High-risk security reports

MoraviaForYou.cz is a regional tourism portal focused on promoting travel, accommodation, and wellness packages in the Central Moravia region of the Czech Republic. The site offers curated vacation packages targeting tourists interested in cultural events, family vacations, and wellness experiences. Supported by the Czech Ministry for Regional Development, it holds a credible position within the regional tourism market. Technically, the website uses modern JavaScript libraries such as jQuery, Bootstrap, and Google Tag Manager for analytics, providing a responsive and user-friendly experience. However, it lacks explicit privacy and cookie policies, and security headers are not evident, which could be improved to enhance compliance and security posture. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy compliance and security best practices.

R

RNDr. Ivan Marek

olomoucregioncard.cz

42

Olomouc region Card is a regional tourism service offering a prepaid tourist card that grants free and discounted access to over 100 attractions and more than 80 discount locations in the Olomouc region, Central Moravia, and Jeseníky. The service is supported by regional government and tourism organizations, positioning it as a key facilitator for regional tourism. The website is professionally designed using WordPress with Elementor and Avada theme, featuring multi-language support and clear navigation. It integrates Google Analytics and Tag Manager for visitor tracking and employs a cookie consent mechanism to comply with privacy regulations. Security posture is adequate with HTTPS enforced, though security headers and incident response information are lacking. The absence of WHOIS data limits domain trust analysis but the presence of official partners and contact information supports legitimacy. Overall, the website is a reliable digital platform for regional tourism promotion.

Z

ZŠ Bratrství, příspěvková organizace

zsbrat.cz

49

ZŠ Bratrství, příspěvková organizace, is a regional primary school located in the Czech Republic, focusing on fostering creativity, logical thinking, and mutual understanding among students. The website serves as an information portal for students, parents, and the local community, providing updates on school events, educational programs, and community projects. The school positions itself as an inclusive educational institution serving the Podhostýnsko region. Technically, the website employs common web technologies such as jQuery, FontAwesome, and Google reCAPTCHA, with integrations for social media platforms like Facebook and YouTube. The site is mobile-optimized and includes a cookie consent mechanism, reflecting a basic level of privacy compliance. Security-wise, the site uses HTTPS and some best practices but lacks visible security headers and a published incident response policy. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness and suggesting the need for further verification of domain registration status. Overall, the website is professional, content-rich, and trustworthy from a user perspective but could improve in security transparency and domain legitimacy verification.

O

Obec Josefův Důl

josefuvdul.eu

46

Obec Josefův Důl is the official website of the municipality Josefův Důl located in the Czech Republic. The site serves residents and visitors by providing local news, event calendars, municipal office information, and tourism-related content. It positions itself as a trusted source for community updates and official communications. The website is well-structured with clear navigation and consistent branding, reflecting its role as a government entity. The presence of social media links further supports community engagement. Technically, the website uses a combination of jQuery, Bootstrap, Swiper.js, and Highslide JS, likely managed through a CMS platform identified as Lego2. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. Cookie consent is implemented, indicating awareness of privacy regulations, although explicit privacy and terms of service pages are not found. From a security perspective, the site uses HTTPS, but no detailed security headers were detected in the provided data. No vulnerabilities or exposed sensitive data were found. The WHOIS data is unavailable due to EURid privacy policies, which is common for .eu domains. The domain appears legitimate and consistent with the municipal identity. Overall, the site demonstrates a solid security posture for a local government website but could improve by adding explicit privacy and security policies and enhancing security headers. The overall risk assessment is low, with recommendations focusing on improving privacy disclosures, security headers, and ongoing monitoring of third-party scripts. The website is safe for general audiences and does not contain any adult or questionable content.

J

Jiřetín pod Bukovou

jiretinpb.cz

47

Jiřetín pod Bukovou operates an official municipal website serving residents and visitors with local government information, news, documents, and event calendars. The site positions itself as the authoritative source for municipal services and community engagement in the Czech Republic. The business model is governmental, focusing on public service and transparency. Technically, the website is built on WordPress with a modern theme and plugins, including Google Analytics for tracking and OneSignal for push notifications, indicating a moderate level of digital maturity. The site is mobile-optimized and accessible, with good SEO practices and structured data enhancing search visibility. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is minimal, with no visible privacy or cookie policies, which is a notable gap. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

O

Obec Albrechtice v Jizerských horách

albrechtice-jh.cz

40

Obec Albrechtice v Jizerských horách operates an official municipal website serving local residents and tourists with information about the community, events, and municipal services. The site is positioned as a local government portal providing trusted and official content including news, official notices, tourist activities, and contact information. The target audience includes residents, visitors, and stakeholders interested in the Jizerské hory region. Technically, the website employs a modern frontend stack including jQuery, Bootstrap, Swiper.js, and Google Translate integration, ensuring good mobile responsiveness and accessibility. The site uses HTTPS and implements cookie consent mechanisms, reflecting a moderate level of digital maturity. However, no advanced security headers or explicit security policies were detected. From a security perspective, the site shows good baseline practices such as HTTPS enforcement and privacy compliance with GDPR. The absence of WHOIS data limits domain trust assessment, but the presence of official contact details and accessibility certification supports legitimacy. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is a well-maintained municipal portal with good content quality and user experience. The main risk is the lack of WHOIS transparency and limited explicit security policies. Strategic improvements in security headers and incident response disclosures would enhance trust and compliance.

