Medium-risk security reports

The website ntmvp.cz serves as a virtual tour platform created in 2020 during the Covid-19 pandemic. It offers interactive virtual tours primarily targeting a general audience interested in immersive media experiences. The business model appears focused on providing virtual tour content without evident e-commerce or subscription services. The site is small-scale and localized to the Czech Republic, with no indication of a parent company or subsidiaries. Technically, the site uses modern web technologies including JavaScript, HLS.js for streaming, and WebVR polyfills to support virtual reality features. The site is mobile optimized and loads media assets efficiently, though performance is moderate. No CMS or third-party analytics/tracking tools are detected, indicating a lightweight custom implementation. From a security perspective, the site uses HTTPS and avoids forms or inputs that could introduce vulnerabilities. However, it lacks security headers and does not provide privacy or cookie policies, which are important for GDPR compliance. No contact or incident response information is provided, limiting transparency and trust. The domain registration data is consistent and appropriate for the business age and location, supporting legitimacy. Overall, the site is functional and moderately professional but would benefit from enhanced privacy compliance, security hardening, and clearer business contact information to improve trust and regulatory adherence.

Muzeum Plasy operates as a specialized cultural and educational institution under the National Technical Museum of the Czech Republic, focusing on the preservation and exhibition of building heritage and historical construction techniques. The website provides detailed information about exhibitions, events, educational programs, and visitor information, targeting cultural tourists, students, and researchers interested in architectural history. The business model is non-profit and government-affiliated, emphasizing education and cultural preservation. Technically, the website is built on WordPress 6.2.6 with modern web technologies including jQuery, Google Analytics, and lazy loading for images. The site is mobile-optimized and features good navigation and content structure. However, there is room for improvement in security headers and privacy compliance. The site uses HTTPS with a good SSL configuration but lacks explicit privacy and cookie policies, which are important for GDPR compliance. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. The absence of security headers and vulnerability disclosure policies are notable gaps. The WHOIS data is unavailable, which limits domain trust verification, but the association with the National Technical Museum and professional content suggests legitimacy. Overall, the website is well-designed and professional, serving its educational and cultural mission effectively. Strategic improvements in privacy compliance, security headers, and transparency would enhance trust and security posture, supporting long-term sustainability and compliance with evolving regulations.

Kavárna MUZEUM is a small café business located within the National Technical Museum in Prague, focusing on coffee culture, bakery, and gastronomy. The website presents a clear business description targeting museum visitors and coffee enthusiasts, offering lunch menus, bakery products, and catering services. The site uses concrete5 CMS with jQuery and Google Analytics for tracking visitor data. While the website content is well structured and visually appealing, it lacks critical privacy and cookie policies, explicit contact information, and security headers. The absence of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. Overall, the business appears legitimate and niche-focused, but the digital maturity and security posture require improvement to enhance trust and compliance.

JMP s.r.o. operates the website rozkladaci-postele.cz, specializing in the retail and e-commerce sale of folding beds and mattresses primarily targeting customers in the Czech Republic. The company maintains a medium-sized business with multiple physical stores and an online presence, offering a wide range of products with a focus on quality Czech manufacturing. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Bootstrap, and various plugins for SEO, analytics, and live chat support. Security posture is solid with HTTPS enforced and no visible critical vulnerabilities, though security headers and formal policies are lacking. Privacy compliance is basic with a cookie consent banner but no published privacy or terms of service pages. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the site is functional, trustworthy, and well-positioned in its niche.

TeeTime SE operates a specialized online platform focused on golf course discovery and booking, primarily serving the Czech Republic and broader European markets. The website offers a comprehensive marketplace for golf-related products, memberships, and services, positioning itself as a leading player in the golf hospitality sector. The platform supports both casual and competitive golfers with seamless reservation capabilities and additional offerings such as golf trails and tournaments. Technically, the site leverages modern web technologies including React and Next.js, hosted behind Cloudflare, ensuring a responsive and performant user experience across web and mobile platforms. Security measures such as HTTPS and standard security headers are in place, though explicit cookie consent mechanisms and dedicated security policies are absent. Overall, the site demonstrates a mature digital presence with good business credibility and moderate privacy compliance.

A-B help s.r.o. is a Czech non-profit organization established in 2006 that focuses on improving the lives of disadvantaged children, seniors, and handicapped individuals by providing minibuses to social institutions. The organization partners with socially responsible companies that sponsor these vehicles, which are branded with sponsor logos to enhance corporate social responsibility visibility. The website is built on WordPress and presents a professional, content-rich platform primarily in Czech. It provides clear contact information and testimonials that enhance trustworthiness. However, the absence of privacy and cookie policies and the lack of WHOIS data reduce transparency and privacy compliance. Technically, the site is well-structured, mobile-optimized, and secure with HTTPS, but could benefit from enhanced security headers and privacy mechanisms.

