Medium-risk security reports

Qubit.hu is a Hungarian online media platform focusing on economy, science, technology, and culture, targeting a general audience interested in these topics. The website uses modern web technologies such as Ember.js with Fastboot for server-side rendering, and integrates marketing and analytics tools like Google Tag Manager and Remp. The content is rich and professionally presented, with multiple articles, authors, and categories, indicating a mature media outlet founded in 2017. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal security policies. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, the site is legitimate and well-positioned in the Hungarian media market, but could improve transparency and security practices.

The domain clvaw-cdnwnd.com is registered through Amazon Registrar, Inc. with a creation date in May 2022 and an expiry in 2026. However, the website content is completely inaccessible, returning an Access Denied error likely caused by a Web Application Firewall or other security mechanism. Due to this blockage, no metadata, business information, or technical details about the website's purpose or services can be extracted or analyzed. The lack of accessible content severely limits the ability to assess the company's market position, technical infrastructure, or security posture. The domain registration appears legitimate and consistent, but the absence of any visible website content or contact information reduces trust and credibility significantly.

REGIONPLZEN.CZ is a well-established regional news and information portal serving the Plzeňský kraj region in the Czech Republic. Operated by UNIWEB s.r.o., the portal offers daily news, a business directory, event calendars, job listings, and regional advertising services. The website targets local residents and businesses, providing relevant and timely regional content. The portal has a consistent brand presence and is supported by a parent media group, REGION24.CZ.

UNIWEB s.r.o. operates the website uniwebset.cz, providing a CMS platform (UNIWEBSET) and publishing articles focused on e-commerce, online business, finance, technology, and marketing. The company positions itself as a small but established Czech digital agency with services including web design, SEO, online marketing, and webhosting. The website is professionally designed with good content quality and clear navigation, targeting business professionals and entrepreneurs in the Czech Republic. Technically, the site uses modern frontend libraries such as jQuery, Bootstrap, and FontAwesome, and is mobile optimized with a cookie consent mechanism in place. However, the absence of WHOIS data and lack of visible security headers indicate areas for improvement in domain transparency and security posture. Overall, the site is functional and trustworthy but would benefit from enhanced security practices and domain registration verification.

Region24 is a Czech regional media group operating a network of regional online news portals and thematic websites, reaching over one million users annually. The business model focuses on regional news publishing, online advertising, and SEO services. The website is professionally designed with consistent branding and clear navigation, targeting a general audience interested in regional news across multiple Czech regions. Technically, the site uses modern front-end technologies including Bootstrap and jQuery, hosted by Active24, with moderate performance and good mobile optimization. Security posture is moderate with HTTPS assumed and no visible exposed sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and legitimate, supporting the business credibility. Strategic improvements in privacy compliance and security practices are recommended to enhance trust and compliance.

UNIWEB s.r.o. is a Czech online agency specializing in web design, SEO, and custom software development, targeting primarily small to medium-sized businesses and entrepreneurs in the Czech Republic. The company has a professional web presence with a focus on responsive design and comprehensive online marketing services. Their market position is supported by a portfolio of client references and a media partnership with REGION24. Technically, the website employs modern frontend technologies including jQuery, Bootstrap, and popular marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. WHOIS data is unavailable, which slightly impacts trust but does not negate the professional appearance and business legitimacy. Overall, the website is well-structured, user-friendly, and trustworthy for its target audience.

The WST Group is a Hungarian technology company specializing in custom software and web development services, including business integration and EDI solutions. Established with a business history dating back to 1997, the company positions itself as a reliable partner for businesses seeking tailored digital solutions to grow and engage their customers. Their website reflects a professional and consistent brand image with clear service offerings and contact channels. Technically, the site employs modern web technologies such as Google Fonts, Google Analytics, reCAPTCHA, and Hotjar for analytics and security. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. Security posture is solid with HTTPS and form protections, but lacks explicit security headers and published security policies. Privacy compliance is evident through a comprehensive privacy policy, though cookie consent mechanisms are missing. Overall, the website is trustworthy and professionally maintained, with room for enhancements in security transparency and privacy controls.

The Budapest Jewish and Israeli Film Festival website serves as the official digital presence for an established cultural event celebrating Jewish and Israeli cinema. The festival, with over a decade of history, targets community members and film enthusiasts, emphasizing cultural storytelling and community togetherness. The website is professionally designed using WordPress and common plugins, providing a good user experience with clear navigation and mobile optimization. Privacy and cookie consent mechanisms are implemented, reflecting compliance with GDPR standards. Security posture is adequate with HTTPS enabled, though improvements such as enabling DNSSEC and adding security headers are recommended. The domain registration data aligns well with the festival's history, supporting legitimacy and trustworthiness.

