High-risk security reports

M

Mário Roženský

zakaznickapece.cz

45

The website zakaznickapece.cz is a professionally designed WordPress site focused on promoting a book and educational services related to customer care. The business is positioned as a niche expert in the Czech Republic, offering a book, e-book, and training events to improve customer service practices. Technically, the site uses modern web technologies including Google Tag Manager, Facebook Pixel, and a live chat solution (SupportBox), indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced but lacks some security headers and a formal vulnerability disclosure process. Privacy compliance is partial, with a privacy policy present but no explicit cookie consent mechanism. Overall, the site is trustworthy and well-maintained, with room for improvement in security and privacy practices.

NeXA, s.r.o. operates as a creative web studio under the brand Nexavision, specializing in custom web development, e-commerce solutions, animated video production, mobile applications, comprehensive web systems, and internet marketing. The company targets businesses and organizations seeking professional digital presence and marketing services, positioning itself as a mature, small-sized local player with a diverse client portfolio. The website reflects a professional design with clear navigation and a consistent brand image, supported by client references and company registration details. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with Google Analytics integrated for user tracking. The site shows moderate performance and good mobile optimization but lacks modern security practices such as HTTPS enforcement and security headers. The use of HTTP for loading jQuery introduces mixed content risks. SEO and accessibility are basic but functional. From a security perspective, the site lacks visible security policies, incident response contacts, and privacy compliance mechanisms such as cookie consent or GDPR disclosures. No forms are present to collect user data, reducing immediate input risks, but the absence of HTTPS and security headers lowers the overall security posture. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website is functional and professional but requires improvements in security, privacy compliance, and technical modernization to enhance trust and protect user data effectively.

Č

Česká asociace pracovišť linek důvěry z.s.

capld.cz

41

Česká asociace pracovišť linek důvěry z.s. (ČAPLD) is a Czech non-profit organization established in 1995 that supports accredited crisis helpline providers across the Czech Republic. The association offers professional support, organizes educational events, and promotes ethical standards for telephone crisis intervention services. The website is well-structured, professionally designed, and targets both the general public seeking crisis support and professionals in the field. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Google Analytics integration, ensuring good SEO and moderate performance. Security posture is adequate with HTTPS enforced and use of Cloudflare Turnstile captcha, but lacks some security headers and formal privacy/cookie policies. WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency, though the website content and structure indicate legitimacy. Overall, the site is safe, trustworthy, and serves an important social function.

M

Magyarországi Evangélikus Egyház (MEE)

lutheran.hu

45

The website evangelikus.hu serves as the official online portal for the Hungarian Evangelical Lutheran Church (Magyarországi Evangélikus Egyház - MEE). It provides comprehensive information about the church's structure, activities, news, and religious resources primarily targeting Hungarian-speaking members and the interested public. The site is well-branded and consistent with the organization's identity, featuring multilingual support and active social media channels. Technically, the site is built on Joomla CMS with YOOtheme Pro and UIkit frameworks, leveraging modern JavaScript libraries and Google Tag Manager for analytics and marketing. The site enforces HTTPS and uses CSRF tokens in forms, indicating a good security baseline, although it lacks explicit security headers and formal privacy or cookie policies. Overall, the site demonstrates a solid digital presence appropriate for a medium-sized non-profit religious organization.

B

Bethlen Gábor Alapkezelő Zrt.

bgazrt.hu

41

Bethlen Gábor Alapkezelő Zrt. is a Hungarian government fund management company operating since 2011. The website serves as the official portal for disseminating information about grants, fund management, and related public data. It targets Hungarian government entities and the general public interested in funding opportunities and official decisions. The site uses WordPress CMS with popular plugins such as Yoast SEO and Elementor, indicating a moderate level of digital maturity and ease of content management. The presence of cookie consent and privacy policy pages shows compliance with GDPR requirements. Security posture is adequate with HTTPS and reCAPTCHA usage, though some security headers are not explicitly visible in the HTML content. Overall, the website is professional, trustworthy, and well-positioned as an official government resource.

JCC Budapest - Bálint Ház is a Hungarian non-profit community and cultural center established in 2022, focusing on Jewish cultural events, education, and community support. The website serves as a hub for event information, community programs, and fundraising efforts, targeting the Hungarian Jewish community and supporters. The site is professionally designed with excellent content quality and clear navigation, reflecting a mature digital presence. Technically, the site uses modern JavaScript frameworks and analytics tools, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and secure forms, though some security headers and incident response contacts could be improved. Privacy compliance is mostly addressed with comprehensive policies, but lacks a cookie consent mechanism. Overall, the site is trustworthy and well-positioned in its niche.

M

MERKAZ - Héber és Izraeli Kulturális Központ

izraelikultura.hu

48

MERKAZ - Héber és Izraeli Kulturális Központ is a Hungarian non-profit organization dedicated to promoting Israeli culture and Hebrew language education. It operates as the world's first Israeli Cultural Institute in Hungary, offering a variety of cultural programs, Hebrew language courses, and travel opportunities to Israel. The organization targets Hungarian speakers interested in Israeli culture, language learners, and those seeking community and cultural engagement. The website reflects a well-structured and professional digital presence, built on WordPress with Elementor and WooCommerce plugins, supporting both content delivery and event management. Social media integration and privacy policy presence enhance user trust. Security posture is good with HTTPS and secure form handling, though some security headers and cookie consent mechanisms are missing. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's identity. Overall, the website is a credible and valuable resource for its target audience, with room for improvement in privacy compliance and security best practices.

