High-risk security reports

The website pravni-rady.eu is a Czech legal advice portal offering free online legal resources including articles, guides, contract templates, and a free legal advice forum. It targets the general public seeking legal help and has been active for over 10 years, positioning itself as a niche player in the Czech legal information market. The business model relies on advertising revenue, supported by multiple ad networks and a comprehensive cookie consent mechanism. Technically, the site is built on Joomla CMS with Warp framework, uses modern web fonts, Google Analytics, and Google Adsense for analytics and monetization. The site is mobile-optimized with good navigation and content relevance. Security posture is moderate with HTTPS enabled but lacking explicit security headers. Privacy compliance is partial with no dedicated privacy or terms pages but a strong consent management platform is embedded. Overall, the site is trustworthy and safe for general audiences but could improve transparency and security practices.

ricochet GmbH is a small, established advertising agency based in Nürnberg, Germany, specializing in classical and digital communication services since 1996. The company positions itself as a strategic and creative partner for businesses seeking effective advertising solutions in print, trade fairs, and digital media. The website reflects a professional and consistent brand image, targeting local businesses and organizations. Technically, the site is built on TYPO3 CMS, leveraging SVG animations and custom JavaScript, hosted on agenturserver domains. While the site is accessible and well-structured, it lacks explicit privacy, cookie, and security policies, which are critical for compliance and trust. Security posture is moderate with no evident blocking or vulnerabilities but missing security headers and incident response information. Overall, the website is functional and credible but would benefit from enhanced privacy and security transparency.

Fabas Luce S.p.A. is an Italian company specializing in the manufacturing and distribution of lighting products, including various lamp types such as wall, table, suspension, ceiling, spotlights, and under-cabinet lamps. The website serves as a product catalog and brand presence platform, explicitly clarifying that the company does not sell products directly online and warning users about unauthorized sellers. The company targets consumers and businesses interested in quality lighting solutions, positioning itself as an established player in the retail lighting sector. Technically, the website employs modern web technologies including Bootstrap for responsive design, jQuery for scripting, and Google Analytics and Tag Manager for user tracking and marketing insights. The site is mobile-optimized with a clear navigation structure and cookie consent mechanisms in place, reflecting a moderate level of digital maturity. However, some areas such as accessibility and SEO could be improved. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and formal security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected, but the absence of a security.txt or vulnerability disclosure page indicates room for improvement in transparency and security culture. Overall, the website is professional and trustworthy with moderate risk. The lack of WHOIS transparency is mitigated by consistent business information and official contact details. Strategic recommendations include enhancing security headers, publishing security policies, improving accessibility, and expanding privacy compliance documentation.

cs design is a small German-based business specializing in integrated advertising, graphic design, and printing services. The company offers a one-stop solution for clients seeking unique logos, corporate identity, and presentation materials. The website is professionally designed using Bootstrap and Google Fonts, providing a good user experience with clear navigation and mobile responsiveness. Hosting is provided by a German hosting provider as indicated by the nameservers. Security posture is basic with no visible HTTPS verification or security headers, and no privacy or cookie policies are published, indicating room for improvement in compliance and security best practices. Contact information is clearly presented, enhancing business credibility. Overall, the website is safe, professional, and suitable for its target audience but would benefit from enhanced security and privacy features.

The website www.elektrohandwerk.de serves as an authoritative information and promotional platform for the German electrical trade sector, operated by the Arbeitsgemeinschaft Medienwerbung GmbH under the Zentralverband der Deutschen Elektro- und Informationstechnischen Handwerke (ZVEH). It targets end customers, businesses, and public sector clients, providing comprehensive information on electrical installations, smart home technologies, energy efficiency, photovoltaics, and e-mobility. The platform also supports career development in the electrical trades and facilitates finding qualified electrical contractors. Technically, the site is built on TYPO3 CMS, hosted on German infrastructure, and employs modern technologies including Usercentrics for consent management, Google Tag Manager, and TikTok analytics. The website is mobile-optimized with good SEO and accessibility practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks explicit security and incident response policies. Privacy compliance is strong with a comprehensive privacy policy and active consent management. Overall, the site is professional, trustworthy, and well-positioned within its industry niche.

Tritón Pardubice, spol. s r. o. is a Czech-based manufacturer specializing in 19" rack cabinets, data center equipment, and cloakroom solutions. Established in 1993, the company has a strong regional presence with a focus on engineering and production excellence. Their website offers a comprehensive product catalog, technical support, and multilingual options, targeting businesses requiring data infrastructure and cloakroom equipment. The company maintains active social media channels and provides downloadable resources such as catalogs and certificates. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and Google Tag Manager for analytics. Security posture is adequate with HTTPS enabled and cookie consent implemented, though additional HTTP security headers and DNSSEC could enhance protection. Privacy policies and terms of service are clearly presented, demonstrating GDPR compliance. Overall, the site reflects a professional and credible business with moderate technical maturity and good content quality.

Tritón Pardubice, operating the website garderobenspinde.de, is a medium-sized manufacturing company specializing in equipment for changing rooms, workshops, and offices, including lockers, storage boxes, and specialized furniture. The company targets primarily the German market, offering a comprehensive product range supported by detailed catalogs and certifications. The website is professionally designed using WordPress with WooCommerce and Elementor, providing a good user experience and mobile optimization. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms, although dedicated security policies and incident response contacts are absent. Overall, the site reflects a trustworthy and mature business with a solid digital presence.

