Medium-risk security reports

Pozorovaniptaku.cz is a Czech Republic-based informational website dedicated to birdwatching. It offers detailed catalogs of water birds, locations for birdwatching, rare bird information, quizzes, and opportunities to observe birds with ornithologists. The site targets birdwatching enthusiasts and nature lovers within the Czech Republic, providing educational and community-oriented content. Technically, the website is built on WordPress using Oxygen Builder, Bootstrap 4, and JavaScript libraries such as Leaflet for interactive maps. It integrates Google Analytics for visitor tracking and uses Google Fonts for typography. The site is hosted by Aerohosting, a Czech hosting provider, and employs HTTPS for secure connections. Security posture is moderate, with HTTPS enabled but lacking security headers and visible privacy or cookie policies, indicating compliance gaps. No forms or contact emails are present on the homepage, limiting direct user engagement channels. Overall, the website is well-structured, SEO-optimized, and provides valuable content for its niche audience but would benefit from enhanced privacy compliance and security hardening.

Trans Europe Halles is a well-established non-profit network uniting over 170 grassroots arts and culture centres across more than 40 European countries. Founded in 1983, it focuses on reclaiming abandoned spaces and transforming them into vibrant cultural hubs, promoting social and environmental justice. The organization supports its members through events, workshops, and community initiatives, positioning itself as a key player in the European cultural sector. Technically, the website is built on modern web technologies including Wagtail CMS, Bootstrap, and JavaScript frameworks, with good mobile optimization and SEO practices. The presence of Google Analytics and Mailchimp indicates active user engagement and marketing efforts. However, some technical improvements could be made, such as adding explicit security headers and publishing security policies. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting good privacy compliance with GDPR. Nonetheless, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. No direct contact emails or phone numbers were found, which may impact business credibility. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy front for a cultural non-profit organization, but verification of domain registration and enhanced security disclosures are recommended to strengthen trust and compliance.

The website www.praha13.cz serves as the official online presence of the municipal district Prague 13, providing residents and visitors with comprehensive information about local government services, news, events, and contact details. It positions itself as a trusted source for public administration and community engagement within the Prague 13 district. The site offers a variety of services including document downloads, appointment scheduling, legal assistance, and access to municipal departments. The target audience primarily consists of local citizens and stakeholders interested in municipal affairs. Technically, the website is built on WordPress CMS, enhanced with SEO plugins like Yoast and integrated with Google Tag Manager for analytics. It employs modern web technologies and demonstrates good mobile responsiveness and accessibility. The presence of a virtual assistant chatbot and cookie consent mechanisms indicates a focus on user experience and privacy compliance. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers in the provided data. No vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie consent are implemented, supporting GDPR compliance. However, the absence of WHOIS registration data limits domain trust verification, although the official nature and consistent branding of the site mitigate concerns. Overall, the website reflects a mature digital infrastructure suitable for a government entity, with room for improvement in security header implementation and domain registration transparency. The risk profile is low, with no critical security issues identified.

beIN SPORTS operates a comprehensive knowledge base for its US and Canada audience, providing support and information about its sports broadcasting and streaming services. The website is powered by Zendesk, indicating a mature customer support infrastructure. The company maintains a strong brand presence with multiple platforms and official social media channels. Technically, the site uses modern web technologies and is mobile optimized, though some SEO and accessibility improvements could be made. Security posture is good with HTTPS enforced, but lacks some security headers and published security policies. Privacy compliance is partial, with no cookie consent mechanism detected. Overall, the site is professional and trustworthy, serving a large sports media audience effectively.

Swan advokater DA is a Norwegian law firm established in 2015, providing legal services primarily to both corporate and private clients across Norway. Their expertise spans multiple legal areas including advisory, negotiation, dispute resolution, and litigation. The firm is positioned as a regional player with a focus on the Asker and Bærum areas but offers services nationwide. The website reflects a professional and consistent brand image with clear contact information and service descriptions tailored to their target audience. Technically, the website is built on WordPress using common plugins such as Yoast SEO and Jetpack, indicating a moderate level of digital maturity. The site is reasonably optimized for SEO and mobile devices, with good navigation and user experience. However, the absence of HTTPS in canonical URLs and lack of visible security headers highlight areas for improvement in security configuration. From a security perspective, the site implements a cookie consent mechanism compliant with GDPR principles but lacks a dedicated privacy policy and security incident response information. No advanced security frameworks or certifications are evident. The overall security posture is moderate but requires enhancements to meet best practices, particularly regarding SSL implementation and security headers. Overall, the website is trustworthy and professional but would benefit from improved security measures and comprehensive privacy documentation to enhance compliance and user trust.

AS Vinmonopolet operates as the Norwegian government monopoly for retailing wine, spirits, and strong ale, holding exclusive rights to sell these products to consumers in Norway. Established in 1922, it maintains a strong market position as the sole authorized retailer in this sector, emphasizing responsible trade, quality, and societal responsibility. The website reflects a mature and professional digital presence, offering extensive product information, educational content, and customer services including live chat support integrated via Salesforce. The target audience is adult consumers in Norway seeking alcoholic beverages and related knowledge.

