High-risk security reports

P

Panevėžio „Lietkabelis“

kklietkabelis.lt

40

Panevėžio „Lietkabelis“ is a Lithuanian basketball club with a professionally maintained website providing comprehensive information about the team, news, schedules, sponsors, and community projects. The site targets basketball fans and stakeholders, offering ticket and merchandise sales through partner platforms. Technically, the site is built on WordPress with modern libraries like jQuery, Bootstrap, and Slick Carousel, and integrates Google Analytics and Klaviyo for marketing and analytics. Security posture is moderate with HTTPS enabled and IP anonymization in analytics, but lacks security headers and privacy/cookie policies. WHOIS data is unavailable, raising some concerns about domain registration transparency. Overall, the website is professional, content-rich, and safe for general audiences, but could improve privacy compliance and security best practices.

K

KK NEPTŪNAS

bcneptunas.lt

40

KK Neptūnas is a professional basketball club based in Lithuania, operating an official website that provides comprehensive information about the team, match schedules, ticket sales, and merchandise. The website targets basketball fans and sports enthusiasts primarily in Lithuania and Europe. The business model revolves around sports entertainment, sponsorships, and fan engagement through digital channels. Technically, the site is built on WordPress with WooCommerce integration, leveraging modern web technologies such as Bootstrap and Owl Carousel for UI components. Google Analytics and Tag Manager are used for visitor tracking with IP anonymization enabled, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced, but visible PHP warnings and lack of security headers indicate areas for improvement. Privacy and cookie policies are absent, which is a compliance gap. Overall, the website is functional and professional but requires backend fixes and enhanced privacy compliance to improve trust and security.

V

VZP ČR

klubpevnehozdravi.cz

43

The website klubpevnehozdravi.cz represents the Klub pevného zdraví, a health benefit club operated by VZP ČR, the largest public health insurance provider in the Czech Republic. It offers registered members various health-related benefits and discounts through partner companies. The site is well-branded with official VZP logos and provides comprehensive information about the club, its partners, and events. The target audience is primarily VZP insured persons and their families. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Google Analytics, and Google Maps API, providing a responsive and user-friendly experience. Security-wise, the site implements GDPR-compliant cookie consent mechanisms and uses HTTPS, but lacks visible advanced security headers. WHOIS data is unavailable, which slightly reduces domain trust, but the official branding and contact details strongly support legitimacy. Overall, the site is professional, secure, and compliant with privacy regulations, serving as a trustworthy resource for its audience.

D

Dekubity

dekubity.eu

49

Dekubity.eu is a Czech healthcare informational portal dedicated to the topic of pressure ulcers (dekubity). It serves both the general public and healthcare professionals by providing educational content, clinical recommendations, and resources related to prevention, care, and treatment of pressure ulcers. The site is supported by multiple healthcare partners and sponsors, indicating a trusted position within its niche. Technically, the website is built on WordPress using Elementor and SEO plugins, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled, though some security headers and explicit privacy policies are missing. The absence of public WHOIS data due to privacy protection is noted but justified given the nature of the site. Overall, the site is professional, trustworthy, and well-positioned as a specialized healthcare resource.

M

Ministr zdraví z. ú.

ministrzdravi.cz

39

Ministr zdraví z. ú. is a Czech non-profit think tank dedicated to improving public health by extending the healthy life expectancy of the Czech population by five years. The organization focuses on data-driven policy recommendations, healthcare system reform, and public awareness. Their website is professionally designed, content-rich, and targets policymakers, healthcare professionals, and the general public. The organization actively engages with its audience through multiple social media channels and transparent donation mechanisms. Technically, the site is built on WordPress with modern plugins for GDPR compliance and analytics integration. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data is a concern for domain legitimacy verification but does not detract from the professional presentation and trust signals on the site.

S

Schubert CZ spol. s r.o.

schubert24.cz

45

Schubert CZ spol. s r.o. is a well-established distributor and exclusive importer of leading healthcare and laboratory brands in the Czech Republic. Operating since 1991 as a subsidiary of the German Schubert Medizinprodukte, the company serves hospitals, clinics, laboratories, and private healthcare practices with a broad portfolio of medical supplies and equipment. Their business model emphasizes rapid supply chain logistics and expert advisory services, positioning them as a trusted partner in the healthcare sector. The website reflects this professional positioning with clear product offerings and contact channels. Technically, the site is built on WordPress with the Divi theme and uses modern web technologies including Yoast SEO for optimization. The site is mobile responsive and well-structured, though some accessibility features could be enhanced. Security posture is solid with HTTPS and no exposed sensitive data, but the lack of configured reCAPTCHA and missing security headers present areas for improvement. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Overall, the domain's WHOIS data confirms legitimacy and long-term presence, supporting trust in the business. Strategic improvements in privacy compliance and security hardening would further strengthen the company's digital maturity and customer trust.

