Europe Services s.r.o. The company has a strong market position in the Czech Republic, offering innovative non-alcoholic beers and radlers with a focus on flavor variety and health-conscious options. The website is built on WordPress with modern plugins and integrates Google Analytics via Google Tag Manager. It features a cookie consent mechanism compliant with GDPR and provides clear contact information including an email and physical address. However, the absence of a publicly accessible privacy policy page and missing WHOIS data limit full trust assessment. Security posture is generally good with HTTPS enforced but could be improved by adding security headers and publishing a security policy. Overall, the website is professional, user-friendly, and well-branded, supporting the company's market leadership.

The website fashioneventdotek.cz is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content. This indicates that the site is either restricted by server access controls or a security mechanism is blocking public access. Due to this, no meaningful content, metadata, or business information can be extracted or analyzed. The domain is registered since 2016 with a Czech registrar, suggesting some longevity, but the lack of accessible content severely limits assessment of the business or its digital presence. Technically, no information about the technology stack, security headers, or SSL configuration is available, indicating poor or no operational website infrastructure. Security posture is weak or unknown, with no privacy or cookie policies detected, and no contact or incident response information provided. Overall, the site appears non-operational or restricted, resulting in a very low trust and credibility score.

C

CrossCafe

crosscafe.cz

49

CrossCafe is a Czech coffeehouse chain providing coffee, cakes, and related products through physical locations and an e-commerce platform. The website demonstrates a solid digital presence with integrated cookie consent mechanisms and advertising/tracking technologies such as Google Analytics, Adform, and Facebook Pixel. The site is well-structured, mobile-optimized, and uses HTTPS with good SSL configuration. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership. No direct contact emails or phone numbers are exposed on the site, which may impact user trust and business credibility. Security policies and incident response information are not publicly available, indicating room for improvement in transparency and compliance documentation.

S

SPHosting s.r.o.

sphosting.cz

46

SPHosting s.r.o. is a Czech Republic-based hosting service provider established in 2014, specializing in virtual private servers, dedicated servers, managed servers, and cloud/network services. The company targets small to medium businesses requiring tailored hosting solutions with professional management and 24/7 support. Their market position is supported by positive client testimonials and a perfect aggregate rating, indicating strong customer satisfaction and trust. Technically, the website employs a modern technology stack including Bootstrap, jQuery, FontAwesome, and slick carousel for UI, alongside Google Tag Manager, Facebook Pixel, and Yandex Metrika for analytics and marketing. The site is hosted behind Cloudflare DNS and uses HTTPS with excellent SSL configuration. The cookie consent mechanism is comprehensive and GDPR compliant, reflecting good digital maturity. From a security perspective, the site enforces HTTPS, uses reCAPTCHA v2 for form protection, and provides granular cookie consent options. However, it lacks explicit security policies, incident response information, and a security.txt file, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected, and security headers could be enhanced. Overall, the website presents a professional, trustworthy, and well-maintained digital presence with moderate to good security posture. Strategic improvements in security transparency and header implementation would further strengthen their risk profile and compliance stance.

N

Naše Kamencové jezero | Rozvoj rekreačního areálu Kamencového jezera

nasejezero.cz

49

The website 'Naše Kamencové jezero' serves as an informational platform focused on the development and promotion of the Kamencové jezero recreational area in the Czech Republic. It targets local visitors and tourists interested in leisure activities around the lake. The site uses WordPress with the Divi theme, indicating a moderate level of digital maturity with basic mobile optimization and SEO features. However, the content quality is basic, with limited business information and no visible contact details or privacy policies. From a security perspective, the website lacks visible security headers and privacy compliance documentation, which are critical for protecting user data and building trust. No analytics or tracking scripts were detected, suggesting minimal user tracking but also limited insights into visitor behavior. The domain registration is consistent and appropriate for the business type, registered since 2017 with no privacy protection masking. Overall, the website presents a basic but functional digital presence with room for improvement in security posture, privacy compliance, and business credibility. Strategic enhancements in these areas would strengthen trust and user engagement.