Tritón Pardubice, spol. s r. o. is a Czech Republic-based manufacturer specializing in data cabinets, data centers, cloakroom equipment, and technical support products. Established in 1993, the company has a strong regional presence and a long tradition of engineering excellence. Their website showcases a comprehensive product catalog, company history, and technical support offerings, targeting businesses and organizations requiring reliable data infrastructure solutions. The company maintains an active social media presence and provides detailed information about their products and services, supporting a professional market position. Technically, the website is built on WordPress with Elementor, utilizing modern web technologies including jQuery and Google Tag Manager for analytics. The site is mobile-optimized with good SEO practices and a moderate performance profile. Security-wise, the site uses HTTPS and domain transfer protections but lacks DNSSEC and some advanced security headers. Privacy compliance is well addressed with clear privacy and cookie policies and an opt-in consent mechanism. Overall, the security posture is solid but could be improved by adding a security.txt file and enhancing DNS security. The website is fully accessible without WAF or blocking mechanisms, and the domain registration data aligns well with the company's history and legitimacy. The site is safe for general audiences with no adult or questionable content detected.

Tritón Pardubice, spol. s r. o. is a Czech manufacturing company specializing in data cabinets and locker systems, with a strong regional presence and a tradition dating back to 1996. The company offers a range of products including data cabinets, data centers, and technical support accessories, targeting industrial and business clients. Their website reflects a professional and consistent brand image, supported by comprehensive product information and downloadable resources. Technically, the website is built on WordPress with Elementor, utilizing modern web technologies and optimized for mobile devices. Security posture is solid with HTTPS enforcement and standard security headers, although there is room for improvement in publishing explicit security policies and incident response contacts. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, the website demonstrates a mature digital presence with good business credibility and trust indicators.

NTM is a well-established Swedish media company focused on delivering local news and journalism to regional communities. Founded in 2002, it positions itself as one of Sweden's largest local media groups, emphasizing the importance of free speech and local engagement. The website reflects a mature digital presence with a professional design, clear navigation, and content tailored to its Swedish audience. The business model centers on media publishing and subscription services targeting local readers. Technically, the website is built on WordPress with modern plugins such as Elementor, Yoast SEO, and Slider Revolution, indicating a robust and flexible infrastructure. The use of Matomo analytics and Google Tag Manager shows a balanced approach to user tracking and marketing. Hosting appears to be managed via Tele2 DNS servers, consistent with a Swedish hosting provider. The site is mobile-optimized and accessible, with good SEO practices implemented. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were detected, and the domain registration data aligns well with the business claims, enhancing trustworthiness. Overall, NTM's website demonstrates a solid digital maturity level with good content quality, technical implementation, and privacy compliance. Strategic improvements in security headers and public security policies could further strengthen its security posture and trust with users.

NTM is a well-established Swedish local media company founded in 2002, positioning itself as one of the largest local media groups in Sweden. The company focuses on delivering local news and journalistic content to support local communities. Their business model revolves around media publishing and subscription services, targeting local Swedish audiences. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, supported by privacy-conscious analytics via Matomo and a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced, though improvements can be made by enabling DNSSEC and adding security headers. No critical vulnerabilities or suspicious content were detected. Overall, the site demonstrates a mature digital presence suitable for its business domain.

The Washington Figure Skating Club (WFSC) is a long-established non-profit organization dedicated to promoting figure skating in the Washington, DC area. Founded in 1938 and sanctioned by US Figure Skating, the club offers a variety of skating disciplines and community programs. The website serves as an information hub for members and the public, providing details on membership, competitions, testing, coaching, and volunteer opportunities. It also hosts a memorial fund and club ice registration, reflecting active community engagement. Technically, the website is built on WordPress with common plugins such as Gravity Forms and jQuery libraries. It uses Google Fonts and Google Analytics for tracking. The site is mobile optimized with good navigation and content quality. However, some technical improvements could be made, including adding security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site enforces HTTPS and uses secure forms but lacks certain HTTP security headers. The WHOIS data is malformed and unavailable, which slightly reduces domain trustworthiness, though the website content and social presence support legitimacy. No critical vulnerabilities or malicious content were detected. Overall, the site presents a professional and trustworthy front for a regional sports non-profit. Strategic improvements in privacy compliance and security headers would strengthen its posture and user trust.

Touchstone Physical Therapy & Wellness is a small healthcare provider specializing in physical therapy and wellness services based in Columbia, Maryland. The company offers a broad range of treatments including dry needling, manual therapy, kinesiotaping, personal training, and vestibular rehabilitation, targeting patients seeking personalized and high-quality care. The website reflects a professional and patient-focused approach with clear contact information and detailed service descriptions. Technically, the site is built on WordPress with WooCommerce and uses modern plugins such as LayerSlider and WPBakery Page Builder. Hosting is provided by Bluehost, and the site employs HTTPS for secure communications. However, some security best practices such as DNSSEC and security headers are not implemented, and privacy compliance is lacking due to the absence of privacy and cookie policies. The Google Analytics plugin is present but not configured, indicating incomplete analytics setup. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced security and privacy measures.