Sundqvist AS is a Norwegian representative of Sundqvist AB, specializing in premium kitchen tools and accessories distributed across the Nordic and Baltic regions. Established in 1963, the company serves retailers and restaurant wholesalers with a portfolio of high-quality kitchen knives, glassware, and related products. The website reflects a professional retail business with clear branding and a focus on premium kitchenware. Technically, the site uses modern web technologies including Bootstrap and JavaScript libraries for enhanced user experience and responsiveness. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. Overall, the site is trustworthy and well-positioned in its market segment, though the lack of publicly available WHOIS data slightly limits domain trust verification.

Vinofil.no is a Norwegian niche website dedicated to wine enthusiasts, offering wine tips, podcasts, articles, and coverage of new releases from Vinmonopolet. Founded in 2023, it is operated by Svein Lindin, a wine journalist and sommelier with extensive experience. The website uses WordPress with modern plugins and themes, optimized for SEO and mobile devices. While the site employs HTTPS and standard security practices, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Contact options are limited to a newsletter signup form, and no direct emails or phone numbers are published. Advertising is managed via Google AdSense and tracking through Google Tag Manager. The domain registration is consistent with the business age and shows no suspicious patterns, indicating legitimacy.

MCO - Motorsykler & MC-utstyr operates a professional e-commerce platform specializing in the sale of new and used motorcycles from major brands such as BMW, Honda, Yamaha, and Suzuki, alongside motorcycle gear and accessories. The company maintains physical stores in Oslo and Drammen, targeting motorcycle enthusiasts and buyers in Norway. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations for marketing, analytics, and customer engagement. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the WHOIS data reveals a suspicious future domain creation date, which raises concerns about domain legitimacy despite the professional presentation and consistent branding.

MGP is a French mutual insurance organization specializing in providing health and social protection services to agents of the Ministry of the Interior and various security forces including police, administration, penitentiary, customs, and private security. The website demonstrates a strong market position as an official partner for the Ministry of the Interior's complementary health insurance starting in 2026. The business model is based on mutual aid principles without profit motives, focusing on tailored insurance offers and prevention actions. Technically, the site uses modern CMS (Jahia), integrates advanced analytics (Piwik PRO), and live chat support (LivePerson), ensuring a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS, security headers, and consent management for cookies, although explicit security policy and incident response contacts are not found. The domain WHOIS data is not publicly available, likely due to privacy protection, but the website's professionalism and certifications support its legitimacy. Overall, MGP's digital presence is professional, secure, and compliant with privacy regulations, serving a specialized government-related audience effectively.

Constructys is a French sectoral operator for professional training in the construction industry, providing funding and support for vocational development. The website is built on WordPress using the Divi theme and integrates Matomo analytics for visitor tracking. The technical infrastructure is modern but lacks some security best practices such as security headers and visible privacy policies. The absence of WHOIS data limits domain legitimacy verification, but the professional content and branding suggest a legitimate organization. Security posture is moderate with room for improvement in SSL configuration and compliance transparency. Overall, the site serves its business purpose well but should enhance privacy and security disclosures to improve trust and compliance.

bde&co. is a specialized PR and social media marketing agency focused on serving international design-forward brands. The company offers purposeful and results-driven public relations, social media management, and consulting services. Their market position is niche, targeting design-conscious clients with a professional and consistent brand presence. The website is built on the Squarespace platform, leveraging modern web technologies including Google Tag Manager and Facebook Pixel for analytics and marketing. The technical infrastructure is solid with HTTPS and HSTS enabled, ensuring secure communications. However, the absence of WHOIS data raises questions about domain registration legitimacy. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy from a content and design perspective but would benefit from improved privacy and legal disclosures.

Extreme is an independent creative agency established in 1997, operating primarily in the media and branding sector. The company offers a broad range of services including design, branding, activation, social media, luxury, corporate events, and media relations. With a presence in multiple international cities and a network of related agencies and subsidiaries, Extreme positions itself as a significant player in the creative agency market. The website reflects a professional and consistent brand image targeting business clients and partners. Technically, the site is built on WordPress with modern JavaScript libraries and frameworks, delivering a moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements can be made by adding security headers and cookie consent mechanisms. Privacy compliance is partially met with a comprehensive privacy policy but lacks explicit cookie consent. Overall, the domain's WHOIS data supports the legitimacy and long-standing operation of the business.

