High-risk security reports

M

MXGP Czech republic 26.-27.7.2025 - Home

mxgploket.com

42

The website www.mxgploket.com serves as an informational portal for the MXGP Czech Republic motocross event scheduled for July 26-27, 2025. It provides event details, ticketing links, accommodation, maps, and contact navigation. The site targets motocross enthusiasts and event attendees primarily in the Czech Republic region. Technically, it is built on Joomla CMS with standard web technologies including jQuery, Bootstrap, and Google Maps API integration. The site includes Google Analytics for visitor tracking but lacks visible privacy or cookie policies, which is a compliance gap. Security posture is basic with no detected security headers or advanced protections. WHOIS data for the domain is unavailable, raising concerns about domain registration legitimacy. Overall, the site is functional but requires improvements in privacy compliance, security hardening, and domain legitimacy verification.

Z

ZONER, a.s.

zonerai.com

45

Zoner AI Image Creator is a recently launched online platform by ZONER, a.s., offering free and easy-to-use AI-powered image generation with 4K resolution. The service targets general users interested in creative AI-generated images and is accessible globally via web browsers. The website is built using modern web technologies including Material UI and JavaScript ES modules, hosted likely on infrastructure associated with ZonerCloud. The domain is newly registered in 2023, consistent with the launch of this new service. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating room for compliance improvements.

W

Wiener Städtische Versicherungsverein

wst-versicherungsverein.at

48

Wiener Städtische Versicherungsverein is a medium-sized Austrian non-profit organization dedicated to promoting art, culture, and social engagement. The website reflects a well-established entity with a clear focus on cultural exhibitions, social initiatives, and community involvement. Their market position is that of a reputable cultural non-profit with partnerships in the arts and academic sectors. The website is built on a modern WordPress platform with relevant plugins for SEO and user interaction, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and headers. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, serving a general audience interested in cultural and social topics.

The website online.hafanplus.cz is an online platform offering pet insurance products primarily targeting dog owners in the Czech Republic. The site provides forms to collect pet and insurance information and offers optional add-ons for working and special dogs. The business model focuses on direct online insurance product offerings with a simple user interface. Technically, the site uses modern frontend technologies including React, Ant Design, and Bootstrap frameworks, with Google Tag Manager for analytics. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is basic; HTTPS is assumed but no security headers were detected, and no explicit security or incident response policies are published. Privacy compliance is partially addressed via a cookie consent banner and a linked privacy policy page. However, no contact information or business registration details are provided, and WHOIS data is unavailable, which reduces trustworthiness. Overall, the site is functional and safe but would benefit from enhanced transparency, security practices, and business credibility disclosures.

S

Solar Action Alliance

solaractionalliance.org

42

Solar Action Alliance is a small environmental advocacy group focused on promoting solar energy as a clean, reliable, and abundant renewable energy source. The website provides comprehensive information on solar panel costs, financing options, and state-specific installation guides, targeting homeowners and environmentally conscious individuals in the US. The business model centers on education and advocacy, supported by donations and informational content. Technically, the site is built on WordPress with Bootstrap for responsive design, leveraging common plugins and tracking tools such as Google Analytics and Facebook Pixel. Hosting is provided by SiteGround, and the domain is registered since 2015, indicating a stable presence. Security posture is moderate with HTTPS enforced and some security best practices observed, but lacks advanced security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from improved compliance and security transparency.

I

Info-Zenter Demenz

demence.lu

37

Info-Zenter Demenz is a national information and consultation center based in Luxembourg, specializing in dementia and memory disorders. It serves affected individuals, their families, healthcare professionals, and the general public by providing free consultation services, educational events, and resources. The organization positions itself as a trusted authority in dementia care and information within Luxembourg, supported by government and community partnerships. The website is professionally designed, multilingual, and accessible, reflecting a strong commitment to user experience and inclusivity. Technically, the website is built on WordPress with modern web technologies including jQuery, Google Tag Manager, and Consent Magic for privacy compliance. Hosting is managed via EuroDNS nameservers, and the site employs HTTPS with reCAPTCHA for security. Accessibility features such as an accessibility toolbar are implemented, and SEO best practices are evident through structured data and meta tags. Security posture is solid with HTTPS and privacy consent mechanisms, though explicit security headers and a formal security policy are absent. No vulnerabilities or suspicious activities were detected. Privacy compliance is robust, with clear cookie and privacy policies and user consent management. Contact information is comprehensive and clearly presented. Overall, the website demonstrates a high level of professionalism, security awareness, and compliance, making it a trustworthy resource for its target audience. Strategic improvements could include adding explicit security headers and publishing a security incident response policy to further enhance trust and resilience.

