Medium-risk security reports

Kreativagentur Herr Kaplan is a small, regionally focused creative agency based in Klagenfurt, Austria, specializing in marketing, branding, advertising, social media, and web design services. The website presents a professional image with clear descriptions of their key services and a portfolio showcasing client projects. The business targets local businesses and organizations seeking comprehensive creative solutions. Technically, the website uses modern web technologies including JavaScript, CSS, and integrates Usercentrics for GDPR-compliant cookie consent and Google Analytics for visitor tracking. The site is mobile optimized with good navigation and content quality. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers are absent and no explicit security or incident response policies are published. Overall, the domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.

VÖPE is a prominent Austrian industry association representing project developers in the real estate sector. The organization focuses on advocacy, expertise in construction and real estate law, and providing a platform for its members through events and publications. The website reflects a mature digital presence built on WordPress with Elementor, offering a professional and content-rich experience targeted at industry professionals and policymakers in Austria. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although incident response and vulnerability disclosure information are not explicitly provided. Overall, the site demonstrates good compliance with GDPR and privacy standards, supporting trust and credibility in its sector.

ITBUSINES, s.r.o. is a Czech Republic-based ICT service provider specializing in internet connectivity, voice services, IT and PC servicing, and smart home solutions. The company targets both households and businesses primarily in regional Czech areas such as Prague, Mladá Boleslav, and Liberec. Their website reflects a professional presence with clear service offerings and contact information. Technically, the site uses modern JavaScript libraries including jQuery and Fomantic-UI, with integration of live chat and analytics tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of security headers and WHOIS data transparency are notable gaps. Overall, the website is trustworthy and functional but would benefit from enhanced security practices and domain registration transparency.

The website futurego.cz represents a comprehensive digital platform operated by ČEZ, a leading Czech energy company, focused on providing electromobility solutions. It offers a wide range of services including public charging stations, solutions for businesses and municipalities, and tailored offerings for households. The platform supports users with a mobile app and advanced tools like a smart charging cable and fleet management modules. The company holds a strong market position in the Czech Republic with a large and growing network of charging infrastructure. Technically, the website is built on modern frameworks such as Next.js and React, ensuring fast performance, mobile optimization, and good accessibility. Security posture is solid with HTTPS, cookie consent, and analytics tools implemented, though explicit security policies and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and well-aligned with the business objectives of promoting sustainable electromobility.

Draftspot is a Czech Republic based digital agency specializing in custom web development, e-commerce solutions, branding, graphic design, and digital marketing services. Established in 2016, the company has built a solid regional presence with over 250 projects completed and a strong portfolio of satisfied clients. Their business model focuses on delivering tailored WordPress and custom web solutions with an emphasis on design quality and user experience. Technically, the website leverages modern frameworks such as Bootstrap and jQuery, and is built on WordPress, ensuring a familiar and scalable platform. The site is mobile optimized and SEO friendly, with structured data enhancing search visibility. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers are lacking and could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie banner. Overall, Draftspot demonstrates a professional and trustworthy online presence with clear contact channels and client testimonials. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing explicit security policies, and adding terms of service to further strengthen trust and compliance.

ŠKO-ENERGO is a financially stable energy company providing comprehensive energy solutions primarily for ŠKODA AUTO and the city of Mladá Boleslav. The company focuses on producing and distributing environmentally friendly energy using carbon-free technologies, offering industrial energy services and energy consumption reduction consulting. The website reflects a professional corporate presence with clear branding and a focus on compliance and privacy. Technically, the site employs modern tools such as Google Tag Manager, Cookiebot for consent management, and reCAPTCHA for security, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is well-structured, mobile-optimized, and compliant with GDPR requirements, though WHOIS data is unavailable, likely due to privacy protection. The absence of direct contact emails or phone numbers on the main site suggests contact is managed via forms or dedicated pages.

NAM system, a.s. operates the 1Box platform, delivering advanced hardware and software solutions for modern monitoring centers primarily in the Czech Republic. The company targets security agencies, municipal police, fire services, and industrial enterprises, providing integrated monitoring and alarm management technologies. With over a decade of market presence and more than 250 dispatch centers using their technology, NAM system holds a solid position in the security technology sector. Technically, the website is built on WordPress with modern SEO and analytics tools, offering a professional and responsive user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the company demonstrates strong business credibility and digital maturity, with room for enhanced security transparency and policy disclosures.

