High-risk security reports

O

obecon.cz

obecon.cz

38

The website obecon.cz represents a government-related initiative focused on supporting municipalities in the Czech Republic with public investment projects, particularly in housing and infrastructure development. It offers free expert consulting, educational activities, and organizes regional forums and conferences to facilitate public investment. The site is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. It integrates modern analytics and marketing tools such as Google Analytics, LinkedIn Insight, and Facebook Pixel, alongside GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and reCAPTCHA protections, though some security headers could be improved. The absence of WHOIS data reduces domain trustworthiness, but the website content and partner references strongly indicate legitimacy and official backing.

A

Avignon Université

univ-avignon.fr

47

Avignon Université is a well-established public higher education institution located in France, offering multidisciplinary academic programs and research opportunities. The website serves as the official digital presence, targeting students, faculty, researchers, alumni, and the local community. It provides comprehensive information about academic offerings, campus life, research activities, and administrative resources. The university positions itself as a regional educational leader with a focus on quality education and community engagement. Technically, the website is built on a modern WordPress CMS platform, utilizing current web technologies such as Bootstrap, jQuery, and Google Fonts. It demonstrates good mobile optimization and accessibility basics, with a moderate performance profile. The use of Matomo analytics indicates a commitment to privacy-conscious data collection. The site employs HTTPS and cookie consent mechanisms, reflecting adherence to contemporary web security and privacy standards. From a security perspective, the site shows a solid posture with HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not found, representing areas for improvement. The WHOIS data confirms the domain's legitimacy, with a long registration history consistent with the university's profile. Overall, the website is professional, trustworthy, and well-maintained, with minor gaps in privacy and security policy disclosures. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing accessibility, and formalizing incident response and vulnerability disclosure processes to strengthen compliance and user trust.

M

Młodzieżowa Akademia Siatkówki

mlodziezowasiatkowka.pl

44

The website 'Młodzieżowa Akademia Siatkówki' serves as a comprehensive platform dedicated to youth volleyball training and education in Poland. It offers a wide range of resources including training programs, educational materials, event updates, and a directory of training bases and schools. The site targets youth players, coaches, and sports educators, positioning itself as a key national resource for volleyball development. Technically, the site employs a variety of modern web technologies such as jQuery, Google Maps API, Facebook SDK, and media players, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. Security-wise, the site uses HTTPS and includes reCAPTCHA for forms, but lacks some security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, though the site content and structure appear professional and legitimate. Overall, the site is a valuable educational resource with moderate security and privacy compliance, suitable for its audience.

S

Szkoła Mistrzostwa Sportowego Polskiego Związku Piłki Siatkowej

smspzps.pl

47

Szkoła Mistrzostwa Sportowego Polskiego Związku Piłki Siatkowej is a specialized educational institution focused on volleyball sports training and general education for youth in Poland. The school operates under the auspices of the Polish Volleyball Federation and offers a comprehensive program combining academic studies with athletic development. The website reflects a medium-sized organization with a clear target audience of students, parents, and sports professionals. Technically, the website uses a modern tech stack including jQuery, Bootstrap, and slick carousel, providing a responsive and accessible user experience with WCAG features. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit security policies. Privacy compliance is basic with a privacy policy document available but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve in transparency and security best practices.

V

Voltage Multimedia Studio

jesinfo.cz

46

Jesinfo.cz is a regional event information portal focused on the Jeseník district in the Czech Republic, providing comprehensive listings of cultural, sports, gastronomic, and other local events. The website is operated by Voltage Multimedia Studio, a small media company founded in 2014. The portal offers event calendars, categories, galleries, and administrative access for event management, targeting residents and visitors interested in local happenings. The site is professionally designed with consistent branding and clear navigation, supporting Czech and Polish languages. Technically, it uses the Noteo Engine CMS, jQuery, FontAwesome, and Google Tag Manager for analytics, hosted under the REG-GRANSY registrar. Security posture is good with HTTPS enforced and basic security headers, though additional headers could improve protection. Privacy compliance is basic, with cookie consent implemented but no explicit privacy or terms of service pages found. Contact information is clearly provided, including phone, email, and physical address, along with social media links to Facebook and YouTube. Overall, the site is trustworthy, safe, and well-positioned as a regional media portal.

S

SPORT 2000 Jeseník

sport2000online.cz

45

Sport 2000 Jeseník operates a Czech-language e-commerce platform specializing in sporting goods, including clothing, footwear, cycling equipment, camping gear, and winter sports products. The company targets consumers interested in sports and outdoor activities, offering a broad product catalog and additional services such as equipment rental. The website is well-structured, professionally designed, and provides clear contact and company information, supporting a trustworthy online retail experience. Technically, the site uses a proprietary CMS (Noteo Engine) with modern JavaScript libraries and tracking tools like Google Analytics and Facebook SDK, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and secure login forms, though additional security headers and explicit security policies are lacking. Privacy compliance is basic with cookie consent implemented but no detailed GDPR statements. Overall, the site is reliable and professional, with room for improvement in security and privacy transparency.

