Medium-risk security reports

ILONEXS is a small German courier and express delivery service specializing in personalized overnight express shipments. Their offerings include niche services such as animal transport, print and picture express services, phone and collect, bicycle transport, and contract cancellations. The website targets businesses and individuals seeking reliable courier solutions with a focus on personal and transparent service. Technically, the website uses legacy JavaScript libraries like jQuery and jQuery UI, hosted on servers indicated by the nameservers your-server.de. The site shows moderate performance and basic mobile optimization but suffers from a critical PHP fatal error that breaks page functionality. Security posture is weak with no visible security headers or privacy policies, and no HTTPS status was confirmed from the data provided. Overall, the site lacks contact information and privacy compliance indicators, reducing trustworthiness and professionalism.

The website www.kep-together.eu serves as the official platform for the 6th European KEP-Tage 2019, an established industry event focused on courier, express, and parcel logistics in Europe, particularly Germany. It targets logistics SMEs, start-ups, associations, and industry journalists, providing a networking and conference platform. The event is co-organized by IG KEP-together and BdKEP, Germany's largest KEP association, indicating strong industry ties and credibility. The site content is primarily in German with some English sections, reflecting its European audience. The business model centers on event organization and industry networking, supported by media partnerships and government participation.

The website partner.partnereinkauf.com serves as a partner login portal for Firststop Deutschland, indicated by the page title and branding. The site is built using modern web technologies such as Angular and Bootstrap, providing a responsive and moderately optimized user experience. However, the site content is minimal and primarily focused on login functionality without public-facing business information or detailed descriptions. The domain WHOIS data is unavailable, suggesting the domain may be unregistered, private, or newly created, which raises concerns about the legitimacy and trustworthiness of the site. Security measures include HTTPS and a Content-Security-Policy header, but other security headers and policies are absent. No privacy, cookie, or terms of service policies are present, indicating low privacy compliance. Overall, the site appears functional for its intended partner login purpose but lacks transparency and trust signals for external users.

MATCHPOINT Ausbildungsportal is a regional German platform dedicated to connecting students with apprenticeship opportunities in the Landkreis Harburg area. It serves as an informational hub presenting local companies, apprenticeship professions, and career perspectives. The platform is supported by local economic development agencies, the employment agency, and schools, positioning it as a trusted regional educational resource. The website is primarily targeted at students and young people seeking vocational training opportunities in the region. Technically, the website is built on the Contao Open Source CMS and utilizes common web technologies such as jQuery and Rocksolid Slider for UI components. It employs Matomo analytics for user tracking, indicating a moderate level of privacy awareness. The site is mobile-optimized with a moderate performance profile and basic accessibility features. SEO optimization is basic but functional, with proper meta tags and structured data present. From a security perspective, the site uses HTTPS with good SSL configuration but lacks several security headers that could enhance protection. No forms or sensitive data collection points were detected on the analyzed page, reducing immediate risk. However, the absence of a cookie consent mechanism and explicit security or incident response policies indicates areas for compliance improvement. No vulnerabilities or suspicious patterns were found. Overall, the website presents a professional and trustworthy front for a regional educational service. The main risks relate to privacy compliance and security best practices, which can be addressed with targeted improvements. The domain registration data aligns well with the website's regional and educational focus, supporting legitimacy and trustworthiness.

StudentPoint.cz is a Czech online media portal primarily targeting students and young adults interested in lifestyle, travel, and product reviews. The site offers a broad range of articles covering student life, pop culture, and adult-oriented content such as erotic products and dating site reviews. Its business model relies heavily on affiliate marketing, especially for adult and dating services. The website is built on a modern WordPress infrastructure using Elementor and Astra theme, with performance optimizations and tracking tools like Google Analytics and Sentry integrated. Security posture is adequate with HTTPS enabled and some monitoring in place, but lacks comprehensive security headers and explicit privacy or cookie policies. The absence of WHOIS registrant data reduces domain trustworthiness, though the professional presentation and consistent branding support legitimacy. Overall, the site serves a niche adult audience with a focus on content and affiliate revenue.

Soundhire.cz is a Czech-based company specializing in the rental and technical support of audio and lighting equipment for cultural, VIP, and film/TV events. Established in 2010, the company offers comprehensive event services including professional sound systems, lighting solutions, and authentic props for productions. Their market position is that of a specialized provider catering to event organizers, production companies, and private clients seeking high-quality technical event support. The website is professionally designed, mobile-optimized, and provides clear contact information, reflecting a mature digital presence. Technically, the site uses modern web standards including WebP images and responsive design but lacks advanced frameworks or CMS indications. Security posture is moderate with cookie consent implemented and email obfuscation, though no advanced security headers or policies are published. Overall, the site is trustworthy, compliant with GDPR, and free from suspicious or adult content.

