Medium-risk security reports

oneAVteam is a Czech-based audiovisual rental and event production company operating multiple professional studios in Prague and serving an international clientele. The company positions itself as the largest audiovisual rental group in Central Europe, offering services including AV rental, event production, digital events, and conference solutions. The website reflects a professional business with clear service offerings and partnership references, such as Hilton Hotels Prague. Technically, the website is built on WordPress, uses common libraries like jQuery, and integrates marketing and analytics tools such as Facebook Pixel and Google Tag Manager. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a cookie policy and consent mechanism present but no explicit privacy policy or terms of service pages found. Overall, the website is accessible, safe, and professionally presented, though improvements in security and privacy documentation are recommended.

Město Úvaly operates an official municipal website serving the citizens, visitors, and investors of the town of Úvaly in the Czech Republic. The site provides comprehensive information about municipal services, news, events, public tenders, and interactive resources. It targets local residents and stakeholders, offering an online citizen zone for convenient service payments and notifications. The website is built on WordPress CMS with a modern tech stack including Bootstrap and jQuery, and integrates Google Analytics and Google Translate for analytics and multilingual support. The design is professional, mobile-optimized, and provides clear navigation and relevant content. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. WHOIS data is unavailable, likely due to registry restrictions, which slightly impacts trust but the official nature of the site and consistent branding support legitimacy. Overall, the site is a reliable government portal with moderate technical maturity and good privacy compliance.

Mailänder Consult GmbH is a well-established German engineering consultancy specializing in transportation, environmental planning, and construction project management. With over 35 years of experience and multiple offices in Karlsruhe, Frankfurt/Main, and Stuttgart, the company offers comprehensive consulting, planning, and construction supervision services. Their website reflects a professional and consistent brand image, targeting business and public sector clients in relevant industries. Technically, the site is built on the ProcessWire CMS with modern frameworks like UKit and integrates consent management and tracking tools responsibly. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the company demonstrates strong business credibility and digital maturity.

AUTOCOMMERCE, d.o.o. is a medium-sized Slovenian company acting as the official general representative of Daimler Truck AG brands including Mercedes-Benz Trucks, Setra, Omniplus, Unimog, and Fuso. The company focuses on sales, servicing, and parts supply for heavy trucks, specialized vehicles, and buses, targeting transport companies, public transport providers, and public sector clients. The website is professionally designed, well-structured, and localized in Slovenian, reflecting a strong brand alignment with Daimler Truck AG. Technically, the site uses Adobe Experience Manager CMS, integrates modern consent management (Usercentrics), and employs Matomo for analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates high business credibility and good privacy compliance, supporting trust and user engagement.

Smart Fuel Pass operates a digital marketplace platform that integrates complex mobility services including EV charging, fossil fuel services, and related mobility solutions. The platform connects customers and suppliers, offering a unified payment and service experience. The company positions itself as a key player in the energy and transportation sectors, targeting EV users and charging point operators with a comprehensive suite of services such as tariff management, consolidated invoicing, and fleet management. The website reflects a medium-sized business founded in 2020, with a professional and consistent brand presence supported by a partner payment processor, Ultima Payments. Technically, the website is built on WordPress using the Elementor framework, leveraging modern web technologies and Google Analytics for user insights. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is adequate with HTTPS enforced and domain transfer protections in place, but lacks DNSSEC and explicit security headers. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data. However, it lacks dedicated security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Overall, the website is professional, trustworthy, and safe for general audiences, with room for improvement in security hardening and transparency. The risk assessment indicates a low risk profile with no signs of malicious activity or content safety concerns. Strategic recommendations include enabling DNSSEC, publishing security policies, and implementing security headers to strengthen defenses and compliance posture.

Morek CZ s.r.o. is a medium-sized company operating in the energy sector, specializing in electrical components and electric vehicle charging solutions. With over 20 years of experience, the company has established a strong market presence in Europe, targeting B2B customers in the electrical industry. Their website reflects a professional and consistent brand image, offering multilingual support and comprehensive product information. Technically, the site is built on WordPress with modern technologies and integrates essential marketing and analytics tools such as Google Analytics and Facebook Pixel. The presence of a detailed cookie consent mechanism demonstrates good privacy compliance. Security posture is solid with HTTPS enforced and Cloudflare Bot Management in place, though explicit security policies and incident response contacts are absent. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.

MTS – Modern Technology Systems is a Slovakian company established in 1996 specializing in helping manufacturing firms innovate their production processes through modern and intelligent technologies. The company targets manufacturing businesses seeking automation and technological advancement. Their website reflects a mature digital presence built on WordPress, incorporating modern web technologies and compliance tools such as Cookiebot for GDPR adherence. The site features a professional design with clear navigation and relevant content tailored to their B2B audience. Security measures include HTTPS enforcement, reCAPTCHA integration, and a comprehensive cookie consent mechanism, indicating a strong commitment to user privacy and data protection. No critical vulnerabilities or blocking mechanisms were detected, and the WHOIS data aligns well with the company's stated history and location, supporting legitimacy.

