High-risk security reports

Graugans Werbeagentur is a small, established advertising agency based in Kaaks, Germany, specializing in web design, print advertising, and digital marketing services. With over 14 years of experience and more than 1,000 projects, the agency serves a broad client base across Germany, focusing on tailored marketing solutions including SEO, social media, and newsletter campaigns. The company holds recognized innovation awards, underscoring its market credibility. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses performance and privacy enhancing tools such as WP Rocket and Borlabs Cookie. The site is mobile-optimized and SEO-friendly, though there is room for improvement in accessibility and security headers. Hosting is likely provided by 1&1 IONOS, consistent with the domain's German origin. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with GDPR-aligned cookie management and a comprehensive privacy policy. Overall, the website presents a professional and trustworthy digital presence for the agency, with moderate technical sophistication and good compliance. Strategic improvements in security headers and accessibility could further enhance the site's robustness and user experience.

Schacht & Brederlow GmbH is a small German company specializing in bathroom design and craftsmanship services, as indicated by their partnerships with related design entities. The website is minimalistic, primarily showcasing logos and images with limited textual content. The technical infrastructure is basic, relying on simple HTML and CSS without modern frameworks or CMS detected. There is no evidence of advanced analytics or tracking technologies. Security posture is weak, with no detected HTTPS enforcement or security headers, and no cookie consent mechanisms. Privacy policy is present but basic, and no contact information is directly available on the main page. Overall, the website serves as a simple informational portal with limited digital maturity and security measures.

Bernd Lehmler GmbH is a small German company specializing in craftsmanship and bathroom design services, as indicated by the website and linked partner domains. The website serves primarily as a simple informational landing page with minimal content and no interactive features. The technical infrastructure is basic, relying on standard HTML and CSS without advanced frameworks or CMS. Security posture is minimal with no visible HTTPS confirmation, security headers, or privacy compliance mechanisms. The WHOIS data shows standard DNS usage consistent with a German ISP but lacks detailed registrant information, limiting full trust verification. Overall, the website reflects a small, localized business with limited digital maturity and security measures.

Bäder Dunkelmann is a well-established bathroom renovation and planning company serving Hamburg, Norderstedt, and surrounding areas. With over 55 years of experience, they offer comprehensive bathroom solutions including planning, renovation, and full project management with a focus on stress-free, dust-free implementation and fixed pricing. Their market position is that of a trusted regional specialist with a large showroom and a strong customer base. Technically, the website is built on WordPress with modern plugins and tracking tools, optimized for mobile and SEO. Security posture is good with HTTPS and consent management, though some security headers could be improved. Privacy compliance is strong with a clear privacy and cookie policy and GDPR consent mechanisms. Overall, the website is professional, trustworthy, and well-suited for its target audience.

Schmauch Heiztechnik-Bäder-Kundendienst is a small local German company specializing in bathroom, heating, and tile services. The website serves as a digital presence to showcase their services and provide contact options for customers primarily in Wetter, Germany. The business operates with partner affiliations to related sites, indicating a networked approach within their sector. The website is professionally designed with clear navigation and basic mobile optimization, supporting a positive user experience for local customers. Technically, the site uses legacy JavaScript libraries and standard HTML/CSS without a CMS, hosted likely by a German hosting provider. Security measures include a cookie consent banner and captcha-protected contact form, but lack advanced security headers or modern frameworks. Privacy compliance is addressed with a privacy policy and cookie banner, though no terms of service or incident response policies are present. Overall, the site is safe, trustworthy, and appropriate for its business purpose, but could improve in security posture and technical modernization.

The domain skoly-v-prirode.cz is registered since 2009 and hosted on aerohosting servers, indicating a potentially legitimate registration. However, the website currently returns a 404 Not Found error with no accessible content, metadata, or business information. This lack of content prevents meaningful analysis of the company's business model, services, or market position. Technically, no modern frameworks, CMS, or security features are detectable, and no privacy or cookie policies are present. The security posture is weak due to missing HTTPS and security headers, and no incident response or contact information is available. Overall, the website appears inactive or misconfigured, posing a risk to trust and credibility.

Ita.travel is an established online travel agency specializing in holidays in Italy, offering a wide range of accommodations including apartments, hotels, and campsites. The company has been operating since 1997 and is a member of several reputable travel associations, which enhances its market credibility. The website targets tourists seeking Italian holiday experiences, providing booking services, travel insurance, and travel tips. Technically, the website uses modern web technologies, is mobile-optimized, and implements basic privacy compliance mechanisms such as cookie consent and a privacy policy. Security posture is good with HTTPS enabled, but lacks visible advanced security headers and explicit incident response information. Overall, the site is professional, trustworthy, and safe for general audiences.