Lékařské podiatrické centrum, led by MUDr. Marie Součková, is a specialized private healthcare provider in Prague focusing on orthopedics and podiatry services for children and adults. The center offers a comprehensive range of treatments including podiatry, orthopedic care, pedicure services, diabetic footwear (SHAPER), and educational courses. The business holds a reputable market position as a pioneer in private comprehensive care for the musculoskeletal system in the Czech Republic. Technically, the website is built on Joomla CMS with modern frontend frameworks like Bootstrap and UIkit, supported by jQuery and Google Analytics for tracking. Hosting is provided by WEDOS Internet, a reputable Czech provider. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Privacy compliance is well addressed with a clear cookie consent mechanism and GDPR-aligned privacy policy. From a security perspective, the site uses HTTPS with good SSL configuration but lacks advanced security headers and explicit incident response or security policies. No vulnerabilities or blocking mechanisms were detected, indicating a stable security posture. Domain WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website presents a professional, trustworthy, and user-friendly digital presence for a specialized healthcare provider, with room for improvement in security hardening and formal policy disclosures.

Autosalon Klokočka is a medium-sized authorized automotive dealership and service provider based in the Czech Republic, specializing in brands such as Volkswagen, Audi, ŠKODA, Kia, and SEAT. The company offers a comprehensive range of services including new and used vehicle sales, authorized servicing, financing, leasing, and vehicle buyback. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeted at automotive customers in the region. Technically, the site employs modern analytics and marketing tools such as Google Analytics, Hotjar, and Ecomail, alongside live chat and reCAPTCHA for user interaction and security. The site is mobile-optimized and demonstrates good SEO practices. Security posture is solid with HTTPS enforced and CAPTCHA on forms, though it lacks some advanced security headers and published incident response information. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness, but the overall business credibility remains high due to the professional presentation and authorized brand partnerships. Strategic improvements in security headers, incident response transparency, and domain registration verification are recommended to enhance trust and compliance.

RSJ is a financial group operating primarily in the Czech Republic with a strong presence in global derivative markets including London, Chicago, New York, Frankfurt, and Tokyo. The company manages a diversified portfolio of investments spanning financial derivatives trading, real estate development, private equity, and emerging sectors such as biotechnology and healthy food production. The website clearly communicates its business scope and warns investors about fraudulent schemes misusing its brand. Technically, the site employs modern web technologies including Google Analytics and Tag Manager, with a cookie consent mechanism supporting GDPR compliance. Security posture is solid with HTTPS enforced, but lacks published security policies or incident response contacts. WHOIS data is missing, which raises concerns about domain registration legitimacy despite the professional website presence. Overall, RSJ presents as a credible financial entity with room for improvement in transparency and security disclosures.

M CARD s.r.o. is a Czech company specializing in the manufacturing and printing of high-quality plastic cards, printed materials, and promotional items. Established in 2002, the company serves a diverse clientele including small businesses, large corporations, and individuals. Their product portfolio includes plastic cards, premium cards with metallic finishes, chip and contactless cards, magnetic cards, personalized ID cards, atypical cards, RFID/NFC keychains, printed materials, promotional products, engraving, UV printing, and direct mailing services. The company emphasizes quality, fast delivery, competitive pricing, and free samples, positioning itself as a reliable and comprehensive solution provider in the card manufacturing industry.

Alfasilver.cz is the official website for Alfasilver HA+, a medical device product designed for wound care, including treatment of abrasions, minor burns, and skin injuries. The product is distributed by Glenmark Pharmaceuticals Distribution, s. r. o., based in Prague, Czech Republic. The website targets consumers seeking effective and easy-to-use wound care solutions, offering sprays and creams with antimicrobial properties and tissue hydration support. The site also provides educational content and retail partner links for product purchase. Technically, the website employs a modern frontend stack including Bootstrap 4, jQuery, and integrates Google Analytics and Google Tag Manager for user tracking and analytics. Cookie consent is managed via CookieScript, ensuring GDPR compliance with granular user consent options. The site is mobile-optimized and features clear navigation and professional design, though no CMS or backend platform is explicitly detected. Hosting and domain registration are consistent with the business location and history. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms but lacks visible advanced security headers. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy with a registration date in 2016 and no privacy protection, aligning with the business profile. Contact information is clearly provided, including company address, phone, and official emails, with a dedicated channel for reporting adverse effects. Overall, Alfasilver.cz presents a trustworthy, professional, and compliant online presence for a niche healthcare product. Strategic improvements could include enhanced security headers and explicit security policies to further strengthen trust and compliance.

