High-risk security reports

P

Pygmalion s.r.o.

prekladypygmalion.cz

47

Překlady Pygmalion is a Czech-based translation center with over 25 years of experience, offering translation, interpreting, and proofreading services across multiple language combinations. The company operates from Český Těšín with branches in Třinec and Ostrava, targeting individuals and businesses requiring professional language services. The website reflects a well-established local business with a clear service offering and multiple partner sites enhancing its market presence. Technically, the website employs standard modern web technologies including jQuery, Google Analytics, and Google Tag Manager, ensuring moderate performance and good mobile optimization. However, the absence of WHOIS data limits domain trust verification, and the lack of security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. Overall, the site is professional and functional but could benefit from enhanced security practices and clearer privacy controls.

W

WebMotion s.r.o.

webmotion.cz

45

WebMotion s.r.o. is a Czech digital agency established in 2009 specializing in custom responsive websites, e-commerce development, email marketing, and internet marketing services. The company targets businesses and individuals seeking professional digital solutions, leveraging a skilled team of designers, developers, SEO analysts, and social media experts. Their market position is stable with a focus on long-term client projects and a consistent brand presence. Technically, the website uses modern web standards with JavaScript libraries like ScrollReveal for enhanced user experience and is mobile optimized. However, there is room for improvement in accessibility and SEO structured data implementation. Security posture is moderate with HTTPS assumed but lacking visible security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced compliance and security transparency.

N

NEXTUP s.r.o.

nextup.cz

45

NEXTUP s.r.o. is a Czech-based technology company specializing in custom software development and IT solutions with over 20 years of market presence. The company serves business clients with tailored e-commerce platforms, mobile applications for Android and iOS, and system integration services. Their portfolio includes notable clients such as Activa, Bank of Georgia, and Blue Sky Media, reflecting a strong market position in the technology sector. The website presents a professional image with clear project showcases and comprehensive contact information, supporting their credibility and business maturity. Technically, the website employs modern web standards and Google Analytics for user tracking, with good mobile optimization and SEO practices. However, it lacks published privacy and cookie policies, which are critical for GDPR compliance. Security-wise, HTTPS is enforced, but the absence of security headers and incident response contacts indicates room for improvement. Overall, the site is trustworthy and well-structured but should enhance privacy and security transparency to align with best practices.

Imagine Anything s.r.o. is a small Czech technology company specializing in the development and operation of web applications using the Ruby on Rails platform. Their portfolio includes niche applications such as product label printing, product widgets for blogs, and a Google reviews plugin for e-commerce platforms. The company appears to target businesses and developers seeking specialized web application solutions. The website content is straightforward, providing basic company information and project links, but lacks comprehensive policy documentation and advanced security disclosures. From a technical perspective, the website is built on a Ruby on Rails stack, hosted likely via WEDOS, with moderate performance and basic mobile optimization. The site is simple and functional but does not leverage advanced SEO or accessibility features. No CMS or third-party analytics/tracking tools were detected, indicating minimal user tracking and marketing automation. Security posture is limited; the site lacks published privacy, cookie, or security policies, and no security headers were detected. There is no evidence of incident response or vulnerability disclosure mechanisms. The domain registration data is consistent with the business claims, showing a domain age appropriate for the company's founding year, which supports legitimacy. Overall, the site is low risk but would benefit from improved security and compliance transparency. Strategic recommendations include implementing privacy and cookie policies to meet GDPR requirements, adding security headers and HTTPS enforcement, publishing incident response contacts or security.txt files, and enhancing website design and accessibility to improve user trust and engagement.

N

Nakladatelství Paseka, s.r.o.

paseka.cz

49

Nakladatelství Paseka, s.r.o. is a Czech publishing house specializing in a diverse range of literary works including Czech and translated fiction, nonfiction, comics, and children's books. The company operates an e-commerce platform for direct book sales and maintains an active online presence with regular updates on new releases and promotions. The website is professionally designed, mobile-optimized, and incorporates modern web technologies such as WordPress and WooCommerce, supported by analytics and marketing tools like Google Tag Manager and Facebook Pixel. Security measures include HTTPS enforcement, reCAPTCHA on forms, and cookie consent mechanisms, reflecting a good security posture. However, the absence of WHOIS registration data reduces transparency and slightly impacts trustworthiness. Overall, the website presents a credible and professional digital front for the publishing business.