Megger Industrial Reliability is a division of Megger, a global manufacturer specializing in vibration monitoring and predictive maintenance solutions for manufacturing, utilities, and infrastructure sectors. Their business model combines hardware, AI-powered software, and expert co-engineering services to transform maintenance into a strategic advantage, reducing downtime and extending asset life. The website is professionally designed using Drupal 10, with modern technologies and multimedia content that enhance user experience and engagement. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. Security posture is strong with HTTPS and no visible vulnerabilities, though security headers and incident response information could be improved. WHOIS data is unavailable, which slightly reduces transparency but does not detract from the overall legitimacy indicated by the website content and branding. Overall, the site demonstrates a mature digital presence with good technical and business credibility.

AVO Diagnostic Services is a specialized provider of diagnostic laboratory services focusing on transformer oil testing and electrical equipment diagnostics. With over 30 years of industry experience, the company operates multiple accredited laboratories across the U.S., Canada, and Mexico, serving utility companies and industrial clients. Their service portfolio includes advanced oil testing, equipment diagnostics, outsourced laboratory services, and a secure customer portal for asset management data. The company positions itself as a trusted partner in electrical system reliability and risk reduction. Technically, the website is built on WordPress with modern web technologies including jQuery, Google Analytics, and Google Tag Manager. The site is mobile-optimized and features good SEO practices. However, some security best practices such as security headers and explicit cookie consent mechanisms are missing. The presence of a tracking pixel from a less-known domain (osdrtb.net) suggests a need for further scrutiny. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure. The lack of WHOIS registration data is a notable concern, reducing trustworthiness despite the professional web presence. No explicit security or incident response policies are publicly available, indicating room for improvement in transparency and compliance. Overall, AVO Diagnostic Services presents a professional and credible business front with strong industry positioning but should address WHOIS transparency and enhance security and privacy compliance to strengthen trust and reduce risk.

AVO Training Institute is a well-established provider of electrical safety and maintenance training with over 60 years of experience. The company offers a variety of training formats including in-person, virtual, and onsite courses, targeting professionals in utilities and industrial sectors worldwide. The website reflects a professional and consistent brand image, supported by accreditations such as IACET and partnerships with NETA, positioning AVO as a trusted leader in its niche. Technically, the website is built on Drupal 10 and leverages modern analytics and marketing tools like Google Tag Manager and Hotjar. The site is mobile-optimized, accessible, and provides clear navigation and content relevant to its audience. However, some security best practices such as implementing security headers are missing, and WHOIS data for the domain is unavailable, which slightly impacts trust. From a security perspective, the site uses HTTPS and has a robust cookie consent mechanism, indicating good privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contacts suggests room for improvement in transparency and readiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving its business purpose effectively. The main risk lies in the missing WHOIS data which should be investigated further to ensure domain legitimacy and ownership clarity.

DK - DENT s.r.o. is a Slovak company specializing in the sale and servicing of dental equipment, representing local manufacturers CHIRANA Medical and DIPLOMAT DENTAL. The company has over 20 years of experience servicing dental offices in Slovakia, offering a range of products including dental units, compressors, suction devices, and dental tools. The website serves as a professional portal showcasing their product portfolio and services, targeting dental professionals and clinics in Slovakia. Technically, the website is built on Joomla CMS version 5.3.3, running on PHP 8.2.29 with MariaDB backend, and uses modern web technologies including jQuery and FontAwesome. The site is served over HTTPS with DNSSEC enabled, indicating a secure baseline infrastructure. Cookie consent mechanisms are implemented, supporting GDPR compliance, although explicit privacy policy and terms of service pages are not found. Security posture is good but could be improved with additional HTTP security headers and more visible compliance documentation. Overall, the website is professional, well-structured, and trustworthy, with moderate performance and good mobile optimization.

Performance iN Lighting Deutschland is a professional lighting company specializing in interior and exterior lighting projects with over 40 years of experience. The website targets professional clients seeking lighting solutions and project development services in Germany. The digital infrastructure includes modern web technologies, Google Analytics, Google Tag Manager, and Cookiebot for cookie consent management, reflecting a mature digital presence. Security posture is generally good with HTTPS enforced and privacy compliance mechanisms in place, though explicit security headers and incident response policies are absent. The lack of WHOIS registration data raises concerns about domain legitimacy, which should be addressed to enhance trust. Overall, the website is professional and functional but could improve transparency and security documentation.

Systech Group is a Czech-based company specializing in Industry 4.0 solutions, focusing on automation technologies such as automated vertical storage systems, autonomous guided vehicles, and cleaning robots. The company positions itself as an innovative partner helping industrial and manufacturing companies transition to modern, efficient processes. Their website reflects a professional and consistent brand image, targeting B2B clients in the Czech and Slovak markets. Technically, the site is built on Joomla CMS with modern frameworks and includes embedded multimedia content to showcase products. Security posture is solid with HTTPS, CSRF protections, and GDPR-compliant cookie consent, though some security headers and incident response details could be improved. Overall, the site is trustworthy, well-structured, and compliant with privacy regulations, supporting the company's credibility and market presence.

