Medium-risk security reports

Grüner Strom Label e.V. is a German non-profit organization specializing in the certification of green energy products, specifically green electricity and biogas tariffs. Founded in 1998, it is supported by major environmental organizations such as NABU and BUND, positioning itself as a pioneer and trusted certifier in the German renewable energy market. The organization provides consumers with reliable eco-labels to facilitate informed choices in the complex energy market. The website reflects a professional and well-structured digital presence, leveraging WordPress and Elementor technologies, optimized for SEO and accessibility. Contact information and privacy policies are clearly presented, enhancing trust and compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. Overall, the site demonstrates a high level of professionalism, transparency, and user-centric design.

The ICAR 2026 website serves as the official portal for the international conference on animal identification and genetic evaluation scheduled in Verona, Italy. The site is managed by ICAR, a global standards organization in the livestock sector, and highlights event details, venue information, organizers, and contact mechanisms. The business operates as a non-profit standards body with a global reach in animal genetics and identification. Technically, the website is built on WordPress with Elementor, providing a modern and responsive user experience. Security posture is adequate with HTTPS and GDPR compliance, though some security headers and DNSSEC are missing. The WHOIS data shows an anomalous future domain creation date, which warrants verification but does not currently impact the site's legitimacy. Overall, the site is professional, trustworthy, and well-suited for its target audience of industry professionals and stakeholders.

The Smarter Project website represents a well-structured and professionally maintained EU Horizon 2020 funded research initiative focused on genetic selection to improve resilience and efficiency in small ruminants. The project involves multiple international partners and stakeholders, targeting researchers, breeders, and farmers. The site uses WordPress CMS with modern front-end technologies such as Bootstrap and Swiper.js, and integrates Matomo analytics with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is strong with clear privacy and cookie policies. Contact information is primarily via a contact form, with no explicit emails or phone numbers listed. Overall, the website is trustworthy, safe, and serves its academic and dissemination purposes effectively.

The website cubesdigital.cz operates as an adult escort and private sex services listing platform primarily targeting the Czech Republic market. It offers listings of women providing adult services with explicit content and an age verification overlay to restrict access to adults only. The business model is focused on advertising adult services online with a niche local market position. The website content and design are basic, with minimal professional polish and limited trust indicators. Technically, the site uses older JavaScript libraries such as jQuery 1.7 and lacks modern security headers or visible HTTPS enforcement, which poses security risks. The WHOIS data is inconsistent, showing a domain creation date in the future (2025-06-20) and no registrant information, reducing trustworthiness. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is provided, indicating poor compliance and transparency. Overall, the site has a low security posture and limited business credibility, with significant room for improvement in security, compliance, and user trust.

SmartWhistle.cz is a Czech Republic-based legal and compliance service platform specializing in whistleblowing solutions. The service is provided by ROWAN LEGAL, a well-established Czech law firm with over 30 years of experience and recognition in international legal rankings. The platform offers a comprehensive whistleblowing package including legal documentation, an online reporting tool, and outsourcing of responsible persons, targeting companies with 50 or more employees and public institutions. The website is professionally designed, mobile-optimized, and provides clear contact channels and business information. Technically, the website leverages modern web technologies including Webflow CMS, Google Tag Manager, Google Analytics, Microsoft Clarity, Hotjar, and Smartlook for analytics and user behavior tracking. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, though some security headers are not explicitly detected. The website demonstrates good performance and accessibility standards. From a security perspective, the site shows a mature posture with encrypted communications and anti-bot protections. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in transparency and readiness. The lack of WHOIS data reduces domain trustworthiness, but the professional presentation and business legitimacy mitigate concerns. Overall, SmartWhistle.cz is a credible and professional platform for whistleblowing compliance solutions in the Czech market, with strong legal backing and modern technical infrastructure. Strategic enhancements in security transparency and domain registration visibility would further strengthen trust and compliance posture.

Cyber Fox, s.r.o. is a small technology company based in the Czech Republic specializing in web and mobile application development since 1998. The company presents itself as an established service provider with a professional online presence hosted on Squarespace. The website is well designed, mobile optimized, and includes clear contact information and social media links, supporting its credibility. Technically, the site uses modern web technologies including Google Analytics and Tag Manager for tracking, and enforces HTTPS with a good SSL configuration. However, the absence of privacy and cookie policies indicates compliance gaps, and no security headers were detected, suggesting room for security improvements. The WHOIS data is missing or privacy protected, which limits domain trust verification despite the professional website content. Overall, the site is safe, business-focused, and trustworthy but would benefit from enhanced privacy compliance and security hardening.