Princeton in Africa is a well-established non-profit organization dedicated to developing young leaders through yearlong fellowships with impactful African organizations. The website reflects a mature program with a strong network of fellows, host organizations, and alumni, emphasizing leadership development and contributions across multiple sectors in Africa. The site is professionally designed using WordPress and integrates common web technologies such as jQuery, Google Analytics, and Gravity Forms for user engagement and data collection. Security posture is generally good with HTTPS enforced and secure form handling, though the absence of security headers and explicit privacy/cookie policies indicates room for improvement. The WHOIS data is unavailable or malformed, which slightly reduces domain trustworthiness, but the website content and contact information strongly support legitimacy. Overall, the site is accessible, safe, and provides comprehensive information for its target audience.

Amour Getaways is a specialized hospitality service provider focusing on unique, romantic travel adventures and events primarily in Puerto Rico and surrounding tropical locations. The company targets couples and groups seeking intimate and exclusive travel experiences, offering services such as tropical getaways, concierge services, romantic vacations, and exclusive retreats. Their market position is niche, catering to luxury and personalized travel experiences with a small business scale. Technically, the website is built on WordPress with modern plugins including Gravity Forms for contact and lead capture, Google Tag Manager, and Google Analytics for tracking. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features. SEO is adequately addressed with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and employs some best practices such as IP anonymization in analytics and spam prevention in forms. However, it lacks visible security headers and published privacy or cookie policies, indicating compliance gaps. The absence of WHOIS data for the domain is unusual and reduces trust slightly, though the site content and contact information appear legitimate. Overall, the website presents a professional and trustworthy front for a small hospitality business but should improve privacy compliance and security hardening to enhance trust and regulatory adherence.

Spacebear OÜ is a small Estonian technology company specializing in DevOps solutions, providing tools and expertise to help companies deliver reliable software faster. Their key services include container registries, CI/CD pipelines, infrastructure as code, and automated application monitoring. The company targets businesses seeking to improve their software delivery processes through modern DevOps practices. The website reflects a professional and consistent brand image with clear contact information and a focus on technology services. Technically, the website is built using modern frameworks such as Next.js and React, styled with Tailwind CSS, and hosted on bunny.net infrastructure. The site is mobile optimized and performs moderately well, though accessibility and SEO optimizations are basic. No major technical issues or vulnerabilities are evident from the HTML content. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks explicit security headers, a security policy, incident response information, and a cookie consent mechanism, which are areas for improvement. The WHOIS data is consistent with the company’s location and founding date, supporting legitimacy. Overall, the website presents a trustworthy and professional front with room for enhancement in privacy compliance and security posture to better align with industry best practices.

godocs.io is a specialized technology website providing searchable documentation for Go programming language packages. It targets Go developers by offering a simple interface to find package documentation by import path or keyword. The website is operated by Private by Design, LLC, a US-based company founded in 2020. The business model appears to be a free service supporting the Go developer community, positioning itself as a niche documentation platform within the broader Go ecosystem. Technically, the website uses Bootstrap for styling and basic JavaScript for interactivity. DNS is managed via Hurricane Electric name servers. The site is mobile optimized with a clean and straightforward design, though accessibility features are basic. SEO optimization is minimal but present through meta tags. No CMS or advanced frameworks are detected. Performance is moderate with no evident technical debt or errors. From a security perspective, the site lacks DNSSEC and security headers, which are recommended to improve security posture. The domain is registered with clientDeleteProhibited and clientTransferProhibited statuses, indicating some protection against unauthorized changes. No privacy or cookie policies are present, and no contact or incident response information is provided, which limits compliance and trust. No analytics or tracking scripts are detected, indicating minimal user tracking. Overall, godocs.io is a functional and focused technical resource with moderate security and compliance maturity. Strategic improvements include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and providing contact and incident response information to enhance trust and compliance.

U Františka, z.s. is a Czech non-profit organization dedicated to the care and rehabilitation of abandoned, stray, or abused dogs, including operating a dog hotel and providing canistherapy services. The organization is officially approved by regional veterinary authorities and the ministry, positioning it as a trusted local animal welfare entity. The website is built on WordPress using the Astra theme and common plugins, reflecting a moderate level of digital maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security best practices. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

The website www.blovice-mesto.cz serves as the official municipal portal for the city of Blovice in the Czech Republic. It provides comprehensive information about the city administration, public services, cultural events, social services, and municipal projects. The site targets residents and visitors seeking official information and services related to the city. The business model is that of a government entity providing transparency and public access to municipal data and services. Technically, the website employs common web technologies including jQuery, Bootstrap, and various JavaScript libraries for UI enhancements and interactivity. The site is mobile-optimized with a responsive design and includes a cookie consent mechanism, indicating some level of privacy compliance. However, there is no explicit privacy policy or terms of service found, and no advanced security headers are detected, which suggests room for improvement in security posture. From a security perspective, the site uses HTTPS, but lacks visible security headers and detailed privacy or incident response policies. The WHOIS data is unavailable, which reduces trust slightly but may be due to privacy protection or registry issues. No vulnerabilities or malicious content were detected. Overall, the site appears legitimate and safe but could benefit from enhanced transparency and security practices. The overall risk is moderate with recommendations to implement explicit privacy and security policies, improve security headers, and provide clear contact information to enhance trust and compliance.