Za branou, z. s. is a Czech non-profit organization founded in 2010 dedicated to supporting families and children of incarcerated individuals. The organization offers counseling, family support, social rehabilitation, educational training, and literary competitions. Their website reflects a focused mission with clear navigation and relevant content tailored to their target audience. Technically, the site is built on the Ghost CMS platform, uses modern web technologies including jQuery and Google Analytics, and is hosted with DNS services via Cloudflare and registrar WEDOS. The website is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the organization's claims, supporting legitimacy and trustworthiness.

The website 'www.cestaintegrace.cz' appears to be a small-scale or possibly non-profit organization site built on WordPress using the Divi theme. The site content is primarily in Czech and the visible content is minimal, with no clear business description or contact information found. The lack of WHOIS data and domain registration details limits the ability to fully verify the legitimacy and history of the domain. Technically, the site uses modern web fonts and a popular CMS but lacks visible security headers and privacy compliance documentation. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the security posture is basic with room for improvement in privacy and contact transparency. The site is accessible without WAF or blocking mechanisms.

The Product Universe website serves as a professional event landing page for the 2026 conference organized by Crystallize, a headless commerce platform. The site targets eCommerce professionals and developers interested in AI-driven and API-based commerce ecosystems. The business model centers on event organization and platform promotion, with a clear focus on technology and innovation in commerce. The website demonstrates a modern technical infrastructure using Tailwind CSS, JavaScript modules, and integrates Plausible Analytics for minimal user tracking. Security posture is adequate with HTTPS and domain locks, but lacks DNSSEC and security headers, and no privacy or cookie policies are published. Overall, the site is well-designed, mobile-optimized, and trustworthy, though privacy compliance could be improved.

React Norway is a specialized event organizer focusing on the React developer community by hosting an annual conference and festival that combines technology talks with live music performances. The event is held in Oslo, Norway, at the Rockefeller venue, and targets frontend developers, React enthusiasts, and tech professionals. The business model revolves around ticket sales, sponsorships, and community engagement through both in-person and online formats. The company has established a consistent brand presence since its founding in 2018 and maintains partnerships with reputable technology companies and sponsors.

Farstad & Co is a specialty coffee roastery and coffee bar located in Skien, Norway, with a rich history dating back to 1955. The company operates a physical coffee bar, an online store offering specialty single-origin coffees, subscription services, and corporate coffee solutions. Positioned as Skiens eneste kaffebrenneri, Farstad & Co emphasizes quality, origin transparency, and a passion for the coffee experience. The website reflects a modern digital presence built on Next.js and Crystallize, integrating analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is strong with HTTPS and security headers, though cookie consent mechanisms are absent. Contact information is clearly presented, enhancing business credibility. The domain registration aligns well with the business claims, supporting legitimacy.

Nomono is a Norway-based technology company specializing in AI-powered spoken audio platforms and wireless recording devices. Their business model combines hardware sales with cloud-based SaaS subscription services, targeting creators such as podcasters and storytellers who require high-quality audio production tools. The website presents a professional and modern digital presence, leveraging advanced web technologies including Next.js, React, and integrations with HubSpot and Segment for marketing and analytics. The site is well-optimized for performance and mobile use, with clear navigation and strong branding consistency. Security posture is solid with HTTPS and security headers implemented, though explicit privacy and security policies are not publicly linked. Overall, Nomono demonstrates a mature technical infrastructure and a credible market position within the audio technology niche.

Assetto is a Norwegian entrepreneurial corporate finance advisory firm focused on helping entrepreneurs and business owners develop growth strategies, prepare companies for financial transactions, and support them through funding and exit processes. The company operates as a small, specialized consultancy with a strong emphasis on hands-on partnership and strategic involvement. The website reflects a professional and consistent brand image with clear contact channels and client success stories, positioning Assetto as a trusted advisor in its niche market. Technically, the website is built on modern frameworks such as Next.js and React, with good mobile optimization and moderate performance. However, there is room for improvement in SEO and accessibility features. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and professional but could enhance its compliance and security transparency.

Snowball Digital AS is a Norwegian-based design and technology agency specializing in digital product strategy, UX/UI design, branding, development, and growth marketing. The company targets growth-focused businesses seeking innovative digital solutions and seamless end-to-end experiences. Their market position is that of a specialized boutique agency with a focus on digital transformation and product innovation. Technically, the website is built on modern frameworks such as React and Next.js, leveraging a headless CMS (Crystallize) and integrating analytics tools like Google Analytics and Hotjar. The site is mobile-optimized and presents a professional, consistent brand image. Security-wise, the website uses HTTPS and asynchronous loading of tracking scripts but lacks some security headers and a cookie consent mechanism, which are recommended for improved compliance and security posture. Overall, the domain WHOIS data is privacy protected, which is typical for small agencies, and the website content and contact information support the legitimacy of the business.