C

culture.lu, Inc.

culture.lu

47

culture.lu is a specialized cultural portal serving the Luxembourg cultural community and enthusiasts. It offers a variety of content including articles, videos, podcasts, event listings, calls for participation, and job offers, positioning itself as a key media hub in the Luxembourg cultural sector. The website is built on Drupal 10 with modern web technologies and integrates social media and newsletter marketing tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some HTTP security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie management. The absence of explicit contact information and terms of service pages is noted but does not significantly detract from overall credibility. The domain registration aligns well with the website's cultural and governmental affiliations, supporting legitimacy. Overall, culture.lu presents a professional, trustworthy, and content-rich platform for its target audience.

F

Free Journal Network

freejournals.org

43

Free Journal Network (FJN) is a small nonprofit organization based in the United States, founded in 2018, dedicated to promoting scholarly journals that adhere to the Fair Open Access model. The organization supports academic journals by facilitating coordination, funding, quality assurance, promotion, and advocacy for open access publishing without author fees. The website serves as an informational and organizational hub for members and interested parties in the scholarly publishing community. Technically, the website is built on WordPress, hosted by Bluehost, and uses common plugins and scripts such as Contact Form 7 and jQuery. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers, representing areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced security and privacy practices.

H

Hrvatsko meteorološko društvo

meteohmd.hr

43

Hrvatsko meteorološko društvo (HMD) is a well-established Croatian non-profit meteorological society dedicated to promoting meteorological science and practice. The website serves as an information hub for members and enthusiasts, offering news, events, project details, and membership services. The organization has a clear national presence with a domain registered since 2001 and consistent WHOIS data aligning with its Croatian roots. Technically, the website uses a traditional tech stack with jQuery and Google Analytics, but some libraries are outdated, posing potential security risks. Accessibility features are commendable, though mobile optimization is basic. Security posture is moderate with HTTPS usage but lacks visible security headers and cookie consent mechanisms, indicating partial GDPR compliance. Overall, the site is professional and trustworthy but would benefit from technical and compliance improvements.

S

SCHIOCCO LTD

board.support

48

Support Board is a technology company specializing in AI-driven chatbots and live chat support solutions primarily for WordPress and PHP platforms. The company offers products that automate customer communication, enhance marketing workflows, and improve customer service efficiency. With over 10,000 global clients and positive expert reviews, Support Board holds a strong position in the customer support software market. The website reflects a professional and modern digital presence with clear navigation and comprehensive content about their offerings. Technically, the site uses a modern tech stack including PHP, WordPress, Bootstrap, and jQuery, hosted on Google Cloud DNS infrastructure, delivering fast and mobile-optimized performance. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements are possible by enabling DNSSEC and adding security headers. Privacy compliance is evident with clear privacy and terms of service pages, though cookie consent mechanisms are absent. Overall, the website and business demonstrate high credibility and trustworthiness with no critical security or content safety concerns.

The website empl.io appears to be a small business or startup registered in the US since 2019. The site is built on WordPress using Bootstrap 3.3.4 and the Yoast SEO plugin, indicating a basic level of technical infrastructure. However, the content is minimal with no visible privacy, cookie, or terms of service policies, and no contact information is provided. The technical setup lacks modern security headers and DNSSEC is not enabled, which are areas for improvement. The security posture is basic with no detected vulnerabilities but also no advanced protections. Overall, the site presents a low level of business credibility and privacy compliance, limiting trustworthiness. Strategic improvements in security, privacy policies, and contact transparency are recommended to enhance the site's professionalism and compliance.

A

APPKEE s.r.o.

appkee-manager.cz

47

APPKEE s.r.o. operates a Czech-language software platform focused on mobile application management and development, primarily targeting businesses and developers requiring app creation and management tools for iOS and Android. The company has established a consistent brand presence since its domain registration in 2020 and maintains a professional website with clear navigation and relevant business content. The platform leverages modern JavaScript libraries and the Nette Framework, hosted on Czech-based servers, indicating a localized and technically competent infrastructure. From a security perspective, the website employs client-side validation and uses HTTPS (implied though not explicitly confirmed in provided data). However, it lacks visible security headers such as Content Security Policy or HSTS, and no explicit cookie consent mechanism is present, which are areas for improvement. The absence of contact information and incident response details on the login page limits transparency and user trust. No signs of WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, the website demonstrates moderate technical maturity and business credibility but would benefit from enhanced security practices and privacy compliance measures. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in security headers, cookie consent, and contact transparency would strengthen the platform's trustworthiness and compliance posture.

E

Energylink s.r.o.

energylink.cz

48

Energylink s.r.o. is a Czech Republic-based company specializing in innovative energy technologies for buildings, including heating, cooling, hot water preparation, and electricity production. The company targets public administration, private firms, and residential building owners, positioning itself as a reliable provider of energy-efficient solutions. Their website reflects a professional and modern digital presence, utilizing Bootstrap and jQuery frameworks, with good mobile responsiveness and clear navigation. However, the absence of WHOIS data raises concerns about domain registration legitimacy, although the website content and contact details appear genuine and consistent with the business claims. Security posture is solid with HTTPS and no visible vulnerabilities, but the lack of security headers and privacy policies indicates room for improvement. Overall, the site is trustworthy and well-maintained but would benefit from enhanced compliance and transparency measures.