Obec Kubova Huť operates as the official municipal government office for the village of Kubova Huť in the Czech Republic. The website serves as a public information portal providing residents and visitors with essential contact details, official documents, local news, and administrative information. The site targets local citizens and tourists interested in the municipality's governance and community updates. The business model is purely governmental, focusing on public service and transparency. Technically, the website employs standard web technologies including HTML, CSS, and JavaScript, with integration of Google Analytics for visitor tracking and CookieScript for cookie consent management. The hosting appears to be provided by a regional service provider, ŠumavaNet.CZ. The site shows basic mobile optimization and accessibility features but lacks advanced modern frameworks or CMS indications. From a security perspective, the site uses cookie consent mechanisms and does not expose sensitive data. However, no security headers or explicit HTTPS enforcement details were found in the provided data. The absence of WHOIS registration data is a concern for domain legitimacy verification, although the website content and official nature suggest it is a legitimate local government site. Overall, the website is functional and serves its purpose as a municipal information portal but would benefit from enhanced security practices, explicit privacy policies, and improved technical modernization to increase trust and compliance.

The website milevsko.cz serves as a regional internet news portal for the town of Milevsko in the Czech Republic, providing local news, cultural event information, and community updates. It targets residents and visitors interested in regional happenings and local institutions. The business model is primarily informational with advertising support, focusing on community engagement and regional promotion. The domain has been registered since 1998, indicating a long-standing presence in the local digital space. Technically, the site is built on basic HTML, CSS, and JavaScript without modern CMS or frameworks. The hosting is provided by a Czech registrar REG-ZONER. The site lacks mobile optimization and advanced SEO or accessibility features, reflecting a modest technical maturity. No analytics or tracking technologies are detected, and the site does not implement modern security headers or visible HTTPS enforcement. From a security perspective, the absence of HTTPS and security headers is a concern, as is the lack of privacy and cookie policies. No incident response or vulnerability disclosure information is present. The site does not expose sensitive data or use vulnerable libraries, but overall security posture is basic and could be improved significantly. Overall, the website is functional and serves its community purpose but requires enhancements in security, privacy compliance, and technical modernization to improve trust and user experience. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving mobile responsiveness, and establishing clear contact and incident response channels.

The website www.c-budejovice.cz serves as the official online presence of the statutory city of České Budějovice, Czech Republic. It provides comprehensive information about city governance, public services, news, cultural events, and municipal resources targeted at residents, visitors, and local businesses. The site is well-branded with official logos and maintains consistent messaging aligned with its government function. The presence of social media links and a cookie consent mechanism indicates a commitment to user engagement and regulatory compliance. Technically, the site is built on the Drupal CMS platform, leveraging common web technologies such as jQuery, Google Analytics, and JW Player for multimedia content. The site is mobile-optimized with a moderate performance profile and basic accessibility features. However, some security best practices such as HTTP security headers are not visibly implemented, and WHOIS data for the domain is missing, which raises some concerns about domain registration transparency. From a security perspective, the site uses HTTPS and anonymizes IP addresses in analytics, which are positive indicators. The cookie consent banner complies with EU regulations, but there is no visible security policy or incident response information. No vulnerabilities or malware indicators were detected in the content. Overall, the site presents a moderate security posture with room for improvement in transparency and technical security controls. The overall risk assessment is moderate with a recommendation to verify domain registration details, implement additional security headers, and publish clear security and privacy policies. These steps would enhance trust and compliance, supporting the city’s digital service delivery and citizen engagement objectives.

Moravská zemská knihovna v Brně operates as a regional public library institution in the Czech Republic, offering extensive library services including lending, interlibrary loans, digital catalogs, educational programs, and cultural events. The website is professionally designed using Drupal 10, featuring a rich content structure and good user experience optimized for mobile devices. Security posture is strong with HTTPS and security headers implemented, though privacy and cookie policies are not explicitly visible, indicating room for compliance improvement. The absence of WHOIS data limits domain registration trust assessment, but the website content and structure strongly support legitimacy as a public institution. Overall, the site demonstrates a mature digital presence with moderate tracking via Google Tag Manager and good accessibility and SEO practices.

CK Alexandria is a Czech Republic based travel agency specializing in holiday packages primarily to popular European and exotic destinations such as Bulgaria, Greece, Turkey, Spain, Italy, Albania, Croatia, Cyprus, Montenegro, and the UAE. The company offers a broad range of services including last minute deals, animation programs, and a premium club membership, targeting general consumers seeking vacation travel. The website is built on modern technologies including Next.js and React, with integration of multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Smartlook. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of security headers and a published privacy policy reduces compliance maturity. WHOIS data is unavailable, limiting domain trust assessment. Overall, the website presents a professional and trustworthy front for a medium-sized travel business.

