High-risk security reports

Jihočeský vědeckotechnický park, a.s. is a regional innovation hub based in the South Bohemia region of the Czech Republic, providing space and support for startups and technology companies. The company offers rental of equipped laboratories, offices, meeting rooms, and technical services such as 3D printing and consulting. It also runs acceleration programs and supports commercialization of research outputs. The website reflects a medium-sized organization with strong regional government backing and a focus on fostering innovation and technology development. Technically, the website employs modern web technologies including Bootstrap, Owl Carousel, and integrates analytics and tracking tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized, accessible, and SEO-friendly, with a CMS platform likely based on Nickysys. Performance is moderate with good user experience and clear navigation. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a comprehensive privacy policy and cookie management. The absence of WHOIS data limits domain trust assessment, but the website's content and affiliations suggest legitimacy. Overall, the site presents a professional and trustworthy digital presence for a technology park supporting innovation in the Czech Republic. Strategic improvements could include publishing security policies, incident response information, and enhancing security headers to strengthen the security posture further.

C

Celax & Partners

celax.asia

42

Celax & Partners is a small technology outsourcing company specializing in web design, e-commerce, app development, and digital marketing services primarily targeting German-speaking clients. The company emphasizes cost-effective outsourcing solutions with in-house teams based in Bali, Indonesia, and has over 25 years of experience. Their market position is that of an established provider offering comprehensive digital services including SEO, booking systems, and loyalty programs. Technically, the website is built on a modern WordPress stack using Elementor and Astra theme, with privacy-conscious analytics via Matomo. The site is well-structured, mobile-optimized, and provides clear contact channels including phone and WhatsApp. Security posture is good with HTTPS and no exposed sensitive data, though security headers and formal policies are lacking. Overall, the website is professional and trustworthy with room for improvement in privacy compliance and security best practices.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) that serves as an offline error page with embedded JavaScript for the Chrome dinosaur game. There is no actual website content, business information, or external links present. The page is not a public-facing website but a browser-generated error page. The technical infrastructure is limited to Chromium internal scripts and canvas-based game rendering. Security posture is minimal due to the nature of the page, with no HTTPS or security headers applicable. Privacy and compliance policies are absent as this is not a commercial or informational website. Overall, this content does not represent a business or service and thus cannot be evaluated for typical website security, compliance, or business credibility metrics.

T

Tritia

egtctritia.eu

45

EGTC TRITIA is a government/non-profit organization focused on cross-border regional cooperation among Poland, Slovakia, and the Czech Republic. Founded in 2013, it supports projects related to social services, education for children with disabilities, demographic challenges, and regional development. The website reflects a professional and consistent brand presence with clear contact information and multilingual support. Technically, the site is built on WordPress with modern plugins for SEO, GDPR compliance, and user experience enhancements. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are absent. Overall, the site is trustworthy, compliant with GDPR, and well-positioned to serve its target audience of regional authorities and social institutions.

Szukacz.pl is an archival website commemorating a Polish language search engine that operated from 2001 to 2011. The site is maintained by 24 Godziny Sp. z o.o. and provides historical information without active search functionality. The technical infrastructure is minimal, relying on basic HTML, CSS, and Google Analytics for visitor tracking. No modern CMS or frameworks are detected. Security posture is weak with no DNSSEC, no security headers, and no explicit HTTPS enforcement visible, although Google Analytics scripts load over HTTPS. Privacy and cookie policies are absent, indicating poor compliance with modern data protection standards. Contact information is limited to a single email address. Overall, the site serves as a static memorial with limited business activity or user interaction.

S

Śląskie dla rodziny |

slaskiedlarodziny.pl

39

The website 'Śląskie dla rodziny' appears to be a regional or community-oriented site focused on family-related content in the Silesian region of Poland. The domain has been registered since 2014 and is hosted by Digital Media Technology Sp. z o.o., indicating a stable and legitimate presence. The site uses WordPress with the Divi theme, a common CMS and theme combination for small to medium websites. However, the site lacks critical compliance elements such as privacy and cookie policies, which are essential for GDPR compliance in the EU. Technically, the site uses standard web technologies including JavaScript and jQuery, and loads fonts from Google Fonts. The security posture is basic with HTTPS enabled but no advanced security headers or DNSSEC. There is minimal tracking via an external script from zenbox.pl. Overall, the site is accessible and safe for general audiences but requires improvements in privacy compliance and security best practices.

F

Festiwal Górnej Odry – 27-29 czerwca 2025

festiwalgornejodry.pl

46

Festiwal Górnej Odry is a regional cultural festival in Poland scheduled for June 27-29, 2025. The website serves as the main digital platform for event information, news, partner announcements, and program details. It enjoys official patronage from the Ministry of Sport and Tourism and partnerships with notable organizations such as GAZ SYSTEM S.A. The target audience includes local communities and cultural event attendees. Technically, the site is built on WordPress with Elementor and uses modern plugins and tracking tools. Security posture is adequate with HTTPS and cookie consent but lacks some advanced security headers and formal privacy documentation. The domain registration is consistent and legitimate, supporting the festival's recent establishment. Overall, the website is professional, trustworthy, and well-positioned for its purpose, though improvements in privacy compliance and security hardening are recommended.