C

Casa dell'Aviatore

casaviatore.it

43

Casa dell'Aviatore is the official officers' club of the Italian Air Force, providing hospitality, event hosting, and accommodation services primarily targeting military officers and their guests. The website presents a professional image with detailed service offerings including restaurant, bar, congress hall, and hotel facilities. It also features event information and member services, positioning itself as a niche hospitality provider within the military community in Italy. Technically, the site is built on WordPress with a modern tech stack including Bootstrap and various plugins for galleries, booking, and multilingual support. The site is mobile optimized and SEO friendly, though some accessibility features are basic. Security posture is moderate with HTTPS enforced but lacking explicit security headers and running an outdated WordPress version, which could pose risks. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced security and privacy measures.

O

Opera Nazionale per i Figli degli Aviatori

onfa.org

44

ONFA (Opera Nazionale per i Figli degli Aviatori) is an Italian non-profit organization dedicated to providing social assistance and support to the children of aviators. The website serves as an informational and community platform targeting families connected to the aviation sector in Italy. The organization operates with a focused mission in the government and non-profit sectors, maintaining a small organizational size and a niche market position. The website is built on WordPress using the Divi theme, with integration of Iubenda for cookie consent management, reflecting a moderate level of digital maturity and compliance with privacy regulations such as GDPR. Technically, the website is hosted on a provider using Host Anycast DNS servers, secured with HTTPS, and employs modern web fonts and cookie consent scripts. Performance and mobile optimization are rated as moderate to good, with basic accessibility features. SEO practices appear adequate with proper meta tags and structured data. Security posture is decent with HTTPS enforced and domain transfer protections enabled, but could be improved by enabling DNSSEC and adding more comprehensive security headers and vulnerability disclosure mechanisms. Overall, the security posture is solid for a small non-profit, with no critical vulnerabilities detected. Privacy compliance is strong, supported by a comprehensive privacy and cookie policy with explicit consent mechanisms. However, the absence of terms of service, security policy, and incident response contact details indicates areas for improvement. The website content is safe and appropriate for a general audience, with no adult or questionable content. Strategically, ONFA should focus on enhancing security headers, publishing a security.txt file, and providing clearer contact information to improve trust and compliance. These steps will strengthen their security culture and better protect their community members.

A

Associazione Nazionale Famiglie Caduti e Mutilati dell'Aeronautica

anfcma.it

44

The Associazione Nazionale Famiglie Caduti e Mutilati dell'Aeronautica (A.N.F.C.M.A.) is a longstanding Italian non-profit association dedicated to supporting families of fallen and mutilated members of the Italian Air Force. The website serves as an informational and engagement platform, offering details about the association's history, mission, activities, staff, and contact information. It targets families of military personnel, researchers, and members of the association. The organization operates with a moral and supportive mission rather than commercial intent, providing scholarships, awards, psychological support, and legal assistance to its members. Technically, the website employs modern front-end technologies including Blazor, Bootstrap, and various JavaScript libraries for UI enhancements. The site is mobile-optimized with good navigation and content structure, though performance is moderate. The domain is relatively new (created in 2023) and recently expired, which poses a risk to availability and trust. No CMS or hosting provider details were identified. Privacy and cookie policies are present and GDPR compliance appears addressed, but no explicit security policies or incident response contacts are found. From a security perspective, the site uses HTTPS and DNSSEC is enabled, but lacks visible security headers and explicit security documentation. The expired domain status is a critical risk factor. No analytics or advertising scripts were detected, indicating a privacy-conscious approach. Overall, the website is professional and trustworthy but requires urgent domain renewal and enhanced security practices. Strategically, the association should prioritize domain renewal, implement security headers, document security policies, and establish incident response contacts to improve trust and resilience. Enhancing technical performance and accessibility would further benefit user experience.

M

MotoZem

motozem.cz

49

MotoZem.cz is a professional e-commerce retailer specializing in motorcycle apparel, accessories, and parts, targeting motorcycle enthusiasts primarily in the Czech Republic and neighboring countries. The website offers a broad catalog of products including clothing, helmets, gloves, and motorcycle parts, supported by physical stores in multiple cities. The company positions itself as a trusted regional player with a focus on secure and safe shopping experiences. Technically, the website employs modern web technologies including Google Tag Manager, Microsoft Clarity, and Luigisbox search tools, with responsive design and good SEO practices. Security posture is solid with HTTPS enforcement and secure form handling, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, enhancing user trust. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration transparency. Overall, the website is accessible, professional, and trustworthy with moderate risk due to missing domain registration details.