3E PROJEKT, a.s. is a Czech Republic-based medium-sized company founded in 1998, operating primarily in hospitality, craft brewing, and real estate sectors. The company emphasizes a blend of tradition and innovation, maintaining a family-oriented culture while expanding its business portfolio. Their key services include managing gastronomy venues, operating a craft brewery, and providing real estate services. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website uses a modern technology stack including jQuery, Slick Carousel, Lightbox, Remodal, Google Maps API, and Google Tag Manager. It is built on the Ibis CMS platform and shows good mobile optimization and SEO practices. The site implements GDPR-compliant cookie consent mechanisms and uses tracking tools such as Microsoft Clarity and Facebook Pixel with consent management. From a security perspective, the site enforces HTTPS and uses consent-based analytics but lacks visible security headers and explicit security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain is a notable concern, reducing trust in domain registration transparency. Overall, the website is professional and trustworthy with moderate technical and security maturity. Strategic improvements in security headers, incident response documentation, and WHOIS transparency are recommended to enhance trust and compliance.

Daramis Management, s.r.o. is a well-established real estate developer focused on residential projects primarily in Prague, Czech Republic. With over 25 years of experience, the company specializes in transforming urban areas into vibrant residential communities, offering services including residential development, project management, and property sales. Their market position is strong within the local real estate sector, supported by a portfolio of completed projects and a significant number of satisfied residents. The website reflects a professional and modern digital presence, leveraging WordPress with advanced front-end technologies to deliver an excellent user experience across devices. Security posture is robust with HTTPS, security headers, and secure forms, although explicit security policies and incident response information are absent. Privacy compliance is well addressed with comprehensive privacy and cookie policies including consent mechanisms. The domain WHOIS data is missing or privacy protected, which slightly reduces transparency and business credibility but is not uncommon in this sector. Overall, the site demonstrates a mature digital infrastructure and trustworthy business representation with room for improvement in transparency and security disclosures.

OnlyU is a Czech-language media website focused on publishing articles related to relationships, society, and health. The site targets Czech-speaking users interested in these topics and monetizes primarily through advertising networks such as Google Adsense and Taboola. The website is built on WordPress CMS and integrates multiple third-party analytics and marketing tools, including Google Analytics, Gemius, and ShareThis, indicating a mature digital marketing infrastructure. However, the absence of publicly available WHOIS data limits the ability to fully verify domain ownership and legitimacy. The site implements a cookie consent banner, showing some compliance with GDPR requirements, but lacks an explicit privacy policy or terms of service in the analyzed content. Technically, the site shows moderate performance and good mobile optimization but has minor backend issues such as visible PHP warnings. Security posture is moderate with HTTPS enabled but missing security headers and some code hygiene issues. Overall, the website is functional and professionally presented but would benefit from improved transparency, security hardening, and compliance documentation.

PlastisolTransfer24.com is a German-based company specializing in the production and distribution of high-quality textile transfers, serving primarily B2B customers such as textile printing companies and promotional firms across Germany, Austria, Switzerland, and the UK. The company emphasizes rapid delivery, offering express shipping within 24 hours, and holds OEKO-TEX certification, underscoring its commitment to environmental and social responsibility. Their product portfolio includes a wide range of transfer types including plastisol, blockout, water, neon, digital, DTF, and specialty transfers like glitter and holographic options. Technically, the website is built on the Magento 2 e-commerce platform, leveraging RequireJS, jQuery, and various Magento UI components. It integrates modern payment solutions such as Stripe and employs Google Tag Manager, Google Analytics, and Microsoft Clarity for analytics and marketing purposes. The site is mobile-optimized with good SEO practices and a comprehensive cookie consent mechanism supporting GDPR compliance. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status to prevent unauthorized transfers, and implements CAPTCHA on login forms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no public security or incident response policies are found. The domain registration is consistent with the business claims, having been registered in 2012, aligning with the company's stated experience. Overall, the website presents a professional and trustworthy front with good content quality, technical implementation, and privacy compliance. Strategic improvements could include enhancing security headers, publishing a formal security policy, and enabling DNSSEC to further strengthen trust and security posture.

ELEKTROTRANS a.s. is a well-established Czech company specializing in electricity transmission and distribution services, including design, construction, diagnostics, and maintenance of high voltage lines. As a member of the VINCI Energies Group under the Omexom brand, it leverages international expertise and resources, positioning itself as a market leader in the Czech Republic's energy sector. The website reflects a professional digital presence with good content quality, clear navigation, and GDPR-compliant privacy and cookie policies. Technically, the site uses WordPress with modern plugins like Yoast SEO and Matomo analytics, indicating a moderate to good digital maturity. Security posture is strong with HTTPS enforced and privacy-friendly analytics, though additional security headers and explicit incident response information could enhance trust. The absence of WHOIS data limits domain trust assessment, but overall, the site appears legitimate and professionally managed.