Hotel Svatý Tomáš is a small, established hospitality business founded in 2005, offering romantic wellness hotel services in the Šumava region near Lipno, Czech Republic. The website provides detailed information about accommodation, wellness facilities, restaurant services, and special packages targeting tourists and couples seeking a romantic getaway. The business positions itself as a niche wellness and hospitality provider with a focus on natural surroundings and luxury experience. Technically, the website is built on WordPress using modern plugins and themes, supporting multilingual content in Czech, English, and German. The site is mobile optimized and includes SEO best practices such as structured data and meta tags. Security posture is adequate with HTTPS and cookie consent implemented, though security headers and explicit security policies are absent. Overall, the website is professional, trustworthy, and compliant with basic privacy requirements, though it lacks explicit privacy and terms of service pages. The domain registration data is consistent and supports the legitimacy of the business.

The European Network of Cultural Centres (ENCC) is a well-established non-profit organization uniting 178 socio-cultural organizations across 39 countries in Europe and beyond. Their primary focus is on training, cooperation, and advocacy to transform cultural practices and territories. The website reflects a professional and consistent brand image, targeting cultural centers and networks as its audience. The business model revolves around network collaboration and advocacy services, supported by EU co-funding. Technically, the website uses modern technologies including Alpine.js and Twill CMS, hosted by OVH SAS, with good mobile optimization and accessibility. Security posture is solid with HTTPS and CSRF protection, though some security headers are missing. Privacy compliance is good with a clear privacy policy, but lacks a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained.

3Decor design s.r.o. operates an e-commerce website specializing in exclusive 3D design motifs for interior decoration, including wallpapers, paintings, furniture, and other home design elements. The company targets a niche market with limited edition products, primarily serving customers interested in unique interior design solutions in the Czech Republic. The website is professionally designed with clear navigation and relevant content, supporting a small business model focused on retail sales. Technically, the website uses JavaScript libraries such as Prototype.js and custom scripts, with Google Analytics integrated for visitor tracking. The site shows moderate performance and basic mobile optimization but lacks advanced accessibility features. No CMS or hosting provider information is discernible from the content. Security practices include HTTPS usage and secure login forms, but no advanced security headers or policies are evident. From a security perspective, the site lacks visible privacy and cookie policies, GDPR compliance indicators, and incident response information. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness. No critical vulnerabilities or exposed sensitive data were detected, but improvements in security headers and privacy transparency are recommended. Overall, the website presents a moderate risk profile with good business credibility but limited transparency in domain registration and privacy compliance. Strategic improvements in security posture and privacy policies would enhance trust and compliance.

1. jinačí s. r. o. is a small Czech bakery business with a traditional yet unconventional approach to baking, as reflected in their website content and branding. The company operates locally with a focus on community projects, zero waste initiatives, and sweet postal services. The website is built on WordPress using the Mesmerize theme, employing standard web technologies such as jQuery and Google Fonts. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. No contact emails or phone numbers are provided on the homepage, limiting direct communication channels. Overall, the website presents a basic but consistent business presence with room for improvement in privacy compliance and security best practices.

Klia cz S.r.o. operates as a wholesale importer and distributor of flowers and related accessories across the Czech Republic, serving primarily flower shops and wholesale customers. The company maintains multiple branches in key Czech cities and offers an online catalog and e-shop services. Their business model focuses on regular imports from major flower markets such as Aalsmeer in the Netherlands, ensuring a broad and high-quality product range. The website is professionally designed, with clear navigation and good mobile optimization, reflecting a mature digital presence. Technically, the site uses a mix of jQuery plugins and Google Analytics for tracking, but some components like jQuery are outdated, posing potential security risks. Security posture is generally good with HTTPS and cookie consent mechanisms, though the absence of security headers and outdated libraries are areas for improvement. The lack of WHOIS data reduces domain trustworthiness, but the overall business credibility remains high based on content and contact transparency. Strategic recommendations include updating technical components, enhancing security headers, and improving domain registration transparency.

Město Kravaře operates an official municipal website serving the residents and visitors of the town Kravaře in the Czech Republic. The site provides comprehensive information including news, event calendars, municipal services, and contact details. It targets local citizens, tourists, and public officials, positioning itself as a trusted source for local government communication and services. The business model is public service with a focus on community engagement and information dissemination. Technically, the website uses a combination of jQuery, Bootstrap, Swiper.js, and other JavaScript libraries, likely running on a custom or specialized CMS platform (GCM CMS). The site is mobile-optimized with good navigation and content structure, though performance is moderate. Accessibility is basic and SEO practices are adequately implemented. From a security perspective, HTTPS is enforced and a cookie consent mechanism is present, indicating awareness of privacy regulations. However, no explicit security headers or incident response policies are publicly visible, and WHOIS data is missing, which raises some concerns about domain registration transparency. No vulnerabilities or malicious content were detected. Overall, the website is professional, trustworthy, and serves its purpose well. The main risks relate to the lack of WHOIS transparency and potential improvements in security headers and policies. Strategic recommendations include enhancing security posture, publishing incident response information, and verifying domain registration details to increase trust.

