High-risk security reports

STŘELA Žebrák, z.s. is a Czech non-profit association founded in 2019, dedicated to educational and leisure activities for children and youth, focusing on athletics, tourism, and summer camps. The organization maintains a strong local community presence with multiple social media channels and partnerships with regional entities. The website serves as an information hub for their activities, events, and registration forms, reflecting a clear mission to engage youth in meaningful activities. Technically, the website employs modern front-end technologies including Tailwind CSS and jQuery, hosted likely by WEDOS, a Czech hosting provider. The site is mobile-optimized with good navigation and content structure, though some accessibility features could be improved. SEO practices are adequately implemented with proper meta tags and descriptive content. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies. No forms on the main page reduce attack surface, but cookie consent mechanisms are missing, which is a GDPR compliance gap. WHOIS data is transparent and consistent with the organization's profile, supporting legitimacy. Overall, the website is trustworthy and professionally maintained, with room for improvement in security hardening and privacy compliance. The risk level is low given the non-commercial nature and limited data collection, but enhancing security policies and cookie management would strengthen compliance and user trust.

The website www.vojujezd-brdy.cz serves as an informational portal focused on tourism, hiking, cycling, and local history related to the former military area Brdy in the Czech Republic. It targets tourists and outdoor enthusiasts seeking less crowded natural areas. The site provides detailed descriptions of trails, accommodation options, and local services, monetized primarily through Google Adsense advertising. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, Google Fonts, and integrates Google Analytics and a consent management platform to comply with privacy regulations. The website is accessible without WAF or security challenges, but lacks explicit privacy and terms of service pages, and does not provide direct contact information, which limits user trust and compliance transparency. Security posture is moderate with HTTPS enabled but missing security headers. WHOIS data is unavailable, which reduces domain trustworthiness. Overall, the site is functional and relevant for its niche audience but could improve in privacy transparency, security best practices, and contact availability.

Informační centrum Brdy operates as a regional tourist information center located in the Czech Republic, providing comprehensive guidance on the Brdy region's natural, cultural, and historical attractions. The center is integrated within the PilsnerGolf Resort Hořehledy and offers services including event information, accommodation booking, internet access, and equipment rental. The website is professionally designed using WordPress and Oxygen Builder, featuring good mobile optimization and clear navigation. It maintains a moderate performance profile and includes certifications that enhance its credibility. From a technical perspective, the site employs modern web technologies and plugins such as Contact Form 7 and Tiny Slider, ensuring interactive and user-friendly experiences. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms suggests room for improvement in compliance and defense-in-depth strategies. The lack of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy. Overall, the website presents a trustworthy and professional front for the information center, with clear contact details and partner affiliations. Strategic recommendations include implementing cookie consent for GDPR compliance, adding security headers, and publishing a formal security policy to enhance transparency and user trust.

The website www.brdy.org serves as an informational portal dedicated to the Brdy region in the Czech Republic, focusing on its natural environment, historical background, military significance, and tourism. It targets enthusiasts, tourists, and locals interested in the region's heritage and nature. The site is built on Joomla CMS with modern web technologies such as Bootstrap, jQuery, and WebAuthn for enhanced login security. The content is well-structured, visually appealing, and mobile-optimized, providing a good user experience. However, the absence of explicit privacy and cookie policies indicates a gap in compliance with data protection regulations. Security-wise, the site uses HTTPS and some best practices like CSRF tokens and WebAuthn but lacks visible security headers. The WHOIS data is unavailable due to a malformed query response, which limits the ability to fully verify domain legitimacy and trustworthiness. Overall, the site is functional, content-rich, and safe but would benefit from improved transparency and compliance documentation.

Bezplatná právní poradna online zdarma pro všechny is a Czech Republic-based free legal advice website offering extensive legal content authored by legal professionals. The site targets the general public seeking legal guidance without charge, positioning itself as a comprehensive resource for various legal topics including family law, civil law, labor law, and more. The business model revolves around providing free legal information and advice, supported by advertising revenue from Google Adsense and Czech Sklik networks. The website demonstrates consistent branding and good content quality with a professional and user-friendly design.

Městské kulturní centrum Hořovice (MKC) is a local government cultural institution based in Hořovice, Czech Republic, founded in 2009. It offers a variety of cultural services including event hosting, exhibitions, library services, and tourist information. The website serves as a portal for community engagement, event calendars, and cultural promotion, targeting local residents and tourists. MKC maintains a consistent brand presence with clear contact information and social media integration primarily via Facebook. Technically, the site is built on WordPress with modern plugins for SEO, sliders, and search functionality, demonstrating a moderate to good level of digital maturity.