KRASIM TOUR, spol. s.r.o. is a Czech travel agency specializing in holiday packages to popular destinations such as Bulgaria, Greece, Turkey, and exotic locations worldwide. Established in 2006, the company offers a comprehensive range of services including accommodation bookings, various transport options, travel insurance, and parking services at departure points. The website is well-structured, professionally designed, and targets Czech-speaking customers seeking vacation travel solutions. The company maintains a solid market position with over 30 years of experience and trust indicators such as insurance certification and a guarantee fund. Technically, the website employs modern web technologies including jQuery, Lightbox2, Google reCAPTCHA, and a chat widget for customer support. It uses a Content Security Policy and enforces HTTPS, reflecting a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. SEO and accessibility are adequately addressed, though accessibility could be further improved. From a security perspective, the site demonstrates good practices with HTTPS, CSP headers, and anti-bot measures. Cookie consent and privacy policies are implemented in compliance with GDPR. However, explicit security policies and incident response contacts are not found, representing an area for enhancement. No vulnerabilities or suspicious activities were detected. Overall, the website presents a low-risk profile with strong business credibility and a good security posture. Strategic recommendations include adding a dedicated security policy page, incident response contact information, and a vulnerability disclosure mechanism to further enhance trust and compliance.

VVV TOUR CZ 1, s.r.o. is a Czech travel agency specializing in holiday packages to Bulgaria, leveraging direct flights from multiple Czech cities including Pardubice, Prague, Brno, and Ostrava. The company has a long-standing presence since 2001, positioning itself as a specialist in the Bulgarian travel market with a focus on quality accommodation and comprehensive travel services. The website reflects a professional and consistent brand image, targeting Czech travelers seeking vacations in Bulgaria. Technically, the site is built on modern frameworks such as Next.js and React, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks advanced security headers and explicit security policies. Privacy compliance is addressed with cookie consent and privacy policy, though GDPR compliance could be enhanced with more detailed disclosures. Overall, the site is trustworthy and functional, supporting the business model effectively.

Cestovní kancelář Čedok is a well-established travel agency website offering a wide range of holiday packages, flights, and tours primarily targeting Czech-speaking travelers. The site provides detailed offers including last minute deals, ski trips, exotic destinations, and family-friendly options. The business model focuses on online bookings and travel package sales, positioning itself as a major player in the Czech travel market. The website is professionally designed with consistent branding and good content quality, appealing to a broad audience seeking travel services. Technically, the website leverages modern web technologies including React with Next.js framework, Google Tag Manager for analytics, and Visual Website Optimizer for marketing optimization. The site is mobile-optimized and uses secure HTTPS connections with appropriate security headers, indicating a mature digital infrastructure. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and security headers. However, it lacks visible privacy and cookie policies, explicit GDPR compliance indicators, and contact information for security incidents or vulnerability disclosures. The absence of WHOIS data reduces the ability to fully verify domain legitimacy, which impacts trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy front for a travel agency but would benefit from enhanced privacy compliance, clearer contact information, and improved transparency regarding security policies. These improvements would strengthen user trust and regulatory compliance.

CK Blue Style is a Czech travel agency specializing in offering vacation packages and tours to popular European and exotic destinations such as Greece, Egypt, Tunisia, Turkey, Morocco, Italy, Bulgaria, and more. The website provides a comprehensive catalog of travel options including last minute and first minute deals, family vacations, and premium travel experiences. The company targets a broad audience including families, seniors, and adult travelers seeking quality holiday options. Technically, the website is built using modern web technologies including React and Next.js, with integrations for analytics and cookie consent management. The site is mobile optimized and provides a good user experience with clear navigation and search capabilities. Security-wise, the site enforces HTTPS and uses asynchronous script loading, but lacks some security headers and explicit security policies. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, though the website content and business presence suggest legitimate operations. Privacy compliance is partial, with cookie consent implemented but no clear privacy or terms of service pages found. Overall, the site is professional and trustworthy but would benefit from improved transparency and security practices.

TUI Poland Sp. z o.o. operates the website www.tui.cz as a leading travel agency offering a wide range of all inclusive and last minute vacation packages, tours, and charter flights to popular destinations worldwide. The company positions itself as the number one travel agency in Europe, targeting general consumers seeking organized travel experiences. The website is professionally designed with good content quality and consistent branding, supported by official social media channels and a clear customer service contact number. Technically, the website leverages modern web technologies including React and Next.js frameworks, with integrations for Cookiebot for cookie consent management, Google Analytics, and Hotjar for analytics and user behavior tracking. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be improved. Performance is moderate, with a comprehensive set of meta tags and structured data enhancing search engine visibility. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes standard security headers. Cookie consent mechanisms are implemented in compliance with GDPR, and privacy policies are comprehensive and accessible. However, the absence of WHOIS data and lack of explicit security policy or incident response information represent gaps in transparency and trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to enhance trust and compliance. Improving accessibility and adding a terms of service page would further strengthen the user experience and legal posture.