H

Hospodářská komora hlavního města Prahy

hkp.cz

40

Hospodářská komora hlavního města Prahy is a chamber of commerce serving entrepreneurs and businesses primarily in Prague, Czech Republic. It offers a range of services including legal electronic systems, business consulting, legislative advocacy, and organizes seminars and projects to support its members. The organization positions itself as a key business association in the region, targeting local entrepreneurs and firms. Technically, the website uses a mix of legacy and modern web technologies such as jQuery 1.9.1, Owl Carousel, and Google Analytics, hosted on a CMS platform likely VisionCMS. The site is mobile responsive and provides a good user experience, though some technical debt is evident in outdated libraries and lack of advanced SEO or accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies, which impacts compliance and trust. The absence of WHOIS data is a notable concern, reducing domain registration transparency and trustworthiness. Overall, the website is professional and functional but would benefit from improved privacy compliance, updated technology stack, and enhanced security practices.

Č

ČEZNET s.r.o.

ceznet.tv

47

ČEZNET s.r.o. operates the ČEZNET TV internet television service, offering a variety of HD TV program packages and additional content bundles tailored to different user preferences. The service targets residential customers in the Czech Republic and the EU, providing flexible IPTV solutions accessible on multiple devices including smart TVs, set-top boxes, and mobile devices. The website demonstrates a professional digital presence with clear branding, comprehensive content about service offerings, and user-friendly navigation. Technically, the site uses modern JavaScript libraries and Google Analytics for tracking, with HTTPS enforced and cookie consent mechanisms implemented, reflecting a mature digital infrastructure. Security posture is solid with no visible vulnerabilities, though the absence of security headers and explicit security policies suggests room for improvement. The lack of WHOIS registrant data reduces transparency but does not significantly detract from the overall trustworthiness given the professional presentation and active domain maintenance. Overall, the site is well-positioned in its market niche with a good balance of content quality, technical implementation, and privacy compliance.

P

Pillow pojišťovna, a. s.

proporadce.cz

44

The website proporadce.cz serves as an information portal dedicated to professional insurance advisors and intermediaries in the Czech Republic. It provides comprehensive insurance product information, news, and updates, primarily promoting the Pillow insurance company. The site is well-branded, regularly updated, and targets a niche professional audience. Technically, it is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile responsiveness. Security posture is strong with HTTPS and Content Security Policy headers, though the absence of an explicit privacy policy and WHOIS data reduces overall trust. No critical vulnerabilities or adult content are present, making it a safe and professional resource. Strategic improvements include adding a detailed privacy policy, incident response contacts, and security.txt to enhance compliance and trust.

Pavel Dymák is a specialized mortgage and financial advisory service operating primarily in Prague and Eastern Bohemia, Czech Republic. With over 15 years of experience, the business focuses on personalized mortgage solutions for diverse client groups including self-employed individuals, foreigners, and those with income abroad. The website is professionally designed using WordPress and the Divi theme, enhanced with NitroPack for performance optimization. Security posture is strong with HTTPS and security headers in place, though privacy compliance could be improved by adding cookie consent mechanisms. WHOIS data is unavailable, which slightly impacts domain trust but the site content and contact information appear legitimate and professional.

K

Komora samostatných likvidátorů pojistných událostí

kslpu.cz

39

Komora samostatných likvidátorů pojistných událostí (KSLPU) is a professional association based in the Czech Republic, founded in 2004. It serves as a chamber for independent insurance claims adjusters, damage assessors, and technical experts, aiming to support their professionalism, prestige, and education. The organization fosters collaboration among its members and with insurance companies both nationally and across Europe, including affiliation with the European Federation of Loss Adjusting Experts (FUEDI). The website provides information about membership, educational events, news, and contact details, targeting professionals in the insurance claims and risk assessment sectors. Technically, the website uses a custom CMS with common web technologies such as jQuery, Google Analytics, and responsive design elements. It is hosted likely via Forpsi (based on nameservers) and registered through REG-INTERNET-CZ since 2004, indicating a stable and established online presence. The site is moderately optimized for performance and mobile devices, with good SEO practices and clear navigation. From a security perspective, the site uses HTTPS and includes standard analytics scripts but lacks explicit security headers and cookie consent mechanisms. No security policies or incident response contacts are published, which could be improved. There are no visible vulnerabilities or exposed sensitive data. GDPR compliance is indicated by a dedicated privacy page, but cookie consent is not evident. Overall, the website is professional, trustworthy, and serves its niche audience well. Strategic improvements in security headers, cookie consent, and published security policies would enhance its security posture and compliance maturity.

The website at cernaai.cz/lander is currently a minimal placeholder or parking page with no substantive content, business information, or user engagement features. The domain WHOIS data is suspicious due to a creation date set in the future (August 2025), which undermines trust and legitimacy. The site loads external scripts related to Google Adsense and parking-lander assets but lacks any privacy, cookie, or terms of service policies. No contact information or social media links are present, and no forms or data collection mechanisms exist. Technically, the site uses basic JavaScript but lacks modern frameworks or CMS platforms. Security posture is weak with no visible security headers or SSL details. Overall, the site appears inactive or not yet launched for business purposes.