Leťánek.cz is the website of Spolek RC Leťánek z.s., a small non-profit family center based in the Czech Republic, founded in 2009. The organization focuses on providing community and recreational activities for families, parents, and children, including events like the Pohádkový les. The website serves as an informational portal with basic content about upcoming events and organizational details. Technically, the site uses legacy technologies such as jQuery 1.3.2 and Google Analytics for tracking, but lacks modern CMS or frameworks. The site is accessible over HTTPS but lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance. The website is not mobile optimized and has basic SEO and accessibility features. No contact emails or phone numbers are directly visible on the main page, which limits direct communication channels. The domain registration data is consistent with the organization's profile and shows a long-standing presence since 2009, supporting legitimacy.

Svazek obcí Dolní Povltaví is a voluntary association of municipalities in the Czech Republic, established in 2004. The website serves as an informational portal for the association and its 10 member municipalities, providing updates on social, cultural, and sports events. The site is built on WordPress and uses standard web technologies including jQuery and a cookie consent plugin. The technical infrastructure is moderate with good mobile optimization and accessibility. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published privacy or security policies. The absence of explicit contact information and WHOIS data due to privacy restrictions limits full trust assessment. Overall, the site is legitimate, safe, and serves its community purpose effectively.

Mikroregion Horymír is a small, non-profit regional association of municipalities in the Czech Republic, focused on promoting local culture, tourism, and community events. The website serves as an information hub for residents and visitors, providing news, event updates, and regional information. The technical infrastructure is based on a custom CMS (IPO) with standard web technologies including jQuery, Owl Carousel, and Google reCAPTCHA, supported by Matomo analytics for user tracking. The site is mobile responsive and well-structured, though it lacks some modern security headers and formal privacy documentation. Security posture is generally good with HTTPS enforced and cookie consent implemented, but the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. Overall, the website is functional and trustworthy for its intended audience but would benefit from improved compliance and transparency measures.

DSO Český kras – Pláně is a small, non-profit regional municipal association in the Czech Republic focused on environmental protection and coordinated governance among member municipalities. The website serves as an official communication platform providing access to documents, news, and contact information for local residents and stakeholders. The technical infrastructure is based on the vismo CMS platform, utilizing standard web technologies including HTML5, CSS3, JavaScript, and Google reCAPTCHA for form security. The site is mobile-optimized with basic accessibility and SEO features. Security posture is adequate with HTTPS enforced and spam protection via reCAPTCHA, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with privacy and cookie policies present but no active cookie consent mechanism. Overall, the website is trustworthy and professionally maintained, reflecting its official governmental role.

The website www.mnisecko.cz serves as the official portal for the Svazek Obcí Mníšecký region, a regional municipal association in the Czech Republic. It provides information about member municipalities, local events, cultural activities, tourism, and public notices. The site targets residents and visitors of the Mníšecký region, positioning itself as a local government information hub. The business model is focused on community service and regional cooperation rather than commercial activities. Technically, the website employs traditional web technologies including jQuery and Highslide JS, with custom scripts and CSS for styling. The site is moderately optimized for performance and accessibility but lacks advanced modern frameworks or CMS identification. Mobile optimization and SEO are basic, and no analytics or tracking services are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers and explicit privacy or terms of service documentation. The absence of WHOIS data limits domain trust verification, although the content and domain usage suggest legitimacy. No vulnerabilities or security incidents are apparent from the content analysis. Overall, the website is functional and serves its community purpose well but would benefit from enhanced security practices, clearer privacy policies, and improved technical modernization to increase trust and compliance.

Na vzduchu is a Czech personal media website and blog operated by Andrej Halada, focusing on cycling, golf, and outdoor activities. The site provides articles, photo galleries, and tips primarily targeting Czech-speaking outdoor enthusiasts. The business model is content publishing with a niche audience in the Czech Republic. Technically, the site runs on an older WordPress version with jQuery 1.9.1 and uses plugins such as wp-polls and wp-jquery-lightbox. Google Analytics is used for visitor tracking. Security posture is moderate with HTTPS enabled but lacks modern security headers and uses outdated software versions, which may expose vulnerabilities. Privacy compliance is weak due to missing privacy and cookie policies. WHOIS data is unavailable, which reduces domain trust signals but the site appears legitimate based on content and longevity. Overall, the website is functional and content-rich but requires updates and compliance improvements to enhance security and trust.

The website panoramaticke-fotografie.cz is operated by Galileo Corporation and focuses on panoramic photography services and galleries showcasing locations primarily in the Czech Republic. It positions itself as an early adopter in the Czech market with over 7 years of experience in panoramic photography. The site targets general audiences interested in scenic photography and potential clients seeking commercial or private photographic services. Technically, the site uses a traditional JavaScript stack including jQuery and Highslide for image display, with Google Analytics and Tag Manager for user tracking. A cookie consent mechanism is implemented, reflecting some privacy awareness. However, the site lacks explicit privacy and terms of service pages, and no direct contact information is provided on the main page, which may impact user trust and compliance. Security headers and SSL configuration details are not evident from the data, though external scripts are loaded over HTTPS. WHOIS data is unavailable, which raises concerns about domain legitimacy and transparency. Overall, the site is functional and content-rich but could improve in privacy compliance, security posture, and business transparency.

