Medium-risk security reports

MH Consulting s.r.o. is a Czech-based company specializing in organizing congresses, seminars, and educational events primarily targeting healthcare professionals. The company has an established market presence since 2005, offering a portfolio of upcoming and past events with detailed information and registration capabilities. The website reflects a professional business model focused on event management services within the healthcare and education sectors. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and FontAwesome, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and provides a clear navigation structure with user account management features including login, registration, and password recovery forms. Security-wise, the site uses HTTPS and implements a comprehensive cookie consent mechanism aligned with GDPR requirements, although it lacks explicit security headers and incident response disclosures. Overall, the website is trustworthy, with consistent WHOIS data supporting legitimacy. Recommendations include enhancing security headers and publishing formal security and incident response policies to improve security posture and compliance.

SANOPHARM CZ s.r.o. is a well-established Czech company specializing in organizing professional seminars, symposia, conferences, and congresses primarily in the healthcare sector since 1997. The company offers comprehensive event management services including registration, technical support, marketing, and production. Their market position is strong within the Czech healthcare event industry, supported by a long operational history and numerous successful events. The website reflects a professional and consistent brand image with good content quality and clear navigation tailored to healthcare professionals and event participants. Technically, the website is built on WordPress with modern plugins and SEO tools, hosted on a Czech hosting provider, and optimized for mobile devices. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks some security headers and incident response contacts. Privacy compliance is basic with a terms PDF available but no explicit cookie consent mechanism. Overall, the site is trustworthy and safe for general audiences.

Fakultní nemocnice Ostrava (FNO) is a major healthcare institution located in Ostrava-Poruba, Czech Republic, serving as the central medical facility for the Moravskoslezský region. The hospital provides a wide range of medical services including hospitalization, outpatient clinics, blood donation, vaccination, and medical research and education. The website reflects a professional and comprehensive digital presence with clear navigation and extensive patient and professional resources. Technically, the site uses modern web technologies such as Google Tag Manager and Facebook Pixel for analytics and marketing, and it is well optimized for mobile and accessibility standards. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit security policies are missing. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency, but the website content and certifications indicate a legitimate and trusted healthcare provider. Overall, the site is well maintained, user-friendly, and trustworthy for its intended audience.

Nemocnice Písek, a.s. is a well-established healthcare provider in the Czech Republic, operating since 1999. The hospital offers a broad spectrum of medical services including inpatient and outpatient care, specialized departments such as surgery, oncology, and radiodiagnostics, as well as emergency services. The website targets patients, healthcare professionals, and students, providing detailed information about departments, services, and patient resources. The hospital holds recognized certifications, enhancing its credibility and trustworthiness in the healthcare sector. Technically, the website employs standard web technologies including jQuery, Slick Carousel, and Lightbox for user interface enhancements. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. Cookie consent mechanisms are implemented, reflecting attention to privacy compliance. However, no advanced CMS or hosting details are evident, and some security best practices such as HTTP security headers and incident response contacts are missing. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, but lacks visible security headers and a published security policy or vulnerability disclosure mechanism. The WHOIS data confirms the domain's long-term registration and consistency with the hospital's identity, supporting legitimacy. No WAF or blocking mechanisms were detected, and the site content is safe with no adult or questionable material. Overall, Nemocnice Písek's website demonstrates a solid business presence with good content quality and privacy compliance, though security posture could be improved by implementing additional headers and publishing security policies. The site is trustworthy and professionally maintained, serving its healthcare audience effectively.

The website www.mgus.cz serves as the official platform for the XXIV. pracovní konference na téma monoklonálních gamapatií, a specialized medical conference scheduled for October 8, 2025, in Hradec Králové, Czech Republic. The site provides essential event information including expert guarantors, venue details, and registration navigation. The business model focuses on event organization within the healthcare sector, targeting medical professionals and researchers interested in monoclonal gammopathies. The site is built on the Webnode CMS platform and hosted via AWS Cloudfront CDN, reflecting a moderate level of digital maturity with good mobile optimization and basic SEO practices.

SEKK.cz is a website dedicated to providing external quality assessment and proficiency testing services primarily for clinical laboratories in the Czech Republic. The business focuses on various laboratory disciplines including biochemistry, hematology, immunology, transfusiology, allergology, and pathology. Established since 1997, the domain age supports the legitimacy and longstanding presence of the organization in the healthcare quality assessment sector. The website content is bilingual (Czech and English) and targets clinical laboratories and healthcare professionals seeking quality assurance services. Technically, the website uses legacy HTML framesets and PHP, indicating an outdated infrastructure with limited modern web technologies or mobile optimization. Security posture is weak due to lack of HTTPS, security headers, and absence of privacy or cookie policies, which also impacts GDPR compliance. No contact information or forms are present in the analyzed content, limiting user engagement and trust signals. Overall, the site is functional but requires modernization and improved security and privacy practices to meet current standards.