Střední odborná škola ochrany osob a majetku s.r.o. is a private secondary school in the Czech Republic specializing in security and legal education, preparing students for careers in police, military, customs, and firefighting. The institution offers four-year programs culminating in maturity exams and provides requalification courses for adults in security professions. The website reflects a niche educational provider with a clear focus on practical training and career readiness in security-related fields. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery, Nette Framework, Flatpickr, and Google reCAPTCHA v3, indicating a moderate to good level of digital maturity. The site is mobile-optimized and includes standard SEO and accessibility features. Security posture is solid with HTTPS enforced and spam protection via reCAPTCHA, though explicit security headers are missing. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented. However, the absence of WHOIS data reduces domain trustworthiness, and no incident response or vulnerability disclosure information is provided. Overall, the site is professional, trustworthy, and well-suited for its educational purpose.

Obchodní akademie a Česko - anglická základní škola s.r.o. Ostrava is a private educational institution specializing in secondary education that combines economics and sports, particularly football and coaching. The school targets young athletes and students interested in balancing academic studies with sports training, offering specialized programs such as the Football Academy and Coaching Academy. The institution maintains a niche market position within the Czech Republic's education sector, emphasizing collaboration with FC Baník Ostrava and providing scholarship opportunities for high-performing students. Technically, the website employs a modern JavaScript stack including jQuery, Flatpickr, Google reCAPTCHA v3, and Slick Carousel, integrated within the Nette Framework. The site is mobile-optimized with good SEO practices and includes a cookie consent mechanism compliant with GDPR. However, some security headers are missing, and no explicit incident response or vulnerability disclosure policies are published. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, indicating a reasonable security posture. The absence of security.txt and incident response contacts suggests room for improvement in transparency and readiness. The WHOIS data is unavailable, likely due to privacy protection, which is common for private educational entities. Contact information is clear and professional, supporting the site's legitimacy. Overall, the website is well-designed, content-rich, and trustworthy, with moderate technical and security maturity. Strategic improvements in security headers, incident response transparency, and accessibility could enhance the site's security and compliance posture.

Fundación Parentes is a Spanish non-profit organization founded in 2019 focused on promoting equal opportunities through education, social cooperation, and cultural initiatives. The organization operates internationally with a network of educational entities and partners, offering consulting, training, and development projects aimed at vulnerable populations and educational institutions. The website is professionally designed using WordPress with modern SEO and performance optimizations, reflecting a mature digital presence. Security posture is good with HTTPS and some security headers, though improvements are recommended such as enabling DNSSEC and adding CSP and HSTS headers. Privacy compliance is limited due to the absence of a clear privacy policy and terms of service, though a cookie consent mechanism is implemented. Overall, the website is trustworthy and well-positioned in its sector but would benefit from enhanced transparency and security practices.

BODOS Czechia a.s. is a well-established logistics and transportation company based in the Czech Republic, with a history dating back to 1945. The company operates a large fleet of 200 trucks and offers extensive storage facilities exceeding 7,500 square meters. Their services include freight transport, transport outsourcing, storage, vehicle washing, fuel station services, and vehicle servicing. The website reflects a professional and consistent brand image targeting businesses requiring logistics solutions. Technically, the site uses modern web technologies including JavaScript libraries like GLightbox and a spam protection tool called Mailguard. The hosting is managed through websupport.cz, a Czech hosting provider, and the site is accessible via HTTPS, indicating basic security measures. However, no explicit security headers or advanced security policies are published.

Práce Mubea is a Czech-language website focused on employment and job opportunities, likely affiliated with the Mubea company or brand. The site targets local job seekers and provides career-related content. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, and integrates Google Analytics and Google Tag Manager for analytics and marketing purposes. The site implements a comprehensive cookie consent mechanism via Cookiebot, reflecting a good level of privacy compliance. Security-wise, the site uses HTTPS but lacks visible security headers and explicit security policies, which could be improved. The absence of WHOIS data limits domain trust assessment, but the website content and technology stack appear legitimate and professional. Overall, the site scores moderately well in content quality, technical implementation, and business credibility, with room for improvement in privacy and security transparency.