C

COOP MORAVA, s.r.o.

coopmorava.com

44

COOP MORAVA, s.r.o. operates the largest retail grocery network in the Moravia region of the Czech Republic, with over 800 stores under the COOP brand. The company targets general consumers seeking quality products and promotional offers. Their business model focuses on cooperative retail with strong supplier partnerships and customer engagement through recipes and a mobile app. Technically, the website uses a mature but somewhat outdated technology stack including jQuery 1.10.2 and Bootstrap 3, with integrations for Google Maps, Google Tag Manager, and Facebook Pixel. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced but lacks important security headers and uses outdated libraries, which may pose risks. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. WHOIS data is unavailable, which reduces trust but the website's active presence and contact details support legitimacy. Overall, the site is functional and professional but would benefit from improved security and privacy practices.

N

National Bingo Week

nationalbingoweek.co.uk

43

National Bingo Week is a UK-based initiative dedicated to celebrating the game of bingo through a week-long series of events involving both physical bingo clubs and online bingo platforms. The website serves as a central hub for information, event promotion, and community engagement, targeting bingo enthusiasts across the UK. The business model focuses on event promotion and fostering a community around bingo, leveraging partnerships with bingo associations and clubs. The site is positioned as a unifying campaign with growing momentum since its launch in 2021.

Bingo Connect is the official magazine of The Bingo Association Limited, serving as the authoritative news and information source for licensed bingo operators in the United Kingdom. The website provides industry news, features, charity event coverage, and regulatory updates tailored to the bingo sector. It maintains a professional presence with consistent branding and trusted certifications from recognized gambling and responsible gaming bodies. Technically, the site is built on WordPress with a modern plugin ecosystem including Yoast SEO and GDPR compliance tools, ensuring good SEO and privacy adherence. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is well-positioned as a niche media outlet within the UK gambling industry, targeting industry professionals and stakeholders.

The IAU Meteor Data Center website serves as a scientific repository for meteor shower data and meteoroid orbital information under the auspices of the International Astronomical Union. It provides authoritative databases for researchers and amateur astronomers, facilitating access to published meteor shower discoveries and meteoroid orbit data. The site is informational and non-commercial, targeting the astronomy research community. Technically, the website employs a simple and stable technology stack including Bootstrap 3.4.1 and jQuery 3.5.1, hosted likely by a Slovak hosting provider. The site is functional with moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. No CMS or complex backend is evident, reflecting a straightforward static or lightly dynamic site. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which are recommended to enhance security posture. No forms or user input reduce attack surface, but absence of privacy and cookie policies indicates compliance gaps. The WHOIS data shows a consistent domain registration with no privacy protection, appropriate for a scientific entity, though the domain age is recent compared to the long history of the service. Overall, the website is safe, trustworthy, and serves its niche well but would benefit from improved security headers, privacy compliance, and contact transparency to enhance trust and compliance.

S

Slovenská akadémia vied

sav.sk

49

Slovenská akadémia vied (SAV) is a leading Slovak government-affiliated scientific institution focused on basic and applied research, scientific infrastructure, and education. The website serves as a comprehensive portal for researchers, students, and the public, offering news, events, organizational structure, and access to scientific resources. The institution maintains a strong digital presence with official social media channels and provides transparent privacy and cookie policies compliant with GDPR. Technically, the website uses modern libraries such as jQuery and Tiny Slider, integrates Google Custom Search, and implements a cookie consent mechanism via Klaro. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the site is trustworthy, professional, and serves its audience effectively.

SPCCH v ČR, z.s. is a Czech non-profit civic association dedicated to supporting individuals affected by chronic civilization diseases and seniors. With a network of 225 local organizations and over 16,500 members, it provides rehabilitation programs, educational workshops, and community support to improve quality of life and social inclusion. The organization is well-established with a clear mission and physical presence in Prague. Technically, the website uses legacy JavaScript libraries and a custom CMS, with moderate performance and basic mobile optimization. Security posture is limited, with outdated libraries and lack of security headers, posing potential risks. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional but requires modernization and enhanced security and privacy measures to improve trust and compliance.

Č

České ILCO, z.s.

ilco.cz

45

České ILCO, z.s. is a well-established Czech non-profit patient organization dedicated to supporting individuals living with stoma. With over 30 years of experience, it provides education, support, and advocacy for patients, collaborating with healthcare providers and governmental bodies. The website reflects a mature digital presence built on WordPress with the Divi theme, offering comprehensive content and clear navigation tailored to its target audience. Technically, the site employs modern web technologies including Google reCAPTCHA v3 and GDPR-compliant cookie management, ensuring user privacy and security. However, the absence of WHOIS data and missing security headers suggest areas for improvement in transparency and security hardening. Overall, the organization's online presence is professional and trustworthy, supporting its mission effectively.