The website 'Ambition ESS Auvergne Rhône Alpes' serves as a comprehensive regional portal dedicated to the Social and Solidarity Economy (ESS) in the Auvergne Rhône-Alpes region of France. It provides a wide range of services including news, job and volunteer offers, event listings, thematic resources, and territorial filtering to support ESS actors. The platform is funded and supported by recognized regional authorities and organizations, notably the CRESS Auvergne-Rhône-Alpes. Technically, the site is built on Drupal 8 with modern front-end technologies and integrates Matomo analytics for privacy-conscious user tracking. The site is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. Security-wise, HTTPS is enforced and cookie consent mechanisms are in place, though some security headers could be improved and explicit security policies are absent. The WHOIS data is incomplete or unavailable, which slightly reduces domain trustworthiness, but the overall content and partner endorsements strongly indicate legitimacy. No adult or questionable content is present, making the site safe for general audiences.

Voronoi by Visual Capitalist is a specialized media platform focused on delivering data-driven visual stories and visualizations sourced from top creators worldwide. The platform offers a curated feed of charts and maps, enabling users to explore data narratives with transparency and engagement features such as sign-in, saving favorites, commenting, and following creators. The presence of mobile applications for iOS and Android further extends its reach and usability. Technically, the website leverages modern web technologies including React and Next.js, ensuring a responsive and performant user experience. Integration with analytics tools like Google Tag Manager and Hotjar indicates a mature approach to user behavior tracking and optimization. However, the site lacks explicit privacy and cookie policies, which is a gap in compliance and user transparency. From a security perspective, the site enforces HTTPS and uses asynchronous loading of third-party scripts, which is positive. Nonetheless, the absence of security headers and clear incident response contacts suggests room for improvement. The missing WHOIS registration data is a notable concern, as it raises questions about domain legitimacy despite the professional appearance and association with Visual Capitalist. Overall, the website presents a good user experience and technical foundation but requires enhancements in privacy compliance, security best practices, and domain registration transparency to strengthen trust and reduce risk.

Liga lidských práv is a Czech non-profit organization dedicated to human rights advocacy and education. The website serves as an informational platform targeting the general public interested in human rights issues. The organization appears established with a domain age dating back to 2002, indicating longstanding presence in the sector. The site uses WordPress with the Divi theme and integrates multiple analytics and marketing tools such as Google Analytics, Matomo, and Mailchimp, reflecting moderate digital maturity. However, explicit privacy and terms of service documents are not found, which may impact compliance and user trust. Security posture is adequate with HTTPS enabled but lacks visible security headers and formal security policies. Overall, the website is professionally designed, mobile-optimized, and content relevant to its mission, but could improve transparency and security documentation.

Cukrářství Pudová is a small retail confectionery business based in the Czech Republic, specializing in cakes, pastries, and confectionery products for various occasions. The company emphasizes its 18+ years of experience and offers both online ordering and physical pickup options in Opava and Dolní Benešov. The website is built on the Shoptet e-commerce platform, leveraging standard web technologies including jQuery and Google Analytics for tracking. The site is well-structured, mobile-optimized, and includes essential business information and social media presence, enhancing customer trust and engagement. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements can be made by adding security headers and formal security policies. The absence of WHOIS data is a notable gap, reducing domain trustworthiness, but the overall website professionalism and content quality support a positive business credibility. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and verifying domain registration details to improve trust and compliance.

The website www.e-marchespublics.com is a French-language platform specializing in public tenders and the digital dematerialization of public procurement processes. It targets enterprises and public sector buyers in France, offering services such as access to over 600,000 public tenders annually, secure electronic submission of offers, alerts, and automatic form filling. The platform is positioned as a key player in the French public procurement market, providing comprehensive access to tender documents and related services. Technically, the site employs modern web technologies including Google Tag Manager, Didomi Consent Management Platform, Bootstrap, and jQuery UI, ensuring a responsive and user-friendly experience. Security-wise, the site enforces HTTPS and integrates consent management for GDPR compliance, although explicit privacy and security policy pages are not detected. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the website content and service offerings appear professional and legitimate. Overall, the site demonstrates a moderate to good security posture with room for improvement in publishing security policies and enhancing security headers.

BeLeader is an educational program operated by Fundación Parentes, aimed at personal and professional development of pupils across various school stages. The program integrates character formation and cultural sensitivity, positioning itself as a complementary educational initiative within partner schools. The website is professionally designed using WordPress and the Divi theme, supporting multiple languages and embedding multimedia content to enhance engagement. The technical infrastructure is modern and hosted by OVH sas, with standard web technologies and analytics tools in use. Security posture is adequate with HTTPS enabled and domain protections, though improvements are needed in DNS security and HTTP headers. Privacy compliance is basic with policies present but lacking explicit consent mechanisms. Contact information is limited to forms without direct emails or phone numbers. Overall, the site is trustworthy and serves its educational mission effectively.

Mateřská škola Světýlko s.r.o. is a private kindergarten based in Třebíč, Czech Republic, founded in 2011. The institution focuses on providing quality preschool education with an emphasis on cooperation with families, individual approach to children, and fostering a friendly atmosphere. The website serves as an information portal for parents and prospective clients, offering details about the school, enrollment procedures, events, and contact information. The business operates locally with a clear target audience of families seeking early childhood education services.