S

SilesiaKultura.pl

silesiakultura.pl

39

SilesiaKultura.pl is a Polish cultural media website established in 2002, focusing on a wide range of cultural topics including film, music, visual arts, theater, literature, folklore, and more. It serves a niche audience interested in regional and national cultural events and news. The website is built on WordPress and leverages popular plugins such as Yoast SEO and Slider Revolution, indicating a moderate level of digital maturity. Google Analytics is integrated for visitor tracking, but privacy and cookie policies are not explicitly presented, which is a compliance gap. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and DNSSEC is not enabled. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

The domain www.mkapps.com is currently inaccessible, serving a CloudFront 502 error indicating that the origin domain name could not be resolved. This suggests a configuration error or that the domain is not actively hosted. The WHOIS query returned no registration data, implying the domain may be unregistered or expired. Due to the lack of accessible website content, no business information, metadata, or contact details are available for analysis. The technical infrastructure appears to rely on Amazon CloudFront as a CDN, but the origin server is unreachable, resulting in a complete service outage. From a security perspective, the absence of HTTPS and security headers, combined with the domain's unregistered status, presents critical risks and a lack of trustworthiness. No privacy, cookie, or terms of service policies are published, and no contact or incident response information is available. The website does not expose any content, so no vulnerabilities or tracking technologies could be assessed. Overall, the security posture is poor due to unavailability and lack of standard protections. Given the domain's current state, the overall risk is high. The domain is not trustworthy or credible, and the lack of registration data raises legitimacy concerns. Strategic recommendations include resolving DNS and hosting configuration issues, registering the domain properly, implementing HTTPS and security headers, and publishing compliance and contact information to establish trust and meet regulatory requirements.

The website marykaypromotion.de is a small German-language blog focused on philosophy topics. It is built on WordPress and hosted on German nameservers provided by netclusive.de. The site contains minimal content, primarily a single blog post and a contact button without a linked form or email address. There are no privacy, cookie, or terms of service policies present, and no explicit business or company information is provided. Technically, the site uses standard WordPress technologies and modern web fonts, with basic mobile optimization and accessibility features. Security posture is weak due to the absence of security headers, incident response contacts, and published security policies. No analytics or advertising tools are detected, indicating minimal user tracking. Overall, the site is accessible without WAF or blocking mechanisms and contains safe content suitable for a general audience.

A

APG|SGA

infosnow.ch

45

infosnow.ch is a specialized portal offering interactive maps and detailed information about ski resorts and mountain tourism destinations primarily in Switzerland. The site targets tourists and outdoor enthusiasts seeking seasonal activity information and resort details. The business operates in the transportation sector with a focus on mountain tourism. Technically, the site uses OpenStreetMap tiles and custom JavaScript for map rendering, providing a good user experience with moderate performance and basic mobile optimization. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which impacts its security posture and privacy compliance. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, indicating legitimacy. Overall, the site is functional and relevant but would benefit from improved security and compliance measures.

S

SIBA Swiss Insurance Brokers Association

siba.ch

45

SIBA Swiss Insurance Brokers Association is a professional membership organization serving insurance brokers in Switzerland. The website provides information about the association, membership options, education, regulatory guidance, and contact details. The target audience is insurance brokers and related professionals within the Swiss finance sector. The business model is centered on membership services and professional development. The website is well-branded and consistent, with a professional design and clear navigation primarily in German with French language options. Technically, the site uses a modern JavaScript framework (Vue.js) and includes Typekit fonts for typography. The performance is moderate with good mobile optimization. However, SEO and accessibility features are basic, and no structured data or advanced metadata are present. The site is served over HTTPS but lacks visible security headers and cookie consent mechanisms. From a security perspective, the site has a basic security posture with HTTPS enabled but no advanced security headers or published security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partial, with a privacy policy present but no cookie consent or GDPR compliance indicators. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy with room for improvement in security practices, privacy compliance, and technical SEO. Strategic recommendations include implementing security headers, adding cookie consent, publishing security and incident response policies, and enhancing accessibility and SEO.

R

Reformierte Kirchgemeinde Gelterkinden-Rickenbach-Tecknau

ref-gelterkinden.ch

46

The Reformierte Kirchgemeinde Gelterkinden-Rickenbach-Tecknau is a small non-profit religious community organization serving the local Swiss communities of Gelterkinden, Rickenbach, and Tecknau. The website provides comprehensive information about religious services, community events, youth and family programs, and educational offerings. It targets local community members and church attendees, emphasizing spiritual engagement and social support. The organization maintains a clear and consistent brand presence with regular content updates and accessible contact information. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and Event Organiser, with a custom theme likely based on the Genesis Framework. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features. SEO practices are adequate with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses anti-spam measures on contact forms but lacks visible security headers such as CSP or HSTS. There is no cookie consent mechanism, which may pose compliance risks under GDPR. No analytics or tracking scripts are detected, indicating minimal user tracking. WHOIS data aligns well with the organization's identity, supporting legitimacy. Overall, the website is professional and trustworthy but could improve its privacy compliance and security posture. Strategic enhancements in security headers and cookie consent would strengthen user trust and regulatory adherence.