JMP s.r.o. operates the website loznice.cz, specializing in the manufacture and retail of high-quality mattresses, beds, and bedroom furniture with a strong emphasis on Czech production and certification. The company targets consumers seeking quality sleep solutions and offers custom-made products supported by over 30 years of experience. The website features rich multimedia content, product categories, and multiple physical store locations with clear contact information. Technically, the website employs modern web technologies including Bootstrap, jQuery, and integrates marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Heureka widgets. The site is mobile-optimized and provides a good user experience with clear navigation and structured data for SEO. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain reduces trust from a domain registration standpoint. The site lacks explicit security policies and incident response information, which could be improved to enhance compliance and user trust. Overall, the website presents a professional and trustworthy front for a medium-sized retail business in the Czech Republic, with recommendations to improve domain registration transparency, security headers, and published security policies to strengthen its security posture and compliance.

Národní technické muzeum is a prominent national museum in the Czech Republic dedicated to preserving and showcasing technical history and innovation. The museum offers a wide range of exhibitions, educational programs, and cultural events targeting diverse audiences including families, schools, adults, and professionals. It maintains a strong market position as a leading cultural institution with multiple exhibition sites and partnerships with governmental and corporate entities. Technically, the website employs modern web technologies such as jQuery, Google Analytics, and Google Tag Manager, with good mobile optimization and accessibility features. The site is well-structured, professionally designed, and provides a rich user experience with clear navigation and relevant content. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks visible security headers and explicit security or incident response policies, which could be improved. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, although the website content and external trust signals strongly support its authenticity. Overall, the website presents a low risk profile but would benefit from enhanced transparency in security policies and domain registration information to strengthen trust and compliance posture.

Landia Management s.r.o. is a Czech engineering and investment company specializing in residential, development, and leisure real estate projects primarily in Prague. The company targets investors and residents interested in quality living spaces and community-oriented developments. Their portfolio includes cooperative housing, senior care homes, and sports and leisure facilities. The website is professionally designed with clear navigation and good content quality, supporting their market position as a reputable local developer. Technically, the website uses a traditional tech stack including jQuery 1.11.0, Fancybox, and Slick Carousel. While functional and moderately optimized for mobile, the use of an outdated jQuery version and lack of visible security headers indicate areas for improvement. The site includes a cookie consent mechanism and uses Google Analytics for tracking, reflecting moderate digital maturity. From a security perspective, the site lacks explicit privacy policies and terms of service, and no WHOIS data is available for the domain, which reduces trustworthiness. No critical vulnerabilities or exposed sensitive data were detected, but security headers and modern best practices should be implemented to enhance protection. The cookie consent banner and contact transparency are positive indicators. Overall, the website presents a credible business with good professionalism and user experience but requires improvements in security posture, privacy compliance, and domain registration transparency to strengthen trust and compliance.

VAKOVAKO is a Czech Republic-based non-profit endowment fund operating a global donation platform focused on environmental and humanitarian causes. The platform connects donors with carefully vetted nonprofits working in areas such as rainforests, oceans, biodiversity, endangered species, and humanity. The business model emphasizes transparency, with 100% of donations going directly to nonprofits and audited bank accounts. The platform supports donations via a mobile app available on iOS and Android, facilitating easy and fast contributions with no minimum or maximum limits. Technically, the website is built using modern web technologies including React and Next.js, with integrations for Stripe payments, Google Tag Manager, Facebook Pixel, and Cookiebot for consent management. The site is well-optimized for mobile devices, fast loading, and includes accessibility features. Security best practices are observed with HTTPS, security headers, and reCAPTCHA integration, though no explicit security policy or incident response information is published. The WHOIS data for the domain is unavailable or malformed, indicating privacy protection which is common and justified for non-profit organizations. Despite this, the website's transparency, presence of official policies, and contact information support its legitimacy. Overall, the site presents a professional, trustworthy, and user-friendly platform for charitable donations. Recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to further enhance trust and security posture.

GRANTER is a small non-profit organization focused on providing financial assistance to children and support to their caretakers. The website is professionally designed using the Wix platform, featuring relevant content and structured data that confirms the organization's location and mission. The technical infrastructure is modern and leverages Wix's Thunderbolt framework, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and some client-side security hardening scripts, though there is room for improvement in security headers and incident response transparency. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website presents a moderate risk profile with no signs of blocking or malicious activity.

BressKamp s.r.o. is a small manufacturing company based in the Czech Republic specializing in contract manufacturing of turned and milled parts, sheet metal parts, and welded constructions. The company emphasizes quality and flexibility, serving primarily German-speaking clients with ISO 9001 and EN 1090-2 certifications. Their website reflects a professional business presence with detailed service descriptions and reference customers. Technically, the website uses established but somewhat outdated technologies such as jQuery 1.11.1 and Bootstrap 3.2.0, with integration of Google Tag Manager and CookieYes for analytics and cookie consent management. Security posture is moderate; HTTPS is assumed but security headers are not detected, and older libraries may pose risks. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy policy page found. Overall, the website is functional and professional but could improve in security and compliance documentation.