TREKY.CZ is a niche outdoor travel website focused on hiking, trekking, and cycling routes primarily in the Czech Republic but also covering international destinations. The site offers route guides, travel tips, and user-submitted content, targeting outdoor enthusiasts and tourists interested in hiking and cycling. The business model centers on content publishing and community engagement. Technically, the site runs on Drupal CMS with common web technologies including jQuery, Google Analytics, and Facebook SDK. The site is moderately optimized for performance and SEO but has basic mobile and accessibility features. Security posture is average with HTTPS usage implied but lacking important security headers and policies. No WHOIS data is available, which raises concerns about domain legitimacy and transparency. Contact is limited to web forms and social media presence. Overall, the site provides valuable content but needs improvements in security, privacy compliance, and domain transparency.

The website represents the official web presence of Mníšek pod Brdy Castle, managed by the National Heritage Institute of the Czech Republic. It provides detailed visitor information, including tours, events, opening hours, and contact details, targeting tourists and heritage enthusiasts. The site is well-positioned as a government-operated cultural heritage site with a medium-sized operational scope and a history dating back to 2007. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and integrates map services from Mapy.cz, delivering a moderate performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. Privacy compliance is basic but present, with clear privacy and cookie policies linked from the site. Overall, the site is trustworthy, professional, and safe for general audiences, with no adult or questionable content detected.

Obec Karlík is a small municipal government entity located in the Prague-West district of the Czech Republic. The website serves as an official portal providing residents and visitors with information about local administration, public notices, cultural heritage, and community services. The site emphasizes historical landmarks and natural surroundings, targeting local citizens and tourists interested in the municipality. Technically, the website employs a traditional web stack with jQuery, jQuery UI, Google reCAPTCHA, and Matomo analytics, managed via the IPO CMS platform. The site is mobile responsive and includes accessibility features such as font resizing and clear navigation. Security-wise, the site uses HTTPS and includes a cookie consent mechanism, but lacks advanced security headers and a published privacy policy, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, although the website content and contact details align with a legitimate government entity. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy and security disclosures.

Obec Zadní Třebaň is a small municipal government website serving the local community of Zadní Třebaň in the Czech Republic. The site provides comprehensive information about the municipality, including local news, events, administrative contacts, and public services. It targets residents and tourists, offering cultural event details and local infrastructure information. The website is professionally designed with consistent branding and good content quality, reflecting its role as an official government portal. Technically, the website uses a modern technology stack including jQuery, Bootstrap, Swiper.js, and Leaflet.js for maps. It is mobile optimized and accessible, with a cookie consent mechanism and privacy policy in place, indicating a reasonable level of digital maturity. However, some security best practices such as explicit HTTP security headers are not evident, and WHOIS data is missing, which slightly impacts trust. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. The presence of cookie consent and privacy policy supports GDPR compliance. The lack of incident response or security policy information is a gap. Overall, the security posture is moderate but could be improved with additional headers and transparency. The overall risk is low given the nature of the site as a local government portal with no sensitive transactions or personal data collection beyond basic contact forms. Strategic recommendations include enhancing security headers, verifying SSL configuration, and improving WHOIS transparency to boost trust and compliance.

EDUin is a Czech non-profit organization dedicated to supporting and informing about education through various projects including audits, newsletters, podcasts, and networking for school founders. The website serves as a donation and information portal, targeting parents, educators, and stakeholders in the education sector. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses SEO best practices. Security posture is good with HTTPS and no visible vulnerabilities, though security headers could be improved. Privacy compliance is adequate with a privacy policy and cookie consent mechanism in place. Overall, the site is professional, trustworthy, and well-aligned with its mission.

PAQ Research is a Czech non-profit research organization focused on providing data-driven insights into social issues, education, and policy reforms in the Czech Republic. The organization offers a variety of services including research studies, policy briefs, data visualization tools, and newsletters aimed at improving public services and social mobility. Their market position is that of a specialized, trusted entity within the Czech social research sector. Technically, the website is built on the Ghost CMS platform and employs modern JavaScript modules and Matomo analytics for privacy-conscious user tracking. The site is well-optimized for mobile devices and provides a professional user experience with clear navigation and rich content. However, some security best practices such as explicit security headers and cookie consent mechanisms are missing. From a security perspective, the site uses HTTPS and does not expose sensitive data. The use of Matomo analytics indicates a focus on privacy. The absence of WHOIS data for the domain reduces the overall trust score, but the website content and business information appear legitimate and professional. No critical vulnerabilities or compliance gaps were detected, though improvements in security policy transparency and incident response information are recommended. Overall, PAQ Research presents a trustworthy and professional online presence with a strong focus on social research and education in the Czech Republic. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security and incident response policies, and clarifying data protection officer contact details.