Novibra s.r.o. is a medium-sized manufacturing company specializing in high-speed spindles for the textile industry, operating as part of the Rieter group. The website serves as a career and corporate information portal targeting job seekers and industry professionals in the Czech Republic. It presents company culture, leadership, production insights, and job openings with a professional and consistent brand image. Technically, the site is built on WordPress using Elementor and Smart Slider 3, hosted by Wedos, and incorporates modern web technologies and Google Analytics for user tracking. Security posture is adequate with HTTPS and reCAPTCHA but lacks explicit security headers and published security policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but could improve compliance and security transparency.

The website lsletovice.cz currently serves a 403 Forbidden error page, indicating that access to the content is blocked or restricted. No business or contact information, privacy policies, or terms of service are available on the site. The domain is registered with REG-WEDOS, a Czech hosting provider, and has been active since 1999, suggesting a legitimate and established registration. However, the lack of accessible content severely limits the ability to assess the company's business operations, services, or security posture. Technically, the site lacks visible security headers, SSL configuration details, or analytics, and does not provide any user interaction elements such as forms or contact methods. Overall, the website appears to be either under maintenance, restricted, or misconfigured, resulting in a poor user experience and low trustworthiness.

Vinařství Winberg Mikulov is a small, regionally focused winery based in South Moravia, Czech Republic, specializing in quality white and red wines. The website supports their business model by offering an e-shop for wine sales, accommodation services, and event hosting such as tastings and teambuilding. The site is professionally designed using Bootstrap and includes mobile optimization and clear navigation. However, the technical infrastructure uses some outdated components such as the legacy Google Analytics ga.js script. Security posture is moderate with HTTPS implied but lacking explicit security headers and modern analytics. Privacy compliance is limited with no dedicated privacy or cookie policy pages, though terms and conditions are present. The site enforces age verification for alcohol sales, indicating regulatory awareness. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Some suspicious external links embedded in the footer code suggest possible SEO spam or injection, which should be addressed.

Ubytování Březí is a small hospitality business operating in the South Moravia region of the Czech Republic, offering family-friendly accommodation in newly built guesthouses with amenities such as private kitchens and bathrooms. The business also provides wine tasting experiences and caters to group bookings. The website reflects a local accommodation provider with a modest online presence, targeting regional visitors traveling between Brno and Vienna. The domain has been registered since 2009, indicating a stable and established operation. Technically, the website is built with basic HTML and CSS, utilizing Google Fonts for typography. There is no evidence of a CMS or advanced frameworks, and the site appears to be hosted by vas-hosting.com. Performance and mobile optimization are basic, with no detected accessibility features or SEO enhancements beyond meta tags. No analytics or tracking scripts are present, indicating minimal data collection and user tracking. From a security perspective, the site lacks HTTPS confirmation in the provided data, security headers, and privacy or cookie policies, which are critical for GDPR compliance and user trust. No forms or incident response contacts are found, and no vulnerability disclosures or certifications are indicated. The contact information is clearly provided, but the absence of security best practices and compliance documentation represents a risk. Overall, the website is functional and relevant for its business purpose but requires significant improvements in security posture, privacy compliance, and technical modernization to enhance trustworthiness and regulatory adherence.

Vinařství pod Hradem s.r.o. is a small family-owned winery located in the Pálava region of the Czech Republic, specializing in wine production, hospitality services including unique accommodation in wooden barrels and cottages, and online sales of wine and gift vouchers. The company positions itself as a premium local winery offering experiential tourism and wine tasting in the highest wine-growing village in Pálava. The website reflects a professional and consistent brand image with good content quality and clear navigation aimed at wine enthusiasts and tourists. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, enhanced by popular plugins such as WPBakery Page Builder and Revolution Slider. It integrates modern analytics and tracking tools including Google Tag Manager, Hotjar, and Microsoft Clarity, indicating a mature digital marketing approach. The site is mobile optimized and uses HTTPS, but lacks explicit security headers and documented security policies. Security posture is moderate with no visible critical vulnerabilities or exposed sensitive data, but the absence of security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement. The WHOIS data is unavailable, which limits domain trust assessment, but the website content and business information appear legitimate and professional. Overall, the website presents a trustworthy and well-maintained online presence for a small winery business, with recommendations to enhance security headers, maintain plugin updates, and improve transparency around security and privacy practices.

Vinařství Kern is a small winery based in Moravia, Czech Republic, specializing in the production and sale of quality wines. The company targets wine consumers and enthusiasts primarily in the Czech market, offering direct sales through an e-commerce enabled WordPress website. The site is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the website leverages WordPress with WooCommerce and several popular plugins, including LayerSlider and WPBakery Page Builder, indicating a moderate level of digital maturity. The presence of Google Analytics and Facebook Pixel shows active marketing and user tracking efforts. Security posture is solid with HTTPS and standard security headers, though the absence of published security policies and incident response information suggests room for improvement. The lack of WHOIS data reduces transparency and slightly impacts trustworthiness. Overall, the website is suitable for mature audiences due to its alcohol-related content and complies with GDPR requirements through visible privacy and cookie policies.