Č

Česká asociace pro vzácná onemocnění z.s.

vzacna-onemocneni.cz

36

The website represents the Česká asociace pro vzácná onemocnění z.s., a Czech non-profit association dedicated to supporting individuals and organizations affected by rare diseases. It provides information, educational resources, advocacy, and collaboration with medical and European networks. The site is well-structured, professionally designed, and uses modern WordPress technologies including Elementor and Yoast SEO, indicating a mature digital presence. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the site is trustworthy and serves its target audience effectively.

O

Odborový svaz zdravotnictví a sociální péče České republiky

zdravotnickeodbory.cz

48

The website represents the Odborový svaz zdravotnictví a sociální péče České republiky, a Czech trade union organization focused on healthcare and social care workers. It serves as a platform for news, advocacy, member support, and communication with its constituency. The organization is well-established with a history dating back to 1990 and is affiliated with national and international trade union confederations. The website is built on WordPress, leveraging common SEO and analytics tools such as Yoast SEO and Google Tag Manager. Privacy and cookie consent mechanisms are implemented, reflecting compliance with GDPR requirements. However, the absence of WHOIS data for the domain raises some concerns about domain registration transparency. No critical security vulnerabilities were detected, but the site lacks explicit security policies and incident response information. Overall, the site is professional, content-rich, and trustworthy for its intended audience.

P

Profesní a odborová unie zdravotnických pracovníků z.s.

pouzp.cz

45

Profesní a odborová unie zdravotnických pracovníků z.s. is a Czech Republic-based professional and trade union organization representing healthcare workers, primarily nurses. The website serves as an information portal providing news, updates, and resources for its members. The organization positions itself as a national union advocating for healthcare professionals. The website content is professional and targeted at healthcare workers in the Czech Republic, with a clear focus on union activities and member communication. Technically, the website uses a simple but modern stack including jQuery and Slick Carousel for UI elements. The site is mobile optimized and has good SEO practices with proper meta tags and canonical URLs. However, there is no detected CMS or advanced frameworks. Performance is moderate with basic accessibility features. From a security perspective, the site uses HTTPS (as indicated by canonical URL), but no explicit security headers were detected in the provided data. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is lacking as no privacy or cookie policies were found, and no consent mechanisms are implemented. Contact information is clearly provided, but no incident response or security contact details are available. Overall, the website is functional, professional, and trustworthy for its intended audience but would benefit from improved privacy compliance and enhanced security headers to strengthen its security posture and regulatory adherence.

Česká asociace sester, z.s. is a professional nursing association based in the Czech Republic, providing membership services, educational programs, events, and advocacy for nursing professionals. The website serves as an information hub for members and the public, offering news, event registrations, and resources. The organization maintains partnerships with reputable healthcare companies and educational institutions, enhancing its credibility and service offerings. Technically, the website employs standard web technologies including jQuery, Google Analytics, Google Tag Manager, and Google reCAPTCHA for security and analytics. The site is accessible, mobile-optimized, and presents content in Czech with some multilingual options. Security posture is generally good with HTTPS enforced and bot protection via reCAPTCHA, but lacks some security headers and explicit privacy and cookie policies. WHOIS data is unavailable, which limits full domain legitimacy verification. Overall, the site is professional and trustworthy for its intended audience but would benefit from enhanced privacy compliance and security disclosures.

S

SimplyWines | Vína jsou naše srdeční záležitost

simplywines.cz

39

SimplyWines.cz is a Czech Republic based e-commerce platform specializing in wine sales and education. The website targets consumers interested in learning about wine origins, production, and gastronomic culture, positioning itself as a niche retailer with a focus on wine enthusiasts. The site offers a wine catalog and online ordering capabilities, supported by clear contact information and a professional design. Technically, the site employs modern web technologies including Google Analytics, Facebook Pixel, and Hotjar for analytics and marketing, and uses HTTPS to secure communications. However, the absence of explicit privacy and cookie policies and lack of WHOIS transparency slightly reduce trustworthiness. Security posture is moderate with room for improvement in security headers and vulnerability disclosure mechanisms. Overall, the site is functional, professional, and targets a mature audience interested in wine products.

D

DigiDay Czech s.r.o.

digiday.cz

48

DigiDay Czech s.r.o. is a Czech-based digital solutions company specializing in electronic notice boards, digital panels, LED screens, web development, content creation, and online marketing. The company targets businesses, municipalities, and cities, offering tailored digital products and services. With over 8 years of market presence and more than 830 satisfied clients, DigiDay holds a solid position in the Czech digital technology sector. The website reflects a professional and consistent brand image with comprehensive service offerings and client testimonials. Technically, the site is built on WordPress with modern libraries and plugins, including GDPR-compliant cookie management and Google reCAPTCHA for security. Security posture is good with HTTPS and some best practices, though explicit security policies and incident response contacts are absent. Overall, the site is well-optimized for SEO, mobile-friendly, and provides clear contact information, supporting trust and credibility.