Asociace výchovných poradců, z.s. is a Czech non-profit association established in 2006 that supports educational and career counseling professionals across various educational institutions. The association provides networking, training, advocacy, and informational resources to its members and the public. It holds recognized status within the Czech Republic, evidenced by national awards and active event organization. The website is built on WordPress with standard plugins and technologies, presenting content primarily in Czech and targeting educational professionals and clients seeking counseling services. The site is moderately optimized technically, with good mobile responsiveness and basic accessibility features. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. WHOIS data is unavailable, which reduces transparency and trustworthiness, though the website content and presentation support legitimacy. Overall, the site is professional and functional but would benefit from enhanced security and privacy compliance measures.

SKAV is an educational organization hosting a permanent conference focused on education, aiming to help individuals develop their potential and find their place in society. The website is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. The domain is long-established since 2000, consistent with the organization's history. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

Society for All (SOFA) is a Czech non-profit organization dedicated to supporting vulnerable populations, particularly children, through education, mental health initiatives, and expert partnerships. The website presents a professional and content-rich platform focused on advocacy, training, and online counseling services. The organization targets educators, social workers, parents, and professionals involved in child welfare and education within the Czech Republic. Technically, the website uses modern web standards including Bootstrap and Google Fonts, offering good mobile responsiveness and user experience. However, there is a lack of visible privacy and cookie policies, and no direct contact emails or phone numbers are provided, relying mainly on an online contact form. Security posture is moderate with HTTPS implied but missing explicit security headers and vulnerability disclosure mechanisms. WHOIS data is unavailable, which raises concerns about domain registration transparency. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security practices.

The website 'Týden pro wellbeing ve škole' is an educational initiative focused on promoting wellbeing in Czech schools, aiming to improve children's learning and reduce inequalities. The site is professionally designed using WordPress with the Divi theme, incorporating SEO best practices and Google Analytics for traffic monitoring. Despite the lack of WHOIS data and explicit privacy or cookie policies, the site maintains a secure HTTPS connection and shows no signs of malicious activity or content blocking. The absence of direct contact information and security policies suggests areas for improvement in transparency and compliance. Overall, the website presents a credible and focused educational campaign with moderate technical maturity and security posture.

The website wellbeingveskole.cz is focused on promoting wellbeing in schools within the Czech Republic. It aims to create environments where all participants feel good, build supportive relationships, and fully develop their potential. The site appears to serve educators, students, and school communities with educational and advocacy content. Technically, the site is built on WordPress using the Divi theme and several plugins including Rank Math SEO and Supreme Modules Pro. The site is moderately optimized for performance and mobile devices, with good SEO metadata and structured data implementation. Security-wise, HTTPS is enabled, but there is a lack of advanced security headers and no visible privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS data limits domain trust analysis, but the website content and design appear professional and safe. Overall, the site is functional and informative but would benefit from improved privacy compliance and security practices.

The website 'Sälja fakturor' offers financial services focused on invoice selling, factoring, and invoice financing to Swedish businesses. It positions itself as a niche provider helping companies improve cash flow by enabling faster payment through invoice sales. The site is well-structured, professionally designed, and uses modern web technologies including WordPress, Elementor, and CleanTalk anti-spam solutions. Analytics and marketing tools such as Google Analytics and Tag Manager are integrated for user behavior tracking. Security posture is solid with HTTPS and anti-spam measures, though lacks explicit security headers and published privacy or cookie policies, which are compliance gaps. The domain is registered with a reputable Swedish registrar since 2013, consistent with the business claims, indicating legitimacy. Overall, the site is trustworthy and functional but should improve privacy compliance and security header implementation.

Blaník - svazek obcí is a regional association of municipalities in the Czech Republic providing official information, news, and event calendars for the Blaník region. The website serves residents, visitors, and local officials with relevant regional content and contact information. Technically, the site uses a modern CMS platform with common JavaScript libraries such as jQuery, Bootstrap, and Swiper for UI components, and Leaflet for map integration. The site is mobile optimized and accessible, with a cookie consent mechanism implemented. Security posture is moderate with HTTPS implied but lacking visible security headers and no published privacy or terms policies. WHOIS data is unavailable, which reduces trust assessment confidence. Overall, the site is functional and professional but would benefit from enhanced security and compliance documentation.

Svazek obcí - Region Dolní Berounka is a regional non-profit governmental association serving multiple municipalities in the Czech Republic. The website provides news, event calendars, official documents, and contact information relevant to the local communities it serves. It targets residents, local officials, and visitors interested in the Dolní Berounka region. The business model is focused on regional cooperation and information dissemination without commercial intent. Technically, the website uses a custom CMS likely provided by Galileo Corporation, leveraging modern frontend technologies such as jQuery, Bootstrap, Swiper.js, and Mmenu.js. The site is mobile optimized and accessible, with a cookie consent mechanism implemented, but lacks visible privacy or terms of service pages. Performance is moderate with good SEO and accessibility features. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact details appear legitimate and consistent with a government entity. Overall, the site is functional, professional, and trustworthy for its intended audience, but improvements in privacy compliance, security headers, and domain registration transparency are recommended to enhance trust and compliance.