N

Nakladatelství Petr Prchal

nakladatelstviprchal.cz

43

Nakladatelství Petr Prchal is a well-established Czech publishing house specializing in educational books for children, particularly focusing on Czech history. Operating since 2003, it offers a variety of products including books, board games, and audiovisual materials, with a notable collaboration with Czech Television. The website is built on WordPress with WooCommerce, featuring a professional design and good user experience. Security measures include HTTPS and Google reCAPTCHA, but lack advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professionally maintained, serving a niche educational market effectively.

P

Pygmalion, s.r.o.

pygmalion.cz

46

Pygmalion, s.r.o. operates as a regional language school in the Czech Republic, offering a broad range of language courses including English, German, Spanish, French, Italian, Russian, Polish, and Czech for foreigners. The company also provides translation and interpretation services through partner sites. The website is well-structured, professionally designed, and targets a diverse audience including companies, adults, children, and teenagers. The business has a solid market position with certifications from Cambridge Center and Cambridge ESOL, indicating a reputable educational offering. Technically, the website employs common web technologies such as jQuery, Modernizr, and Google Analytics, with asynchronous script loading to optimize performance. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. No WHOIS data was retrievable, which impacts domain trust assessment. Security-wise, the site shows no immediate vulnerabilities or exposed sensitive data but would benefit from implementing security headers, privacy and cookie policies, and a security.txt file for vulnerability disclosure. The use of Google Ads remarketing and analytics indicates moderate user tracking, but privacy compliance is limited. Overall, the site is safe, professional, and trustworthy but could improve in privacy and security transparency. The overall risk is moderate with recommendations to enhance security headers, privacy compliance, and domain registration transparency to strengthen trust and compliance posture.

MEDIAPHARMA, a.s. is a Czech media company specializing in TV advertising systems and media production services, established since 2003. The company targets businesses seeking regional TV advertising and media production, offering a range of services including advertising campaign effectiveness research. Their market position is that of a small, established regional media provider with a professional online presence. Technically, the website uses legacy jQuery libraries and a custom CMS (Kompletweb), with moderate performance and basic mobile optimization. Security measures include Google reCAPTCHA v3 integration, but the site lacks modern security headers and uses outdated JavaScript libraries, posing potential risks. Privacy compliance is partial, with a cookie policy and consent mechanism but no explicit privacy policy. Overall, the website is professional and trustworthy but would benefit from technical and security improvements.

S

Svět knihy, s.r.o.

svetknihy.cz

49

Svět knihy, s.r.o. is a well-established Czech company specializing in organizing international book fairs and literary festivals, notably Svět knihy Praha and Svět knihy Plzeň. The company operates under the Association of Czech Booksellers and Publishers and also publishes the industry magazine Knižní novinky. The website targets book industry professionals, exhibitors, visitors, and literary enthusiasts, providing event information, exhibitor lists, and news updates. The business model focuses on event management, publishing, and industry networking platforms, positioning itself as a key player in the Czech literary and publishing market.

Hypercube.cz is a Czech Republic-based company specializing in unique, portable large-format advertising solutions designed for high-traffic locations such as hypermarkets, shopping centers, sports stadiums, and transport hubs. The website presents the business as a niche provider with a registered trademark, targeting businesses seeking impactful advertising media. The technical infrastructure is relatively basic, relying on older JavaScript libraries like jQuery 1.11.1 and jquery.fancybox, with no detected CMS or advanced frameworks. The site is moderately optimized for mobile and accessibility but lacks modern SEO and performance enhancements. Security posture is weak due to outdated libraries, absence of security headers, and no visible HTTPS enforcement details. Privacy and cookie policies are missing, and no contact information or forms are provided, limiting user engagement and compliance. Overall, the site is functional but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

FINCLUB plus, a.s. is a Czech company with over 30 years of experience specializing in natural dietary supplements sourced from Finland, natural cosmetics, and biodegradable cleaning products. It holds a strong market position as the largest partner and distributor of the Finnish manufacturer Hankintatukku Oy in Central Europe. The company supports both end customers and business partners through product sales and entrepreneurial opportunities. Technically, the website is built on the Shopsys platform, leveraging modern web technologies including Google Analytics, Facebook SDK, and reCAPTCHA for security. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS and some security best practices, though additional security headers and published security policies would enhance trust. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is trustworthy and professional, though the lack of WHOIS data introduces some uncertainty in domain registration legitimacy.