O

Obec Plavy

plavy.cz

37

Obec Plavy operates as the official municipal website for the village of Plavy in the Czech Republic, providing residents and visitors with comprehensive local government information, news, event calendars, official documents, and contact details. The site serves as a critical communication channel for the municipality, supporting transparency and community engagement. The website is well-structured, primarily targeting local citizens and stakeholders interested in municipal affairs. Technically, the site employs a modern tech stack including jQuery, Bootstrap, and Swiper.js, built on a CMS platform likely GCM CMS, ensuring responsive design and moderate performance. Security posture is solid with HTTPS enforcement, security headers, and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site demonstrates good privacy compliance with a GDPR page and cookie consent, and WHOIS data confirms legitimacy and consistency with the municipal identity. Strategic recommendations include enhancing security transparency, updating libraries regularly, and improving accessibility features to further strengthen trust and compliance.

Rozvoj Tanvaldska z.s. is a non-profit association dedicated to supporting the development of the Tanvaldsko region in the Czech Republic. The organization focuses on benefiting municipalities, non-profit organizations, and small to medium enterprises through regional development projects, many of which are co-financed by EU and regional government funds. The website serves as an informational platform for the association's activities, projects, and regional maps, targeting local stakeholders and community members. Technically, the website is built on the eStránky.cz CMS platform, utilizing older versions of jQuery and jQuery UI, with Google Analytics and Tag Manager for user tracking. The site is accessible and functional but shows basic mobile optimization and limited accessibility features. Security posture is moderate with no visible security headers and outdated libraries, and privacy compliance is weak due to the absence of privacy and cookie policies. WHOIS data is unavailable, which impacts domain trustworthiness, though the website content and external references support legitimacy. Overall, the site is suitable for its non-profit regional development purpose but requires improvements in security, privacy compliance, and technical modernization.

I

iptvsa.store

riptechsolutions.com

48

RIPTechSolution.com is a specialized IPTV review and comparison website targeting English-speaking countries such as South Africa, USA, UK, Australia, Ireland, and Canada. The platform offers unbiased IPTV provider reviews, streaming performance tests, device compatibility information, and user feedback updated for 2025. The business operates primarily as a content and affiliate marketing site, helping consumers choose IPTV services based on price, quality, and features. The website is relatively new, founded in 2024, and hosted by Spaceship, Inc., with a WordPress CMS and Elementor page builder technology stack.

E

Ecommerce Bridge

ecommercebridge.sk

34

Ecommerce Bridge Slovensko is a specialized online media platform serving the ecommerce industry in Slovakia, targeting e-shops, marketers, and ecommerce enthusiasts. The site offers news, trends, video interviews, podcasts, and expert articles, positioning itself as a regional leader in ecommerce media. Technically, the website is built on WordPress with Yoast SEO for optimization and integrates OneSignal for push notifications, indicating a moderate level of digital maturity. The site is mobile-optimized and uses modern web fonts and libraries such as Swiper.js for UI components. Security-wise, the website enforces HTTPS and uses push notification services securely but lacks explicit security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

W

WEBHOUSE s.r.o.

vismo.cz

44

WEBHOUSE s.r.o. is a well-established Czech company specializing in providing web solutions and editorial systems primarily for public administration entities such as cities and municipalities. With a history dating back to 1997 and managing over 2,000 websites including more than 30% of Czech towns, the company holds a strong market position as a leading supplier in its sector. Their flagship product, the vismo 6 editorial system, emphasizes ease of use, modern technology, and compliance with current legislation. The website reflects a professional and consistent brand image targeting government clients. Technically, the website employs a modern JavaScript stack including Vue.js and Mustache.js, integrates advanced analytics and tracking tools such as Google Analytics, Facebook Pixel, and Smartlook, and enforces HTTPS with Google reCAPTCHA v3 for security. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers could be improved. Cookie consent mechanisms are implemented in compliance with GDPR. From a security perspective, the site demonstrates good practices with encrypted connections and user consent for tracking, but lacks explicit published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. WHOIS data confirms the domain's legitimacy and long-term presence, consistent with the company's claims. Overall, the website presents a trustworthy, professional, and secure digital presence suitable for its government-focused audience, with room for enhancement in security policy transparency and header configurations.

J

Jazyky-online.info

jazyky-online.info

45

Jazyky-online.info is a Czech language educational portal offering free online language learning resources primarily targeting self-learners including adults and children. The website provides modules for learning English and other major world languages such as German, French, Spanish, Russian, Chinese, and Japanese. It operates as a small-scale educational platform with a long history dating back to at least 2007, emphasizing free access to language education. Technically, the site is built with basic HTML and CSS, includes legacy Google Analytics tracking, and lacks modern CMS or frameworks. The site is accessible without WAF or blocking mechanisms, but it does not enforce HTTPS or implement modern security headers, indicating a basic security posture. Privacy compliance is minimal, with a privacy policy present but no cookie consent mechanism. Contact is available only via an external contact form on a partner domain. Overall, the site is safe for general audiences and maintains moderate trustworthiness despite limited transparency in WHOIS data due to privacy protection.

V

Vydavatelství MCU s.r.o.

mcumedia.cz

46

Vydavatelství MCU s.r.o. is a well-established Czech publishing company specializing in multilingual photographic books, tourist guides, and cultural promotional materials focused on the Czech Republic. The company operates a wholesale subsidiary and manages tourist information portals and large-format photography exhibitions, positioning itself as a key regional player in South Bohemia's tourism and cultural media sector. The website is professionally designed with clear navigation and mobile responsiveness, leveraging modern frontend technologies such as Bootstrap and GLightbox. However, the absence of WHOIS data and privacy/cookie policies indicates gaps in transparency and compliance. Security posture is moderate with no detected security headers and unknown SSL configuration, suggesting room for improvement in hardening the website's defenses. Overall, the business credibility is high due to detailed company information and multiple verified contact points, but privacy compliance and security practices require enhancement to meet modern standards.