EXIM tours is a well-established Czech travel agency specializing in worldwide package tours, last minute deals, and specialized travel services for families, couples, and seniors. The company operates under the DER Touristik group, positioning itself as a leading player in the Czech travel market. The website reflects a mature digital presence with modern technologies such as Vue.js, Google Tag Manager, and Usercentrics for privacy compliance. Security measures include HTTPS enforcement and bot protection via Google reCAPTCHA, although explicit security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. The absence of WHOIS data due to privacy protection is typical for such businesses and does not detract from the site's legitimacy. Overall, EXIM tours demonstrates a professional and trustworthy online presence suitable for its market segment.

CK FISCHER is a prominent Czech travel agency specializing in holiday packages, including last minute and first minute offers, with a strong loyalty program (DERCLUB). The company operates under the parent company DER Touristik CZ a.s., part of the REWE Group. The website targets general consumers seeking quality vacation services primarily in the hospitality sector. Technically, the site uses modern JavaScript frameworks (Vue.js), integrates Google Analytics, Google Tag Manager, Usercentrics for consent management, and reCAPTCHA for bot protection. The site is mobile optimized and has good SEO practices. Security posture is solid with HTTPS and consent mechanisms, but lacks some advanced security headers and explicit security policies. WHOIS data is missing, which reduces domain trust assessment confidence but the business presence and branding indicate legitimacy. Overall, the site is professional, user-friendly, and compliant with privacy regulations.

Eventgroove operates an all-in-one platform specializing in event ticketing, fundraising, and ecommerce solutions tailored for nonprofits, event organizers, and distributed organizations. The website presents a professional and modern interface, leveraging WordPress with Divi theme and NitroPack for performance optimization. The platform integrates various marketing and analytics tools such as Google Tag Manager and HubSpot, indicating a mature digital marketing strategy. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are lacking. The absence of WHOIS data for the domain raises concerns about registration transparency, which slightly diminishes overall trust. Strategic recommendations include publishing comprehensive privacy and cookie policies, enhancing security headers, and providing clear contact and incident response information.

PANKREA s.r.o. is a small creative PR agency based in the Czech Republic specializing in public relations, corporate identity, web design, marketing, and custom programming services. The company targets businesses seeking to build and promote their brand identities through professional web presence and marketing communication. The website presents a professional image with clear service offerings and client references, positioning PANKREA as a creative and expert partner in the media and marketing sector. Technically, the website uses modern tools such as Google Analytics, Google Tag Manager, and Google reCAPTCHA, and is built on the Estofan CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site employs reCAPTCHA and cookie consent mechanisms but lacks visible security headers and publicly disclosed security policies. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear legitimate and professional. Overall, the site scores well on content quality and technical implementation but has room for improvement in security posture and privacy transparency.

Hotel.cz is an established online hotel booking platform primarily serving the Czech Republic and Slovakia markets. Operated by ONLINE HOLDING s.r.o., it offers a wide selection of hotels and accommodation options with a focus on competitive pricing and direct hotel payments. The website positions itself as a market leader with over 10 years of experience, targeting travelers seeking convenient and reliable hotel reservations. The platform provides multilingual support and extensive filtering options to enhance user experience. Technically, the website employs modern tracking and analytics tools including Google Analytics, Microsoft Clarity, Bing UET, and OneTrust for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized and features a responsive design, although accessibility features are basic. Performance is moderate with room for improvement in security header implementation. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but lacks visible security policies, incident response contacts, or vulnerability disclosure information. The absence of WHOIS data for the domain is a notable concern, limiting the ability to fully verify domain legitimacy and ownership. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, Hotel.cz presents a professional and trustworthy front for hotel bookings, but would benefit from enhanced transparency in privacy and security policies, as well as domain registration clarity to strengthen trust and compliance posture.

The website 'Vracíme vodu lesu' represents a large-scale governmental forestry and environmental conservation program managed by Lesy České republiky, s.p. It focuses on water retention and revitalization of small watercourses across the Czech Republic, positioning itself as the largest program in the history of Czech forestry. The site targets the general public and stakeholders interested in environmental sustainability and forestry management. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integrations such as Cookiebot for cookie consent, Google Analytics, and Facebook Pixel for analytics and marketing. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with visible cookie consent and a comprehensive privacy policy. Overall, the website demonstrates a mature digital presence with a strong focus on compliance and user trust.