Restaurace Aquarium Relax is a small hospitality business operating a restaurant in the Czech Republic. The website presents basic information about the restaurant with a focus on local clientele. The technical infrastructure is based on WordPress using the Divi theme, with integration of Google Tag Manager and Google reCAPTCHA for analytics and bot protection. The site is secured with HTTPS and implements a cookie consent mechanism, though it lacks a visible privacy policy and detailed contact information. Security posture is moderate with room for improvement in security headers and compliance documentation. Overall, the website is functional and professional but could enhance trust and compliance by adding privacy and contact details.

The website zpravodajmikulov.cz serves as the official local news portal for the city of Mikulov, Czech Republic. It is published by Mikulovská rozvojová, s. r. o., a small-sized company focused on disseminating municipal news, cultural events, school updates, and other community information. The site targets residents and visitors interested in local affairs and cultural happenings. The business model revolves around providing timely and relevant local news content, supported by municipal backing and community engagement. Technically, the website is built on the Joomla CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and UIkit for responsive design and user interface components. It integrates social media widgets from Facebook and Google, enhancing community interaction. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. Hosting and domain registration are consistent with Czech providers, reinforcing local presence. From a security perspective, the site uses HTTPS (assumed from base href and external scripts), but lacks explicit security headers in the HTML content. A cookie consent banner is implemented, indicating awareness of privacy compliance, though no dedicated privacy or terms of service pages were found. No vulnerabilities or exposed sensitive data were detected in the content. The security posture is moderate but could be improved with enhanced headers and clearer policies. Overall, the website is trustworthy, professionally maintained, and serves its community purpose effectively. Strategic recommendations include adding comprehensive privacy and terms policies, implementing security headers, and enhancing SEO and accessibility features to improve compliance and user experience.

The website www.jak-spravne-psat.cz is an educational platform dedicated to supporting proper handwriting skills in children, primarily targeting parents and educators in the Czech Republic. It is backed by CENTROPEN, a.s., a company that appears to support the project both financially and organizationally. The site offers practical advice, instructional content, and an online advisory service to help children develop correct writing habits. Technically, the website uses modern web fonts, Google services such as reCAPTCHA and YouTube embeds, and implements a cookie consent mechanism, indicating a moderate level of digital maturity. However, the absence of WHOIS data and lack of visible privacy and terms of service pages suggest gaps in transparency and compliance. Security posture is generally good with HTTPS and reCAPTCHA usage, but the lack of security headers and formal policies reduces the overall security maturity. Overall, the website is trustworthy and professional in content and design but would benefit from enhanced compliance documentation and improved security headers to strengthen user trust and regulatory adherence.

CENTROPEN, a.s. operates the website foukaci-fixy.cz to promote and provide information about their AIRPENS product line, which are special blowing markers designed for children. The company has a strong market position as a Czech manufacturer with a long history dating back to 1940, emphasizing product safety, local production, and compliance with European toy safety standards. The website targets parents and children interested in creative and safe drawing tools. Technically, the site uses modern web technologies including Google reCAPTCHA, Facebook Pixel, and Google Analytics, hosted via WEDOS, and built likely on the Nette Framework. The site is mobile optimized and provides a good user experience with clear navigation and multimedia content such as video tutorials and galleries. Security posture is solid with HTTPS enforced and anti-bot measures on forms, though it lacks some security headers and published security policies. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy policy or terms of service pages. Overall, the website is professional and trustworthy, with room for improvement in privacy transparency and security documentation.

CENTROPEN, a.s. is a medium-sized European manufacturer and retailer specializing in writing and drawing instruments, including markers, pens, and creative products for office, industry, schools, children, and artists. The company maintains a professional online presence with multi-language support and active social media channels. Their business model focuses on manufacturing and B2B/B2C retail, targeting a broad audience from businesses to hobbyists. The website content is well-structured and relevant to their market segment, reflecting a consistent brand image.

CENTROPEN, a.s. is a well-established Slovak manufacturing and retail company specializing in writing instruments and creative products. With a history dating back to 1940, the company serves a broad audience including office users, schools, hobbyists, and artists. The website reflects a mature business with multilingual support and a clear product catalog. Technically, the site uses a mix of legacy and modern JavaScript libraries, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. Overall, the domain registration and business information are consistent and trustworthy, supporting the legitimacy of the site.