Ladův kraj is a regional community and tourism promotion website focused on the area between Prague and the Sázava river, named after the famous painter and writer Josef Lada. The site serves as a hub for local municipalities, cultural events, and tourism services including equipment rental and event calendars. It targets tourists and local residents interested in cultural and outdoor activities. The website is positioned as a small regional government or community association platform with a clear focus on promoting local heritage and tourism. Technically, the site uses a custom CMS (IPO) with legacy JavaScript libraries such as jQuery 3.0 and jQuery UI 1.8.20, integrates Matomo analytics for privacy-conscious tracking, and employs Google reCAPTCHA for form security. The site is mobile responsive and has a good level of SEO and accessibility, though accessibility features could be improved. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and uses outdated libraries. WHOIS data is unavailable, which raises concerns about domain registration transparency, but the website content and external partner links suggest legitimacy. Overall, the site is functional and professional but would benefit from improved security practices and updated technical components.

Město Hořovice operates an official municipal website serving residents and visitors with comprehensive information about city governance, services, cultural events, urban planning, and community resources. The website is well-structured, multilingual, and provides clear navigation to various municipal departments and services. The technical infrastructure leverages common web technologies including jQuery, Bootstrap, and Swiper.js, indicating a moderate level of digital maturity suitable for a government portal. Security posture is adequate with HTTPS implied but lacks visible advanced security headers and incident response information. Privacy compliance is strong with a clear cookie consent mechanism and a dedicated privacy policy page. Overall, the site presents a trustworthy and professional digital presence for the city government.

Mikroregion Čáslavsko, s. o. is a small non-profit community association serving the Čáslavsko region in the Czech Republic. The organization focuses on regional development, social services, education, tourism, and cultural event coordination. The website provides comprehensive information about the association's activities, member municipalities, events calendar, and public documents, targeting local residents, municipalities, and tourists. The business model is centered on community support and regional cooperation, positioning it as a trusted local government-related entity. Technically, the website employs a modern frontend stack including jQuery, Bootstrap 5.3, FontAwesome, and several gallery and slider libraries. It appears to be built on a custom or Nette-based CMS platform and is hosted with a reputable Czech registrar and uses Cloudflare DNS services. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. From a security perspective, the site uses HTTPS and Cloudflare DNS but lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. There is no visible cookie consent mechanism or privacy policy compliance indicators, which are notable gaps in GDPR compliance. No incident response or vulnerability disclosure information is published. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk assessment is low given the nature of the business and the absence of sensitive data processing or e-commerce. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing privacy and security policies, and adding cookie consent mechanisms to enhance compliance and trust.

Společenství obcí ORP Příbram is a voluntary association of municipalities in the Příbram region of the Czech Republic, established in 2015. It serves as a non-profit governmental entity providing joint services, educational programs, public procurement, and information resources to its member municipalities. The website is professionally designed, well-structured, and targets local government officials and residents within the region. The business model focuses on collaboration and shared municipal services, positioning it as a key regional governmental organization. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, Swiper, and other libraries, hosted on a custom CMS platform likely provided by Galileo Corporation. The site is mobile-optimized and accessible, with good SEO practices and a cookie consent mechanism in place. However, no privacy policy or terms of service pages were found, which is a compliance gap. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is missing, which reduces trust slightly but the official contact information and domain usage support legitimacy. Overall, the website is a credible and professional government association site with moderate technical maturity and some room for improvement in privacy and security documentation. Strategic recommendations include publishing privacy and security policies, implementing security headers, and improving WHOIS transparency.

Partnerství pro vzdělávání 2030+ is a Czech non-profit partnership focused on improving children's learning outcomes and reducing educational inequalities within the Czech Republic. The organization collaborates with multiple partners, including educational institutions, governmental bodies, and expert organizations, to coordinate efforts in education and wellbeing. The website serves as an information hub, providing updates, resources, and access to working groups and consultations. Technically, the site is built on WordPress using the Divi theme, with modern web technologies such as WebP images and Google Fonts, and integrates Google Analytics for user tracking. Security posture is solid with HTTPS enforced and GDPR cookie consent implemented, though explicit security headers and detailed privacy policies are not detected. Overall, the site presents a professional and trustworthy image aligned with its educational mission.