Lovecký zámeček Kladská is a small hospitality business operating a hotel and offering recreational services such as hunting and fishing in Mariánské Lázně, Czech Republic. The website is professionally designed with clear navigation and multilingual support, targeting tourists and nature enthusiasts. The business is owned by Lesy České republiky, a reputable organization, which adds credibility and trust. The website uses WordPress CMS with SEO and multilingual plugins, hosted on Azure DNS infrastructure. Cookie consent is implemented with detailed user controls, and privacy policies are linked to the parent company site, indicating good GDPR compliance. Security posture is generally good with HTTPS and no exposed sensitive data, but could be improved by enabling DNSSEC and adding security headers. No incident response or vulnerability disclosure information is published, which is a gap. Overall, the site is trustworthy, compliant, and professionally maintained, suitable for its business purpose.

Semenářský závod Lesů České republiky is a medium-sized, state-owned enterprise specializing in forestry seed production and related laboratory services. Established in 1971, it serves forest owners and nurseries with a range of products including forestry and ornamental seeds, wood products, and accredited laboratory testing. The website reflects a professional and consistent brand presence, targeting primarily forestry professionals and registered customers. The business holds ISO/IEC 17025:2018 accreditation, underscoring its commitment to quality and standards. Technically, the website is built on WordPress with modern SEO and multilingual support via WPML. It uses Google Analytics and Facebook Pixel for analytics and marketing, integrated with a GDPR-compliant cookie consent mechanism. Hosting is supported by Microsoft Azure DNS infrastructure. The site demonstrates good mobile optimization and accessibility, though some improvements in security headers and incident response transparency could be made. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or vulnerability disclosure mechanism is noted. Privacy compliance is strong, with clear privacy and cookie policies and user consent management. Business credibility is high, supported by clear contact details, certifications, and professional content. Overall, the website is trustworthy, well-maintained, and compliant with relevant regulations, making it a reliable digital presence for the organization.

The website 'Sázíme lesy nové generace' represents Lesy České republiky, a government-affiliated forestry management entity in the Czech Republic. It focuses on sustainable forest management, watercourse restoration, and public engagement through educational events such as 'Den lesů nové generace'. The site targets the general public interested in environmental conservation and sustainable wood use. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, and Cookiebot for consent management, ensuring GDPR compliance. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, but the website's branding and social media presence support its legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

The website kubanek.eu represents a small Czech business specializing in the development of B2B and B2C e-commerce platforms, web applications, and corporate intranets with integration to popular Czech ERP systems such as Pohoda, Vario, and Qi. The business offers tailored solutions including online dashboards, reports, and exports to XLS and PDF formats, addressing gaps in standard enterprise information systems. The site content is professional and targeted at businesses requiring custom software integration and e-commerce solutions within the Czech market. Technically, the website is built with basic HTML5 and CSS3, using the Roboto font. There is no evidence of advanced frameworks, CMS, or analytics tools. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No forms or data collection mechanisms are present, indicating minimal user interaction beyond informational content. From a security perspective, the site lacks visible HTTPS confirmation and security headers, which lowers its security posture. No privacy, cookie, or terms of service policies are present, indicating compliance gaps with GDPR and related regulations. The WHOIS data is fully privacy protected by EURid, which is common for .eu domains, and no suspicious patterns were detected. Contact information is limited to a professional email address and company identifiers, supporting legitimacy but limiting direct contact options. Overall, the website is a legitimate small business site with good content quality and business credibility but requires improvements in security, privacy compliance, and technical modernization to enhance trust and protect user data.

Sejkora a přátelé s.r.o. operates a modern Krkonošská restaurant located in Janské Lázně, Czech Republic, focusing on traditional regional cuisine with a modern gastronomic approach. The business targets tourists and locals seeking authentic culinary experiences rooted in local ingredients and culture. The website is professionally designed, featuring clear navigation, reservation capabilities via a third-party widget, and active social media presence. Technically, the site runs on WordPress with common web technologies and integrates external services for reservations. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. The absence of WHOIS data limits domain trust assessment, but the business information and website content appear legitimate and consistent with a small hospitality enterprise.

BYD Trutnov, operated by Autostyl a.s., is an authorized dealership and service center specializing in electric vehicles and plug-in hybrids from the BYD brand. Positioned as the first BYD representative in the Trutnov region of the Czech Republic, the company focuses on delivering modern, eco-friendly mobility solutions to local consumers. The website reflects a professional business presence with clear branding, comprehensive product offerings, and accessible customer contact points. Technically, the website is built on a modern stack including October CMS, Bootstrap, and JavaScript libraries such as Swiper.js and jQuery. It is mobile-optimized and includes SEO best practices like meta tags and Open Graph data. Google Tag Manager is used for analytics and tracking, with a cookie consent mechanism that aligns with GDPR requirements. From a security perspective, the site enforces HTTPS and implements cookie consent controls, but lacks visible security headers which could enhance protection against common web threats. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data raises concerns about domain legitimacy and should be investigated further. Overall, the website presents a trustworthy and professional front for the business, but improvements in security headers and domain registration transparency are recommended to strengthen trust and compliance.