JIROUT REKLAMNÍ AGENTURA s.r.o. is a Czech Republic based advertising agency positioned as the largest in the Pardubice region. The company offers a comprehensive suite of advertising services including graphic design, vehicle wraps, outdoor and indoor advertising, promotional products, textiles, printing services, and online marketing. Their business model focuses on end-to-end advertising solutions from concept to installation, targeting local businesses and organizations. The website reflects a professional and consistent brand image with clear service offerings and customer testimonials, supporting their market position. Technically, the website employs modern web technologies such as Google Fonts, Facebook SDK for marketing, and a responsive design framework. The presence of a detailed cookie consent mechanism indicates a good level of digital maturity and privacy awareness. However, the absence of visible security headers and incomplete WHOIS data suggests areas for improvement in security and transparency. From a security perspective, the site uses HTTPS and implements cookie consent with opt-in/out controls, but lacks explicit security policies and incident response contacts. No critical vulnerabilities or adult content were detected. The domain WHOIS data is missing, which raises concerns about domain legitimacy and registration transparency, though the website content and business information appear credible. Overall, the website presents a trustworthy and professional business front with moderate technical and security maturity. Strategic improvements in security headers, domain registration transparency, and explicit security policies would enhance trust and compliance.

Mikulovská rozvojová s.r.o. is a municipally owned company founded in 2006, serving as a key organizer and promoter of cultural, wine, and social events in Mikulov, Czech Republic. The company also manages municipal assets such as the city cinema, pension, and amphitheater, providing venue rentals and advertising services. Their market position is primarily local and regional, focusing on cultural and hospitality sectors. The website reflects a professional and consistent brand presence with good content quality and clear navigation. Technically, the site is built on Joomla CMS with UIkit and jQuery frameworks, and uses Google Analytics and Tag Manager for tracking. The site is mobile optimized and performs moderately well.

Vinařství Vajbar is a Czech winery specializing in premium wines from the South Moravia region. The company operates an e-commerce platform offering a variety of wines, related products, and wine tasting experiences. Their website demonstrates a professional digital presence with clear branding, product showcases, and event calendars. Technically, the site uses established JavaScript libraries and Google Tag Manager for analytics, with a cookie consent mechanism and age verification overlay to comply with legal requirements for alcohol sales. However, the absence of WHOIS data and explicit contact information on the main pages slightly reduces trustworthiness. Security practices include cookie consent and age verification, but lack visible security headers or incident response contacts. Overall, the website is functional, user-friendly, and compliant with privacy regulations, but could improve transparency and security posture.

The website masvsechno.cz represents EasySchool, a small Czech educational business providing vending machines stocked with writing supplies for schools. The service simplifies access to stationery for students and teachers, with machines maintained fully by the company. The business is positioned as a niche educational support provider with a clear target audience and a straightforward business model. The website is well structured, uses modern technologies like Bootstrap and Google Maps API, and includes media coverage and contact details to build trust. However, it lacks formal privacy and cookie policies, and no explicit security policies are present. The site uses HTTPS and third-party scripts but does not implement security headers or vulnerability disclosure mechanisms. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

Antir, s.r.o. is a Czech Republic-based small manufacturing company specializing in custom stainless steel production, including railings, staircases, and winery equipment such as tanks and vinification vessels. Founded in 2007, the company offers end-to-end services from measurement and design to installation and delivery, targeting clients in construction, interior design, and the wine industry. The website reflects a professional presence with clear business information and a gallery of references, positioning the company as a specialist in its niche market. Technically, the website employs common and reliable web technologies such as jQuery, Bootstrap, and Owl Carousel, providing a responsive and user-friendly experience. However, the site lacks advanced security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security maturity. The contact form collects personal data but does not show explicit anti-spam or privacy compliance mechanisms. From a security perspective, the site uses HTTPS as implied by URLs but does not demonstrate implementation of security best practices such as Content Security Policy or HSTS headers. No incident response or vulnerability disclosure information is provided, which could be a gap in readiness. No suspicious or malicious content was detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance documentation, and incident response transparency to improve trust and reduce risk. Strategic improvements in these areas will strengthen the company’s digital maturity and customer confidence.

Waves More operates the website waves.tours, offering private and shared boat tours from Split, Croatia. The business targets tourists seeking customized maritime experiences along the Croatian coast. The website is professionally designed using WordPress and Elementor, with integrated booking and GDPR compliance features. The technical infrastructure includes modern plugins for SEO and analytics, such as Rank Math and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The WHOIS data is privacy protected, which is typical for small tourism businesses, and no suspicious indicators were found. Overall, the site presents a trustworthy and professional front for a small hospitality business.