S

smart field s.r.o.

bohemiarider.cz

39

Bohemia Rider is a Czech Republic-based driving school operated by smart field s.r.o., specializing in personalized driving education for motorcycles and cars. The business emphasizes practical skills, individual attention, and community engagement through programs like the Buddy program. The website is professionally designed using WordPress and Elementor, featuring comprehensive service descriptions, instructor profiles, and transparent pricing. Social media integration and customer review widgets enhance trust and engagement. Technically, the site uses modern web technologies and enforces HTTPS, but lacks some security headers and privacy policies, which are recommended for compliance and security enhancement. WHOIS data is unavailable, which slightly impacts domain trust but does not detract from the professional presentation and legitimacy of the business.

W

Wojta Foto

wojta-foto.cz

46

Wojta Foto is a niche photography website specializing in speedway sports event photography, primarily serving audiences in the Czech Republic and Poland. The site showcases galleries of speedway races and related events, targeting speedway fans and photography enthusiasts. The business operates as a small entity founded in 2010, with a focus on content publishing and portfolio showcasing. Technically, the website is built on WordPress using common plugins such as NextGEN Gallery and Jetpack, hosted by Wedos, a Czech hosting provider. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but it lacks security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is safe for general audiences and maintains a moderate level of professionalism and trustworthiness.

SportPHOTO.cz is a professional sports photography agency specializing in capturing and providing images and insights from various global sports arenas. The website targets sports enthusiasts, media outlets, and event organizers, offering photographic content primarily in motorsport and other sports categories. The business operates in the Czech Republic and maintains a niche market position with a small-sized operation. The website content is well-structured and professionally presented, focusing on showcasing recent sports photography works and categorized galleries.

Z

ZAMG (Zentralanstalt für Meteorologie und Geodynamik)

naturkalender.at

41

Naturkalender.at is a citizen science platform operated under the auspices of the Austrian Central Institute for Meteorology and Geodynamics (ZAMG). It enables users to observe and record natural phenomena such as plants and animals throughout the year, contributing valuable data to climate research and phenology studies. The platform offers a dedicated mobile app for Android and iOS, fostering community engagement and scientific collaboration. The website is well-branded, consistent, and targets nature enthusiasts and researchers primarily in Austria. Technically, the site is built on Joomla CMS with Gantry 5 framework and uses modern UI components like Smart Slider 3. While the site is mobile optimized and provides a good user experience, some technical improvements are recommended, particularly in security headers and cookie consent mechanisms. The absence of WHOIS data limits full trust verification, but the affiliation with ZAMG and partner organizations supports legitimacy. Overall, the site presents a professional and trustworthy front for its niche scientific community.

S

Schweizer Skischule Lenk

lenksportundevents.ch

44

Schweizer Skischule Lenk is an official ski school located in the Adelboden-Lenk ski region of Switzerland, offering ski and snowboard lessons for all skill levels, including specialized children's courses and winter events. The business is positioned as a local expert in winter sports education, targeting ski enthusiasts and families visiting the Berner Oberland region. Their business model is service-oriented with online booking capabilities, supported by a professional and consistent brand presence. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery and Owl Carousel. It employs HTTPS with anonymized IP tracking in Google Analytics and includes a cookie consent mechanism compliant with GDPR. The site demonstrates good mobile optimization and SEO practices, although some security headers are missing, which could be improved. From a security perspective, the site uses HTTPS and cookie consent but lacks explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business location and claims, enhancing trustworthiness. Overall, the website is secure, compliant, and professionally maintained. The overall risk is low, with recommendations focusing on enhancing security headers, adding incident response details, and maintaining up-to-date third-party libraries to further strengthen security posture and compliance.

The website at xc-academy.com is currently non-operational, serving a 404 error page indicating no site configuration found. The domain is registered since 2008 through Ascio Technologies, Inc. Danmark, a registrar service provider, but no active business or content is present on the site. The detected CMS is TYPO3, as indicated by the error page branding. There are no privacy, cookie, or terms of service policies, nor any contact or security information available. The lack of content and security measures results in a very low trust and credibility score.

B

Bikeschule Klosters

bikeschuleklosters.ch

49

Bikeschule Klosters is a well-established mountain bike school located in Klosters/Davos, Switzerland, with a history dating back to 1931. The company offers a broad range of bike courses, camps, workshops, and private guiding services tailored for children, youth, and adults. Their business model focuses on experiential outdoor education and recreation, supported by an online booking platform. The website reflects a professional and consistent brand image with clear contact information and partner affiliations, positioning them as a trusted local service provider in the biking community. Technically, the website is built on TYPO3 CMS, utilizing modern web technologies such as jQuery, Owl Carousel, and Google Tag Manager for analytics. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with compressed assets and responsive design elements enhancing user experience. From a security perspective, the site enforces HTTPS with IP anonymization for analytics and a comprehensive cookie consent mechanism. However, it lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were detected, indicating a solid security posture for a small business. Overall, the website is safe, professional, and trustworthy, with no adult or questionable content. The domain registration data aligns well with the business claims, reinforcing legitimacy. Strategic improvements could focus on enhancing security headers, publishing security policies, and expanding incident response transparency to further strengthen trust and compliance.