L

Leastex, a.s.

leastex.cz

49

Leastex, a.s. is a well-established Czech company specializing in comprehensive laundry and textile rental services, primarily serving healthcare and industrial sectors. Founded in 1992, it operates as part of the larger TSC Group, which encompasses multiple subsidiaries focused on cleaning, facility management, and related services. The company leverages modern RFID technology to provide efficient textile management and detailed tracking for clients. The website reflects a professional and modern digital presence with multimedia content and clear navigation. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and reCaptcha for form security. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though it lacks some advanced security headers and explicit incident response information. The absence of WHOIS data limits domain registration trust assessment, but the website content and business information appear legitimate and consistent with a professional service provider. Privacy and cookie policies are present and linked to the parent group, indicating compliance with GDPR. Contact information is comprehensive, including physical addresses and a secure contact form. Overall, Leastex, a.s. presents a trustworthy and professional business with a strong market position in the Czech Republic's healthcare and industrial laundry service sectors. Security and compliance practices are good but could be enhanced with additional policies and security headers.

S

SATUM CZECH s.r.o.

satum.cz

49

SATUM CZECH s.r.o. is a well-established insurance brokerage company operating primarily in the Czech Republic, serving various sectors including healthcare, transportation, industry, and finance. The company positions itself as one of the largest insurance brokers in the region, offering risk analysis, insurance brokerage, claims handling, and compliance services. Their website reflects a professional business model targeting corporate clients with industry-specific insurance solutions. Technically, the website employs a moderate technology stack including jQuery, Google Analytics, and tracking tools, with a responsive design suitable for mobile users. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, but lacks advanced security headers and uses an outdated jQuery version, which could pose risks. The absence of WHOIS data is a notable concern, impacting domain trustworthiness despite the professional presentation and clear contact information. Overall, the website is functional, professional, and compliant with GDPR, but improvements in security and transparency are recommended.

WebConsult.cz - Internet & Marketing s.r.o. operates the Ibis CMS, a proprietary content management system designed for easy and modular website management. The company targets businesses and individuals seeking a reliable and extensible CMS solution. The website demonstrates a moderate digital maturity with integration of common web technologies such as jQuery, Google Analytics, and Facebook SDK, though some libraries are outdated. Security posture is adequate with HTTPS and cookie consent mechanisms implemented, but lacks advanced security headers and explicit security policies. Overall, the site is professional and trustworthy, with good content quality and user experience.

W

WebConsult.cz - Internet & Marketing s.r.o.

webconsult.cz

45

WebConsult.cz - Internet & Marketing s.r.o. is a Czech Republic based technology company specializing in custom web application development and proprietary platforms such as Ibis CMS, Merkur eShop, and Henry system. With over 27 years of experience, they serve both B2B and B2C clients, emphasizing tailored solutions to improve client business efficiency. The website presents a professional image with client testimonials and a broad portfolio of customers, indicating a stable market position. Technically, the site uses standard web technologies including jQuery and custom JavaScript, with moderate performance and good mobile optimization. However, the absence of privacy and cookie policies, lack of security headers, and missing WHOIS data reduce the overall security and compliance posture. No WAF or blocking mechanisms were detected, allowing full content access. Strategic improvements in security practices and privacy compliance are recommended to enhance trust and regulatory adherence.

W

Wendt & Kühn KG

wendt-kuehn.nl

44

Wendt & Kühn KG is a well-established German company specializing in handcrafted wooden figures and music boxes, with a heritage dating back to 1915. The company targets collectors and enthusiasts of traditional craftsmanship, offering a broad assortment of collectible figures, seasonal decorations, and gifts. Their website, localized for the Netherlands, is professionally designed using TYPO3 CMS and incorporates modern web technologies and cookie consent mechanisms. The site is accessible, mobile-optimized, and provides multilingual support through alternate hreflang links. Security posture is solid with HTTPS and cookie consent, though it lacks explicit published security policies or incident response contacts. Overall, the website reflects a trustworthy and credible business with a strong brand presence in the niche market of handcrafted collectibles.

W

Wendt & Kühn KG

wendt-kuehn.us

44

Wendt & Kühn KG is a well-established German manufacturer specializing in handcrafted wooden figurines and collectibles, with a history dating back to 1915. The company targets collectors and gift buyers worldwide, offering a diverse assortment of finely crafted products including seasonal decorations and limited edition items. Their digital presence includes multiple localized websites and a customer magazine, reflecting a mature business model focused on quality and tradition. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and integrates tracking and consent management tools to comply with privacy regulations. The site is mobile-optimized and provides a good user experience with clear navigation and multilingual support. However, some security best practices such as explicit security headers are not evident, and WHOIS data for the domain is unavailable, which slightly impacts trust. The security posture is generally good with HTTPS enforced and cookie consent implemented, but the absence of detailed security policies and incident response information suggests room for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is professional and trustworthy, though domain registration transparency should be enhanced. Strategically, the company should focus on improving domain registration visibility, implementing comprehensive security headers, and publishing clear security and incident response policies to strengthen trust and compliance.