LACOMED, spol. s r.o. is a Czech Republic-based company specializing in the distribution of products for nuclear medicine, immunodiagnostics, and clinical biochemistry. Founded in 1992, the company serves healthcare providers, laboratories, and research institutions with diagnostic instruments, radiofarmaka, laboratory supplies, and protective equipment. The website reflects a professional and consistent brand image, supported by ISO 9001 and ISO 13485 certifications, indicating a commitment to quality and regulatory compliance. The company targets a specialized healthcare market segment with a medium-sized business model focused on distribution and sales. Technically, the website is built on WordPress with Elementor and Yoast SEO plugins, ensuring good SEO optimization, mobile responsiveness, and accessibility. The site employs a cookie consent mechanism compliant with GDPR, enhancing privacy compliance. Performance is moderate, with modern web technologies but no advanced analytics or tracking detected. Security posture is good with HTTPS enforced, though additional security headers could improve defenses. Security-wise, the site shows no signs of vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and security readiness. Overall, the website is professional and trustworthy but would benefit from enhanced security practices and domain registration transparency.

LABMARK is a Czech-based company specializing in the distribution and sale of laboratory instruments, diagnostic kits, and consumables. Their website presents a comprehensive catalog of products targeting laboratories, healthcare providers, and research institutions. The company appears to hold a solid market position within the healthcare and laboratory supply sector in the Czech Republic. Technically, the website is built on ASP.NET WebForms with modern JavaScript libraries such as jQuery, Bootstrap, and Owl Carousel, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and privacy compliance measures are lacking. The absence of WHOIS data introduces some uncertainty about domain legitimacy, but the professional website and clear contact information support trustworthiness. Overall, the site is functional and business-focused but would benefit from enhanced privacy and security disclosures.

The website www.bio-rad.com is currently inaccessible, presenting an Access Denied error page with no visible content or metadata. This indicates the presence of a web application firewall or other security mechanism blocking access, preventing any meaningful content or business information extraction. The WHOIS query for the domain returned no match, suggesting the domain may not be registered or WHOIS data is restricted, which raises concerns about domain legitimacy or data availability. Due to the lack of accessible content, no information about the company's business, services, or technical infrastructure can be determined. Security posture evaluation is limited but indicates minimal security headers or configurations visible due to the blocked content. Overall, the site cannot be properly analyzed in its current state, and the risk assessment is low confidence with a recommendation to verify domain registration and access permissions.

Beckman Coulter Diagnostics is a well-established global leader in clinical diagnostics, operating for over 80 years. The company provides advanced healthcare solutions including laboratory automation, clinical informatics, and diagnostic products aimed at improving laboratory efficiency and patient care. The website reflects a professional and consistent brand presence targeting clinical laboratories and healthcare providers. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though lacks explicit security policies and incident response information. Overall, the site is trustworthy and aligns well with the company's market position and business model.

The website casopiskbm.cz serves as the official online platform for the medical journal 'Klinická biochemie a metabolismus', published by the Czech Medical Society J. E. Purkyně in cooperation with STAPRO s.r.o. The journal focuses on clinical biochemistry, metabolism, and related medical fields, targeting healthcare professionals and researchers. The site provides access to current and archival issues, manuscript submission, and editorial information, positioning itself as a niche but reputable scientific publication with a legacy dating back to 1971. Technically, the website is built on the Actavia engine CMS and employs legacy JavaScript libraries such as jQuery 1.12.4, along with modern utilities like Headroom.js and Modernizr. Hosting is provided by WEDOS, a Czech registrar and hosting provider. The site demonstrates moderate performance and basic mobile optimization but lacks advanced accessibility and SEO features. The presence of Google Analytics indicates moderate user tracking without visible cookie consent mechanisms. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks modern security headers and uses outdated JavaScript libraries, which could pose vulnerabilities. No explicit privacy or cookie policies are present, and GDPR compliance is not clearly demonstrated. The WHOIS data aligns well with the website's claims, showing consistent registration and no privacy protection, which supports legitimacy. Overall, the site is a credible and professional medical journal platform with room for improvement in security practices, privacy compliance, and technical modernization. Strategic enhancements in these areas would strengthen trust and user protection.

UXsniff is a small technology company founded in 2017 that provides AI-powered user experience and SEO analytics tools. Their platform offers session recordings, heatmaps, feedback widgets, surveys, site audits, broken link checking, and innovative Time-Travel A/B testing without the need for split traffic or code changes. The company targets website owners, UX professionals, and digital marketers aiming to optimize website performance and conversions. The website is professionally designed, mobile-optimized, and integrates modern web technologies such as SVG animations, Google Fonts, and YouTube APIs. Hosting and DNS are managed via GoDaddy and Cloudflare respectively, ensuring reliable infrastructure. Security posture is good with HTTPS enabled and domain status protections, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. Contact information is limited to a contact form and no explicit emails or phone numbers are provided. The site is mentioned in reputable media outlets, enhancing trust. Overall, the website is functional, professional, and trustworthy but should improve privacy and security disclosures to enhance compliance and user trust.