Okay is a Norway-based company founded in 2018 that provides advanced, modular authentication solutions tailored for fintechs, banks, and enterprises. Their platform focuses on balancing security, compliance, and user experience by offering identity verification, strong customer authentication, passwordless access, and compliance management services. The company positions itself as a trusted partner in the financial technology sector, emphasizing rapid deployment and regulatory adherence such as PSD2 and GDPR. Technically, the website is built using modern frameworks like Next.js and React, hosted on Vercel, and integrates analytics and consent management tools to ensure performance and privacy compliance. Security posture is strong with HTTPS enforcement and clientTransferProhibited domain status, though DNSSEC is not enabled and explicit security policies are not published. Overall, the website is professional, well-structured, and trustworthy, with comprehensive content and clear business focus.

CEMIT Digital AS operates a specialized railway intelligence platform focused on transforming trains and trams into sensor-enabled devices for real-time condition monitoring and predictive maintenance. The company targets rail operators globally, offering a B2B solution that combines hardware sensor installation with cloud-based analytics. Their market position is that of a leading provider in railway condition tracking, supported by a professional website showcasing notable customers and clear service offerings. Technically, the website uses modern web technologies including ES modules, Cloudflare DNS, and Google Fonts, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain transfer protection but lacks DNSSEC and security headers, and no explicit security or incident response policies are published. Privacy compliance is minimal with placeholder privacy and cookie policies and no consent mechanism. Overall, the website is professional and trustworthy but could improve in security and compliance transparency.

Dimension Four AS operates a specialized IoT platform designed to unify and simplify IoT data management across industries and smart cities. Their platform offers a native GraphQL API, real-time data subscriptions, and tools for rapid deployment, positioning them as a flexible and scalable solution provider in the IoT technology sector. The company emphasizes eliminating data silos and vendor lock-in, enabling faster product development and innovation. Technically, the website is built on modern frameworks such as Next.js and React, hosted on AWS infrastructure, and integrates privacy-conscious analytics via Matomo. The presence of comprehensive privacy and cookie policies with consent mechanisms reflects a strong commitment to GDPR compliance. Security posture is robust with HTTPS, security headers, and secure forms, although the absence of a published security policy or incident response contact is noted. Overall, the domain registration is privacy protected but consistent with a legitimate business profile, and the website demonstrates high professionalism and trustworthiness.

New Normal Group is an entrepreneurial software group focused on incubating and building technology companies that redefine industry norms through intelligent API-driven solutions. Their portfolio includes subsidiaries specializing in e-commerce, IoT, cybersecurity, AI, digital services, and financial services, positioning them as a versatile player in the technology sector. The company targets forward-looking enterprises and high-growth ventures, leveraging over 20 years of entrepreneurial experience. Technically, the website is built on modern frameworks such as Next.js and integrates analytics and user behavior tools like Google Analytics and Hotjar, indicating a mature digital infrastructure. However, there are gaps in privacy compliance and explicit security policies. Security posture is generally good with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Overall, the website is professional, trustworthy, and well-branded, though improvements in privacy and security transparency are recommended.

Sucht Schweiz is a Swiss non-profit foundation dedicated to preventing problems related to the consumption of psychoactive substances and addictive behaviors. The organization operates with a clear mission focused on research, prevention, information dissemination, and advocacy. The website reflects a mature digital presence with multilingual support, professional design, and modern web technologies including WordPress, Yoast SEO, and Usercentrics for cookie consent. It prominently features donation options and provides extensive content on addiction-related topics, targeting both the general public and professionals in the field. Technically, the site is well-implemented with good SEO, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partially met with a cookie consent mechanism but no visible privacy or terms of service pages. Contact information is not explicitly provided in the HTML content, which could be improved for transparency. Overall, the website is trustworthy and professional, with a strong alignment between WHOIS data and business claims, indicating legitimacy. The content is safe for a mature audience, focusing on health and addiction prevention without any explicit or NSFW material.

Naughty Harbor s.r.o. operates a Czech Republic-based adult e-commerce website specializing in the sale of realistic silicone sex dolls and related accessories, alongside a sex doll private rental service in Prague. The website targets an adult audience exclusively, offering a broad catalog of products categorized by appearance, size, and brand. The business positions itself as a niche market leader in the Czech adult toy and service sector, emphasizing quality and customer experience through reviews and detailed product information. Technically, the website is built on the Shoptet e-commerce platform, utilizing a mix of legacy and modern web technologies including jQuery 1.11.3, Google Tag Manager, Google Analytics (GA4), Hotjar, and Mouseflow for analytics and user behavior tracking. The site is HTTPS secured and implements cookie consent mechanisms, though it lacks visible security headers and up-to-date privacy documentation. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, but it does not publish a privacy policy or terms of service in the analyzed content, nor does it provide a security.txt or vulnerability disclosure mechanism. The absence of WHOIS data for the domain reduces trustworthiness and raises questions about domain registration transparency. Overall, the website presents a professional and functional adult e-commerce platform with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and domain registration transparency are recommended to enhance trust and regulatory adherence.