W

Wendt & Kühn

wendt-kuehn.com

48

Wendt & Kühn is a well-established German manufacturer specializing in handcrafted wooden figurines and collectible items, with a heritage dating back to 1915. The company targets collectors and gift buyers globally, offering a diverse assortment of products including seasonal decorations and exclusive editions. Their website is professionally designed using TYPO3 CMS, featuring multilingual support and a customer magazine subscription service. Technically, the site employs modern frontend libraries and implements cookie consent mechanisms, reflecting a moderate to good level of digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data limits domain registration trust verification, but the overall professional presentation and consistent branding support legitimacy. Privacy compliance is well addressed with clear policies and consent management. Overall, the site presents a trustworthy and user-friendly experience aligned with the company's artisanal brand identity.

P

Purkyňův nadační fond

purkynuvfond.cz

46

Purkyňův nadační fond is a Czech non-profit foundation dedicated to supporting the young generation of doctors and advancing the future of Czech medicine. The foundation organizes seminars, publication competitions, and awards for scientific medical works, positioning itself as a recognized entity within the Czech medical community. The website content is well-structured, professionally designed, and targeted primarily at medical professionals, researchers, and students in the Czech Republic. Technically, the website is built on WordPress with common plugins such as Contact Form 7 and WPML for multilingual support. It uses modern web technologies including Google reCAPTCHA v3 for form security and Google Analytics for visitor tracking. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate with no major issues detected. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, no explicit security headers were detected, and there is no visible security policy or incident response information. The absence of WHOIS registration data is a concern for domain legitimacy verification, although the website content and structure suggest a legitimate organization. Privacy and cookie policies are present and GDPR compliant, including consent mechanisms. Overall, the website presents a low-risk profile with good content quality and technical implementation. The main risk lies in the lack of WHOIS transparency and some missing security best practices. Strategic recommendations include improving security headers, verifying domain registration, and adding explicit security and incident response policies.

V

vianovis GmbH - web mapping solutions

vianovis.de

48

vianovis GmbH is a specialized German technology company providing advanced web mapping solutions primarily for municipalities, cities, counties, and regional authorities. With over 30 years of experience, they offer a comprehensive geoportal platform (touvia.MAPS) including data management, interactive maps, citizen participation tools, and full hosting and support services. Their market position is strong within Germany, serving over 200 customers with scalable solutions tailored to different sizes of communities and organizations. The website reflects a professional and trustworthy business with clear pricing and customer testimonials. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Slider Revolution, leveraging HTML5 video and WebGL for interactive content. Hosting is provided by kasserver.com, and the site is well optimized for SEO and mobile devices. Security posture is good with HTTPS, SSL certificates, and hCaptcha for form protection, though some security headers could be improved. Privacy compliance is robust with a clear privacy and cookie policy and GDPR consent mechanisms. Overall, the site and business demonstrate a mature digital presence with strong security and privacy practices, suitable for their target audience. No critical vulnerabilities or blocking mechanisms were detected, indicating a reliable and accessible platform.

V

vianovis GmbH - web mapping solutions

touvia.de

48

vianovis GmbH is a specialized technology company focused on delivering advanced web mapping solutions primarily for municipalities, cities, and regions in Germany. With over 30 years of experience, the company offers a comprehensive suite of geoportal services including touvia.MAPS, touvia.geoCMS, and touvia.komMIT, enabling clients to create interactive, customizable online maps with integrated data management and citizen participation features. The company positions itself as a full-service provider with personalized support and transparent pricing, serving over 200 customers nationwide. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, leveraging WebGL for real-time data visualization. Hosting is likely provided by kasserver.com, and the site employs HTTPS with hCaptcha for form security. The site is well-optimized for SEO and mobile devices, though some security headers could be improved. Security posture is solid with HTTPS and spam protection, but lacks explicit security policies or incident response contacts. Privacy compliance is good, featuring GDPR-compliant cookie consent and a privacy policy. No critical vulnerabilities or suspicious activities were detected. Overall, vianovis GmbH presents a professional, trustworthy, and technically competent online presence aligned with its business focus. Strategic improvements in security headers and formal security policies would enhance its security maturity and trustworthiness further.

L

lumipöllö®

lumipollo.com

47

lumipöllö® is a small boutique manufacturer and retailer specializing in unique headwear products, operating primarily through an e-commerce webshop and supported by a physical boutique manufacturing presence. The website reflects a niche market positioning targeting consumers interested in unique fashion headwear. The business appears to be established since 2012, consistent with domain registration data, and operates primarily in Germany. The digital presence is basic but functional, with limited interactive features and a focus on product presentation. Technically, the website uses older JavaScript libraries such as jQuery 1.11.0 and Lightbox, with styling through CSS and Google Fonts. Hosting and domain registration are managed by reputable providers, but there is no evidence of advanced CMS or modern frameworks. Performance and mobile optimization are basic, and SEO features are minimal. Security practices show room for improvement, including the absence of DNSSEC, lack of security headers, and use of outdated libraries that may expose vulnerabilities. Security posture is moderate with HTTPS assumed but no visible security headers or cookie consent mechanisms, which impacts GDPR compliance. No incident response or vulnerability disclosure information is provided. The website does not expose sensitive data but could benefit from enhanced security controls and privacy compliance features. Overall, the risk is moderate with recommendations to update technical components and improve compliance. Strategically, the company should focus on modernizing its technical stack, implementing security best practices, and enhancing privacy compliance to build greater trust with customers and meet regulatory requirements. The current digital maturity supports basic e-commerce operations but limits scalability and security resilience.