H

HEAD DRINKS | water, sport and energy drinks

head-drinks.com

45

HEAD DRINKS is a small beverage company specializing in water, sport, and energy drinks, targeting active and health-conscious consumers. The website is built on WordPress using the Divi theme, reflecting a standard CMS infrastructure with moderate digital maturity. The site design is professional and mobile-optimized, though navigation clarity and SEO could be improved. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC, indicating room for improvement in security hardening. Privacy compliance is weak due to absence of privacy and cookie policies, and no contact or incident response information is provided, which may impact user trust and regulatory compliance. Overall, the website is functional and relevant to its industry but requires enhancements in security and compliance to strengthen its risk profile.

AQUA MARIA Marienbad is a small luxury mineral water company based in the Czech Republic, specializing in low mineralization mineral water suitable for everyday drinking and spa carbonic baths. The website is built on WordPress using the Divi theme and incorporates Yoast SEO and Google Analytics, indicating a moderate level of digital maturity. The site design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. However, the absence of explicit privacy, cookie, and terms of service policies, as well as lack of visible contact information, limits its privacy compliance and business credibility. Security posture is basic with HTTPS enabled but missing security headers and incident response information. Overall, the website is functional and trustworthy but would benefit from enhanced privacy and security practices.

E

Excelsior

excelsiorwater.cz

44

Excelsior is a small Czech-based business specializing in the production and sale of classic mineral water with a balanced ratio of magnesium and calcium. The website is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with good SEO practices and multilingual support. The technical infrastructure includes modern JavaScript libraries and third-party services such as Google Analytics and Tawk.to for analytics and customer engagement. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, which poses a compliance risk. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

The website rudolfuvpramen.cz represents BHMW a.s., a small hospitality business operating the Mariánskolazaňský Rudolfův pramen, a healing spring in Mariánské Lázně, Czech Republic. The site provides information about the spring's healing properties, targeting general audiences interested in wellness and spa treatments. The business appears to have a local/regional market position with a focus on health and wellness services. Technically, the website is built on WordPress using the Divi theme, incorporating common plugins such as Google Analytics for tracking and Tawk.to for live chat support. The site is moderately optimized for mobile and SEO, with good content quality and consistent branding. Security-wise, HTTPS is enabled and no sensitive data is exposed, but the absence of security headers and privacy/cookie policies indicates room for improvement in compliance and security posture. Overall, the site is professional and trustworthy but lacks some critical compliance documentation.

Z

Zaječická hořká

zajecicka.cz

41

Zaječická hořká is a small business focused on offering a traditional natural laxative and detoxification product based on magnesium sulfate (Epsom salt), with a history dating back to 1717. The website is built on WordPress using the Divi theme and incorporates modern web technologies including jQuery, Google Analytics, and live chat via Tawk.to. The site is multilingual and optimized for SEO with structured data and meta tags. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal privacy or cookie policies. Contact information and incident response details are not explicitly provided, which may impact user trust and compliance. Overall, the website is professional and trustworthy for its niche but would benefit from enhanced privacy compliance and security best practices.

B

BHMW a.s.

bilinska.cz

38

Bílinská kyselka is a company specializing in the bottling and distribution of natural spa spring water, with a historical legacy dating back to 1664. The website presents the brand as a producer of high-quality naturally sparkling spa water, targeting a general audience interested in health and wellness products. The company appears to be a small-sized entity based in the Czech Republic, with a consistent and professional brand presence online. Technically, the website is built on WordPress using the Divi theme and several plugins including Google Analytics for tracking and Soundy Background Music for audio features. The site is mobile optimized and has good SEO practices, although some accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and formal privacy or cookie policies. No WHOIS data is available, which limits domain trust assessment. No vulnerability disclosure or incident response contacts are present, indicating room for improvement in security transparency and compliance. Overall, the website is professional and trustworthy in its content and presentation but would benefit from enhanced privacy compliance, security best practices, and domain registration transparency to improve its risk profile and user trust.

D

DIAMO, státní podnik

diamo.cz

44

DIAMO, státní podnik is a Czech state enterprise specializing in remediation and management of mining legacy sites, particularly uranium, other ores, and coal mining impacts. The organization operates multiple regional branches and focuses on environmental protection and revitalization of industrially affected regions. The website presents a professional and consistent brand image with certifications such as ISO 9001 and Zelená firma, indicating quality and environmental standards compliance. Technically, the site uses modern JavaScript libraries, a CMS platform (OctoberCMS), and integrates map APIs, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. No WHOIS data was found, which reduces domain registration trust but the website content and state enterprise status support legitimacy. Overall, the site is well-maintained, informative, and trustworthy for its intended audience.

M

Panenky Malunka

malunka.cz

43

Panenky Malunka is a small artisan retail business based in the Czech Republic specializing in handcrafted dolls made from natural materials. The website showcases various doll categories, including flower dolls, traditional dolls, and small figurines, with a focus on custom orders and personalized craftsmanship. The business targets consumers seeking unique, handcrafted gifts and collectibles. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and is hosted with Amazon Cloudfront CDN, ensuring moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced, but lacks important security headers and formal privacy or cookie policies, which impacts compliance and trust. The absence of WHOIS registration data is a significant concern for domain legitimacy and trustworthiness. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security best practices.