The website www.abwasserbenchmarking.at serves as a specialized benchmarking platform for wastewater treatment plants in Austria, operated by the Österreichischer Wasser- und Abfallwirtschaftsverband (ÖWAV) with support from the Austrian Federal Ministry for Agriculture, Regions and Tourism. It provides benchmarking data, cost information, publications, and participant application services targeted at wastewater operators and environmental professionals. The platform occupies a niche government/non-profit sector position with a focus on environmental and water management benchmarking. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, Font Awesome, and DataTables, delivering a responsive and professional user experience. However, no CMS or advanced analytics/tracking tools are detected, indicating a straightforward implementation. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site uses HTTPS and secure libraries but lacks visible security headers and formal policies such as privacy, cookie, or vulnerability disclosure statements. No contact information for incident response or data protection officers is provided, representing compliance and transparency gaps. No WAF or blocking mechanisms are detected, and no vulnerabilities are apparent from the content. Overall, the website is trustworthy and professionally presented but would benefit from enhanced privacy compliance, security policy disclosures, and clearer contact information to improve user trust and regulatory adherence.

ORTE Architekturnetzwerk Niederösterreich is a small, regional non-profit organization dedicated to promoting architectural culture and education in Lower Austria. The website serves as a platform for event announcements, publications, workshops, and architectural discourse, targeting architects, students, and cultural enthusiasts. The organization is well positioned within its niche, supported by regional government and cultural institutions. Technically, the website is built on the Plone CMS platform, leveraging modern JavaScript libraries and providing a multilingual experience. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is adequate with a visible privacy policy and cookie banner. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website is professional, trustworthy, and serves its community effectively.

aut. architektur und tirol is a non-profit cultural institution based in Innsbruck, Austria, dedicated to promoting architecture and building culture in the Tirol region. The organization offers exhibitions, events, publications, and architectural tours, targeting architecture enthusiasts, professionals, and the local community. The website reflects a well-structured and content-rich platform supporting these activities. Technically, the site is built on the Plone CMS platform, utilizing modern web technologies and frameworks such as Patternslib and Slick Slider, providing a good user experience with mobile optimization and clear navigation. Security posture is strong with HTTPS enforced and appropriate security headers, though the absence of explicit privacy and cookie policies indicates room for improvement in compliance. Overall, the domain registration data aligns well with the organization's identity, supporting legitimacy and trustworthiness.

afo architekturforum oberösterreich is a well-established non-profit organization dedicated to promoting architecture and building culture in Upper Austria. The website serves as a comprehensive platform for events, exhibitions, residencies, and publications related to architecture. It targets architects, planners, cultural institutions, and the general public interested in architectural discourse and urban development. The organization maintains strong partnerships with regional and national architecture networks, enhancing its market position as a key cultural player in the region. Technically, the website is built on the Plone CMS platform, utilizing modern JavaScript libraries such as Leaflet.js and Moment.js for interactive features. The site is served over HTTPS with appropriate security headers, indicating a good security posture. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well addressed through meta tags and structured navigation. Security-wise, the site demonstrates good practices including HTTPS enforcement and security headers. However, it lacks a cookie consent mechanism and published security or incident response policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is adequate with a comprehensive privacy policy, but cookie consent and GDPR explicit mechanisms could be enhanced. Overall, the website is professional, trustworthy, and content-rich, supporting the organization's mission effectively. Strategic recommendations include implementing cookie consent, publishing security policies, enhancing accessibility, and maintaining vigilance on third-party scripts to sustain security and compliance.

ARCH ON TOUR is a specialized travel service offering curated architectural and design tours primarily targeting enthusiasts and professionals interested in architecture, interior design, and urban experiences. The business operates from Austria and leverages a niche market position by providing unique, high-quality tours led by Marion Kuzmany. The website is built on the Wix platform, utilizing Wix Thunderbolt framework and standard web technologies, ensuring moderate performance and good mobile optimization. However, the site lacks explicit privacy and cookie policies, which impacts compliance and user trust. Security posture is adequate with HTTPS and some JavaScript hardening, but could benefit from enhanced security headers and incident response contact information. Overall, the site presents a professional and trustworthy image but should improve privacy compliance and transparency to strengthen user confidence.

The website www.architekturwettbewerb.at serves as an official platform for architecture competitions in Austria, managed by the Bundeskammer der Ziviltechniker:innen I Arch+Ing. It provides comprehensive information on competition announcements, decisions, realizations, awards, and consulting services targeted primarily at architects and civil engineers. The platform holds a strong market position as an authoritative source within the Austrian architecture and civil engineering community. Technically, the site employs modern web technologies including Bootstrap and Piwik PRO analytics, ensuring a responsive and accessible user experience. Security measures such as HTTPS, CSRF tokens, and cookie consent mechanisms are implemented, reflecting a good security posture. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable resource for its audience.

The website documedia.at is currently inaccessible beyond a security challenge page indicating it is under protection by a Web Application Firewall (WAF) or similar security mechanism. This prevents access to any substantive content, business information, or user interaction elements. The site appears to be protected by a generic WAF that performs browser verification before granting access. Due to this, no privacy policies, cookie notices, contact information, or business descriptions are available for analysis. The domain is privacy protected in WHOIS, which is common but limits transparency. The lack of accessible content and metadata results in a very limited technical and security assessment. Overall, the site currently presents as low trust and low content quality due to the blocking mechanism.

