Medium-risk security reports

HESTEGO a.s. is a Czech company specializing in GDPR compliance and personal data processing services. The website provides comprehensive information about data processing practices, legal bases, data subject rights, and contact details for data protection officers. The company targets businesses and individuals requiring GDPR-related services, positioning itself as a niche provider in the Czech market. The website is professionally designed using Bootstrap and jQuery, with a focus on clarity and compliance information. Technical infrastructure is moderate with standard web technologies and no detected CMS or advanced platforms. Security posture is adequate but could be improved by adding security headers and formal security policies. No cookie policy or terms of service are present, which are recommended for full compliance. Overall, the site is safe, professional, and trustworthy with clear business legitimacy supported by consistent WHOIS data.

Boxie.cz is a Czech Republic based small business offering a smart parcel box service that acts as a private mailbox for receiving and sending packages and letters. The service integrates with multiple carriers to simplify parcel handling for customers. The website is built on the Wix platform, leveraging Wix's hosting and content management capabilities, and includes Google Analytics and Tag Manager for visitor tracking. The site is accessible, mobile optimized, and uses HTTPS with a valid SSL certificate, indicating a secure connection. However, the absence of privacy, cookie, and terms of service policies, as well as lack of visible contact information, limits the site's compliance and trustworthiness from a security and privacy perspective. The WHOIS data is unavailable, likely due to privacy protection, which reduces transparency about domain ownership. Overall, the site presents a professional business front but requires improvements in privacy compliance and security best practices.

Acme Themes is a specialized WordPress theme development company offering a range of free and premium responsive themes targeted at WordPress users and small to medium businesses. The company emphasizes quality coding, elegant design, SEO friendliness, and excellent customer support, positioning itself as a niche player in the WordPress theme market. Their business model revolves around theme sales and support services, supported by a professional website with clear navigation and trust signals such as testimonials and social media presence. Technically, the website is built on WordPress with a modern tech stack including Easy Digital Downloads for e-commerce, Yoast SEO for optimization, and various marketing and analytics tools. The site is mobile optimized and performs moderately well, though accessibility features could be improved. Security posture is good with HTTPS enforced and reCAPTCHA on login forms, but lacks some advanced security headers and explicit incident response policies. Privacy and cookie policies are present and GDPR compliant, enhancing user trust. However, the absence of WHOIS registrant data reduces domain trustworthiness, suggesting either recent registration or privacy protection. Overall, the site is professional and trustworthy but could benefit from enhanced transparency and security practices.

The website vyskov.cz is the official municipal portal for the city of Vyškov in the Czech Republic. It serves as a comprehensive information hub for residents, visitors, and businesses, offering access to city services, news, event calendars, and contact information. The site is well-structured and targets local citizens and stakeholders with a focus on public administration and community engagement. The business model is typical for government entities, focusing on transparency and service delivery rather than commercial activities. Technically, the site employs a mix of legacy and modern web technologies including jQuery, Bootstrap, Font Awesome, and Google services such as reCAPTCHA and Translate. It uses the vismo CMS platform, which is common for Czech municipal websites. The site is mobile-optimized and accessible, with good SEO practices and multilingual support. Hosting and domain registration are consistent with a Czech government entity. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, which is positive. However, it lacks visible security headers and a published security policy or incident response contacts. The use of an older jQuery version could pose risks if not patched. Privacy compliance is basic but present, with GDPR and cookie policies available, though no explicit consent mechanism is implemented. Overall, the site is trustworthy, professional, and safe for general audiences. It effectively supports the city’s communication and service goals but could improve security posture and privacy transparency. No critical vulnerabilities or suspicious elements were detected.

The website at app.strava.cz/en is a minimal Next.js-based web application with very limited visible content or business information. The site appears to be a frontend application scaffold or a partial deployment without accessible privacy policies, terms of service, or contact details. The technical infrastructure is modern, leveraging React and Next.js frameworks, but lacks visible SEO, accessibility, or performance optimizations. Security posture cannot be fully assessed due to missing headers and SSL details, and no explicit security or incident response policies are found. Overall, the site is accessible and safe but lacks substantive content and compliance indicators, resulting in a low trust and credibility score.

The website www.refund-advantage.com is currently inaccessible, presenting an 'Access Denied' error page likely due to a Web Application Firewall (WAF) or security mechanism, inferred from the Akamai EdgeSuite error reference. The domain WHOIS query returned no registration data, indicating the domain may be unregistered, expired, or otherwise unavailable. Consequently, no business, contact, or policy information is accessible for analysis. The lack of accessible content and metadata severely limits the ability to assess the company's business model, technical infrastructure, or security posture. The site exhibits no visible security headers, privacy policies, or contact channels, and no technologies or frameworks can be identified. Overall, the website's digital presence is minimal or non-existent, raising significant concerns about legitimacy and operational status.