The website oleje-total.cz operates as an authorized distributor of Total brand lubricants and oils, targeting automotive and industrial customers primarily in the Czech Republic. It offers a broad range of products including motor oils, industrial oils, and lubricants for various vehicle types and machinery. The business model is e-commerce focused, providing direct sales through an online platform with clear categorization and product offerings. The site positions itself as a trusted distributor with consistent branding and a professional online presence. Technically, the website utilizes a BohemiaSoft CMS platform with a technology stack including jQuery, Google Tag Manager, Google Analytics, and other common JavaScript libraries. The site is mobile optimized with good SEO practices and a moderate performance profile. Accessibility features are basic but present. Security measures include HTTPS, cookie consent with granular preferences, and CSRF protection, though some security headers are missing and the jQuery version is outdated, which could pose risks. From a security standpoint, the site demonstrates a reasonable posture with encrypted connections and user consent mechanisms. However, the absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness. No direct contact emails or phone numbers were found, limiting direct communication channels. There is no evidence of formal security policies or incident response contacts, which could be improved to enhance trust and compliance. Overall, the website is functional, professional, and compliant with privacy regulations, but the lack of domain registration transparency and some technical security gaps suggest moderate risk. Strategic improvements in domain registration visibility, security header implementation, and updated libraries are recommended to strengthen the security posture and business credibility.

Gatema Holding s.r.o. is a Czech Republic-based company with over 30 years of experience specializing in manufacturing printed circuit board prototypes and providing IT services including ERP Helios implementation and custom ERP integration solutions. The company targets European businesses requiring high-quality PCB manufacturing and enterprise IT solutions. The website reflects a professional and consistent brand image with clear navigation and comprehensive service descriptions. Technically, the site employs modern web technologies such as Google Analytics, Facebook Pixel, and Cookie-Script for privacy compliance, alongside Typekit fonts for branding consistency. Security posture is strong with HTTPS enforced and reCAPTCHA implemented, though security headers and explicit security policies are absent. The WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and business information appear legitimate and well-maintained. Overall, Gatema demonstrates a mature digital presence suitable for its business scope.

ALPS Electric Czech, s.r.o. is a subsidiary of the multinational ALPS ALPINE CO., LTD., specializing in the development and manufacturing of electronic components and automotive infotainment systems. The website serves as a corporate portal providing information for suppliers, potential employees, and business partners. It reflects a medium-sized manufacturing entity with a clear B2B focus. Technically, the site is built on WordPress using the Divi theme, enhanced with SEO and GDPR compliance plugins, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is professional, well-structured, and trustworthy, with no signs of blocking or WAF interference. WHOIS data is unavailable, likely due to privacy protection, but the website content aligns with a legitimate corporate entity. Strategic recommendations include enhancing security headers and publishing explicit security policies to further strengthen trust and compliance.

The website 'Síť brněnských otevřených škol' represents a public educational project managed by the Magistrát města Brna, aiming to create open schools as centers of education and community engagement. The site provides information about the project, news updates, and contact details, targeting parents, children, and the general public interested in educational activities in Brno. The business model is a government-funded initiative focusing on local community education and lifelong learning opportunities. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager for analytics, and the Nette PHP framework. The site is mobile-optimized with responsive design and good accessibility features. Performance is moderate, with proper meta tags and SEO considerations. However, some security best practices such as security headers are missing. From a security perspective, the site uses HTTPS with good SSL configuration and does not expose sensitive data. The absence of security headers and a vulnerability disclosure policy are areas for improvement. Privacy compliance is basic, with privacy and cookie policies present but lacking an explicit cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and professional but could benefit from enhanced security measures and improved privacy compliance. The missing WHOIS data reduces domain trustworthiness, though the official city affiliation supports legitimacy. Strategic recommendations include implementing security headers, adding incident response contacts, and improving cookie consent mechanisms.

Witzenmann USA LLC is a specialized manufacturer and engineering partner providing flexible metal elements such as hoses, expansion joints, and bellows primarily for automotive, aerospace, and technical building equipment sectors. The company operates as part of the global Witzenmann Group with a strong international presence. The website demonstrates a mature digital infrastructure with modern technologies, good mobile optimization, and comprehensive content tailored to industrial clients. Security posture is solid with HTTPS and consent management, though explicit security policies and incident response details are absent. The domain WHOIS data is missing, which is unusual but the website's professionalism and contact transparency support legitimacy. Overall, the site is trustworthy and well-positioned in its market niche.

