High-risk security reports

D

Dachdecker – Dein Beruf: HOME

dachdeckerdeinberuf.de

44

The website dachdeckerdeinberuf.de serves as an educational and promotional platform dedicated to the roofing profession in Germany, targeting prospective apprentices and young individuals interested in vocational training. It offers comprehensive information on apprenticeship programs, internships, climate protection initiatives within the trade, and interactive engagement such as quizzes and newsletters. The site maintains a consistent brand presence with active social media integration and a clear call to action for apprenticeship applications. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including Bootstrap for responsive design, FontAwesome for icons, and integrates multiple analytics and marketing tools such as eTracker, Google Ads, Facebook Pixel, and Brevo for newsletter management. The site is mobile-optimized and demonstrates good SEO practices with appropriate meta tags and structured navigation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no formal security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the analyzed content. Overall, dachdeckerdeinberuf.de presents a professional, secure, and user-friendly platform with a strong focus on vocational education and climate-conscious roofing practices. Strategic improvements in security headers and publishing privacy policies would enhance compliance and trust further.

L

Lichtflut.Medien GmbH & Co. KG

lichtflut-medien.de

46

Lichtflut.Medien GmbH & Co. KG is a specialized digital agency based in Flensburg, Germany, focusing on web design, TYPO3 programming, SEO, SEA, and newsletter marketing. Established in 2005, the company positions itself as a trusted partner for businesses seeking expert digital solutions with a strong emphasis on measurable results and client collaboration. The website reflects a professional and consistent brand image with comprehensive service descriptions and client testimonials, reinforcing its market credibility. Technically, the website is built on TYPO3 CMS, leveraging modern web standards and Google Analytics for performance insights. The site is mobile-optimized and demonstrates good SEO practices, although some security headers could be enhanced. The hosting is managed via DomainControl, a reputable provider, and the site uses HTTPS with a good SSL configuration. From a security perspective, the site employs HTTPS and CAPTCHA on forms, indicating attention to secure user interactions. However, it lacks explicit security policies and incident response contacts, and cookie consent mechanisms are absent despite tracking usage. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security headers and privacy compliance would further enhance its posture and trustworthiness.

G

Graugans Werbeagentur

graugans.de

43

Graugans Werbeagentur is a small, established advertising agency based in Kaaks, Germany, specializing in web design, print advertising, and digital marketing services. With over 14 years of experience and more than 1,000 projects, the agency serves a broad client base across Germany, focusing on tailored marketing solutions including SEO, social media, and newsletter campaigns. The company holds recognized innovation awards, underscoring its market credibility. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses performance and privacy enhancing tools such as WP Rocket and Borlabs Cookie. The site is mobile-optimized and SEO-friendly, though there is room for improvement in accessibility and security headers. Hosting is likely provided by 1&1 IONOS, consistent with the domain's German origin. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with GDPR-aligned cookie management and a comprehensive privacy policy. Overall, the website presents a professional and trustworthy digital presence for the agency, with moderate technical sophistication and good compliance. Strategic improvements in security headers and accessibility could further enhance the site's robustness and user experience.

D

Die Paulsen-Gruppe

andreaspaulsen.de

49

Die Paulsen-Gruppe is a well-established German company specializing in sanitary, heating, and ventilation solutions, operating primarily in northern Germany with over 75 locations. The company offers a broad range of services including bathroom exhibitions (BäderWelten), energy-saving heating and ventilation systems (EnergiesparWelten), and professional services for handworkers, architects, and planners. Their business model focuses on retail and service provision, supported by an online shop for professionals and a handworker recommendation service. The website reflects a strong regional market position and a comprehensive product offering from reputable manufacturers.

Schacht & Brederlow GmbH is a small German company specializing in bathroom design and craftsmanship services, as indicated by their partnerships with related design entities. The website is minimalistic, primarily showcasing logos and images with limited textual content. The technical infrastructure is basic, relying on simple HTML and CSS without modern frameworks or CMS detected. There is no evidence of advanced analytics or tracking technologies. Security posture is weak, with no detected HTTPS enforcement or security headers, and no cookie consent mechanisms. Privacy policy is present but basic, and no contact information is directly available on the main page. Overall, the website serves as a simple informational portal with limited digital maturity and security measures.

Bernd Lehmler GmbH is a small German company specializing in craftsmanship and bathroom design services, as indicated by the website and linked partner domains. The website serves primarily as a simple informational landing page with minimal content and no interactive features. The technical infrastructure is basic, relying on standard HTML and CSS without advanced frameworks or CMS. Security posture is minimal with no visible HTTPS confirmation, security headers, or privacy compliance mechanisms. The WHOIS data shows standard DNS usage consistent with a German ISP but lacks detailed registrant information, limiting full trust verification. Overall, the website reflects a small, localized business with limited digital maturity and security measures.

B

Bäder Dunkelmann

baederdunkelmann.de

46

Bäder Dunkelmann is a well-established bathroom renovation and planning company serving Hamburg, Norderstedt, and surrounding areas. With over 55 years of experience, they offer comprehensive bathroom solutions including planning, renovation, and full project management with a focus on stress-free, dust-free implementation and fixed pricing. Their market position is that of a trusted regional specialist with a large showroom and a strong customer base. Technically, the website is built on WordPress with modern plugins and tracking tools, optimized for mobile and SEO. Security posture is good with HTTPS and consent management, though some security headers could be improved. Privacy compliance is strong with a clear privacy and cookie policy and GDPR consent mechanisms. Overall, the website is professional, trustworthy, and well-suited for its target audience.