M

Město Český Těšín

tesin.cz

46

The website https://tesin.cz/ serves as the official online portal for the city of Český Těšín, Czech Republic. It provides residents and visitors with comprehensive municipal information, including news updates, administrative services, event calendars, and contact details. The site is well-structured, regularly updated, and targets local citizens and stakeholders. The business model is that of a government municipal service platform, focusing on public service delivery and community engagement. Technically, the site is built on the Vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google Analytics for minimal user tracking and Google Translate for multilingual support. The site is hosted via Active24, with HTTPS enforced, and demonstrates good mobile optimization and accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the website employs HTTPS and cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, security headers like Content-Security-Policy and X-Frame-Options are not explicitly observed and could be improved. There is no dedicated security policy or incident response information published, which is common for municipal sites but represents an area for enhancement. Overall, the site is trustworthy, professionally maintained, and compliant with privacy regulations. The domain is longstanding (since 1998) and consistent with the official nature of the business. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and considering a vulnerability disclosure mechanism to further strengthen security posture.

V

VisitOpolskie

visitopolskie.pl

43

VisitOpolskie is a regional tourism promotion website dedicated to the Opolskie region of Poland, providing visitors with comprehensive information on attractions, events, accommodations, culinary traditions, and cultural heritage. The site targets tourists and visitors interested in exploring this Polish region, positioning itself as a key regional tourism portal. The business model focuses on information dissemination and tourism promotion, supported by partnerships such as with orot.pl. Founded in 2009, the website has a mature domain and consistent branding.

S

Stowarzyszenie Gmin Dorzecza Górnej Odry

euroregion-silesia.pl

40

Euroregion Silesia is a well-established non-profit association focused on fostering cross-border cooperation between Polish and Czech municipalities in the Upper Oder river basin. With over two decades of activity, it manages EU microproject funds and supports regional development initiatives. The website reflects a professional and consistent brand image, targeting local governments, project applicants, and regional stakeholders. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Maps API, providing a responsive and navigable user experience. However, some technical improvements could enhance performance and security. Security-wise, the site uses HTTPS and standard tracking tools but lacks advanced security headers and DNSSEC, which are recommended for improved protection. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or explicit GDPR statements. Overall, the domain registration data aligns well with the business claims, supporting the site's legitimacy.

Optimal IT is a Polish marketing agency specializing in digital marketing services, including advertising campaigns and portfolio project development. The company has been established since 2011, indicating a stable presence in the market. The website reflects a professional and consistent brand image targeting businesses seeking marketing and IT services. The technical infrastructure leverages modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Facebook SDK, indicating a mature digital presence. The site is built likely using Vue.js framework components, with responsive design and moderate performance. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and DNSSEC, which could be improved. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages, representing a compliance gap. Overall, the website is trustworthy and professional but would benefit from enhanced security and privacy documentation.

I

Ideální Bydlení

ceskyzahradkar.cz

41

Český zahrádkář is a Czech language website focused on providing content related to gardening, housing, interior design, construction, advice, and real estate. The site targets general audiences interested in these topics and operates as a content publishing platform. The business appears to be small and relatively new, founded around 2022, with a consistent domain registration and hosting provider. The website uses WordPress CMS with Elementor and several Penci plugins to deliver a visually appealing and content-rich experience. Technical infrastructure is modern but could benefit from enhanced security headers and privacy compliance improvements. Security posture is moderate with HTTPS enabled and some security best practices observed, but lacks explicit security policies and headers. Overall, the site is accessible, well-structured, and provides relevant content for its niche audience.

I

Institut Euroschola

euroschola.cz

43

Institut Euroschola is a Czech-based accredited educational organization specializing in lifelong learning, team growth, and cross-border cooperation. Established in 2001, it offers courses focused on soft and managerial skills, psychological support, and non-formal education for youth and professionals. The organization has a strong presence in European projects and emphasizes sustainable societal development. Technically, the website is built on WordPress with a modern theme and SEO optimizations, hosted on virtualzone.eu. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is partial, with a privacy policy available but no cookie consent mechanism. Overall, the website is professional and trustworthy, but could improve transparency and compliance documentation.

@

@pressmedia.net

udalostiplus.cz

40

Události plus + is a Czech media and news website launched in 2020, providing news and lifestyle content across various categories such as Aktuality, Finance, Travel, and Health. The site targets Czech-speaking audiences interested in current events and lifestyle advice. The business model appears to be advertising-supported, with some commercial partnerships evident. Technically, the site is built on WordPress with a modern tech stack including Yoast SEO and various plugins enhancing functionality and SEO. The site is mobile optimized and uses HTTPS, but lacks visible privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosures. Overall, the site is professionally designed and functional but would benefit from enhanced privacy compliance and security hardening.