P

Bezpečné parkování v centru Prahy - Parking Opletalova

parkingopletalova.cz

49

Parking Opletalova is a service provider offering secure parking solutions in the center of Prague. The website targets drivers seeking safe and convenient parking options in a busy urban area. The business model revolves around parking space booking and management, leveraging an e-commerce platform to facilitate reservations. The website is built on WordPress using WooCommerce and the Divi theme, indicating a moderate level of digital maturity with integration of performance optimization tools like WPRocket and multilingual support via Weglot. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, the absence of security headers and explicit privacy policies suggests room for improvement. The lack of WHOIS registrant data reduces domain trustworthiness, though the website content and technical setup appear legitimate. Overall, the site presents a functional and user-friendly experience but would benefit from enhanced transparency and security practices.

G

Growth Club

growthclub.cz

47

Growth Club is a website presenting itself as a closed network for entrepreneurs in the Czech Republic and Slovakia. The site is built using the Framer platform and features basic marketing content describing its purpose. However, the website lacks critical compliance and security information such as privacy policies, cookie consent mechanisms, terms of service, and contact details. The WHOIS data raises significant concerns due to a domain creation date set in the future (December 2025), which undermines the legitimacy and trustworthiness of the domain. Technically, the site uses modern web fonts and image hosting but does not implement advanced security headers or analytics tools. Overall, the digital maturity is basic, with room for improvement in compliance and security posture.

Modrý zub s.r.o. operates an established authentic Thai restaurant business in Prague with multiple branches and catering services. The website presents a professional image with detailed descriptions of their culinary offerings and physical locations, targeting tourists, locals, and expats. The digital infrastructure includes modern analytics and tracking tools, with a cookie consent mechanism supporting privacy compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the active and well-maintained website. Security posture is generally good with HTTPS enforced, but lacks some security headers and formal policies such as privacy and terms of service. Overall, the website is functional and credible but would benefit from improved transparency and security documentation.

W

Wi s.r.o.

pizzacoloseum.cz

46

Pizza Coloseum is a Czech hospitality business specializing in Italian cuisine, operating multiple restaurant locations primarily in Prague, Ostrava, and Teplice. The company emphasizes tradition and authentic Italian flavors, targeting local customers and visitors seeking quality dining experiences. The business model is based on brick-and-mortar restaurants with an integrated online reservation system, positioning itself as a regional restaurant chain with a medium-sized footprint. Technically, the website is built using modern web technologies including React, Next.js, and Apollo GraphQL, hosted on a Czech provider (WEDOS). The site includes a comprehensive cookie consent mechanism powered by Cookiebot, reflecting a moderate level of digital maturity and privacy compliance. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The domain is long-established (since 1999) and registration data is consistent with the business location, supporting legitimacy. Overall, the website presents a professional and trustworthy online presence with room for improvement in privacy policy publication, security header implementation, and contact information transparency. Strategic recommendations include enhancing security headers, publishing clear privacy and terms documents, and adding incident response contacts to strengthen compliance and trust.

R

Restaurace Tiskárna

restauracetiskarna.cz

38

Restaurace Tiskárna is a small hospitality business operating multiple restaurant locations in Prague, Czech Republic, specializing in modern Czech cuisine and quality draft Pilsner beer. The website provides clear contact information and basic business descriptions but lacks advanced digital maturity features such as privacy policies, cookie consent, and security disclosures. Technically, the site uses standard HTML and CSS with Google Fonts, hosted likely via REG-WEBGLOBE, but lacks modern CMS or frameworks. Security posture is weak due to missing security headers, unclear SSL status, and absence of vulnerability disclosures. Overall, the site is functional and professional but requires significant improvements in privacy compliance and security to reduce risk and enhance trust.

The website hamiltonmusicaltickets.top currently serves only a default HTTP server test page powered by CentOS-WebPanel, indicating that the site is not operational or under development. The domain registration data is suspicious, showing a creation date in the future (June 2025) and privacy protection, which raises concerns about legitimacy. No business-related content, contact information, or policies are present on the site. Technically, the site runs on a CentOS-based web panel with Apache HTTP server but lacks HTTPS and security headers, exposing it to potential security risks. Overall, the site has a very low trust and security posture and does not provide any meaningful service or information related to Hamilton musical tickets.