The website www.pbsnetaccess.com is currently inaccessible due to blocking by the Incapsula Web Application Firewall (WAF). The WHOIS lookup for the domain returned no registration data, indicating the domain may not be registered or is very recently registered. Due to the lack of accessible content, no metadata, business information, or contact details could be extracted. The site does not provide any visible privacy, cookie, or security policies, nor does it show any forms or external links. This severely limits the ability to assess the business model, technical infrastructure, or security posture. The presence of the Incapsula WAF blocking suggests some level of security protection, but without accessible content, no further security evaluation is possible.

XDENT is a Czech Republic based company providing specialized software solutions for dental practices and dental hygiene professionals. Their platform integrates appointment scheduling, calendar management, insurance handling, and SMS reminders to streamline administrative tasks for dental offices. The website is professionally designed using WordPress and Elementor, reflecting a modern digital presence tailored to healthcare professionals in the dental sector. The technical infrastructure includes standard web technologies and privacy compliance tools such as Cookiebot and Google reCAPTCHA, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and anti-bot measures in place, though the absence of security headers and explicit privacy policies suggests room for improvement. The lack of WHOIS data and direct contact information slightly reduces trustworthiness but the overall website quality and content relevance support a legitimate business operation. Strategic recommendations include enhancing transparency with privacy and security policies, improving contact accessibility, and implementing security best practices to strengthen trust and compliance.

VIPS gas s.r.o. is a Czech-based company specializing in the distribution and servicing of heating and climate technology products, including gas boilers, heat pumps, measuring instruments, and air conditioning systems. The company targets both professional installers and end customers, offering a comprehensive product portfolio and technical support services. Their market position is that of a reputable regional player with a medium-sized operation and a strong focus on Immergas brand products. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, and Slick Carousel, ensuring a responsive and user-friendly experience. The site is well-structured with good SEO practices and mobile optimization. Google Analytics and Tag Manager are used for analytics and marketing purposes, with a cookie consent mechanism in place to comply with privacy regulations. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and a published security policy or incident response information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust assessment, but the professional presentation and clear contact details support legitimacy. Overall, VIPS gas s.r.o. presents a professional and trustworthy online presence with room for improvement in security transparency and domain registration visibility. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving incident response communication.

Digital Deers s.r.o. is a Czech-based digital agency specializing in UX strategy, digital product design, and online business development. The company positions itself as a partner for businesses seeking to increase conversions and customer acquisition through modern digital solutions. With over 14 years of experience and a portfolio of 500+ projects, it holds notable awards such as Effie Czech Republic and WebTop100, indicating a strong market presence in the Czech Republic. The website content is professional, well-structured, and targets business clients in the technology sector. Technically, the website employs modern web technologies including Google Fonts, Google Analytics, Google Tag Manager, and Google Maps API. The site is mobile optimized with good SEO practices and a cookie consent mechanism that supports GDPR compliance. However, no explicit privacy policy or terms of service pages were found, which is a compliance gap. The site lacks visible security headers and a published security or incident response policy. From a security perspective, the site uses HTTPS and has implemented cookie consent controls, but the absence of security headers and WHOIS data raises concerns. The missing WHOIS information suggests either a recent domain registration or privacy protection, which complicates trust verification. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the security posture is moderate but could be improved with better transparency and technical controls. The overall risk assessment is moderate with recommendations to publish privacy and terms policies, implement security headers, and clarify domain registration details. The website is trustworthy and professional but would benefit from enhanced compliance and security transparency to strengthen business credibility and user trust.

STOP SHOP is a well-established retail park brand operating primarily in Central and Eastern Europe, offering leasing opportunities for retail spaces. The website reflects a professional business model focused on providing reliable tenant relationships, centralized marketing, and property management support. Technically, the site uses modern frameworks such as Nuxt.js and integrates Google Tag Manager and CookiePro for analytics and consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is good with clear privacy and cookie policies, but no terms of service or explicit security policies are found. Overall, the site is trustworthy, business-focused, and safe for general audiences.