HolidayCheck AG operates a leading hotel review and travel booking portal primarily serving the German-speaking markets of Austria, Germany, and Switzerland. The website offers extensive hotel reviews, price comparisons from numerous travel providers, and additional services such as car rentals and travel forums. The company holds a strong market position with a large user base and recognized brand. Technically, the website is built on modern web technologies including React and employs performance optimizations and accessibility features, ensuring a fast and user-friendly experience across devices. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

The website tripadvisor.at is currently inaccessible due to a CAPTCHA security challenge implemented via external scripts and iframe from geo.captcha-delivery.com and ct.captcha-delivery.com. This prevents extraction of any meaningful content, metadata, or business information. Consequently, no detailed business overview, technical infrastructure details, or security posture evaluation can be performed. The site appears to be protected by a web application firewall or anti-bot mechanism, limiting visibility into its actual content and services.

Rebell Creative GmbH is a small, Austria-based creative agency specializing in branding, marketing strategy, and website development. The company positions itself as a strategic and digital partner for businesses seeking to elevate their brand presence. The website is professionally designed, mobile-optimized, and rich in client testimonials and project case studies, reflecting a mature digital presence. Technically, the site runs on WordPress with modern technologies such as Yoast SEO, Lottie animations, and Cloudflare Turnstile CAPTCHA, ensuring good performance and security. Security posture is strong with HTTPS, security headers, and consent management, though no explicit security policy or incident response information is published. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site demonstrates high professionalism and trustworthiness with no signs of suspicious activity or content.

KOPOS KOLÍN a.s. is a well-established manufacturer of electrical installation materials based in Kolín, Czech Republic, with a history dating back to 1926. The company specializes in producing a wide range of products including installation boxes, ducts, tubes, fastening materials, and cable management systems. It operates multiple subsidiaries and maintains a strong presence across Europe and select other regions through localized websites. The business targets electrical installation professionals and industrial clients, positioning itself as a trendsetter in its industry segment. Technically, the website is built on Drupal 7 CMS, utilizing modern JavaScript libraries and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and well-structured with comprehensive product and corporate information. Security measures include HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and incident response visibility. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie management aligned with GDPR requirements. The absence of WHOIS data slightly reduces domain transparency but does not detract significantly from the overall trustworthiness given the professional presentation and business legitimacy. Overall, KOPOS KOLÍN a.s. demonstrates a mature digital presence with strong business credibility, good technical implementation, and a secure environment. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving incident response contact visibility to further strengthen trust and compliance.

Nábytek Forliving is an established Czech e-commerce retailer specializing in furniture and home accessories. The website offers a broad range of products including furniture for living rooms, bedrooms, kitchens, and gardens, with additional services such as own delivery, professional assembly, and a 60-day return guarantee. The site targets Czech consumers seeking quality furniture with convenient shopping and delivery options. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Tag Manager and Seznam.cz analytics, indicating a mature digital infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and includes standard security headers, but lacks explicit security or incident response policies. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and registration details. Overall, the website presents a professional and trustworthy front for its business, with moderate technical and security maturity.

Ultimate Fighting Championship (UFC) is a leading global mixed martial arts (MMA) promotion company providing a comprehensive digital platform for fans worldwide. The website serves as the official hub for UFC news, events, athlete profiles, video content, and merchandise. It targets combat sports enthusiasts and offers a subscription streaming service (UFC Fight Pass) alongside ticket sales and fan engagement features. The site is professionally designed, mobile-optimized, and integrates multiple third-party services for analytics, advertising, and social media. Despite the absence of WHOIS data due to privacy protection, the site demonstrates strong brand consistency and trustworthiness. Security posture is robust with HTTPS and modern security practices, though some improvements in explicit security headers and incident response visibility are recommended.

UFC Strike operates as an e-commerce platform specializing in the sale of fully licensed UFC video NFTs, targeting UFC fans and NFT collectors. The business appears to be relatively young, founded around 2021, and focuses on a niche market within the digital collectibles space. The website's branding and description emphasize licensed UFC content, positioning it as a specialized provider in the sports NFT market. However, the website content is minimal and currently displays an error message, indicating possible technical or deployment issues that impact user experience and content delivery. Technically, the website leverages modern web technologies including React, Bootstrap, and integrates multiple third-party analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Segment Analytics, and Singular SDK. Hosting appears to be on Amazon AWS infrastructure, supported by AWS DNS servers. Despite the modern tech stack, the website lacks key security headers and DNSSEC is not enabled, which are areas for improvement. Performance is moderate with basic mobile optimization and limited accessibility features. From a security perspective, the site uses HTTPS but lacks visible security headers and formal security policies. There is no evidence of privacy, cookie, or terms of service policies, nor contact information for security or incident response. Extensive user tracking is implemented via multiple analytics and marketing scripts, but privacy compliance is poor due to missing policies and consent mechanisms. The domain WHOIS data is consistent and legitimate, with no privacy protection but stable registration status. Overall, UFC Strike presents a niche digital collectibles business with a modern technical foundation but suffers from poor content availability, lack of privacy and security policies, and minimal user trust signals. Strategic improvements in website content delivery, security hardening, and privacy compliance are recommended to enhance credibility and user confidence.