L

LÖWEN PLAY

loewen-play-unternehmen.de

46

LÖWEN PLAY operates as a gaming and entertainment company based in Germany, offering both physical gaming locations and a state-licensed online gaming platform. The website targets general audiences interested in gaming, career opportunities, and corporate social responsibility. The company maintains a professional market position with investor relations and social media presence, indicating a medium-sized enterprise with consistent branding and trust signals. Technically, the website is built on WordPress with common plugins for cookie management and UI enhancements, leveraging jQuery and Font Awesome for frontend functionality. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers are not explicitly detected and no incident response contacts are provided. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent banner implemented via Borlabs Cookie. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is safe, professional, and trustworthy, with no adult or NSFW content detected.

T

TonyBet Group

tonybet.group

47

TonyBet Group is an established international online betting and iGaming company founded in 2011, offering a comprehensive range of products including sportsbook, online casino, live casino, and online games. The company holds multiple licenses across key jurisdictions such as the UK, Spain, Canada, Australia, and several European countries, positioning itself as a reputable player in the regulated gambling market. The website reflects a professional corporate presence with a focus on responsible gaming and compliance. Technically, the site is built on WordPress with modern JavaScript libraries and SEO optimizations, delivering a good user experience with mobile responsiveness and clear navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit incident response policies could enhance trust. WHOIS data is privacy protected, which is common in this industry, but the business legitimacy is supported by visible licensing and social media presence. Overall, the site is safe, professional, and compliant with relevant regulations, targeting adult online gaming customers.

Development4Project, s. r. o. is a Czech consulting company specializing in strategic project development, marketing analysis, and web services. The company targets businesses and entrepreneurs seeking to optimize their marketing efforts and internal processes. Their market position is that of a niche consulting firm with a strong focus on data-driven analysis and practical solutions. The website reflects a professional and consistent brand image with clear service offerings and customer testimonials that enhance trust. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, indicating a modern and maintainable infrastructure. It employs Google Analytics and Google Tag Manager for analytics and tracking, alongside a compliant cookie consent mechanism powered by CookieYes. The site is hosted likely via Active24, consistent with the WHOIS data. Performance and mobile optimization are good, though accessibility is basic. From a security perspective, the site uses HTTPS and has implemented cookie consent with detailed categories, including Google reCAPTCHA cookies for bot protection. However, no explicit security headers or incident response policies are found, and no vulnerability disclosure mechanisms are present. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic recommendations include enhancing security headers, adding incident response contact information, and implementing a vulnerability disclosure policy to further strengthen security posture.

D

DOVISTA A/S

dovista.dk

48

DOVISTA A/S is a leading European manufacturer specializing in facade windows and doors, operating through a group of 12 distinct brands with strong local market presence. The company is headquartered in Denmark and owned by VKR Holding A/S. Their business model focuses on manufacturing and distributing high-quality window and door products across multiple European countries, serving both B2B and B2C markets. The website reflects a mature and professional digital presence with comprehensive brand information and sustainability commitments. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good performance and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and explicit incident response information. Overall, the domain registration and WHOIS data support the legitimacy and stability of the business.

M

Multibeton CZ, s.r.o.

multibeton.cz

45

Multibeton CZ, s.r.o. is a Czech company specializing in modern floor heating and cooling systems, leveraging a modular system called MULTIBETON®. The company targets residential, commercial, and industrial property owners and builders, offering installation, training, and partnership programs. The website reflects a well-established business with a history linked to the parent company MULTIBETON® GmbH dating back to 1963, while the domain itself was registered in 2013. Technically, the website uses a custom CMS with modern frontend technologies including jQuery, Bootstrap, and Google reCAPTCHA for security. The site is mobile responsive and SEO optimized with good content quality and clear navigation. Security posture is solid with HTTPS and form protections, though some security headers and explicit policies could be improved. Privacy compliance is strong with GDPR-aligned cookie consent and a detailed privacy policy. Overall, the website is professional, trustworthy, and well-maintained, with no signs of blocking or malicious content.