VIVO! is a retail shopping center brand operated under the CPI Europe real estate group, targeting urban families and consumers across Central Europe. The website presents a professional and modern digital presence, leveraging Nuxt.js and Vue.js frameworks with integration of Google Maps and Google Tag Manager for enhanced user experience and analytics. Security posture is adequate with HTTPS and domain transfer protections, though improvements such as DNSSEC and security headers are recommended. Privacy and cookie policies are present and linked to trusted domains, supporting GDPR compliance. Overall, the site reflects a credible and established business with a clear market position in retail real estate.

myhive Offices is a well-established provider of flexible office and coworking spaces across multiple Central and Eastern European countries. Operating under the parent company CPI Europe, it offers a comprehensive portfolio of office solutions tailored to businesses of all sizes, from freelancers to large enterprises. The website reflects a professional and consistent brand image, with detailed information about locations, products, and community engagement. Technically, the site uses modern frameworks such as Vue.js and Nuxt.js, ensuring good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain transfer protections, though improvements in DNSSEC and security headers are recommended. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the site presents a credible and trustworthy business presence with active social media engagement and a user-friendly interface.

Středočeská vědecká knihovna v Kladně is a well-established public library institution founded in 1995, serving the Středočeský region of the Czech Republic. The organization provides a broad range of library services including access to physical and electronic collections, educational programs, cultural events, and digital resources. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeting the general public, schools, seniors, and other libraries. The institution maintains active social media channels and provides comprehensive contact information.

The Czech National Library of Technology (Národní technická knihovna) is a prominent national institution providing extensive technical and scientific resources to researchers, students, and the general public. It offers a broad range of services including access to print and electronic collections, interlibrary loans, research support, and educational workshops. The website reflects a well-established non-profit educational entity with a strong market position in the Czech Republic. Technically, the site employs modern web technologies such as Bootstrap and jQuery, with responsive design and moderate performance. Security posture is good with HTTPS and cookie consent mechanisms in place, though security headers are absent and WHOIS data is missing, which slightly impacts trust. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

The website represents the Studijní a vědecká knihovna v Hradci Králové, a public library institution in the Czech Republic. It provides information on how to obtain a library card and outlines services such as book lending, study spaces, parking, and copying facilities. The site targets local citizens, public institutions, and EU residents, positioning itself as a regional educational resource. The domain age and WHOIS data confirm a long-standing presence consistent with a public institution. Technically, the site uses ASP.NET WebForms with jQuery and integrates Google Tag Manager and Facebook Pixel for analytics and tracking. While the site is functional and professionally designed, it lacks visible cookie consent mechanisms and explicit security headers, which are areas for improvement. No contact emails or phone numbers are present on this page, limiting direct communication options. Overall, the site is safe, trustworthy, and serves its educational purpose effectively.

The website ndk.cz represents the Národní digitální knihovna, a national digital library service of the Czech Republic, providing access to digitized cultural heritage and documents. The platform targets researchers, students, and the general public interested in Czech digital archives. The business model is consistent with a government-funded public service, established since 2006, with a medium organizational size and a clear national focus. Technically, the website employs modern web technologies including Angular and Material Design components, with Google Tag Manager for analytics. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Performance is moderate, and accessibility features are basic but present. From a security perspective, HTTPS is properly implemented, but the site lacks several security headers that could enhance protection. No sensitive data exposure or vulnerabilities were detected in the analyzed content. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Contact information and incident response details are not found, which could be improved. Overall, the website is trustworthy and legitimate, aligned with its government and educational mission. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and improving accessibility and SEO metadata to strengthen compliance and user trust.

Bankonbet.com is an online casino and sports betting platform primarily targeting Finnish users but also supporting multiple languages for international reach. The site offers a variety of gambling services including casino games, sports betting, live betting, virtual sports, challenges, tournaments, and VIP programs. The business appears to be relatively new, founded in 2021, and operates in the finance sector focused on gambling. The website uses modern web technologies such as Angular and is hosted behind Cloudflare DNS services, with Google Tag Manager integrated for analytics and tracking. Cookie consent is managed via a third-party script, indicating some level of privacy compliance, although no explicit privacy policy or terms of service pages were found in the provided content.

SGCasino is an online gambling platform targeting Finnish-speaking users, as indicated by the URL and language attributes. The website is built using modern web technologies including Angular and Webpack, and it employs Cloudflare services for security and performance. However, the content is partially blocked by Cloudflare's Turnstile captcha, limiting full content accessibility and analysis. The site includes a cookie consent mechanism but lacks visible privacy policies, terms of service, or contact information, which are critical for compliance and user trust. Security headers and explicit security policies are not detected, indicating potential gaps in security posture. Overall, the site appears to be a gambling service aimed at adult users, but the lack of transparency and partial content blocking reduce its trustworthiness and compliance standing.