QuestionPro is a recognized provider of survey software solutions, targeting businesses and professionals who require efficient survey creation and data insights. The website analyzed is a minimal placeholder page indicating a moved or deleted survey, with branding consistent with QuestionPro's market position as a leading survey software provider. The technical infrastructure includes modern JavaScript libraries and third-party analytics and consent management tools, indicating a moderate level of digital maturity. Security posture is basic with HTTPS implied and cookie consent implemented, but lacks visible security headers and detailed privacy or security policies on this page. The absence of WHOIS data limits domain trust assessment, though the website content and branding suggest legitimacy. Overall, the site is functional but minimal, with room for improvement in transparency and security documentation.

Všeobecná fakultní nemocnice v Praze is a leading university hospital in the Czech Republic, providing a wide range of healthcare services including clinical care, pharmacy, blood donation, and patient education. The website targets patients, medical professionals, media, and job seekers, reflecting a comprehensive healthcare service provider model. The site is professionally designed with consistent branding and trust indicators such as certifications and official contact information. Technically, the website is built on WordPress with UIkit framework, uses modern analytics tools, and is mobile optimized with good accessibility and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security or incident response policies are publicly available. WHOIS data is unavailable likely due to privacy protection, which is justified for this type of institution. Overall, the domain and website appear legitimate and trustworthy.

Urgentní medicína is a specialized Czech medical journal focused on urgent and emergency medical care, published by MEDIPRAX CB s.r.o. The website serves as an information portal for healthcare professionals, offering original research, reviews, and clinical articles. The journal has a longstanding presence since 1998 and is recognized in Czech medical circles, including being part of the Czech Resuscitation Council newsletter. The business model centers on subscription-based dissemination of professional medical content. Technically, the site is built on WordPress with standard plugins and uses Google Analytics for visitor tracking. The hosting is provided by Websupport, a known Czech hosting provider. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features.

JNL s.r.o. is a Slovak company specializing in the design, development, and manufacturing of professional clothing for rescue and healthcare workers. With over 30 years of experience, it holds a leading position in its niche market, serving primarily professional clients in emergency and medical services. The company operates an e-commerce platform to retail its specialized products, emphasizing quality and local manufacturing. The website reflects a professional and consistent brand image, targeting professionals requiring high-quality protective apparel. Technically, the site uses a proprietary CMS (CREATIVE shop), integrates modern analytics and security tools such as Google Analytics, Google reCAPTCHA, and Sentry for error tracking. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is strong with HTTPS enforced and secure form handling, but lacks some advanced security headers and a public security policy. Privacy compliance is present but could be enhanced with clearer data retention policies and incident response contacts. Overall, the site is trustworthy, well-maintained, and suitable for its business purpose.

Benchmark Gensuite is a technology company specializing in Environmental, Health, and Safety (EHS) management and sustainability software solutions. The company targets businesses and organizations seeking to improve their EHS compliance and sustainability efforts through software-as-a-service offerings. The website reflects a professional and modern digital presence with a focus on clear branding and user experience. The technical infrastructure is built on WordPress with Elementor, leveraging Cloudflare for DNS and registrar services, and integrates marketing and analytics tools such as Google Tag Manager and HubSpot Forms. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced DNS security features like DNSSEC and security headers. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms. Overall, the website is functional and credible but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

inbanx, Inc. is a financial technology company offering an integrated solution for budgeting, card management, expense reporting, and accounts payable automation targeted at banks, businesses, and non-profit organizations. The company positions itself as a niche fintech provider aiming to boost payment efficiency through a unified platform. The website is professionally designed using modern Webflow CMS and includes clear calls to action such as scheduling demos and contact forms. The presence of Visa licensed card issuance via Cottonwood Payments LLC adds credibility to their financial services offering. Technically, the site employs standard web technologies including Google Fonts, jQuery, and a ZoomInfo tracking pixel, hosted on AWS Cloudfront CDN, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS implied but lacks explicit security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. The absence of WHOIS registration data is a notable concern, suggesting either privacy protection or a domain registration anomaly, which impacts trustworthiness. Overall, the site is functional and professional but would benefit from improved security and privacy compliance measures.