Conmetall spol. s r.o. is a Czech-based trading company specializing in hand tools, garden equipment, sanitary technology, and fastening materials, serving both B2B and retail customers. The company is part of the WÜRTH group since 1997, indicating a strong market position and access to extensive know-how. Their website presents a professional and consistent brand image with clear navigation and relevant content tailored to their target audience in the Czech Republic and broader European market. Technically, the website uses modern JavaScript libraries such as jQuery and Bootstrap, with a moderate performance profile and good mobile optimization. Security-wise, the site implements cookie consent mechanisms and GDPR compliance but lacks visible security headers and WHOIS data, which slightly reduces trust. Overall, the website is functional, professional, and compliant with privacy regulations, though improvements in security headers and domain registration transparency are recommended.

G

Guascor North America

d-r-c.org

32

Guascor North America is a division of Grupo Guascor specializing in industrial and marine energy solutions, including diesel and gas engines, cogeneration plants, and renewable energy technologies. The company positions itself as a leader in alternative fuels and renewable energy sectors with a history dating back to 1966. Their target audience primarily includes industrial and marine sector clients seeking specialized energy solutions. Technically, the website relies on outdated technologies such as Flash and an old jQuery version, lacks HTTPS, and does not implement modern security headers or privacy policies, indicating a low digital maturity level. Security posture is weak due to the absence of HTTPS and use of deprecated technologies, exposing the site to potential vulnerabilities. The WHOIS data is unavailable, which raises concerns about domain legitimacy and trustworthiness. Overall, the website provides relevant business content but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and user safety.

OPA Group s.r.o. is a Czech-based company specializing in pharmaceutical trade with a focus on allergy-related healthcare products in the Czech and Slovak markets. The company offers comprehensive services including product registration, website creation, logistics, and distribution, and acts as the exclusive importer of notable brands such as NEILMED, NASALEZE, and OCULOCIN. Their business model combines wholesale distribution with e-commerce through a dedicated online shop. Technically, the website is built on WordPress using the Divi theme and Yoast SEO, hosted by WEDOS, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks advanced security headers and formal privacy or cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy but could improve privacy compliance and security hardening.

HealthCare Institute o.p.s. is a Czech non-profit organization focused on improving healthcare quality and efficiency through research, surveys, and conferences. The website presents a professional and content-rich platform targeting healthcare professionals, hospital management, and health insurance companies primarily in the Czech Republic and Slovakia. The organization has a strong market position with over 20 years of experience and numerous partnerships with healthcare institutions and companies. Technically, the website uses modern technologies such as jQuery, Google Tag Manager, and reCAPTCHA, and is built on the Ibis CMS platform. It is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses reCAPTCHA for form protection, but lacks visible security headers and explicit security policies. Privacy compliance is partially addressed with a cookie consent banner but lacks a clear privacy policy page. Overall, the website is trustworthy and professional but could improve in security and privacy transparency.

S

Spolek mediků českých

spolekmedikuceskych.cz

42

Spolek mediků českých is a Czech Republic-based non-profit community organization established in 1863 that supports medical students by providing networking opportunities, organizing events, and offering study support and facilities. The website serves as a digital hub for this community, featuring event calendars, membership information, and social media links. The organization holds a respected position within its niche, leveraging its long-standing tradition to maintain community engagement. Technically, the website is built on WordPress 6.8.3 with common plugins such as Jetpack and CoBlocks, and integrates Google services like Fonts and Calendar. The site is hosted on Czech providers with HTTPS enforced, ensuring secure connections. Mobile optimization and accessibility are adequate, though SEO and performance could be enhanced. The site lacks comprehensive privacy and cookie policies, which impacts compliance. From a security perspective, the site benefits from HTTPS but lacks visible security headers and incident response information. No forms or sensitive data collection points were detected on the homepage, reducing immediate risk exposure. Tracking is minimal, limited to Jetpack analytics. Overall, the security posture is moderate but could be improved by implementing best practices and transparency in privacy and incident response. The overall risk is low given the nature of the site and its content, but strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and regulatory adherence.

W

Wendt & Kühn KG

wendt-kuehn.de

45

Wendt & Kühn KG is a well-established German manufacturer specializing in handcrafted wooden figures and Christmas decorations, with a history dating back to 1925. The company maintains a strong market position in the niche of collectible wooden art, serving collectors and gift buyers worldwide through its own stores, authorized dealers, and an online marketplace. The website reflects a mature digital presence built on TYPO3 CMS, featuring rich content, multilingual support, and customer engagement tools such as an official app and a customer magazine. Technically, the site is hosted by Alfahosting and employs modern web technologies with good performance and mobile optimization. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Overall, the website projects high professionalism and trustworthiness, aligned with the company's heritage and business model.

M

Montanregion Krušné hory

montanregion.cz

42

Montanregion Krušné hory is a cultural heritage organization managing a UNESCO World Heritage mining region in the Czech Republic. The website serves as an informational and tourism portal, offering details about the mining landscape, component parts, associated objects, and tour bookings. The site targets tourists, researchers, and cultural enthusiasts interested in mining history and heritage. Technically, the website is built on Joomla CMS with modern frontend libraries such as jQuery, Bootstrap, and Owl Carousel, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS enabled and CSRF tokens in forms, but lacks published privacy and cookie policies and security headers, which are areas for improvement. Overall, the website is professional, trustworthy, and well-branded, though it could enhance compliance and security transparency.