The UFC Store is the official e-commerce platform for UFC merchandise, offering licensed apparel and accessories to fans worldwide. The website presents a professional and consistent brand image, targeting UFC enthusiasts and sports merchandise consumers. The business model focuses on retail sales of official UFC gear, positioning itself as a key player in the sports retail sector. Technically, the site employs modern web technologies including JavaScript, CSS, and optimized font formats, delivering a moderate performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled, but lacks visible security headers and comprehensive privacy compliance documentation. The absence of WHOIS registration data raises concerns about domain registration transparency, although the site itself appears legitimate and trustworthy. Overall, the site scores well in content quality and business credibility but should improve privacy compliance and security best practices to enhance trust and regulatory adherence.

UFC GYM operates as a global fitness and MMA gym franchise offering a wide range of services including personal training, group classes, youth programs, recovery services, and virtual fitness options. The brand positions itself as a leader in the fitness industry with over 150 locations worldwide and a strong digital presence including a mobile app. The website is professionally designed, mobile-optimized, and provides clear navigation and calls to action, supporting a positive user experience. Technically, the site leverages modern web technologies such as Next.js and React, integrates analytics and marketing tools like Google Tag Manager, Microsoft Clarity, and Klaviyo, and uses Google Maps API for location services. The site is fast, accessible, and SEO-friendly, with appropriate privacy and cookie policies including consent mechanisms. From a security perspective, the site uses HTTPS and includes Google reCAPTCHA v3 to protect forms. However, it lacks explicit security policies, incident response contacts, and security headers which could enhance its security posture. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding are consistent with a reputable business. Overall, UFC GYM's website demonstrates strong business credibility and technical maturity but would benefit from improved transparency in domain registration and enhanced security disclosures to increase trust and compliance.

The website www.ufcapex.com serves as an entry landing page for the UFC Apex venue, associated with the Ultimate Fighting Championship (UFC). It features a minimalistic design with interactive animations and directs users to the main site. The site targets UFC fans and sports entertainment audiences, providing a branded gateway experience rather than detailed business information. Technically, the site is built on the Webflow platform, utilizing modern web technologies such as Google Tag Manager, jQuery, and Lottie animations, with good mobile optimization and moderate performance. However, the absence of WHOIS data raises concerns about domain registration legitimacy, despite the professional branding and content. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. No contact or compliance information is provided, limiting trust and privacy compliance. Overall, the site is functional and visually consistent but requires improvements in transparency, security, and compliance to enhance trustworthiness.

Lucid Travel operates a specialized travel management platform focused on sports teams, tournaments, universities, and event organizers. The company offers hotel booking, group room blocks, car and bus rentals, and flight booking services, with a business model that includes cash back incentives and integration partnerships with leading sports technology companies. The website is professionally designed, mobile-optimized, and integrates multiple third-party analytics and marketing tools, reflecting a mature digital infrastructure. However, the absence of WHOIS registration data raises questions about domain legitimacy, though references to its parent company, HotelPlanner.com, support its credibility. Security posture is solid with HTTPS and standard best practices, but improvements in security headers and privacy compliance (cookie consent) are recommended. Overall, the site presents a trustworthy and functional platform for its niche market.

UFC VIP, operated by On Location Events, LLC, is a specialized e-commerce platform offering official UFC ticket packages with exclusive VIP experiences. The website targets UFC fans seeking premium access including prime seating, weigh-in events, and athlete meet & greets. The business positions itself as an official and trusted provider in the sports hospitality sector, leveraging strong branding and customer service. Technically, the site employs modern web technologies such as React, integrates multiple analytics and marketing tools, and uses AWS infrastructure. Security measures include HTTPS, reCAPTCHA, and bot protection, though some security headers could be improved. Privacy and terms policies are clearly linked, supporting GDPR compliance. Overall, the site demonstrates a mature digital presence with a solid security posture and trustworthy domain registration.

ZnamyLekar.cz is a leading Czech online platform for finding doctors, reading reviews, and booking medical appointments. It serves a large user base with over 45,000 doctors listed, providing a comprehensive healthcare service marketplace. The platform is part of the Docplanner group, a recognized international healthcare technology company. Technically, the website employs modern web technologies including Algolia for search, Google Analytics and Tag Manager for tracking, and OneTrust for cookie consent, ensuring GDPR compliance. The site is well-structured with SEO-friendly metadata and structured data to enhance discoverability. Security-wise, the site enforces HTTPS, uses standard security headers, and integrates reCAPTCHA for form protection, reflecting a mature security posture. However, the absence of WHOIS data limits domain registration trust analysis. Overall, the platform presents a professional, trustworthy, and user-friendly service with strong privacy and security practices.