Ateliér ŠUM is a small art education business based in Prague 1, offering a wide range of creative courses including drawing, painting, ceramics, jewelry making, and online lessons. The website is professionally designed using WordPress with modern plugins such as Yoast SEO and Google Analytics integration, providing a good user experience and clear navigation. Contact information including phone, email, and physical address is prominently displayed, supporting business credibility. However, the absence of privacy and cookie policies indicates a compliance gap that should be addressed. The WHOIS data is unavailable, which slightly reduces domain trustworthiness but does not detract from the overall legitimacy of the site based on content and contact details. Security posture is good with HTTPS and reCAPTCHA usage, but could be improved by adding security headers and a vulnerability disclosure policy.

Český hokej is the official national ice hockey federation of the Czech Republic, providing comprehensive information, news, and services related to Czech ice hockey. The website serves a broad audience including fans, players, coaches, referees, and other stakeholders, offering news updates, team details, ticket sales, fan engagement zones, and an official merchandise shop. The domain is well-established since 2001, reflecting a mature and authoritative presence in the sports sector. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and integrates analytics tools like Google Tag Manager and Facebook Pixel, ensuring good performance and user experience across devices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit privacy and security policies are not found in the provided content. Overall, the site demonstrates high professionalism, consistent branding, and trustworthy digital presence, with room for improvement in explicit privacy disclosures and contact information visibility.

Technické služby Velké Popovice is a municipal service organization providing essential technical and environmental services to the local community of Velké Popovice, Czech Republic. Their offerings include sewer cleaning, waste collection, water supply, and sewage management. The website serves as an information portal for residents, providing updates, service announcements, and contact details. The organization operates as a public entity, likely funded by local government and service fees, positioning itself as a key local utility provider. Technically, the website is built on the Webnode CMS platform, utilizing Cloudfront CDN for content delivery and Google Analytics for visitor tracking with IP anonymization enabled. The site is accessible, with a moderate performance profile and basic mobile optimization. However, it lacks advanced SEO and accessibility features. No blocking or WAF mechanisms were detected, indicating open access. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information suggest legitimacy. Overall, the security posture is moderate but could be improved with better compliance and security controls. The overall risk is moderate with recommendations to implement privacy and cookie policies, add security headers, and verify domain registration details. Enhancing compliance and security transparency will improve trust and reduce potential risks.

Fintree.cz is a Czech Republic-based FinTech news and review website founded around 2020 by Radim Oulehla. It serves a niche audience interested in financial technologies, startups, and business insights. The website offers news articles, reviews, podcasts, and job listings related to the FinTech sector. Technically, the site is built on WordPress using the Divi theme, leveraging common JavaScript libraries such as jQuery and Slick Carousel for UI enhancements. The site is mobile-optimized and includes SEO best practices with structured data and meta tags. Security-wise, the website enforces HTTPS and includes standard security headers, along with a GDPR-compliant cookie consent mechanism. However, it lacks explicit published security policies or incident response contacts. Overall, the site presents a professional and trustworthy digital presence with moderate to good technical maturity.

Prague Morning is a prominent English-language media outlet based in the Czech Republic, established in 2016. It serves as the largest English news source in the country, targeting English-speaking residents and visitors interested in local news and events. The website offers news publishing services with monetization primarily through advertising and subscription-based premium content. The business maintains a consistent brand presence and leverages social media platforms to engage its audience. Technically, the website is built on WordPress CMS using Elementor for page building and Yoast SEO for search engine optimization. It integrates modern web technologies including jQuery and Google Analytics for tracking. Hosting utilizes Cloudflare DNS services, and the site employs HTTPS with good SSL configuration. Advertising is managed through Google Adsense and Vidverto, with multiple tracking and marketing tools embedded. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA for form protection. However, it lacks published privacy, cookie, and terms of service policies, which are critical for GDPR compliance and user trust. No explicit incident response or vulnerability disclosure policies are available. Security headers are assumed but not explicitly confirmed in the HTML content. Overall, the security posture is moderate but could be improved with clearer policies and enhanced security controls. The website content is safe for general audiences, with no adult or questionable material detected. WHOIS data confirms the domain's legitimacy and consistent registration since 2016, aligning with the business's operational history. Strategic recommendations include publishing comprehensive privacy and cookie policies, adding terms of service, implementing a vulnerability disclosure program, and enhancing accessibility and security headers to improve compliance and trust.

Runwayonline.cz is a Czech lifestyle online magazine established in 2020, focusing on fashion, beauty, travel, food, and entertainment content. The website targets a general audience interested in lifestyle topics and maintains a consistent brand presence with active social media channels on Facebook, Instagram, and YouTube. The business model revolves around content publishing and advertising revenue, primarily leveraging the Seznam SSP ad network. Technically, the site is built on WordPress with popular plugins such as Yoast SEO and Elementor, indicating a modern and maintainable infrastructure. Hosting and domain registration are managed by Wedos, a Czech provider, aligning with the website's regional focus. Security posture is adequate with HTTPS enforced and Google Analytics integrated with opt-out capabilities; however, the absence of security headers and explicit privacy and cookie policies indicates room for improvement. No WAF or blocking mechanisms were detected, allowing full content accessibility.