MYD Sailing is a small yacht charter business operating primarily in Croatia, offering a fleet of sailing yachts for vacationers and sailing enthusiasts. The website is professionally designed using WordPress and Elementor, providing clear navigation, multilingual support, and integrated booking functionality. The technical infrastructure is modern with standard plugins and Google Tag Manager for analytics. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and no explicit security.txt or incident response contacts are published. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the website presents a trustworthy and professional image suitable for its niche market.

Waves More is a recently established Croatian sailing and tour company offering yacht and catamaran charters along with customizable Adriatic tours. The business targets tourists and sailing enthusiasts seeking vacation experiences in the Adriatic Sea. The website is built on WordPress using Elementor and demonstrates moderate technical maturity with HTTPS enabled and a clean design, but lacks comprehensive privacy and security policies. Security posture is basic with no DNSSEC or security headers implemented. Contact information is minimal, limited to a single email address. Overall, the site is functional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

EDUgrant is a Czech Republic-based non-profit initiative focused on providing grants and educational support to primary and secondary vocational schools. The website serves as an informational and application portal for schools seeking funding and resources to modernize education. The organization partners with reputable foundations such as The Velux Foundations, enhancing its credibility and outreach. The business model centers on grant distribution and educational seminars, targeting educational institutions within the Czech market. The website content is well-structured, professionally designed, and clearly communicates its mission and services to its target audience. Technically, the website is built on WordPress using Oxygen Builder and several plugins like Toolset Views. It employs modern web technologies including jQuery and MediaElement.js for media handling. The site is hosted likely by Kraxnet, consistent with the domain registrar information. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no published security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is weak due to the absence of privacy and cookie policies, which could pose regulatory risks under GDPR. Overall, EDUgrant presents a trustworthy and professional online presence with a clear educational mission. To enhance its security posture and compliance, it should implement security headers, publish privacy and cookie policies, and provide incident response information. These improvements will strengthen user trust and regulatory adherence while maintaining its positive market position.

LETOV AIR s.r.o. is a small, dynamically growing private aviation company based in the Czech Republic, offering a broad range of aviation services including air transport, pilot training, aircraft maintenance, and sales. The company emphasizes compliance with aviation regulations such as PART 145 and CAMO management, positioning itself as a professional service provider in the regional aviation market. The website content is relevant and informative, targeting general aviation clients and enthusiasts. Technically, the website employs legacy JavaScript libraries like jQuery and Fancybox, with Google Analytics integrated for user tracking. The site shows basic mobile optimization and accessibility but lacks modern responsive design and advanced SEO features. Security measures are minimal, with no visible HTTPS enforcement or security headers, though a cookie consent banner and email obfuscation are implemented to enhance privacy. From a security perspective, the absence of WHOIS data limits domain trust verification, and the lack of HTTPS and security headers presents vulnerabilities. No privacy policy or terms of service pages are published, which may impact compliance with GDPR and other regulations. The overall risk is moderate, with recommendations to improve security posture, privacy compliance, and technical modernization to enhance trust and user experience.

LPS Letecké práce a služby s.r.o. is a Czech Republic-based aviation company specializing in helicopter pilot training, helicopter maintenance, aerial surveying, and monitoring services. Established in 1996, the company holds multiple certifications and operates primarily in the transportation and energy sectors. Their website presents a professional image with clear service offerings and contact information, targeting individuals and businesses interested in helicopter-related services. Technically, the website uses modern front-end technologies including Bootstrap, Swiper.js, and Google Analytics, with responsive design and moderate performance. Security posture is adequate with HTTPS usage and no exposed sensitive data, but lacks explicit security headers and privacy compliance mechanisms such as privacy and cookie policies. The domain WHOIS data is consistent with the business claims, indicating legitimacy and long-term operation. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices.

Winremont s.r.o. is a small Czech company specializing in glassworks and glazing services, including sales and processing of glass for residential and commercial applications. Their offerings include glass panels for kitchens, glass railings, heat-resistant glass for fireplaces, and glazing of balconies and winter gardens. They also manufacture insulating double-glass units and photovoltaic panels integrated into railings and roofs. The company targets local customers primarily in Šumperk and surrounding regions. The website is professionally designed with good content quality and clear navigation, using a custom CMS and modern web technologies including Google Analytics 4 for visitor tracking. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. The absence of WHOIS data reduces domain trustworthiness and transparency. Overall, the website presents a credible small business with room for improvement in compliance and security documentation.