MAXPROGRES, s.r.o. is a Czech Republic based company founded in 1996 specializing in technical security systems and system integration services. The company holds multiple ISO certifications and a national security certification (NBÚ T-level), positioning itself as a leader in the Czech security technology market. Their services include comprehensive security system design, installation, proactive monitoring, and 24/7 maintenance support. The website reflects a professional and consistent brand image with clear contact information and GDPR-compliant privacy and cookie policies. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Leaflet for mapping, and integrates Google Analytics and reCAPTCHA for analytics and security respectively. Security posture is moderate with HTTPS and CAPTCHA implemented, but lacks advanced security headers and a formal incident response or vulnerability disclosure mechanism. Overall, the site is accessible, well-structured, and trustworthy, supporting the company's market position and business credibility.

Rotary Club Prague International is a well-established non-profit organization serving the English-speaking community in Prague with a focus on charitable activities, community service, and cultural exchange. The club maintains a professional and content-rich website that highlights its events, membership information, and community projects. The site leverages modern web technologies and is hosted on a reputable platform with Azure DNS services. Privacy and cookie policies are clearly presented with an active consent mechanism, reflecting good compliance with GDPR standards. Security posture is solid with HTTPS enforced and no visible critical vulnerabilities, although improvements in security headers and DNSSEC could enhance protection. Overall, the website presents a trustworthy and professional image suitable for its non-profit mission.

The website www.praha3.cz serves as the official portal for the municipal district Praha 3 in the Czech Republic. It provides comprehensive information about local government services, news, events, and contact details for residents and visitors. The portal supports multiple languages via Google Translate links and offers online services such as appointment booking and downloadable forms. The site is well-branded and maintains consistent messaging aligned with its government entity status. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, jQuery, and Bootstrap components. It is mobile-optimized, accessible, and includes SEO best practices such as meta tags and structured data (JSON-LD). The site uses HTTPS and implements cookie consent mechanisms compliant with GDPR, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses consent-based tracking scripts. However, it lacks explicit security headers and a published security.txt or incident response contact, which are recommended for transparency and vulnerability management. No WAF or blocking mechanisms were detected, and no obvious vulnerabilities were found in the content or scripts. Overall, the site presents a trustworthy and professional government portal with good content quality and technical implementation. The absence of WHOIS registration data slightly reduces trust but is mitigated by the official nature and consistent branding. Strategic improvements in security headers and incident response disclosures would enhance the security posture and trustworthiness further.

Klépierre Management Česká Republika s.r.o. operates prominent shopping centers in the Czech Republic, including Nový Smíchov in Prague and Plzen Plaza in Plzeň. The company is part of the larger Klépierre group based in France, specializing in retail real estate management. Their website provides information about their centers, compliance mechanisms including a whistleblowing system, and cookie consent management, reflecting a commitment to regulatory compliance and user privacy. Technically, the website is built using modern web technologies such as Next.js and React, hosted via Gandi registrar's infrastructure. The site includes a comprehensive cookie consent mechanism using tarteaucitron.js and integrates Google Tag Manager for analytics. The website is mobile-optimized and provides a good user experience with clear navigation and branding consistency. From a security perspective, the site enforces HTTPS and uses a high privacy cookie consent mode. It features a whistleblowing system for incident reporting, demonstrating a mature compliance posture. However, explicit security headers and a dedicated security policy page are absent, and no vulnerability disclosure or security.txt file was found. These gaps suggest room for improvement in formalizing security communication and transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. The domain age and WHOIS data align with the business claims, indicating legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to strengthen security posture and trust.

The website mmkv.cz is the official online presence of the City Hall of Karlovy Vary, Czech Republic. It serves as a comprehensive portal for municipal services, citizen information, news, and administrative resources. The site targets residents and visitors, providing access to various public services such as permits, registrations, and local government information. The business model is that of a government public service portal, with a medium-sized organizational footprint and a well-established domain since 2002. Technically, the site is built on Drupal 10 CMS, leveraging Bootstrap for responsive design, Leaflet.js for mapping, and Google Analytics for visitor tracking. The infrastructure is hosted by a Czech registrar and hosting provider, REG-ZONER, ensuring regional consistency. The website demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. From a security perspective, the site enforces HTTPS and implements a detailed cookie consent mechanism compliant with GDPR. However, it lacks explicit security policy documentation and incident response contact information. No critical vulnerabilities or exposed sensitive data were detected. The site integrates third-party scripts responsibly but could improve by adding security headers and a vulnerability disclosure policy. Overall, mmkv.cz presents a trustworthy, professional, and user-friendly government portal with solid technical foundations and privacy compliance. Strategic enhancements in security transparency and incident readiness would further strengthen its posture.

Dr. Oetker Czech Republic operates a well-designed and content-rich website focused on baking recipes, desserts, and product sales. The site targets home bakers and families, offering recipe inspiration and an e-commerce platform for purchasing products. The brand is well-established with over 100 years of history, reflected in consistent branding and professional content. Technically, the website uses modern frameworks such as Next.js and React, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent management, though explicit security headers and privacy policies are lacking. WHOIS data is missing, which reduces trustworthiness but the website's content and branding strongly suggest legitimacy. Overall, the site is professional and user-friendly but could improve transparency on privacy and security policies.