VT centrum 11 s.r.o. operates a professional driving school with multiple branches in Prague and Český Brod, offering a wide range of driver training services including motorcycle, car, truck, bus, and tractor licenses, as well as professional driver certifications and requalification courses. The business targets individuals seeking driving education and professional driver qualifications, positioning itself as a reputable local provider with partnerships supporting free or subsidized training. The website is well-structured, professionally designed, and provides comprehensive information about services, locations, and contact details, supporting a positive user experience and trustworthiness. Technically, the website is built on WordPress, leveraging modern web technologies such as jQuery, Google Tag Manager, Facebook SDK, and Cloudflare Turnstile for security. It demonstrates good mobile optimization, SEO practices, and performance. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Analytics and marketing tools are used responsibly with user privacy respected through granular cookie consent. From a security and compliance perspective, the site includes a comprehensive privacy and cookie policy consistent with GDPR requirements. However, no explicit security policy or incident response contact is published. WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. No suspicious patterns or vulnerabilities were detected in the analysis. Overall, VT centrum 11 s.r.o. presents a credible, professional, and secure online presence aligned with its business objectives. Strategic improvements in security headers and incident response transparency could further enhance trust and compliance.

Toulcův dvůr, z.s. is a Czech non-profit ecological education center established in 2001, located in Prague. It offers environmental education and community services including events, bio food sales, accommodation, and ecological counseling. The website reflects a well-established local organization with a focus on ecological awareness and education for all generations. Technically, the website uses modern web technologies such as Google Fonts, Google Analytics, Facebook SDK, and reCAPTCHA, hosted on Forpsi servers. The site is accessible via HTTPS and shows moderate performance and good mobile optimization. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the organization. Recommendations include publishing privacy and cookie policies, enhancing security headers, and providing clear contact information for security incidents.

Tullamore D.E.W. is a well-established Irish whiskey brand with a strong online presence showcasing its range of triple distilled blended Irish whiskeys, cocktail recipes, and brand heritage. The website targets adult consumers interested in premium whiskey products and related experiences. Technically, the site is built on the SilverStripe CMS platform and integrates modern analytics and marketing tools such as Google Tag Manager, Google Analytics, and Facebook Pixel. It demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, the site enforces HTTPS, employs security headers, and uses a cookie consent mechanism, though it lacks a publicly available security policy or incident response information. The absence of WHOIS data is notable but does not detract significantly from the site's legitimacy given its professional presentation and consistent branding. Overall, the website is mature, secure, and compliant with privacy regulations, serving its business purpose effectively.

FUJIFOTO.CZ operates as a specialized retail e-commerce platform focused on Fujifilm photographic equipment and accessories, serving primarily the Czech Republic market. The website offers a comprehensive catalog including Fujifilm X and GFX series cameras, Instax products, lenses, photo accessories, rental services, and photo printing. The business targets photography enthusiasts and professionals seeking specialized Fujifilm products. The market position is niche with a clear focus on Fujifilm brand products, supported by a well-structured online presence and customer engagement features such as reviews and contact options. Technically, the website is built on the Shoptet e-commerce platform, utilizing JavaScript libraries including jQuery, Google Analytics, Google Tag Manager, and Facebook SDK for marketing and analytics. The site is mobile-optimized with good navigation and SEO practices. Security posture is solid with HTTPS enforced and secure login forms, though some security headers are not explicitly detected and the use of an outdated jQuery version poses a potential risk. Privacy compliance is addressed with a clear privacy policy, cookie consent banner, and GDPR adherence. Overall, the website presents a professional and trustworthy front for its business operations. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts the overall trust score. No WAF or blocking mechanisms were detected, allowing full content accessibility and analysis. Recommendations include updating JavaScript libraries, implementing additional security headers, and verifying domain registration details to enhance trust and security posture.

AutoID Polska S. A. operates the website nowoczesnetechnologie.pl, an established Polish e-commerce platform specializing in automatic identification and security technology products. The company offers a broad range of solutions including barcode printers, scanners, OCR software, biometric readers, and data security devices, targeting businesses and professionals requiring advanced identification and security systems. The website reflects a medium-sized enterprise with a consistent brand presence and a clear focus on technology retail. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. The platform is built on the SOTE e-commerce CMS, providing a responsive and user-friendly experience with good SEO and mobile optimization. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, DNSSEC is not enabled, and security headers are absent, representing areas for enhancement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms a long-standing domain registration consistent with the business history, enhancing trustworthiness. Overall, the website demonstrates a solid security posture and privacy compliance, with professional content and clear contact channels. Strategic improvements in DNS security and HTTP headers would further strengthen its security framework.

The Bundesanstalt für Gewässerkunde (BfG) is a German federal government scientific institute specializing in hydrology, water body usage, water quality, ecology, and water protection. The website serves as an authoritative platform providing comprehensive information about the institute's organizational structure, research activities, advisory roles, and public information services. It targets government agencies, researchers, environmental professionals, and the interested public. The site is built on the Government Site Builder CMS, reflecting official government standards and practices. The content is well-structured, professionally presented, and accessible, with clear navigation and mobile optimization. Technically, the website employs standard web technologies including HTML5, CSS, and JavaScript, with no detected use of third-party advertising or tracking services. The site enforces HTTPS and includes a cookie consent mechanism, demonstrating good privacy compliance aligned with GDPR. However, explicit security policies and incident response contacts are not found, which could be improved to enhance transparency and security posture. From a security perspective, the site shows a solid baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. The WHOIS data and DNS configuration align with German government infrastructure, supporting the legitimacy and trustworthiness of the domain. No WAF or blocking mechanisms interfere with content access, allowing full analysis. Overall, the website presents a trustworthy, professional, and comprehensive digital presence for a federal scientific institution. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to further strengthen security and compliance transparency.