Witzenmann Sverige AB is a specialized manufacturer and supplier of flexible metal elements including metal hoses, compensators, metal bellows, pipe supports, and automotive components. The company serves a broad range of industrial sectors such as automotive technology, energy, aerospace, and technical building equipment, positioning itself as a trusted engineering partner with a global footprint. The website reflects a mature digital presence with multi-language support, comprehensive product and solution information, and clear contact channels. Technically, the site employs modern web technologies and integrates a consent management platform to ensure privacy compliance. Security posture is adequate but could be improved by implementing additional HTTP security headers and publishing explicit security policies. The absence of WHOIS data for the exact www-prefixed domain is likely a technical artifact rather than a legitimacy concern. Overall, the website is professional, trustworthy, and business-focused, supporting Witzenmann's market position as a reputable industrial supplier.

Witzenmann Korea Co., Ltd. operates a professional website offering a broad range of flexible metal products including hoses, expansion joints, bellows, and automotive parts, targeting industrial sectors such as automotive, aerospace, construction, and energy. The company is part of the global Witzenmann Group with a strong international presence. The website demonstrates good content quality, clear navigation, and multi-language support, reflecting a mature digital presence. Technically, the site uses modern web technologies and integrates a consent management platform and Google Tag Manager for analytics and privacy compliance. Security posture is moderate with no visible security headers and unknown SSL configuration, suggesting room for improvement. The absence of WHOIS data is a notable anomaly that requires further investigation to confirm domain legitimacy. Overall, the site is trustworthy and professional but would benefit from enhanced security measures and verification of domain registration status.

BTFLEX S.r.l., part of the Witzenmann Group, is a medium-sized manufacturing company specializing in flexible metallic elements for various industrial sectors including automotive, aerospace, HVAC, and energy. The company offers both custom and series production solutions and maintains a strong international presence with subsidiaries and partner sites worldwide. The website is professionally designed, multilingual, and provides comprehensive product and solution information targeting industrial clients and OEMs. Technically, the site uses modern web technologies, including Usercentrics for consent management and Google Tag Manager for analytics, ensuring compliance with privacy regulations. Security posture is strong with HTTPS enforced and security headers present, though explicit security policies and incident response details are not published. Overall, the website reflects a credible and established business with good digital maturity.

Witzenmann is a global manufacturing and engineering company specializing in flexible metal elements such as hoses, expansion joints, metal bellows, and automotive components. The company serves diverse industrial sectors including automotive, aerospace, technical building equipment, and hydrogen applications. Their website demonstrates a strong global presence with multiple localized domains and a comprehensive product and solutions portfolio. Technically, the website uses modern web technologies, including Usercentrics for consent management and Google Tag Manager for analytics, and is well optimized for mobile devices. Security posture is moderate with HTTPS enforced and consent mechanisms in place, but lacks visible security headers and detailed incident response information. The WHOIS data for the UK domain is unavailable due to registration issues, which slightly impacts trustworthiness. Overall, the website is professional, content-rich, and trustworthy, serving industrial clients and OEMs effectively.

Witzenmann Española S.A. is a large manufacturing company specializing in flexible metal elements, including flexible metal hoses, expansion joints, bellows, pipe supports, and automotive and aerospace components. The company operates globally with a strong presence in multiple countries and offers tailored engineering solutions for various industrial sectors such as automotive, aerospace, energy, and building technology. Their website reflects a professional and comprehensive digital presence with multilingual support and detailed product and solution offerings. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and integrates a consent management platform (Usercentrics) and Google Tag Manager for analytics and tracking. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. However, some security headers are not explicitly detected, and there is no visible security.txt or vulnerability disclosure page. Security posture is moderate to good, with HTTPS enforced and cookie consent mechanisms in place. The absence of explicit security policies or incident response contacts is a minor gap. No vulnerabilities or suspicious content were detected. The WHOIS data is unavailable due to registry restrictions, but the website's professionalism and global footprint strongly indicate legitimacy. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations. Strategic recommendations include enhancing security headers, publishing explicit security policies, and adding vulnerability disclosure information to further improve trust and security posture.

Vinařství Jiří Šilinek is a small family-owned winery located in the Pálava region of the Czech Republic, specializing in producing and selling quality wines, offering wine tastings, and providing accommodation services. The website reflects a professional and regionally focused business with a clear emphasis on tradition and quality. The digital infrastructure is built on the Rocketoo e-commerce platform, utilizing Bootstrap and jQuery, with integration of Google Analytics and Google Ads for marketing and analytics purposes. Privacy and cookie policies are well implemented, including GDPR compliance and user consent mechanisms. Security posture is generally good with HTTPS enforced and age verification for alcohol sales, though some security headers are missing. WHOIS data is unavailable due to privacy protection, which is typical for small businesses. Overall, the site is trustworthy, well-branded, and suitable for its target mature audience.