Lékaři-online.cz is a well-established Czech healthcare portal providing a comprehensive directory of doctors, clinics, and medical procedures, along with patient reviews. The platform targets patients and healthcare seekers in the Czech Republic, offering a trusted resource since 2006. The website demonstrates consistent branding and good content quality, supporting its position as a reputable healthcare information source. Technically, the site employs modern web technologies including jQuery, Foundation framework, and integrates Google Analytics and advertising services, ensuring a functional and responsive user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and published security policies. The absence of WHOIS data suggests privacy protection, which is common and justified for this type of healthcare directory. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Baby Annabell is a well-established brand specializing in soft dolls with lifelike charm, targeting children and parents interested in nurturing role play. The brand is part of MGA Zapf Creation GmbH, a medium-sized company based in Germany with a strong market presence since 1998. The website offers a comprehensive product catalog, including dolls, accessories, and themed play worlds, supported by detailed content and a professional design. Technically, the site is built on TYPO3 CMS with modern JavaScript frameworks and is hosted on Amazon Cloudfront CDN, ensuring fast performance and mobile optimization. Security practices include HTTPS enforcement, cookie consent management, and privacy compliance with GDPR, although explicit security policies and incident response details are not published. The absence of WHOIS data for the domain is a notable gap that slightly reduces trustworthiness but does not overshadow the professional presentation and brand legitimacy. Overall, the site demonstrates a mature digital presence with room for improvement in transparency around security and domain registration.

The website www.baby-born.com represents the BABY born brand, a well-established toy doll brand owned by MGA Zapf Creation GmbH. The site offers a comprehensive catalog of dolls, accessories, and themed play worlds targeting children and their parents. The brand has a strong market presence with over 24 million dolls sold worldwide since 1991, positioning it as a leading player in the retail toy sector. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization, supporting a positive user experience. Technically, the site is built on TYPO3 CMS, uses Amazon Cloudfront CDN for hosting, and integrates Google Analytics with privacy-conscious settings such as IP anonymization and cookie consent management. Security posture is strong with HTTPS enforced and security headers present, although explicit security policies and incident response information are not published. The WHOIS data for the domain is unavailable, likely due to privacy protection or recent registration, which slightly reduces transparency but does not detract from the site's legitimacy given the strong brand presence and consistent content. Overall, the site is secure, privacy compliant, and professionally maintained, serving its retail and e-commerce business model effectively.

Coface is a well-established company specializing in trade credit insurance, debt collection, and business information services, targeting businesses seeking to manage credit risk and protect their financial interests. The company positions itself as a leader in the finance sector with a strong international presence and a history dating back to 1946. The website reflects a professional and consistent brand image, providing comprehensive information and services to its target audience. Technically, the website employs modern JavaScript frameworks and integrates third-party services such as Google Tag Manager and Didomi for privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, though no explicit CMS or hosting provider details are evident. Privacy and cookie policies are clearly implemented with user consent mechanisms. From a security perspective, the site uses HTTPS and cookie consent but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain registration trust analysis, but the website content and business information strongly indicate legitimacy. Overall, Coface's website demonstrates a mature digital presence with good content quality, technical implementation, and privacy compliance. Strategic improvements in security policy transparency and domain registration visibility could further enhance trust and security posture.

Citibank's Czech Republic website represents a major global financial institution offering a range of banking products including loans, accounts, credit cards, and digital banking services. The site targets corporate and institutional clients in the Czech market, reflecting Citibank's long-standing presence since 1991 and its position as part of the Citigroup group. The website content is professionally presented in Czech language with consistent branding and clear navigation, supporting a positive user experience. Technically, the site employs modern frontend technologies such as Bootstrap and jQuery, ensuring responsiveness and moderate performance. Security measures include anti-clickjacking scripts and HTTPS usage, though some advanced HTTP security headers are not evident. Privacy policies and cookie information are present, indicating compliance with GDPR, although cookie consent mechanisms are minimal. WHOIS data is unavailable, likely due to privacy protection, which is typical for large financial institutions. Overall, the site demonstrates a strong business credibility and a good security posture with room for improvement in security headers and privacy consent.

CARDIFFACADEMY SE operates as an online education provider specializing in MBA programs with 13 managerial specializations. The company targets students and professionals seeking flexible, remote MBA study options, positioning itself as a niche player in the Czech Republic's education sector. The website content is professionally presented, with clear descriptions of services and a consistent brand image. Technically, the site is built on WordPress, leveraging modern libraries such as jQuery, Swiper.js, and integrates marketing and analytics tools including Google Tag Manager, Cookiebot, and LinkedIn Insight. Hosting is provided by WEDOS, a reputable registrar and hosting provider. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are not fully published. No critical vulnerabilities or blocking mechanisms were detected, and WHOIS data aligns well with the business profile, indicating legitimacy. However, the absence of explicit privacy and terms of service policies and contact information reduces compliance and trust scores.