GolfEurope.cz is a Czech golf portal providing news, competitions, golf packages, and links to related golf e-commerce and service sites. The website targets golf enthusiasts primarily in the Czech Republic and offers a network of related golf project sites. The business model appears to be content-driven with affiliate or partner e-commerce integration. Technically, the site uses Bootstrap and jQuery, delivering a responsive and moderately optimized user experience. However, the site lacks advanced SEO and accessibility features. Security posture is weak due to missing HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. WHOIS data is unavailable, indicating privacy protection or domain registration issues, which slightly reduces trustworthiness. Overall, the site is functional and safe but requires improvements in security, privacy compliance, and transparency to enhance credibility and user trust.

Bav se golfem is a Czech Republic-based golf information platform operated in association with the Czech Golf Federation. It serves as a comprehensive resource for golf enthusiasts, providing location-based golf course listings, beginner guides, event information, and blog content. The platform targets a broad audience ranging from beginners to advanced players, promoting golf as a healthy and enjoyable leisure activity. The website is well-positioned nationally as a trusted source for golf-related information in the Czech Republic. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Analytics, Facebook SDK, Google reCAPTCHA, and Mapy.cz API for mapping services. The site is hosted on Czech infrastructure with Active24 as the inferred hosting provider. The website demonstrates good mobile optimization, SEO practices, and user experience, although accessibility features are basic. From a security perspective, the site uses HTTPS and implements CAPTCHA on forms to prevent automated abuse. However, explicit security headers are not evident, which could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a cookie consent banner present but no explicit privacy policy or terms of service pages found. Overall, the website presents a professional and trustworthy front for its business purpose. Strategic improvements in privacy documentation and security headers would enhance compliance and security posture. The domain registration data aligns well with the business, supporting legitimacy and trustworthiness.

CS Partners, advokátní kancelář, s.r.o. is a Czech law firm offering comprehensive legal services across multiple areas of law including civil, criminal, administrative, family, labor, and commercial law. The firm emphasizes professionalism, individual client approach, and proactive risk management. Their office is conveniently located near Prague's city center with excellent transport links. The website is built on WordPress using the Divi theme and includes standard plugins such as Contact Form 7 and Complianz GDPR for cookie consent management. Google Analytics is used for visitor tracking. Security posture is good with HTTPS enforced and standard security headers present, though no explicit security or incident response policies are published. WHOIS data is unavailable, which limits domain legitimacy verification. Overall, the website is professional, GDPR compliant, and provides clear information about the firm's services and team.

The website 'Se sokolem do života' is an educational and non-profit project operated by Česká obec sokolská, focused on promoting physical activity and development of motor skills among children in the Czech Republic. It holds a leading position in its niche with a strong tradition and a clear mission to motivate children to integrate movement into their daily lives. The website provides educational materials, workshops, and activities primarily targeting children and educators. Technically, the site is built on WordPress with Elementor and related plugins, offering a modern and responsive design with good SEO practices. However, the Google Analytics plugin is present but not configured, indicating incomplete analytics setup. Security posture is moderate with HTTPS enabled but lacking security headers and explicit privacy and cookie policies, which are compliance gaps. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening.

Sport Černošice operates as a local community sports facility portal providing information and reservation services for sports venues in Černošice, Czech Republic. The website is managed by WEBHOUSE, s.r.o., a Czech company specializing in web design and CMS solutions. The site targets local residents and sports enthusiasts, offering news, contact details, and links to reservation systems. The business model focuses on information dissemination and facility management support rather than direct commercial transactions. Technically, the website uses the vismo CMS platform with standard web technologies including HTML5, CSS, and JavaScript, supplemented by Google Translate for multilingual support. The site demonstrates moderate performance and basic mobile optimization but lacks advanced accessibility features. Security posture is moderate with HTTPS usage implied but no visible security headers or explicit security policies published. Privacy compliance is basic with presence of privacy and cookie policies but no active consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and trustworthy for its intended local audience but could benefit from improved security and privacy practices.

Praktikum Westküste operates as a regional internship network platform focused on connecting students, pupils, and young people with internship opportunities in the Westküste region of Germany, including Nordfriesland, Dithmarschen, Steinburg, and Pinneberg. The platform hosts thousands of internship offers from over two thousand registered companies, positioning itself as a key regional player in educational and vocational placement services. The website is designed to serve both the internship seekers and companies looking to fill internship positions, with specialized offerings for various voluntary service programs such as FSJ, FÖJ, FKJ, and Bundesfreiwilligendienst. Technically, the website is built on the Contao Open Source CMS and leverages modern web technologies including jQuery, the Foundation framework, and FontAwesome for UI elements. It integrates Matomo Analytics for privacy-conscious visitor tracking and implements GDPR-compliant cookie consent mechanisms. The site demonstrates good mobile optimization and accessibility basics, with a clear navigation structure and professional design quality. However, some security headers are not explicitly detected, and no dedicated security or incident response policies are publicly available. From a security perspective, the site enforces HTTPS and uses cookie consent banners aligned with GDPR requirements. The use of Matomo Analytics with DoNotTrack enabled reflects a privacy-aware approach. No critical vulnerabilities or exposed sensitive data were identified in the HTML content. The WHOIS data is consistent with the website's regional focus and shows no privacy protection or suspicious registration patterns, supporting the platform's legitimacy. Overall, Praktikum Westküste presents a trustworthy, well-maintained regional educational platform with solid privacy compliance and a moderate security posture. Strategic improvements could include enhancing security headers, publishing explicit security policies, and providing clearer contact information for incident response. These steps would further strengthen trust and compliance in the evolving regulatory landscape.