NAM system, a.s. is a Czech-based company specializing in the development of modern monitoring technologies, including solutions for vehicles, assets, and personal safety. With over 35 years of experience, the company positions itself as a reliable and quality-focused provider offering 24/7 support. Their business model centers on technology development and collaboration with other technology developers to secure and monitor objects, people, and vehicles. The website reflects a professional and consistent brand image, targeting businesses and organizations requiring advanced monitoring solutions. Technically, the website is built on WordPress using the Divi theme, integrating modern technologies such as Google reCAPTCHA for form security, Google Tag Manager for analytics and marketing, and a cookie consent mechanism compliant with GDPR principles. The site is hosted likely via a Czech hosting provider, with good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and implements cookie consent with granular categories. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent. Security headers are not explicitly visible but likely present. No vulnerabilities or suspicious content were detected. Overall, the website demonstrates a solid security posture and business credibility, though it would benefit from publishing privacy and security policies and providing direct contact information for security incidents. The domain's WHOIS data aligns well with the business claims, showing a long-established presence and high legitimacy.

ONI system operates a vehicle monitoring and fleet management platform accessible via web and mobile applications. The service targets vehicle owners, fleet managers, partners, and dealers, offering functionalities such as vehicle tracking, controlling access, and demo testing without hardware installation. The website is functional and provides login portals for different user types but lacks visible contact or compliance information. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, and integrates Google Analytics and Lead Forensics for tracking. However, security headers are absent, and no privacy or cookie policies are presented, indicating gaps in compliance and security best practices. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain legitimacy and trustworthiness. Overall, the site is safe and professional in content but requires improvements in transparency, security, and compliance to enhance trust and user confidence.

ONI system is a Slovak-based company specializing in GPS tracking and monitoring solutions for vehicles, assets, and persons. With over 30 years of experience and monitoring more than 50,000 objects, the company serves both business and individual customers primarily in Slovakia and the Czech Republic. Their offerings include GPS units, mobile and web applications, and specialized tracking services tailored to various vehicle types and industries. The website is professionally designed, multilingual, and optimized for SEO and mobile use, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and Smart Emailing. Security posture is good with HTTPS enforced and use of reCAPTCHA, though some security headers could be improved. Privacy compliance is evident with GDPR-aligned policies and cookie consent mechanisms. Overall, the site projects a trustworthy and credible business image with clear contact information and social media engagement.

SkodaTour.eu is a multilingual website dedicated to organizing annual meetings and events for Škoda car owners and enthusiasts, primarily coordinated by the Autoklub Škoda in Mladá Boleslav, Czech Republic. The site serves as a community hub for these events, which rotate locations across Europe and emphasize social, technical, and tourist engagement among Škoda fans. The business model focuses on event organization and community building within a niche automotive enthusiast segment. Technically, the website employs older JavaScript libraries such as MooTools and jQuery, with no modern CMS or frameworks detected. The site is hosted by Web4U s.r.o., a Czech hosting provider. Performance and mobile optimization are basic, with limited accessibility and SEO features. No analytics or tracking tools are present, indicating minimal user tracking. From a security perspective, the site lacks visible HTTPS enforcement and security headers, and no privacy or cookie policies are provided, indicating poor privacy compliance. No contact or incident response information is available, limiting transparency and user trust. The site content is safe for general audiences, with no adult or explicit material detected. Overall, the website is functional but basic, with moderate trustworthiness due to consistent regional hosting and content alignment. However, significant improvements are needed in security, privacy compliance, and contact transparency to enhance user trust and regulatory adherence.

The website economyrun.cz serves as the official portal for the Škoda Economy Run, an annual fuel efficiency competition organized by Škoda Auto a.s. and its affiliated automotoklub. The site provides detailed event information, historical results, media galleries, and links to related resources. It targets automotive enthusiasts and participants interested in eco-friendly driving competitions, leveraging Škoda's brand and community engagement. Technically, the site is built on Joomla! CMS with JavaScript libraries such as MooTools and jQuery, offering a moderately performant and navigable user experience, though mobile optimization and accessibility are basic. Security posture is moderate with HTTPS usage but lacks explicit security headers and vulnerability disclosures. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is credible and trustworthy, supported by a long domain registration history and clear association with Škoda Auto.

The website www.mybox.pro currently serves only as a redirect to https://www.mybox.eco/, providing no direct content or business information. The lack of accessible content and absence of metadata, contact details, or security policies indicates a very low digital maturity level. The WHOIS data is malformed and does not provide any registrar or registrant information, which further diminishes trust and transparency. Technically, the site lacks HTTPS enforcement and security headers, exposing it to potential security risks. Overall, the site presents a minimal security posture with no visible vulnerabilities but also no protective measures. The risk assessment is high due to the lack of transparency and security best practices. Strategic recommendations include implementing HTTPS, publishing clear privacy and cookie policies, adding business contact information, and improving website content and technical SEO to enhance trust and compliance.