The website delena-strava.cz is a small-scale informational platform focused on the Czech audience interested in the food combining diet method. It provides extensive textual content and a large recipe database, supplemented by affiliate links to sports nutrition and dietary supplement e-shops. The business model relies on content-driven affiliate marketing rather than direct sales or services. Technically, the site uses basic HTML, CSS, and JavaScript without modern frameworks or CMS, resulting in a basic user experience with poor mobile optimization and accessibility. Security posture is weak due to the absence of HTTPS and security headers, and there are no privacy or cookie policies, indicating compliance gaps with GDPR. The domain is legitimate and consistent with the business claims, registered since 2007 with a Czech registrar. Overall, the site is functional but requires significant improvements in security, privacy compliance, and technical modernization.

The website www.e-protein.cz serves as an informational and affiliate marketing platform focused on protein supplements and sports nutrition. It provides detailed educational content about various types of proteins, their benefits, and product recommendations linking to external e-commerce sites, primarily fitsport.eu and fitsport-jt.cz. The site targets fitness enthusiasts, athletes, and individuals interested in protein supplementation. Technically, the site is built on the adSYSTEM CMS platform, uses jQuery and Google Analytics, and has basic mobile optimization and SEO features. Security posture is moderate with HTTPS usage but lacks security headers and privacy compliance mechanisms. The absence of WHOIS data and contact information reduces trust and business credibility. Overall, the site is functional and content-rich but requires improvements in privacy compliance, security best practices, and transparency to enhance user trust and regulatory adherence.

E-kulturistika.cz is a Czech language website focused on bodybuilding, fitness, sports nutrition, and related health topics. Established in 2006, it offers a combination of informational articles and an e-commerce platform selling sports supplements and nutrition products. The site targets fitness enthusiasts and athletes primarily in the Czech Republic. Technically, the site uses a custom CMS called adSYSTEM, with jQuery and Google Analytics integrations. The website is moderately optimized for performance and mobile use but lacks advanced accessibility features. Security posture is basic with HTTPS usage but no visible security headers or explicit privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is legitimate and well-established but could improve privacy compliance and security best practices.

FITSPORT - Jiří Trampota operates a Czech-based e-commerce website specializing in sports nutrition and dietary supplements, with a business history dating back to 1994. The website offers a broad range of products from well-known manufacturers and targets general consumers including athletes and fitness enthusiasts. The site is built on the adSYSTEM CMS platform and uses common web technologies such as jQuery and JavaScript. It is hosted with a Czech registrar and uses HTTPS for secure communication. Contact information including email and phone numbers are clearly provided, supporting customer engagement. However, the site lacks formal privacy and terms of service pages, which are important for compliance and user trust.

MeetDoc is an online healthcare platform focused on providing patients in Hungary with a simple and fast way to search for doctors and book appointments online without registration. The platform currently lists 175 doctors across major Hungarian cities such as Budapest, Szeged, and Debrecen. The website is built using AngularJS and integrates Google Analytics and Google Tag Manager for tracking user interactions. It also uses Google Maps API to support location-based services. The platform emphasizes ease of use and free access for patients, with a dedicated portal for doctors to manage their presence. Security-wise, the site uses HTTPS and standard tracking tools but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. No WHOIS data is available for the subdomain hu.meetdoc.com, which is expected as it is a subdomain rather than a separately registered domain. Overall, the site presents a professional and trustworthy healthcare service with moderate technical maturity and some gaps in privacy compliance.

The website www.dichrom.cz represents a small Czech retail business specializing in a unique low-calorie sweetener product called Di Chrom, which contains a biologically active glucose tolerance factor with trivalent chromium. The product targets health-conscious consumers, including diabetics and those seeking sugar alternatives. The site is well-branded, consistent, and provides detailed product information and recipes, positioning itself as a niche player in the sweetener market. Technically, the website uses standard web technologies including jQuery, Matomo analytics, and Seznam retargeting, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and a consent mechanism for cookies, though it lacks explicit security headers and detailed security policies. The absence of WHOIS data suggests privacy protection, which is justified for this business type. Overall, the site is professional and trustworthy with moderate risk.

FERTISTAV CZ a.s. operates as a Czech-based manufacturer and retailer specializing in fertilizers and gardening products, targeting both hobby gardeners and agricultural professionals. The company maintains a well-structured e-commerce website with a comprehensive product catalog and clear customer support channels. Their market position appears stable within the Czech retail sector for agricultural supplies. Technically, the website leverages the Shoptet e-commerce platform with integrations for Google Analytics, Facebook Pixel, and payment processing via GoPay, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, supporting a positive user experience. Security posture is solid with HTTPS enforcement and CSRF protections, though some HTTP security headers could be improved. Privacy compliance is evident through cookie consent mechanisms and a GDPR-aligned privacy policy. Overall, the website presents a trustworthy and professional online presence with moderate risk due to lack of WHOIS transparency and absence of published security policies.