NajdiKancelare.cz is a Czech commercial real estate brokerage platform operated by 108 REAL ESTATE a.s., specializing in office and commercial space rentals across the Czech Republic. The company has a strong market presence with 15 years of experience and offers daily updated listings, personalized offers, and price negotiation services. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Next.js, React, and analytics tools like Google Tag Manager and Fathom Analytics. Security posture is solid with HTTPS enforcement, security headers, and form protections, although no explicit security policy or incident response information is published. Privacy compliance is robust, with clear GDPR adherence and cookie consent mechanisms. Overall, the site presents a trustworthy and professional business front, though the lack of WHOIS data slightly reduces domain trustworthiness.

SKLADUJ.cz is a professional commercial real estate platform operated by 108 REAL ESTATE, specializing in the sale and lease of warehouse spaces, logistics services, and industrial land across the Czech Republic. The company leverages 15 years of market experience and data-driven insights to offer personalized consultancy and up-to-date property listings. The website targets businesses and investors seeking industrial and commercial properties, providing a comprehensive and user-friendly interface with multi-language support. Technically, the site is built on modern frameworks like Next.js and React, integrating analytics and marketing tools such as Google Tag Manager and Fathom Analytics. Security posture is strong with HTTPS and security headers implemented, though some GDPR compliance aspects like cookie consent banners could be improved. The absence of WHOIS data limits domain trust analysis, but the professional presentation and clear contact information support business credibility. Overall, SKLADUJ.cz presents a mature digital presence suitable for its market niche.

Mecalux España is a well-established company specializing in the design, manufacturing, and installation of metal shelving and storage systems primarily for manual and pallet loads. The company targets industrial clients such as warehouses and logistics providers within Spain, positioning itself as a leading supplier in the storage solutions sector. The website reflects a professional business model focused on B2B manufacturing and installation services. Technically, the website is built on the Liferay CMS platform and integrates modern marketing and analytics tools such as Google Tag Manager, Bing UET, HubSpot, and LiveChat, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses reCAPTCHA Enterprise for bot protection, and complies with GDPR through comprehensive privacy and cookie policies. However, explicit security policies and incident response contacts are not publicly available, which could be improved. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

ICZ Group is a Czech Republic-based technology company specializing in integrated software and network solutions. The company positions itself as a partner to businesses aiming to improve operational efficiency through IT systems and services. The website reflects a professional B2B service provider with a focus on technology solutions. The digital infrastructure is built on WordPress with modern plugins such as Divi Builder and Yoast SEO, indicating a moderate level of digital maturity. The site employs cookie consent mechanisms and integrates Google Tag Manager and reCAPTCHA, demonstrating awareness of privacy and security best practices. However, the absence of explicit privacy policies, terms of service, and contact information on the homepage limits transparency. The security posture is generally good with HTTPS enforced and consent management in place, but lacks advanced security headers and incident response disclosures. The WHOIS data is missing, which raises concerns about domain registration legitimacy despite the professional appearance of the website. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures.

Vzdělávací institut pro Moravu is a regional educational organization focused on providing training, support services, and career counseling primarily to schools and social and healthcare institutions in South Moravia. The website presents a professional and well-structured digital presence using Drupal 9 CMS, integrating modern web technologies and analytics tools such as Google Analytics and Facebook Pixel. Privacy and cookie policies are implemented, indicating awareness of GDPR compliance. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy. Security posture is moderate with HTTPS enforced but lacking some recommended security headers and explicit security policies. Overall, the website is functional, informative, and trustworthy for its target audience.

Moravskoslezský pakt zaměstnanosti is a regional non-profit organization focused on enhancing employment opportunities and career counseling in the Moravskoslezský region of the Czech Republic. The organization facilitates cooperation between employers, schools, and job seekers, providing data analysis, career guidance, and educational support. Their website reflects a professional and regionally focused digital presence with clear navigation and relevant content for their target audience. Technically, the website is built on WordPress with modern optimizations including WP Rocket for performance and Complianz for GDPR compliance. It uses Google Analytics for visitor tracking and Alpine.js for frontend interactivity. Hosting is provided by VAS Hosting, inferred from nameservers. The site is mobile optimized and SEO friendly, with structured data and Open Graph metadata implemented. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. However, explicit security headers and incident response policies are not evident. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data. The domain is well aged and consistent with the organization's profile. Overall, the website demonstrates a solid security posture and compliance with privacy regulations, supporting its role as a trusted regional employment facilitator. Strategic improvements could include enhanced security headers and published incident response information to further strengthen trust and resilience.