The website attendio.online presents as a minimal landing page with very limited content, primarily a branded heading. There is no detailed business description or contact information available on the site. The domain is registered to Gransy s.r.o., a Czech registrar, with a creation date in 2020, which aligns with a small or new business presence. The site uses Google Analytics and Google Tag Manager for tracking but lacks privacy and cookie policies, which impacts compliance and user trust. From a technical perspective, the site is hosted on DigitalOcean and uses standard web fonts and tracking scripts. There is no evidence of a CMS or advanced frameworks, suggesting a simple static or custom-built site. Performance and mobile optimization are basic, and SEO is minimal due to lack of meta tags and content. Security posture is weak with no detected security headers or DNSSEC enabled. The domain status clientTransferProhibited is a positive indicator, but the absence of privacy policies and contact details reduces trustworthiness. No WAF or blocking mechanisms were detected, and the site content is safe with no adult or questionable material. Overall, the site scores low on content quality, privacy compliance, and business credibility, with moderate technical implementation. Strategic improvements in content, security, and compliance are recommended to enhance trust and professionalism.

The website www.csobpb.cz is currently inaccessible in terms of meaningful content. The HTML retrieved is minimal, containing mostly obfuscated JavaScript and no visible business information, metadata, or user interface elements. This strongly suggests the presence of a Web Application Firewall (WAF) or security challenge page blocking access to the actual site content. The WHOIS lookup returned no registration data, indicating either privacy protection or an unregistered domain, which further complicates trust assessment. Due to these factors, a comprehensive analysis of the business, security posture, and compliance cannot be performed accurately. From a technical perspective, the site lacks visible metadata, forms, external links, or scripts that would indicate the use of modern frameworks or technologies. The absence of HTTPS indicators or security headers in the provided data suggests a basic or incomplete security configuration. No privacy, cookie, or terms of service policies were found, indicating poor compliance with common data protection regulations. Security-wise, the site appears to be protected by a generic WAF or security mechanism, but no direct vulnerabilities or security best practices can be assessed due to lack of accessible content. The domain's WHOIS data absence reduces trust and raises questions about legitimacy. Overall, the site scores very low on content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic recommendations include verifying domain registration status, ensuring proper HTTPS and security headers are implemented, publishing clear privacy and cookie policies, and providing accessible business and contact information to improve trust and compliance.

T

TestLine Clinical Diagnostics s.r.o.

testlinecd.de

49

TestLine Clinical Diagnostics s.r.o. is a medium-sized healthcare company specializing in the development, production, and distribution of in vitro diagnostic products for human and veterinary use. The company operates as part of the BioVendor Group, an international biotechnology conglomerate, enhancing its market position and credibility. Their website provides comprehensive product information, quality certificates, and customer service resources targeting healthcare professionals and laboratories. The business model focuses on innovation and quality in clinical diagnostics, supported by a professional online presence with multilingual support.

H

Hotel Panoráma Balatongyörök

hotelpanorama.hu

38

Hotel Panoráma Balatongyörök is a well-established hospitality business located in Hungary, offering accommodation, wellness, dining, and event services. The website reflects a mature digital presence with multiple awards and customer testimonials enhancing its market credibility. The business targets leisure travelers including families, seniors, and corporate clients, positioning itself as a trusted regional hotel with direct booking advantages. Technically, the site is built on WordPress using modern plugins and tracking tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved and formal security policies published. Privacy compliance is well addressed with clear cookie consent and privacy policies. Overall, the site demonstrates a professional and trustworthy online presence suitable for its industry and audience.

The website eupowers.hu is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain was registered in 2020, which is consistent with a relatively new business, but no business details, contact information, or policies are available on the site. The lack of accessible content and absence of privacy, cookie, or terms of service policies indicate a very low level of digital maturity and compliance. Technically, no scripts, frameworks, or CMS are detected, and no security headers or SSL configuration details are available from the provided data. This severely limits the ability to assess the website's security posture or business credibility. Overall, the site appears to be either under maintenance, restricted, or improperly configured for public access, resulting in a poor user experience and low trustworthiness.