T

The Association of Commercial Television

aktv.cz

49

The Association of Commercial Television (AKTV) is a professional industry association representing the key commercial broadcasters in the Czech Republic. Founded in 2017, it serves as an advocacy and support body for its members, focusing on legislative engagement, copyright protection, and promotion of television as an advertising medium. The association maintains a professional web presence with comprehensive information about its activities, positions on legislative matters, and industry news. The website is built on WordPress with modern plugins and technologies, including GDPR compliance tools and analytics integration. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. WHOIS data is unavailable, indicating privacy protection, which is justified for this type of organization. Overall, the website reflects a credible and established entity in the media sector.

A

aup.cz

aup.cz

43

Ájurvédská Univerzita Praha (aup.cz) is a specialized educational institution focused on Ayurveda, offering a variety of courses including year-round, summer, winter, and special courses, as well as hosting an Ayurvedic festival. The website targets individuals interested in holistic health and Ayurveda education primarily in the Czech Republic. The business operates as a small-sized entity founded in 2021, with a clear focus on Ayurveda education and community engagement through events and consultations. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for enhanced user experience and security such as Google reCAPTCHA v3. The site is hosted on a Czech hosting provider consistent with its regional focus. SEO and mobile optimization are well implemented, though some accessibility features are basic. The site uses HTTPS with a good SSL configuration but lacks some security headers. From a security perspective, the site demonstrates good practices like HTTPS and CAPTCHA protection on forms, but it lacks explicit privacy and cookie policies, which is a compliance gap. The Google Analytics plugin is installed but not configured, indicating incomplete analytics setup. No critical vulnerabilities or suspicious content were detected, and the domain registration aligns well with the business claims, supporting legitimacy. Overall, the site is professional and trustworthy with moderate security posture and good business credibility. Improvements are recommended in privacy compliance, security headers, and analytics configuration to enhance trust and compliance.

The website ra.cz currently presents an empty HTML page with no visible content, metadata, or interactive elements. The domain is registered since 2003 with a Czech registrar REG-WEDOS, indicating a long-standing registration but the website itself appears inactive or underdeveloped. There is no evidence of business information, contact details, or policies on the site, which severely limits its utility and trustworthiness. Technically, the site lacks any detectable technologies, scripts, or security features, and no SSL or security headers information is available. The absence of content and security measures results in a very low security posture and poor privacy compliance. Overall, the website is not currently suitable for business or user engagement and requires significant development and security improvements.

L

LPP

lp-praha.cz

49

LPP is a Czech-based technology company specializing in the design and development of autonomous defense systems and AI-powered platforms to support modern military and security operations. The company operates as part of the LPP holding, leveraging expert teams and advanced manufacturing capabilities to deliver innovative solutions such as UAVs, UGVs, and inertial navigation systems. Their market position is that of a specialized defense technology provider targeting military and security sectors globally. Technically, the website is built on WordPress with Elementor and Yoast SEO plugins, indicating a modern and maintainable digital infrastructure. The site uses HTTPS and integrates Google Analytics for visitor tracking. Performance and mobile optimization are good, though accessibility features are basic. SEO is well implemented with structured data and meta tags. From a security perspective, the site employs HTTPS but lacks visible security headers and does not provide explicit privacy or cookie policies, which are compliance gaps. No incident response or vulnerability disclosure information is present. The site does not expose sensitive data and uses no known vulnerable libraries, indicating a moderate security posture. Overall, the website is professional and trustworthy with clear business information and contact details. However, improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance trust and regulatory adherence.

W

WordpressMasters

wordpressmasters.hu

46

WordpressMasters is a Hungarian-based professional service provider specializing in custom WordPress solutions, including website creation, plugin development, maintenance, troubleshooting, optimization, and custom theme design. The company claims over 15 years of market presence with a strong client base and numerous successful projects, positioning itself as a trusted expert in the WordPress ecosystem. The website is well-structured, professionally designed, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site leverages WordPress CMS with modern libraries such as Bootstrap, jQuery, Video.js, and integrates Google Tag Manager and reCAPTCHA for analytics and security. Security posture is solid with HTTPS and form protections, though lacks explicit security policies or incident response contacts. The domain is newly registered in 2023, which conflicts with the business's claimed longevity, suggesting a recent domain acquisition or rebranding. Overall, the site is professional and trustworthy but would benefit from enhanced transparency on security policies and domain history.

A

Alkotó Ifjúság Alapítvány

scheiber.hu

48

The website represents the BZSH Scheiber Iskola and the Alkotó Ifjúság Alapítvány, a non-profit educational foundation based in Budapest, Hungary. It provides educational services including school management systems (eKréta), online meal registration (eMenza), and community engagement through events and social media. The target audience includes students, parents, educators, and community members. The site positions itself as a local educational institution with a focus on youth development and community support. Technically, the website is built using modern web technologies such as React and Material-UI, providing a responsive and visually consistent user experience. The site loads moderately fast and is optimized for mobile devices, though accessibility features are basic. SEO optimization is minimal but present through structured content and meta tags. From a security perspective, the site lacks visible security headers and does not display privacy or cookie policies, which are critical for GDPR compliance. No incident response contacts or vulnerability disclosure information is provided. The site uses HTTPS (assumed from URL) but lacks advanced security best practices. No analytics or advertising scripts were detected, indicating minimal user tracking. Overall, the website is functional and professional for its educational and non-profit purpose but requires improvements in privacy compliance, security headers, and incident response readiness to enhance trust and regulatory adherence.