S

Sotovox

sotovox.cz

43

Sotovox is a small a cappella vocal group based in the Czech Republic, specializing in live vocal performances without instrumental accompaniment. Their website showcases upcoming and past concerts primarily in Prague, offers a Christmas CD, and links to their presence on Spotify and YouTube. The group engages with their audience via social media platforms including Facebook, Instagram, and YouTube. Technically, the website is built with standard HTML5, CSS, and JavaScript, using Google Fonts and embedded YouTube videos. The site is mobile optimized and provides a good user experience with clear navigation and multimedia content. However, it lacks privacy and cookie policies, security headers, and WHOIS domain registration data, which impacts trust and compliance assessments. No forms or analytics scripts are present, indicating minimal data collection and tracking.

W

Wohnout

wohnout.cz

45

Wohnout.cz is the official website of the Czech music band Wohnout, providing fans with information about upcoming concerts, albums, lyrics, and an online merchandise shop. The site targets Czech-speaking music enthusiasts and offers direct links to ticket sales and social media channels, establishing a solid presence in the Czech entertainment market. The business model revolves around live performances and merchandise sales, supported by partnerships with music instrument brands and media outlets. Technically, the website employs modern web technologies including JavaScript, jQuery, and Slick Carousel for UI elements, and uses the Pagebuilder CMS platform. The site is mobile-optimized with a responsive design and basic SEO metadata, though there is room for improvement in accessibility and SEO completeness. The site is served over HTTPS, but lacks visible advanced security headers and cookie consent mechanisms. From a security perspective, the site shows moderate maturity with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers, explicit contact information for incident response, and cookie consent mechanisms indicate areas for enhancement. The WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and external links appear legitimate and professional. Overall, Wohnout.cz is a well-structured and content-rich site for a music band with good user experience and moderate security posture. Strategic improvements in security headers, privacy compliance, and contact transparency would enhance trust and compliance.

Sanatorium plastické a estetické chirurgie Chotoviny is a specialized healthcare provider focused on plastic and aesthetic surgery, serving a primarily Czech and international clientele. The company offers a broad range of surgical and laser procedures, rejuvenation treatments, and hand and vascular surgeries, supported by a professional team with over 30 years of experience. Their business model includes direct patient consultations, surgical services, and an e-commerce platform for gift vouchers and related products. The website is professionally designed, mobile-optimized, and includes client testimonials and external review integrations, enhancing trust and credibility. Technically, the website employs modern web technologies such as Bootstrap 5, jQuery, FontAwesome, and integrates third-party services including Google Analytics, Facebook Customer Chat, and Packeta shipping widgets. The site is hosted on a Czech hosting provider and demonstrates good performance and SEO practices. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and clear privacy and terms of service pages. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent aligned with GDPR. However, no explicit security headers were detected, and no security.txt or incident response information is published, which are areas for improvement. The absence of WHOIS data for the domain is a notable concern, reducing trust from a domain registration standpoint, though the website content and external reviews support legitimacy. Overall, the website presents a professional and trustworthy front for the business, with moderate technical and security maturity. Strategic improvements in domain registration transparency and security policy publication would enhance trust and compliance.

M

Město Tábor

taborcz.eu

48

Město Tábor operates an official municipal website serving residents and visitors with comprehensive information about city administration, public services, events, and community resources. The website is positioned as the authoritative source for city-related information in Tábor, Czech Republic, targeting local citizens and tourists. Key services include online document requests, public announcements, and contact channels for municipal support. Technically, the site uses the Vismo CMS platform, integrates Google Analytics and Tag Manager for user tracking, and employs Google reCAPTCHA for form security. The site is hosted by Webglobe, s.r.o., a reputable Czech hosting provider, and uses HTTPS with an excellent SSL configuration. Security practices include cookie consent with granular controls and no visible exposed sensitive data. However, the site lacks explicit security policies and incident response information. Overall, the website is professional, trustworthy, and well-optimized for accessibility and SEO, with moderate user tracking and good privacy compliance.

The website valterscapital.com is currently inaccessible due to an invalid SSL certificate on the origin server, as indicated by the Cloudflare error 526 page. This prevents any meaningful content or business information from being accessed or analyzed. The domain is very new, registered in March 2024, and uses Cloudflare for DNS and CDN services. However, the lack of a valid SSL certificate and absence of any privacy, cookie, or contact information significantly undermine the site's credibility and security posture. No business description or services are presented, and no forms or tracking technologies are detected, indicating a minimal digital footprint at this time. From a technical perspective, the site relies on Cloudflare but suffers from critical SSL misconfiguration that blocks user access. There is no evidence of modern CMS, frameworks, or analytics tools. The site lacks SEO optimization and accessibility features, and no security headers are detected. The WHOIS data is consistent with a legitimate registrar but shows a very recent domain age, which may not align with any claims of an established business. Security-wise, the primary concern is the invalid SSL certificate causing the site to be blocked by Cloudflare, which is a critical issue. No other security policies, incident response contacts, or certifications are found. The absence of privacy and cookie policies also indicates non-compliance with GDPR and other privacy regulations. Overall, the security posture is poor, and the site is not currently trustworthy for visitors or customers. Given these findings, the overall risk assessment is high. The site should urgently address the SSL certificate issue to restore accessibility, implement standard security headers, and publish privacy and cookie policies. Adding clear business and contact information will improve trust and compliance. Until these issues are resolved, the site remains inaccessible and lacks credibility.