Landningssajt is a Swedish SEO service website operated by TodaysWeb Ltda., offering result-based SEO and landing page creation services focused on improving Google rankings and customer acquisition. The site emphasizes ethical SEO practices, conversion optimization, and partnerships with other SEO companies. The technical infrastructure is based on Bootstrap and jQuery with a custom PHP backend for contact forms. The website is mobile optimized and presents a professional design with clear navigation and team profiles. However, the absence of privacy and cookie policies and missing WHOIS domain registration data present compliance and legitimacy concerns. Security posture is moderate with no visible vulnerabilities but lacks advanced security headers and policies. Overall, the site is functional and credible but would benefit from enhanced privacy compliance and domain registration transparency.

TodaysWeb Ltda. is a Swedish-based technology company specializing in SEO and web development services, primarily serving as a subcontractor to SEO firms and clients who require advanced digital marketing and system development solutions. The company has a strong market position in Sweden, consistently ranking in the top 3 for SEO-related keywords on Google. Founded in 1999 by Jim Westergren, TodaysWeb has established credibility through media mentions and a professional online presence. The company also operates a charity initiative in Bolivia, reflecting corporate social responsibility. Technically, the website is built with standard web technologies including HTML5, CSS, and JavaScript, and uses external resources such as Google Fonts and a third-party analytics service. The site is accessible, well-structured, and optimized for SEO, though mobile optimization and accessibility could be improved. Security posture is moderate with HTTPS usage but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data for the domain www.todaysweb.se is missing, which raises concerns about domain registration legitimacy and trustworthiness. Overall, the website is professional and trustworthy in content but would benefit from enhanced security and compliance transparency.

HLR-UTBILDNING is a Swedish company specializing in heart and lung resuscitation (HLR) and first aid training services. They offer various training packages including heart starter leasing and maintenance, targeting workplaces and organizations to improve emergency preparedness and safety. The company claims to be nationally active with a foundation year of 2005 and holds certification from Hjärt-Lungfonden, enhancing their credibility in the healthcare training sector. The website is professionally designed using WordPress and Elementor, with good SEO practices but lacks visible privacy and cookie policies. Contact information is clearly provided, supporting business credibility. However, the absence of WHOIS registration data raises concerns about domain legitimacy.

GREIX is a German publicly funded research project providing comprehensive real estate price indices based on notarized sales data from local Gutachterausschüsse. It offers free access to scientifically processed data and visualizations for German cities and districts, targeting researchers, policymakers, and real estate professionals. The project is backed by reputable institutions such as the Kiel Institute for the World Economy and the ECONtribute cluster, with funding from the European Research Council. Technically, the website is modern, built with React, hosted on AWS, and uses privacy-conscious Matomo analytics. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and well-optimized for performance and accessibility.

Spektrum Gesundheit is a German interdisciplinary health platform that integrates mental, physical, and ecological health topics. It targets health professionals, urban planners, environmental scientists, educators, and decision-makers, providing scientifically grounded and practical health knowledge. The platform evolved from a mental health focus to a broader holistic health approach, emphasizing the interconnectedness of human, animal, environmental, and societal health. Technically, the website is built on the Contao Open Source CMS, uses jQuery, and is hosted on kasserver.com. It features modern web standards, responsive design, and SEO best practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with GDPR, with minimal user tracking via Matomo analytics.

Altes Kino is a small local cinema based in Vaduz, Liechtenstein, offering film screenings, event hosting, cinema rental, and an online shop. The website provides a program of films with ticket purchasing options and supports German and English languages. The business targets local cinema-goers and cultural audiences, positioning itself as a community-focused entertainment venue. Technically, the site is built on WordPress with WooCommerce and Tickera plugins, indicating a mature e-commerce and ticketing infrastructure. The site is mobile optimized and has good SEO practices but lacks some advanced accessibility features. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and formal security policies are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy with room for improvement in security and privacy transparency.

SLOVAK INTERCARGO, s.r.o. operates the website medzinarodna-preprava.sk, providing comprehensive international freight forwarding and logistics services primarily focused on sea and road transport. Established in 2003 and based in Slovakia, the company offers customs clearance, cargo insurance, and inland transport services, targeting businesses requiring reliable global shipping solutions. The website presents a professional and consistent brand image with clear service descriptions and contact information, positioning the company as a trusted player in the Slovak transportation sector. Technically, the website uses a classic tech stack including Bootstrap 3.3.7, jQuery 1.12.4, and Google reCAPTCHA for form security. While the site is mobile-optimized and well-structured, it lacks modern security headers and explicit privacy and terms of service pages, which are areas for improvement. Performance is moderate, and SEO practices are basic but adequate for the business scope. From a security perspective, the site benefits from HTTPS and reCAPTCHA integration but misses key security headers and formalized security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the business claims, showing a consistent and legitimate registration history. Overall, the website is a solid representation of a small logistics company with good business credibility but would benefit from enhanced privacy compliance and security hardening to improve trust and regulatory adherence.