Campton Business School is a Czech-based online education provider specializing in flexible, customizable management programs including Executive BBA, MBA, and DBA. The school targets students and professionals seeking advanced management education with the convenience of online study and audio lectures. The website demonstrates a mature digital presence with modern technologies, strong SEO, and comprehensive privacy and cookie policies. Security posture is good with HTTPS and consent mechanisms, though additional HTTP security headers could enhance protection. The domain is well-established since 2012, supporting the legitimacy of the business. Overall, the site is professional, trustworthy, and well-optimized for user experience and compliance.

Bříza & Trubač is a prominent law firm based in the Czech Republic, offering a broad range of legal services including international trade, tax law, compliance, real estate, and more. The firm is recognized with multiple awards and recommended by embassies, indicating a strong market position and reputable service quality. Their website reflects a professional and well-structured digital presence, leveraging modern web technologies and a proprietary CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website employs HTTPS and a cookie consent mechanism, but lacks explicit security headers and published privacy or terms of service pages, which are recommended for compliance and trust. The absence of WHOIS data reduces transparency about domain registration, though the website content suggests legitimacy. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in privacy compliance and security best practices.

Brodec & Partners is a Czech Republic-based law firm established in 2012, offering high-quality legal services primarily in corporate law, contract law, litigation, public tenders, ICT law, and logistics-related legal matters. The firm positions itself among the leading law firms in its chosen specializations and targets businesses and individuals requiring expert legal counsel. The website is professionally designed, mobile-optimized, and provides comprehensive information about the team, services, client references, and contact options. Technically, the website uses a modern CMS platform (Solidpixels), integrates Google Fonts, and employs JavaScript libraries such as Swiper.js for interactive elements. The site is served over HTTPS with strong security headers, indicating a good security posture. Cookie consent mechanisms and privacy policies demonstrate compliance with GDPR and related privacy regulations. Security-wise, the site enforces HTTPS, uses secure forms with validation, and has a cookie consent banner. However, it lacks a publicly available security policy or incident response contact information, which could enhance trust and preparedness. The absence of WHOIS data due to privacy protection is common for professional services but slightly reduces transparency. Overall, the website is trustworthy, professionally maintained, and compliant with privacy standards. Recommendations include publishing a security policy, incident response details, and considering a vulnerability disclosure policy to further strengthen security posture and user trust.

BARBORA ŠNÁBLOVÁ Attorneys is a specialized boutique law firm based in Prague, Czech Republic, focusing on international and domestic dispute resolution, particularly arbitration and litigation. Established in 2015, the firm offers expert legal services in commercial arbitration, investment disputes, sports-related cases, and arbitration-related litigation, serving clients both locally and internationally. Their website reflects a professional and client-focused approach, emphasizing strategic legal guidance throughout dispute processes. Technically, the website is built on the Webnode platform, hosted on AWS S3 with Cloudfront CDN, and employs modern web technologies including JavaScript and Google Tag Manager for analytics. The site is mobile-optimized and presents a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS with good SSL configuration but lacks important security headers and privacy compliance elements such as privacy and cookie policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and business information appear legitimate. Overall, the site scores well on content quality and business credibility but needs improvements in privacy compliance and domain legitimacy verification.

Bányaiová Vožehová, s.r.o. is a Prague-based law firm specializing in private and public law including criminal law. The firm serves multinational and local clients including corporations, individuals, and public entities. It offers services in multiple languages and is a member of the international legal association e-iure, with partnerships extending to Slovakia. The website is professionally designed, multilingual, and provides comprehensive information about services and team expertise. Technical infrastructure is based on WordPress with modern plugins and tracking tools, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent, though explicit security headers could be improved. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility is supported by certifications and client testimonials.

Aegis Law is a Czech Republic-based law firm providing a broad spectrum of legal services including labor law, dispute resolution, M&A, corporate law, real estate, insolvency, regulatory, intellectual property, financial law, criminal law, and sports law. The firm emphasizes long-term client relationships and expertise gained from international law firms. The website is professionally designed with detailed team profiles and news updates, targeting businesses and individuals seeking legal assistance. Technically, the site uses common JavaScript libraries and animation frameworks, with moderate performance and good mobile optimization. However, there is a lack of visible security headers and privacy policies, and WHOIS data is unavailable, which impacts transparency and trust. Overall, the site is functional and professional but could improve in security and compliance documentation.