B

BOHEMIA HEALING MARIENBAD WATERS a.s.

bhmw.cz

40

BOHEMIA HEALING MARIENBAD WATERS a.s. is a historic company specializing in bottling and distributing spa mineral waters, with a legacy dating back to 1664. The company operates multiple well-known spa water brands, targeting a global audience interested in natural healing waters. Their website serves as a multilingual landing page to promote their brands and provide corporate information. Technically, the website is built on WordPress using the Divi theme, enhanced with plugins for interactive content and multilingual support. It employs modern web technologies and integrates Google Analytics for visitor tracking. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks some security headers and a cookie consent mechanism, which are recommended for improved compliance and protection. The absence of WHOIS data reduces domain trustworthiness, though the website content and branding suggest a legitimate and established business. Overall, the site is professional, content-rich, and safe for general audiences, but could benefit from enhanced security and privacy features.

B

Beneš a Lát a.s.

benesalat.cz

46

BENEŠ a LÁT a.s. is a well-established Czech manufacturing company specializing in aluminum and zinc casting as well as plastic injection molding. Founded in 1934, the company operates with approximately 450 employees and leverages modern technologies including 3D metal printing. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on WordPress with a modern tech stack including SEO and social media integration. Security posture is solid with HTTPS, reCAPTCHA, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is basic with cookie policies and GDPR considerations but lacks comprehensive privacy and security policies. The absence of WHOIS data limits domain trust assessment but the business information and social presence support legitimacy. Overall, the site is professional and trustworthy with room for enhanced security and compliance documentation.

F

Federace nábytkových bank a reuse center

reusefederace.cz

48

Federace nábytkových bank a reuse center is a Czech non-profit federation uniting furniture banks and reuse centers across the Czech Republic. The organization focuses on environmental sustainability by promoting reuse as an alternative to waste disposal. Their services include networking reuse operators, providing expert consultation for new reuse centers, organizing training, and fostering partnerships with public and private sectors. The website is professionally designed, content-rich, and optimized for SEO, targeting reuse operators, NGOs, public administration, and the general public interested in sustainability. Technically, the site runs on WordPress with modern plugins and supports HTTPS with secure form handling. However, the absence of WHOIS data and cookie consent mechanisms slightly reduce trust and privacy compliance scores. Overall, the site demonstrates a strong commitment to its mission with good digital maturity and security posture.

DIFFERENT.VISION is a small Czech Republic based web development agency operated by provocation s.r.o., founded in 2018. The company specializes in creating websites and applications, targeting businesses or individuals seeking web presence and custom applications. The website is minimalistic, providing basic contact information and service description without extensive content or policies. Technically, the site uses modern web standards including HTTPS, Google Fonts, and Google Analytics for tracking. However, it lacks advanced security headers and privacy compliance mechanisms such as cookie consent or privacy policies. The domain registration data is consistent with the business location and entity, indicating legitimacy. Overall, the digital maturity is moderate with room for improvement in security and compliance.

B

Blaues Kreuz Schweiz

blaueskreuz.info

49

Blaues Kreuz Schweiz is a Swiss non-profit organization dedicated to providing comprehensive information and support related to alcohol consumption and addiction. Their website offers a variety of resources including online tests, help offers, educational content, and testimonials aimed at affected individuals, their families, and interested parties. The organization maintains a professional online presence with clear contact information and social media engagement, reinforcing its credibility in the addiction support sector. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and uses both Google Analytics and Matomo for analytics, balancing functionality with privacy considerations. The site is well-optimized for mobile devices, accessible, and SEO-friendly, though performance is moderate. Security posture is strong with HTTPS enforced and privacy-conscious analytics, but lacks explicit security headers and incident response contact details. The WHOIS data for the domain is malformed and unavailable, which limits domain registration trust analysis. Despite this, the website content and professional presentation suggest legitimacy. No WAF or blocking mechanisms were detected, and the site is fully accessible. The content is mature audience appropriate, focusing on alcohol and addiction education without any explicit adult content. Overall, Blaues Kreuz Schweiz presents a trustworthy and professional resource in its domain, with room for improvement in security policy transparency and WHOIS data clarity.

I

International Blue Cross

internationalbluecross.org

47

International Blue Cross is a Switzerland-based non-profit organization dedicated to protecting people from harm caused by alcohol and drugs, uniting 37 countries under its umbrella. The website reflects a professional and consistent brand presence with a focus on health and social protection services. The technical infrastructure is built on WordPress with the Divi theme, leveraging modern web fonts and a privacy-conscious analytics tool (Matomo). While the website is well-designed and mobile-optimized, it lacks explicit privacy, cookie, and security policies, which are critical for compliance and user trust. Security posture is adequate with HTTPS enabled and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Overall, the site demonstrates good business credibility but needs enhancements in privacy compliance and security transparency.