The International Confederation of Midwives (ICM) is a well-established global non-profit organization dedicated to supporting midwives and midwifery associations worldwide. Their website clearly communicates their mission to ensure access to midwife care for women and gender diverse people globally. The organization operates with a professional digital presence, leveraging WordPress CMS and modern plugins to deliver content in multiple languages and provide event and membership information. The site is hosted via Cloudflare, ensuring reliable performance and security. From a security perspective, the site uses HTTPS and has domain transfer protections, but lacks DNSSEC and explicit security policies or vulnerability disclosures. Privacy compliance is well addressed with visible cookie consent and privacy policies. Overall, the website demonstrates a mature digital infrastructure with good content quality and user experience, suitable for its healthcare and non-profit sector audience.

Hôpitaux Robert Schuman is a prominent healthcare group in Luxembourg comprising multiple hospital establishments including Clinique Bohler, Hôpital Kirchberg, ZithaKlinik, and Clinique Sainte Marie. The organization focuses on providing comprehensive medical services such as consultations, hospital care, emergency services, maternity, and preventive medicine. Their market position is strong within Luxembourg's healthcare sector, supported by professional accreditation and a clear patient-centric approach. Technically, the website is built on WordPress with a modern technology stack including jQuery, Select2, Swiper, and Google Tag Manager. It demonstrates good digital maturity with mobile optimization, accessibility compliance, and SEO best practices. The site integrates security features like HTTPS and Google reCAPTCHA for form protection. From a security perspective, the site shows a solid posture with encrypted connections and no visible vulnerabilities or exposed sensitive data. However, explicit security headers and a formal security policy or incident response contact are absent, representing areas for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations. The lack of WHOIS data limits domain trust verification but does not detract significantly from the site's credibility given the strong business and security indicators. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms.

Eltere Forum is a government-supported parental forum platform operated under the Ministry of Education Luxembourg. It serves as a welcoming space for parents to exchange information, receive support, and access resources. The website is multilingual, primarily in French, and targets parents in Luxembourg. It offers key services such as forums, informational resources, and parental accompaniment, positioning itself as a trusted governmental resource in the education and family support sector. Technically, the website is built on WordPress using Elementor and Yoast SEO, with additional plugins for multilingual support, GDPR compliance, and event organization. The infrastructure is modern and well-optimized for performance and accessibility, with good mobile responsiveness and SEO practices. Hosting appears to be managed via Luxembourg's official DNS infrastructure, enhancing trust. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and employs GDPR-compliant plugins. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers could be improved, and a vulnerability disclosure policy is absent. Overall, the security posture is solid for a government informational site. The overall risk assessment is low, with no signs of malicious activity or privacy violations. Strategic recommendations include enhancing security headers, adding a security.txt file, and improving incident response visibility to further strengthen trust and compliance.

Centre Hospitalier du Nord (CHdN) is a public hospital serving the northern region of Luxembourg, with facilities in Ettelbruck and Wiltz. The website provides comprehensive information about medical specialties, doctors, patient services, and hospital organization. It targets patients, visitors, and healthcare professionals, positioning itself as a key regional healthcare provider. The business model is public healthcare service delivery, focusing on a broad range of medical specialties and patient care services. The hospital appears to be medium-sized and was founded around 2020 based on website content.

Centre Hospitalier de Luxembourg (CHL) is a prominent healthcare institution in Luxembourg offering a wide range of clinical services, medical education, and research. The website reflects a well-established organization with multiple specialized clinics and accreditations such as JCI. The digital infrastructure is modern, leveraging Drupal 10 CMS, Google Tag Manager, and Google Maps API, with a strong emphasis on privacy and cookie consent compliance. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities. However, the WHOIS data is missing or malformed, which slightly impacts domain trustworthiness. Overall, the website is professional, user-friendly, and trustworthy, serving patients, medical professionals, and researchers effectively.

The website represents a domain parking page for Eunet Hosting, indicating that no active website is currently set up for the domain. The business appears to provide domain parking and hosting services, targeting domain owners and hosting customers. The site is minimalistic with basic content and limited contact information restricted to phone numbers. Technically, the site uses standard HTML and CSS with custom fonts but lacks modern security features such as HTTPS and security headers. No privacy or cookie policies are present, and no forms or tracking scripts are detected, indicating low digital maturity. The WHOIS data is unavailable or indicates the domain is unregistered or parked, which reduces trust and legitimacy. Overall, the security posture is weak due to missing HTTPS and security headers, and the site lacks comprehensive privacy compliance.