S

Schmauch Heiztechnik-Bäder-Kundendienst

baeder-schmauch.de

45

Schmauch Heiztechnik-Bäder-Kundendienst is a small local German company specializing in bathroom, heating, and tile services. The website serves as a digital presence to showcase their services and provide contact options for customers primarily in Wetter, Germany. The business operates with partner affiliations to related sites, indicating a networked approach within their sector. The website is professionally designed with clear navigation and basic mobile optimization, supporting a positive user experience for local customers. Technically, the site uses legacy JavaScript libraries and standard HTML/CSS without a CMS, hosted likely by a German hosting provider. Security measures include a cookie consent banner and captcha-protected contact form, but lack advanced security headers or modern frameworks. Privacy compliance is addressed with a privacy policy and cookie banner, though no terms of service or incident response policies are present. Overall, the site is safe, trustworthy, and appropriate for its business purpose, but could improve in security posture and technical modernization.

H

Horst Hack GmbH - Meisterbetrieb mit Fachkompetenz seit über 50 Jahren fürs Bad in Nauheim

hackgmbh.de

44

The website hackgmbh.de appears to represent a small business entity, likely in the technology or business services sector, but lacks explicit business information and branding details. The site is built on WordPress with Bootstrap 4.1.0, indicating a standard but somewhat dated technical infrastructure. Content is minimal and lacks critical compliance documents such as privacy and cookie policies, as well as contact information, which limits user trust and engagement. Security posture is weak due to the absence of HTTPS and security headers, and no incident response or security policies are published. Overall, the site presents a low maturity level in digital presence and security readiness.

The domain skoly-v-prirode.cz is registered since 2009 and hosted on aerohosting servers, indicating a potentially legitimate registration. However, the website currently returns a 404 Not Found error with no accessible content, metadata, or business information. This lack of content prevents meaningful analysis of the company's business model, services, or market position. Technically, no modern frameworks, CMS, or security features are detectable, and no privacy or cookie policies are present. The security posture is weak due to missing HTTPS and security headers, and no incident response or contact information is available. Overall, the website appears inactive or misconfigured, posing a risk to trust and credibility.

I

Italieonline s.r.o

italieonline.eu

47

Ita.travel is an established online travel agency specializing in holidays in Italy, offering a wide range of accommodations including apartments, hotels, and campsites. The company has been operating since 1997 and is a member of several reputable travel associations, which enhances its market credibility. The website targets tourists seeking Italian holiday experiences, providing booking services, travel insurance, and travel tips. Technically, the website uses modern web technologies, is mobile-optimized, and implements basic privacy compliance mechanisms such as cookie consent and a privacy policy. Security posture is good with HTTPS enabled, but lacks visible advanced security headers and explicit incident response information. Overall, the site is professional, trustworthy, and safe for general audiences.

P

Pozorování ptáků CZ

pozorovaniptaku.cz

47

Pozorovaniptaku.cz is a Czech Republic-based informational website dedicated to birdwatching. It offers detailed catalogs of water birds, locations for birdwatching, rare bird information, quizzes, and opportunities to observe birds with ornithologists. The site targets birdwatching enthusiasts and nature lovers within the Czech Republic, providing educational and community-oriented content. Technically, the website is built on WordPress using Oxygen Builder, Bootstrap 4, and JavaScript libraries such as Leaflet for interactive maps. It integrates Google Analytics for visitor tracking and uses Google Fonts for typography. The site is hosted by Aerohosting, a Czech hosting provider, and employs HTTPS for secure connections. Security posture is moderate, with HTTPS enabled but lacking security headers and visible privacy or cookie policies, indicating compliance gaps. No forms or contact emails are present on the homepage, limiting direct user engagement channels. Overall, the website is well-structured, SEO-optimized, and provides valuable content for its niche audience but would benefit from enhanced privacy compliance and security hardening.

H

Hotel Svatý Tomáš

hotel-svatytomas.cz

49

Hotel Svatý Tomáš is a small, established hospitality business founded in 2005, offering romantic wellness hotel services in the Šumava region near Lipno, Czech Republic. The website provides detailed information about accommodation, wellness facilities, restaurant services, and special packages targeting tourists and couples seeking a romantic getaway. The business positions itself as a niche wellness and hospitality provider with a focus on natural surroundings and luxury experience. Technically, the website is built on WordPress using modern plugins and themes, supporting multilingual content in Czech, English, and German. The site is mobile optimized and includes SEO best practices such as structured data and meta tags. Security posture is adequate with HTTPS and cookie consent implemented, though security headers and explicit security policies are absent. Overall, the website is professional, trustworthy, and compliant with basic privacy requirements, though it lacks explicit privacy and terms of service pages. The domain registration data is consistent and supports the legitimacy of the business.