EKS is a Czech educational and consulting organization specializing in career counseling and professional development, primarily targeting women, career advisors, and migrants in Prague. The organization holds multiple national awards for career counseling and is an authorized body for professional qualification in career advising. Their services include accredited courses, consultations, and personal development programs. The website reflects a small-sized, non-profit educational entity with a consistent brand and good content quality. Technically, the website is built on Drupal 7 with jQuery and integrates Google Analytics for user tracking. The site is mobile-optimized with good SEO practices but lacks some modern security headers and cookie consent mechanisms. The SSL configuration is excellent, ensuring secure HTTPS connections. From a security perspective, the site shows moderate maturity with HTTPS enabled and IP anonymization in analytics. However, the absence of WHOIS data and security policies reduces trustworthiness. No vulnerability disclosure or incident response information is published, and Drupal 7 usage requires careful patch management to avoid risks. Overall, the website is professional and trustworthy for its audience but would benefit from improved privacy compliance, enhanced security headers, and transparent security policies to strengthen its security posture and regulatory adherence.

Centrum kompetencí is a Czech non-profit organization specializing in career counseling and competence mapping using the Swiss CH-Q method. Established in 2012, it is recognized as the first certified trainer of this method in the Czech Republic and holds national awards and accreditations. The organization offers tailored courses, individual counseling, and career development tools targeting educators, career counselors, and individuals seeking personal growth. The website reflects a professional and consistent brand image with clear service offerings and trust signals such as testimonials and certifications. Technically, the site is built on WordPress with Elementor, uses modern web technologies, and is hosted by a Czech provider, WEDOS. Security posture is good with HTTPS and reCAPTCHA, though it lacks some explicit security headers and privacy compliance documents. Contact information is comprehensive, including emails, phone numbers, physical address, and a contact form. Overall, the site is trustworthy, well-maintained, and serves its educational mission effectively.

The domain cdn-smartemailing.cz is registered since 2019 and uses Cloudflare nameservers, indicating a potentially legitimate setup. However, the website content is completely inaccessible, returning a 404 Not Found error with no additional content, metadata, or business information. This lack of content prevents any meaningful analysis of the business, its services, or compliance posture. The technical infrastructure appears minimal with no detected scripts or security headers, and no privacy or cookie policies are present. The security posture is weak due to lack of visible HTTPS confirmation and absence of security best practices. Overall, the site is non-functional from a user perspective, representing a high risk for trust and credibility.

The website onetoso.com appears to be a placeholder or parked page hosted by One.com A/S, a web hosting provider established in 2017. The site content is minimal, primarily branding for One.com hosting services, with no substantive business or security-related content. The domain registration details are consistent and legitimate, registered with One.com A/S and expiring in 2026. However, the website lacks critical elements such as privacy policies, cookie consent mechanisms, terms of service, contact information, and security headers. No HTTPS or SSL information was detected in the provided data, indicating a poor security posture. Overall, the site does not provide sufficient information to assess business credibility or compliance effectively.

Perspectivo s.r.o is a Czech digital agency specializing in web development, visual design, and marketing campaigns aimed at creating valuable digital experiences for businesses. The company positions itself as a creative partner delivering tailored digital solutions to enhance brand presence. The website demonstrates a professional and modern digital infrastructure utilizing AngularJS, Google Tag Manager, and Facebook Pixel for analytics and marketing purposes. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though additional security headers could enhance protection. Privacy compliance is well addressed with comprehensive policies and user consent management. Overall, the website reflects a credible and trustworthy business with a solid digital presence, though the absence of WHOIS data slightly impacts domain trust assessment.

The Bundesanstalt für Wasserbau (BAW) is a German federal government agency specializing in waterway engineering, infrastructure maintenance, and environmental protection related to federal waterways. It operates under the Federal Ministry for Digital and Transport (BMDV) and serves as a technical and scientific advisory body. The website reflects a well-established institution with a clear mission to support safe, efficient, and environmentally sound waterway management. The target audience includes government entities, researchers, and professionals in waterway infrastructure and environmental sectors. Technically, the website employs standard modern web technologies such as HTML5, CSS3, JavaScript, and jQuery, with additional libraries for UI enhancements like FontAwesome and BaguetteBox. The site is well-structured, mobile-optimized, and accessible, with good SEO practices. No CMS or hosting provider details are explicitly detected, suggesting a custom or government-managed platform. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security or incident response policies. No cookie consent mechanism was detected, which could be improved for GDPR compliance. The site shows minimal user tracking and no advertising, aligning with government standards for privacy and transparency. Overall, the website is professional, trustworthy, and well-aligned with its government agency role. Strategic recommendations include enhancing security headers, publishing security policies, and implementing cookie consent to improve compliance and security posture.