W

Waldhart Software

skischool.shop

48

Waldhart Software operates a specialized online platform providing e-commerce and booking solutions tailored for ski schools and snow sports schools primarily in Alpine regions. The website serves as a reference showcase for nearly 300 live client online shops, demonstrating a strong market presence in the niche retail sector for winter sports education and services. The business model focuses on B2B SaaS offerings, enabling ski schools to manage online bookings and sales effectively. Technically, the website employs modern JavaScript frameworks, likely Vue.js with the Quasar UI framework, and integrates Google Maps APIs for location services. Hosting is managed via profiwebspace.at, with domain registration through InterNetX GmbH in Austria. The site is served over HTTPS, ensuring encrypted communications, but lacks DNSSEC and security headers, which are recommended for enhanced security. Security posture is moderate; while HTTPS and domain transfer protections are in place, the absence of security headers and privacy/cookie policies indicates room for improvement in compliance and security best practices. No forms or contact details were found in the analyzed content, limiting direct user engagement and incident response capabilities. Overall, the website is professional and well-structured, targeting ski schools and related businesses with a clear value proposition. However, to strengthen trust and compliance, the addition of privacy and cookie policies, security headers, and clear contact information is advised.

S

Study in Prague Consortium

studyinprague.cz

47

Study in Prague is an educational information portal dedicated to providing comprehensive resources for international students interested in studying in Prague, Czech Republic. The website aggregates detailed information about Prague's universities, study programmes, admission requirements, visa processes, scholarships, and student life. It serves as a centralized platform supported by the Study in Prague Consortium and partners such as the Prague city government and tourism organizations. The target audience is international students seeking higher education opportunities in Prague. The business model focuses on information dissemination and promotion of Prague as a study destination.

The domain cine.cz is registered since 2015 with a recognized registrar, indicating a legitimate registration. However, the website content is completely inaccessible, displaying only a minimal message 'Missing index page or access denied!'. This suggests the site is either inactive, misconfigured, or access is restricted. No metadata, scripts, forms, or contact information are present, limiting any meaningful analysis of business operations or services. The lack of HTTPS information and security headers further indicates poor security posture. Overall, the site does not provide any user-facing content or compliance documentation, resulting in a very low trust and credibility score.

The website drias-climat.fr appears to be a climate-related informational site, likely affiliated with meteorological data services in France, as inferred from its nameservers pointing to meteofrance.fr. The domain is registered since 2011 and is active, indicating a stable presence. However, the accessible content is minimal, primarily a captcha verification page, with no visible privacy, cookie, or terms of service policies. There is no contact information or business details presented on the page. Technically, the site uses JavaScript and base64 encoded images but lacks modern web practices such as HTTPS enforcement and security headers. The overall user experience and content quality are poor, with limited navigation or engagement features.

Palmetto Podiatry Associates, LLC is a small healthcare provider specializing in comprehensive foot and ankle care based in Columbia, South Carolina. Established in 1999, the practice offers a range of podiatric services including surgical and non-surgical treatments. The website reflects a professional and consistent brand presence with clear contact information and trust indicators such as certifications and local awards. Technically, the site uses standard web technologies like jQuery and FontAwesome, with good mobile optimization and accessibility features via the UserWay widget. However, the absence of WHOIS data for the domain raises some concerns about domain registration transparency. Security posture is moderate with HTTPS implied but lacking explicit security headers and vulnerability disclosures. Privacy compliance is basic, with a HIPAA policy linked but no cookie consent or detailed privacy policy page. Overall, the site is functional and trustworthy from a business perspective but could improve in security and privacy transparency.

E

Eastern Sun Tours and Safaris

easternsuntours-safaris.com

47

Eastern Sun Tours and Safaris is a Tanzania-based tour operator specializing in safari and adventure travel services. Established in 2010, the company offers a range of services including wildlife safaris, Kilimanjaro climbing expeditions, Serengeti tours, and cultural experiences. The website positions the company as a premier operator with expert guides, targeting tourists interested in exploring Tanzania's natural and cultural treasures. Technically, the website is built on WordPress using Elementor, with integrations such as Google Site Kit for SEO and analytics. Hosting is provided by NameCheap, and the site uses HTTPS with a clientTransferProhibited domain status, indicating a stable and secure domain registration. However, DNSSEC is not enabled, and security headers are missing, which are areas for improvement. The security posture is moderate, with no visible vulnerabilities but lacking advanced security configurations. Privacy compliance is weak, as no privacy or cookie policies are found, and no consent mechanisms are implemented. Contact information is not explicitly presented, which may affect user trust and compliance. Overall, the website is professional and content-rich but would benefit from enhanced security and privacy practices to improve trust and compliance.