E

European Network of Cultural Centres (ENCC)

encc.eu

45

The European Network of Cultural Centres (ENCC) is a well-established non-profit organization uniting 178 socio-cultural organizations across 39 countries in Europe and beyond. Their primary focus is on training, cooperation, and advocacy to transform cultural practices and territories. The website reflects a professional and consistent brand image, targeting cultural centers and networks as its audience. The business model revolves around network collaboration and advocacy services, supported by EU co-funding. Technically, the website uses modern technologies including Alpine.js and Twill CMS, hosted by OVH SAS, with good mobile optimization and accessibility. Security posture is solid with HTTPS and CSRF protection, though some security headers are missing. Privacy compliance is good with a clear privacy policy, but lacks a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained.

Swan advokater DA is a Norwegian law firm established in 2015, providing legal services primarily to both corporate and private clients across Norway. Their expertise spans multiple legal areas including advisory, negotiation, dispute resolution, and litigation. The firm is positioned as a regional player with a focus on the Asker and Bærum areas but offers services nationwide. The website reflects a professional and consistent brand image with clear contact information and service descriptions tailored to their target audience. Technically, the website is built on WordPress using common plugins such as Yoast SEO and Jetpack, indicating a moderate level of digital maturity. The site is reasonably optimized for SEO and mobile devices, with good navigation and user experience. However, the absence of HTTPS in canonical URLs and lack of visible security headers highlight areas for improvement in security configuration. From a security perspective, the site implements a cookie consent mechanism compliant with GDPR principles but lacks a dedicated privacy policy and security incident response information. No advanced security frameworks or certifications are evident. The overall security posture is moderate but requires enhancements to meet best practices, particularly regarding SSL implementation and security headers. Overall, the website is trustworthy and professional but would benefit from improved security measures and comprehensive privacy documentation to enhance compliance and user trust.

3Decor design s.r.o. operates an e-commerce website specializing in exclusive 3D design motifs for interior decoration, including wallpapers, paintings, furniture, and other home design elements. The company targets a niche market with limited edition products, primarily serving customers interested in unique interior design solutions in the Czech Republic. The website is professionally designed with clear navigation and relevant content, supporting a small business model focused on retail sales. Technically, the website uses JavaScript libraries such as Prototype.js and custom scripts, with Google Analytics integrated for visitor tracking. The site shows moderate performance and basic mobile optimization but lacks advanced accessibility features. No CMS or hosting provider information is discernible from the content. Security practices include HTTPS usage and secure login forms, but no advanced security headers or policies are evident. From a security perspective, the site lacks visible privacy and cookie policies, GDPR compliance indicators, and incident response information. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness. No critical vulnerabilities or exposed sensitive data were detected, but improvements in security headers and privacy transparency are recommended. Overall, the website presents a moderate risk profile with good business credibility but limited transparency in domain registration and privacy compliance. Strategic improvements in security posture and privacy policies would enhance trust and compliance.

1. jinačí s. r. o. is a small Czech bakery business with a traditional yet unconventional approach to baking, as reflected in their website content and branding. The company operates locally with a focus on community projects, zero waste initiatives, and sweet postal services. The website is built on WordPress using the Mesmerize theme, employing standard web technologies such as jQuery and Google Fonts. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. No contact emails or phone numbers are provided on the homepage, limiting direct communication channels. Overall, the website presents a basic but consistent business presence with room for improvement in privacy compliance and security best practices.

K

Klia cz S.r.o.

klia.cz

45

Klia cz S.r.o. operates as a wholesale importer and distributor of flowers and related accessories across the Czech Republic, serving primarily flower shops and wholesale customers. The company maintains multiple branches in key Czech cities and offers an online catalog and e-shop services. Their business model focuses on regular imports from major flower markets such as Aalsmeer in the Netherlands, ensuring a broad and high-quality product range. The website is professionally designed, with clear navigation and good mobile optimization, reflecting a mature digital presence. Technically, the site uses a mix of jQuery plugins and Google Analytics for tracking, but some components like jQuery are outdated, posing potential security risks. Security posture is generally good with HTTPS and cookie consent mechanisms, though the absence of security headers and outdated libraries are areas for improvement. The lack of WHOIS data reduces domain trustworthiness, but the overall business credibility remains high based on content and contact transparency. Strategic recommendations include updating technical components, enhancing security headers, and improving domain registration transparency.

M

Město Kravaře

kravare.cz

47

Město Kravaře operates an official municipal website serving the residents and visitors of the town Kravaře in the Czech Republic. The site provides comprehensive information including news, event calendars, municipal services, and contact details. It targets local citizens, tourists, and public officials, positioning itself as a trusted source for local government communication and services. The business model is public service with a focus on community engagement and information dissemination. Technically, the website uses a combination of jQuery, Bootstrap, Swiper.js, and other JavaScript libraries, likely running on a custom or specialized CMS platform (GCM CMS). The site is mobile-optimized with good navigation and content structure, though performance is moderate. Accessibility is basic and SEO practices are adequately implemented. From a security perspective, HTTPS is enforced and a cookie consent mechanism is present, indicating awareness of privacy regulations. However, no explicit security headers or incident response policies are publicly visible, and WHOIS data is missing, which raises some concerns about domain registration transparency. No vulnerabilities or malicious content were detected. Overall, the website is professional, trustworthy, and serves its purpose well. The main risks relate to the lack of WHOIS transparency and potential improvements in security headers and policies. Strategic recommendations include enhancing security posture, publishing incident response information, and verifying domain registration details to increase trust.