The website at f24.org currently serves as a placeholder or offline page displaying the Chrome T-Rex runner game, with no visible business-related content or contact information. The domain is registered to One-Check GmbH, a Swiss company established in 2002, indicating a legitimate and longstanding registration. However, the website itself lacks any meaningful content, policies, or security features that would support a professional business presence. From a technical perspective, the site uses basic HTML, CSS, and JavaScript to deliver the offline game experience. There is no evidence of modern frameworks, CMS, or analytics tools. The hosting is provided by hostpoint.ch, a known hosting provider. Mobile optimization and accessibility are basic, and SEO is poor due to lack of metadata and content. Security posture is weak, with no HTTPS enforcement or security headers detected in the provided content. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is available. The WHOIS data is consistent and trustworthy, but the website content does not reflect an active or professional business presence. Overall, the website appears to be either inactive, under construction, or repurposed as a placeholder page. This results in a low AI score and poor trust indicators. Strategic recommendations include developing a proper business website with clear content, implementing security best practices, and publishing necessary compliance policies.

The website for gm-elektronik.swiss is currently inaccessible beyond a security challenge page powered by BitNinja.IO, which blocks direct content access. The domain is registered to g+m elektronik ag, a Swiss company established in 2015, consistent with the domain name and country. The website appears to use outdated CMS technologies (Joomla 1.5 and WordPress 2.5) which are known to have multiple security vulnerabilities. No business descriptions, contact information, or compliance policies are visible on the site. The technical infrastructure is basic, hosted on trendhosting-net.ch, with minimal SEO and accessibility features. Security posture is moderate due to the presence of a security challenge but weakened by outdated software and lack of security headers or policies. Overall, the site’s digital maturity is low, and the lack of visible content and policies limits trust and user engagement.

B

BALIK Farm (Switzerland) AG

balik-kitchen.ch

48

BALIK Farm (Switzerland) AG operates BALIK Kitchen, a hospitality and retail food service business with multiple urban kitchen bars and shops located in major Swiss cities such as Bern, St. Gallen, Luzern, and Zürich. The website serves as a digital presence to promote their culinary offerings, events, and recipes, targeting general consumers interested in urban dining experiences. The company maintains a consistent brand image and provides clear contact information and social media engagement channels. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates marketing and analytics tools such as Facebook Pixel, Google Analytics, and Mailchimp for newsletter management. The site is hosted behind Cloudflare infrastructure, utilizing Turnstile captcha for bot protection, indicating a moderate level of digital maturity. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses anti-bot measures but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic with a cookie consent banner and a privacy policy page in German, aligned with GDPR requirements. Business credibility is strong with verified contact details and consistent WHOIS data. Overall, the website presents a professional and trustworthy digital front for BALIK Kitchen, with room for improvement in security policy transparency and enhanced privacy compliance. The risk level is low, but strategic enhancements in security headers and incident response readiness are recommended.

S

Strähl Käse AG

straehl.ch

47

Strähl Käse AG is a well-established Swiss cheese manufacturer with over 90 years of family tradition, specializing in a variety of cheese products including raclette and fondue. The company targets both retail consumers and B2B clients, offering customized cheese solutions. Their market position is strong within the Swiss cheese industry, supported by consistent branding and a professional online presence. Technically, the website employs modern web technologies including Facebook Pixel and Google Analytics for marketing and analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of explicit security headers and detailed security policies suggests room for improvement. Overall, the website is trustworthy, professional, and compliant with GDPR requirements, reflecting a credible business entity.

N

Natürliches Mineralwasser

natuerliches-mineralwasser.ch

43

Natürliches Mineralwasser is an informational website focused on natural mineral water, providing educational content, recipes, and health-related articles primarily targeting a general audience interested in natural mineral water in Switzerland. The site positions itself as a niche resource promoting natural mineral water benefits and origins. Technically, the website is built on WordPress using the FoundationPress theme and incorporates common marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized with good navigation and content relevance, although some backend PHP warnings indicate technical maintenance issues. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and shows backend errors that could expose information. Privacy compliance is good with GDPR-related cookie consent and privacy policy pages present. Overall, the website is functional and professional but would benefit from technical and security improvements to enhance trust and stability.

R

RaumUnion AG

raumunion.ch

49

RaumUnion AG is a Swiss-based company specializing in architecture and realization services, targeting institutional investors, real estate funds, private investors, public entities, foundations, and cooperatives. Their offerings include modular and flexible services for new constructions and renovations across residential, commercial, healthcare, and industrial sectors. The company positions itself as an expert with tailored project models to meet diverse client needs. Technically, the website is built on WordPress with modern JavaScript libraries like Alpine.js and jQuery, optimized for performance and mobile responsiveness. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy, with clear contact information and partner relationships.