Legiano is a Finnish website established in 2021, with a focus that is not explicitly detailed in the provided content. The website uses modern web technologies including Cloudflare DNS, Google Fonts, and Cloudinary CDN for media delivery, indicating a moderate level of technical infrastructure. The site is accessible without any WAF or security challenge blocking access. However, the website lacks visible privacy, cookie, or terms of service policies, and does not provide contact information or social media links, which limits its transparency and user trust. Security posture is moderate with no DNSSEC enabled and no security headers detected, suggesting room for improvement in security best practices. Overall, the website appears legitimate but minimal in content and compliance documentation.

The website allyspin.com appears to be a newly registered domain (created in July 2024) with minimal publicly accessible content. The site uses modern web technologies including Angular framework and is protected by Cloudflare's WAF with Turnstile captcha, indicating a focus on security and bot mitigation. However, the visible content is limited to technical scaffolding and preloader animations, with no clear business description, contact information, or legal policies such as privacy or terms of service. Cookie consent is implemented via a third-party service, but GDPR compliance details are absent. The lack of business transparency and minimal content reduce the overall trust and credibility of the site.

The website 'Spinbara' is a Finnish language site with a modern web design and progressive web app features, indicating a moderate level of technical maturity. However, the site lacks visible business descriptions, contact information, privacy policies, and security disclosures, which limits its transparency and trustworthiness. The absence of security headers and privacy compliance elements suggests a low security posture and potential compliance gaps. Overall, the site appears to be a small-scale or early-stage business with limited public information and minimal digital footprint beyond basic web presence.

PROGEO Jihlava spol. s r.o. is a Czech company specializing in comprehensive geodetic services including 3D laser scanning, cadastral surveying, engineering network measurements, and project staking. The company targets construction professionals, architects, and property owners, positioning itself as a medium-sized regional player with a solid customer base and EU co-financing involvement. The website is built on WordPress, employing common JavaScript libraries and tracking tools such as Google Analytics and Leady, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though lacking advanced security headers and a published privacy policy. WHOIS data is unavailable, which slightly reduces domain trust but the website content and contact information indicate a legitimate business presence.

Engine.tech is a leading embedded financial marketplace platform owned by MoneyLion, offering precision matching and personalization across a vast network of financial providers. The platform targets businesses seeking to integrate comprehensive financial products and services, positioning itself as a market leader in embedded finance solutions. The website demonstrates a high level of professionalism, with clear business messaging, trusted partner logos, and investor relations links, reflecting a mature and credible business presence. Technically, the website is built on modern web technologies including Webflow CMS, Vimeo for video content, and integrates analytics tools such as Google Tag Manager and LinkedIn Insight. The site is well-optimized for performance and mobile responsiveness, with good SEO and accessibility features. Hosting is provided by Webflow, ensuring reliable infrastructure. From a security perspective, the site enforces HTTPS and includes standard security headers, with no exposed sensitive data or vulnerable libraries detected. However, it lacks explicit cookie consent mechanisms, a published security policy, incident response information, and vulnerability disclosure details, which are areas for improvement. Analytics usage is moderate, with tracking pixels from LinkedIn and Google. Overall, the website presents a low risk profile with strong business credibility and technical implementation. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, adding vulnerability disclosure information, and providing direct security contact channels to enhance trust and compliance.

SUBTECH s.r.o. is a Czech-based company specializing in design services for technical building equipment, offering a range of professional services including BIM project design, ventilation, electrical installations, plumbing, heating and cooling, and technical supervision. The company positions itself as a small but established player within the Czech Republic, supported by a portfolio of references across various sectors such as administration, residential buildings, retail, industry, education, and healthcare. The website reflects a professional and consistent brand image, targeting businesses and professionals seeking specialized technical design services. Technically, the website is built on WordPress with modern plugins and libraries such as jQuery, Swiper.js for sliders, AOS for animations, and a GDPR-compliant cookie consent plugin (Complianz). The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some security headers are missing. The SSL configuration is excellent, ensuring secure HTTPS connections. From a security perspective, the site employs HTTPS and cookie consent mechanisms, but lacks explicit security headers and a public vulnerability disclosure or incident response policy. No exposed sensitive data or vulnerabilities were detected in the HTML content. WHOIS data is not publicly available, indicating privacy protection, which is typical for small businesses. The domain appears legitimate and consistent with the business claims. Overall, SUBTECH s.r.o. maintains a solid digital presence with good privacy compliance and a professional website. Strategic improvements in security headers, incident response transparency, and WHOIS data availability could further enhance trust and security posture.