Active Citizens Fund is a Czech non-profit grant program focused on strengthening civil society, promoting openness, tolerance, and citizen participation in public policy. The website positions itself as a supporter of vulnerable and disadvantaged groups, advocating for human rights and equality. The program is funded through EEA and Norway Grants and operates with a consortium of partners. The website is professionally designed, primarily in Czech with English alternatives, and provides comprehensive privacy and cookie policies, reflecting good GDPR compliance. However, direct contact information such as emails or phone numbers is not explicitly provided, relying mainly on a newsletter subscription form for engagement. Technically, the site is built on WordPress with common plugins and libraries, including jQuery and Google Tag Manager, ensuring moderate performance and good mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit security policies could enhance trust. The absence of WHOIS data for the domain is a notable concern, reducing domain trustworthiness despite the legitimate appearance and content of the site. Overall, the site demonstrates a solid digital presence for a non-profit organization but would benefit from improved transparency in domain registration and contact details.

Abakus is a Czech non-profit foundation established by the founders of Avast, dedicated to fostering positive social change in Czech society. The foundation focuses on supporting palliative care, family support, modern education initiatives, and storytelling projects to raise awareness on important social issues. The website is professionally designed using WordPress and Elementor, providing clear navigation and content relevant to its mission. The technical infrastructure is modern and hosted with Google Domains, ensuring reliable performance and security with HTTPS enabled. However, the site lacks explicit privacy and terms of service policies, which are important for compliance and user trust. Security posture is generally good with no visible vulnerabilities, but could be improved by adding security headers and a published security policy. Overall, the website presents a trustworthy and professional image aligned with its non-profit mission.

Rostlinne.cz is a Czech project dedicated to promoting plant-based cuisine, supporting restaurants and producers in integrating new plant-based products and dishes within the Czech Republic. The website serves as an educational and promotional platform offering courses, events, e-books, and active social media engagement. Technically, the site is built on WordPress with modern plugins for SEO, privacy compliance, and social media integration, hosted via WEDOS with Cloudflare DNS. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Contact information is transparent and professional, enhancing business credibility. Overall, the site is well-designed, mobile-optimized, and trustworthy, serving a niche but important market segment in plant-based culinary education and promotion.

The website albertovakrutost.cz is a campaign platform run by the non-profit organization OBRAZ – Obránci zvířat, z. s., focused on raising awareness and advocating against animal cruelty in supermarket Albert's chicken supply chain in the Czech Republic. The site provides detailed information about the campaign, including calls to action such as signing petitions. The organization positions itself as an animal welfare advocate with a clear mission and target audience of concerned consumers and animal rights supporters. Technically, the site uses modern frontend technologies including Vue.js, Alpine.js, and SwiperJS, supported by analytics and tracking tools like Google Analytics, Microsoft Clarity, and Ecomail. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. Privacy compliance is strong, with comprehensive GDPR-aligned privacy and cookie policies presented in Czech language. Contact information is transparent, including emails, phone number, and physical address. No terms of service or vulnerability disclosure policies were found. The domain is newly registered but consistent with the campaign's recent launch. Overall, the website is professional, trustworthy, and well-structured for its advocacy purpose.

Digipolis Antwerpen serves as the IT partner for the city of Antwerp, focusing on delivering accessible and user-friendly digital services to residents, businesses, visitors, and students. The organization positions itself as a key enabler of the city's digital transformation, offering services including job and internship opportunities, project assignments, and digital platform development. The website reflects a professional and consistent brand aligned with government standards. Technically, the website leverages modern web technologies such as Next.js and Leaflet.js, ensuring good mobile optimization, accessibility, and SEO. The presence of Google Tag Manager indicates moderate user tracking balanced with privacy compliance. The site is well-structured, performant, and integrates external partner domains for jobs, internships, and procurement. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, explicit security headers are not detected, and no public security or incident response policies are found. WHOIS data is restricted by the registry, which is common for government-related domains, but this limits transparency. Overall, the security posture is solid but could be enhanced with additional headers and published policies. The overall risk is low given the official nature of the site and its role as a government IT partner. Strategic recommendations include improving security header implementation, publishing security and incident response policies, and establishing a vulnerability disclosure program to enhance trust and resilience.