Frenk.ai is a newly founded fintech startup (2025) specializing in AI-driven financial advisory services delivered through an interactive gamified platform. The company targets individuals seeking to improve their financial decision-making and literacy. The website presents a professional and modern design with clear calls to action for joining a waitlist for early access. Technically, the site uses Bootstrap for responsive design, Cloudflare for DNS, and Google Analytics for user tracking. The site is mobile optimized and performs moderately well. Security posture is adequate with HTTPS enforced and secure form handling, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is partially addressed with a privacy policy and GDPR mention, but no cookie consent mechanism is present. Business credibility is supported by clear contact information and EU data protection claims. Overall, the site is trustworthy and well-positioned for a fintech startup but can enhance security and privacy practices.

Riseup is a small, donation-funded organization providing secure online communication tools such as email, VPN, mailing lists, and collaboration platforms targeted at activists and groups working on liberatory social change. The organization emphasizes privacy, self-determination, and democratic alternatives in digital communication. Their market position is niche, focusing on privacy-conscious users and social justice communities globally. Technically, the website uses modern frontend technologies like Bootstrap and Font Awesome, is mobile optimized, and provides good accessibility and SEO features. Security-wise, the site enforces HTTPS, has a clientTransferProhibited domain status, and offers extensive security resources, though it lacks DNSSEC and some security headers. Privacy compliance is strong with a comprehensive privacy policy and no detected tracking or analytics. Overall, the website is trustworthy, professional, and aligned with its mission.

The website kytta.dev is a personal portfolio and blog of Nikita Karamov, a full-stack web developer and open-source enthusiast. The site showcases personal projects such as Share₂Fedi and Shareon, targeting developers and technology enthusiasts. It positions itself as an individual developer's platform rather than a commercial business. Technically, the site is built using the Zola static site generator with minimal JavaScript and SVG graphics, delivering fast performance and good mobile optimization. The site uses HTTPS and a privacy-friendly analytics service (GoatCounter), but lacks formal privacy and cookie policies, security headers, and incident response information. Security posture is generally good with no visible vulnerabilities, but could be improved with additional headers and policies. Overall, the site is trustworthy, professional, and safe for general audiences.

Sicily Café is a small hospitality business located in Prague, specializing in homemade organic cuisine, Italian-style coffee, and desserts. The website presents a professional and consistent brand image with clear navigation and relevant content for its target audience. The business leverages an online presence including an e-shop and gift card services through partner domains. Technically, the site is built on Joomla CMS with common web technologies such as jQuery, Bootstrap, and UIkit, providing a moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled and a cookie consent banner, but lacks advanced security headers and privacy policy documentation. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information support business legitimacy. Overall, the site scores moderately on content quality, technical implementation, security, privacy compliance, and business credibility.

Victoria Tanczos Portfolio is a small creative business specializing in branding and graphic design with a focus on sustainability and impactful design. The website serves as a professional portfolio showcasing various projects across branding, web, print, and social media design. The business targets clients seeking thoughtful and sustainable design solutions. Technically, the website uses a simple stack with jQuery and custom CSS/JS, with good mobile optimization and SEO practices. Security posture is moderate with cookie consent implemented but lacks visible security headers and incident response information. WHOIS data is privacy protected or unavailable, which is typical for small creative businesses. Overall, the website is professional, trustworthy, and well-structured, with room for improvement in security and transparency.

next layer Telekommunikationsdienstleistungs- und BeratungsGmbH is an Austrian owner-managed Internet Service Provider specializing in tailored cloud, network, and server infrastructure solutions for business customers. The company emphasizes personalized service with direct technical contacts and flexible planning to meet client needs. Their market position is that of a trusted mid-sized ISP with a strong focus on quality and customer orientation. The website reflects this professionalism with clear messaging and comprehensive service descriptions. Technically, the website is built on TYPO3 CMS, a robust and mature content management system. It employs Matomo for privacy-conscious analytics and Cookiebot for GDPR-compliant cookie consent management. The site is well-optimized for mobile devices, accessible, and SEO-friendly. Security best practices are observed, including HTTPS enforcement, security headers, and no visible vulnerabilities or exposed sensitive data. The security posture is strong, supported by ISO 27001 certification, indicating a mature information security management system. Cookie consent mechanisms and Do Not Track settings in analytics demonstrate compliance with privacy regulations. However, the site lacks explicit incident response contact information and a published security.txt file, which could enhance transparency and vulnerability management. Overall, the website and business present a low-risk profile with high trustworthiness, good technical implementation, and strong privacy compliance. Strategic recommendations include publishing incident response contacts, adding a security.txt file, and continuous monitoring of third-party scripts to maintain security standards.