AD Economy, s.r.o. is a Czech Republic-based company specializing in accounting, economic management, financial consulting, and statutory services. The company targets business clients seeking comprehensive economic and financial support. It operates as a small-sized entity affiliated with the AD Group, indicating a stable market position within its niche. The website presents a professional image with clear service offerings and consistent branding. Technically, the website uses modern JavaScript libraries such as jQuery, Google Analytics, Google reCAPTCHA v3, and Facebook SDK, hosted on Microsoft Azure Blob Storage via the Webmium CMS platform. The site is mobile-optimized with good SEO practices but lacks some advanced accessibility features. Performance is moderate, with no blocking or WAF detected. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks visible security headers and explicit cookie consent mechanisms, which may affect GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not detract significantly from trust given the professional website and business affiliation. Overall, the website scores well in content quality, technical implementation, security posture, and business credibility, with room for improvement in privacy compliance and security header implementation. Strategic recommendations include adding cookie consent, enhancing security headers, and providing clearer contact information for security and privacy inquiries.

CONSTRA, s.r.o. is a Czech Republic based construction company specializing in turnkey fit-outs and renovations of commercial and office spaces. Established in 2007, the company has a solid market presence with a focus on reliable and rapid project delivery. Their website reflects a professional business model targeting B2B clients seeking construction and remodeling services. Technically, the site is built on WordPress using the Divi theme, with common plugins for multilingual support and GDPR compliance, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations, supporting the company's credibility in its sector.

The website represents Mateřská škola, základní škola a střední škola Vyškov, a public educational institution in the Czech Republic providing kindergarten, primary, and secondary education services. It targets students, parents, and the local community with a clear focus on education and community engagement. The site is well-structured with comprehensive navigation covering various school sections and services. Technically, the website uses modern web technologies including JavaScript, the Nette framework, and Google Fonts. It is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured content. The site loads moderately fast and uses Google Tag Manager for analytics. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in the HTML. However, it lacks important security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the website content and contact information appear authentic and consistent with a public institution. Overall, the website is professional and trustworthy with room for improvement in security headers and privacy compliance mechanisms. The domain's WHOIS data absence is a concern but does not currently undermine the site's operational legitimacy.

Agrostis Trávníky, s.r.o. is a well-established Czech company specializing in the production and distribution of grass seed mixtures, fertilizers, and related consulting services. Founded in 2002, it holds a leading position in the Czech and Slovak markets, serving both professional and consumer segments. The company emphasizes scientific research collaborations and offers a broad catalog of products tailored to various landscaping and agricultural needs. Technically, the website employs modern web technologies including Google Tag Manager and Google Analytics, with a custom CMS platform. The site is well-structured, mobile-optimized, and provides multiple contact channels, including a secure contact form. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are absent. Overall, the website reflects a professional and trustworthy business presence with moderate tracking and good privacy compliance.

European Data Project s.r.o. is a Czech-based manufacturer and exporter of gaming technology and equipment, operating as part of the globally recognized NOVOMATIC Group. The company has a strong market position within the Czech gaming and entertainment industry, serving casinos and gaming clubs worldwide. Their website reflects a professional corporate presence with clear business information and product offerings. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and SEO optimization. Security measures include HTTPS, Google reCAPTCHA, and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is trustworthy and compliant with GDPR, with clear contact details and privacy documentation.

Bučovice Tools a.s. is a leading European manufacturer specializing in thread cutting tools with over 60 years of experience. Their product portfolio includes thread cutting jaws, taps, tapered countersinks, step drills, and other specialized tools tailored to customer requirements. The company operates a professional e-commerce platform targeting industrial and manufacturing customers primarily in the Czech Republic and Europe. The website is well-structured, multilingual, and provides comprehensive product information and contact options. Technically, the website leverages modern web technologies including jQuery, Bootstrap, Google WebFont Loader, and the Upgates e-commerce platform. It is optimized for mobile devices and includes SEO best practices such as meta tags and Open Graph data. The site uses HTTPS with a good SSL configuration, secure forms with validation, and cookie consent mechanisms, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses secure form handling but lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms. No security headers were detected, and WHOIS data is unavailable, which slightly reduces trust. However, no vulnerabilities or malicious content were found in the analysis. Overall, the website presents a professional and trustworthy business presence with moderate to good security posture. Strategic improvements in transparency, security headers, and incident response documentation would enhance trust and compliance.