Obec Pasohlávky is the official municipal website for the village of Pasohlávky in the Czech Republic, serving both residents and tourists. The site provides essential local government information, event calendars, news updates, and tourist services. It positions itself as a trusted source for community engagement and local tourism promotion. The website is professionally designed with consistent branding and clear navigation, targeting a general audience interested in municipal services and regional tourism. Technically, the site is built on ASP.NET Web Forms with modern JavaScript libraries such as jQuery and Swiper.js for UI components. It uses HTTPS and integrates Google Analytics for visitor tracking. The site is moderately optimized for performance and mobile devices, though accessibility features are basic. There is no detected CMS, and hosting details are not explicit. From a security perspective, the site employs HTTPS and secure form handling but lacks advanced security headers and a cookie consent mechanism, which are recommended for GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces domain trustworthiness, but the website content and official nature suggest legitimacy. Overall, the website is a functional and professional municipal portal with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing a security policy, and verifying domain registration details to strengthen trust and compliance.

AFS Intercultural Programs is a well-established international non-profit organization focused on intercultural learning and global citizenship development through exchange programs, education, volunteerism, and advocacy. The organization has a strong market position with a large global community and a comprehensive digital presence. The website is professionally designed, mobile-optimized, and SEO-friendly, leveraging modern technologies such as WordPress, Google Analytics, Hotjar, and Cloudflare CDN. Security posture is solid with HTTPS enforcement, reCAPTCHA integration, and cookie consent mechanisms, although some security headers could be explicitly implemented and DNSSEC enabled for enhanced protection. Privacy policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the domain registration and WHOIS data confirm the legitimacy and trustworthiness of the organization.

Tipydokasina.cz is a Czech-language online platform specializing in reviews and affiliate marketing for legal Czech online casinos. The website offers detailed casino reviews, bonus offers, game guides, and affiliate links to licensed casinos regulated by the Czech Ministry of Finance. It targets adult Czech-speaking users interested in online gambling and sports betting. The business appears to be a small but focused affiliate site founded in 2022, with consistent branding and a good content quality level. Technically, the site uses standard web technologies (HTML5, CSS3, JavaScript) and is hosted by WebSupport, a Czech hosting provider. The site is mobile-optimized and SEO-friendly with structured data markup, but lacks visible advanced frameworks or CMS indications. Performance is moderate, and accessibility is basic. From a security perspective, the site uses HTTPS (inferred from canonical URLs), but no explicit security headers or policies are detected in the provided content. There is no visible privacy policy, cookie consent mechanism, or terms of service page, which are critical for GDPR compliance. No contact emails or phone numbers are found, limiting direct user support or incident response capabilities. Overall, the site is legitimate and consistent with its business model but requires improvements in privacy compliance, security best practices, and transparency to enhance trust and regulatory adherence.

Marketing Hub s.r.o. is a Czech-based digital marketing agency specializing in comprehensive online marketing services including PPC advertising, SEO, web analytics, graphic design, copywriting, social media management, emailing, and web development. Founded in 2024, the company positions itself as a performance-driven marketing partner for businesses seeking tailored digital solutions. The website reflects a professional and modern digital presence with strong SEO and user experience design. Technically, the site is built on WordPress with integration of modern JavaScript libraries and Google marketing tools, hosted on Websupport infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact and business information.

Witzenmann GmbH is a German-based manufacturer specializing in flexible metallic elements including metal hoses, compensators, metal bellows, pipe supports, and vehicle parts. The company serves diverse industrial sectors such as automotive, aerospace, energy, and building technology, with a strong global presence supported by multiple subsidiaries and localized websites. Their business model focuses on both custom and series production, targeting industrial clients requiring high-quality flexible metal components. The website reflects a mature digital infrastructure with multilingual support and structured product and solution offerings.

The website 'Vylepši si školu' is a regional public sector project based in the Czech Republic focused on participatory budgeting for young people in schools and children's homes within the Jihomoravský kraj. It aims to foster civic engagement, critical thinking, and financial literacy among students by involving them in decision-making about school budgets. The project is supported by regional government entities and public innovation agencies, positioning it as a credible and community-focused initiative. Technically, the site is built on WordPress with modern block-based design using Kadence Blocks and Bootstrap for responsive layout. The hosting is provided by Webglobe, and the site uses HTTPS with good SSL configuration. However, there is room for improvement in security headers and privacy compliance, as no cookie consent mechanism or terms of service were found. No contact emails or phone numbers are explicitly provided on the homepage, which could affect user trust and support accessibility. Overall, the site is well-structured, content-rich, and professionally presented, suitable for its educational and governmental audience.

Gymnázium a střední odborná škola Mikulov is a public secondary education institution in the Czech Republic offering both maturitní (graduation) and vocational programs including culinary, mechanical, and caregiving fields. The website serves students, parents, and staff with educational information, services, and contact details. It maintains a moderate market position as a regional educational provider with partnerships across local government and industry. The technical infrastructure is based on WordPress CMS, enhanced with Google Analytics and Tag Manager for tracking, and Typekit for fonts. The site is mobile optimized and provides a cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and well maintained.