Toyota Central Europe - Czech s.r.o., represented online by Autostyl a.s., operates as an official regional dealer for Toyota in the Czech Republic. The company provides comprehensive automotive sales, servicing, and customer support, targeting consumers interested in Toyota vehicles and accessories. The website reflects a professional and consistent brand presence aligned with Toyota's corporate identity. Technically, the site leverages Adobe Experience Manager and Scene7 for content management and media delivery, supported by Google Tag Manager for analytics and cookie consent management. The infrastructure indicates a mature digital presence with moderate performance and good mobile optimization. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed through cookie consent mechanisms and GDPR-aligned privacy policies. Overall, the domain appears legitimate and trustworthy despite the absence of public WHOIS data, which is common for corporate domains. Strategic recommendations include enhancing public security policy disclosures and incident response information to further build trust and compliance.

Rentstyl, s.r.o. operates a Czech-language website offering operational leasing and car rental services primarily for Škoda and Toyota vehicles. The company targets individuals and businesses seeking flexible vehicle leasing solutions with fixed monthly payments including insurance and servicing. The website is professionally designed with good content quality and clear navigation, optimized for mobile devices. Technically, the site uses a custom MVC-based CMS integrated with BSSHOP e-commerce platform and employs Google Tag Manager for analytics and marketing. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though HTTP security headers are not explicitly detected. The absence of WHOIS data limits domain ownership transparency, which slightly impacts trustworthiness. Overall, the site presents a legitimate and professional business with moderate risk due to incomplete domain registration information.

Yellow Point, spol. s r.o. operates an e-commerce platform specializing in the sale of experience gifts and adventure activities primarily in the Czech Republic. The website offers a variety of products such as gift certificates, adrenaline experiences, and seasonal activities, targeting general consumers seeking unique gift options. The company appears to hold a solid regional market position with a medium-sized business model focused on direct online sales and bookings. Technically, the website is built on the WPJ CMS platform and employs modern JavaScript libraries and tracking tools including Google Analytics 4, Google Tag Manager, Adform, and Seznam retargeting. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Security measures include HTTPS enforcement and Sentry error monitoring, but lack some advanced HTTP security headers and explicit vulnerability disclosure mechanisms. From a security perspective, the site demonstrates a moderate security posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Contact information is transparent, enhancing business credibility. However, WHOIS data is unavailable, likely due to privacy protection, which slightly limits domain trust analysis. Overall, the website is professional, trustworthy, and secure for its business purpose. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its posture. The absence of WHOIS data is mitigated by strong on-site trust signals and compliance features.

Tourist Board Špindlerův Mlýn, z.s. is a non-profit destination management organization dedicated to promoting tourism in the Špindlerův Mlýn area and the broader Krkonoše region. Supported by the city and key tourism operators, it focuses on marketing, tourism projects, and event organization to enhance the visitor experience and regional development. The website is professionally designed, mobile-optimized, and provides clear information about the organization's mission and activities, targeting tourists and local stakeholders.

The domain 394424.com is newly registered as of July 18, 2024, with NameCheap and uses Amazon AWS DNS servers. The website currently serves only a minimal 404 Not Found error page with no visible content, metadata, or business information. There are no privacy, cookie, or terms of service policies, nor any contact details or social media links. The lack of content and business data indicates the site is either under development or abandoned. Technically, the domain uses reputable DNS hosting but lacks DNSSEC and security headers, which are recommended for improved security. The security posture is minimal with no visible vulnerabilities but also no best practices implemented. Overall, the website is not operational and provides no business or user value at this time.

mBank S.A. operates a modern digital banking platform targeting personal finance customers and entrepreneurs primarily in the Czech Republic. The website offers a comprehensive suite of financial products including current accounts, loans, mortgages, credit and debit cards, savings products, insurance, and mobile banking applications. The bank positions itself as a digital-first institution with a focus on simplicity, practicality, and accessibility. The site is professionally designed with excellent content quality and clear navigation, optimized for mobile devices. Technically, the site uses a modern tech stack including jQuery and Google Tag Manager, and is built on the StartWeb6.0 CMS platform. Security posture is strong with HTTPS enforced and secure login mechanisms, although explicit security headers are not visibly present in the HTML. Privacy compliance is robust with clear GDPR-aligned privacy and cookie policies and consent mechanisms. However, WHOIS data for the domain is missing, which reduces transparency and slightly impacts trustworthiness. Overall, the site is highly professional, trustworthy, and well-suited for its target audience.