MGV, a.s. is a Czech Republic-based small manufacturing company specializing in custom machining, metalworking, and mechanical locksmith services, along with retail sales of fencing products. Established in 2001, the company has a long-standing presence in the local market, serving customers with bespoke production in small series and offering a range of metalworking services including turning, milling, drilling, welding, balancing, and grinding. The website reflects a professional business with clear contact information and a focus on quality and tradition. Technically, the website employs older JavaScript libraries such as Prototype.js and Scriptaculous, with basic mobile optimization and SEO practices. Hosting and domain registration are managed by Active24, a known Czech provider. Google Analytics is used for visitor tracking, but no cookie consent mechanism or privacy policies are present, indicating gaps in privacy compliance. The site lacks modern security headers and explicit security policies, which could be improved to enhance security posture. From a security perspective, the site uses HTTPS as implied by script sources, but no advanced security headers or incident response information are provided. There are no visible forms collecting sensitive data, reducing immediate risk, but the absence of privacy and cookie policies and security headers lowers the overall security score. The domain registration data is consistent with the business claims, supporting legitimacy and trustworthiness. Overall, MGV, a.s. presents a credible and professional business website with room for improvement in privacy compliance, security best practices, and modernization of technical infrastructure. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

Study at CTU is the official website representing CTU Prague, one of the largest and most prestigious technical universities globally, with a history spanning over 300 years. The site targets prospective students interested in full-time study or exchange programs, providing detailed information about academic offerings and life in Prague. The university holds a strong market position in the education sector, particularly within the Czech Republic and internationally. The website reflects a professional educational institution with clear branding and consistent messaging.

The website svabinsky.com is a professionally designed cultural heritage project managed by Městské muzeum Česká Třebová, focusing on cataloging and presenting the graphic works of the Czech artist Max Švabinský. It serves art enthusiasts, researchers, and the general public interested in Czech art history. The project is supported by regional government and partner museums, indicating a strong institutional backing. Technically, the site is built on WordPress with Elementor, using modern web technologies and custom styling, providing a good user experience with mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is complete and professional, enhancing business credibility. Overall, the site is trustworthy and well-positioned as a niche cultural resource.

The website 'Vaše Kroměříž' is a government-run participatory budgeting platform for the city of Kroměříž, Czech Republic. It enables residents to propose, discuss, and vote on community improvement projects funded by a dedicated city budget. The platform is designed to foster civic engagement and transparency in local government spending. The site provides detailed information about the phases, rules, and voting system, including secure two-factor authentication for voting. Technically, the site is built on WordPress with UIkit and jQuery, hosted by Wedos, and uses Google Analytics for visitor tracking. While HTTPS is properly implemented, the site lacks explicit privacy and cookie policies and some security headers, which are areas for improvement. Contact information is clearly provided with official city emails and phone numbers, enhancing trust. Overall, the site is professional, content-rich, and serves its civic purpose effectively.

BONIT Solutions, s.r.o. is a Czech Republic-based small IT services company specializing in consulting, IT infrastructure, security solutions, and custom software development. Their website presents a professional image with clear descriptions of their services including firewall and VPN deployment, server management, software integration, and programming. The company targets businesses needing secure and efficient IT systems. Technically, the website uses modern frontend libraries like jQuery and Owl Carousel, is mobile-optimized, and includes basic privacy and cookie compliance features. Security posture is moderate with HTTPS usage and basic form anti-spam, but lacks advanced security headers and explicit incident response policies. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and business information appear legitimate and consistent. Overall, the site scores well on content quality and privacy compliance but could improve in security best practices and transparency.

Moje Kroměříž is a local event aggregation platform focused on providing comprehensive information about cultural, sports, and leisure activities in the Kroměříž region of the Czech Republic. The website serves residents and visitors by offering event calendars, local offers, and magazine articles, positioning itself as the largest event overview portal for the area. The business model appears to rely on advertising and partnerships with local entities. Technically, the website uses a combination of legacy and modern web technologies including jQuery, Bootstrap, and the Nette Framework, with integrations for analytics and user behavior tracking via Google Analytics, Hotjar, and Smartlook. The site is mobile-optimized and SEO-friendly but uses an outdated jQuery version that could pose security risks. Security posture is moderate with HTTPS enforced but lacks important security headers and explicit privacy and cookie policies. No WHOIS registrant data is publicly available, indicating privacy protection, which is common and justified for this type of local portal. Overall, the website is professional and trustworthy but could improve in privacy compliance and security best practices.