Nadační fond Dům Ronalda McDonalda is a Czech non-profit organization dedicated to supporting families of children with serious long-term illnesses by providing free accommodation near hospitals. The organization operates the first Ronald McDonald House in Motol and is actively fundraising for a second house in Olomouc. The website reflects a professional and well-established charity with a clear mission and strong community engagement. Technically, the site is built on modern frameworks such as Next.js and Sanity CMS, hosted by Active24, and optimized for performance and mobile devices. Security posture is strong with HTTPS, security headers, and secure donation processing via a trusted third-party platform. Privacy compliance is evident with a comprehensive privacy policy and cookie consent mechanisms. Overall, the site demonstrates high trustworthiness and professionalism, with active social media presence and transparent business information.

HAIMA CZ, z.s. is a well-established Czech non-profit organization dedicated to supporting children with hematological and oncological diseases, primarily those treated at the Clinic of Pediatric Hematology and Oncology at FN Motol. Founded in 1991, it operates through volunteer groups across several Czech cities and provides a broad range of services including family support, medical equipment provision, psychological assistance, and organizing rehabilitation stays. The organization maintains strong partnerships with reputable institutions and runs public fundraising campaigns to sustain its activities. Technically, the website is built on WordPress 6.5 with a modern but moderate tech stack including jQuery and YouTube embed plugins. The site is mobile-optimized with good navigation and content quality, though some SEO and accessibility features could be improved. HTTPS is enforced, but security headers are missing, and no cookie consent mechanism is present, indicating room for improvement in privacy compliance. From a security perspective, the site shows good basic practices such as secure forms with privacy consent and no exposed sensitive data. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which slightly impacts trustworthiness. No critical vulnerabilities or malware indicators were found. Overall, the site is safe and trustworthy for its intended audience. Strategically, HAIMA CZ should focus on enhancing its privacy and security posture by implementing cookie consent, security headers, and publishing incident response policies. Verifying and updating domain registration information would also strengthen trust. These steps will help maintain compliance with GDPR and improve donor and user confidence.

Pink Bubble is a Czech non-profit foundation dedicated to supporting young people affected by cancer. The organization focuses on fulfilling personal wishes, organizing therapeutic and recreational stays, providing medical and rehabilitation aids, and supporting education and reintegration into normal life. The website reflects a well-established charity with a strong community presence, supported by partnerships with notable organizations such as Nadace ČEZ and RunCzech. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Analytics, and Hotjar, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. Overall, the domain registration data aligns well with the organization's profile, indicating legitimacy and trustworthiness.

Recruitis.io is a Czech-based recruitment software company offering an Applicant Tracking System (ATS) designed to streamline and digitalize recruitment processes with a focus on candidate experience. The platform aggregates candidate responses from multiple job portals and integrates with calendars and communication tools like Slack, providing recruiters and hiring managers with comprehensive tools for managing recruitment workflows, talent databases, and analytics. The company has established a solid market presence with over 8,000 users and notable clients including Decathlon and T-mobile. Technically, the website is built using modern frameworks such as Astro and Alpine.js, hosted likely on Vercel, and incorporates Google Tag Manager for analytics and marketing. The site is well-optimized for mobile devices and demonstrates good performance and SEO practices. However, some security headers are missing, and explicit privacy and cookie policies are not found, though a cookie consent mechanism is implemented. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. The WHOIS data confirms the domain is legitimately registered to CESKY TRH PRACE s.r.o. in the Czech Republic, consistent with the website's language and business focus. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website presents a professional and trustworthy front for a specialized recruitment software provider. Strategic improvements include publishing comprehensive privacy and cookie policies, enhancing security headers, and providing explicit contact information for security and incident response.

Mojemedicina.cz is a Czech healthcare portal providing educational content such as lectures, films, and medical information targeted at patients, their relatives, doctors, and medical students. The site positions itself as a trusted regional resource in the healthcare sector, likely affiliated with Roche, as indicated by branding and script references. Technically, the website is built on Adobe Experience Manager, integrating advanced analytics and identity management tools like Adobe DTM and Gigya, and employs OneTrust for privacy compliance. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though some security policy and incident response information is not publicly available. Overall, the site is professional, trustworthy, and compliant with GDPR, though WHOIS data is privacy protected, limiting transparency. Strategic recommendations include publishing security policies, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.

Avetour s.r.o. is a Czech travel agency specializing in guided sightseeing tours worldwide, operating since 1993. The company offers curated travel experiences with experienced Czech guides, focusing on destinations such as Israel, Thailand, Canada, South America, and Africa. Their market position is that of a trusted specialist with a loyal customer base and strong reputation supported by positive reviews and certifications. Technically, the website is built on Webflow CMS with modern JavaScript libraries and integrates multiple marketing and analytics tools, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data is a notable gap, reducing domain trustworthiness, but the website content and business information appear professional and credible. Overall, the site presents a low-risk profile with good compliance and user trust indicators.