The website elwis.de is an official German federal government portal operated by the Wasserstraßen- und Schifffahrtsverwaltung des Bundes (Federal Waterways and Shipping Administration). It provides comprehensive electronic waterway information services (ELWIS) including navigation data, shipping notifications, water level forecasts, regulatory information, and online application portals for permits and certifications related to inland and sea shipping. The site targets maritime professionals, shipping companies, government agencies, and the general public interested in waterway information. The business model is a government service focused on regulatory compliance and information dissemination, positioning it as a key official source in Germany's waterway management sector. Technically, the site is built on the Government Site Builder CMS platform, using standard web technologies such as HTML5, CSS, and JavaScript. It demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The site uses HTTPS with strong SSL configuration but lacks explicit security headers in the HTML response. Forms are secured via HTTPS, and no sensitive data is exposed in the content. Privacy and legal policies are present and comprehensive, indicating GDPR compliance, but no cookie consent mechanism was detected. From a security perspective, the site shows a solid posture with HTTPS enforcement and no visible vulnerabilities or exposed sensitive information. However, improvements could be made by implementing security headers, publishing a vulnerability disclosure policy or security.txt, and providing explicit incident response contact details. No WAF or blocking mechanisms were detected, and the domain WHOIS data aligns with official German government infrastructure, supporting high legitimacy and trustworthiness. Overall, elwis.de is a professional, trustworthy government portal with excellent content quality and good technical implementation. Strategic recommendations include enhancing security headers, adding cookie consent mechanisms, and improving transparency around incident response to further strengthen security and compliance.

StyrPåSpillet.dk is an official Danish government platform managed by the Danish Gambling Authority, providing authoritative information and resources on gambling addiction and related issues. The website serves the general public, especially individuals affected by gambling problems, offering educational content and practical tools. The platform is well-positioned as a trusted source within the government sector for gambling-related public health information. Technically, the website is built using modern web technologies including React with Next.js framework, and integrates advanced monitoring and analytics tools such as Dynatrace, New Relic, Adobe Experience Cloud, and AppDynamics. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the website enforces HTTPS with strong SSL configuration and employs multiple security headers. It uses cookie consent mechanisms compliant with GDPR, ensuring user privacy and transparency. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not evident, representing areas for improvement. Overall, the site is legitimate, secure, and professionally maintained, though the absence of WHOIS data limits full domain registration verification. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure information, and providing clear contact channels for security concerns to enhance trust and compliance.

MitID.dk is the official digital identification platform for Denmark, providing secure authentication services for online banking, government services, and self-service solutions. The website is professionally designed with a clear focus on user guidance, privacy, and security. It targets Danish residents and users requiring trusted digital identity verification. The platform holds a strong market position as Denmark's primary digital ID provider. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with responsive design and accessibility features. The presence of session timeout modals and secure login forms indicates a mature security posture. However, some security headers are not explicitly detected, and no vulnerability disclosure or incident response contacts are published. Overall, the security posture is strong with HTTPS enforced and good session management. Privacy compliance is evident through comprehensive privacy and cookie policies with consent mechanisms. The absence of contact emails or phone numbers on the main page slightly reduces business credibility, but the official nature of the domain and content supports trustworthiness. The domain WHOIS data is unavailable, limiting verification of registration details. Despite this, the website's content and domain strongly suggest it is a legitimate government service. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing clearer contact information for incident response.

ORWAK SK is a Slovak-based company specializing in the sale and service of baling presses and waste compaction solutions, targeting businesses and enterprises that require efficient waste management. The company positions itself as a world leader in baling and compaction technology, offering a range of products designed for various industrial and commercial applications. The website reflects a professional B2B business model with clear product offerings and customer trust indicators such as client logos and contact information. Technically, the website is built on the Joomla CMS platform, utilizing modern web technologies including jQuery and Font Awesome. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Performance is moderate, and SEO practices appear adequate. Cookie consent mechanisms are implemented in compliance with GDPR requirements, enhancing privacy compliance. From a security perspective, the website enforces HTTPS and includes CSRF tokens in scripts, indicating some security awareness. However, it lacks visible security headers such as Content-Security-Policy and X-Frame-Options, and there is no published security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the provided content, but improvements are recommended to strengthen security posture. Overall, the website is trustworthy and professional, with a solid business presence and adequate privacy compliance. The absence of critical security issues and the presence of clear contact information contribute positively to its risk profile. Strategic enhancements in security policies and headers would further improve its security maturity.

Mountpark is a well-established European real estate developer specializing in logistics and industrial buildings, serving leading companies across Europe. The website presents a professional corporate image with clear business focus and multi-language support, targeting businesses seeking high-quality logistics real estate solutions. The domain age and WHOIS data confirm a mature and legitimate business presence since 2003. Technically, the site is built on WordPress with modern SEO and UI components, including Yoast SEO and Swiper.js, and integrates Google Analytics for visitor tracking. However, the site lacks visible privacy and cookie policies, which impacts privacy compliance. Security posture is basic with HTTPS enabled but missing DNSSEC and security headers, and the presence of an external tracking script from an unknown domain raises privacy concerns. Contact options include a contact form and social media presence on Twitter, but no explicit company emails or phone numbers are published. Overall, the website is professional and credible but could improve in privacy and security transparency.

M2M Solutions, s.r.o. is a Slovakia-based company specializing in complex and data-driven supply chain management solutions, including transport logistics and warehouse management systems tailored for Industry 4.0. Their website presents a professional image targeting logistics and manufacturing sectors, emphasizing efficient resource utilization. The company positions itself as a niche B2B provider within the transportation industry in Slovakia. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and third-party services such as Google Analytics and Leadfeeder for marketing and analytics. The site is mobile-optimized with good SEO practices and moderate performance. Cookie consent mechanisms are implemented, reflecting awareness of GDPR requirements. From a security perspective, the site enforces HTTPS with HSTS and employs standard security cookies to prevent CSRF attacks. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are areas for improvement. The use of multiple third-party tracking tools indicates moderate user tracking, balanced with cookie consent. Overall, the website is safe, professional, and trustworthy with a solid business credibility score. The main risks relate to privacy compliance gaps and absence of formal security documentation. Strategic recommendations include adding privacy and terms policies, establishing incident response contacts, and enhancing accessibility and security transparency.