Shopline.sk is a Slovak e-commerce retailer specializing in branded sports clothing and footwear from brands such as Nike, Adidas, Converse, and others. The website targets general consumers in Slovakia looking for sports apparel and shoes at competitive prices. The business operates primarily online using a WordPress WooCommerce platform with the Flatsome theme, indicating a standard but effective e-commerce infrastructure. The site includes modern performance optimizations and tracking tools such as Google Tag Manager and Facebook Pixel, supporting marketing and analytics efforts. Security posture is adequate with HTTPS and some security headers, but lacks explicit security policies and incident response information. Privacy compliance is partially addressed with a cookie consent mechanism, though no privacy policy or terms of service were detected in the provided content. Overall, the website presents a professional and trustworthy front for a small to medium-sized regional e-commerce business.

MôjMiláčik.SK is a Slovak e-commerce website specializing in pet supplies including food, accessories, and veterinary products for dogs, cats, and other animals. Operated by MaM multimedia, s.r.o., the site offers a broad product catalog with detailed descriptions and a loyalty program to encourage repeat purchases. The business targets pet owners primarily in Slovakia and operates as a small retail e-commerce platform with a regional focus. Technically, the website uses a custom CMS platform (MaM SHOP system) with legacy technologies such as Flash and a non-UTF-8 charset, indicating some modernization opportunities. Security posture is solid with HTTPS, DNSSEC, and Google reCAPTCHA integration, but lacks advanced security headers and modern charset standards. Privacy and cookie policies are present and GDPR compliant, supporting regulatory adherence. Overall, the site is functional and trustworthy but could benefit from technical updates and enhanced security measures.

BIO-TECH Betriebshygiene GmbH is a small Austrian company specializing in hygiene services and training primarily targeting industrial and gastronomy businesses as well as private customers. The website presents a professional and consistent brand image with clear navigation and relevant content in German. The business model focuses on providing hygiene solutions and educational offerings, positioning itself as a niche regional service provider. Technically, the website is built on WordPress with common optimization plugins such as Autoptimize and lazy loading for images, delivering moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced and cookie consent implemented, though lacking advanced security headers and explicit security policies. Privacy compliance is well addressed with a privacy policy and cookie banner, indicating GDPR awareness. Overall, the website is trustworthy and professionally maintained, with no signs of suspicious activity or content blocking.

The website lusoinfo.com currently serves as a minimal placeholder with no substantive content beyond a meta refresh redirect tag. The domain is registered since 2004 with a reputable registrar, indicating a stable registration history, but the lack of active content or business information suggests the site is either inactive or under development. There are no visible contact details, privacy policies, or security disclosures, which limits the ability to assess the business or compliance posture. Technically, the site lacks modern SEO, accessibility, and security best practices, with no DNSSEC enabled and no security headers detected. The SSL configuration is basic but present, ensuring HTTPS availability. Overall, the security posture is minimal, with no evident vulnerabilities but also no advanced protections. The site does not employ any analytics, advertising, or tracking technologies, indicating minimal user data collection. The risk level is low due to the lack of content and interaction, but the absence of compliance and contact information reduces trust and credibility.

Spolkový dům a Muzeum Štěpánovska is a small, local community cultural institution based in Trhový Štěpánov, Czech Republic. The organization operates a community house and museum that hosts cultural events, educational courses, exhibitions, and offers rental services. The website reflects a focus on local engagement and cultural preservation, targeting residents and visitors interested in regional history and community activities. The business model is non-profit and community-oriented, with a clear emphasis on cultural enrichment and education. Technically, the website is built on a CMS platform provided by Galileo Corporation, utilizing JavaScript libraries such as jQuery and MooTools, along with Highslide for image display. The site is moderately optimized for performance and accessibility, with basic mobile responsiveness and SEO features. Cookie consent is implemented, indicating some attention to privacy compliance, though no explicit privacy policy or terms of service pages are present. From a security perspective, the site uses HTTPS and includes a cookie consent mechanism but lacks visible security headers and formal security policies. No vulnerabilities or malicious content were detected, but the absence of WHOIS data for the domain raises concerns about domain registration transparency. Overall, the security posture is moderate but could be improved with enhanced headers, documented policies, and vulnerability disclosure mechanisms. The overall risk assessment suggests the website is legitimate and safe for general audiences but would benefit from improved transparency and security practices. Strategic recommendations include adding privacy and terms policies, implementing security headers, verifying domain registration details, and enhancing technical and privacy compliance to strengthen trust and security.

MŠ Trhový Štěpánov is a local kindergarten serving the community of Trhový Štěpánov in the Czech Republic. The website provides comprehensive information for parents including staff details, school history, daily schedules, event calendars, photo galleries, and downloadable forms. It targets parents and guardians of preschool children, offering a community-focused educational service. The business model is that of a public educational institution with a small local footprint. Technically, the website is built using a combination of jQuery, Bootstrap, Swiper, and other JavaScript libraries, likely managed through the Galileo CMS platform. The site is mobile optimized, accessible, and well-structured, though performance is moderate. SEO and navigation are well implemented, providing a good user experience. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers and published privacy or terms of service documents. No WHOIS data is available, which reduces domain trustworthiness. No advanced security policies or incident response contacts are found, indicating room for improvement in security maturity. Overall, the website is safe, professional, and trustworthy for its intended audience, but would benefit from enhanced transparency regarding privacy, security policies, and domain registration details to improve compliance and trust.