B

Broadway Ticket Hungary Kft.

zsidokulturalisfesztival.hu

46

The website www.zsidokulturalisfesztival.hu represents the 27th Jewish Cultural Festival organized in Hungary, primarily by the Budapest Jewish Community and Broadway Ticket Hungary Kft. It serves as an information and ticketing portal for the festival held from September 7 to 18, 2025. The site targets a general audience interested in Jewish culture, music, and arts, offering detailed program listings, news updates, and contact information. The business model revolves around event organization and ticket sales, supported by a well-established presence and consistent branding. Technically, the website is built on WordPress 6.8.3 with modern web technologies including jQuery, Google Tag Manager, Google Analytics, and Facebook Pixel for marketing and analytics. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved for enhanced protection. From a security and compliance perspective, the site demonstrates good GDPR compliance with a comprehensive privacy policy and cookie consent banner. No critical vulnerabilities or suspicious activities were detected. Contact information is clearly provided, enhancing business credibility. The WHOIS data aligns well with the website's claims, indicating a legitimate and trustworthy entity. Overall, the website is professional, secure, and user-friendly, serving its cultural and informational purpose effectively. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and continuing to monitor privacy compliance to sustain trust and security.

O

Országos Rabbiképző – Zsidó Egyetem

or-zse.hu

46

Országos Rabbiképző – Zsidó Egyetem is a historic Jewish educational institution based in Budapest, Hungary, with a legacy dating back to 1877. It serves as a key academic and religious center for Jewish studies, offering a range of educational programs from undergraduate to doctoral levels, alongside research and community engagement. The institution holds a respected position in the education sector within Hungary and the Jewish community. Technically, the website is built on WordPress with modern plugins and scripts, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks some advanced security headers and formal incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or explicit GDPR compliance indicators. Overall, the website reflects a professional and trustworthy educational institution with room for improvement in privacy and security transparency.

S

SENEA spol. s r.o.

senea.cz

48

SENEA spol. s r.o. is a Czech Republic-based company specializing in water treatment and environmental solutions. The company positions itself as a regional leader in returning water to its natural environment, targeting municipalities, industrial clients, and environmental organizations. Their business model focuses on B2B services, including water purification technologies and environmental consulting. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the site is built on WordPress using the Divi theme, leveraging modern web technologies such as Google Fonts and reCAPTCHA for security. Performance and mobile optimization are adequate, though accessibility could be improved. Security posture is solid with HTTPS enforcement and standard security headers, but lacks a publicly available security policy or incident response information. Privacy compliance is strong, with comprehensive privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy and safe for general audiences, with no signs of suspicious or malicious activity. However, the absence of WHOIS data limits full verification of domain legitimacy.

A

AOM CZ s.r.o.

aom.cz

43

AOM CZ s.r.o. operates an e-commerce platform specializing in industrial coatings, paints, lacquers, adhesives, and spraying technology primarily targeting professional and industrial customers in the Czech Republic. The website presents a professional catalog of products with clear navigation and customer account features, supporting both B2B and B2C sales models. The company maintains a consistent brand presence with comprehensive legal and privacy documentation in Czech language, indicating compliance with GDPR regulations. Technically, the site is built on Prestashop 1.7.6.1 with modern modules and includes a cookie consent mechanism and live chat support, reflecting a moderate level of digital maturity.

I

Inspirit Energy s.r.o.

inspiritdesign.cz

42

Inspirit Design, operated by Inspirit Energy s.r.o., is a Czech-based digital agency specializing in creating modern websites, custom e-shops, and online marketing campaigns including Google Ads and Facebook advertising. The company targets businesses and individuals seeking professional digital presence and marketing solutions. Their market position is that of a small but active local agency with a portfolio of diverse clients and partners. The website is built on WordPress with Elementor, indicating a modern and flexible technical infrastructure. The site is mobile-optimized and includes essential marketing and tracking tools such as Google Ads and Facebook Pixel. Security measures include HTTPS and Google reCAPTCHA v3 on contact forms, though some security headers are missing. Privacy compliance is partially addressed with a linked GDPR policy, but lacks a cookie consent mechanism. Overall, the website presents a professional and trustworthy digital presence consistent with the company's business claims.

S

Společnost Podané ruce o.p.s.

nabertekurz.cz

44

Naberte kurz is a Czech non-profit organization providing free, anonymous support and counseling services for individuals involved in gambling activities. The website serves as a safe communication platform for players and their families, emphasizing responsible gambling and offering various support channels. The service is linked to Společnost Podané ruce o.p.s., a recognized non-profit entity. Technically, the website employs modern web technologies including Vue.js and integrates Google Analytics and Google Tag Manager for tracking. The site is mobile optimized and presents a professional design with clear navigation. Security posture is moderate with HTTPS usage but lacks explicit security headers and cookie consent mechanisms. WHOIS data is unavailable, likely due to privacy protection, which is justified given the nature of the service. Overall, the website is trustworthy and serves its target audience effectively.