M

Mikroregion Tanvaldsko

tanvaldsko.info

45

Mikroregion Tanvaldsko operates as a local government microregion in the Czech Republic, providing official information, event calendars, social services, and tourism-related content to residents and visitors. The website serves as a central hub for community engagement and regional cooperation among member municipalities. Technically, the site employs modern JavaScript libraries such as jQuery, Bootstrap, and Swiper.js, indicating a moderate level of digital maturity with responsive design and good navigation. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and published privacy policies, which are areas for improvement. The WHOIS data is malformed and incomplete, limiting domain trust verification, but the website content and external partner links support its legitimacy. Overall, the site is functional, informative, and trustworthy for its intended audience, though it would benefit from enhanced security and compliance documentation.

R

Raab Computer s.r.o.

affc-ok.cz

48

The website www.affc-ok.cz represents a regional government or non-profit initiative focused on the Audit Family Friendly Community program in the Olomoucký kraj region of the Czech Republic. It aims to support municipalities in improving living conditions for families through audits, certifications, and educational activities. The site is professionally designed with clear navigation and content relevant to its target audience of local government bodies and municipalities. Technically, it employs common JavaScript libraries such as jQuery, FontAwesome, bxSlider, and others to enhance user experience. However, no CMS or hosting provider information is discernible. Security posture is moderate with cookie consent implemented but lacking explicit security headers and no visible incident response or vulnerability disclosure policies. WHOIS data is unavailable, which reduces domain trustworthiness but the website content and design suggest legitimacy. Overall, the site is safe, non-adult, and well-targeted for its audience.

E

ENVIPARTNER, s.r.o.

edpp.cz

41

The website edpp.cz operates as a specialized digital flood portal primarily serving government agencies, municipalities, emergency services, and the general public in the Czech Republic. It provides comprehensive flood plans, weather forecasts, water level data, radar imagery, and flood risk maps. The portal is managed by ENVIPARTNER, s.r.o., a Czech company with a consistent domain registration dating back to 2010, aligning with the business's operational history. The content is professionally presented in Czech and targets users interested in flood risk management and meteorological data. Technically, the website employs a modern JavaScript stack including jQuery and Leaflet for interactive mapping, alongside Google Analytics and Tag Manager for user tracking. The site is moderately optimized for performance and mobile use, with good SEO practices and clear navigation. However, it lacks advanced accessibility features and some modern security headers, which could be improved. From a security perspective, the site uses HTTPS but does not implement key security headers such as Content-Security-Policy or Strict-Transport-Security. There is no visible cookie consent mechanism, which may affect GDPR compliance. No incident response or security policy information is published, and no vulnerability disclosure or security.txt file is present. Despite these gaps, no critical vulnerabilities or suspicious content were detected. Overall, edpp.cz is a trustworthy and professionally maintained portal with a clear business focus and consistent domain registration. Strategic improvements in privacy compliance and security hardening would enhance its risk posture and user trust.

S

Střední Morava – Sdružení cestovního ruchu

stredni-morava.cz

46

Střední Morava – Sdružení cestovního ruchu is a regional tourism association focused on promoting travel, cultural events, and accommodation in the Central Moravia region of the Czech Republic. The website serves as an information hub for tourists, offering event listings, interactive maps, and regional discount cards. The organization appears to be a small non-profit entity established in 2001, with strong ties to regional and national tourism bodies. Technically, the website uses a custom CMS (Noteo Engine) with modern JavaScript libraries and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized and provides multilingual support. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and has no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies or incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR, making it a reliable source for regional tourism information.

K

Kulturní centrum Turnov, s.r.o.

kcturnov.cz

41

Kulturní centrum Turnov, s.r.o. operates as a regional cultural center in Turnov, Czech Republic, providing a variety of cultural events including theater, music concerts, and film screenings. The website serves as a portal for event programming, ticketing, and cultural information targeting a general audience interested in arts and culture. The business model focuses on event organization and venue management, positioning itself as a key cultural hub in the region. Technically, the website employs modern web technologies such as JavaScript ES modules, CSS, and HTML5, with asynchronous data loading via Fetch API. The site is mobile-optimized and includes SEO best practices like meta descriptions and keywords. However, no CMS or hosting provider details are evident, and some accessibility features could be improved. From a security perspective, the site uses HTTPS as implied by the base URL, includes a cookie consent mechanism, and integrates Google Analytics for visitor tracking. There is a lack of explicit security headers and no visible incident response or security policy pages. The absence of WHOIS domain registration data reduces trustworthiness and raises concerns about domain legitimacy. Overall, the website is professional and content-rich but would benefit from enhanced security practices, clearer business contact information, and verified domain registration details to improve trust and compliance.

K

Kadlec - elektronika, s.r.o.

kadlecelektro.cz

48

Kadlec - elektronika, s.r.o. is a specialized Czech manufacturer of electronic display and queue management systems, operating since 1998. The company offers a broad portfolio of products including call systems, reservation systems, payment terminals, LED panels, and custom industrial displays. Their market position is that of a quality-focused, flexible provider serving business and industrial clients requiring advanced electronic visualization and queue management solutions. The website is professionally designed, bilingual (Czech and English), and provides clear contact channels and GDPR-compliant data collection mechanisms. Technically, the site is built on WordPress with modern libraries such as jQuery and Bootstrap, and integrates marketing and analytics tools with user consent. Security posture is solid with HTTPS and cookie consent, though some security headers and explicit policies could be improved. Overall, the site reflects a mature, trustworthy business with good digital maturity and compliance.