P

Printplus AG

printplus.ch

48

Printplus AG is a Swiss-based software company specializing in industry-specific ERP and management software solutions for printing companies and publishers. The company positions itself as a leading provider in this niche market, offering comprehensive software that supports all organizational processes including order management, calculation, material management, production planning, and CRM. Their product suite includes solutions tailored for different sizes of printing businesses and mobile workforce support. The website is professionally designed, well-structured, and targets business customers in the graphic industry sector primarily in Switzerland. Technically, the website uses modern JavaScript libraries, web fonts, and integrates Matomo analytics for privacy-conscious user tracking. It employs Cloudflare Turnstile captcha for bot protection, indicating a proactive approach to security. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Hosting appears to be behind Cloudflare, providing robust SSL/TLS encryption and performance benefits. From a security perspective, the site enforces HTTPS and uses bot mitigation techniques but lacks visible security headers and explicit security or incident response policies. There is no cookie consent mechanism detected, which may pose GDPR compliance risks. No vulnerability disclosure or security.txt files are present. Contact information is clear and comprehensive, enhancing business credibility. Overall, Printplus AG's website reflects a mature business with a solid technical foundation and good security posture, though improvements in privacy compliance and security transparency are recommended to enhance trust and regulatory adherence.

P

Pharma Medica AG

pharmamedica.ch

48

Pharma Medica AG is a Swiss-based pharmaceutical and dermaproduct specialist offering a range of health-related products and services. The company positions itself as a provider of natural and quality pharma and dermaproducts, targeting healthcare consumers and professionals within Switzerland. Their website reflects a professional and consistent brand image with clear contact information and legal compliance pages, indicating a trustworthy business presence. Technically, the website employs modern tracking and analytics technologies including Google Analytics, TikTok Pixel, and Facebook Pixel, managed via Google Tag Manager. The site is mobile-optimized with good SEO practices and moderate performance. However, no explicit CMS or hosting provider information was detected. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and policies are missing. From a security perspective, the site shows no signs of vulnerabilities or malicious content. The absence of a published security policy or incident response contact is a minor gap. WHOIS data aligns well with the website's business claims, reinforcing legitimacy. Overall, the site is safe, professional, and compliant with GDPR requirements. Strategically, Pharma Medica AG should consider enhancing transparency by publishing security policies and incident response contacts, and implementing additional security headers to strengthen their security posture. Continued focus on privacy compliance and user trust will support their market position in the healthcare sector.

T

Tomáš Klus s.r.o.

klubklus.cz

43

The website klubklus.cz serves as the official fan club platform for Czech artist Tomáš Klus, providing exclusive multimedia content, online concerts, and community engagement features. The business operates under Tomáš Klus s.r.o., a small media entity focused on delivering unique fan experiences through membership and content subscription. The site is well-branded and targets Czech-speaking fans, leveraging social media and digital marketing tools to enhance reach. Technically, the site employs modern JavaScript frameworks and integrates Google Analytics and Facebook Pixel for tracking. It uses HTTPS with a valid SSL certificate, ensuring secure communications. However, the absence of security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. The site is mobile-optimized with good design and navigation, though SEO and accessibility could be enhanced. From a security perspective, the site shows a moderate posture with no visible vulnerabilities or exposed sensitive data. The lack of WHOIS data due to privacy protection slightly reduces trust but is common for small entertainment businesses. No incident response or security policies are publicly disclosed, which could be addressed to improve transparency. Overall, klubklus.cz is a legitimate, well-maintained fan club website with a solid business model and moderate technical maturity. Strategic improvements in privacy compliance, security headers, and public security policies would enhance its trustworthiness and user confidence.

T

TEAS spol. s r.o.

teas.cz

43

TEAS spol. s r.o. is a well-established software supplier specializing in the automotive market in the Czech Republic and Slovakia, with a domain registered since 1997. The company positions itself as the largest software provider for this sector in the region, offering tailored software solutions to automotive businesses. Their website reflects a professional and consistent brand image, targeting automotive industry clients with clear navigation and relevant content. Technically, the site employs modern frameworks such as Bootstrap and jQuery, integrates Google Tag Manager for analytics, and uses a reputable consent management platform to comply with privacy regulations. Hosting is provided by Forpsi, a known Czech hosting provider. Security posture is solid with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are absent. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.

P

PEYTON legal

peytonlegal.cz

49

PEYTON legal is a Czech Republic-based legal services provider specializing in comprehensive corporate housekeeping and transactional legal advisory services. The firm aims to be a reliable partner to its clients, focusing on corporate law and real estate legal matters. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting business clients and corporate entities. Technically, the site is built on WordPress with modern libraries such as jQuery and Slick Carousel, and integrates Google Analytics and CookieHub for analytics and cookie consent management. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers could enhance protection. The absence of WHOIS data limits domain legitimacy verification, but the website's professional presentation and trust signals mitigate some concerns. Contact is primarily via a web form, with no explicit emails or phone numbers found. Overall, the site is well-structured, GDPR compliant, and suitable for its target audience.

Kartoons Studio, s.r.o. operates a professional website focused on sustainable design and custom manufacturing of cardboard products including packaging, furniture, lighting, and accessories. The company targets environmentally conscious businesses and consumers primarily in the Czech Republic. Their business model includes design services, custom production, workshops, and an e-commerce platform. The website is built on WordPress using the Divi theme, enhanced with SEO and analytics tools such as Yoast SEO, Google Analytics, and Google Tag Manager. Security measures include HTTPS and Google reCAPTCHA v3 for form protection. However, the absence of a cookie consent mechanism and missing WHOIS data limit full compliance and trust evaluation. Overall, the site presents a professional and trustworthy digital presence with room for improvement in privacy compliance and security headers.