Česká filharmonie is the premier Czech symphony orchestra with a rich history dating back to 1896. The organization offers a wide range of cultural services including concerts, educational programs, and media content. It holds a strong market position as a leading cultural institution in the Czech Republic with international recognition. The website reflects a mature digital presence with modern technologies such as AngularJS, Google Tag Manager, and multimedia integration. The site is well-structured, mobile-optimized, and provides comprehensive user experience with clear navigation and rich content. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not found. WHOIS data is missing, which slightly reduces trustworthiness but the overall professional presentation and partner endorsements support legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and improving transparency around incident response.

TEREZA, vzdělávací centrum, z. ú. is a Czech educational organization focused on connecting children, educators, and nature through verified educational programs with real impact. Established in 2003, it operates as a small non-profit entity with a strong presence in the education sector. The website reflects a professional and consistent brand image, targeting educators and children interested in sustainable education. Technically, the site is built on WordPress using the Divi theme and integrates modern SEO and analytics tools such as Rank Math and Google Analytics. Cookie consent is managed via CookieYes, indicating attention to privacy compliance, although explicit privacy and terms policies are not found on the site. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and incident response information. Overall, the site is trustworthy, well-structured, and safe for general audiences.

Europass.cz is a Czech Republic government-supported educational platform operated by the Národní centrum Europass ČR under the Národní pedagogický institut. The website offers career advancement tools such as CV creation, motivation letters, qualification supplements, and digital skills tests, targeting students, job seekers, educators, and employers. It holds a solid market position as the national center for Europass services, supported by the Ministry of Education and the European Union. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and integrates reCAPTCHA for security. Hosting is provided by rails.cz, and the site is mobile-optimized with good SEO practices. Security posture is strong with HTTPS, cookie consent, and no visible vulnerabilities, though it lacks a dedicated security policy or incident response page. Overall, the site is professional, trustworthy, and compliant with GDPR, providing a valuable public service.

Prologis is a global leader in industrial real estate and logistics solutions, providing sustainable warehouse and distribution spaces to support supply chains worldwide. The website reflects a mature enterprise-level business with a professional digital presence built on Drupal 10, integrating advanced analytics and marketing tools such as Google Tag Manager, Hotjar, and Cookiebot for privacy compliance. The security posture is strong with HTTPS enforced and cookie consent mechanisms implemented, although some security headers could be improved. The absence of WHOIS data is due to privacy protection, which is common and justified for this business type. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements.

Loadhog Ltd is a UK-based medium-sized company specializing in the design and manufacture of sustainable and reusable supply chain packaging solutions. Established in 1998, the company serves a global clientele across multiple industries including transportation, manufacturing, retail, automotive, healthcare, and waste management. Loadhog emphasizes innovation, quality, and sustainability, supported by multiple prestigious awards and certifications. Their product portfolio includes automation totes, containers, pallet lids, transport dollies, and accessories, all designed to improve logistics efficiency and reduce environmental impact. Technically, Loadhog's website is built on WordPress with modern technologies such as Gravity Forms for data collection, Weglot for multilingual support, Google reCAPTCHA for bot protection, and Google Tag Manager for analytics. Hosting is supported by Azure DNS infrastructure, ensuring reliable performance and fast loading times. The site is mobile-optimized and accessible, with good SEO practices implemented. From a security perspective, the website enforces HTTPS and uses reCAPTCHA on forms, demonstrating good security hygiene. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and there is no published security policy or incident response information. Cookie consent mechanisms are absent, which could be improved to enhance GDPR compliance. No vulnerabilities or exposed sensitive data were found. Overall, Loadhog presents a professional, trustworthy, and technically sound online presence with strong business credibility. Strategic recommendations include implementing comprehensive security headers, publishing security and incident response policies, adding cookie consent mechanisms, and considering a vulnerability disclosure policy to further strengthen security posture and compliance.

KASYS® s.r.o. is a Czech company specializing in automated logistics and storage systems, with a market presence of over 30 years. The company offers advanced solutions such as Hänel Rotomat®, Lean-Lift®, and Multi-Space® systems, targeting businesses requiring efficient warehouse and archival management. Their website reflects a professional and mature digital presence, leveraging WordPress with modern plugins for SEO, GDPR compliance, and user interaction. Security measures include HTTPS, Google reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain legitimacy verification, but the overall business presentation and certifications like ISO 9001 support credibility. Contact information and social media links are clearly provided, enhancing trust and accessibility.