CESCI Balkans is a regional non-profit organization dedicated to fostering cross-border cooperation initiatives in the Balkans and Central Europe. The organization provides consultancy, project management, and networking services to regional governments, NGOs, and community stakeholders. Their website reflects a professional and consistent brand presence with clear contact information and active partnerships with European regional bodies. Technically, the website employs standard web technologies such as Bootstrap and jQuery, delivering a responsive and user-friendly experience. However, there is room for improvement in accessibility and SEO optimization. From a security perspective, the website lacks visible security headers and privacy-related policies, which are critical for compliance with GDPR and other regulations. The absence of WHOIS data due to privacy protection is typical for such organizations but limits transparency. No signs of security vulnerabilities or malicious content were detected, and the site is fully accessible without WAF or blocking mechanisms. Overall, the website presents a trustworthy and credible front for CESCI Balkans, though enhancements in privacy compliance and security best practices are recommended to strengthen their digital maturity and user trust.

M

MTX Group a.s.

mtxgroup.cz

48

MTX Group a.s. is a prominent industrial and trading holding company based in the Czech Republic, established in 2013. The company manages a diversified portfolio of subsidiaries operating in metals, energy commodities, packaging, trading, and industrial services sectors. It holds a strong market position in Central Europe, particularly in commodity trading and manufacturing. The website presents detailed information about its subsidiaries and business areas, targeting industrial partners, investors, and commercial clients. Technically, the website employs modern JavaScript frameworks (likely Vue.js), integrates Google Analytics and Tag Manager for tracking, and uses Google reCAPTCHA for bot protection. The site is mobile-optimized with good SEO practices and a cookie consent mechanism compliant with GDPR requirements. However, it lacks explicit privacy and terms of service pages, and security headers are not detected. From a security perspective, the site uses HTTPS and standard Google services for analytics and bot mitigation, but could improve by implementing security headers, publishing a security policy, and providing vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, MTX Group's website is professional, trustworthy, and business-focused, with room for improvement in privacy transparency and security best practices to enhance compliance and user trust.

P

Plugo s.r.o.

plugobrowser.com

46

Plugo s.r.o. is a Czech-based digital marketing agency specializing in PPC campaigns, SEO, copywriting, and custom web and e-shop development. With over 15 years of experience, they serve clients primarily in the Czech Republic and Austria, focusing on enhancing online visibility and business growth through integrated marketing and development solutions. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site uses modern libraries such as Google Tag Manager, jQuery, and GSAP, and implements cookie consent mechanisms indicating awareness of privacy compliance. However, the absence of WHOIS data and explicit privacy and security policies limits transparency and trust. Security posture is moderate with room for improvement in headers and incident response readiness. Overall, the site is a credible and professional representation of a small technology service provider with a solid market position.

B

BPM

bpm.de

44

BPM (Bundesverband der Personalmanager) is a leading non-profit professional association in Germany serving approximately 5,000 HR professionals. The organization focuses on networking, professional development, and knowledge exchange through numerous events and specialist groups. The website is well-branded, professionally designed, and targets HR professionals in Germany. Technically, the site is built on WordPress with modern plugins and frameworks such as Bootstrap and jQuery, and it employs consent management and captcha solutions to enhance privacy and security. Security posture is good with HTTPS and consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and social media presence.

L

La MOT

espaces-transfrontaliers.org

47

La MOT is a French non-profit organization dedicated to supporting cross-border territorial cooperation. The website serves as an information hub offering news, events, publications, and resources related to transfrontier territories, primarily in Europe. The organization targets public entities and stakeholders involved in cross-border projects and governance. The site is professionally designed, mobile-optimized, and uses modern web technologies including WordPress and Google Tag Manager. However, explicit privacy and cookie policies are not clearly found, which is a compliance gap. Security posture is good with HTTPS and asynchronous script loading, but security headers are not evident. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profits. Overall, the site is trustworthy and well-maintained, serving its niche audience effectively.

C

Centre de Documentation et de Recherches européennes (CDRE)

cdre.eu

43

The Centre de Documentation et de Recherches européennes (CDRE) is a specialized academic research laboratory affiliated with the University of Pau and the Adour Countries (UPPA) in France. It focuses on European and transfrontier legal studies, offering research, documentation, and educational programs including Masters and doctoral studies. The center holds recognized certifications such as the CNRS Groupement de Recherche and the European Commission's Centre of Excellence Jean Monnet label, positioning it as a reputable institution in its field. Technically, the website is built on Joomla CMS with common libraries like jQuery and Bootstrap, hosted by OVH SAS, and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, which are compliance gaps. The site uses Google Analytics and Tag Manager for user tracking without visible consent mechanisms, indicating privacy compliance weaknesses. Overall, the website is professional, content-rich, and trustworthy, serving an academic audience effectively.

C

CESCI Network

cesci-net.eu

47

CESCI Network operates as a regional cooperation network with offices in Budapest, the Balkans, and Carpathia regions. The website serves as a landing page providing contact information and links to regional partner sites. The business appears to be a small-sized entity founded around 2020, focusing on facilitating regional collaboration and information sharing. The website is built on WordPress with a professional theme and uses modern technologies such as Yoast SEO and Google Tag Manager for analytics. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is safe, professional, and trustworthy but could improve in privacy and security transparency.