The website wickedthemusicaltickets.top is a newly registered domain with minimal content, primarily a default WordPress blog post. There is no clear business description, contact information, or trust indicators present. The site uses a standard WordPress CMS with Bootstrap and jQuery libraries, indicating a basic technical infrastructure. Security posture is weak due to lack of security headers, no DNSSEC, and absence of privacy or cookie policies. The domain registration is privacy protected, which combined with the minimal content, reduces trustworthiness. Overall, the site appears to be in an early stage or possibly a placeholder without a clear business purpose or compliance measures.

A

Abalon s.r.o.

novorocenky-elektronicky.cz

34

The website www.novorocenky-elektronicky.cz represents a small Czech company, Abalon s.r.o., specializing in electronic New Year greeting cards primarily targeting business customers. The site offers original and customizable electronic PF cards created by multiple artists. The business model is B2B e-commerce with a niche focus on seasonal greeting cards. The website content is minimal and currently displays a placeholder message about the next offer release in August 2025. Technically, the site is built on WordPress with common JavaScript libraries and Google Analytics for tracking. HTTPS is enforced, but no advanced security headers or explicit privacy/cookie policies are present on the main domain. Contact information is limited to a phone number, with no emails or social media links visible. WHOIS data is missing, which raises concerns about domain registration transparency and trustworthiness.

N

Novoročenky 2024 - Adam Grant

adamgrant.cz

39

The website www.adamgrant.cz represents a small Czech business specializing in luxury New Year greeting cards with a focus on high-quality graphic design and printing. The site is built on WordPress and uses common web technologies such as jQuery and Slick Carousel. The business targets customers seeking premium holiday cards and operates primarily in the retail sector within the Czech Republic. The website content is professionally presented with clear navigation and good mobile optimization, although some modern accessibility features are limited. Technically, the site enforces HTTPS and uses Google Analytics for visitor tracking. However, it lacks important security headers and uses an outdated version of jQuery, which could expose it to vulnerabilities. No privacy or cookie policies are present, indicating a gap in compliance with GDPR and other privacy regulations. Contact information is limited to a phone number and a contact page link, with no email addresses or social media profiles found. From a security perspective, the absence of WHOIS data is concerning and reduces the domain's trustworthiness. No signs of WAF or blocking mechanisms were detected, and the site content is fully accessible. The security posture is moderate but could be significantly improved by adding security headers, updating libraries, and implementing privacy policies. Overall, the site is functional and professional but requires enhancements in security and compliance to reduce risk and improve trust. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, adding security headers, updating outdated libraries, and verifying domain registration details to improve legitimacy. Enhancing incident response readiness and publishing security contact information would also strengthen the security culture and trustworthiness of the business.

A

Abalon s.r.o.

pf.cz

37

The website www.pf.cz represents Abalon s.r.o., a small Czech company specializing in the design and sale of original, artistically crafted New Year and Christmas greeting cards. The business targets corporate clients and organizations looking for unique and charitable greeting card options. The site offers customization services, free proofreading, and sample cards, positioning itself as a niche provider in the Czech market. Technically, the website is built on WordPress and employs modern JavaScript libraries such as jQuery, Slick Carousel, and Video.js, with SEO optimization via Yoast and analytics through Google Analytics. HTTPS is enforced, ensuring secure connections, but the absence of security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. The lack of WHOIS data reduces domain trustworthiness, though the website content and business information appear professional and consistent. Overall, the site demonstrates good digital maturity with moderate performance and mobile optimization.

L

LMB - Gruppe

lmb-gruppe.de

45

LMB-Gruppe is a German manufacturing company specializing in welding, cutting, marking, and machine building services. Their website presents a professional image with clear navigation and relevant content targeting industrial clients. The company offers a range of services including manual welding, laser cutting, and special machinery construction, positioning themselves as a regional service provider in the manufacturing sector. The website is built on TYPO3 CMS and uses modern web technologies such as jQuery and Bootstrap, indicating a moderate level of digital maturity. While the site is mobile-optimized and accessible, there is room for improvement in accessibility and SEO. Security posture is moderate with no visible security headers or explicit security policies, and the site lacks a cookie consent mechanism despite GDPR compliance indications. Overall, the website is functional and credible but would benefit from enhanced security and privacy features.