Ú

Úřad vlády České republiky

koureni-zabiji.cz

45

The website 'Kouření zabíjí' is an official Czech government-affiliated public health platform dedicated to providing comprehensive information on the risks of smoking, advice on quitting, and access to counseling and treatment programs. It serves as a national resource for smoking cessation, targeting Czech-speaking smokers and the general public concerned with tobacco-related health issues. The site is well-structured, content-rich, and maintains consistent branding aligned with government standards. Technically, the site employs a traditional web stack with jQuery, jQuery UI, Owl Carousel, and Klaro for cookie consent management. It uses HTTPS with a good SSL configuration but lacks modern security headers and uses an outdated jQuery version, which could pose security risks. The site is mobile-optimized and accessible, with good SEO practices and minimal user tracking, reflecting a privacy-conscious design. From a security perspective, the site enforces HTTPS and implements GDPR-compliant cookie consent. However, it lacks visible security headers, a published security policy, and vulnerability disclosure mechanisms. The absence of WHOIS data limits domain legitimacy verification, though the government affiliation and content quality strongly support its trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong content and privacy compliance but would benefit from technical security enhancements and improved transparency regarding security policies and domain registration details.

Ú

Úřad vlády České republiky, Národní monitorovací středisko pro drogy a závislosti

alkohol-skodi.cz

45

The website alkohol-skodi.cz is a Czech government-affiliated public health portal dedicated to providing information about the risks of alcohol consumption, offering advice, tests, and support resources. It is operated by the Úřad vlády České republiky and the Národní monitorovací středisko pro drogy a závislosti, positioning itself as a national authority on alcohol-related health education. The site targets the general adult population in the Czech Republic, especially those at risk of harmful drinking behaviors. Technically, the site uses a moderately modern tech stack including jQuery, jQuery UI, Owl Carousel, and Klaro for cookie consent. The site is mobile-optimized with good SEO and accessibility basics, though some outdated libraries and missing security headers suggest room for improvement. The site enforces HTTPS and implements GDPR-compliant cookie consent mechanisms, reflecting a strong privacy posture. Security-wise, the site benefits from HTTPS and no visible vulnerabilities in the HTML content. However, the absence of security headers and use of an outdated jQuery version present moderate risks. The lack of WHOIS data for the domain is a concern for trust and legitimacy verification, though the government affiliation and content quality mitigate this somewhat. Overall, the site is a trustworthy and professional resource for alcohol-related health information in the Czech Republic. Strategic improvements in security headers, updated libraries, and domain registration transparency would enhance its security posture and trustworthiness.

N

Národní monitorovací středisko pro drogy a závislosti

drogy-info.cz

47

The website drogy-info.cz serves as the official online presence of the Národní monitorovací středisko pro drogy a závislosti (National Monitoring Centre for Drugs and Addictions) under the Czech government. It provides comprehensive information on drug monitoring, addiction research, prevention, and public health initiatives. The site targets both the general public and professionals in the addiction and public health sectors, offering reports, news, event calendars, and contact resources. The business model is that of a government information portal, positioning itself as a national authority in its domain. Technically, the site employs a legacy JavaScript stack including jQuery 1.11.2, jQuery UI, Owl Carousel, and Klaro for cookie consent management. The site is mobile-optimized with good accessibility and SEO practices. However, some technical debt is evident in the use of outdated libraries and the absence of modern security headers. Performance is moderate, and hosting details are not explicitly disclosed. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. No major vulnerabilities or exposed sensitive data were detected in the HTML content. However, the lack of security headers and use of outdated JavaScript libraries present potential risks. The absence of WHOIS data reduces domain trustworthiness, though the government affiliation and content quality mitigate concerns. Overall, the site is a trustworthy, well-maintained government resource with good privacy compliance and user experience. Strategic improvements in security headers, library updates, and domain registration transparency would enhance its security posture and credibility.

S

Studentenwerk Dresden

studentenwerk-dresden.de

46

Studentenwerk Dresden is a regional non-profit organization dedicated to supporting students in Dresden and surrounding areas through a variety of services including student housing, financial aid (BAföG), university gastronomy, social counseling, cultural programs, and international student support. The organization holds an ISO 9001:2015 certification, indicating a commitment to quality management. Their website is well-structured, professionally designed, and targets students and university communities effectively. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Swiper.js for responsive and interactive user experience. Hosting is managed via schlundtech.de, and analytics are performed using Matomo with user consent mechanisms in place. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses cookie consent to comply with privacy regulations. However, it lacks explicit security policy documentation, incident response contacts, and advanced security headers. No vulnerabilities or exposed sensitive data were detected. The domain registration data aligns well with the organization's identity, supporting legitimacy and trustworthiness. Overall, Studentenwerk Dresden's website presents a secure, professional, and user-friendly platform that effectively serves its audience. Strategic improvements in security transparency and incident response readiness would further enhance its security posture and trust.