S

Střední odborná škola ochrany osob a majetku s.r.o.

sosoom-ostrava.cz

48

Střední odborná škola ochrany osob a majetku s.r.o. is a private secondary school in the Czech Republic specializing in security and legal education, preparing students for careers in police, military, customs, and firefighting. The institution offers four-year programs culminating in maturity exams and provides requalification courses for adults in security professions. The website reflects a niche educational provider with a clear focus on practical training and career readiness in security-related fields. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery, Nette Framework, Flatpickr, and Google reCAPTCHA v3, indicating a moderate to good level of digital maturity. The site is mobile-optimized and includes standard SEO and accessibility features. Security posture is solid with HTTPS enforced and spam protection via reCAPTCHA, though explicit security headers are missing. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented. However, the absence of WHOIS data reduces domain trustworthiness, and no incident response or vulnerability disclosure information is provided. Overall, the site is professional, trustworthy, and well-suited for its educational purpose.

O

Obchodní akademie a Česko - anglická základní škola s.r.o.

obaka-ostrava.cz

47

Obchodní akademie a Česko - anglická základní škola s.r.o. Ostrava is a private educational institution specializing in secondary education that combines economics and sports, particularly football and coaching. The school targets young athletes and students interested in balancing academic studies with sports training, offering specialized programs such as the Football Academy and Coaching Academy. The institution maintains a niche market position within the Czech Republic's education sector, emphasizing collaboration with FC Baník Ostrava and providing scholarship opportunities for high-performing students. Technically, the website employs a modern JavaScript stack including jQuery, Flatpickr, Google reCAPTCHA v3, and Slick Carousel, integrated within the Nette Framework. The site is mobile-optimized with good SEO practices and includes a cookie consent mechanism compliant with GDPR. However, some security headers are missing, and no explicit incident response or vulnerability disclosure policies are published. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, indicating a reasonable security posture. The absence of security.txt and incident response contacts suggests room for improvement in transparency and readiness. The WHOIS data is unavailable, likely due to privacy protection, which is common for private educational entities. Contact information is clear and professional, supporting the site's legitimacy. Overall, the website is well-designed, content-rich, and trustworthy, with moderate technical and security maturity. Strategic improvements in security headers, incident response transparency, and accessibility could enhance the site's security and compliance posture.

F

Fundación Parentes

beleaderprogram.com

47

BeLeader is an educational program operated by Fundación Parentes, aimed at personal and professional development of pupils across various school stages. The program integrates character formation and cultural sensitivity, positioning itself as a complementary educational initiative within partner schools. The website is professionally designed using WordPress and the Divi theme, supporting multiple languages and embedding multimedia content to enhance engagement. The technical infrastructure is modern and hosted by OVH sas, with standard web technologies and analytics tools in use. Security posture is adequate with HTTPS enabled and domain protections, though improvements are needed in DNS security and HTTP headers. Privacy compliance is basic with policies present but lacking explicit consent mechanisms. Contact information is limited to forms without direct emails or phone numbers. Overall, the site is trustworthy and serves its educational mission effectively.

F

Fundación Parentes

fundacionparentes.org

47

Fundación Parentes is a Spanish non-profit organization founded in 2019 focused on promoting equal opportunities through education, social cooperation, and cultural initiatives. The organization operates internationally with a network of educational entities and partners, offering consulting, training, and development projects aimed at vulnerable populations and educational institutions. The website is professionally designed using WordPress with modern SEO and performance optimizations, reflecting a mature digital presence. Security posture is good with HTTPS and some security headers, though improvements are recommended such as enabling DNSSEC and adding CSP and HSTS headers. Privacy compliance is limited due to the absence of a clear privacy policy and terms of service, though a cookie consent mechanism is implemented. Overall, the website is trustworthy and well-positioned in its sector but would benefit from enhanced transparency and security practices.

BODOS Czechia a.s. is a well-established logistics and transportation company based in the Czech Republic, with a history dating back to 1945. The company operates a large fleet of 200 trucks and offers extensive storage facilities exceeding 7,500 square meters. Their services include freight transport, transport outsourcing, storage, vehicle washing, fuel station services, and vehicle servicing. The website reflects a professional and consistent brand image targeting businesses requiring logistics solutions. Technically, the site uses modern web technologies including JavaScript libraries like GLightbox and a spam protection tool called Mailguard. The hosting is managed through websupport.cz, a Czech hosting provider, and the site is accessible via HTTPS, indicating basic security measures. However, no explicit security headers or advanced security policies are published.

O

Oleje a maziva Total - Autorizovaný distributor | Oleje-Total.cz

oleje-total.cz

49

The website oleje-total.cz operates as an authorized distributor of Total brand lubricants and oils, targeting automotive and industrial customers primarily in the Czech Republic. It offers a broad range of products including motor oils, industrial oils, and lubricants for various vehicle types and machinery. The business model is e-commerce focused, providing direct sales through an online platform with clear categorization and product offerings. The site positions itself as a trusted distributor with consistent branding and a professional online presence. Technically, the website utilizes a BohemiaSoft CMS platform with a technology stack including jQuery, Google Tag Manager, Google Analytics, and other common JavaScript libraries. The site is mobile optimized with good SEO practices and a moderate performance profile. Accessibility features are basic but present. Security measures include HTTPS, cookie consent with granular preferences, and CSRF protection, though some security headers are missing and the jQuery version is outdated, which could pose risks. From a security standpoint, the site demonstrates a reasonable posture with encrypted connections and user consent mechanisms. However, the absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness. No direct contact emails or phone numbers were found, limiting direct communication channels. There is no evidence of formal security policies or incident response contacts, which could be improved to enhance trust and compliance. Overall, the website is functional, professional, and compliant with privacy regulations, but the lack of domain registration transparency and some technical security gaps suggest moderate risk. Strategic improvements in domain registration visibility, security header implementation, and updated libraries are recommended to strengthen the security posture and business credibility.