Dressing Your Truth operates an e-commerce store specializing in beauty and personal style products, targeting a global audience of women interested in makeup and haircare. The business leverages Shopify's platform for its online presence, integrating various marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Klaviyo to optimize customer engagement and sales. The website is professionally designed with good SEO and mobile optimization, reflecting a mature digital infrastructure suitable for a niche retail market. Security posture is generally good with HTTPS enforced and secure payment options, though there is room for improvement in implementing security headers and explicit privacy policies. The absence of WHOIS data is consistent with Shopify subdomains but limits domain trust verification. Overall, the site presents a credible and professional e-commerce presence with moderate risk due to privacy compliance gaps.

Direct technologies is a Czech Republic-based technology company operating as part of the Direct Family group. The company focuses on delivering agile, innovative, and reliable technology solutions in partnership with business units, leveraging modern technologies and data insights to build functional business systems. Their market position is that of a medium-sized technology partner supporting sectors including insurance, automotive, fintech, and non-profit foundations. The website demonstrates a professional digital presence with good content quality and modern technical infrastructure, including React and Next.js frameworks and AWS S3 for media hosting. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are not published. The absence of WHOIS data limits domain legitimacy verification, but the overall business credibility and trust indicators are strong.

Direct Investments is a Czech investment group specializing in building and managing a portfolio of companies primarily in the insurance, mobility, finance, and technology sectors. The group emphasizes Czech ownership and control, aiming to create trustworthy and sustainable businesses. Their market position is strong with over one million clients and a significant annual turnover. The website presents a professional image with clear information about subsidiaries and investment opportunities. Technically, the website is built using modern frameworks such as React and Next.js, ensuring good performance and mobile optimization. The presence of Google Tag Manager and cookie consent mechanisms indicates a moderate level of digital maturity and privacy awareness. However, some improvements could be made in accessibility and security headers. From a security perspective, the site uses HTTPS and has basic privacy mechanisms, but lacks visible security policies, incident response contacts, and vulnerability disclosure information. The absence of WHOIS data reduces transparency and trustworthiness from a domain registration standpoint. Overall, the website is professional and trustworthy in content and design but would benefit from enhanced security disclosures and domain registration transparency to improve its risk profile and compliance posture.

Fondee is a Czech Republic-based online investment platform specializing in simple, tailored ETF portfolios and corporate bond investments. The company targets retail investors seeking low-cost, transparent investment solutions, including sustainable ESG portfolios, children's accounts, and pension investment plans. The platform emphasizes ease of use, trust, and regulatory compliance, positioning itself as an emerging fintech player in the Czech market with growing media recognition. Technically, the website leverages modern web technologies including React, Google Tag Manager, and Google reCAPTCHA v3, hosted on DigitalOcean infrastructure with CDN support. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a professional and user-friendly experience. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure reduces transparency. No WHOIS registration data was found, which impacts trust assessment but the overall site content and media presence support legitimacy. Overall, Fondee presents a secure, professional, and privacy-conscious investment platform with room for improvement in transparency and contact availability. Strategic recommendations include publishing security and incident response policies, verifying domain registration details, and enhancing visible contact information.

Direct ubezpieczenia is a Polish branch of the Czech insurance company Direct pojišťovna a.s., offering modern and transparent insurance solutions primarily in the automotive, property, and travel sectors. With over 300,000 clients in Poland and a decade of experience, the company emphasizes simplicity, fast claims processing, and customer-friendly service. The business model leverages direct sales and agent networks, with claims and customer service managed by UNEXT sp. z o.o., a trusted partner in Poland. The website reflects a professional and consistent brand image, targeting individual and corporate clients in Poland.

The website msp.gov.cz is the official portal of the Ministry of Justice of the Czech Republic, serving as a comprehensive resource for justice-related information, public registries, legal news, and e-services. It targets the general public, legal professionals, and government officials, providing authoritative content and access to various justice system components. The site is well-branded, consistent, and maintains a high level of trust as a government domain. Technically, the site is built on the Liferay CMS platform with modern web technologies including React and Alloy UI. It employs HTTPS with strong SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. The site is mobile-optimized and accessible, with good SEO practices and structured navigation. From a security perspective, the site enforces HTTPS and uses nonce-based inline scripts to mitigate injection risks. However, it lacks explicit security headers such as Content-Security-Policy and X-Frame-Options, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which is unusual for a government domain but likely due to registry policies rather than malicious intent. Overall, the site presents a strong security posture and digital maturity appropriate for a government entity, with room for improvement in security header implementation and publishing a formal security policy or vulnerability disclosure program.

42 São Paulo is an innovative educational institution focused on providing free software engineering education to a diverse audience. The website presents a professional and modern design, emphasizing accessibility and inclusivity in its educational offerings. The business model centers on offering high-quality, tuition-free programming courses aimed at forming the next generation of software engineers. The institution positions itself as a leader in innovative software engineering education within Brazil.