The website munipolis.cz is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content. This prevents any meaningful extraction of business, security, or compliance information from the site itself. The domain is registered since 2020 through REG-WEDOS with AWS name servers, indicating a Czech Republic based entity. However, no metadata, contact details, or policies are available on the site to assess the business or security posture. The hosting infrastructure appears to be Amazon AWS, but no technical or security headers data is provided. Due to the blocked content, the overall risk assessment is limited, and the site scores very low on content quality, technical implementation, security posture, privacy compliance, and business credibility.

Janov nad Nisou operates an official municipal website serving residents and visitors with comprehensive local government information, news, and public services. The site provides access to official documents, contact details for municipal offices and police, and tourism-related content, positioning itself as a trusted source for community engagement and information dissemination. The domain has been registered since 2000, reflecting a stable and established online presence consistent with a government entity. Technically, the website utilizes a CMS Made Simple platform with Foundation 5.0.2 framework, jQuery, and standard web technologies. The site is hosted by WEDOS and enforces HTTPS, ensuring secure communications. While the site is moderately optimized for mobile and accessibility, there is room for improvement in performance and modern SEO practices. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site benefits from HTTPS and absence of exposed sensitive data but lacks important security headers and publicly available security policies or incident response contacts. The absence of a cookie consent mechanism is a compliance gap under GDPR. Overall, the security posture is adequate but could be enhanced with standard best practices. The website is safe for general audiences, with no adult or questionable content detected. Contact information is clearly presented, and the WHOIS data confirms legitimacy and consistency with the municipal nature of the site. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and updating technical components to improve security and compliance.

M

Muzeum skla a bižuterie v Jablonci nad Nisou

msb-jablonec.cz

45

Muzeum skla a bižuterie v Jablonci nad Nisou is a specialized cultural institution in the Czech Republic dedicated to the preservation and exhibition of glass and bijouterie artifacts. It holds unique and extensive collections, including the world's largest public collection of glass Christmas ornaments. The museum operates under the auspices of the Czech Ministry of Culture, positioning it as a significant governmental and non-profit entity in the cultural sector. The website reflects a professional and comprehensive digital presence, offering detailed information about exhibitions, events, and visitor services, targeting a broad audience including families, tourists, and researchers. Technically, the website employs modern web standards with responsive design, accessibility considerations, and integration of Google Tag Manager for analytics and marketing. Cookie consent mechanisms are implemented, demonstrating awareness of privacy regulations such as GDPR. However, some security best practices like explicit security headers and published security policies are absent, representing areas for improvement. The security posture is solid with HTTPS enforced and no visible vulnerabilities, but the lack of WHOIS data limits domain registration trust analysis. Despite this, the website's affiliation with the Ministry of Culture and consistent business information support its legitimacy. Overall, the site is well-maintained, user-friendly, and trustworthy, serving its cultural mission effectively.

J

Jizerská o.p.s.

jizerskaops.cz

48

Jizerská o.p.s. is a Czech non-profit organization dedicated to supporting and providing information about the Jizerská magistrála, a popular cross-country skiing trail network in the Jizera Mountains. The website offers comprehensive resources including trail conditions, weather updates, event announcements, and tourist information aimed at skiers, tourists, and local community members. The organization maintains active social media profiles on Facebook and Instagram to engage with its audience. Technically, the website is built on a custom CMS platform likely provided by Galileo Corporation, utilizing JavaScript libraries such as jQuery, MooTools, and Highcharts for interactive features. The site is served over HTTPS and includes cookie consent mechanisms, indicating attention to privacy compliance. The design is user-friendly, mobile-optimized, and accessible, with clear navigation and relevant content. From a security perspective, the site employs HTTPS but lacks visible advanced security headers, which could be improved. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data is a concern for domain legitimacy and trust, though the website content and social presence suggest a legitimate entity. Overall, the security posture is moderate with room for enhancement. Strategically, the site serves as an important regional resource for winter sports enthusiasts and tourists, fostering community engagement and support through sponsorship and public fundraising. Recommendations include improving domain registration transparency, implementing additional security headers, and enhancing incident response and security policy disclosures to strengthen trust and compliance.

K

Kulturní centrum Zahrada

kczahrada.cz

42

Kulturní centrum Zahrada is a small, community-focused cultural and social center based in Prague 11, Czech Republic. It offers a broad range of cultural events including concerts, theater, film screenings, educational programs, workshops, and leisure activities targeting a diverse audience from children to seniors. The website reflects a well-maintained digital presence with clear navigation, multilingual support, and integration of event management and ticketing systems. Technically, the site is built on WordPress using the Avada theme and several popular plugins, with modern JavaScript libraries and tracking tools implemented. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place, although no explicit security policy or incident response contacts are published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, serving as a reliable information hub for its community.

J

Jihoměstská majetková a.s.

jihomestska.cz

48

Jihoměstská majetková a.s. is a municipal property management company serving the Prague 11 district in the Czech Republic. The company provides professional services managing residential and non-residential properties, parking facilities, maintenance of greenery and roads, sports facilities, and construction projects. Their website reflects a well-established local presence with a focus on community and municipal services. The target audience includes residents, property owners, and municipal stakeholders in Prague 11. The business model centers on property and facility management with a medium-sized operational scale and a history of over a decade in the market. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Contact Form 7, and Ajax Search Lite, indicating a moderate level of digital maturity. The site is mobile-optimized and uses HTTPS with good SSL configuration, but lacks some advanced security headers and explicit privacy and cookie policies. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site enforces HTTPS and uses nonce tokens in forms to prevent CSRF attacks. However, it lacks published security policies, incident response plans, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. Overall, the website is professional and trustworthy with good business credibility but requires improvements in privacy compliance and security best practices to enhance its security posture and regulatory adherence.