Flogiston.hu is a Hungarian company specializing in the manufacturing, servicing, and wholesale distribution of gas consumption meters and related equipment. Established in 2000, it holds a niche position in the Hungarian energy sector, partnering with recognized brands such as Itron and Elster. The website targets industrial and residential customers requiring gas metering solutions and related services. Technically, the site uses a custom CMS with jQuery and common plugins like Nivo Slider and Lightbox, offering moderate performance and basic mobile optimization. Security posture is limited, with no visible HTTPS enforcement or security headers, though a cookie consent mechanism is implemented. Privacy compliance is basic, with a privacy policy present but lacking comprehensive GDPR indicators. Contact information is notably absent from the homepage, reducing user trust and accessibility. Overall, the site is functional but would benefit from enhanced security, privacy, and contact transparency.

The website at mvmoptimum.hu is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. Due to this restriction, no business information, contact details, or policy documents are available for analysis. The domain was registered in 2020, which is consistent with a relatively new business, but the lack of accessible content limits the ability to assess the company's market position or services. Technically, the site lacks visible security headers, scripts, or analytics, and no SSL or hosting details are discernible from the provided data. The security posture is weak due to the absence of HTTPS confirmation and security best practices. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a poor user experience and low trustworthiness.

M

MVM Watt Eta Kft.

mvmwatteta.hu

40

MVM Watt Eta Kft. is a Hungarian electrical engineering company specializing in the design, construction, and maintenance of low and medium voltage electrical networks, weak current networks, and solar power plants. As a subsidiary of the national energy group NKM Nemzeti Közművek Zrt., it holds a solid market position in Hungary's energy sector, offering services such as engineering design, electrical measurements, energy consulting, and public lighting development and operation. The website reflects a medium-sized enterprise with a professional and consistent brand presence targeting business clients and municipalities within Hungary. Technically, the site uses common JavaScript libraries like jQuery and Google Fonts but shows some outdated practices such as loading multiple jQuery versions and an HTTP script source, which could pose security risks. Security posture is moderate with no visible security headers and no HTTPS enforcement details available in the HTML content. Privacy compliance is partially met with a privacy policy PDF available, but no cookie consent mechanism is present. Contact information is clearly provided, enhancing business credibility.

M

MVM energy Romania

mvmenergy.ro

44

MVM energy Romania is an established energy supplier founded in 2015, providing electricity and natural gas supply services across Romania. The company targets both residential and non-residential consumers, offering contract flexibility regardless of consumption volume. Their website reflects a professional digital presence built on WordPress with modern SEO and user experience practices. The technical infrastructure includes popular plugins such as Yoast SEO and WPBakery Page Builder, ensuring content management efficiency and SEO optimization. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although some security headers and explicit security policies are absent. Overall, the website is trustworthy, compliant with GDPR, and provides clear contact information, supporting business credibility.

Ú

Ústav zemědělské ekonomiky a informací

nutridatabaze.cz

45

NutriDatabaze.cz is an official Czech Republic food composition database managed by the Center for Food Composition Database within the Institute of Agricultural Economics and Information (ÚZEI). It provides detailed nutritional data for over 1100 food items, supported by the Ministry of Agriculture. The website targets researchers, nutrition professionals, and registered users seeking reliable food composition data. The business model is primarily informational with free registration and controlled data export access. The site holds a strong market position as a government-backed authoritative source for Czech food data. Technically, the website uses a custom CMS with common JavaScript libraries such as jQuery and Google Analytics for visitor tracking with IP anonymization. Hosting is provided by a Czech hosting company. The site demonstrates moderate performance and basic mobile optimization. SEO and accessibility are adequately addressed, though improvements are possible. From a security perspective, HTTPS is implied but no explicit security headers were detected. The site includes secure login forms with user experience features like CAPS LOCK warnings. Privacy policies and cookie usage are declared, but no explicit consent mechanism is implemented. No incident response or vulnerability disclosure information is published, indicating room for maturity improvement. Overall, the website is professional, trustworthy, and content-rich, but the absence of WHOIS data and some security best practices slightly reduce its trust score. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and verifying domain registration details to improve credibility and compliance.

S

Studio Družba

studiodruzba.cz

44

Studio Družba is a small creative agency based in Vysoké Mýto, Czech Republic, founded in 2015. The company specializes in marketing, branding, graphic design, video production, animation, and photography services. Their website reflects a professional and consistent brand image, targeting businesses seeking creative and visual identity solutions. The company maintains a portfolio of client projects and emphasizes education and content creation for social media. Technically, the website is built on WordPress using the Elementor page builder and Astra theme, hosted by Wedos. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR. Security posture is adequate with HTTPS enabled, but lacks visible security headers and explicit security policies. No incident response or vulnerability disclosure information is publicly available. Overall, the website is trustworthy, well-maintained, and suitable for its business purpose.