Chatbot Builder AI is a technology company specializing in providing a SaaS platform for building custom AI chatbots and GPT-powered conversational agents. The platform targets businesses and agencies seeking to automate and enhance customer communication across multiple channels including websites, social media, email, and voice. Positioned as a leading AI chatbot builder for 2025, it offers seamless integration with major AI providers such as OpenAI and Google AI's Gemini, along with white-label solutions for agencies. The business model is subscription-based with multiple pricing tiers and a free sandbox trial to encourage adoption. Technically, the website is built on Webflow CMS with integrations for Stripe payments and Google Tag Manager for analytics. It uses modern JavaScript libraries such as particles.js and swiper.js for enhanced UI/UX. The site is mobile-optimized, fast-loading, and well-structured with comprehensive metadata and Open Graph tags. Security-wise, HTTPS is enforced and payment processing is securely handled via Stripe, though explicit security headers and cookie consent mechanisms are absent. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but improvements are recommended in security headers and privacy compliance features. The WHOIS data is privacy protected, which is common for SaaS providers, and no suspicious patterns were detected. Overall, the website demonstrates a professional, trustworthy, and technically mature presence suitable for its target market. Strategic recommendations include implementing explicit security headers, adding cookie consent for GDPR compliance, publishing a security policy and incident response contacts, and enhancing contact information visibility to further build trust and compliance.

Obchodní centrum Futurum Kolín is a medium-sized retail shopping center located in Kolín, Czech Republic, operated by Marissa Tau a.s. The website presents a professional and well-structured digital presence showcasing its 55 shops, 11 restaurants, and parking facilities. The site targets general shoppers and local residents, providing event information, gift cards, and navigation aids. Technically, the website uses modern JavaScript libraries, cookie consent management, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS usage and cookie consent, but lacks visible security headers and explicit incident response policies. WHOIS data is unavailable, likely due to privacy protection, but the site’s professional appearance and partner links indicate legitimacy. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with room for improvement in security best practices and contact transparency.

Královo Pole is a medium-sized retail shopping center located in Brno, Czech Republic, operated by KOENING Shopping, s.r.o. The website provides comprehensive information about the center's shops, restaurants, parking facilities, events, and services. It targets general shoppers and local residents, positioning itself as a regional retail hub with a focus on customer convenience and modern amenities such as electromobility charging stations. Technically, the website employs modern JavaScript libraries, Google Analytics, and cookie consent management, reflecting a moderate to good level of digital maturity. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and public security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and business presence appear legitimate. Overall, the site is safe, professional, and compliant with GDPR requirements, but could improve transparency and security posture.

Nákupní centrum Olympia MB is a medium-sized retail shopping center located in Mladá Boleslav, Czech Republic, operated by CPI Shopping MB, a.s. The website presents a professional and well-structured digital presence showcasing its retail shops, restaurants, parking facilities, and customer services. The site targets general shoppers and local residents, providing clear navigation and relevant content. Technically, the website uses modern JavaScript frameworks and tracking tools, including Google Analytics and a cookie consent management system, ensuring GDPR compliance. Security posture is adequate with HTTPS enforced and cookie consent mechanisms, but lacks explicit security headers and detailed security policies. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear legitimate and consistent with a professional retail operation. Overall, the site scores well on content quality, privacy compliance, and business credibility, with room for improvement in security best practices and domain registration transparency.

Olympia Teplice is a regional shopping center in the Czech Republic operated by CPI Shopping Teplice, a.s. The website provides comprehensive information about the center's retail stores, restaurants, parking facilities, events, and gift cards. It targets general shoppers and families seeking a convenient and enjoyable shopping experience. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the website employs modern JavaScript libraries, Google Analytics, and a cookie consent management system, ensuring compliance with privacy regulations. Security posture is strong with HTTPS enforced and anti-spam measures in place, although some security headers could be improved. The absence of WHOIS data limits domain transparency but does not detract from the site's legitimacy given the professional content and social media presence. Overall, the site is a well-maintained digital asset supporting the shopping center's business objectives.

Nákupní centrum Futurum Hradec is a medium-sized retail shopping center located in Hradec Králové, Czech Republic. It offers a wide range of services including over 100 shops, restaurants, a cinema, and ample parking. The website is professionally designed with good content quality and clear navigation, targeting general shoppers and families. The business model focuses on providing a comprehensive shopping and entertainment experience in a regional market. Technically, the site uses modern JavaScript libraries, cookie consent management, and Google Tag Manager for analytics, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and consent mechanisms but lacks visible advanced security headers and explicit incident response policies. The absence of WHOIS data reduces domain trust slightly, but the website's professional presentation and social media presence support its legitimacy. Overall, the site is safe, family-friendly, and compliant with GDPR requirements.