Zeiler Rechtsanwälte is a small, internationally recognized law firm based in Austria, specializing in dispute resolution and employment law. The firm offers practical legal solutions across various industries, positioning itself as a top-ranked professional service provider. The website reflects a professional and consistent brand image, targeting businesses and legal clients seeking expert legal advice. Technically, the site is built on WordPress using the Yootheme theme and UIkit framework, providing a modern and mobile-optimized user experience with moderate performance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms suggests room for improvement. The lack of publicly available WHOIS data is due to EURid privacy policies, which is typical for .eu domains and justified for this business type. Overall, the website is trustworthy, professional, and safe for general audiences.

ViT Logistics is a Czech Republic based logistics company established in 2013, offering tailored logistics services including warehousing, road, sea, and air transportation, as well as customs services. The company targets businesses requiring reliable and efficient supply chain solutions both domestically and internationally. Their website is professionally designed using WordPress and Elementor, with multilingual support and modern SEO practices. The technical infrastructure includes Google Tag Manager, Microsoft Clarity, and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit privacy and security policies are absent. Overall, the website reflects a mature digital presence with room for improvement in compliance documentation and security transparency.

Urban & Hejduk s.r.o. is a well-established Czech law firm specializing in litigation, arbitration, energy law, mergers and acquisitions, insolvency, and real estate law. The firm is recognized in professional rankings and serves a business and professional clientele primarily in the Czech Republic. Their website reflects a professional and modern digital presence, built on the Solidpixels CMS platform, with good mobile optimization and clear navigation. The firm demonstrates compliance with GDPR and provides clear contact information including phone, email, and physical address. However, the absence of WHOIS data and lack of explicit security policies or incident response information slightly reduce the overall trustworthiness. The website uses standard analytics tools such as Google Analytics and Tag Manager, and includes a cookie consent mechanism.

Škoda Auto Vysoká škola is a specialized higher education institution in the Czech Republic focused on automotive and related studies. The website reflects a mature organization with 25 years of history, offering bachelor's, master's, MBA, and dual study programs. It emphasizes practical experience, international cooperation, and student mobility. The institution holds recognized certifications such as ACBSP and participates in Erasmus+ programs, enhancing its credibility and market position. Technically, the website employs modern tracking and analytics tools like Google Analytics and Google Tag Manager, with a cookie consent mechanism that respects user privacy choices. The site is mobile-optimized and well-structured, providing a good user experience. However, some technical improvements could be made, such as adding security headers and explicit contact information for security incidents. From a security perspective, the site uses HTTPS and has no visible vulnerabilities or exposed sensitive data. Privacy policies and cookie management are comprehensive and GDPR compliant. The absence of WHOIS data reduces domain registration transparency, which slightly impacts trustworthiness but does not negate the legitimacy indicated by the website content and certifications. Overall, the website is professional, secure, and compliant with privacy regulations, serving its educational audience effectively. Strategic improvements in security headers and domain registration transparency would further enhance trust and security posture.

Skils s.r.o. is a Czech law firm established in 1992, providing high-quality legal services. The website positions the firm as a reputable and award-winning legal service provider with a focus on professional legal representation, pro bono work, and career opportunities for legal professionals. The firm targets clients seeking expert legal advice and representation in the Czech Republic. Technically, the website is built on WordPress, utilizing common libraries such as jQuery and Swiper.js, and employs a GDPR-compliant cookie consent mechanism via the Complianz plugin. Hosting is provided by Active24, a known registrar and hosting provider. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security headers and dedicated security policy pages. Privacy compliance is strong with clear privacy and cookie policies. Contact information is limited to a phone number and LinkedIn profile, with no email or physical address found in the HTML content. Overall, the site is professional, trustworthy, and suitable for its business purpose.

ROWAN LEGAL is a well-established Czech law firm providing comprehensive legal services to businesses and individuals, with a strong focus on corporate, financial, tax, intellectual property, and compliance law. The firm positions itself as a trusted advisor with over 35 years of market presence, supported by client testimonials and international cooperation. The website reflects a professional and modern digital presence built on WordPress, utilizing popular libraries and SEO tools to enhance visibility and user experience. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements in DNSSEC and security headers are recommended. Privacy compliance is partially addressed with cookie consent but lacks a clearly accessible privacy policy page. Overall, the site is trustworthy, content-rich, and well-branded, serving its target audience effectively.

PRK Partners s.r.o. is a well-established legal services firm operating primarily in the Central European region, with offices in Prague, Ostrava, and Bratislava. The firm offers a broad range of legal advisory services including corporate law, mergers and acquisitions, and tax expertise. It holds a strong market position supported by multiple industry awards and partnerships, targeting businesses and professionals seeking high-quality legal counsel. The website is professionally designed, multilingual, and provides comprehensive information about services and recent news. Technically, the website is built on the Solidpixels CMS platform and integrates modern web technologies including Google Fonts, Google Analytics, Facebook Pixel, HotJar, and Leady tracking. It demonstrates good mobile optimization, accessibility, and SEO practices. The site uses HTTPS with a strong SSL configuration but lacks some advanced security headers, which could be improved. From a security perspective, the site implements a cookie consent mechanism aligned with GDPR requirements and provides detailed privacy and cookie policies. However, no explicit security policy or incident response contact information is found. The absence of WHOIS registration data raises concerns about domain legitimacy, although the professional nature of the site and trust indicators mitigate some risk. Overall, PRK Partners presents a credible and professional online presence with strong content quality and privacy compliance. The main risk lies in the lack of transparent domain registration data, which should be addressed to enhance trustworthiness and security posture.