D

Důvěřuj svému lékaři

antibiotickarezistence.cz

46

The website 'Důvěřuj svému lékaři' is an educational campaign focused on raising awareness about antibiotic resistance in the Czech Republic. It targets both the general public and healthcare professionals, providing information on the risks of antibiotic misuse and the global threat posed by resistant bacteria. The site is supported by the State Health Institute, indicating a government or public health affiliation. Technically, the site is built on WordPress with modern libraries such as jQuery and Bootstrap, and integrates Google Analytics and Tag Manager for tracking. The site is well-structured, mobile-optimized, and uses HTTPS, but lacks some security headers and cookie consent mechanisms. Security posture is moderate with no visible vulnerabilities but could be improved by adding explicit security policies and headers. WHOIS data is unavailable, which slightly reduces trust but the official branding and content quality support legitimacy. Overall, the site is a credible, informative resource with room for enhanced privacy and security compliance.

T

TENDERMARKET

tendermarket.cz

48

TenderMarket.cz is a Czech language website focused on providing information and guidance related to tendering and procurement processes, targeting suppliers and contracting authorities. The platform appears to serve as an informational resource rather than a transactional or e-commerce site. The website uses modern web technologies such as Angular and Material Design components, hosted on Czech hosting infrastructure. However, the site lacks visible privacy, cookie, and terms of service policies, which are important for compliance and user trust. Security headers and explicit security policies are not evident, indicating room for improvement in security posture. The domain is well aged and registered with a reputable Czech registrar, supporting the legitimacy of the business. Overall, the site is functional but basic in content and compliance features.

The website egordion.tendersystems.cz is a government-related public procurement platform primarily serving Czech public sector entities such as the City of Prague. It provides listings of public tenders, filtering options, and supplier registration functionalities. The platform is built on legacy JavaServer Faces technology with RichFaces and Ajax4jsf components, indicating a mature but dated technical infrastructure. Google Analytics is used for visitor tracking, but no visible privacy or cookie policies are present, which is a compliance gap. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and vulnerability disclosures. The absence of WHOIS data reduces domain trustworthiness, though the content and references to official government usage suggest legitimacy. Overall, the site is functional but would benefit from modernization, improved privacy compliance, and enhanced security measures.

The website uzitecnyweb.cz is currently inaccessible, returning a 403 Forbidden error page which blocks all content and metadata. The domain is registered since 2009 with REG-ZONER, indicating a long-standing registration, but no accessible business or contact information is available on the site. Due to the blocked content, no technical infrastructure details, security policies, or business descriptions can be extracted. The lack of HTTPS and security headers further reduces the security posture. Overall, the site appears inactive or restricted, limiting its digital maturity and trustworthiness.

E

eSports.cz, s.r.o.

hcvl.cz

45

HC VERVA Litvínov is a Czech ice hockey club with an official website providing comprehensive information about the team, including news, match schedules, ticket sales, and multimedia content. The site targets hockey fans and the local community, offering a professional and consistent brand experience supported by official partners and sponsors. The business operates under eSports.cz, s.r.o., indicating a structured media and sports engagement model. Technically, the website uses modern JavaScript libraries such as Swiper.js and BaguetteBox.js, with a custom CMS likely in place. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism with granular controls, but lacks explicit security headers and detailed security policies. No critical vulnerabilities or suspicious WHOIS inconsistencies were found, and the domain registration aligns well with the business identity. Overall, the site is moderately secure and compliant with GDPR, but could improve in security best practices and transparency.

The website orlenkoltrans.pl is currently inaccessible, returning a 403 Forbidden error with minimal HTML content, indicating that access is blocked by administrative rules. Due to this, no meaningful content, metadata, or business information is available for analysis. The WHOIS data provided is suspicious, showing a domain creation date in the future (May 24, 2025), which is inconsistent and undermines trust in the domain's legitimacy. No security policies, privacy statements, or contact information are present on the site, and no technologies or external links can be identified. Overall, the website appears non-functional and provides no value to visitors at this time.