Géčko Nákupní centrum is a large retail shopping center located in České Budějovice, Czech Republic, operated by Marissa Yellow, s.r.o. The website presents a professional and well-structured digital presence showcasing a variety of retail stores, restaurants, parking facilities, and customer services. The site targets general shoppers and families, positioning itself as a regional shopping destination with a broad tenant mix and community engagement. Technically, the website employs modern JavaScript libraries, cookie consent management, and analytics tools, ensuring a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though some security headers are missing and no explicit security or incident response policies are published. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear legitimate and professional. Overall, the site scores well in content quality, technical implementation, and privacy compliance, with room for improvement in business credibility and security transparency.

IGY Centrum České Budějovice is a prominent retail and social hub in the South Bohemian region, operated by CB Property Development, a.s. The center offers a wide range of retail shops, dining options, entertainment via a cinema, and office spaces, positioning itself as a key destination for shoppers and local residents. The website reflects a mature digital presence with modern design and user-friendly navigation, supporting a positive user experience across devices. Technically, the site employs contemporary JavaScript frameworks, integrates major analytics and advertising platforms, and enforces HTTPS, indicating a solid digital infrastructure. Security posture is generally good with cookie consent mechanisms and no visible vulnerabilities, though explicit security headers and incident response information are absent. The lack of WHOIS data is a notable gap in transparency, slightly impacting trustworthiness. Overall, the site is professional, compliant with privacy regulations, and safe for general audiences.

Olympia Plzeň is a large retail shopping center located in Plzeň, Czech Republic, operated by CPI East, s.r.o. The website presents a professional and well-structured digital presence showcasing 141 shops, dining options, a cinema, and extensive parking facilities. The target audience includes local shoppers, families, and visitors seeking retail and entertainment services. The business model focuses on leasing retail space and providing amenities to enhance customer experience. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and cookie consent management tools, ensuring a responsive and user-friendly experience. While performance is moderate, the site is mobile optimized and SEO friendly. However, some accessibility features could be improved. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces transparency but does not directly impact the site's operational security. Security headers could be enhanced, and explicit incident response contacts are missing. Overall, Olympia Plzeň's website is a credible and professional platform supporting its retail business. Strategic improvements in security headers, contact transparency, and WHOIS data availability would further strengthen trust and compliance.

OC Spektrum, s.r.o. operates a medium-sized shopping center in the Czech Republic, offering a variety of retail shops, restaurants, and parking facilities. The website presents a professional and user-friendly interface with clear navigation and relevant content targeting general shoppers and local visitors. The business holds recognized certifications such as BREEAM In USE and has received industry awards, reinforcing its market credibility. Technically, the website employs modern JavaScript libraries, cookie consent management, and Google Tag Manager for analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy compliance evident through comprehensive cookie and privacy policies. However, explicit security headers and incident response information are absent, representing areas for improvement. Overall, the site is safe, trustworthy, and well-maintained, with no signs of malicious activity or content blocking.

NC Fénix is a Czech shopping center operated by Best Properties South, a.s., offering a wide range of retail shops, restaurants, and services including postal and fitness facilities. The website is professionally designed with good content quality and clear navigation, targeting local shoppers and visitors. Technically, the site uses modern JavaScript libraries, cookie consent management, and integrates Google Analytics and Tag Manager for tracking. Security posture is solid with HTTPS and anti-spam measures on forms, though no explicit security policy or incident response information is published. The absence of WHOIS data limits domain trust assessment but the website content and branding indicate a legitimate business. Privacy compliance is well addressed with GDPR-consent mechanisms and cookie policies.

Quadrio is a commercial shopping and office center located in Prague, operated by CPI Národní, s.r.o. The website presents a professional and well-structured digital presence showcasing retail shops, restaurants, office spaces, and cultural attractions such as the Kafka4 gallery. The site targets a broad audience including shoppers, office tenants, and tourists. Technically, the website uses modern JavaScript frameworks, cookie consent management, and integrates Google Analytics and Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though security headers could be improved. The absence of WHOIS data is a concern but does not critically undermine trust given the professional site and active social media presence. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility.