Fachhochschule Westküste is a regional university of applied sciences in Germany specializing in business and technology education with a strong emphasis on sustainability and applied research. The institution serves students, academic partners, and regional businesses, offering degree programs, research initiatives, and student services including international exchange programs. The website is professionally designed using TYPO3 CMS, hosted likely by the University of Kiel, and integrates modern privacy and analytics tools such as Usercentrics CMP and self-hosted Matomo analytics. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. Overall, the site reflects a trustworthy and credible educational institution with good digital maturity.

SLEZAK Elektroanlagen GmbH is a well-established German family-owned company specializing in electrical installations, switch cabinet construction, and industrial electrical services. Founded in 1987, the company operates with approximately 35 employees including apprentices, serving residential, commercial, and industrial clients. Their website reflects a professional and consistent brand image, highlighting their certifications and commitment to training the next generation of electricians. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and FontAwesome, optimized for mobile devices and SEO via the Yoast plugin. Hosting appears to be managed through a German provider consistent with the company's location. The site uses HTTPS and includes privacy consent mechanisms on its contact form, though lacks a cookie consent banner and explicit security headers. From a security perspective, the site demonstrates good practices such as encrypted connections and user consent for data collection, but could improve by implementing additional security headers and publishing incident response policies. No vulnerabilities or suspicious activities were detected. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website presents a trustworthy and professional digital presence with room for enhancement in security policies and privacy compliance. Strategic improvements in these areas would strengthen the company's risk posture and customer trust.

Tritón Pardubice, spol. s r. o. is a medium-sized manufacturing company founded in 1993 in Pardubice, Czech Republic, specializing in data cabinets, data center equipment, and locker room furnishings. The company has a strong regional presence and offers technical assistance and a configurator tool on its website. The website targets German-speaking customers and maintains a professional online presence with comprehensive product information and downloadable resources. Technically, the site is built on WordPress with Elementor, uses modern web technologies, and implements GDPR-compliant privacy and cookie policies. Security posture is good with HTTPS and cookie consent but could be improved with additional security headers and incident response information. Overall, the website is trustworthy, well-structured, and suitable for its industrial B2B audience.

nobilé AG is a medium-sized German company specializing in LED lighting solutions with over 30 years of experience. The company offers a broad range of products including indoor and outdoor lighting, shop and hall lighting, and LED light strips. Their market position is strengthened by ISO 9001:2015 certification and a professional online presence. The website is built on Joomla CMS with VirtueMart e-commerce integration, leveraging modern web technologies such as UIkit and jQuery. The site is well-structured, mobile-optimized, and compliant with GDPR regulations, including a cookie consent mechanism and a comprehensive privacy policy. Security practices include HTTPS enforcement, CSRF tokens, and email obfuscation, though additional security headers could enhance protection. No vulnerabilities or suspicious patterns were detected. Overall, the website reflects a trustworthy and professional business with a solid digital infrastructure.

EBERLE Controls GmbH is a German-based manufacturer specializing in heating, climate, and building technology products. Their offerings include a wide range of thermostats, relays, and smart home compatible devices designed for energy-efficient temperature regulation. The company targets both private and commercial customers, emphasizing quality, reliability, and modern design. Their market position is that of an established medium-sized enterprise with a strong focus on innovation and customer service. Technically, the website is built on TYPO3 CMS and integrates modern web technologies including Usercentrics for cookie consent management. The site is well-structured, mobile-optimized, and provides comprehensive product information and support resources. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS, uses consent management for cookies, and does not expose sensitive data. However, it lacks explicit security policies and incident response contacts, and could improve by adding security headers and formal documentation. Overall, the security posture is solid but could be enhanced with additional transparency and controls. The overall risk assessment is low with no critical vulnerabilities detected. Strategic recommendations include publishing a formal security policy, providing incident response contacts, enhancing security headers, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

The website cibulovyjarmark.cz serves as the official online presence for the Cibulový jarmark (Onion Fair) event held in Hořovice, Czech Republic. It provides visitors and sellers with essential information including event dates, program details, maps, and contact information. The site is positioned as a local cultural event platform, targeting attendees and vendors interested in the fair. The business model revolves around event organization and promotion, with a small-scale operational footprint and a focus on community engagement. Technically, the website is built on WordPress using Elementor and several plugins such as Smart Slider 3 and Moove GDPR Cookie Compliance. It employs modern web technologies including jQuery and is hosted by hosting-profi.cz. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance characteristics. SEO and metadata are implemented at a basic level, supporting discoverability. From a security perspective, the site uses HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks advanced security headers and does not provide explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analysis. The domain registration is recent but consistent with the event's timeline and location, supporting legitimacy. Overall, cibulovyjarmark.cz is a well-structured, trustworthy event website with good privacy compliance and a solid technical foundation. Strategic improvements in security headers, incident response transparency, and expanded contact information could enhance its security posture and user trust further.