S

Sciences Po Strasbourg

sciencespo-strasbourg.fr

49

Sciences Po Strasbourg is a reputable educational institution specializing in social sciences and political studies, integrated within the University of Strasbourg. The website presents a professional and well-structured digital presence, leveraging TYPO3 CMS and modern web technologies. It offers comprehensive information about academic programs, admissions, research, and student life, targeting prospective and current students, alumni, and academic partners. The institution maintains active social media channels and provides clear contact and navigation pathways. Security-wise, the site enforces HTTPS and uses spam protection for emails, but lacks some advanced security headers and explicit cookie consent mechanisms. WHOIS data is unavailable, which slightly impacts trust but does not undermine the site's legitimacy given its university affiliation and professional presentation.

A

Ad Awards Association, s.r.o.

zlatyklinec.sk

41

The website www.sutaz.zlatyklinec.sk represents the Zlatý klinec advertising competition, organized by Ad Awards Association, s.r.o., a Slovak company specializing in promoting creative advertising since 1994. The site serves as an information portal for participants, providing competition rules, deadlines, archives, and contact details. It holds a strong market position as Slovakia's premier advertising creativity contest, targeting advertising professionals and agencies. Technically, the site uses a legacy jQuery version alongside Bootstrap for styling and Google Analytics for visitor tracking. While the site is accessible and professionally designed, it lacks modern privacy and cookie policies, which may impact GDPR compliance. Security-wise, HTTPS is enabled, but outdated libraries and missing security headers present moderate risks. Overall, the site is trustworthy but would benefit from technical and compliance improvements.

OSOM GROUP is a specialized manufacturer and designer of stainless steel slides catering to children, adults, offices, playgrounds, and recreational parks worldwide. Their business model focuses on delivering tailored, comfortable, and high-quality stainless steel slides with a comprehensive service offering including consulting, design, production, installation, and post-warranty support. The company maintains a moderate market position with a clear niche in the manufacturing sector, primarily operating from Poland. Technically, the website is built on WordPress using modern plugins such as Elementor and Yoast SEO, with Google Analytics and Tag Manager integrated for tracking. The site demonstrates good SEO practices and mobile optimization but lacks explicit privacy and cookie policies, which impacts compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the website is professional and trustworthy with room for enhancements in privacy and security transparency.

R

Regionální sdružení územní spolupráce Těšínského Slezska

irsts.cz

44

Regionální sdružení územní spolupráce Těšínského Slezska (iRSTS) is a small, non-profit regional cooperation organization established in 2012, focused on fostering cross-border collaboration and development in the Těšín Silesia Euroregion. The organization supports local governments, institutions, and communities through project funding, particularly small projects related to tourism, institutional cooperation, and community engagement. Their website reflects a professional and consistent brand presence with clear information about their activities, funding programs, and contact details. The site is built on a modern WordPress platform using Elementor, ensuring good mobile optimization and user experience. Privacy compliance is well addressed with a comprehensive cookie policy and consent mechanism.

The website at rmtmo.eu is currently inaccessible, presenting a standard 404 Not Found error page with no substantive content or business information. There is no metadata, structured data, or contact details available, which severely limits the ability to assess the company's operations, market position, or services. The domain is registered through OVH SAS, a reputable hosting provider, but no further registrant details are available to verify legitimacy or business claims. Technically, the site lacks any detectable technologies, frameworks, or security configurations, indicating either a misconfigured or inactive website. Security posture is minimal with no HTTPS or security headers evident, and no privacy or cookie policies are published, resulting in poor privacy compliance. Overall, the site presents a low trust profile and high risk due to lack of transparency and accessibility.

O

OpenSeaMap

openseamap.org

43

OpenSeaMap is a community-driven open-source project providing free nautical charts and maritime data for various platforms including PC, Garmin, Lowrance, Android, iPad, and Windows. The project targets sailors, mariners, and boating enthusiasts, offering key services such as offline map downloads, ship tracking, weather forecasts, and harbor information. The website is built on TYPO3 CMS and uses OpenLayers and OpenStreetMap technologies for map rendering. Hosting is provided by Cloudpit, with domain registration dating back to 2009, indicating a mature and stable project. Security posture is moderate with no DNSSEC and lack of visible security headers or HTTPS enforcement details. Privacy and cookie policies are absent, and no contact emails or phone numbers are provided on the main page. Overall, the website is safe, content-rich, and moderately professional but would benefit from improved security and privacy compliance measures.