MYPLAST s.r.o. is a Czech manufacturing company specializing in the design, development, and production of injection molded and shaped plastic products primarily for cooling systems, construction, and other industrial sectors. Established in 1998, the company has grown steadily, modernizing its facilities and expanding its product portfolio. The website reflects a professional and consistent brand image with detailed business and contact information, including certifications such as ISO 9001. Technically, the website employs modern JavaScript libraries including jQuery, Bootstrap, and Google Analytics for tracking and performance. It is mobile optimized and includes cookie consent mechanisms compliant with GDPR. Security posture is good with HTTPS enforced and reCAPTCHA implemented, though additional security headers could enhance protection. The absence of WHOIS data for the domain is a notable concern, as it reduces trust in domain legitimacy despite the professional presentation and detailed company information on the site. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website is well-constructed and suitable for its industrial B2B audience, but the missing WHOIS data and lack of some security headers suggest areas for improvement in trust and security transparency.

Rempo VEGA is a Czech Republic-based B2B e-commerce and retail company specializing in supplying operational materials, workwear, protective equipment, cleaning supplies, and related products. The company targets businesses seeking to simplify complex corporate processes and improve operational efficiency through their product offerings. The website demonstrates a professional online presence with a physical store location in Kroměříž, Czech Republic, and offers a broad product catalog with over 5000 items in stock. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Smartsupp chat, and Bootstrap framework, ensuring a responsive and user-friendly experience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published privacy or terms of service documents, which are recommended for compliance and trust. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.

Zámečnictví Ptáčník is a small, established locksmith and key manufacturing business based in the Czech Republic, founded in 2003. The company offers a range of services including key production, emergency opening of homes, cars, and safes, as well as installation and repair of locking systems. Their market position is that of a trusted regional service provider with certifications from recognized industry groups and partnerships with major lock manufacturers. Technically, the website is built on WordPress with Elementor and Yoast SEO, showing moderate digital maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements are needed in security headers and privacy compliance. Overall, the website is professional and trustworthy, but lacks explicit privacy and cookie policies, which are important for GDPR compliance.

Sportcentrum Paráda is a local sports and wellness center based in Kroměříž, Czech Republic, offering a wide range of fitness and wellness services including squash, spinning, yoga, massages, and wellness facilities. The website presents a professional and user-friendly interface with clear contact details and online reservation capabilities, targeting local sports enthusiasts and wellness clients. Technically, the site uses legacy JavaScript libraries such as jQuery 1.7.1 and includes Google Analytics and Tag Manager for user tracking, but lacks modern security headers and privacy compliance features. The absence of WHOIS data raises concerns about domain transparency and trustworthiness, although the website content and business information appear legitimate and consistent with a small local business. Overall, the site is functional and informative but requires updates to its security posture and privacy compliance to enhance user trust and regulatory adherence.

Sokolovna Roštín operates as a local multi-purpose sports and cultural facility in the Czech Republic, offering accommodation, sports grounds, sauna, and event hosting services primarily targeting schools, sports groups, and families. The business is well-established with a domain age since 2007 and clear contact information, supporting its legitimacy and community presence. Technically, the website is built with basic HTML, CSS, and JavaScript technologies, including jQuery, and hosted via Active24. While the site is functional and content-rich, it lacks advanced SEO, accessibility, and mobile optimization features. Security posture is moderate with no explicit security headers or privacy policies, and no evidence of HTTPS enforcement was found in the provided data. The absence of privacy and cookie policies represents a compliance gap, especially under GDPR regulations. Overall, the website is safe, professional, and trustworthy but would benefit from enhanced security and privacy measures.

ELEKTRO S.M.S., spol. s r.o. operates a professional e-commerce platform specializing in electrical wholesale and retail products ranging from cables to lighting. With 28 branches across the Czech Republic and a strong B2B and B2C presence, the company positions itself as a comprehensive supplier in the energy sector. The website offers detailed product categories, guides, and customer support, reflecting a mature business model focused on quality and professionalism. Technically, the site leverages a modern tech stack including ASP.NET WebForms, jQuery, and various third-party analytics and marketing tools, ensuring a functional and user-friendly experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit incident response policies. The absence of WHOIS data limits domain trust assessment but the website content and contact information indicate a legitimate and established business. Overall, the site is well-structured, compliant with GDPR, and suitable for its target audience.

Signalbau a.s. is a Czech Republic-based company with a focus on manufacturing or industrial services, as indicated by the company registration and contact details on the website. The site provides basic business information including contact emails, phone numbers, and physical address, targeting primarily local or regional B2B clients. The website is modest in content and design, with a straightforward navigation structure but lacks comprehensive privacy or security policies. Technically, the site uses older versions of jQuery alongside modern fonts and icon libraries, but the presence of multiple jQuery versions may introduce security risks. No CMS or hosting provider information is evident. Security posture is weak due to missing HTTPS verification and lack of security headers in the provided data. The absence of WHOIS registration data is a critical concern, impacting the domain's legitimacy and trustworthiness. Overall, the website is functional but basic, with significant room for improvement in security, privacy compliance, and technical modernization.