Futurn nv is a Belgian real estate company specializing in the sustainable redevelopment and transformation of commercial properties in Flanders. The company focuses on converting outdated or underutilized sites into modern, versatile, and environmentally responsible workplaces. Their market position is that of a specialist in sustainable business property development, offering tailored solutions such as KMO units, office buildings, and reconversion projects. The website reflects a professional and consistent brand image targeting business owners and property stakeholders in the region. Technically, the website is built on the Concrete5 CMS platform, utilizing modern frontend technologies including Bootstrap, jQuery, and FontAwesome. It features responsive design, SEO-friendly metadata, and integrates marketing and analytics tools such as Google Tag Manager and social media pixels. The site includes a cookie consent mechanism aligned with GDPR requirements and provides multiple contact channels including phone, email, and a chat widget. From a security perspective, the site enforces HTTPS with a valid SSL certificate and employs secure form practices. However, it lacks explicit security headers and does not provide a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, though the website content and contact information appear authentic and consistent with a legitimate business. Overall, the website demonstrates a good level of digital maturity and security hygiene, with room for improvement in security policy transparency and domain registration verification. The risk profile is moderate, with recommendations to enhance security headers, publish incident response contacts, and verify domain registration details to strengthen trust and compliance.

Gutterdämmerung.com is the official website for a niche entertainment project combining rock music, film, and live immersive experiences. The site promotes the Gutterdämmerung concept created by visual artist Bjorn Tagemose, featuring legendary rock artists. The business operates primarily in the media sector, targeting rock music fans and live event attendees. The website content is rich with artist information, multimedia, and event details, supporting fan engagement through newsletters and contests. Technically, the site uses standard web technologies including jQuery, Google Analytics, YouTube API, and MailChimp for marketing. Hosting is provided by One.com, with a domain registered since 2014, consistent with the business timeline. Security posture is moderate with HTTPS implied but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but could improve in privacy and security practices.

Barefoot Luxury is a niche real estate and hospitality company specializing in luxury villas for sale on São Vicente island, Cabo Verde. The company offers 36 private villas blending natural beauty with modern comfort, targeting affluent investors and lifestyle buyers. The website reflects a strong market position within the luxury real estate sector, emphasizing exclusivity, privacy, and a unique lifestyle experience. Technically, the site is built on WordPress with Elementor and Gravity Forms, hosted by Combell nv, and employs modern web technologies with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with the business goals.

Fosbury & Sons operates as a premium coworking and office space provider primarily serving the Brussels and Groot-Bijgaarden regions, with additional presence in Amsterdam. The company targets a broad audience including startups, entrepreneurs, and established companies seeking flexible workspaces, meeting rooms, and event spaces. Their market position is that of a high-quality, human-centric workspace provider emphasizing community and collaboration. Technically, the website employs modern web technologies including Google Tag Manager and Google Analytics, hosted with Cloudflare DNS services, and is optimized for mobile and SEO. Security posture is solid with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and additional security headers could be implemented. Privacy compliance is strong with clear cookie consent mechanisms and comprehensive privacy and terms policies. However, no explicit security policy or incident response contacts are published, and no vulnerability disclosure program is evident. Overall, the website is professional, trustworthy, and well maintained, with room for improvement in security transparency and DNS security.

Telefónica México is a major telecommunications company providing innovative connectivity and telecom solutions to businesses and consumers in Mexico. The website reflects a strong market position with clear branding and comprehensive content tailored to its audience. The company leverages WordPress CMS with modern SEO and analytics tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS and secure forms, though explicit security policies and incident response contacts are not published. Privacy compliance is good with a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-optimized for users and search engines.

The website www.barcelona.cat serves as the official digital portal for the Ajuntament de Barcelona, providing comprehensive information and services for residents and visitors of Barcelona city. It offers a wide range of resources including news, cultural events, public services, transport information, and business support, positioning itself as a key government communication channel. The site is well-branded, professionally designed, and targets a broad audience interested in city life and governance. Technically, the site is built on Drupal 10, leveraging modern web technologies such as Bootstrap for responsive design, and integrates multiple analytics platforms including Google Analytics, Matomo, and Plausible. Cookiebot is used for cookie consent management, ensuring GDPR compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS, uses security headers, and implements anti-CSRF tokens. However, explicit security policies and incident response contacts are not published, and no security.txt file is found. The WHOIS data is unavailable, likely due to registry policies, but the domain and content strongly indicate legitimacy. Overall, the security posture is solid but could benefit from enhanced transparency and formalized vulnerability disclosure mechanisms. The overall risk assessment is low, with the site representing a trustworthy government resource. Strategic recommendations include publishing detailed security and incident response policies, adding a security.txt file, and maintaining vigilance on third-party scripts. These steps will further strengthen trust and compliance in the evolving regulatory landscape.

The website represents the Information and Communication Planning and Evaluation Institute (IITP), a South Korean government agency specializing in ICT research and development, policy planning, and talent cultivation. The agency holds a strong market position as a key government entity driving digital innovation and ICT R&D in Korea. The site provides comprehensive information on business announcements, R&D projects, events, and policy resources targeted at researchers, industry professionals, and the general public. Technically, the website employs a mature tech stack including jQuery, Bootstrap, Swiper, and Slick for UI components, hosted likely via Gabia, a Korean registrar and hosting provider. The site is mobile-optimized with good navigation and content quality. Security posture is solid with HTTPS enforced and basic security headers, though some modern headers could be added. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is limited, with no explicit privacy or cookie policies found, which is a notable gap for GDPR and similar regulations. Overall, the domain registration is consistent and transparent, matching the agency's identity and country. The website scores well on business credibility and technical implementation but should improve privacy disclosures and update some legacy libraries.