CK Poznání s.r.o. operates a professional travel website specializing in active holidays and sightseeing tours for the 2025/26 season. The company offers a wide range of travel packages including cycling tours, exotic destinations, and last-minute deals, targeting travelers interested in active and cultural vacations. The website is well-structured, mobile-optimized, and provides detailed trip descriptions with customer satisfaction ratings, enhancing user trust and engagement. Technically, the site employs modern tracking and marketing technologies such as Google Analytics, Facebook Pixel, and Google Tag Manager, supporting effective digital marketing strategies. Security posture is good with HTTPS enforced, though some security headers are not explicitly detected. Privacy and cookie policies are not clearly visible, indicating room for improvement in compliance. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but does not detract from the professional presentation and business legitimacy. Overall, the site is a credible and well-maintained platform for travel services.

Periscope Travel s.r.o. operates a professional travel agency website specializing in Scandinavian and northern European destinations, as well as worldwide travel tours. The company has a strong market presence with over 33 years of experience, offering a wide range of travel services including organized tours, cruises, travel insurance, and ferry tickets. The website is well-structured, content-rich, and targets travelers interested in niche northern European and global destinations. Technically, the site uses modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and retargeting pixels, indicating a mature digital marketing strategy. The website is mobile optimized and provides a good user experience with clear navigation and comprehensive search filters. Security-wise, the site enforces HTTPS and cookie consent mechanisms but lacks visible security headers, which could be improved. The absence of WHOIS data is a concern but does not outweigh the professional presentation and compliance indicators. Overall, the site is trustworthy and professionally maintained, with room for technical security enhancements.

MojeID is a Czech Republic-based online identity verification service operated by CZ.NIC, a reputable association managing internet infrastructure. The service enables users to securely authenticate to thousands of private and public services, including eGovernment portals, with a focus on ease of use, multilevel security, and centralized personal data management. The website demonstrates a professional and consistent brand presence with clear navigation and relevant content targeting general users and public administration clients. Technically, the site employs modern web technologies such as Bootstrap, Vue.js, and Matomo analytics, ensuring a responsive and privacy-conscious user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers and a published security policy could enhance trust further. The absence of WHOIS data is consistent with CZ.NIC's privacy practices and does not detract from the domain's legitimacy. Overall, MojeID presents a trustworthy and well-maintained digital identity platform with room for improvement in privacy disclosures and security transparency.

Clarity AI is a medium-sized sustainability technology company founded in 2017 and based in Spain. It specializes in providing AI-powered sustainability intelligence and compliance solutions primarily for financial institutions, corporates, governments, and retail platforms. The company aims to be the gold standard in sustainability intelligence by delivering transparent, scalable, and scientifically grounded insights. Their platform supports regulatory compliance, climate risk analysis, ESG risk assessment, and impact measurement, integrating advanced AI and machine learning technologies. The website reflects a mature digital presence with professional design, multi-language support, and strong SEO practices. Technically, the site is built on WordPress with modern JavaScript libraries and hosted on AWS infrastructure. Security posture is good with HTTPS and some security plugins, but lacks explicit security policies and DNSSEC. Privacy compliance is partial due to missing explicit privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trust.

Bank iD is a Czech digital identity service provider offering secure online authentication and electronic document signing, positioning itself as a key player in the Czech banking and digital identity market. The website presents a professional and consistent brand image, targeting both individual users and businesses. The technical infrastructure is based on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable platform. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are absent. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy or terms of service. Overall, the website is trustworthy and professionally maintained, suitable for its business purpose.

VOCALLS is a conversational AI automation platform specializing in voice-first contact center solutions. The company offers AI-driven automation tools such as voicebots, chatbots, and emailbots to enhance customer experience by automating inbound and outbound tasks. Positioned as a leader in contact center AI, VOCALLS was recently acquired by CallMiner, indicating strong market validation and growth potential. The platform targets enterprises and contact centers seeking to improve operational efficiency and customer engagement through AI automation. Technically, the website is built on Webflow with modern integrations including Google Analytics, Google Tag Manager, and Cloudflare Turnstile captcha for bot protection. The site is well-optimized for performance, mobile responsiveness, and accessibility, with comprehensive cookie consent and privacy policies indicating good privacy compliance. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response information are not published. WHOIS data is unavailable due to malformed responses, limiting domain trust verification, but business signals and parent company affiliation support legitimacy. Overall, VOCALLS presents a professional, secure, and privacy-conscious digital presence aligned with its AI automation business focus.

Asociace UX is a Czech non-profit organization dedicated to fostering the UX community through events, education, and networking. The website serves as a hub for UX professionals and enthusiasts, offering access to meetups, online discussions, recorded talks, and community reports. The organization positions itself as a key player in the Czech UX market, supporting both business and academic sectors. Technically, the website is built on the Solidpixels CMS platform, uses modern web technologies, and is mobile-optimized with good SEO practices. Security posture is solid with HTTPS and CAPTCHA protections, though it lacks some advanced security headers and explicit privacy policies. The absence of WHOIS data reduces domain trust but the website content and community presence indicate legitimacy. Overall, the site is professional, trustworthy, and serves its community well.