Káva Kroměříž is a Czech family-owned coffee roastery and e-commerce business specializing in fresh roasted coffee and related products. Established since 2013, it offers a wide variety of coffee types, coffee subscriptions, coffee machines, and accessories primarily targeting coffee enthusiasts and businesses within the Czech Republic. The website is professionally designed, mobile-optimized, and provides clear navigation and product information. Technically, it leverages modern analytics and marketing tools such as Google Analytics, Matomo, Smartlook, and Sklik retargeting, integrated with consent management to comply with GDPR. Security posture is solid with HTTPS enforced and secure form handling, though explicit security policies and incident response information are absent. The lack of WHOIS data for the domain reduces transparency and trustworthiness from a domain registration perspective. Overall, the website presents a trustworthy and professional front for a small retail e-commerce business with room for improvement in security disclosures and domain registration transparency.

FORNAL trading s.r.o. is a Czech Republic based manufacturer specializing in vehicle superstructures and modifications, established in 2002. The company positions itself as a leading manufacturer in the transportation sector, targeting businesses requiring specialized vehicle modifications. The website is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with basic mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and shows minor backend PHP errors. Privacy compliance is weak due to the absence of a clear privacy policy and terms of service, though a cookie consent mechanism is present. Overall, the website is functional and business-focused but would benefit from improved security practices and clearer compliance documentation.

TSS Group is a Czech-based company founded in 2004 specializing in security solutions for buildings and vehicles, as well as GPS monitoring of vehicles and persons. The company operates a professional website with a broad product catalog, case studies, and active social media presence, indicating a solid market position in the regional security technology sector. Technically, the website uses a modern tech stack including jQuery, RequireJS, Google Tag Manager, Matomo Analytics, and Cookiebot for consent management, built on the BUXUS CMS platform. The site is mobile-optimized and accessible with good SEO practices. Security posture is moderate with HTTPS in use and cookie consent implemented, but lacks explicit security headers and published security policies. WHOIS data is unavailable, which reduces trustworthiness and requires further verification. Overall, the site is professional and business-focused with no adult or questionable content.

The website of Okresní fotbalový svaz Kroměříž serves as the official online presence for the district football association in Kroměříž, Czech Republic. It provides organizational information, contact details, and resources for local football clubs, referees, and youth programs. The site is positioned as a local sports governing body with a focus on football activities and community engagement. Technically, the site is built on the Webnode platform, leveraging Cloudfront CDN for hosting and delivery, and uses modern web technologies such as JavaScript and CSS. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism, but lacks advanced security headers and a privacy policy page, which are areas for improvement. The WHOIS data is not publicly available, indicating privacy protection, which is common for small organizations. Overall, the site is legitimate and functional but could enhance its compliance and security posture.

Vodovody a kanalizace Kroměříž, a.s. is a regional utility company in the Czech Republic specializing in water supply and sewage services. The company provides a range of services including water and sewage connections, water quality testing, and customer support through physical centers and an online portal. The website is professionally designed with clear navigation and relevant content targeting residential and commercial customers in the Kroměříž region. Technically, the site uses older JavaScript libraries such as jQuery 1.8.0 and several slider plugins, indicating some technical debt and potential security risks. The presence of a cookie consent banner and a comprehensive privacy policy indicates good GDPR compliance. However, the absence of WHOIS data and outdated libraries reduce the overall trust and security posture. Security headers are not visibly implemented, and no explicit security or incident response policies are published. Overall, the website is functional and trustworthy for its business purpose but would benefit from technical and security improvements.

Industria AC a.s. is a Czech company specializing in electrical installation and technical distribution services primarily for the industrial and energy sectors. Founded in 2005, the company offers a range of services including high and low voltage installations, project design, photovoltaic power plants, inspection activities, and reserved technical equipment for high voltage networks. The website presents a professional image with clear service offerings and contact information, targeting industrial and energy businesses in the Czech Republic. Technically, the website uses modern web technologies such as Bootstrap and Google Fonts, with a responsive design and cookie consent mechanisms in place. However, there is no evidence of advanced security headers or explicit privacy policies, and the WHOIS data for the domain is missing, which raises some concerns about domain transparency. The site is accessible without any WAF or blocking mechanisms detected. From a security perspective, the site demonstrates basic compliance with cookie consent but lacks visible security headers and privacy documentation. No forms or user input fields are present on the main page, reducing attack surface. The absence of WHOIS data and registrant information lowers trustworthiness but the professional presentation and contact details mitigate some risk. Overall, the site is moderately secure but could improve in transparency and security best practices. The overall risk is moderate with recommendations to enhance security headers, publish privacy and security policies, and clarify domain registration details to improve trust and compliance.