The Fachschaft Informatik website serves as the official online presence of the student representative group for the Faculty of Informatics at TU Wien, Austria. It provides news, event information, academic support resources, and community engagement opportunities primarily targeted at informatics students. The site is well-structured, bilingual in parts, and offers key services such as consulting, communication platforms, and lecture wikis. The organization operates as a non-profit student body with a clear educational focus. Technically, the website is built using the Hakyll static site generator, ensuring a lightweight and secure infrastructure. The site is mobile-optimized, accessible, and SEO-friendly with proper meta tags and Open Graph data. No advanced analytics or tracking technologies are detected, reflecting a privacy-conscious approach. However, the absence of cookie consent mechanisms and security headers indicates room for improvement in compliance and security hardening. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. The lack of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests a basic security posture typical for a student organization. The domain registration data aligns well with the website's educational purpose and Austrian affiliation, supporting legitimacy and trustworthiness. Overall, the website presents a professional, trustworthy, and community-focused platform with good technical implementation but could enhance privacy compliance and security policies to better align with best practices and regulatory requirements.

graz.social operates as a regional Mastodon social networking server primarily serving the Graz area and its surroundings. It is managed by a non-profit association focused on promoting ethical digital culture. The platform leverages the open-source Mastodon software (version 4.4.7) and provides a community-driven social media experience within the fediverse. The website content includes user-generated posts on diverse topics, reflecting an active and engaged user base. The business model is community-centric, emphasizing privacy and ethical digital interaction rather than commercial gain. Technically, the site employs modern web technologies including React and Ruby on Rails frameworks, with modular JavaScript and SVG-based UI elements. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured content. Performance is moderate, with no significant technical debt or errors detected. Hosting details are not explicitly disclosed. From a security perspective, the site enforces HTTPS with excellent SSL configuration and avoids exposing sensitive data. However, it lacks some security headers and does not provide a cookie consent mechanism or terms of service, which are areas for improvement. No vulnerabilities or malicious content were detected. Privacy compliance is basic, with a privacy policy present but no explicit GDPR compliance indicators or data protection officer contact information. Overall, graz.social presents a trustworthy and well-maintained community platform with a strong ethical focus. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing terms of service, adding security headers, and providing clearer contact and incident response information to strengthen trust and security posture.

Magic Stamp, operated by Park Technology, offers a digital loyalty platform designed for small businesses, focusing on mobile and coffee loyalty solutions. The company provides an easy-to-use app combined with a physical stamp device to enhance customer retention. The website positions Magic Stamp as an affordable and effective loyalty solution with a clear target audience of small businesses seeking simple digital loyalty programs. The domain is well-established since 1999, supporting the business's credibility and longevity. Technically, the website is built on the Squarespace CMS platform, utilizing modern web technologies including JavaScript, jQuery, and integrations with marketing and analytics tools such as Google Analytics, Facebook Pixel, and HubSpot. The site is mobile-optimized and demonstrates good design and user experience, though accessibility features are basic. Performance is moderate, typical for a CMS-based site. From a security perspective, the site enforces HTTPS but lacks DNSSEC and HSTS headers, which are recommended for enhanced security. No explicit security policies or incident response contacts are published, representing an area for improvement. The domain is locked with multiple client prohibitions, indicating protection against unauthorized transfers or deletions. Privacy compliance is partial, with a cookie consent banner present but no visible privacy policy or terms of service pages. Overall, Magic Stamp's website is professional and trustworthy, with moderate security and privacy compliance. Strategic improvements in security headers, privacy documentation, and incident response transparency would enhance the site's security posture and user trust.

Mravenci.cz is a Czech marketing agency specializing in online advertising, website creation, and e-commerce solutions tailored for small businesses and entrepreneurs. The company positions itself as a strategic marketing partner with affordable services and expert oversight, primarily targeting smaller firms such as restaurants, manufacturers, and small e-shops. The website showcases client references and offers free consultations, emphasizing transparency and trustworthiness. Technically, the site is built on WordPress using Elementor, with performance optimizations and modern web technologies. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is professional, user-friendly, and compliant with GDPR, but lacks visible WHOIS data and explicit contact emails or phone numbers, which slightly impacts trust assessment.

VR|SPACE is a Czech-based company specializing in virtual reality and augmented reality solutions tailored for industries such as architecture, healthcare, engineering, and education. Established in 2015, the company positions itself as an innovative service provider focused on digitization and immersive technology applications to enhance productivity and safety. The website reflects a professional and consistent brand image, targeting business clients seeking VR/AR services. Technically, the site employs a modern tech stack including Google Analytics, Facebook Pixel, and Google Tag Manager, with a CMS identified as HAPPY admin and hosting by WEDOS. While the site is mobile-optimized and accessible, some outdated libraries like jQuery 1.11.1 are used, and security headers are minimal. Security posture is adequate with HTTPS and reCAPTCHA on forms, but could be improved with additional headers and updated libraries. Privacy compliance is basic with a clear cookie consent mechanism and a privacy policy page, though terms of service and explicit security policies are absent. Overall, the site is trustworthy and professionally maintained, with room for technical and security enhancements.