AFS Česká Republika is a well-established non-profit organization focused on intercultural education and exchange programs. The website presents a professional and comprehensive digital presence, offering detailed information about study abroad programs, hosting foreign students, volunteering, and scholarships. The organization targets students, parents, volunteers, and educational institutions, positioning itself as a key player in intercultural educational services within the Czech Republic and globally through the AFS network. Technically, the site is built on WordPress with modern SEO and analytics integrations, including Google Analytics, Hotjar, and Facebook Pixel, supported by a CDN for performance. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security headers could be enhanced. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the organization's transparency and social proof. Overall, the site is safe, user-friendly, and compliant with GDPR, reflecting a mature digital strategy for a non-profit educational entity.

AWIS Holding, a.s. is a Czech joint-stock company established in 1992, specializing in software development, consulting, and hardware sales primarily for the hospitality, business, and property management sectors. The company emphasizes blending modern technology with traditional Czech hospitality culture, holding ISO 9001 and 14001 certifications that underline its commitment to quality and environmental standards. Their website reflects a professional and consistent brand image targeting business clients in the Czech Republic. Technically, the site is built on WordPress with standard technologies like jQuery and PHP, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is limited, with no explicit cookie consent mechanism or detailed privacy policy pages. WHOIS data is missing, which slightly reduces trustworthiness but does not contradict the professional business presentation. Overall, the site is functional and trustworthy but could improve in security and privacy transparency.

The website charitabreclav.cz currently serves only a 404 Not Found error page, indicating that the intended content or services are not accessible. The domain is registered since late 2020 with a Czech hosting provider, suggesting a small or new entity. Due to the lack of any visible content, metadata, or business information, the website does not provide any insight into the organization's operations, services, or market position. Technically, the site lacks modern web features, security headers, and privacy compliance elements, reflecting a very low digital maturity level. Security posture is weak with no HTTPS or security policies evident, and no contact or incident response information is available. Overall, the site is non-functional and presents a high risk for users seeking information or services from this domain.

Srdce v domě, p. o. is a non-profit social service organization established by the Jihomoravský kraj (South Moravian Region) in the Czech Republic. The organization provides protected housing and support services primarily for persons with disabilities, operating facilities in Klentnice, Mikulov, and Lednice. Their website reflects a regional government-affiliated entity focused on social welfare, with clear contact information and service descriptions. The business model is non-profit, supported by regional government funding, targeting individuals seeking social housing and care services. Technically, the website is built on an ASP.NET WebForms framework with modern front-end libraries such as jQuery, Bootstrap, and Slick Carousel. It employs Google Tag Manager for analytics and tracking, and includes cookie consent mechanisms and a privacy policy, indicating a reasonable level of digital maturity. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data reduces transparency and trust slightly, but the website's content and affiliations strongly support its legitimacy. Overall, the website presents a trustworthy and professional front for a regional non-profit social service provider. Strategic improvements in security headers and public disclosure of incident response policies would enhance its security posture and compliance standing.

Flying Revue is a Czech aviation-focused media company providing news, articles, and multimedia content for aviation enthusiasts and professionals. The website serves as a digital platform for their magazine, educational courses, e-commerce, and community engagement. The company has an established presence since 2008 and targets a niche audience interested in aviation history, sport, and industry news. Technically, the site uses Fonio CMS with a mix of legacy and modern JavaScript libraries, Google Analytics, and advertising via Google Adsense. The site is well-structured, mobile-optimized, and uses HTTPS, but relies on an outdated jQuery version which poses security risks. Privacy and cookie policies are not explicitly found, indicating room for compliance improvement. The WHOIS data is missing, which reduces domain trust from a registration perspective, though the website content and social media presence support legitimacy. Overall, the site is professional and trustworthy but should address technical and compliance gaps to enhance security and privacy posture.

Textron Aviation is a leading manufacturer of general aviation aircraft, operating iconic brands such as Beechcraft and Cessna. The company holds a significant market position, delivering over half of all general aviation aircraft worldwide. The website reflects a professional corporate presence with a focus on aviation manufacturing and sales. The technical infrastructure includes modern web technologies such as Foundation CSS, VideoJS for media, and OneTrust for cookie consent management, hosted likely on AT&T infrastructure. Google Tag Manager is used for analytics and marketing purposes. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is partially addressed with a cookie consent mechanism but lacks visible privacy policy and terms of service. Overall, the website is professional and trustworthy but could improve transparency and security practices.

JOB AIR Technic a.s. is a Czech Republic-based company specializing in aircraft maintenance, repair, and overhaul (MRO) services, along with training, logistics, and painting facilities. Established in 1993, the company has grown to become a recognized regional MRO provider with certifications including EASA Part 145, Part 147, AS 9100:D, and ISO 14001. It operates under the umbrella of the Czechoslovak Group (CSG), a large industrial conglomerate, enhancing its market position and credibility. The website targets aviation industry professionals, aircraft operators, and potential employees, offering detailed service descriptions and career opportunities.