P

Práce Mubea

pracemubea.cz

45

Práce Mubea is a Czech-language website focused on employment and job opportunities, likely affiliated with the Mubea company or brand. The site targets local job seekers and provides career-related content. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, and integrates Google Analytics and Google Tag Manager for analytics and marketing purposes. The site implements a comprehensive cookie consent mechanism via Cookiebot, reflecting a good level of privacy compliance. Security-wise, the site uses HTTPS but lacks visible security headers and explicit security policies, which could be improved. The absence of WHOIS data limits domain trust assessment, but the website content and technology stack appear legitimate and professional. Overall, the site scores moderately well in content quality, technical implementation, and business credibility, with room for improvement in privacy and security transparency.

N

Novibra s.r.o.

novibrajobs.cz

42

Novibra s.r.o. is a medium-sized manufacturing company specializing in high-speed spindles for the textile industry, operating as part of the Rieter group. The website serves as a career and corporate information portal targeting job seekers and industry professionals in the Czech Republic. It presents company culture, leadership, production insights, and job openings with a professional and consistent brand image. Technically, the site is built on WordPress using Elementor and Smart Slider 3, hosted by Wedos, and incorporates modern web technologies and Google Analytics for user tracking. Security posture is adequate with HTTPS and reCAPTCHA but lacks explicit security headers and published security policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but could improve compliance and security transparency.

The website lsletovice.cz currently serves a 403 Forbidden error page, indicating that access to the content is blocked or restricted. No business or contact information, privacy policies, or terms of service are available on the site. The domain is registered with REG-WEDOS, a Czech hosting provider, and has been active since 1999, suggesting a legitimate and established registration. However, the lack of accessible content severely limits the ability to assess the company's business operations, services, or security posture. Technically, the site lacks visible security headers, SSL configuration details, or analytics, and does not provide any user interaction elements such as forms or contact methods. Overall, the website appears to be either under maintenance, restricted, or misconfigured, resulting in a poor user experience and low trustworthiness.

Vinařství Winberg Mikulov is a small, regionally focused winery based in South Moravia, Czech Republic, specializing in quality white and red wines. The website supports their business model by offering an e-shop for wine sales, accommodation services, and event hosting such as tastings and teambuilding. The site is professionally designed using Bootstrap and includes mobile optimization and clear navigation. However, the technical infrastructure uses some outdated components such as the legacy Google Analytics ga.js script. Security posture is moderate with HTTPS implied but lacking explicit security headers and modern analytics. Privacy compliance is limited with no dedicated privacy or cookie policy pages, though terms and conditions are present. The site enforces age verification for alcohol sales, indicating regulatory awareness. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Some suspicious external links embedded in the footer code suggest possible SEO spam or injection, which should be addressed.

Ubytování Březí is a small hospitality business operating in the South Moravia region of the Czech Republic, offering family-friendly accommodation in newly built guesthouses with amenities such as private kitchens and bathrooms. The business also provides wine tasting experiences and caters to group bookings. The website reflects a local accommodation provider with a modest online presence, targeting regional visitors traveling between Brno and Vienna. The domain has been registered since 2009, indicating a stable and established operation. Technically, the website is built with basic HTML and CSS, utilizing Google Fonts for typography. There is no evidence of a CMS or advanced frameworks, and the site appears to be hosted by vas-hosting.com. Performance and mobile optimization are basic, with no detected accessibility features or SEO enhancements beyond meta tags. No analytics or tracking scripts are present, indicating minimal data collection and user tracking. From a security perspective, the site lacks HTTPS confirmation in the provided data, security headers, and privacy or cookie policies, which are critical for GDPR compliance and user trust. No forms or incident response contacts are found, and no vulnerability disclosures or certifications are indicated. The contact information is clearly provided, but the absence of security best practices and compliance documentation represents a risk. Overall, the website is functional and relevant for its business purpose but requires significant improvements in security posture, privacy compliance, and technical modernization to enhance trustworthiness and regulatory adherence.

V

Vinařství pod Hradem s.r.o.

vinarstvipodhradem.cz

45

Vinařství pod Hradem s.r.o. is a small family-owned winery located in the Pálava region of the Czech Republic, specializing in wine production, hospitality services including unique accommodation in wooden barrels and cottages, and online sales of wine and gift vouchers. The company positions itself as a premium local winery offering experiential tourism and wine tasting in the highest wine-growing village in Pálava. The website reflects a professional and consistent brand image with good content quality and clear navigation aimed at wine enthusiasts and tourists. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, enhanced by popular plugins such as WPBakery Page Builder and Revolution Slider. It integrates modern analytics and tracking tools including Google Tag Manager, Hotjar, and Microsoft Clarity, indicating a mature digital marketing approach. The site is mobile optimized and uses HTTPS, but lacks explicit security headers and documented security policies. Security posture is moderate with no visible critical vulnerabilities or exposed sensitive data, but the absence of security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement. The WHOIS data is unavailable, which limits domain trust assessment, but the website content and business information appear legitimate and professional. Overall, the website presents a trustworthy and well-maintained online presence for a small winery business, with recommendations to enhance security headers, maintain plugin updates, and improve transparency around security and privacy practices.