S

SumavaNet.CZ

toposumavi.cz

47

The website www.toposumavi.cz is a regional tourism portal dedicated to promoting the Pošumaví area in the Czech Republic. It provides comprehensive information for tourists including tips for trips, photo and video galleries, event calendars, accommodation listings, and regional product promotions. The site targets general tourists and families interested in cultural, natural, and recreational activities in the region. The business model is focused on regional tourism support and information dissemination, positioning itself as a key local resource for visitors. Technically, the website uses a traditional web stack with jQuery, Flexslider, and Font Awesome for UI components, along with Google Fonts for typography. It integrates Google Analytics and Facebook Pixel for tracking and marketing purposes. The site is served over HTTPS, ensuring encrypted communication, and includes a cookie consent mechanism compliant with GDPR principles. However, it lacks advanced security headers and visible privacy or terms of service pages, which are areas for improvement. From a security perspective, the site shows moderate maturity. HTTPS is enforced, and no sensitive data is exposed in the HTML. The cookie consent banner indicates awareness of privacy regulations. However, the absence of security headers and WHOIS data raises concerns about domain legitimacy and security posture. No forms or personal data collection mechanisms were detected on the main page, reducing immediate risk. Overall, the site is functional and reasonably secure but would benefit from enhanced security policies and transparency. The domain WHOIS data is missing, which is unusual and could indicate registration issues or a technical problem with the WHOIS server. This lack of data impacts trust and legitimacy assessments. The website content and external partner links suggest a legitimate regional tourism initiative, but the missing WHOIS information warrants caution. Strategic recommendations include adding privacy and terms policies, implementing security headers, verifying domain registration, and maintaining up-to-date third-party libraries to improve security and compliance.

T

Tudy na web

tudynaweb.cz

49

Tudy na web is a newly established Czech-based web development company specializing in creating modern websites, e-commerce platforms, applications, and SEO optimization services. The company targets businesses and individuals seeking professional digital solutions to enhance their online presence. Their market position is that of a small but professional service provider focused on quality and client satisfaction. Technically, the website employs modern frontend technologies such as Vue.js and Tailwind CSS, indicating a contemporary digital infrastructure. The hosting and domain registration are consistent with the company's regional focus in the Czech Republic and Slovakia. Security posture is adequate with HTTPS enabled and basic security headers, though there is room for improvement in implementing advanced security policies and cookie consent mechanisms. Overall, the website is professional, user-friendly, and compliant with GDPR through a dedicated privacy policy page. The business demonstrates credible contact information and client testimonials, enhancing trustworthiness. Strategic recommendations include enhancing security headers, adding cookie consent, and publishing terms of service to improve compliance and user trust.

Česko katalog s.r.o. operates an established online business directory platform focused on the Czech Republic market, providing categorized listings and promotional services for companies across multiple sectors including real estate, transportation, retail, and services. The website serves both businesses seeking visibility and consumers searching for company information. The platform is supported by a network of regional sister catalogs, enhancing its market reach and positioning. Technically, the site uses a custom-built infrastructure with common web technologies such as jQuery and Facebook SDK, and it maintains moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, though lacks advanced security headers and explicit incident response contacts. Privacy compliance is strong with clear GDPR-aligned policies and cookie management. Overall, the site is trustworthy and professionally maintained, with transparent WHOIS data confirming legitimacy.

S

StudyCheck

studycheck.de

49

StudyCheck.de is a well-established German educational platform providing extensive independent student reviews and rankings for over 22,000 study programs and 600 universities. It serves primarily students and prospective students in Germany and Austria, helping them find suitable study options through comprehensive content and interactive features. The platform leverages modern web technologies including multiple analytics and tracking tools, with a consent management platform to comply with privacy regulations. The website is professionally designed, mobile-optimized, and offers a good user experience with clear navigation and rich multimedia content. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and vulnerability disclosure information. Overall, the domain and website appear legitimate and trustworthy, though improvements in privacy and security transparency would enhance compliance and user trust.

W

Webkafe

webkafe.cz

45

Webkafe is a small Czech Republic-based company specializing in custom web design, graphic design, and visual branding services. Their website showcases a strong portfolio of regional clients, emphasizing personalized service and local market focus. Technically, the site is built on Drupal 8 with modern frontend libraries and includes Google Analytics with IP anonymization, indicating a moderate level of digital maturity. Security posture is average with no detected security headers and missing privacy and cookie policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the professional content and clear contact information mitigate some concerns. Overall, the website is functional, well-designed, and targets small to medium businesses and cultural organizations in the Czech Republic.

H

Handicare Group

handicaregroup.com

43

Handicare Group is a healthcare-focused company specializing in mobility and accessibility solutions for the physically challenged and elderly. Their product portfolio includes stairlifts, transfer and lifting aids, and vehicle accessibility products. The company targets investors and analysts, positioning itself as part of the larger Savaria Corporation with multiple international subsidiaries. Technically, the website is built on WordPress with modern JavaScript libraries and uses Google Analytics and Tag Manager for tracking. The site is mobile optimized and SEO friendly but lacks explicit privacy and cookie policies, which impacts privacy compliance. Security posture is moderate with HTTPS enabled but missing security headers and no visible incident response contacts. WHOIS data is unavailable, which reduces domain trustworthiness, though the business presence and content suggest legitimacy. Overall, the site scores well on content and business credibility but should improve privacy and security transparency.