CLASIC CZ s.r.o. is a Czech manufacturing company specializing in industrial furnaces and related devices, with a well-established presence since 1998. Their website showcases a broad portfolio of furnace types and control systems, targeting industrial clients requiring specialized thermal equipment. The company appears to operate primarily in the manufacturing sector within the Czech Republic. Technically, the website is built using Nicepage CMS with standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, and is hosted via a Czech hosting provider. The site is mobile-optimized and presents content clearly, though it lacks advanced SEO and accessibility features. Security posture is basic, with no evident security headers or published security policies, and no HTTPS status was determinable from the provided data. Privacy compliance is minimal, as no privacy or cookie policies are found. Overall, the website is functional and professional but would benefit from enhanced security and compliance measures.

SABE, spol. s r.o. operates a well-established e-commerce platform specializing in the sale and production of sports trophies, medals, figurines, diplomas, and related accessories. With a business history dating back to 1990, the company positions itself as a leading supplier in the Czech Republic, offering a vast inventory and quick order fulfillment. The website reflects a professional retail operation targeting sports clubs, event organizers, schools, and individuals seeking quality sports awards. Technically, the site employs modern web technologies including jQuery, Google Analytics, Microsoft Clarity, and retargeting pixels from Facebook and Seznam, ensuring effective marketing and user behavior analysis. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism with granular controls, but lacks some advanced security headers and publicly available security policies. The absence of WHOIS registration data limits domain trust assessment, though the website content and business information appear legitimate and professional. Overall, the site demonstrates a solid digital presence with room for improvement in security transparency and domain registration visibility.

WebSite21 is a small Czech technology company specializing in custom web development, e-commerce solutions, and mobile application development. With over 15 years of experience, they focus on delivering tailored solutions using PHP frameworks such as Joomla, Nette, and Laravel, as well as C# for mobile apps. Their market position is that of a trusted, experienced provider serving B2B and B2C clients primarily in the Czech Republic. The website demonstrates a high level of professionalism, with comprehensive service offerings, client testimonials, and clear contact information. Technically, the website employs modern web technologies including PHP 8, C#, HTML5, CSS3, UIkit, and jQuery. It is mobile-optimized, fast-loading, and SEO-friendly. The presence of structured data and Google verification tags indicates good digital maturity. Security-wise, the site uses HTTPS with strong SSL configuration and security headers, integrates Google reCAPTCHA on forms, and provides cookie consent mechanisms, reflecting a solid security posture. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and registration details, which slightly impacts trust. Additionally, no explicit security policy or incident response information is published, which could be improved. Overall, the site is safe, professional, and well-maintained, with minor gaps in transparency and domain registration data. Strategic recommendations include publishing a formal security policy, adding incident response contacts, and considering a vulnerability disclosure program to enhance trust and compliance.

Univerzalni-Pujcka.cz is an informational website operated by Infinea Finance, s.r.o., providing comprehensive consumer information about various types of loans including bank and non-bank loans, quick online loans, and loans without income verification or registry checks. The site serves primarily Czech consumers seeking financial education and loan product comparisons, without directly offering financial products. Technically, the site uses modern JavaScript libraries such as jQuery 3.7.1, Google Analytics for tracking, and Seznam SSP for advertising. It is served over HTTPS with cookie consent mechanisms implemented, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and incident response disclosures. WHOIS data is unavailable, which reduces domain trustworthiness, but the site compensates with clear company information and disclaimers. Overall, the site is professional, content-rich, and user-friendly, targeting general audiences interested in financial products in the Czech Republic.

The website www.leteckezazitky.cz is a Czech e-commerce platform specializing in aviation-related experiences such as sightseeing flights, pilot training experiences, balloon flights, parachute jumps, and flight simulators. It targets consumers in the Czech Republic seeking unique aviation gifts and experiences. The site presents a professional and consistent brand image with a good quality of content and user experience. Technically, it employs modern web technologies including Bootstrap, jQuery, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight. The site is mobile-optimized and uses HTTPS for secure communication. However, the absence of WHOIS data and lack of explicit privacy policy and contact information reduce transparency and trustworthiness. The cookie consent mechanism is implemented, indicating some level of privacy compliance. Overall, the site appears legitimate and well-maintained but would benefit from improved transparency and security disclosures.

The International Taekwon-Do Federation (ITF) operates a comprehensive online platform serving the global Taekwon-Do community. The website acts as a central hub providing access to official federation information, event details, a dedicated database, live event streaming, and an e-commerce store for official merchandise. The organization positions itself as the supreme authority in ITF Taekwon-Do, targeting practitioners, members, and enthusiasts worldwide. The business model is non-profit and community-focused, emphasizing legacy and authenticity of the martial art founded by Gen. Choi Hong Hi. Technically, the website is built on WordPress using the Twenty Twenty-One theme, enhanced with JavaScript libraries such as jQuery and Owl Carousel for interactive content. The site is hosted likely via GoDaddy, with HTTPS enabled and basic performance and mobile optimization. Accessibility and SEO are implemented at a basic to good level, with internationalization supported through Google Translate integration. From a security perspective, the site benefits from HTTPS and domain locking status but lacks advanced DNS security (DNSSEC) and security headers. There are no visible forms collecting personal data on the main page, and no published security or incident response policies. Privacy compliance is partial, with privacy and cookie policies present but no active cookie consent mechanism. The domain registration is consistent and appropriate for the organization's history, enhancing trustworthiness. Overall, the website is professional, trustworthy, and well-aligned with its mission, though improvements in security headers, privacy compliance, and incident response transparency are recommended to strengthen its security posture and regulatory adherence.