O

OKNOSTUDIO, s.r.o.

oknostudio.cz

46

OKNOSTUDIO, s.r.o. is a Czech Republic-based company specializing in the manufacturing and supply of high-quality plastic, wooden, and aluminum windows, doors, and shading technology. The company operates primarily in the Brno and Prague regions and offers comprehensive services including showroom consultations, installation, and after-sales service. The website reflects a mature business with over 15 years of market presence, supported by extensive customer testimonials and project references. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, and various UI and animation libraries. It is well-optimized for mobile devices and SEO, with clear navigation and professional design. The site uses HTTPS and implements cookie consent mechanisms compliant with GDPR, though it lacks some advanced security headers and explicit security policy documentation. From a security perspective, the site shows good baseline practices such as HTTPS and consent management but could improve by adding security headers, publishing vulnerability disclosure policies, and incident response contacts. No vulnerabilities or suspicious content were detected. The WHOIS data is unavailable, likely due to privacy protection, which is common and acceptable for this business type. Overall, the website is professional, trustworthy, and well-maintained, with minor areas for security enhancement. It poses low risk and serves as a credible digital presence for the company.

P

PM LEGAL SERVICES s.r.o.

pmlegalservices.cz

42

PM LEGAL SERVICES s.r.o. is a Czech-based law firm specializing in various legal sectors including real estate, corporate law, dispute resolution, labor law, intellectual property, IT law, family law, and healthcare law. The firm emphasizes professionalism, expertise, fair approach, and responsibility, targeting business clients and individuals in the Czech Republic and Slovakia. The website is well-designed, mobile-optimized, and provides clear contact channels including email, phone, and a contact form with GDPR consent mechanisms. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, ensuring a good user experience and moderate performance. Security posture is adequate with HTTPS and secure forms but lacks some HTTP security headers and anti-CSRF tokens. The absence of WHOIS data limits domain trust assessment, though the professional presentation and client testimonials support legitimacy. Privacy and cookie policies are missing, representing a compliance gap. Overall, the site is professional and trustworthy but could improve privacy compliance and security headers.

Meindlboty.cz is the official Czech Republic exclusive importer and retailer of Meindl footwear, a brand with over 300 years of tradition in high-quality shoe manufacturing. The website targets outdoor enthusiasts and customers seeking durable hiking and winter shoes. The business operates a physical store in Prague and offers additional services such as shoe repair and care. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, it employs standard web technologies including jQuery and Google Analytics, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and form validations but lacks advanced security headers and cookie consent mechanisms. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the website's contact information and social media presence support its legitimacy. Overall, the site is a reliable retail platform with room for security and privacy improvements.

S

Stiftung Erinnerung, Verantwortung und Zukunft (EVZ)

stiftung-evz.de

47

The Stiftung Erinnerung, Verantwortung und Zukunft (EVZ) is a German non-profit foundation dedicated to fostering remembrance culture, encouraging historical education, and supporting related projects across society. The foundation operates with a clear mission to engage diverse audiences in active historical reflection and education. Their website reflects a mature digital presence, built on TYPO3 CMS, with modern JavaScript libraries and Matomo analytics for privacy-conscious tracking. The site is well-structured, mobile-optimized, and provides comprehensive information about their funding programs, organizational structure, and news updates. Security posture is solid with HTTPS enabled and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the foundation presents a trustworthy and professional online presence consistent with its mission and organizational type.

P

ppm factum

ppmfactum.cz

44

ppm factum is a leading BTL marketing company based in the Czech Republic, offering a broad range of services including merchandising, logistics, event management, market research, and sales force automation. With over 20 years of experience across Europe, the company positions itself as the largest BTL provider in the Czech market, targeting retail and marketing clients. The website reflects a professional digital presence built on WordPress with modern plugins and SEO optimizations. It includes comprehensive contact information, a cookie consent mechanism, and multilingual support. Security posture is solid with HTTPS and cookie consent but lacks some advanced security headers and explicit security policies. WHOIS data is unavailable, which limits domain legitimacy verification but the business content and presentation suggest a trustworthy entity.

O

Oranto GmbH

gutes-aufwachsen-mit-medien.de

48

Gutes Aufwachsen mit Medien is a German non-profit initiative focused on promoting positive and responsible media use among children, youth, parents, and educators. The website serves as a central hub offering practical guides, advice, local network connections, online conferences, and newsletters to support media education and youth media protection. Supported by the German Federal Ministry for Family Affairs, Senior Citizens, Women and Youth, it holds a credible position in the national educational landscape. Technically, the website is built on TYPO3 CMS, employs Bootstrap for responsive design, and uses Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. The site is mobile-optimized, accessible, and SEO-friendly, with good content quality and consistent branding. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses privacy-respecting analytics but lacks explicit security headers and a formal security or incident response policy. No cookie consent mechanism was detected, which is a minor compliance gap. The domain registration data is consistent and transparent, enhancing trustworthiness. Overall, the website is professional, trustworthy, and well-suited for its educational mission, with recommendations to enhance privacy compliance and security posture for improved user trust and regulatory alignment.