108 REAL ESTATE is a specialized commercial real estate consultancy operating primarily in the Czech Republic, Central and Eastern Europe, and India. The company offers comprehensive services including consulting, brokerage, investment advisory, and property acquisition and leasing. Their market position is that of a specialist with a professional online presence and a focus on industrial and office spaces. The website is built on modern technologies such as Next.js and React, hosted on Vercel, and incorporates analytics tools like Fathom and Google Tag Manager, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and modern frameworks used, but lacks some security headers and explicit privacy and cookie policies. The absence of WHOIS data due to privacy protection slightly reduces trust but is common for commercial entities. Overall, the site is professional, well-structured, and targets business clients and investors in the commercial real estate sector.

Mecalux S.r.o. is a Czech Republic-based company specializing in warehouse storage solutions including metal shelving, storage systems, and automated warehouses. The company targets B2B customers requiring efficient and intelligent warehouse management solutions. The website reflects a professional and consistent brand presence with clear business focus and regional market positioning. Technically, the site is built on the Liferay CMS platform, leveraging modern JavaScript libraries, Google and Bing analytics, and enterprise-grade reCAPTCHA for security. Privacy compliance is well addressed with GDPR-aligned cookie consent mechanisms. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly disclosed. Overall, the site is trustworthy, well-structured, and business-oriented, supporting Mecalux's market presence in the manufacturing and logistics sector.

Hellmann Worldwide Logistics CEP s. r. o. operates a professional logistics and express delivery service specializing in night and morning deliveries across Europe, with a strong presence in the Czech Republic. The company emphasizes speed, quality, and reliability, supported by a 20-year experience and a comprehensive distribution network. Their website reflects a medium-sized business targeting corporate and individual customers requiring timely express logistics solutions. Technically, the website is built on WordPress with modern plugins and frameworks such as Bootstrap and WPBakery, ensuring a responsive and user-friendly experience. Security measures include HTTPS and Google reCAPTCHA integration, though the absence of security headers and formal privacy policies indicates room for improvement. The lack of WHOIS data limits domain trust verification, but the website content and branding are consistent and professional. Overall, the site is safe, well-structured, and serves its business purpose effectively.

Asseco CEIT is a Slovak technology company specializing in industrial automation and logistics solutions, targeting industrial enterprises seeking to improve productivity and efficiency. The company operates under the Asseco group umbrella, indicating a solid market position in the technology sector. The website is professionally designed using WordPress with the Divi theme and incorporates modern web technologies such as Google Tag Manager and Sendinblue for marketing and analytics. Cookie consent mechanisms are implemented, reflecting awareness of privacy compliance requirements. However, the absence of a privacy policy and contact information on the site limits full compliance and user trust. Security posture is generally good with HTTPS enforced, but lacks visible security headers and formal security policies. WHOIS data for the domain is unavailable, which raises concerns about domain registration legitimacy but does not necessarily indicate fraudulent activity given the professional web presence. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.

LuckyLouis is an established online casino platform operated by Skill On Net Ltd, a regulated entity licensed by the Malta Gaming Authority and supervised by the German Gemeinsame Glücksspielbehörde der Länder. The website offers a broad portfolio of over 500 games including slots, live dealer experiences, jackpots, and tournaments, targeting adult users primarily in Germany and other regulated European markets. The platform is accessible on desktop and mobile devices, with apps planned but not yet available. The business model focuses on online gambling services with strong regulatory compliance and responsible gaming emphasis. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, Google Analytics, and service workers. It uses Cloudflare for DNS and CDN services, ensuring good performance and security. The site is mobile optimized and SEO friendly, with clear navigation and professional design. Analytics and marketing tools are implemented with moderate user tracking. From a security perspective, the site enforces HTTPS and uses some security best practices but lacks explicit security headers like CSP and does not publish a security policy or vulnerability disclosure. No WAF or blocking mechanisms were detected, and no critical vulnerabilities were found in the visible content. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, LuckyLouis presents a trustworthy and professional online gambling service with a solid technical foundation and regulatory compliance. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would further enhance its security posture and trustworthiness.

SwiftSpiele is an online casino platform targeting German-speaking users, offering a variety of skill and chance games under the SwiftCasino family brand. The website is designed primarily for desktop users with basic mobile support and uses modern JavaScript modules and Cloudflare DNS for hosting and performance. While the site implements cookie consent mechanisms indicating GDPR awareness, it lacks explicit privacy policy and terms of service pages, which are critical for compliance and user trust. Security posture is moderate with HTTPS enforced but missing explicit security headers and vulnerability disclosures. Contact is limited to an email support address and login forms, with no phone or physical address information provided. Overall, the site appears legitimate and functional but would benefit from enhanced compliance documentation and security practices.

BookStadion is a newly launched cultural and educational initiative by Instytut Książki, focused on promoting reading among children and youth through the popular theme of football. The project collaborates with football coaches, professional players, and major Polish clubs to deliver workshops, contests, and reading events that inspire young football fans to engage with literature. The website is modern, built with React and served via CDN, providing a good user experience with mobile optimization and clear navigation. Privacy and cookie policies are well implemented, reflecting compliance with GDPR requirements. Security posture is adequate with HTTPS enabled, though improvements such as DNSSEC and security headers are recommended. The domain registration is transparent and consistent with the project timeline, enhancing trustworthiness. Overall, the website is a credible and professional platform supporting a niche educational cause.