Vinařství Kern is a small winery based in Moravia, Czech Republic, specializing in the production and sale of quality wines. The company targets wine consumers and enthusiasts primarily in the Czech market, offering direct sales through an e-commerce enabled WordPress website. The site is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the website leverages WordPress with WooCommerce and several popular plugins, including LayerSlider and WPBakery Page Builder, indicating a moderate level of digital maturity. The presence of Google Analytics and Facebook Pixel shows active marketing and user tracking efforts. Security posture is solid with HTTPS and standard security headers, though the absence of published security policies and incident response information suggests room for improvement. The lack of WHOIS data reduces transparency and slightly impacts trustworthiness. Overall, the website is suitable for mature audiences due to its alcohol-related content and complies with GDPR requirements through visible privacy and cookie policies.

R

Restaurace Aquarium Relax

aquariumrelax.cz

45

Restaurace Aquarium Relax is a small hospitality business operating a restaurant in the Czech Republic. The website presents basic information about the restaurant with a focus on local clientele. The technical infrastructure is based on WordPress using the Divi theme, with integration of Google Tag Manager and Google reCAPTCHA for analytics and bot protection. The site is secured with HTTPS and implements a cookie consent mechanism, though it lacks a visible privacy policy and detailed contact information. Security posture is moderate with room for improvement in security headers and compliance documentation. Overall, the website is functional and professional but could enhance trust and compliance by adding privacy and contact details.

M

Mikulovská rozvojová, s. r. o.

zpravodajmikulov.cz

44

The website zpravodajmikulov.cz serves as the official local news portal for the city of Mikulov, Czech Republic. It is published by Mikulovská rozvojová, s. r. o., a small-sized company focused on disseminating municipal news, cultural events, school updates, and other community information. The site targets residents and visitors interested in local affairs and cultural happenings. The business model revolves around providing timely and relevant local news content, supported by municipal backing and community engagement. Technically, the website is built on the Joomla CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and UIkit for responsive design and user interface components. It integrates social media widgets from Facebook and Google, enhancing community interaction. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. Hosting and domain registration are consistent with Czech providers, reinforcing local presence. From a security perspective, the site uses HTTPS (assumed from base href and external scripts), but lacks explicit security headers in the HTML content. A cookie consent banner is implemented, indicating awareness of privacy compliance, though no dedicated privacy or terms of service pages were found. No vulnerabilities or exposed sensitive data were detected in the content. The security posture is moderate but could be improved with enhanced headers and clearer policies. Overall, the website is trustworthy, professionally maintained, and serves its community purpose effectively. Strategic recommendations include adding comprehensive privacy and terms policies, implementing security headers, and enhancing SEO and accessibility features to improve compliance and user experience.

C

CENTROPEN, a.s.

jak-spravne-psat.cz

44

The website www.jak-spravne-psat.cz is an educational platform dedicated to supporting proper handwriting skills in children, primarily targeting parents and educators in the Czech Republic. It is backed by CENTROPEN, a.s., a company that appears to support the project both financially and organizationally. The site offers practical advice, instructional content, and an online advisory service to help children develop correct writing habits. Technically, the website uses modern web fonts, Google services such as reCAPTCHA and YouTube embeds, and implements a cookie consent mechanism, indicating a moderate level of digital maturity. However, the absence of WHOIS data and lack of visible privacy and terms of service pages suggest gaps in transparency and compliance. Security posture is generally good with HTTPS and reCAPTCHA usage, but the lack of security headers and formal policies reduces the overall security maturity. Overall, the website is trustworthy and professional in content and design but would benefit from enhanced compliance documentation and improved security headers to strengthen user trust and regulatory adherence.

C

CENTROPEN, a.s.

foukaci-fixy.cz

42

CENTROPEN, a.s. operates the website foukaci-fixy.cz to promote and provide information about their AIRPENS product line, which are special blowing markers designed for children. The company has a strong market position as a Czech manufacturer with a long history dating back to 1940, emphasizing product safety, local production, and compliance with European toy safety standards. The website targets parents and children interested in creative and safe drawing tools. Technically, the site uses modern web technologies including Google reCAPTCHA, Facebook Pixel, and Google Analytics, hosted via WEDOS, and built likely on the Nette Framework. The site is mobile optimized and provides a good user experience with clear navigation and multimedia content such as video tutorials and galleries. Security posture is solid with HTTPS enforced and anti-bot measures on forms, though it lacks some security headers and published security policies. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy policy or terms of service pages. Overall, the website is professional and trustworthy, with room for improvement in privacy transparency and security documentation.