The website moneta.cz represents Skupina MONETA, a financial group likely operating in the banking and financial services sector in the Czech Republic. The domain has been registered since 2007, indicating an established presence. However, the current website content is inaccessible due to a security block (HTTP 403 Forbidden), which prevents access to the actual site content and limits the ability to perform a full analysis. The visible page is a security block page indicating the request was blocked for security reasons, possibly by a Web Application Firewall (WAF) or similar security mechanism. From a technical perspective, the site is hosted by REG-ACTIVE24, but no further details on the technology stack, CMS, or analytics tools can be determined due to the blocked content. No metadata, forms, external links, or contact information are available on the blocked page. Security headers are minimal and standard for a block page. The SSL configuration and other security best practices cannot be assessed. The security posture is limited by the lack of accessible content but the presence of a security block indicates some level of protection against unauthorized or suspicious requests. No privacy, cookie, or terms of service policies are found on the blocked page, and no contact or incident response information is available. The domain WHOIS data is consistent with a legitimate business domain, registered since 2007 with a known registrar. Overall, the website is currently inaccessible for detailed analysis due to security blocking, resulting in a low AI score. Strategic recommendations include ensuring the website is accessible for legitimate users to allow full security and compliance assessments, publishing privacy and cookie policies, and providing clear contact and incident response information to enhance trust and compliance.

Matri Europe s.r.o. is a small Czech Republic-based logistics consulting company founded in 2021, specializing in turnkey solutions for marketing events and promotional tours across Europe. Their website presents a professional image with clear service offerings including logistics consulting, personnel for roadshows, and event container rentals. The company has established partnerships with notable clients such as Valtra Oy, indicating a credible market presence. Technically, the website is built on Squarespace, leveraging modern web technologies and providing a moderate level of performance and mobile optimization. Security posture is strong with HTTPS and HSTS enabled, though additional security headers and policies could enhance protection. Privacy compliance is limited, lacking explicit privacy and terms of service pages, which should be addressed to meet regulatory standards. Overall, the website is trustworthy and professional but would benefit from improved transparency and security practices.

JŠK, advokátní kancelář, s.r.o. is a Czech law firm specializing in commercial law, operating since 2004. The firm offers services in transactions, disputes, and regulatory matters, targeting business clients seeking legal expertise. The website is professionally designed, multilingual (Czech and English), and provides clear contact information and social media presence, supporting its market position as an established legal service provider in the Czech Republic. Technically, the site is built on Webflow with modern web technologies, including Google Fonts, jQuery, and Google Tag Manager for analytics. The site is mobile optimized and performs moderately well. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. WHOIS data is unavailable, which slightly reduces trust but does not negate the professional presentation and business legitimacy evident on the site. Overall, the site is secure, professional, and compliant with basic privacy regulations.

International Education Society Ltd. operates the website ies-info.com, providing international certification services for educational institutions and individual graduates. The company positions itself as a credible partner for professional development and educational quality assurance, offering certifications such as IES and ICI. The website is professionally designed, multilingual, and targets educational institutions and professionals seeking certification to enhance their market competitiveness. Technically, the site uses ProcessWire CMS and integrates modern analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel. The presence of a cookie consent mechanism and GDPR-compliant privacy policy indicates a good level of privacy compliance. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of security headers and vulnerability disclosure policies suggests room for improvement. The lack of WHOIS data for the domain is a concern for domain legitimacy, but the overall business presence and content quality support a moderate trust level. Strategic recommendations include enhancing security headers, publishing security policies, and improving transparency around domain registration.

Česko.Digital is a Czech non-profit organization dedicated to advancing digital public services and supporting digital transformation in the non-profit sector. The organization operates multiple projects including Služby.Digital, Nezisk.Digital, and the Festival kreativní byrokracie, collaborating with government, non-profits, businesses, and the public to improve digital service quality and inclusion. Their website reflects a professional and well-structured digital presence with clear messaging and strong partner endorsements. Technically, the site is built on Webflow with modern JavaScript libraries, uses Cloudflare Turnstile for bot protection, and integrates privacy-focused analytics via Plausible. Security posture is good with HTTPS and secure forms, though explicit security headers and cookie consent mechanisms are missing. WHOIS data is unavailable due to malformed responses, slightly reducing trust but the website content and partner affiliations support legitimacy. Overall, the site demonstrates a mature digital infrastructure and a strong commitment to digital public service innovation.