Metrostav Development a.s. is a well-established real estate developer in the Czech Republic, focusing on residential and commercial projects primarily in Prague. The company is part of the larger Metrostav Group and has a domain age consistent with its business history, indicating a stable market presence. Their website provides comprehensive information about ongoing and completed projects, targeting property buyers and investors in the region. Technically, the website employs modern web technologies such as Bootstrap, jQuery UI, and integrates Google Analytics and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and implements CSRF tokens in forms, but lacks explicit security headers and published security policies, which are recommended for improvement. Privacy compliance is strong with a visible cookie consent mechanism and a detailed privacy policy. Overall, the website is trustworthy, professional, and compliant with GDPR requirements, with room for enhancement in security transparency and incident response readiness.

MeetFactory o. p. s. is a well-established non-profit cultural organization based in Prague, Czech Republic, founded in 2000. The organization provides a vibrant space for live art, including music, theater, residencies, galleries, and workshops. Supported by a significant grant from the city of Prague, MeetFactory serves a general audience interested in contemporary art and culture. The website reflects this mission with detailed event listings and structured data to enhance user experience and search engine visibility. Technically, the site uses a combination of older JavaScript libraries and Bootstrap framework, hosted on WEDOS infrastructure, with moderate performance and basic mobile optimization. Security posture is moderate, with HTTPS implied but lacking visible security headers and modern security practices. Privacy compliance is limited, with no explicit cookie consent or comprehensive privacy policy clearly accessible. Business credibility is high due to consistent domain registration data, clear physical address, and active social media presence. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy measures.

Music City, operated by AudioMaster, a. s., is a Czech Republic-based e-commerce retailer specializing in musical instruments, sound and lighting technology, DJ equipment, and home recording gear. The company maintains a strong market presence with multiple physical stores in Prague, Brno, and Uherské Hradiště, complemented by a comprehensive online store. Their business model focuses on providing musicians and music enthusiasts with a wide range of products at competitive prices, supported by free shipping and a three-year warranty, enhancing customer trust and satisfaction. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, Cookiebot for cookie consent management, and analytics tools such as Google Analytics and Hotjar. The site is mobile-optimized and demonstrates good SEO and accessibility practices. However, there is room for improvement in security headers implementation and further hardening of form security. From a security perspective, the site uses HTTPS and has a robust cookie consent mechanism, indicating compliance with GDPR and privacy best practices. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data is a notable concern, potentially impacting domain trustworthiness, but the visible business information and contact details mitigate this risk somewhat. Overall, Music City presents a professional and trustworthy online presence with a solid business foundation. Strategic improvements in domain registration transparency and enhanced security headers would further strengthen their security posture and credibility.

Centrum Stromovka operates as a retail and commercial center in the Czech Republic, providing shopping and vendor services primarily targeting local consumers and businesses. The website is built on WordPress and integrates common marketing and analytics tools such as Google Analytics, Google Ads, Facebook Pixel, and Cookiebot for cookie consent management. The technical infrastructure is moderately modern with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, though explicit security headers are not detected and WHOIS data is missing, which impacts domain transparency. Overall, the site presents a professional and functional online presence for the business. Strategic improvements in security headers and privacy policy publication would enhance trust and compliance.

The website internetove-sluzby.eu represents a small Czech business operated by Jan Jelínek, specializing in dynamic website creation, SEO optimization, printing, advertising, and internet consulting services. The business targets primarily small and medium entrepreneurs in Prague and the Ústecký kraj region, with a claimed operational history since 1990. The site presents a professional and consistent brand image with clear contact details and service descriptions. Technically, the website uses a moderate tech stack including jQuery, Bootstrap, and live chat integration, with a CMS named inPage. Performance and mobile optimization are adequate, though accessibility is basic. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and privacy policy documentation. WHOIS data is privacy protected, which is reasonable for a small business, but limits domain age and registrant verification. Overall, the site is functional, trustworthy, and safe for general audiences.

The website at indlaegssedler.dk currently serves only a standard HTTP 404 error page indicating that the requested resource is not found. There is no accessible content, metadata, or business information available on the site. The domain is registered since 2015 and remains active with a valid expiry date in 2026, suggesting the domain is legitimate but the website is either under maintenance or abandoned. The lack of any privacy, cookie, or terms of service policies, as well as absence of contact information, severely limits the ability to assess the business or compliance posture. Technically, the site lacks security headers and DNSSEC is not enabled, which are areas for improvement. No WAF or security challenge mechanisms are detected, and the site is not blocked by any security service.