C

CENTROPEN, a.s.

centropen.de

47

CENTROPEN, a.s. is a medium-sized European manufacturer and retailer specializing in writing and drawing instruments, including markers, pens, and creative products for office, industry, schools, children, and artists. The company maintains a professional online presence with multi-language support and active social media channels. Their business model focuses on manufacturing and B2B/B2C retail, targeting a broad audience from businesses to hobbyists. The website content is well-structured and relevant to their market segment, reflecting a consistent brand image.

C

CENTROPEN, a.s.

centropen.sk

44

CENTROPEN, a.s. is a well-established Slovak manufacturing and retail company specializing in writing instruments and creative products. With a history dating back to 1940, the company serves a broad audience including office users, schools, hobbyists, and artists. The website reflects a mature business with multilingual support and a clear product catalog. Technically, the site uses a mix of legacy and modern JavaScript libraries, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. Overall, the domain registration and business information are consistent and trustworthy, supporting the legitimacy of the site.

J

JIROUT REKLAMNÍ AGENTURA s.r.o.

jirout.com

49

JIROUT REKLAMNÍ AGENTURA s.r.o. is a Czech Republic based advertising agency positioned as the largest in the Pardubice region. The company offers a comprehensive suite of advertising services including graphic design, vehicle wraps, outdoor and indoor advertising, promotional products, textiles, printing services, and online marketing. Their business model focuses on end-to-end advertising solutions from concept to installation, targeting local businesses and organizations. The website reflects a professional and consistent brand image with clear service offerings and customer testimonials, supporting their market position. Technically, the website employs modern web technologies such as Google Fonts, Facebook SDK for marketing, and a responsive design framework. The presence of a detailed cookie consent mechanism indicates a good level of digital maturity and privacy awareness. However, the absence of visible security headers and incomplete WHOIS data suggests areas for improvement in security and transparency. From a security perspective, the site uses HTTPS and implements cookie consent with opt-in/out controls, but lacks explicit security policies and incident response contacts. No critical vulnerabilities or adult content were detected. The domain WHOIS data is missing, which raises concerns about domain legitimacy and registration transparency, though the website content and business information appear credible. Overall, the website presents a trustworthy and professional business front with moderate technical and security maturity. Strategic improvements in security headers, domain registration transparency, and explicit security policies would enhance trust and compliance.

V

Vylepši si školu

vylepsisiskolu.cz

47

The website 'Vylepši si školu' is a regional public sector project based in the Czech Republic focused on participatory budgeting for young people in schools and children's homes within the Jihomoravský kraj. It aims to foster civic engagement, critical thinking, and financial literacy among students by involving them in decision-making about school budgets. The project is supported by regional government entities and public innovation agencies, positioning it as a credible and community-focused initiative. Technically, the site is built on WordPress with modern block-based design using Kadence Blocks and Bootstrap for responsive layout. The hosting is provided by Webglobe, and the site uses HTTPS with good SSL configuration. However, there is room for improvement in security headers and privacy compliance, as no cookie consent mechanism or terms of service were found. No contact emails or phone numbers are explicitly provided on the homepage, which could affect user trust and support accessibility. Overall, the site is well-structured, content-rich, and professionally presented, suitable for its educational and governmental audience.

A

AFS

afs.cz

46

AFS Česká Republika is a well-established non-profit organization focused on intercultural education and exchange programs. The website presents a professional and comprehensive digital presence, offering detailed information about study abroad programs, hosting foreign students, volunteering, and scholarships. The organization targets students, parents, volunteers, and educational institutions, positioning itself as a key player in intercultural educational services within the Czech Republic and globally through the AFS network. Technically, the site is built on WordPress with modern SEO and analytics integrations, including Google Analytics, Hotjar, and Facebook Pixel, supported by a CDN for performance. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security headers could be enhanced. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the organization's transparency and social proof. Overall, the site is safe, user-friendly, and compliant with GDPR, reflecting a mature digital strategy for a non-profit educational entity.

M

Mikulovská rozvojová s.r.o.

mikulovskarozvojova.cz

45

Mikulovská rozvojová s.r.o. is a municipally owned company founded in 2006, serving as a key organizer and promoter of cultural, wine, and social events in Mikulov, Czech Republic. The company also manages municipal assets such as the city cinema, pension, and amphitheater, providing venue rentals and advertising services. Their market position is primarily local and regional, focusing on cultural and hospitality sectors. The website reflects a professional and consistent brand presence with good content quality and clear navigation. Technically, the site is built on Joomla CMS with UIkit and jQuery frameworks, and uses Google Analytics and Tag Manager for tracking. The site is mobile optimized and performs moderately well.

Vinařství Vajbar is a Czech winery specializing in premium wines from the South Moravia region. The company operates an e-commerce platform offering a variety of wines, related products, and wine tasting experiences. Their website demonstrates a professional digital presence with clear branding, product showcases, and event calendars. Technically, the site uses established JavaScript libraries and Google Tag Manager for analytics, with a cookie consent mechanism and age verification overlay to comply with legal requirements for alcohol sales. However, the absence of WHOIS data and explicit contact information on the main pages slightly reduces trustworthiness. Security practices include cookie consent and age verification, but lack visible security headers or incident response contacts. Overall, the website is functional, user-friendly, and compliant with privacy regulations, but could improve transparency and security posture.