The website www.cdpr.cz represents the official platform for the Český den proti rakovině (Czech Day Against Cancer), a well-established non-profit fundraising and awareness campaign organized by Liga proti rakovině Praha z.s. The organization focuses on reducing cancer mortality in the Czech Republic through annual fundraising events, volunteer engagement, and public health campaigns. The site targets the general public, donors, volunteers, and corporate partners, providing information, donation options, and event participation details. Technically, the website is built on WordPress 6.8.3, utilizing common libraries such as jQuery, Bootstrap 3.3.7, Owl Carousel, and a GDPR cookie compliance plugin. The site is mobile-optimized with good SEO practices and moderate performance. It employs HTTPS with a good SSL configuration and includes a cookie consent mechanism aligned with GDPR requirements. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible exposure of sensitive data. However, it lacks advanced security headers and a public vulnerability disclosure policy. The absence of WHOIS data limits domain trust verification, though the website content and partner affiliations suggest legitimacy. Overall, the site is a professional, trustworthy platform for a non-profit cause with strong content quality and privacy compliance. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance trust and security posture.

PPF banka a. s. is a Czech financial institution and an integral part of the PPF investment group, serving as a center for its financial activities. The bank positions itself as a top primary dealer in the Czech Republic, providing services such as bond issue participation and internet banking. The website reflects a professional banking entity with clear branding and trust indicators, including transparent accounts and recent awards. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, and reCAPTCHA, ensuring a secure and user-friendly experience. The site is mobile optimized and includes a comprehensive cookie consent mechanism aligned with GDPR requirements. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers and published security policies could enhance trust further. WHOIS data is unavailable due to privacy protection, which is justified for a financial institution. Overall, the website demonstrates a mature digital presence with good compliance and security practices.

Neuron Soundware is a technology company specializing in AI, IoT, and machine learning solutions for industrial process optimization and predictive maintenance. Their offerings include IoT hardware (nEdge) and web-based software (nGuard) designed to monitor and control machinery and manufacturing processes. The company is internationally recognized and partners with European innovation programs. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit security policies are missing. WHOIS data is unavailable, which raises some legitimacy concerns but is offset by the professional business presence. Overall, the website and business demonstrate a strong market position in the industrial technology sector.

Home Credit a.s. operates a professional and well-branded website offering flexible consumer loan products and financial services primarily targeting customers in the Czech Republic. The company provides a range of services including flexible loans, loan consolidation, credit cards, installment purchases, and auto financing. The website demonstrates a mature digital presence with modern technologies such as Alpine.js, Keen Slider, and integration of Google Tag Manager and Sentry for analytics and error monitoring. Security best practices are observed with HTTPS enforcement and security headers, contributing to a strong security posture. However, the absence of WHOIS data limits domain trust verification, and the site could improve privacy compliance by implementing a visible cookie consent mechanism and publishing explicit terms of service and incident response policies. Overall, the site is professional, secure, and trustworthy, serving a large financial services entity with a clear market position.

Xmarton s.r.o. is a Czech-based technology company specializing in smart mobility solutions, including digital vehicle keys, GPS monitoring, and fleet management software. The company targets a diverse audience ranging from corporations and municipalities to individual vehicle owners, offering a range of products tailored to different customer needs. Their platform enables advanced vehicle security and management features accessible via mobile devices, positioning them as an innovative player in the transportation technology sector. Technically, the website is built on WordPress with modern libraries such as jQuery, FontAwesome, and Google Tag Manager, providing a responsive and user-friendly experience. Security measures include HTTPS enforcement and Google reCAPTCHA integration, although explicit security headers and a formal security policy are absent. The domain WHOIS data is missing, which raises concerns about registration transparency, but the website content and business information appear professional and trustworthy. Overall, the site demonstrates strong digital maturity and privacy compliance, with room for improvement in domain registration transparency and security policy publication.

KB Pojišťovna is a Czech insurance company offering a broad range of life and non-life insurance products including travel, property, liability, and investment-linked insurance. The website positions the company as a reliable provider with a focus on customer protection and convenience. The company targets individuals and families in the Czech Republic seeking insurance coverage. The site is professionally designed, mobile-optimized, and provides clear navigation and relevant content. Technically, the site uses modern JavaScript frameworks (React), integrates multiple analytics and marketing tools, and employs HTTPS for secure communication. However, no WHOIS data was found, which limits domain trust verification. Security posture is good with HTTPS and cookie consent mechanisms, but lacks visible security headers and published security policies. Overall, the site is trustworthy and professional but would benefit from enhanced transparency in domain registration and security disclosures.