C

CIRA Advisory s.r.o.

ciraa.eu

45

CIRA Advisory s.r.o. is a Czech-based consulting, advisory, and educational company specializing in sustainability, ESG, and circular economy services. Founded in 2019 as a sister company to the Institute of Circular Economy, it leverages nearly a decade of expertise to serve Czech companies and institutions. The company offers a broad range of services including circular audits, ESG consulting, communication strategies, and tailored education programs. Their market position is supported by strong partnerships and client testimonials, indicating a trusted niche player in the sustainability consulting sector. Technically, the website is built on WordPress with modern frameworks like Bootstrap and jQuery, and integrates Google reCAPTCHA v3 for form security. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices, although accessibility could be further enhanced. Performance is moderate, with a professional design and clear navigation. Security posture is strong with HTTPS enforced, multiple security headers present, and no visible vulnerabilities or exposed sensitive data. However, the site lacks a dedicated security policy or incident response information, which could be improved. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Business credibility is high, supported by clear contact information, professional content, and trust signals such as testimonials and partner logos. Overall, the website presents a professional, secure, and trustworthy digital presence aligned with the company's business focus. The domain WHOIS data is privacy protected, which is common and justified for this business type, though it limits transparency. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

T

Týdeník Euro

tydenikeuro.cz

48

Týdeník Euro is a Czech media company operating a professional news and magazine website focused on economic, political, and cultural topics. The site offers subscription services, podcasts, and events, targeting a general Czech audience. Technically, the website is built on WordPress with a modern tech stack including jQuery, Stripe for payments, and Google Analytics for tracking. The site is mobile optimized and uses cookie consent mechanisms to comply with GDPR. Security posture is good with HTTPS enforced and secure login forms, though some security headers are missing and WHOIS data is unavailable, limiting domain trust verification. Overall, the website is professional, content-rich, and compliant with privacy regulations, but could improve transparency by publishing security policies and contact details.

T

Tomáš Klus s.r.o.

tomasklus.cz

45

The website www.tomasklus.cz serves as the official online presence for Tomáš Klus, a Czech singer-songwriter. It provides comprehensive information about his music albums, upcoming concerts, media content such as photos and videos, and an integrated e-commerce platform for merchandise sales. The site targets fans and music enthusiasts primarily in the Czech Republic, positioning itself as a professional and trusted source for artist-related content and services. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, and a custom e-commerce widget (Bzuco). It is mobile-optimized with good navigation and design quality. However, some technical improvements are recommended, such as implementing security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. Yet, the absence of WHOIS data and lack of explicit security policies or incident response information reduce transparency and trustworthiness. No critical vulnerabilities or adult content were detected, but privacy compliance could be improved by adding cookie consent and clearer data protection disclosures. Overall, the website is a well-maintained digital asset for the artist with moderate technical maturity and a good user experience. Strategic enhancements in security and privacy compliance would further strengthen its trust and professional standing.

The analyzed URL contentz.mkt81.net/lp/static/notfound.html serves as a basic 404 error page indicating the requested page is not found. There is no meaningful business or branding content, no metadata, no structured data, and no contact or policy information. The domain WHOIS query returned no registration data, suggesting the domain or subdomain is either unregistered or not publicly registered. The website lacks HTTPS information and security headers, indicating a very low security posture. Overall, the site appears to be a placeholder or error page rather than an active business website.

W

Wise Crackers Comedy Clubs

wisecrackers.biz

42

Wise Crackers Comedy Clubs operates as a small entertainment business specializing in live comedy shows every weekend. The website presents basic information about the business and its offerings, targeting comedy enthusiasts and general audiences seeking live entertainment. Technically, the site is built on WordPress using the Divi theme and WooCommerce plugin, integrating several marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Matomo Analytics, and Mailchimp. While HTTPS is enabled and reCAPTCHA is used for forms, the site lacks important security headers and privacy compliance documentation, which lowers its overall security posture. The absence of WHOIS data and contact information further impacts trust and business credibility. Overall, the site is functional but requires improvements in privacy, security, and transparency to enhance user trust and compliance.

T

Thurgauer Naturstrom

thurgauer-naturstrom.ch

49

Thurgauer Naturstrom is a small regional energy provider based in Switzerland, specializing in 100% sustainable and CO2-neutral electricity sourced and produced within the Thurgau region. The company offers multiple electricity product mixes tailored to different customer needs, emphasizing environmental responsibility and supporting local conservation efforts such as donations to Pro Natura Thurgau. The website reflects a clear market position focused on environmentally conscious consumers in the region. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, integrating modern tracking and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and reCAPTCHA v3 for form security. The site is mobile-optimized with good SEO practices and moderate performance. Privacy and cookie policies are implemented with GDPR compliance in mind. From a security perspective, the site uses HTTPS with an excellent SSL configuration and employs reCAPTCHA to protect forms. However, it lacks some advanced security headers and does not publish a formal security policy or vulnerability disclosure. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professionally maintained, and aligned with its business goals. It demonstrates a good balance of content quality, technical implementation, security posture, and privacy compliance, making it a reliable digital presence for the company.