C

Compass Pools Deutschland GmbH

swimmingpool-kosten.de

46

Compass Pools Deutschland GmbH operates a German-language website offering high-quality ceramic swimming pools with an online configurator and pricing tool. The company targets residential customers in Germany seeking durable and well-insulated pools, leveraging a dealer network for construction services. The website is modestly designed with basic mobile optimization and clear navigation, but lacks advanced technical frameworks or CMS platforms. Security posture is moderate with concerns due to outdated jQuery usage and absence of security headers. Privacy compliance is basic with presence of privacy and cookie policies but no explicit consent mechanism. Overall, the site is functional and trustworthy but would benefit from technical and security improvements.

O

ORIENTAL.cz, s.r.o.

oriental.cz

49

ORIENTAL.cz, s.r.o. operates a specialized e-commerce platform and physical store focused on selling oriental and exotic goods including teas, clothing, accessories, and decorative items. The company targets customers interested in authentic oriental products and tea enthusiasts within the Czech Republic. The website is professionally designed with good navigation, mobile optimization, and clear contact information, supporting a positive user experience and trustworthiness. Technically, the site leverages modern marketing and analytics tools such as Google Analytics 4, Facebook Pixel, and Google Tag Manager, integrated within the Upgates e-commerce platform. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers and policies are not explicitly found. The absence of WHOIS registration data and explicit privacy policy documents slightly reduce transparency and compliance confidence. Overall, the site is functional, secure, and professionally managed but would benefit from enhanced compliance documentation and domain registration transparency.

C

Cottage Labs LLP

cottagelabs.com

49

Cottage Labs LLP is a UK-based technology company specializing in open access infrastructure, data visualisations, data repositories, bespoke software development, and consulting on project and data lifecycles. The company serves academic and research institutions, partnering with prestigious organizations such as CERN, University of Oxford, and Wellcome Trust, positioning itself as a trusted provider in the open data and research infrastructure sector. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the site uses modern frameworks including Bootstrap and FontAwesome, with moderate performance and good mobile optimization. However, there is no evidence of a CMS or advanced analytics tools, indicating a custom or lightweight platform. Security posture is moderate; while HTTPS is presumably enabled (not explicitly confirmed), no security headers or vulnerability disclosures are present, and privacy and cookie policies are missing, which are critical for GDPR compliance. Overall, the site is trustworthy and professional but would benefit from enhanced security and privacy compliance measures.

The website www.zamg.ac.at represents the former Zentralanstalt für Meteorologie und Geodynamik (ZAMG), a governmental meteorological and geodynamic authority in Austria. The site itself is a simple placeholder informing visitors that the original ZAMG website has been discontinued and that services have migrated to the successor organization GeoSphere Austria. The content is minimal, with no interactive elements, policies, or contact information provided. The website targets the general public and stakeholders interested in meteorological and geodynamic data and services. The business model is governmental service provision, with a medium-sized organizational footprint typical for national meteorological agencies. Technically, the site is very basic, built with simple HTML and CSS, lacking modern frameworks, CMS, or advanced hosting indicators. There is no evidence of analytics, tracking, or advertising technologies. The site is accessible without WAF or security challenges but lacks security headers and HTTPS status is unknown. Mobile optimization and accessibility are basic, and SEO features are minimal. From a security perspective, the site shows limited maturity. No privacy or cookie policies are present, no incident response or security contact information is provided, and no security best practices such as headers or secure forms are observed. The WHOIS data is unavailable due to NIC.AT restrictions, limiting transparency but not necessarily indicating malicious intent. The domain appears legitimate given its governmental nature and the redirection to a successor official site. Overall, the site scores low to moderate on AI evaluation due to minimal content, lack of security and privacy features, and absence of business contact details. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, publishing security and incident response information, and improving technical and security configurations to enhance trust and compliance.

V

Volcanica

jvolcanica.org

46

Volcanica is a specialized academic journal dedicated to volcanology research, operating under a diamond open access model that eliminates fees for authors and readers. It is supported institutionally by Presses universitaires de Strasbourg and holds recognized open access certifications such as the DOAJ Seal and memberships in the Free Journal Network and OASPA. The website is built on Open Journal Systems, leveraging modern web technologies including Bootstrap and MathJax, and integrates analytics tools like Google Analytics and Tag Manager for user tracking. The site is mobile responsive, accessible, and professionally designed, providing a positive user experience for its target audience of researchers and professionals in volcanology. Security posture is generally good with HTTPS enforced, but lacks some security headers and visible cookie consent mechanisms. WHOIS data is unavailable, likely due to privacy protection, which is common and justified for this type of academic publishing entity. Overall, the website demonstrates a strong trust profile and professional operation.