J

JIHOMĚSTSKÁ SOCIÁLNÍ a.s.

jmsoc.cz

48

JIHOMĚSTSKÁ SOCIÁLNÍ a.s. is a Czech social services provider established in 2009, focusing on care for seniors and handicapped citizens in Prague 11. The organization offers a range of services including home care, senior homes, respite care centers, catering, and counseling. Their website reflects a well-structured and professional digital presence built on WordPress with modern plugins and technologies. The site includes project information co-financed by EU and national funds, demonstrating active engagement in sustainable and community-focused initiatives. Technically, the website is moderately performant, mobile-optimized, and uses HTTPS with valid certificates, though it lacks some advanced security headers and explicit privacy policies. Security posture is adequate but could be improved with better header implementation and incident response details. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

C

Chodovská Tvrz

chodovskatvrz.cz

45

Chodovská Tvrz is a cultural center located in a historic building in Prague, offering a wide range of cultural activities including concerts, art exhibitions, theater, cinema for children, and art workshops. The website positions itself as a unique cultural landmark on Jižní Město, targeting local residents, families, and art enthusiasts. The business model revolves around event hosting, space rentals, and ticket sales, supported by partnerships with local government and cultural organizations. Technically, the site is built on WordPress with a modern tech stack including popular plugins for SEO, event management, and user engagement. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and compliant with GDPR, with no signs of blocking or malicious activity.

M

Městská Policie Brno

dopravnihristebrno.cz

42

Dopravní hřiště Riviéra Brno is a municipal traffic education facility operated by the Municipal Police of Brno, Czech Republic. It provides traffic safety education primarily targeting children, schools, and the general public through interactive projects, tests, and bicycle registration services. The website reflects a well-established public service with a clear focus on traffic education and safety, supported by EU funding and local government partnerships. The content is professionally presented in Czech and targets local audiences including schools and families. Technically, the website is built on TYPO3 CMS with modern web technologies including responsive design, external fonts, and icon libraries. The site demonstrates moderate performance and good mobile optimization but lacks some advanced accessibility features. SEO practices are adequate with proper meta tags and structured navigation. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and does not provide explicit security policies or incident response information. Cookie consent mechanisms are absent despite GDPR relevance, which is a compliance gap. The WHOIS data aligns well with the municipal police entity, confirming legitimacy and trustworthiness. Overall, the website is a credible, well-maintained public service platform with good content quality and business credibility. Security and privacy compliance can be improved by adding cookie consent, security headers, and publishing security policies. These enhancements would strengthen user trust and regulatory compliance.

H

Hvězdárna a planetárium Brno, p. o.

hvezdarna.cz

45

Hvězdárna a planetárium Brno is a public observatory and planetarium institution located in Brno, Czech Republic, providing astronomy education, public programs, and cultural events. It operates under the statutory city of Brno and targets the general public, schools, and astronomy enthusiasts. The website reflects a well-maintained digital presence with clear navigation, multilingual support, and rich content about events and educational offerings. Technically, the site is built on WordPress with modern plugins for GDPR compliance and tracking, including Facebook Pixel for marketing purposes. The site is mobile optimized and performs moderately well. From a security perspective, the website uses HTTPS with good SSL configuration and cookie consent mechanisms. However, it lacks advanced security headers and does not publish explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with clear cookie and privacy policies in Czech language. Business credibility is supported by official city affiliation and multiple partner organizations displayed on the site. Overall, the site is safe, professional, and trustworthy with no adult or questionable content. The lack of WHOIS data is due to privacy protection, which is justified for this type of public institution. Recommendations include enhancing security headers, publishing vulnerability disclosure and incident response information, and maintaining ongoing compliance with privacy regulations.

M

Made by Büro

madebyburo.com

43

Made by Büro operates a technology platform accessible via a login portal, likely serving business clients requiring authenticated access. The website is built using AngularJS and integrates with ActiveCollab APIs, indicating a modern albeit somewhat dated technical infrastructure. The domain is stable and registered since 2014, supporting the legitimacy of the business. However, the public-facing content is minimal, focusing solely on user authentication without additional business or contact information. Security practices include HTTPS enforcement and CSRF token usage, but lack visible security headers and published policies, which limits transparency and compliance assurance. Privacy and cookie policies are absent, which may pose compliance risks under GDPR or similar regulations.

H

Health of the Ukranian people ICF

houp.org

49

Health of the Ukranian people ICF is an international charitable foundation established in 2009, focused on supporting healthcare access and innovation in Ukraine. The foundation aims to improve population health by providing quality medical care, educating doctors, and fostering systematic charity efforts. The website reflects a non-profit healthcare mission with a consistent brand and good content quality. Technically, the site is built on WordPress using the Divi theme, integrating multiple analytics and tracking services such as Google Analytics, Microsoft Clarity, TikTok, and Facebook pixels. While the site uses HTTPS and has a stable domain registration, it lacks key privacy and cookie policies, and security headers are not detected, indicating room for security and compliance improvements. No WAF or blocking mechanisms were detected, and the content is safe for general audiences.