M

MAS Vincenze Priessnitze pro Jesenicko, o.p.s.

masjesenicko.cz

47

MAS Vincenze Priessnitze pro Jesenicko, o.p.s. is a local action group focused on community-led rural development in the Jesenicko region of the Czech Republic. The organization supports local entrepreneurs, schools, social services, and environmental initiatives through the administration of various government and EU-funded programs. Their website reflects a professional and community-oriented approach, providing relevant information, news, and contact details to their target audience of local residents and stakeholders. Technically, the site is built on the Noteo Engine CMS, uses modern web technologies including HTTPS, jQuery, and FontAwesome, and integrates multimedia content from YouTube and Vimeo. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism, although no terms of service or explicit security policy pages were found. Security posture is moderate with HTTPS enforced but lacking visible security headers and vulnerability disclosure mechanisms. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with a non-profit community organization.

S

Skiareál Červenohorské sedlo

cervenohorskesedlo.eu

48

Skiareál Červenohorské sedlo is a Czech ski resort business offering winter sports facilities, hotel accommodation, parking, ski school, and related services. The website targets tourists and skiing enthusiasts primarily in the Czech Republic region. The business model integrates hospitality and recreational services with online skipass sales and gift vouchers, positioning itself as a regional ski resort with a comprehensive service offering. Technically, the website is built on October CMS using modern web technologies including Bootstrap, jQuery, and various third-party analytics and marketing scripts. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure; however, it lacks advanced security headers and explicit security or incident response policies. Privacy compliance is basic with presence of privacy and cookie policies but no explicit consent mechanism. Overall, the website is professional and trustworthy with moderate tracking practices and clear business contact information.

P

Praděd Vysílač s.r.o.

hotelpradedvysilac.cz

47

Hotel Praděd Vysílač is a small hospitality business operating the highest located hotel and restaurant in the Czech Republic, situated at the summit of the Jeseníky mountains. The website offers comprehensive information about accommodation, dining, an observation tower, and seasonal activities, targeting tourists and visitors interested in mountain experiences. The business maintains clear contact channels and provides gift vouchers and reservation options online. Technically, the website uses a traditional jQuery-based stack with several plugins for UI and multimedia, including Google Maps and Google Analytics for location and visitor tracking. The site is mobile optimized and presents a good user experience with clear navigation and multimedia content. However, some technical improvements could be made, such as updating libraries and enhancing accessibility. From a security perspective, the site uses HTTPS and implements a cookie consent banner compliant with GDPR requirements. No advanced security headers were detected, and no vulnerability disclosure or incident response policies are publicly available. The WHOIS data is unavailable, likely due to privacy protection, which is common for small businesses. Overall, the security posture is moderate but could be improved with additional headers and policies. The overall risk assessment is low to moderate, with recommendations to enhance security headers, update libraries, and publish privacy and security policies to increase trust and compliance. The website is safe for general audiences and does not contain adult or questionable content.

J

Jdeme na běžky

jdemenabezky.cz

47

The website 'Jdeme na běžky' is a Czech-language platform dedicated to cross-country skiing enthusiasts, offering interactive maps, GPS tracking, and route planning features. It targets recreational users interested in skiing routes and related outdoor activities within the Czech Republic. The business model appears to be informational and service-oriented, focusing on enhancing user experience through digital mapping and gamification elements. The site is relatively new, established in 2021, and serves a niche market segment. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and leverages mapping APIs such as Mapy.cz and Leaflet.js. It integrates Google Analytics for visitor tracking and uses external libraries like FontAwesome and an HTML5 QR code scanner. The site is hosted likely via Forpsi, a Czech hosting provider, and uses a custom CMS platform. Performance and mobile optimization are adequate, though accessibility features are basic. From a security perspective, the site uses HTTPS and includes Google Analytics with asynchronous loading, which is positive. However, it lacks explicit security headers such as Content-Security-Policy and X-Frame-Options, which could enhance protection. No sensitive data exposure or vulnerabilities were detected in the HTML content. Privacy compliance is partial; while a cookie consent mechanism is present, no explicit privacy policy or terms of service pages were found. Contact information is not publicly available on the main page, which may affect user trust. Overall, the website is functional and serves its intended audience well but would benefit from improved privacy disclosures, enhanced security headers, and clearer contact information to increase trust and compliance. The domain registration data aligns well with the website's regional and business focus, supporting legitimacy.

W

WebRex s.r.o.

maregroup.cz

46

Mare Group CZ, formerly known as WebRex s.r.o., is a Czech-based technology company specializing in digital transformation, software development, automation, and integration services. The company targets experienced managers and ambitious entrepreneurs, offering tailored digital solutions through its modular platform Avikana. With a portfolio of services including business intelligence, AI-powered automation, and process optimization, Mare Group CZ positions itself as a trusted partner for companies seeking to modernize and optimize their operations. The website reflects a professional and consistent brand image supported by references from reputable clients such as Bosch and Škoda. Technically, the website employs modern web technologies including JavaScript, jQuery, Google Analytics, and Google reCAPTCHA for security. It is hosted by REG-ZONER, with a recent domain registration in 2023, consistent with the company's rebranding efforts. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is solid with HTTPS enforced and secure form handling, but lacks explicit security headers and published security policies. From a security and compliance perspective, the site uses invisible reCAPTCHA to protect forms and validates inputs client-side. However, it lacks a cookie consent mechanism and explicit privacy policy, which may impact GDPR compliance. No incident response or vulnerability disclosure policies are published, which could be improved to enhance trust and readiness. The domain WHOIS data aligns with the business identity, showing no suspicious patterns. Overall, Mare Group CZ presents a credible and professional digital presence with strong business credibility and technical implementation. Strategic improvements in privacy compliance, security policy transparency, and accessibility would further strengthen its security posture and regulatory adherence.