M

Met Éireann

metweb.ie

49

Met Éireann operates the MetWeb website as the official Irish National Meteorological Service, providing weather and climate services primarily to registered clients. The website serves as a portal for client login and basic informational content, reflecting a government service model with a focus on meteorological data dissemination. The site uses Joomla CMS with Bootstrap and T3 Framework, hosted with AWS DNS infrastructure, indicating a moderate level of technical maturity. The design and content are basic but consistent with the organization's branding and service scope. Security posture is moderate with HTTPS implied, CSRF tokens in forms, but lacks advanced security headers and DNSSEC. Privacy compliance is supported by a cookie consent banner and a privacy policy page, though terms of service and incident response information are absent. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the website. Recommendations include enhancing security headers, enabling DNSSEC, and improving navigation and content richness to better serve users.

A

Auto klub Markéta

speedway-prague.cz

39

Speedway-prague.cz is the official website for Auto klub Markéta, a Czech organization dedicated to speedway motorcycle racing events, including the prestigious FIM Speedway Grand Prix held in Prague. The site serves as an information hub for fans, providing event schedules, ticketing information, rider details, historical results, and media resources. It targets motorsport enthusiasts primarily in the Czech Republic and surrounding regions. The business model revolves around event promotion, fan engagement, and collaboration with ticketing and local partners. Technically, the website is built on WordPress with a modern tech stack including Bootstrap for responsive design, jQuery for interactivity, and multiple plugins for SEO, performance, and user engagement. It integrates Google Analytics and Google Tag Manager for tracking, and uses Google reCAPTCHA to secure its contact forms. The site is moderately optimized for performance and mobile devices, with good SEO practices evident. From a security perspective, the site uses HTTPS and implements reCAPTCHA on forms, but lacks visible security headers and a published privacy or cookie policy, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable or privacy protected, which is common for such organizations and does not raise immediate concerns given the site's professionalism and transparency. Overall, Speedway-prague.cz presents a trustworthy and professional online presence for a niche sports organization. Strategic recommendations include enhancing privacy compliance with clear policies, improving security headers, and publishing a vulnerability disclosure policy to strengthen trust and security posture.

AWA 1213 is a Czech Republic-based company providing comprehensive roadside assistance services for motorists, including personal vehicles, trucks, and buses. The company operates a 24/7 call center and offers assistance cards that provide prepaid services to customers. Their market position is that of an established service provider with coverage across the Czech Republic and Europe. The website is built on WordPress and uses common web technologies such as jQuery and Google Maps API to enhance user experience. The site is mobile-optimized and presents clear navigation and professional content. Security posture is adequate with HTTPS enforced and secure forms, but lacks advanced security headers and published security policies. Privacy compliance is partially met with available privacy and terms documents but lacks cookie consent mechanisms. WHOIS data is missing, which limits domain trust verification and slightly reduces overall credibility. Overall, the website is professional, trustworthy, and serves its target audience effectively.

V

VK Benátky nad Jizerou

vkbenatky.cz

42

VK Benátky nad Jizerou is a local volleyball sports club based in the Czech Republic, established since 2009. The website serves as a hub for club members, players, and fans, providing detailed information about various teams, schedules, news, and club management. The club targets youth and adult volleyball players and enthusiasts within the regional community. Technically, the website is built on WordPress using Elementor and integrates modern web technologies such as jQuery and Font Awesome, hosted by WEDOS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS with appropriate security headers, but lacks some privacy compliance features such as cookie consent mechanisms. Overall, the domain registration data aligns well with the website content, indicating a legitimate and trustworthy entity.

H

HC Benátky nad Jizerou

hokejbenatky.cz

46

HC Benátky nad Jizerou is a Czech ice hockey club with a well-established online presence since at least 2002. The website serves as an information hub for the club's activities, including team rosters, match schedules, news updates, and youth hockey programs. It targets local fans, players, and the community, providing comprehensive sports-related content and partner promotions. The site is hosted likely by REG-ZONER, a Czech hosting provider, and uses a technology stack including Bootstrap, jQuery, and Slick Carousel. While the site is functional and mobile-optimized, it uses some outdated JavaScript libraries and analytics scripts, which pose potential security risks. The security posture is moderate, with cookie consent implemented but lacking visible security headers and modern analytics. No explicit privacy policy or terms of service pages were found, which may impact compliance. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the site. Strategic improvements in security and privacy compliance are recommended to enhance trust and protect user data.

T

Technical Design Jakub Zima

technical-design.cz

46

Technical Design, operated by Jakub Zima, is a small Czech web development business specializing in creating websites and web systems with nearly 20 years of experience. The website serves as a portfolio and contact point for potential clients, showcasing various completed projects. The technical infrastructure includes modern JavaScript libraries and frameworks such as jQuery, Bootstrap, and Slick Carousel, with Google reCAPTCHA implemented for form security. The site is served over HTTPS, ensuring encrypted communication. Security posture is solid but could be improved by adding security headers and formal policies. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the website is professional, trustworthy, and well-structured, suitable for its target audience of businesses and individuals seeking custom web development services.