U

Ukrainian American Coordinating Council (UACC)

uaccusa.org

44

The Ukrainian American Coordinating Council (UACC) is a non-profit organization dedicated to supporting the Ukrainian-American community in the United States through cultural promotion, business support, humanitarian aid, and political advocacy. The organization has a longstanding history dating back to the 1960s and maintains an active online presence with donation mechanisms and community engagement via social media. Technically, the website is built on WordPress using Elementor and jQuery, hosted via GoDaddy, and employs HTTPS for secure communications. However, there are gaps in privacy and cookie policies, and no explicit security headers or vulnerability disclosures are present, which could be improved to enhance trust and compliance. The domain registration is consistent with the organization's profile, showing no suspicious patterns and appropriate domain age.

H

HELP UKRAINE ROMANIA

helpukraineromania.org

46

HELP UKRAINE ROMANIA is a small non-profit humanitarian aid organization focused on providing medical and humanitarian assistance to Ukraine, primarily through a logistics hub in Chernivtsi. The organization collaborates with Ukrainian government bodies, local authorities, and volunteer business initiatives to coordinate aid transport and delivery. Their services include receiving aid requests, organizing logistics from Europe and worldwide, and partnering with major Ukrainian logistics companies for targeted aid distribution. The website is multilingual and targets donors, volunteers, and aid recipients. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and integrates Google Analytics and Google Tag Manager for tracking. Hosting is provided by Mirohost, and the site is mobile-optimized with good SEO practices. However, there is no detected CMS or advanced frameworks. Performance is moderate, and accessibility is basic. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers. There are no visible privacy or cookie policies, which is a compliance gap. No vulnerability disclosure or security.txt file is present. The WHOIS data is consistent with the organization's founding date and shows no suspicious patterns, supporting legitimacy. Overall, the website is trustworthy and professional but would benefit from improved privacy compliance and enhanced security practices to better protect users and build trust.

The website www.mf.cz functions primarily as a content aggregator portal recommending a variety of Czech internet websites focused on technology, finance, health, software, and media. It does not provide direct business services but serves as a gateway to partner sites. The site is modest in size and scope, targeting Czech internet users interested in these topics. Technically, the site uses modern frameworks such as Bootstrap 5 and integrates Google Tag Manager and Google Analytics for tracking. The site is mobile responsive and has a basic but functional design. Security posture is moderate with HTTPS likely enabled (not explicitly confirmed) but lacks visible security headers and privacy policies, which reduces compliance and trust. The absence of WHOIS data is a significant limitation in assessing domain legitimacy and ownership transparency. Overall, the site is safe for general audiences and does not contain adult or explicit content.

Cyklisté vítáni is a Czech certification brand focused on promoting cycling-friendly accommodations and services such as hotels, guesthouses, cafes, campsites, museums, and wineries. The website serves as an informational portal providing an interactive map of certified facilities, certification application forms, and contact details for coordinators. The business targets cyclists and service providers aiming to enhance cycling tourism experiences in the Czech Republic. The domain has been registered since 2005, supporting the legitimacy and longevity of the brand. Technically, the website is a simple, well-structured HTML page with CSS styling and embedded Google Maps content. It is mobile-optimized and provides clear navigation and relevant content. However, it lacks advanced technical frameworks, CMS, or analytics tools. The site does not implement privacy or cookie policies, nor does it display security headers, which limits its compliance and security posture. From a security perspective, the site uses HTTPS (assumed from the URL provided), but no additional security headers or incident response information are present. There are no visible vulnerabilities or exposed sensitive data. The absence of privacy and cookie policies and security best practices reduces the overall security and privacy compliance score. Overall, the website is functional and trustworthy for its informational purpose but would benefit from enhanced privacy compliance, security headers, and transparency policies to improve user trust and regulatory adherence.

A

Asociace turistických informačních center České republiky

aticcr.cz

44

Asociace turistických informačních center České republiky is a well-established non-profit association founded in 2006, dedicated to supporting and certifying tourist information centers across the Czech Republic. The website serves as a comprehensive resource for certification, education, and promotional activities targeting tourist centers and regional tourism stakeholders. The association holds recognized ISO certifications and maintains a strong presence in the Czech tourism sector. Technically, the website uses a legacy CMS (Vismo) with standard web technologies including jQuery and Google Analytics, and implements GDPR-compliant cookie consent mechanisms. Security posture is moderate with room for improvement in security headers and updating legacy libraries. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

D

Destinační společnost Hradecko

hradecko.cz

46

Destinační společnost Hradecko operates as a regional destination management organization promoting tourism, cultural heritage, and events in the Hradec Králové region of the Czech Republic. The website serves as an information hub for tourists, local businesses, and families, providing event calendars, attraction details, and regional products. The organization is supported by local government entities, enhancing its credibility and market position within the hospitality and non-profit sectors. Technically, the website employs modern web technologies including Bootstrap 5, FontAwesome, Google Fonts, and Google Translate integration, ensuring a responsive and multilingual user experience. The site features a cookie consent mechanism and basic GDPR compliance, though lacks advanced security headers and detailed security policies. Performance and accessibility are moderate to good, with room for improvement in security hardening. From a security perspective, the site uses HTTPS and includes cookie consent but does not expose sensitive data or show signs of vulnerabilities in the visible content. However, the absence of WHOIS registration data reduces domain trustworthiness and suggests either privacy protection or registration issues. No incident response or vulnerability disclosure information is provided, indicating potential gaps in security transparency. Overall, the website is professionally designed and content-rich, targeting a general audience interested in regional tourism. The main risks relate to incomplete domain registration transparency and limited security policy disclosures. Strategic improvements in security headers, incident response readiness, and WHOIS data transparency would enhance trust and compliance.