V

Strona główna - Życie i praca na Śląsku Cieszyńskim w dobie rewolucji przemysłowej

visitindustrial.travel

46

The website visitindustrial.travel is a small-scale cultural tourism project focused on the life and work in the Cieszyn Silesia region during the industrial revolution. It provides informational content aimed at general audiences interested in regional history and industrial heritage. The site is built on WordPress using the Divi theme and incorporates SEO best practices via the Yoast SEO plugin. Technical infrastructure is modern and includes accessibility and cookie consent features, though some security enhancements could be made. The security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. No privacy policy or terms of service are present, which could be improved for compliance. Overall, the site is safe, professional, and trustworthy for its niche audience.

The Tourism PL-CZ website serves as a regional promotional platform focused on cultural and natural heritage tourism in the Polish-Czech border area. It provides multilingual content including information on attractions, events, tourist routes, and regional partners. The platform is supported by European Union regional funds, positioning it as a small-scale, government/non-profit oriented hospitality service. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Google Maps API, and social media integrations, delivering a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and secure script loading; however, it lacks important security headers and privacy compliance mechanisms such as cookie consent banners. Contact information is limited to a contact form without explicit emails or phone numbers, which may impact user trust and compliance. Overall, the website is functional, professionally designed, and trustworthy but would benefit from enhanced security and privacy features.

The website tessinineurope.eu represents a municipal project called Český Těšín/Cieszyn INEurope, focused on strengthening cross-border cooperation between the Polish and Czech parts of the Těšín Silesia Euroregion. It is funded by the European Union and managed by the City Office of Cieszyn. The site provides information about the project, news updates, partner organizations, and contact options. The target audience includes local residents, regional institutions, NGOs, and tourists interested in the region's cultural and social integration. The business model is a public sector initiative supported by EU funds, emphasizing regional development and cooperation. Technically, the website uses a custom CMS with modern frontend technologies such as Bootstrap, jQuery, Owl Carousel, and Google services including Analytics and reCAPTCHA. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security measures include HTTPS enforcement and spam protection on forms, though some HTTP security headers are missing. From a security perspective, the site demonstrates a good baseline posture with no critical vulnerabilities detected. However, it lacks explicit security policies, incident response contacts, and advanced security headers. Privacy compliance is basic, with GDPR consent on the contact form and a privacy policy page, but no cookie consent mechanism is present. No terms of service or vulnerability disclosure policies are found. Overall, the website is trustworthy, professionally maintained, and serves its public sector purpose well. Strategic improvements in security headers, privacy transparency, and incident response readiness would enhance its security posture and compliance. The domain registration is consistent with the business history, and no suspicious patterns are identified.

The website iairregion.eu currently presents minimal content, primarily consisting of a single image link and a redirect script to a preview page. There is no substantive business information, contact details, or policy documentation available. The site uses older versions of Bootstrap, Font Awesome, and jQuery, indicating a basic technical infrastructure with limited digital maturity. Security posture is weak due to the absence of HTTPS enforcement, security headers, and privacy compliance mechanisms. Overall, the site appears to be in an early development or placeholder state, lacking critical elements for trust and user engagement.

E

Eurodistrict PAMINA

regio-pamina.org

48

Eurodistrict PAMINA is a European Grouping of Territorial Cooperation focused on fostering cross-border collaboration between French and German regions. The organization supports a wide range of activities including cultural, educational, environmental, transport, and social initiatives aimed at regional development and integration. The website reflects a mature and professional public sector entity with a clear mission and established presence in the Franco-German border area. Technically, the website is built on the Flexit CMS platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, and jQuery. It employs HTTPS for secure communication and integrates Google Analytics for visitor tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and uses secure forms but lacks some advanced security headers like Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is generally good with a comprehensive privacy policy, though the absence of a cookie consent mechanism is a minor compliance gap. Overall, the domain is privacy protected at the WHOIS level, which is common for European domains, and the website content and linked partners support its legitimacy. The site is safe for general audiences and does not contain any adult or questionable content. Strategic recommendations include enhancing security headers and implementing a cookie consent banner to improve compliance and security posture.