The website dnnt.cz is an official digital platform operated by the National Library of the Czech Republic, providing access to literary works that are unavailable on the market. It serves readers, authors, and libraries by facilitating remote access to these works through partnerships with various Czech libraries. The platform is positioned as a government-supported non-profit service focused on education and cultural preservation. Technically, the site is built on WordPress 5.8.10, utilizing common web technologies such as jQuery, Bootstrap, and Font Awesome. It employs Google Analytics for visitor tracking and implements a cookie consent mechanism compliant with GDPR. The site is hosted likely by Active24, the domain registrar, and uses HTTPS with a strong SSL configuration. The design is professional and mobile-optimized, with good navigation and content relevance. From a security perspective, the website demonstrates good practices including HTTPS enforcement and cookie consent. However, it lacks explicit security headers and a public security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. The absence of a vulnerability disclosure policy or security.txt file suggests room for improvement in transparency and security maturity. Overall, dnnt.cz is a trustworthy and well-maintained digital library platform with a strong focus on accessibility and compliance. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility features to further strengthen its security posture and user trust.

Myslík.cz is a well-established Czech company specializing in residential reconstruction and renovation services, boasting over 30 years of experience and thousands of completed projects. Their service offerings include apartment and house renovations, bathroom remodeling, interior design, flooring, and elevator upgrades, complemented by additional services such as container and scaffolding rentals through partner domains. The company targets homeowners and property owners in the Czech Republic, providing free cost calculations and extended warranties to enhance customer trust and satisfaction. Technically, the website is built on ASP.NET Web Forms with modern front-end libraries like Bootstrap and Swiper.js, hosted by a reputable Czech provider, and incorporates standard analytics and advertising tools. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and formal vulnerability disclosure. Overall, the site is professional, user-friendly, and compliant with basic GDPR requirements, reflecting a credible and trustworthy business presence.

AvrioReal, s.r.o. is a Czech Republic based real estate company specializing in property sales, exchanges, and development projects. The company targets individuals and businesses interested in real estate within the Czech market, offering services such as energy consulting and showcasing multiple development projects. The website reflects a small-sized business with a consistent brand presence and a professional online portfolio. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Leaflet for mapping, supported by Google Analytics and retargeting tools. The hosting appears to be regional, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. WHOIS data is missing, which slightly reduces transparency and trust. Overall, the site is functional, professional, and compliant with basic privacy regulations, but could improve in security and transparency aspects.

TECHNOKLIMA UH, s.r.o. is a Czech company specializing in the supply and installation of heating and cooling equipment including fireplace stoves, inserts, cookers, air conditioning, ventilation, and heat pumps. The company positions itself as a reliable and experienced partner in the energy sector, targeting both residential and commercial customers. Their website content is focused on presenting their services and a project aimed at energy efficiency improvements through heat pumps and photovoltaic systems. Technically, the website uses a basic but functional technology stack including jQuery and Google Analytics for tracking. The CMS appears to be a custom or less common system (Comp4 CMS). The site is accessible with no blocking or WAF challenges detected, but it lacks advanced SEO, accessibility, and mobile optimization features. Security headers are not present, and no explicit privacy or cookie policies are found, indicating room for improvement in compliance and security posture. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or incident response policies. The absence of WHOIS data for the domain is a notable concern, reducing transparency and trustworthiness. No contact emails or phone numbers are provided on the site, which limits direct communication channels. Overall, the security posture is moderate but could be significantly improved with better policy disclosures and technical security enhancements. The overall risk assessment suggests the business is legitimate but would benefit from enhanced transparency, compliance, and security practices to improve trust and reduce potential vulnerabilities.

Karma Český Brod a.s. is a Czech company specializing in the manufacturing and retail of gas appliances, fireplaces, air conditioning units, and related products. The company maintains a professional online presence with a well-structured website showcasing a broad product range and services including training for service technicians and rental offerings. Their market position appears solid within the regional energy appliance sector, targeting both consumers and businesses. Technically, the website employs modern JavaScript libraries and frameworks such as jQuery, Bootstrap, and Swiper, with integration of Google Maps and Cookiebot for consent management, indicating a moderate to good level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of security headers and published privacy policies suggests room for improvement. The lack of WHOIS data limits domain registration trust assessment, but the website's professional content and clear contact information mitigate concerns. Overall, the site is safe, business-focused, and trustworthy, though enhancing privacy and security disclosures would strengthen compliance and user trust.

The domain dlwordpress.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block page. This indicates that the website is protected by Cloudflare's security services and that the visitor's request triggered a security rule, resulting in a block. Due to this, no actual website content, business information, or user-facing features are accessible for analysis. The domain registration data shows a legitimate registration with Porkbun LLC since 2018 and a long expiry date in 2030, suggesting a stable domain ownership. However, the lack of DNSSEC and absence of accessible content limits the ability to assess the website's business model, services, or compliance posture. The website currently does not expose any privacy policies, cookie consent mechanisms, or contact information, which are critical for compliance and trust.