K

Kongresové centrum ILF a.s.

kcilf.cz

49

Kongresové centrum ILF a.s. operates multimodal logistics centers in the Czech Republic, specializing in strategic connections for road, rail, and water freight transport. Established in 1995, the company has a strong market presence with over 25 years of experience and a portfolio of subsidiaries offering complementary logistics, storage, and related services. The website reflects a professional business model focused on investment, development, and leasing of logistics centers, targeting business clients in transportation and real estate sectors. Technically, the site is built on WordPress with modern JavaScript libraries and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and privacy controls, though some security headers and policies could be improved. Overall, the site is trustworthy and well-maintained, though WHOIS data is unavailable, limiting transparency.

K

KAPRAIN Group

kaprain.cz

49

KAPRAIN Group is a Czech investment group founded in 2016, focusing on multiple sectors including real estate, industry, retail, entertainment, finance, and media. The company positions itself as one of the fastest growing investment groups in the Czech Republic, emphasizing long-term value creation for its portfolio companies and stakeholders. The website presents a professional and consistent brand image with detailed portfolio and team information, targeting investors and business partners. Technically, the website is built on WordPress using Elementor and integrates modern tools such as Google Tag Manager and CookieYes for analytics and cookie consent. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are missing. Overall, the site is well-structured, mobile-optimized, and trustworthy, but could improve privacy compliance and security best practices.

East Bohemia Convention Bureau is a regional office established under the Destination Company of Eastern Bohemia, focused on promoting congress, corporate, and incentive tourism in the East Bohemia region of the Czech Republic. The website serves as an information hub for businesses and organizations seeking conference venues, event planning support, and regional tourism activities. It positions itself as a key regional promoter with partnerships including CzechTourism and local government entities. Technically, the website employs a modern JavaScript stack including jQuery, Foundation framework, and various UI libraries, hosted by a Czech registrar and hosting provider (WEDOS). The site is mobile optimized with good SEO practices and uses Google Analytics and Tag Manager for user tracking. However, it lacks some advanced security headers and explicit cookie consent mechanisms. From a security perspective, the site enforces HTTPS and uses secure forms with CSRF tokens, but does not publish security policies or incident response contacts. No vulnerabilities or suspicious content were detected. Privacy compliance is basic with a privacy/accessibility statement but no dedicated cookie or terms of service pages. Overall, the website is professional, trustworthy, and well-suited for its business purpose, with recommendations to enhance security headers, privacy compliance, and incident response transparency to further strengthen its posture.

T

The Waterfront

underdogbarnyc.com

49

The Waterfront website represents a hospitality business, likely a restaurant or event venue located in Venice, California. The site is built on the Squarespace platform, featuring a gallery of images and navigation for about, menus, reservations, and scheduling. The technical infrastructure is modern with good mobile optimization and basic SEO and accessibility features. Security posture is moderate with HTTPS enabled and cookie consent implemented via iubenda, but lacks advanced security headers and visible privacy or terms policies. The absence of WHOIS data for the queried domain underdogbarnyc.com and mismatch with the website content reduces trustworthiness and raises questions about domain registration legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and compliance disclosures.

The website thearmoredgarage.com is currently inaccessible due to a Cloudflare security block, preventing access to any substantive content. As a result, no business information, contact details, or policies are available for analysis. The domain is registered since 2015 with NameCheap and uses Cloudflare DNS services, indicating a legitimate registration and hosting setup. However, the lack of accessible content severely limits the ability to assess the company's market position, services, or technical maturity. The security posture cannot be fully evaluated beyond the presence of Cloudflare's WAF blocking access, which suggests some level of protection against attacks but also restricts transparency. Overall, the site is currently non-functional for external users, resulting in a low AI score and incomplete analysis.

The website car-er.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block page. This prevents any direct analysis of the site's content, business information, or technical implementation. The domain is registered since 2013 via NameCheap and uses Cloudflare DNS and security services, indicating a mature and legitimate domain registration. However, the lack of accessible content and absence of business or compliance information limits the ability to assess the company's market position, services, or security posture. The site shows no privacy or cookie policies, no contact information, and no visible forms or scripts due to the block. Overall, the site is effectively protected by Cloudflare but currently unavailable for detailed analysis.

The website newwavefoods.com is currently inaccessible, returning a 404 error with minimal HTML content. This prevents any meaningful extraction of business, security, or compliance information from the site itself. The domain is registered with NameCheap, Inc. since 2015 and uses Cloudflare DNS services, indicating a legitimate registration and hosting setup. However, the lack of accessible content severely limits the ability to assess the company's market position, services, or technical maturity. Security posture is minimal with no security headers detected and DNSSEC not enabled. Privacy and cookie policies are absent, and no contact or incident response information is available on the site. Overall, the site appears to be down, under maintenance, or misconfigured, resulting in a low AI score and limited insights.