W

Winncare

winncare.com

48

Winncare is a European healthcare company specializing in the design and manufacture of medical devices aimed at dependent patients and their caregivers. Their product portfolio includes pressure area care, medical beds, patient handling equipment, fall management solutions, and hygiene products. The company emphasizes innovation, quality, and environmental and social responsibility, with a presence across multiple European countries and recent acquisitions to expand their market reach. Technically, the website is built on WordPress with modern plugins and libraries, offering good mobile optimization and user experience. Security posture is solid with HTTPS and some best practices, but lacks explicit security policies and vulnerability disclosure mechanisms. The absence of WHOIS data for the domain raises some legitimacy concerns, though the professional website and business presence mitigate risk. Privacy compliance is partial, with cookie consent implemented but no clear privacy or terms of service pages. Overall, Winncare presents as a credible healthcare manufacturer with room for improvement in transparency and security disclosures.

I

Inspirit Energy s.r.o.

inspirit-design.cz

42

Inspirit Energy s.r.o., operating the Inspirit Design website, is a small Czech digital agency specializing in creating modern websites, custom e-commerce solutions, and online marketing campaigns including Google Ads and Facebook advertising. The company also offers graphic design and printed material services. The website presents a professional image with clear branding, client references, and comprehensive contact information, positioning itself as a trusted local service provider in the technology sector. The domain is newly registered in 2024, consistent with the company's founding date, and the WHOIS data aligns with the business information presented on the site. Technically, the website is built on WordPress 6.3.7 using the Elementor page builder, incorporating modern web technologies such as Google reCAPTCHA v3 for form security, Font Awesome icons, and various JavaScript libraries for UI enhancements. The site is mobile-optimized and includes SEO-friendly meta tags and Open Graph data. Hosting and domain registration are managed by Active24, a reputable provider. From a security perspective, the site uses HTTPS and implements Google reCAPTCHA to protect forms from spam. However, it lacks explicit security headers like Content-Security-Policy and HSTS, and there is no visible security.txt or vulnerability disclosure page. Privacy compliance is partially addressed with a GDPR policy page, but no cookie consent mechanism is evident. Tracking technologies include Google Ads and Facebook Pixel, indicating moderate user tracking. Overall, the website demonstrates a good balance of professional content, technical implementation, and business credibility, with room for improvement in security hardening and privacy compliance. The risk level is moderate with no critical vulnerabilities detected, but enhancements in security headers and cookie consent would strengthen the posture.

U

United Guides Holding Kft.

czechsuperbrands.com

41

Czech Superbrands, operated by United Guides Holding Kft., is a recognized media and branding platform focused on promoting leading brands within the Czech Republic. The website serves as a hub for brand awards, tribute events, yearbooks, and branding masterclasses, targeting both businesses and consumers interested in brand excellence. The platform has been active since 2012, demonstrating a stable market presence and consistent branding efforts. Technically, the website employs a combination of jQuery, Bootstrap, and various tracking technologies including Google Analytics and Adform, reflecting a moderate level of digital maturity. The site is accessible, mobile-optimized at a basic level, and features clear navigation and professional design.

The website dumaszinhaz.hu currently presents a security challenge page powered by BitNinja.IO, indicating that access is restricted by a Web Application Firewall or similar security mechanism. The page content is minimal and primarily serves as a redirect with a countdown timer. The site uses outdated CMS technologies such as Joomla 1.5 and WordPress 2.5, which are known to have security vulnerabilities if not properly maintained. No business or contact information, privacy policies, or cookie consent mechanisms are visible, limiting the ability to assess compliance or business credibility. The security posture is partially indicated by the presence of a security check, but no detailed security headers or SSL configuration data is available. Overall, the site is currently inaccessible for full content analysis due to the security challenge, resulting in a low AI score and limited insights.

W

WEDOS

let.cz

43

The analyzed URL is a captcha verification page provided by WEDOS Global Protection, a cybersecurity service provider established in 1997. The page serves as a security checkpoint to protect the website from automated abuse and does not contain typical business content such as privacy policies, contact information, or marketing materials. The domain is well-established and consistent with the registrar and hosting provider, indicating legitimacy. However, the content is minimal and primarily focused on security verification, limiting the ability to perform a full business or compliance analysis. The technical infrastructure appears basic with HTML and CSS usage, and no advanced frameworks or analytics are detected. Security best practices such as CSRF tokens and captcha usage are present, but no security headers or privacy compliance indicators are visible. Overall, the site demonstrates a moderate security posture but lacks transparency and user-facing compliance documentation.

The website at cdn-spurit.com is currently inaccessible due to an Access Denied error likely caused by Cloudflare's Web Application Firewall (WAF) or security settings. This prevents any meaningful content or metadata extraction. The domain is registered with GoDaddy since 2019 and uses Cloudflare DNS services, indicating some level of infrastructure maturity. However, the lack of accessible content, absence of privacy or cookie policies, and no visible contact or business information significantly limit the ability to assess the business or security posture. The site appears to be a small or new entity with minimal public-facing digital presence. Security posture cannot be fully evaluated due to blocked content, but the domain registration status flags indicate some protection against unauthorized changes. Overall, the site requires configuration adjustments to allow legitimate access and provide necessary compliance and trust information.