F

Förderverein Montanregion Erzgebirge e.V.

fv-montanregion-erzgebirge.de

48

Förderverein Montanregion Erzgebirge e.V. is a small non-profit organization dedicated to promoting and supporting the mining heritage of the Erzgebirge region in Germany. The website serves as a platform to communicate their projects, sponsorship opportunities, and community engagement activities. Their market position is regional and cultural, targeting local stakeholders and heritage enthusiasts. Technically, the website is built on WordPress using the Enfold theme, with modern web technologies and a cookie consent mechanism that supports GDPR compliance. Security posture is adequate with HTTPS enforced and cookie consent blocking, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it lacks explicit incident response or vulnerability disclosure information.

The website at ptstaging.eu is currently inaccessible beyond a minimal error page indicating 'file not found'. There is no meaningful content, metadata, or business information available to analyze. The domain is registered with Safenames Ltd, a reputable registrar, but lacks detailed registrant data or visible business presence. Technically, the site shows no evidence of HTTPS, security headers, or modern web technologies. The security posture is weak due to the absence of content and configuration. Overall, the site appears to be a staging or placeholder domain without active deployment. Strategic recommendations include deploying actual website content, implementing HTTPS, adding privacy and cookie policies, and providing clear contact and business information to improve trust and compliance.

B

Bacta

bacta.org.uk

46

Bacta is a well-established UK trade association representing the amusement and land-based low-stake gambling entertainment industry. Founded in 1998, it holds a leading market position, providing advocacy, membership services, and industry events such as the EAG Expo. The website reflects a professional and consistent brand image targeting industry stakeholders and members. Technically, the site is built on WordPress with Elementor and uses modern plugins for SEO and membership management. It is hosted by GoDaddy and employs HTTPS with a cookie consent mechanism, demonstrating good privacy compliance. Security posture is solid with no critical vulnerabilities detected, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

The website at yfdnza.com presents minimal accessible content, primarily consisting of hidden tracking pixels and an embedded iframe from an external domain. There is no visible business information, contact details, or user-facing content, indicating the site may be a placeholder or used for advertising/tracking purposes rather than a legitimate business presence. The domain WHOIS data is highly suspicious, showing a creation date in the future (2025-07-22) and listing the registrar as PDR Ltd., a domain registrar, rather than an end-user or business entity. This inconsistency undermines the trustworthiness of the domain and website. Technically, the site lacks security best practices such as DNSSEC, security headers, and visible HTTPS enforcement. No privacy or cookie policies are present, and no GDPR compliance indicators are found. Overall, the site exhibits a low level of digital maturity and security posture, with significant gaps in transparency and compliance.

M

META, o.p.s.

meta-ops.eu

46

META, o.p.s. is a Czech non-profit organization dedicated to supporting the educational development of young migrants, particularly children of foreigners, to facilitate their successful integration into society. The organization operates a website primarily in Czech, offering information about its mission and encouraging volunteer involvement in tutoring and educational support. The site positions itself as a niche player in the education and migrant support sector within the Czech Republic. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and Google Fonts, hosted by a reputable provider (WEDOS Internet, a.s.). It employs standard web technologies and plugins, including Google Analytics and Facebook SDK for social media integration and analytics. Security-wise, the site uses HTTPS and some best practices but lacks explicit security policies, vulnerability disclosures, and comprehensive security headers. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the website is functional, professionally designed, and trustworthy but could improve in privacy and security transparency.

Etnickakuchyne.cz is a niche food blog and cooking course platform focused on ethnic cuisine, primarily targeting families with children interested in exploring traditional recipes from various countries. The website offers recipes and organizes cooking courses led by native cooks, providing an educational and cultural experience. The business operates on a small scale, with content and courses as its main offerings. Technically, the site is built on WordPress with common plugins and uses Active24 as its hosting provider. It employs cookie consent mechanisms and Google Analytics for tracking, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks published security policies and incident response information. Privacy compliance is partial, with no explicit privacy policy or terms of service pages found. Overall, the site is functional, professionally designed, and trustworthy, but could improve compliance and security transparency.

R

Refufest 2025

refufest.com

44

Refufest is a Czech Republic-based non-profit festival organization focused on social themes such as courage, resilience, and responsibility. The website promotes the 2026 edition of the festival, featuring workshops, a fair of non-profit organizations, and cultural events including music performances. The event is organized by INBÁZE, a partner organization. The website is built on WordPress using Elementor and related plugins, with a modern and responsive design that supports good user experience and SEO optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit privacy policy and terms of service pages, and could benefit from additional security headers and incident response information. Overall, the site is trustworthy and professionally maintained, targeting community members and social activists.