The website at czech.payu.com is currently inaccessible due to a 403 error served by AWS CloudFront, indicating either a Web Application Firewall (WAF) block or a configuration issue. This prevents retrieval of any meaningful content, metadata, or business information. The domain appears to be a subdomain of payu.com, a known payment service provider, but no WHOIS data is available for this subdomain, limiting verification of ownership or legitimacy. The lack of accessible content and metadata means no privacy, cookie, or security policies can be evaluated, and no contact or incident response information is present. From a technical perspective, the site is hosted behind Amazon CloudFront, which is a reputable CDN and security provider, but the current configuration blocks access, resulting in a poor user experience and zero content availability. No scripts, forms, or external links are detectable in the provided HTML. Security posture cannot be assessed beyond the presence of CloudFront, and no SSL or security headers data is available. Overall, the risk assessment is high due to the inability to verify the site’s content, policies, or security measures. The site’s legitimacy is uncertain, and the lack of WHOIS data for the subdomain further complicates trust evaluation. Strategic recommendations include resolving the CloudFront access issues, publishing clear business and security information, and ensuring compliance with privacy regulations to improve trust and transparency.

Möbelix.cz is an established Czech Republic-based online retailer specializing in furniture and stylish home accessories. The website offers a broad range of products with a focus on innovative and individual customer approaches, targeting general consumers interested in home furnishing. The platform demonstrates a modern technical infrastructure, leveraging React-based frontend technologies, Dynatrace monitoring, and various third-party marketing and analytics tools. The site is mobile-optimized and provides a good user experience with clear navigation and product categorization. Security posture is generally good with HTTPS enforced and secure cookie practices, though explicit security headers and privacy compliance mechanisms are lacking. The absence of WHOIS data limits domain trust assessment, but the professional presentation and e-commerce functionality suggest legitimate operations. Strategic improvements in privacy policy visibility, cookie consent, and security headers would enhance compliance and trust.

SIKO KOUPELNY A KUCHYNĚ is a leading Czech retailer specializing in stylish bathroom and kitchen solutions, offering a wide range of quality products, project planning, and turnkey realization services. The company targets general consumers primarily in the Czech Republic and neighboring countries, positioning itself as a market leader in home improvement retail. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on a modern Angular framework integrated with SAP Commerce Cloud, leveraging multiple marketing and analytics tools with user consent mechanisms. Security posture is strong with HTTPS enforcement and security headers, though the absence of a public security policy and incident response information is noted. The lack of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy. Strategic recommendations include publishing security policies, enhancing incident response transparency, and verifying domain registration details to improve trust. Overall, SIKO demonstrates a mature digital presence with room for security and compliance enhancements.

Proengineers studio is a small architecture and project design office based in the Czech Republic, offering comprehensive services focused on sustainable building design and modern technologies, including investor support during project realization. The website presents a professional image with good content quality and consistent branding, targeting general audiences interested in architectural services. Technically, the site is built on WordPress using Elementor and SEO plugins, with Google Analytics and Tag Manager for tracking. The site is accessible without any WAF or security challenges, indicating good availability. However, the absence of WHOIS data limits domain legitimacy verification. Security posture is moderate with HTTPS enabled but lacks security headers and published security policies. Privacy compliance is basic with cookie consent but no visible privacy or terms policies. Overall, the site is functional and professional but would benefit from enhanced security and compliance documentation.

The website 'Zámecké Rezidence Skvorec' appears to be a small-scale hospitality or real estate service provider based in the Czech Republic, offering residence accommodations. The site is built on the Wix platform, leveraging Wix's hosting and content management infrastructure. The technical setup is standard for Wix sites, with modern JavaScript and CSS but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and no visible incident response or security policies. Privacy compliance is minimal, with no privacy or cookie policies detected. Business credibility is limited by the absence of contact details and trust indicators. Overall, the site is functional but basic, suitable for a small local business.

Pozemky Choryne is a small real estate business focused on selling building plots in the Choryně area of the Czech Republic. The website presents information about residential land near nature, targeting individuals or families seeking property close to the city but in a natural setting. The business operates locally with a clear niche in real estate sales. Technically, the website is built on the Wix platform, utilizing standard Wix scripts and polyfills, indicating a moderate level of digital maturity suitable for small businesses. The site is mobile optimized and has basic SEO and accessibility features. Security posture is moderate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms. No WHOIS data is available, likely due to privacy protection, which slightly reduces trust but is common for small businesses. Overall, the site is functional and professional but would benefit from enhanced privacy policies, contact information, and security improvements.

The website 'Zámecké Rezidence Skvorec' appears to represent a small real estate or residential accommodation business located in the Czech Republic. The site is built on the Wix platform and is primarily in Czech language, targeting local visitors or potential clients interested in residential services. The business model likely revolves around property rental or sales, although explicit business details are sparse. The website's technical infrastructure is standard for Wix-hosted sites, utilizing Wix's JavaScript libraries and assets, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and policies. Privacy and cookie policies are absent, indicating low privacy compliance. No contact information or social media links are provided, limiting business credibility and user trust. WHOIS data is unavailable, suggesting privacy protection or registration issues, which impacts trustworthiness. Overall, the site is functional but basic, with room for improvement in transparency, security, and compliance.