Hotel Octárna****, s.r.o. operates a hospitality business based in Kroměříž, Czech Republic, offering accommodation, restaurant services, wellness massages, and event space rental. The website presents a professional and consistent brand image targeting tourists, families, and business travelers. The business is well-established with a domain age of over 20 years, supporting its market presence. Technically, the website is built on WordPress with common plugins and libraries, though some components like jQuery and Bootstrap are outdated, which could pose security risks. Security posture is generally good with HTTPS and cookie consent mechanisms implemented, but could be improved with updated libraries and additional security headers. Privacy compliance is strong with GDPR policies and cookie consent clearly presented. Contact information and social media presence enhance business credibility. Overall, the website is safe, user-friendly, and trustworthy.

HARKO s.r.o. is a small Czech company specializing in plumbing, heating, and gas services with over 25 years of operational history. The company offers a range of services including installations, sales, consulting, and subsidy processing, targeting residential and commercial customers primarily in the Czech Republic. The website reflects a basic but functional online presence with clear contact information and references to relevant subsidy programs. Technically, the site uses older JavaScript libraries and a CMS called WebIdeal, with no evidence of modern frameworks or advanced SEO and accessibility features. Security posture is moderate but weakened by outdated libraries, lack of visible HTTPS enforcement, and missing security headers. Privacy and cookie policies are absent, indicating non-compliance with GDPR best practices. Overall, the website is legitimate and trustworthy but would benefit from technical and security improvements.

Keramo D – Dohorák is a Czech Republic based company specializing in construction services with a focus on quality and client satisfaction. The website presents a professional image with clear messaging about their long-standing tradition since 2007. The company targets general audiences seeking comprehensive building services. Technically, the website is built on the Framer platform and integrates Google Tag Manager and Google Analytics for tracking. The site is mobile optimized and has good SEO practices, but lacks advanced accessibility features and security headers. Security posture is weak due to missing security headers and lack of visible compliance documentation. No WHOIS data is available, which reduces transparency and trust. Overall, the website is functional and professional but requires improvements in privacy compliance, security, and contact transparency.

Týdeník-KM is a regional Czech news media company focused on delivering local news, advertisements, and subscription services primarily for the Kroměříž region. The website serves residents and local businesses with news articles, event photo galleries, and advertising opportunities. The business operates on a subscription and advertising revenue model, positioning itself as a key local media outlet. Technically, the website is built on an older WordPress CMS version with common plugins such as Contact Form 7 and Yoast SEO, and uses standard web technologies like jQuery and Owl Carousel. While the site is mobile responsive and well structured, it uses outdated software versions which may pose security risks. Security posture is moderate with HTTPS enabled but lacks important security headers and up-to-date software. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. WHOIS data is unavailable, which reduces domain trustworthiness. Overall, the site is functional and professional but requires technical and security improvements to enhance trust and compliance.

DC4 CZ, a. s. is a Czech Republic-based IT solutions provider with nearly two decades of experience, specializing in innovative IT infrastructure, data center solutions, enterprise networking, and cybersecurity. The company holds a platinum partnership with Dell Technologies and collaborates with other technology leaders such as SonicWall, VMware, and Cisco. Their subsidiary, Connectum, offers internet connectivity and hosting services, complementing DC4's comprehensive ICT offerings. The website reflects a mature business with a professional digital presence and clear service descriptions targeting B2B and B2C clients. Technically, the website employs modern JavaScript libraries including jQuery, Swiper, Anime.js, and Leaflet for interactive maps, alongside Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good SEO practices but lacks some accessibility features and security headers. HTTPS is enforced, ensuring secure communication. From a security perspective, the site demonstrates good practices with no exposed sensitive data or vulnerable libraries detected. However, the absence of security headers and privacy/cookie policies indicates areas for improvement in compliance and defense-in-depth. The WHOIS data is unavailable, which slightly impacts domain trust but is mitigated by the company's visible certifications and business legitimacy. Overall, DC4 CZ presents a trustworthy and professional IT service provider with solid market positioning in the Czech Republic. Strategic recommendations include enhancing privacy compliance, implementing security headers, and publishing vulnerability disclosure information to strengthen security posture and user trust.