The website masvsechno.cz represents EasySchool, a small Czech educational business providing vending machines stocked with writing supplies for schools. The service simplifies access to stationery for students and teachers, with machines maintained fully by the company. The business is positioned as a niche educational support provider with a clear target audience and a straightforward business model. The website is well structured, uses modern technologies like Bootstrap and Google Maps API, and includes media coverage and contact details to build trust. However, it lacks formal privacy and cookie policies, and no explicit security policies are present. The site uses HTTPS and third-party scripts but does not implement security headers or vulnerability disclosure mechanisms. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

A

Antir, s.r.o.

antir.cz

46

Antir, s.r.o. is a Czech Republic-based small manufacturing company specializing in custom stainless steel production, including railings, staircases, and winery equipment such as tanks and vinification vessels. Founded in 2007, the company offers end-to-end services from measurement and design to installation and delivery, targeting clients in construction, interior design, and the wine industry. The website reflects a professional presence with clear business information and a gallery of references, positioning the company as a specialist in its niche market. Technically, the website employs common and reliable web technologies such as jQuery, Bootstrap, and Owl Carousel, providing a responsive and user-friendly experience. However, the site lacks advanced security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security maturity. The contact form collects personal data but does not show explicit anti-spam or privacy compliance mechanisms. From a security perspective, the site uses HTTPS as implied by URLs but does not demonstrate implementation of security best practices such as Content Security Policy or HSTS headers. No incident response or vulnerability disclosure information is provided, which could be a gap in readiness. No suspicious or malicious content was detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance documentation, and incident response transparency to improve trust and reduce risk. Strategic improvements in these areas will strengthen the company’s digital maturity and customer confidence.

The website charitabreclav.cz currently serves only a 404 Not Found error page, indicating that the intended content or services are not accessible. The domain is registered since late 2020 with a Czech hosting provider, suggesting a small or new entity. Due to the lack of any visible content, metadata, or business information, the website does not provide any insight into the organization's operations, services, or market position. Technically, the site lacks modern web features, security headers, and privacy compliance elements, reflecting a very low digital maturity level. Security posture is weak with no HTTPS or security policies evident, and no contact or incident response information is available. Overall, the site is non-functional and presents a high risk for users seeking information or services from this domain.

M

MYD Sailing

myd-sailing.com

48

MYD Sailing is a small yacht charter business operating primarily in Croatia, offering a fleet of sailing yachts for vacationers and sailing enthusiasts. The website is professionally designed using WordPress and Elementor, providing clear navigation, multilingual support, and integrated booking functionality. The technical infrastructure is modern with standard plugins and Google Tag Manager for analytics. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and no explicit security.txt or incident response contacts are published. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the website presents a trustworthy and professional image suitable for its niche market.

A

Adriatic Fantasy Cruises

waves-more.com

43

Waves More is a recently established Croatian sailing and tour company offering yacht and catamaran charters along with customizable Adriatic tours. The business targets tourists and sailing enthusiasts seeking vacation experiences in the Adriatic Sea. The website is built on WordPress using Elementor and demonstrates moderate technical maturity with HTTPS enabled and a clean design, but lacks comprehensive privacy and security policies. Security posture is basic with no DNSSEC or security headers implemented. Contact information is minimal, limited to a single email address. Overall, the site is functional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

E

Eduteam – centrum celoživotního vzdělávání z.s.

edugrant.cz

47

EDUgrant is a Czech Republic-based non-profit initiative focused on providing grants and educational support to primary and secondary vocational schools. The website serves as an informational and application portal for schools seeking funding and resources to modernize education. The organization partners with reputable foundations such as The Velux Foundations, enhancing its credibility and outreach. The business model centers on grant distribution and educational seminars, targeting educational institutions within the Czech market. The website content is well-structured, professionally designed, and clearly communicates its mission and services to its target audience. Technically, the website is built on WordPress using Oxygen Builder and several plugins like Toolset Views. It employs modern web technologies including jQuery and MediaElement.js for media handling. The site is hosted likely by Kraxnet, consistent with the domain registrar information. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no published security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is weak due to the absence of privacy and cookie policies, which could pose regulatory risks under GDPR. Overall, EDUgrant presents a trustworthy and professional online presence with a clear educational mission. To enhance its security posture and compliance, it should implement security headers, publish privacy and cookie policies, and provide incident response information. These improvements will strengthen user trust and regulatory adherence while maintaining its positive market position.

LETOV AIR s.r.o. is a small, dynamically growing private aviation company based in the Czech Republic, offering a broad range of aviation services including air transport, pilot training, aircraft maintenance, and sales. The company emphasizes compliance with aviation regulations such as PART 145 and CAMO management, positioning itself as a professional service provider in the regional aviation market. The website content is relevant and informative, targeting general aviation clients and enthusiasts. Technically, the website employs legacy JavaScript libraries like jQuery and Fancybox, with Google Analytics integrated for user tracking. The site shows basic mobile optimization and accessibility but lacks modern responsive design and advanced SEO features. Security measures are minimal, with no visible HTTPS enforcement or security headers, though a cookie consent banner and email obfuscation are implemented to enhance privacy. From a security perspective, the absence of WHOIS data limits domain trust verification, and the lack of HTTPS and security headers presents vulnerabilities. No privacy policy or terms of service pages are published, which may impact compliance with GDPR and other regulations. The overall risk is moderate, with recommendations to improve security posture, privacy compliance, and technical modernization to enhance trust and user experience.