E

Euroregion Těšínské Slezsko – Śląsk Cieszyński

euregio-teschinensis.org

38

The Euregio-Teschinensis website represents a regional Euroregion cooperation entity focused on fostering cross-border collaboration between Polish and Czech communities. It provides information on regional projects, tourism, and cultural initiatives, targeting local governments, residents, and tourists. The site is multilingual, supporting Czech, Polish, and English languages, enhancing accessibility for its diverse audience. Technically, the website is built on WordPress with a standard theme and plugins, including CookieScript for consent management and Google Analytics for minimal tracking. The site enforces HTTPS and employs a cookie consent mechanism that denies ad and analytics storage by default, reflecting a privacy-conscious approach. However, explicit privacy policies and terms of service are not found, indicating room for improvement in compliance documentation. Security-wise, the site lacks advanced security headers and vulnerability disclosure mechanisms but maintains a good SSL configuration and secure consent practices. Overall, the website is professional, trustworthy, and serves its regional cooperation purpose effectively, though it would benefit from enhanced security policies and contact transparency.

The website zelaznyszlakrowerowy.pl represents a regional government-backed project called "Żelazny szlak rowerowy" focused on promoting a cycling trail with interactive quiz elements. The project is co-financed by the European Regional Development Fund and targets adult cyclists and tourists interested in exploring the trail. The site provides user registration, login, and quiz participation features, along with a map visualization of the cycling route. The business model is public sector-driven, aiming to enhance regional tourism and community engagement. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript with jQuery, Bootstrap for styling, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and accessible with basic SEO and usability features. There is no explicit CMS detected, suggesting a custom-built platform. Performance is moderate with room for improvement in security headers and DNS security. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and secures password inputs. However, DNSSEC is not enabled and no explicit HTTP security headers were detected, which are areas for improvement. The privacy policy and GDPR compliance are well documented, including a named Data Protection Officer with contact details. No incident response or vulnerability disclosure policies are found. The site is free from suspicious or malicious content and does not employ WAF or blocking mechanisms. Overall, the website is trustworthy and professionally maintained with strong compliance to privacy regulations. Recommendations include enabling DNSSEC, adding security headers, and continuous monitoring of third-party scripts to enhance security posture and user trust.

EuroInstytut Polsko-Czesko-Słowacki is a small non-profit organization dedicated to fostering cross-border cooperation between Poland, Czech Republic, and Slovakia. The institute provides specialized training, consultancy, research, and educational services aimed at regional development and partnership building. The website reflects a professional and consistent brand presence with clear contact information and EU funding acknowledgments, positioning it as a credible regional educational entity. Technically, the website uses standard JavaScript libraries such as jQuery and Cycle2 for UI components and integrates a cookie consent management platform to comply with privacy regulations. While the site is accessible and well-structured, there is room for improvement in SEO, accessibility, and security headers implementation. Security posture is moderate with no critical vulnerabilities detected, but the absence of visible security headers and detailed security policies suggests opportunities for enhancement. Overall, the website is trustworthy and compliant with GDPR, with a low risk profile for users and stakeholders.

A

adakits.com

adakits.com

48

The website adakits.com is primarily a parked domain with minimal content focused on advertising through Google Adsense and Bodis domain parking services. There is no substantive business information, contact details, or user engagement features. The domain was registered in 2021 via NameCheap and shows no signs of active business operations or branding. Technically, the site uses basic HTML, CSS, and JavaScript with embedded advertising iframes but lacks modern frameworks or CMS platforms. Security posture is weak with no DNSSEC, no security headers, and no visible incident response or privacy compliance mechanisms. Overall, the site presents a low trust profile with limited content quality and poor user experience.

S

Śląskie. Informacja Turystyczna Województwa Śląskiego

silesia.travel

45

The website silesia.travel serves as the official tourism information portal for the Silesian Voivodeship in Poland. It provides comprehensive information about tourist attractions, events, accommodation, gastronomy, and cultural heritage in the region. The site targets tourists and visitors interested in exploring Silesia, positioning itself as a regional guide with a medium-sized digital presence. Technically, the site employs common web technologies such as jQuery, Bootstrap, Font Awesome, and integrates analytics and tracking tools like Google Analytics, Facebook Pixel, and Hotjar. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured navigation. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy compliance is weak, with no visible privacy or cookie policies, and no GDPR compliance indicators. Business credibility is moderate, supported by domain age and regional focus, but contact information and trust signals are limited. Overall, the site is functional and professional but would benefit from improved privacy and security practices.

B

Business Gate

businessgate.cz

48

Business Gate is a multifunctional entrepreneurship center based in Karviná, Czech Republic, focused on supporting business initiatives, connecting companies with students, and providing coworking spaces and consulting services. The website reflects a regional educational and business support entity collaborating with local government and university partners. Technically, the site is built on WordPress with the Divi theme and uses modern plugins for SEO and marketing tracking. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers and explicit privacy policies are missing. The absence of WHOIS data reduces domain trust slightly but does not detract from the professional presentation and partnerships evident on the site. Overall, the site is well-structured, user-friendly, and targeted at entrepreneurs, students, and local businesses.