Rumpold.cz is a Czech Republic based company operating in the energy sector, likely specializing in waste management and related services. The website is professionally designed with good technical infrastructure, including modern JavaScript libraries and cookie consent management via Cookiebot. The domain is well-established, registered since 1998, and hosted on Forpsi servers. Security posture is moderate with HTTPS enabled and use of Google Tag Manager, but lacks visible security headers and explicit privacy or terms policies. Contact information is not explicitly found in the provided content, which may impact user trust and compliance. Overall, the website is functional and professional but could improve privacy compliance and security transparency.

ČAK CZ s.r.o. is a small Czech construction and trading company specializing in water management, engineering networks, transport construction, and earthworks. Founded in 1998 and based in Kroměříž, the company serves municipalities, private companies, and individuals, emphasizing quality and compliance with ISO standards. Their website reflects a professional presence with detailed business descriptions and references to certifications but lacks modern privacy and security features. Technically, the site uses legacy JavaScript libraries and lacks HTTPS enforcement, which poses security risks. No privacy or cookie policies are present, indicating compliance gaps with GDPR. Overall, the security posture is moderate but requires improvements in HTTPS adoption and security headers. The website is safe for general audiences and does not contain adult or questionable content.

IVAR a.s. is a Czech Republic based medium-sized company specializing in industrial automation solutions, including turnkey delivery of components and technological units for industrial automation. Established in 1998, the company offers comprehensive services from electrical and control system design to software development for PLCs and operator PCs, serving end users, general contractors, and engineering offices. The website reflects a professional digital presence with modern technologies and clear business information. However, it lacks published privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS enabled but missing key security headers and explicit security policies. Overall, the website is trustworthy and well-structured but would benefit from enhanced compliance and security transparency.

oXyShop s.r.o. is a Czech-based company specializing in e-commerce solutions, including custom e-shop development, B2B portals, and digital marketing services. The company positions itself as a partner for successful online business, targeting businesses seeking to enhance their e-commerce presence. The website reflects a professional and modern digital presence with strong branding and trust signals such as client logos and testimonials. Technically, the site is built on WordPress with a modern tech stack including Google Tag Manager, reCAPTCHA, and advanced front-end libraries, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and form protections, though explicit security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy and professionally maintained, though WHOIS data is privacy protected, which is common and justified for this business type.

EMi s.r.o., operating under the brand EMI Lighting, is a Czech company specializing in the design and supply of lighting and lighting control systems for various sectors including offices, retail, manufacturing halls, sports facilities, schools, and streets. Founded in 1993 and based in Brno, the company emphasizes technologically advanced lighting solutions tailored to customer needs, focusing on economic, ecological, technological, and design aspects. The website reflects a professional and consistent brand image with clear business offerings and project references. Technically, the website is built on simploCMS and incorporates modern web technologies such as Google Analytics, Google Tag Manager, and Typekit fonts. It is served over HTTPS with good mobile optimization and moderate performance. However, the site lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. From a security perspective, the site demonstrates a solid baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data for the domain is a concern, reducing trust in domain legitimacy. No WAF or blocking mechanisms are detected, and the site is fully accessible. Contact information is clearly provided, but incident response and vulnerability disclosure information are missing. Overall, the website is professional and trustworthy in content and presentation but would benefit from enhanced privacy compliance, security headers, and domain registration transparency to improve its security posture and trustworthiness.

The website www.allputz.com represents a small Austrian construction company specializing in thermal insulation systems and plastering services. The company targets local clients in Oberndorf in Tirol and offers services such as Wärmedämmverbundsystem, Innenputz, and Außenputz. The website is built on the Wix platform, indicating a moderate level of digital maturity with standard web technologies and a basic but functional design. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with HTTPS usage but lacks advanced security headers and privacy policies. Overall, the site is functional but requires improvements in compliance and security to enhance trust and professionalism.

ALLPUTZ-MAJCEN GmbH is a specialized construction service provider focusing on interior and exterior plastering, drywall construction, and thermal insulation primarily serving the Austrian regions of Steiermark, Burgenland, and southern Niederösterreich. With over 30 years of experience and professional association membership, the company positions itself as a trusted regional expert offering quality workmanship and competitive pricing. The website reflects a professional digital presence with clear service descriptions, contact information, and partner affiliations. Technically, the website is built on a modern CMS platform (Mono by Herold.at) and employs common web technologies such as jQuery and Google Tag Manager. It incorporates a comprehensive cookie consent mechanism aligned with GDPR requirements, demonstrating a mature approach to privacy compliance. Performance and mobile optimization are adequate, though some security headers could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data limits full domain trust assessment. The website lacks explicit security policies or incident response information, which could be enhanced to improve transparency and readiness. Overall, the website and business present a low-risk profile with good compliance and professionalism. Strategic improvements in security headers, incident response disclosure, and WHOIS transparency would further strengthen trust and security posture.