BerlinerLuft do Brasil is a medium-sized multinational manufacturing company specializing in ventilation, exhaust, air treatment, and acoustic systems. The company serves diverse industrial sectors including healthcare, pharmaceuticals, data centers, agribusiness, and construction. Their business model focuses on providing customized, high-technology products with technical support throughout the project lifecycle. The website reflects a consistent brand presence with detailed product and application information targeting industrial clients in Brazil. Technically, the website is built on TYPO3 CMS using Bootstrap 3.1.1 and jQuery 1.11.0, with integration of Google Analytics and Google Tag Manager for tracking. The site is mobile optimized with moderate performance and basic SEO and accessibility features. HTTPS is enforced, but security headers are missing, and the use of an outdated jQuery version presents a potential security risk. From a security perspective, the site lacks visible privacy and cookie policies, as well as incident response or security policy disclosures. No critical vulnerabilities or exposed sensitive data were detected, but improvements are needed in security headers and compliance documentation. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, the website is professional and trustworthy but requires enhancements in privacy compliance and security best practices to improve its security posture and regulatory adherence.

BerlinerLuft. Tehnika d.o.o. is a Croatian manufacturing company specializing in ventilation equipment and systems. As part of the BerlinerLuft corporate group, it offers a broad portfolio of products including smoke extraction ducts, fans, air distribution components, and fire protection systems. The company targets professional and industrial clients in the HVAC sector, positioning itself as a reliable regional player with a solid product range and certifications such as CE marking. The website reflects this business focus with professional content and clear navigation. Technically, the website is built on OctoberCMS with jQuery and jQuery UI libraries, and uses Google Analytics for tracking. The site is mobile-optimized and performs moderately well, though some technical debt is evident from the use of older JavaScript libraries. SEO and accessibility are basic but adequate. Security posture is good with HTTPS enforced and no visible sensitive data exposure, but lacks security headers and a vulnerability disclosure mechanism. From a security and compliance perspective, the site has a privacy policy and terms of service, but lacks a cookie consent mechanism and incident response contact details. WHOIS data is consistent with the business claims, showing a domain registered in Croatia since 2015, supporting legitimacy. No WAF or blocking mechanisms were detected, and no adult or questionable content is present. Overall, the website is professional and trustworthy with room for improvement in security headers, privacy compliance, and modernization of technical components. Strategic enhancements in these areas would strengthen the company’s digital maturity and compliance posture.

BerlinerLuft. Technik GmbH is a German-based manufacturer specializing in ventilation, climate technology, and related industrial systems. The company offers a broad portfolio of products including fans, ventilation components, climate control devices, sound insulation systems, and process air technology. Their website reflects a mature B2B business model targeting technical building equipment professionals and industrial clients. The company maintains a consistent brand presence with multilingual support and international partner sites. Technically, the website is built on TYPO3 CMS, integrates Google Analytics and Tag Manager, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies are absent. Overall, the domain registration aligns with the business identity, supporting legitimacy and trustworthiness.

BerlinerLuft. is a manufacturing company specializing in the production and supply of components and systems for ventilation and air conditioning installations. Their product portfolio includes high-performance radial fans, ventilation components, noise reduction systems, welded ventilation systems, and wet painting services. The company targets industrial and construction sectors requiring comprehensive ventilation solutions. The website is professionally designed using TYPO3 CMS, supports multiple languages, and demonstrates a moderate to good level of digital maturity with integrated analytics and cookie consent mechanisms. Security posture is solid with HTTPS enforced and basic security best practices, though some security headers are missing and no explicit vulnerability disclosure or incident response information is provided. The absence of WHOIS data for the domain reduces trustworthiness slightly but the overall business presentation and certifications such as ISO 14001 and ISO 45001 support legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and improving transparency around domain registration.

BerlinerLuft.com is a professional website representing a medium-sized manufacturing company specializing in ventilation and air conditioning technology. The company offers a broad portfolio of products including industrial fans, ventilation components, air handling units, noise protection solutions, and process air systems. The website is well-designed, mobile-optimized, and provides comprehensive product and company information targeted at industrial and technical building services clients. Technically, the site is built on TYPO3 CMS and integrates Google Analytics and Tag Manager for tracking and marketing purposes. Security posture is generally good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit incident response or vulnerability disclosure information is found. The WHOIS data for the domain is missing or indicates the domain is not registered, which is inconsistent with the active and professional website presence, suggesting a need for verification. Overall, the site scores well on content quality and technical implementation but has moderate business credibility due to the WHOIS inconsistency.