Wanna Marketing is a small marketing agency based in Málaga, Spain, specializing in web design, client acquisition campaigns, graphic design, and content creation. The company positions itself as a strategic and innovative partner for businesses seeking tailored marketing solutions. It holds a recognized position in the Spanish independent media agency rankings, indicating a credible market presence. Technically, the website is built on WordPress using Elementor and Yoast SEO, with performance optimizations via WP Rocket and GDPR compliance mechanisms in place. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and explicit privacy policies would enhance trust. Overall, the site is professional, well-structured, and user-friendly, targeting businesses in Málaga and surrounding regions.

Magnetico is a Czech freelance graphic design business specializing in functional and aesthetic graphic design services including branding, web design, photography, and video production. The website presents a professional portfolio showcasing diverse projects and client logos, targeting businesses and individuals seeking creative marketing solutions. The technical infrastructure is based on WordPress with Elementor and common JavaScript libraries, delivering a moderately performant and mobile-optimized experience. Security posture is solid with HTTPS and cookie consent implemented, though security headers and incident response details are lacking. The absence of WHOIS data reduces domain trustworthiness, but the website content and presentation suggest a legitimate and professional operation. Strategic recommendations include enhancing security headers, adding vulnerability disclosure mechanisms, and improving contact transparency.

Česká asociace rozvojových agentur (ČARA) is a well-established non-profit association in the Czech Republic that unites regional development agencies to support regional competitiveness and policy implementation. The website reflects a professional and consistent brand presence with clear contact information and comprehensive privacy and cookie policies, indicating a mature approach to compliance. Technically, the site uses modern front-end technologies such as Bootstrap, jQuery, and various UI libraries, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are absent. The lack of WHOIS data is a notable gap, reducing domain trustworthiness and warranting further verification. Overall, the site is functional, compliant, and serves its target audience effectively.

SIMPLO s.r.o. is a Czech Republic based custom software development studio specializing in bespoke web development, e-shops, and web applications. They emphasize tailored solutions built on proprietary CMS and e-commerce platforms, serving a primarily Czech-speaking business clientele. The company demonstrates strong market positioning with long-term client relationships and notable projects such as the Úřad pro ochranu osobních údajů and Salming ČR e-shop. Technically, the website leverages modern AMP technology for fast, mobile-optimized performance and integrates tracking tools like Google Tag Manager and Leady. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security headers and policies are absent. Privacy compliance is partially addressed with privacy and cookie policies present but lacking a consent mechanism. WHOIS data is unavailable, which impacts domain trustworthiness assessment. Overall, the site is professional, performant, and credible, but could improve transparency in security and privacy practices.

YouGov is a well-established UK-based market research and data analytics company founded in 2000. It provides public opinion polling, market research, and data analytics services to a broad audience including businesses, media, and political organizations. The company holds a strong market position with a large user base and international presence. The website reflects a mature digital infrastructure with modern technologies such as Angular, AWS Cloudfront CDN, and multiple analytics and marketing tools integrated for performance and user insights. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms implemented via OneTrust. Security posture is strong, leveraging HTTPS, security headers, and monitoring tools like New Relic, though a dedicated security policy and incident response contact are not publicly found. Overall, the website is professional, trustworthy, and technically sound, supporting the company's credibility and business operations.

Kauza ApS is a Danish technology company specializing in data-driven consumer insights through its WhatIBuy app and platform. The company aggregates grocery receipts from multiple stores to provide users with budgeting, consumption analytics, and personalized insights. The website reflects a small but professional operation with clear business information and a focus on privacy and compliance. Technically, the site is built on WordPress with modern plugins and frameworks, offering a good user experience and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some improvements in security headers and incident response transparency are recommended. Overall, Kauza presents a trustworthy and compliant digital presence with a niche market focus in Denmark.

Kantar Worldpanel operates as a leading global provider of consumer panel research and consumer behavior insights, offering services such as retail surveys and shopper research. The website content reflects a professional and consistent brand presence targeting businesses seeking market research data. Technically, the site employs modern JavaScript libraries like MooTools and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance, though no major CMS or hosting provider is explicitly identified. Security posture is moderate, with HTTPS implied but no explicit security headers detected, and privacy compliance is partial with a cookie consent mechanism but no visible privacy policy page. Overall, the domain WHOIS data is unavailable, which reduces trust but the website content aligns with the known Kantar brand. Strategic recommendations include enhancing privacy disclosures, improving security headers, and publishing clear contact and incident response information.