42 Le Havre is a tuition-free computer programming school located in Normandy, France, operating as part of the global 42 network. The institution offers an innovative, project-based pedagogy emphasizing peer-to-peer learning and gamification, targeting a broad audience without requiring prior diplomas or coding experience. The website reflects a medium-sized educational entity founded in 2021, with a consistent brand and clear communication of its values and offerings. Technically, the site is built on WordPress with Elementor and uses modern web technologies, hosted likely behind Cloudflare DNS. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks explicit security headers and incident response information. The domain registration is consistent and legitimate, supporting the trustworthiness of the entity. Overall, the website is professional, secure, and compliant with GDPR, serving its educational mission effectively.

42 Perpignan is an educational institution offering free, project-based computer science training as part of the global 42 network. The website positions itself as an innovative and accessible coding school targeting young adults and prospective students. It emphasizes peer-to-peer learning and a unique pedagogical approach without traditional classes or professors. The institution is well integrated into a global network with multiple campuses worldwide, enhancing its market position and credibility. Technically, the website is built on WordPress with modern web technologies, including jQuery, Contact Form 7, and Cloudflare DNS services. The site is mobile-optimized and includes SEO best practices, although accessibility features are basic. Security posture is good with HTTPS and domain protection, but lacks explicit security headers and formal security policies. Privacy compliance is partial with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the site is professional, trustworthy, and safe for general audiences.

42 Vienna is a Digital Excellence Campus based in Austria, providing innovative, free, and open-access coding education using a peer-to-peer learning model without teachers or lectures. It targets aspiring programmers and IT professionals, emphasizing inclusivity regardless of financial or academic background. The website is professionally designed, mobile-optimized, and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are absent. WHOIS data is unavailable, which slightly impacts trust but is mitigated by consistent branding and social media presence. Overall, the site reflects a credible educational institution with room for improvement in privacy and security transparency.

42 Berlin is a tuition-free, non-profit software engineering school located in Berlin, Germany. It offers an innovative peer-to-peer learning environment focused on hands-on projects and real-world challenges, targeting aspiring software developers and students interested in coding education. The website is built on WordPress using Elementor, with modern SEO and structured data implementations, and is hosted behind Cloudflare. The site integrates multiple third-party analytics and tracking pixels including Google Analytics, TikTok, Facebook, and Reddit, with GDPR consent mechanisms in place via the Complianz plugin. Security posture is generally good with HTTPS enforced and Cloudflare protection, but lacks explicit security headers and published security policies. Contact information and privacy policies are not explicitly found in the analyzed content, which represents an area for improvement. Overall, the website is professional, trustworthy, and well-positioned in the education sector, but could enhance privacy compliance and security transparency.

42 Mulhouse Grand Est is a non-profit educational institution specializing in innovative IT training through a project-based, peer-to-peer learning model. It is part of the global 42 network with 52 campuses worldwide, offering free education without diploma prerequisites. The school is housed in KMØ, a digital innovation hub in Mulhouse, France, and targets individuals over 18 seeking to enter the IT field. The website reflects a professional and modern digital presence with clear navigation and strong branding. Technically, the website is built on WordPress with modern web technologies including jQuery and Bootstrap. It employs SEO best practices with structured data and meta tags, and includes a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and accessible, providing a good user experience. However, no direct company contact emails or phone numbers are visible on the homepage, and WHOIS data is unavailable, which slightly impacts trust. Security-wise, the site uses HTTPS with good SSL configuration and cookie consent but lacks explicit security headers and published security policies or incident response information. There are no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data and registrant information is a minor concern but is mitigated by the site's professional content and certifications. Overall, the website is trustworthy, well-designed, and compliant with privacy regulations, suitable for its educational mission. Strategic improvements include publishing security policies, incident response contacts, and enhancing security headers to strengthen security posture and trust.

42 Barcelona is a pioneering educational campus focused on programming and digital skills, offering a fully subsidized, peer-to-peer, gamified learning experience without traditional professors. Supported by Fundación Telefónica and local government entities, it targets individuals over 18 years old seeking flexible, innovative education to enter the labor market. The website reflects a mature digital presence with modern technologies, comprehensive privacy and cookie policies, and strong partner affiliations. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though additional security headers and formal incident response policies could enhance trust. WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and partnerships support legitimacy.

42 Lausanne is a free computer science school based in Lausanne, Switzerland, offering tuition-free education open to all without diploma requirements. The website serves as an informational platform for prospective students and the community, highlighting its innovative educational approach. The technical infrastructure is built on WordPress, leveraging popular plugins such as Yoast SEO for search optimization and CookieYes for cookie consent management. The site uses modern web technologies including jQuery and Font Awesome for enhanced user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, there is room for improvement by adding security headers and formal security policies. No privacy policy or terms of service were detected, which could be a compliance gap. Overall, the website is professional, well-branded, and trustworthy, with a moderate AI score reflecting good content quality and business credibility but some privacy compliance shortcomings.