UNEX is a well-established metallurgical and engineering group specializing in manufacturing bucket wheel excavators and heavy engineering components. Operating multiple plants in the Czech Republic and Slovakia, it serves multinational industrial clients globally. The company holds multiple ISO certifications, underscoring its commitment to quality and environmental standards. The website reflects a professional industrial business with clear service offerings and export focus. Technically, the site uses standard web technologies such as jQuery and Typekit fonts, with moderate performance and good mobile optimization. Security posture is adequate but could be improved by implementing security headers and publishing comprehensive privacy and security policies. The absence of WHOIS data is a notable concern, reducing domain trustworthiness despite the legitimate business presence indicated by the website content and certifications. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

Topenářské centrum Tespo is a small local business based in Šumperk, Czech Republic, specializing in the sale, installation, and servicing of heating, plumbing, and gas equipment. Their website presents a professional image with clear service offerings including sales of boilers and heat pumps, installation services, and maintenance. The company targets residential, commercial, and industrial customers within their region. Technically, the website uses common JavaScript libraries such as jQuery and UI components like Venobox and Slick Carousel, with Google Fonts for typography. The site is mobile optimized and provides a cookie consent mechanism, but lacks a dedicated privacy policy or terms of service pages. Security posture is basic, with no advanced security headers detected and no visible SSL configuration details. WHOIS data is unavailable, which reduces domain trustworthiness, though the website content and contact information appear legitimate. Overall, the site scores moderately on content quality and business credibility but should improve security and compliance documentation.

The domain sub.cz is registered since 1996 with REG-ZONER registrar, indicating a long-standing domain. However, the website content is currently inaccessible, returning a 403 Forbidden error page that blocks access to any business or informational content. No metadata, structured data, or contact information is available on the page. The site lacks privacy policies, cookie consent mechanisms, terms of service, or any security-related disclosures. Technically, the site does not reveal any modern frameworks, analytics, or advertising technologies. The absence of HTTPS information and security headers further reduces the security posture. Overall, the website appears inactive or restricted, limiting any meaningful analysis of business operations or security maturity.

Die deutschen Musikhochschulen is a German association representing music universities and conservatories, providing organizational information, event details, and competition announcements. The website serves students, educators, and stakeholders in the music education sector in Germany. The business operates as a non-profit association with a clear focus on education and cultural promotion. Technically, the website is built on WordPress using the Divi theme, leveraging jQuery and Owl Carousel for interactive elements. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. No vulnerabilities or tracking scripts were detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though improvements in security headers and transparency policies are recommended.

Gradska knjiznica Marka Marulića is a well-established public library based in Split, Croatia, founded in 2002. It serves a broad audience including children, youth, and adults by providing diverse library services, cultural events, educational workshops, and an online catalog. The institution holds a strong local market position as a key cultural and educational resource. The website reflects this with rich content, event listings, and membership information, targeting general public and literary enthusiasts. Technically, the site is built on WordPress with modern plugins and frameworks such as Bootstrap and Swiper, hosted by Totohost, and integrates Google Analytics for visitor insights. The site is mobile-optimized and SEO-friendly, though accessibility features are basic.

Gradska knjižnica i čitaonica Vinkovci is a public library serving the Vinkovci community in Croatia, providing access to a catalog, membership services, and cultural events. The website is professionally designed using WordPress with Elementor and the Litho theme, offering a responsive and accessible user experience. The site includes a cookie consent mechanism and a privacy policy compliant with GDPR, reflecting a commitment to user privacy. Security posture is solid with HTTPS enforced and no exposed sensitive data, though some security headers could be improved. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate institution.

Monoplay is a well-established international contemporary dance festival based in Zadar, Croatia, specializing in solo dance performances and educational workshops. The website reflects a mature digital presence built on WordPress with modern plugins and SEO optimization. The festival targets dance professionals, students, and the general public interested in contemporary dance. While the site is professionally designed and content-rich, it lacks critical privacy and cookie policies, which affects compliance. Security posture is moderate with HTTPS enabled but missing some security headers. Contact information is primarily via forms, with no explicit emails or phone numbers published. Overall, the site is trustworthy and credible but would benefit from enhanced privacy compliance and security hardening.

Teatar EXIT is a well-established Croatian theatre company founded in 2003, specializing in provocative and innovative theatrical performances. The website serves as a digital platform to showcase their program, ticket sales, and festival events, targeting a general audience interested in cultural arts. The company maintains a consistent brand presence with active social media channels and a mobile app offering, indicating a moderate level of digital maturity. Technically, the site is built on WordPress with modern libraries and frameworks such as Bootstrap and jQuery, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Security measures include HTTPS, GDPR-compliant consent mechanisms, and Google reCAPTCHA on forms, although there is room for improvement in implementing security headers and explicit incident response policies. Overall, the website is professional, secure, and compliant, with a high trustworthiness rating and no detected malicious content.