The website tempus-termine.com represents a small telecommunications service provider named Berner Telecom-Dienste based in Wuppertal, Germany. The domain has been registered since 2013, indicating a stable presence, but the website content is extremely minimal, consisting only of a heading and a single word paragraph. There is no metadata, no contact information, no privacy or cookie policies, and no visible security or compliance features. The technical infrastructure is basic, with no detected CMS, frameworks, or modern technologies. Hosting is provided by Vautron Rechenzentrum AG, a reputable data center and registrar. From a security perspective, the site lacks essential security headers, HTTPS status is unknown, and DNSSEC is not enabled, which could expose the domain to certain risks. No forms or data collection mechanisms are present, reducing immediate data protection concerns but also indicating a lack of user engagement features. The absence of privacy and cookie policies suggests non-compliance with GDPR and related regulations. The domain registration data is consistent and legitimate, with no privacy protection or suspicious patterns. Overall, the website's risk profile is moderate due to minimal content and lack of security best practices. The business credibility is low due to the absence of contact details and trust indicators. Strategic improvements should focus on enhancing website content, implementing security best practices including HTTPS and security headers, and publishing privacy and cookie policies to improve compliance and user trust.

T

Toplage Immobilien GmbH

toplage-immobilien.de

45

Toplage Immobilien GmbH is a regional real estate brokerage firm based in Kiel, Germany, specializing in property sales, rentals, and related consulting services. The company is part of the larger wankendorfer Unternehmensgruppe, which enhances its market position and resource access. The website is professionally designed using TYPO3 CMS and targets property buyers, sellers, and renters in Schleswig-Holstein with clear service offerings and contact options. Technical infrastructure includes modern JavaScript libraries and privacy-conscious analytics via Matomo with cookies disabled. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly disclosed. Overall, the website reflects a trustworthy and professional real estate business with strong compliance to GDPR and user privacy.

A

Adlershorst Immobilien GmbH

adlershorst-immobilien.de

41

Adlershorst Immobilien GmbH is a medium-sized German real estate company specializing in property sales, condominium and rental building management, and in-house skilled trades such as painting, plumbing, and electrical services. The company targets property owners, tenants, and investors primarily in Hamburg and surrounding regions. Their website is built on TYPO3 CMS and employs modern JavaScript libraries, reflecting a moderate level of digital maturity. The site is well-structured, mobile-optimized, and provides detailed contact information for multiple team members, enhancing user trust and engagement. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and incident response information are absent. Overall, the website presents a professional and trustworthy image with no detected vulnerabilities or suspicious content.

S

SEIGI

seigi.eu

44

SEIGI is a specialized technology company focused on developing and selling modules and integrations for PrestaShop and thirty bees e-commerce platforms. Their website offers a variety of extensions aimed at enhancing online store functionality and marketing capabilities. The company targets e-commerce store owners seeking to improve their platform capabilities through specialized software modules. Technically, the website employs a mature but somewhat dated technology stack including Bootstrap 3 and jQuery 1.7, supplemented by modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Hotjar, and Matomo. While the site is well-structured and mobile-optimized, it lacks some key compliance documents such as a privacy policy and terms of service. Security posture is adequate with HTTPS enforced and cookie consent implemented, but the absence of security headers and use of outdated libraries present potential risks. Overall, SEIGI appears to be a legitimate small technology business with a focused market niche, but should improve privacy compliance and update technical components to enhance security and trust.

D

Díky, že můžem, z. s.

cenyjanaopletala.cz

34

The website cenyjanaopletala.cz represents a non-profit initiative named 'Ceny Jana Opletala' focused on awarding young students and recent graduates in the Czech Republic for their academic and civic engagement. The organization behind the site is Díky, že můžem, z. s., a recognized non-profit entity. The site is well-positioned in the educational sector with strong partnerships including universities and media outlets, enhancing its credibility and outreach. The content is professionally presented, targeting students and educational stakeholders, with clear navigation and relevant information about awards, nominees, and partners. Technically, the website is built on WordPress using the Salient theme and several plugins including Yoast SEO, Google Analytics, and Complianz GDPR for privacy compliance. The infrastructure is hosted likely by Wedos, a known Czech provider, and employs HTTPS with good SSL configuration. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Security measures include Google reCAPTCHA on forms and cookie consent management, but additional HTTP security headers are recommended. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. GDPR compliance is evident through comprehensive privacy and cookie policies linked to a trusted domain. However, the absence of a dedicated security policy or incident response contact is noted. Overall, the risk profile is low, with recommendations to enhance security headers and incident response readiness. In summary, cenyjanaopletala.cz is a trustworthy, well-maintained educational award platform with solid privacy compliance and a good security baseline. Strategic improvements in security policies and technical hardening would further strengthen its posture and trustworthiness.

S

Studentská komora Rady vysokých škol

skrvs.cz

46

Studentská komora Rady vysokých škol (SK RVŠ) is a Czech national student representative organization focused on higher education advocacy, student support, and organizing educational events and awards. The website serves as an information hub for students, academic senates, and stakeholders in the Czech higher education sector. It maintains partnerships with official government and educational bodies, enhancing its credibility and influence. Technically, the site is built on WordPress using common plugins and libraries, with good SEO and mobile optimization but moderate performance. Security posture is adequate with HTTPS enforced but lacks advanced security headers and visible privacy compliance mechanisms. No WHOIS data is available, likely due to privacy protection, but the site appears legitimate and professionally maintained. Overall, the site is trustworthy and well-positioned within its niche but would benefit from improved privacy and security disclosures.