M

MZ.cz

inbudovy.cz

48

MZ.cz is a Czech language online media portal delivering daily articles and guides on a wide range of topics including finance, psychology, health, travel, and lifestyle. The site targets a general audience seeking informative and practical content presented in an accessible manner. It operates on a WordPress platform with SEO optimization and integrates Google Analytics and Adsense for tracking and monetization. The website demonstrates a good level of technical maturity with responsive design and structured data implementation. Security posture is adequate with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies. The absence of WHOIS registrant data limits transparency but the site content and structure suggest a legitimate and professional operation. Overall, MZ.cz is a well-maintained content portal with moderate risk and room for improvement in privacy compliance and security best practices.

T

TRADEMEDIA INTERNATIONAL

konference-vyroba40.cz

46

The website www.konference-vyroba40.cz represents a professional event platform for the 'Digitální výroba 2023' conference, focusing on digitalization and automation in Czech manufacturing industries. Organized by TRADEMEDIA INTERNATIONAL, the site showcases a comprehensive speaker lineup, partner ecosystem, and event logistics, targeting industry professionals and companies interested in Industry 4.0 technologies. The business model centers on event organization, workshops, and networking within the manufacturing technology sector. Technically, the site is built on Joomla CMS with Bootstrap framework, leveraging common libraries such as jQuery and Google Tag Manager for analytics and marketing. The site is mobile responsive with good SEO practices and a cookie consent mechanism compliant with GDPR opt-in standards. However, some accessibility features and security headers are lacking, and performance is moderate. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but the absence of security headers and lack of explicit privacy and terms policies indicate room for improvement. The missing WHOIS registration data reduces domain trustworthiness, though the site's content and partner associations suggest legitimacy. Overall, the site is a credible and professional event platform with moderate technical maturity and security posture. Strategic enhancements in privacy documentation, security headers, and WHOIS transparency would strengthen trust and compliance.

V

VECOM

vecom.cz

45

VECOM is a leading Czech company specializing in barrier-free access solutions, offering a wide range of products such as stairlifts, inclined and vertical platform lifts, ceiling lifting systems, stair climbers, and ramps. With over 25 years of experience and more than 10,000 installations across the Czech Republic, VECOM positions itself as the largest supplier in this niche market. Their services include free consultations, project proposals, and nationwide installation and support, targeting individuals and organizations seeking mobility solutions. The website is professionally designed, mobile-optimized, and built on Drupal 10, reflecting a mature digital presence with good SEO and accessibility standards.

A

Agenturmatching

agenturmatching.de

49

Agenturmatching is a German-based platform specializing in matching businesses with suitable marketing, advertising, SEO, and PR agencies. Recently merged with Sortlist, it leverages a powerful matching system to provide efficient and precise agency recommendations. The website is professionally designed, mobile-optimized, and offers a good user experience with clear navigation and relevant content. Technically, it uses modern web standards and Cloudflare for DNS and likely CDN services, ensuring good performance and security. Security posture is solid with HTTPS enforced, though some security headers and explicit policies are missing. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and well-positioned in the media and marketing sector.

M

Marktplatz Mittelstand GmbH & Co. KG

agentur.de

42

Agentur.de is a German online platform operated by Marktplatz Mittelstand GmbH & Co. KG that connects businesses, freelancers, and private individuals with qualified agencies across various sectors such as online marketing, graphic design, SEO, branding, software development, and more. The platform offers a comprehensive directory with over 70,000 listed agencies and facilitates free, non-binding inquiries for clients, positioning itself as a significant player in the German agency marketplace. The website features professional design, clear navigation, and a user-friendly interface optimized for mobile devices, reflecting a mature digital presence. Technically, the site employs modern web technologies including JavaScript, CSS, Bootstrap, and integrates third-party services like eTracker for analytics and OneTrust for cookie consent management. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and a published security policy or incident response contacts. Overall, the domain registration data aligns well with the business identity, supporting the site's legitimacy and trustworthiness.

The Magyarországi Zsidó Örökség Közalapítvány is a Hungarian non-profit foundation dedicated to preserving Jewish heritage and supporting Holocaust survivors and socially disadvantaged groups. Their key services include grant programs, cemetery maintenance, summer retreats, real estate leasing, and refugee assistance. The organization has a well-established presence with a domain registered since 1999, reflecting its long-term commitment and credibility within the Hungarian Jewish community. The website is professionally designed, mobile-optimized, and provides clear contact information and relevant content for its target audience. Technically, the website employs standard web technologies including jQuery and Google Analytics for tracking. While the site is functional and moderately optimized for performance and SEO, it lacks advanced security headers and a cookie consent mechanism, which are important for compliance with EU regulations. The absence of a published security policy or incident response contact suggests room for improvement in security governance. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. However, the lack of security headers and cookie consent reduces its overall security posture. No vulnerabilities or suspicious patterns were detected, and the WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's history. Overall, the website scores well in business credibility and content quality but could enhance its technical and security implementations to better protect user data and comply with privacy regulations. Strategic improvements in security headers, cookie consent, and incident response documentation are recommended to strengthen trust and compliance.