Czech Airlines Technics, a.s. is a medium-sized, established provider of aircraft maintenance and technical services based in the Czech Republic. The company offers a comprehensive range of services including base and line maintenance, landing gear overhaul, component maintenance, structural repairs, and CAMO support, targeting airlines and aviation operators. Their market position is supported by a decade-plus domain age and a professional web presence. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and Cookiebot for privacy compliance, reflecting a moderate to good digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and DNSSEC are missing. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements. Recommendations include enhancing security headers, publishing incident response policies, and enabling DNSSEC to further strengthen trust and security.

Glamour Guardian s.r.o., operating the website vseprovlasy.cz, is a well-established Czech retail business specializing in professional hair cosmetics and hairdressing equipment. With over 27 years of experience, the company serves both professional hairdressers and end customers, offering a wide range of products, expert seminars, and personalized services including free regional delivery and loyalty discounts. The website reflects a mature e-commerce platform with a clear focus on the hair care industry and a strong local market presence. Technically, the website is built on the FastCentrik e-shop platform using ASP.NET technologies, enhanced with modern JavaScript libraries such as Owl Carousel and Google reCAPTCHA for security. The site is mobile-optimized, accessible, and incorporates SEO best practices, ensuring a good user experience. Privacy and cookie consent mechanisms are well implemented, demonstrating compliance with GDPR requirements. From a security perspective, the site uses HTTPS and includes anti-spam measures like Google reCAPTCHA. While explicit security headers are not fully confirmed, the site shows no signs of vulnerabilities or exposed sensitive data. However, the absence of a public WHOIS record suggests domain privacy protection, which is common and justified for this business type but limits domain age verification. Overall, the website presents a professional, trustworthy, and compliant online presence with moderate to good technical and security posture. Strategic recommendations include enhancing security headers, publishing a security.txt file for vulnerability disclosure, and providing incident response contact information to further strengthen trust and security readiness.

MONTPLAST-ITPV s.r.o. is a Czech family-owned company specializing in plumbing, heating, water, and gas installation services. The company serves residential and commercial clients, offering comprehensive installation, repair, and maintenance solutions. Their website reflects a professional local business with a clear focus on quality and customer satisfaction. The company presents itself as experienced and reliable with a solid customer base and a range of key services in the energy sector. Technically, the website is built on WordPress using Elementor and several plugins including MonsterInsights for analytics and Caldera Forms for contact forms. The site is mobile-optimized and uses HTTPS with a valid SSL certificate, but lacks some security headers and cookie consent mechanisms. Analytics tracking is moderate, using Google Analytics and Tag Manager. The website content is well-structured and relevant, though SEO and accessibility could be improved. From a security perspective, the site shows good basic practices such as HTTPS and secure forms with GDPR consent. However, the absence of security headers and cookie banners indicates room for improvement. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for small businesses. No critical vulnerabilities or suspicious indicators were found. Overall, the website is trustworthy and professionally maintained, with moderate technical maturity and a solid business presence. Strategic recommendations include enhancing security headers, implementing cookie consent banners, and improving accessibility and SEO to strengthen compliance and user experience.

VÁPENKA VITOŠOV s.r.o. is a well-established lime production company based in Northern Moravia, Czech Republic, with a history dating back to 1872. The company is among the top three lime producers in the country, offering a range of lime and limestone products for various industrial sectors including metallurgy, chemical, energy, agriculture, and ecology. Their flagship branded product line is the SALITH® system, which includes mortars, plasters, and paints designed for broad construction applications. The company operates under the SigmaRoc group, indicating a solid market position and industrial backing. Technically, the website employs legacy technologies such as jQuery 1.7.2 alongside modern integrations like Google Maps API and Google Analytics. The site shows moderate performance and basic mobile optimization, with a custom or unknown CMS platform. SEO and accessibility are basic but functional. Cookie consent mechanisms are implemented, reflecting awareness of GDPR compliance, although no explicit privacy policy or terms of service pages were found. From a security perspective, the site uses HTTPS (implied by Google services usage), but lacks explicit security headers and uses outdated JavaScript libraries, which could expose it to vulnerabilities. No incident response or vulnerability disclosure information is published, indicating room for improvement in security transparency and readiness. Overall, the site is professional and trustworthy but would benefit from modernization and enhanced security practices. The overall risk is moderate with no critical issues detected. Strategic improvements in security headers, library updates, and formal privacy documentation would enhance compliance and reduce risk exposure.

Dům barev is an established e-commerce retailer specializing in paints and painting accessories in the Czech Republic. The website offers a broad range of products including paints for walls, wood, metal, and related accessories, targeting both B2B and B2C customers. The business is associated with PPG Industries, a global leader in coatings, which enhances its market credibility. Technically, the website is built on the Kentico CMS platform, leveraging modern web technologies such as jQuery, Google Tag Manager, and Didomi for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and product information. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy linked to the parent company and an active cookie consent banner. The absence of WHOIS data suggests privacy protection or domain registration issues, but the website content and corporate affiliation support legitimacy. Overall, the site is professional, secure, and compliant, suitable for its retail business model.