Calls9 is a digital transformation agency specializing in digital product design and development with expertise in Generative AI and Web3 technologies. The company offers a range of services including AI transformation programs, Web3 development, legacy system modernization, innovation consultancy, and rapid website and app development. Positioned as a leading agency, Calls9 targets businesses seeking to leverage advanced technologies to realize their vision and enhance operational efficiency. The website reflects a professional and modern digital presence with clear service offerings and client testimonials, indicating a medium-sized enterprise with a strong market position in the technology sector. Technically, the website is built on the Webflow CMS platform, hosted on AWS Cloudfront, and integrates multiple modern analytics and marketing tools such as Google Analytics, Smartlook, Visitor Queue, and LinkedIn Insight Tag. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Security measures include HTTPS enforcement and the use of Google reCAPTCHA for form protection, alongside a cookie consent mechanism compliant with opt-in standards. From a security perspective, the site shows a good posture with SSL enabled and some security best practices in place. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no vulnerability disclosure or incident response information is provided. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and professional presentation mitigate some trust issues. Overall, Calls9 presents a credible and professional digital transformation service provider with a solid technical foundation and moderate security maturity. Strategic recommendations include enhancing privacy policy visibility, implementing additional security headers, and verifying domain registration details to strengthen trust and compliance.

ČEZ ENERGOSERVIS spol. s r.o. is a Czech company specializing in the service and maintenance of major Czech power plants, including nuclear, hydroelectric, and thermal facilities. It operates as part of the larger Skupina ČEZ energy group, positioning itself as a key player in the Czech energy sector. The website reflects a professional and well-structured digital presence, targeting industry stakeholders and power plant operators with detailed service offerings and corporate information. The company emphasizes its long-standing market presence and technical expertise.

TZÚS GROUP is a Czech association of three established testing and certification organizations specializing in construction product conformity assessment and fire safety. The group employs nearly 300 professionals and serves manufacturers, importers, designers, and public administration with comprehensive testing and certification services. The website is professionally designed, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. However, the absence of WHOIS data and lack of privacy policy and terms of service pages represent gaps in transparency and compliance. Technically, the site uses Bootstrap and jQuery with CSRF-protected forms but lacks visible security headers. Overall, the digital maturity is moderate with room for improvement in security and compliance documentation.

WebMill media s.r.o. is a Czech-based small technology company specializing in custom web and e-shop development combined with online marketing services. Their business model focuses on delivering tailored digital solutions with a personal approach, targeting businesses and individuals seeking comprehensive online presence. The company has been operating since 2015 and maintains a professional website with clear service offerings and client references. Technically, the website uses established libraries such as Bootstrap and jQuery, hosted on WEDOS infrastructure, and demonstrates good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS, uses CSRF tokens, and provides a detailed cookie consent mechanism, although it lacks explicit security policies and incident response contacts. Overall, the website is trustworthy, compliant with GDPR, and presents a solid digital maturity for its size and market position.

The website at tzus.eu currently serves an error page with minimal content, indicating it is either down, under maintenance, or broken. The page includes a simple interactive game script and uses Bootstrap 3.3.6 and jQuery 1.12.0 loaded from external CDNs. There is no visible business information, contact details, privacy or cookie policies, or security-related disclosures. The WHOIS data shows the domain is registered via ZONER a.s., a Czech registrar, consistent with the Czech language used on the page. However, the lack of substantive content and security features significantly limits the ability to assess the business or security posture effectively. The site does not appear to be protected by a WAF or present any security challenge, but it lacks HTTPS and security headers, which are critical for trust and security.

CPI Europe AG is a publicly listed European commercial real estate group specializing in office and retail properties across several core European markets. The company operates well-known brands such as myhive for office spaces, STOP SHOP for retail parks, and VIVO! for shopping centers. Their business model focuses on property rental, development, and portfolio optimization to generate sustainable cash flows. The website reflects a professional corporate presence with investor relations information and news updates, targeting investors, tenants, and business partners in the real estate sector. Technically, the website is built using modern JavaScript frameworks, notably Nuxt.js, and incorporates standard web technologies such as Chart.js for data visualization and Google reCAPTCHA for form security. Cookie consent is managed via CookiePro, indicating compliance efforts with GDPR. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site uses HTTPS and includes reCAPTCHA on forms, but lacks explicit security headers and published security policies or incident response contacts. The domain registration is recent but aligns with the company's rebranding timeline, and no suspicious patterns were detected. Overall, the security posture is moderate but could be improved with additional headers and transparency. The overall risk assessment is low, with recommendations to enhance privacy disclosures, implement security headers, and provide clear incident response contacts to strengthen trust and compliance. The website is suitable for its business purpose and presents a credible and professional image to its audience.