P

Page Builder s.r.o.

pobo.hu

49

Pobo Page Builder, operated by Page Builder s.r.o., is a technology company specializing in providing a page building tool primarily targeting e-commerce businesses in Hungary and the Czech Republic. The website showcases their services including AI-powered content generation and design tools, supported by customer service and marketing teams. The company positions itself as a niche SaaS provider with a focus on enhancing online shops' page design and functionality. Technically, the website employs modern tracking and chat technologies such as Google Tag Manager, Google Optimize, Freshchat, and Abgar widgets, hosted on VasHosting.cz. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is partial, with privacy and terms documents available as PDFs but no cookie consent mechanism or security incident contact information. Overall, the website is professional but shows some content placeholders indicating incomplete localization or content delivery. The WHOIS data aligns well with the website's business claims, supporting legitimacy. Strategic improvements in security policies, privacy compliance, and content completeness would enhance trust and compliance.

U

Ultimate Store Kit

storekit.pro

28

Ultimate Store Kit is a specialized WooCommerce Elementor addon provider offering a plugin with over 69 widgets designed to enhance WooCommerce websites. The business targets web designers and WooCommerce users seeking to build custom product pages and dynamic checkout experiences. The website is built on WordPress with WooCommerce and Elementor frameworks, reflecting a modern and professional digital infrastructure. SEO optimization is evident with Rank Math integration and structured data usage. Security posture is moderate with HTTPS enabled but lacks advanced security headers and privacy compliance features. The absence of contact information and privacy policies suggests room for improvement in transparency and compliance. Overall, the domain appears legitimate though WHOIS data is unavailable due to TLD restrictions and privacy protection, which is common for small plugin businesses.

W

Waldhart Software

onlineshop.ws

45

Waldhart Software operates the onlineshop.ws domain, providing specialized e-commerce solutions primarily for ski schools, snow sports schools, and related outdoor sports businesses. The website serves as a reference portal showcasing over 300 live client online shops, indicating a focused B2B business model targeting the winter and summer sports education sector. The company appears to be a small-sized entity founded in 2018, with a consistent brand presence and a clear market niche in Austria and neighboring countries. Technically, the website leverages modern web technologies including the Quasar Framework and Google Maps API, delivering a responsive and user-friendly experience. Hosting is likely provided by profiwebspace.at, with domain registration managed by InterNetX GmbH. The site uses HTTPS, but lacks DNSSEC and security headers, which are areas for improvement. No analytics or advertising scripts were detected, suggesting a privacy-conscious or minimalistic approach. From a security perspective, the site has a moderate posture with HTTPS enabled but missing important security headers and DNSSEC. There are no visible vulnerabilities or exposed sensitive data in the provided content. However, the absence of privacy and cookie policies, as well as terms of service, indicates compliance gaps with GDPR and general privacy best practices. Overall, the website is professional and trustworthy within its niche but would benefit from enhanced privacy compliance and improved security configurations to strengthen user trust and regulatory adherence.

P

Perfectweb

perfectweb.at

48

Perfectweb is a small regional web design and advertising agency based in Austria, specializing in web design, CMS, graphic design, marketing, and online shop solutions primarily serving Vienna and the Weinviertel region. The website presents a basic but professional digital presence with clear navigation and references to client projects. Technical infrastructure is modest, relying on standard HTML, CSS, and JavaScript with a cookie consent plugin for GDPR compliance. Security posture is limited with no visible HTTPS confirmation or security headers, and WHOIS data is unavailable, which raises concerns about domain transparency. Overall, the site is functional but would benefit from enhanced security and technical modernization.

1

123ruceni.cz

123ruceni.cz

45

123ruceni.cz is an established Czech online insurance comparison platform specializing in vehicle insurance products including mandatory liability insurance, comprehensive insurance, and travel insurance. The website offers users easy-to-use calculators to compare insurance offers and find cheaper options, targeting vehicle owners and drivers in the Czech Republic. The platform positions itself as a cost-saving tool with a strong local market presence and partnerships with major insurance companies. Technically, the site is built on WordPress with modern SEO and analytics integrations, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and secure forms, though some security headers and policies could be improved. Privacy and cookie policies are present but basic, and contact information is limited to an email address. WHOIS data is unavailable, which limits domain trust assessment. Overall, the site is professional, trustworthy, and serves its business purpose effectively.