Č

ČMKOS

cmkos.cz

44

Českomoravská konfederace odborových svazů (ČMKOS) is the largest trade union confederation in the Czech Republic, dedicated to defending the labor, economic, and social rights of employees nationwide. The organization actively advocates for its members in relation to the state, regional authorities, and employers, while also cooperating with international trade union bodies. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support, indicating a well-established organization with a broad target audience of workers and union members. Technically, the site leverages Drupal 8 and Elementor, integrating modern web technologies and ensuring mobile responsiveness and accessibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates a professional and trustworthy online presence aligned with its non-profit labor union mission.

D

DPV Deutscher Pressevertrieb GmbH

dpv-hamburg.de

39

DPV Deutscher Pressevertrieb GmbH operates as a full-service subscription service provider specializing in the distribution and management of magazines, newspapers, and digital media products. The company targets publishers seeking reliable subscription fulfillment, customer service, technology solutions, logistics, and direct marketing support. Their market position is that of an established and professional service provider within the German media distribution sector, offering modular CRM solutions such as KIMBA for both print and digital offerings. The website reflects a medium-sized enterprise with consistent branding and a clear focus on their core services.

Ł

Łódzka Organizacja Turystyczna

ilovelodz.pl

41

The website ilovelodz.pl is an official e-commerce platform operated by the Łódzka Organizacja Turystyczna, offering a variety of souvenirs, gifts, and merchandise themed around the city of Łódź, Poland. It targets tourists and local residents interested in regional products. The site is built on the Prestashop CMS platform and incorporates modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel for marketing and analytics purposes. The design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. Security measures include HTTPS encryption, cookie consent mechanisms compliant with GDPR, and secure session management. However, some security headers could be improved, and DNSSEC is not enabled. The domain registration data is consistent with the business profile, indicating legitimacy. Overall, the site demonstrates a solid digital presence with good privacy and security practices, suitable for its business model and audience.

T

Travel Bakers

travelbakers.cz

43

Travel Bakers is a specialized non-profit organization dedicated to supporting municipalities, towns, and destinations in the Czech Republic and Slovakia with effective tourism management. Their offerings include strategic planning, workshops, marketing strategies, interpretation plans, and comprehensive educational programs for tourism professionals. The organization positions itself as an experienced and trusted partner with over 10 years in the tourism sector, emphasizing practical and resource-efficient solutions. Technically, the website is built on Drupal 10 with modern front-end technologies including Bootstrap 5 and Typekit fonts. It integrates Google Tag Manager and CookieHub for analytics and cookie consent management, reflecting a moderate level of digital maturity. The site is mobile-optimized, accessible, and well-structured, providing a positive user experience. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers and a published privacy policy, which are areas for improvement. The absence of WHOIS data limits domain trust verification, but the professional presentation and external references support legitimacy. Overall, the website demonstrates a solid security posture with room for enhancements in transparency and compliance. The overall risk assessment is moderate with recommendations to publish comprehensive privacy and security policies, implement security headers, and improve WHOIS transparency to enhance trust and compliance.

M

Magistrát města Hradec Králové

mmhk.cz

41

The website www.hradeckralove.org is the official municipal portal for the city of Hradec Králové in the Czech Republic. It serves as a comprehensive information hub for residents, visitors, and businesses, providing access to city news, public services, cultural events, social programs, and administrative resources. The site is well-positioned as the authoritative source for local government information and community engagement. Technically, the site employs a custom CMS platform (VismoWeb), uses modern web technologies including HTML5, CSS3, and JavaScript, and integrates Google services such as Analytics, Tag Manager, reCAPTCHA, and Translate to enhance functionality and user experience. The website is mobile-optimized and accessible, with good SEO practices and clear navigation. Security-wise, the site enforces HTTPS, implements standard security headers, and uses reCAPTCHA to protect forms, indicating a solid security posture. However, the absence of a visible security policy or vulnerability disclosure page suggests room for improvement in transparency and incident response readiness. The WHOIS data is unavailable due to a malformed query response, limiting domain registration trust assessment, but the official nature of the site and consistent branding mitigate concerns. Overall, the site is professional, trustworthy, and serves its public function effectively.

A

ADLERSHORST Baugenossenschaft eG

adlershorst.de

41

ADLERSHORST Baugenossenschaft eG operates as a large regional housing cooperative in the northwest of the Hamburg metropolitan area, managing over 5,600 residential units and serving more than 9,200 members. The company focuses on providing rental housing, new construction projects, property management, and investment opportunities, targeting tenants, prospective tenants, property owners, investors, and cooperative members. Their market position is strong within their regional niche, supported by a comprehensive digital presence and member engagement through reports and social media. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery and Slick Slider, delivering a responsive and well-structured user experience. Hosting appears to be managed by a German provider (WTNet), ensuring good performance and regional compliance. The site implements HTTPS and cookie consent mechanisms, reflecting GDPR awareness and privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data and DNS configuration are consistent with a legitimate business entity, enhancing trustworthiness. Overall, the website presents a professional, secure, and privacy-conscious digital front for ADLERSHORST Baugenossenschaft eG, with room for improvement in formal security documentation and transparency. The risk profile is low, with no signs of malicious activity or content safety concerns.

W

Wohnungsbaugenossenschaft Wankendorfer

wankendorfer.de

45

Wohnungsbaugenossenschaft Wankendorfer is a large housing cooperative based in Schleswig-Holstein, Germany, providing modern and affordable rental apartments, commercial leasing, and property management services. The company emphasizes social solidarity and excellent tenant service, supported by a professional and well-structured website. Their market position is strong as one of the largest cooperatives in the region, targeting tenants, property owners, and prospective renters. The website offers comprehensive information about their services, locations, and digital tenant tools such as a dedicated app.