Město Milovice operates an official municipal website serving residents and visitors with comprehensive local government information, including news, public notices, contacts, and event calendars. The site is positioned as the authoritative source for municipal services in Milovice, Czech Republic, and targets local citizens and stakeholders. The business model is a government service portal focused on transparency and community engagement. Technically, the website uses a modern CMS platform (Vismo), employs HTTPS for secure communications, integrates Google reCAPTCHA for form security, and offers multilingual support via Google Translate. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers are missing. From a security perspective, the site maintains a solid posture with encrypted connections and anti-bot measures but lacks explicit incident response contacts and advanced security headers. No vulnerabilities or suspicious content were detected. Privacy compliance is basic but present, with GDPR-related information and cookie policy available. Overall, the website is trustworthy, professional, and well-maintained, with a strong legitimacy score based on domain age and WHOIS data. Strategic improvements could enhance security headers and incident response transparency to further strengthen trust and compliance.

Městská část Praha 8 operates as the official municipal government website for the Prague 8 district in the Czech Republic. It provides residents and visitors with comprehensive information about local government services, news, events, and administrative procedures. The site targets local citizens and stakeholders interested in municipal affairs and public services. The business model is public sector focused, delivering government services and information digitally. The website maintains a consistent brand presence and offers multiple official social media channels to engage with the community. Technically, the website is built on ASP.NET WebForms with Telerik UI components and uses legacy jQuery 1.7.1 alongside modern libraries like Photoswipe. The site is moderately optimized for performance and mobile devices, with good accessibility and SEO practices. However, the use of outdated JavaScript libraries and lack of visible security headers suggest areas for technical improvement. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, indicating awareness of privacy compliance. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data reduces domain trustworthiness, but the official contact information and government affiliation strongly support legitimacy. No explicit security policies or incident response contacts are publicly available. Overall, the website is a well-maintained government portal with good content quality and user experience. Strategic improvements in security headers, updated libraries, and enhanced transparency around security policies would strengthen its security posture and trustworthiness.

The website psary.cz serves as the official online presence for the municipality of Psáry and Dolní Jirčany in the Czech Republic. It provides residents and visitors with comprehensive local government information, including news, events, public notices, waste management, and contact details. The site targets local citizens and community members, offering a centralized platform for municipal services and community engagement. Technically, the website is built on WordPress CMS, utilizing common web technologies such as jQuery and Bootstrap for responsive design and user interface components. It integrates Google reCAPTCHA to protect forms from spam and abuse. The site is hosted likely by Active24, the domain registrar, and employs HTTPS for secure communications. Mobile optimization and SEO practices are adequately implemented, though some accessibility features could be enhanced. From a security perspective, the website demonstrates a moderate security posture with HTTPS enabled and reCAPTCHA integration. However, it lacks explicit security headers and a vulnerability disclosure policy, which are recommended best practices. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. Contact information is clearly provided, enhancing trust and transparency. Overall, psary.cz is a well-maintained municipal website with good content quality and user experience. Strategic improvements in security headers, privacy compliance, and incident response policies would further strengthen its security posture and regulatory adherence.

Mníšek pod Brdy's official municipal website serves as a comprehensive portal for residents and visitors, providing detailed information on local governance, services, cultural events, and community resources. The site is well-structured and targets the local population with relevant municipal content. Technically, the website is built on WordPress using Elementor and several plugins that enhance event management, GDPR compliance, and accessibility. The presence of a cookie consent banner and a detailed privacy policy PDF demonstrates adherence to EU data protection regulations. Security-wise, the site employs HTTPS and uses CAPTCHA services to mitigate automated abuse, though some security headers could be improved. The absence of WHOIS data is likely due to privacy protection, which is reasonable for a municipal entity. Overall, the website is professional, trustworthy, and compliant, with moderate technical performance and good user experience.

The website nucice.eu serves as the official digital presence of the municipality of Nučice in the Czech Republic. It provides residents and visitors with essential local government information, including official announcements, event calendars, public documents, and contact details. The site targets local citizens and stakeholders interested in municipal affairs and community events. The business model is that of a governmental public service portal, focusing on transparency and community engagement. The website maintains a consistent brand identity aligned with municipal standards and offers good content quality and navigation.

The website rokycany.cz serves as the official digital presence of the city of Rokycany, Czech Republic. It provides comprehensive information about municipal services, local news, cultural and sports events, public notices, and online services for residents and visitors. The site is well-established, with a domain age dating back to 1997, reflecting a mature and stable online presence. The content is primarily in Czech and targets local citizens, businesses, and tourists. The business model is centered on public administration and community engagement, offering transparent access to city governance and services. Technically, the website employs a proprietary CMS (vismo) common among Czech municipalities, leveraging modern web technologies such as HTML5, CSS3, JavaScript, Google reCAPTCHA for form security, and Google Translate for multilingual support. The site is mobile-optimized and features a clear navigation structure, although accessibility features are basic. Performance is moderate, with external dependencies on Google fonts and CDN-hosted libraries. From a security standpoint, the site uses HTTPS and integrates Google reCAPTCHA to protect forms from abuse. However, it lacks explicit security headers and a dedicated security or incident response policy page, which are areas for improvement. Privacy compliance is addressed with a privacy policy and cookie policy, but no active cookie consent mechanism is implemented. Contact information is clearly provided, enhancing trust and transparency. Overall, rokycany.cz is a trustworthy and professional municipal website with good content quality and business credibility. Strategic recommendations include enhancing security headers, implementing cookie consent mechanisms, and publishing detailed security and incident response policies to strengthen compliance and user trust.

Ekopark Černovous is a small ecological park and family-run business located in the Brdy hills of the Czech Republic. The business focuses on sustainable living, animal husbandry including chickens and bees, and local ecological responsibility. It offers ecological eggs, honey, and plans for future expansion into other animal products and local produce. The website is professionally designed using WordPress and Oxygen builder, with a clear navigation structure and mobile optimization. Social media presence on Instagram, Facebook, and YouTube supports community engagement. Contact information is clearly provided including phone numbers, email, physical address, and a contact form. However, the site lacks explicit privacy and cookie policies and does not implement a cookie consent mechanism, which impacts GDPR compliance.

Ahmling Elektrotechnik is a small, regional master electrical engineering company based near Itzehoe, Germany. The company specializes in electrical installations for old and new buildings, photovoltaic systems, wallboxes for electric vehicles, smart home solutions, lighting planning, and telecommunications. Their market position is that of a trusted local expert with partnerships and memberships in relevant industry associations, serving residential and commercial clients. The website is professionally designed, well-structured, and optimized for SEO, reflecting a mature digital presence. Technically, the site is built on WordPress with common plugins and libraries, hosted on a reputable German hosting provider. Security posture is good with HTTPS and cookie consent implemented, though security headers are missing and no dedicated security or incident response policies are found. Overall, the website is safe, trustworthy, and compliant with GDPR, with clear contact information and business details.

Dieter Moch GmbH is a regional German company specializing in heating, sanitary, and electrical services, with over 25 years of experience serving the Pinneberg and Hamburg areas. Their business model focuses on installation, maintenance, and renovation services tailored to residential and commercial customers. The website reflects a professional and consistent brand image, providing clear contact information and job opportunities, indicating active operations. Technically, the site is built on WordPress using a commercial theme and common plugins, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though lacking advanced security headers and explicit security policies. Overall, the site is trustworthy and compliant with GDPR requirements.

Enno Makoschey Heizung- und Sanitär GmbH is a small German company specializing in heating and sanitary services, including installation, maintenance, and emergency services. The company positions itself as a reliable local specialist offering a broad range of services such as heating systems, bathroom renovations, solar thermal solutions, and funding consultation. The website reflects a professional business with clear service descriptions and contact information, targeting a general audience in Germany. Technically, the website uses modern JavaScript libraries and the Foundation framework, ensuring good mobile optimization and user experience. Security-wise, the site employs HTTPS and a cookie consent mechanism but lacks visible advanced security headers or explicit incident response policies. Overall, the website is trustworthy and well-maintained, though improvements in security headers and explicit policies could enhance its posture.

Gosau GbR is a small, specialized master craftsman company based in Oelixdorf, Germany, focusing on heating, ventilation, and sanitary services. The company offers a broad range of modern heating solutions including oil, gas, pellet, biomass, heat pumps, and solar energy systems, complemented by maintenance and customer service. Their market position is that of a trusted local provider emphasizing quality and customer care, supported by certifications such as a Stiftung Warentest award. Technically, the website is built on a modern stack using jQuery, Foundation framework, and various UI libraries, with good mobile optimization and SEO practices. Security posture is moderate with cookie consent implemented but lacking visible advanced security headers. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and social media presence. No critical security issues or content safety concerns were detected.

HEINRICH KRUMME Gesellschaft für Sanitär- und Heizungstechnik mbH is a medium-sized German company specializing in innovative and energy-efficient solutions in building services engineering and plant construction, with over 50 years of experience. The company targets B2B clients requiring heating, cooling, ventilation, sanitation, project management, and maintenance services. The website reflects a professional and consistent brand presence with clear navigation and relevant project references. Technically, the site uses a modern CMS (Contao), integrates common libraries like jQuery and Bootstrap, and employs Google Analytics and Cookiebot for tracking and consent management. Security posture is solid with HTTPS and cookie consent blocking, though additional security headers could enhance protection. Overall, the site is compliant with GDPR and provides clear contact information, supporting business credibility and trust.

Wolf-Technik GmbH is a medium-sized German company specializing in the planning, production, installation, and service of heating and cooling technology solutions, including Wärmepumpen and Kälteanlagen. The company has a strong regional presence in northern Germany with over 900 installed heat pump systems and a global distribution network for refrigeration units. Their website reflects a professional business model focused on B2B clients in the energy and industrial sectors. Technically, the website is built on the Weblication CMS platform using standard web technologies like jQuery and JavaScript. While the site has good content quality and navigation, it lacks modern security implementations such as HTTPS and DNSSEC, which impacts its security posture. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional but requires security and privacy improvements to meet modern standards.