High-risk security reports

Z

Zukunftsinitiative Klima.Werk

klima-werk.de

46

Zukunftsinitiative Klima.Werk is a collaborative initiative involving cities in the Emscher-Lippe region and water management authorities focused on climate resilience and sustainable urban development. The website serves as an information and engagement platform promoting blue-green infrastructure and climate adaptation projects in the Ruhrgebiet area. The initiative positions itself as a regional leader in climate protection efforts with strong partnerships and community involvement. Technically, the website is built on TYPO3 CMS, uses Usercentrics for cookie consent, and self-hosted Matomo for privacy-friendly analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, bot protection via Friendly Captcha, and privacy compliance, though formal security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and well-optimized for users, with no signs of malicious content or blocking mechanisms.

A

Aerophile

vasqueparis2024.fr

45

The website vasqueparis2024.fr represents a public event installation called La Vasque, associated with the Paris 2024 Olympic and Paralympic Games. It is operated by Aerophile and features partnerships with governmental and cultural institutions such as the Prefecture of Île-de-France, EDF, the Louvre, and the City of Paris. The event is scheduled for summer 2025 at the Jardin des Tuileries, targeting general public visitors and Olympic enthusiasts. The business model revolves around event hosting and public engagement with sponsorship support. Technically, the website is built on WordPress with a modern tech stack including UIkit and jQuery. It uses HTTPS with a reputable hosting provider (Infomaniak Network SA) and implements cookie consent management via tarteaucitron. The site is mobile optimized and has good SEO and accessibility basics. Analytics are handled via Google Analytics (GA4) with moderate user tracking. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. The domain is newly registered in April 2025, which is unusual given the event dates but does not indicate malicious intent. Privacy policies are comprehensive and GDPR compliant. Overall, the website presents a professional and trustworthy front for a niche event tied to the Paris 2024 Olympics. Recommendations include enhancing security headers, adding a vulnerability disclosure policy, and improving direct contact information for better transparency and incident response readiness.

R

RehaKomp

rehakomp.cz

49

RehaKomp is a Czech-based company specializing in the rental and sale of rehabilitation and compensatory medical aids, including motodlahy, rotopeds, wheelchairs, and related equipment. Established as a family business since 1990, it has evolved into a medium-sized enterprise with a strong regional presence and a comprehensive product offering. The website serves both as an e-commerce platform and a rental service portal, targeting individuals requiring home care rehabilitation aids and healthcare providers. Technically, the site is built on the PrestaShop platform, leveraging modern web technologies and analytics tools such as Google Analytics, Google Tag Manager, and Smartlook for user behavior insights. The site is well-optimized for mobile devices and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR, though it lacks explicit security policy or incident response contact information. WHOIS data is not publicly available, likely due to privacy protection, but the website content and trust signals indicate a legitimate and professional business. Overall, the site demonstrates a solid digital maturity with room for improvement in security transparency and header configurations.

M

Magyar Víz- és Szennyvíztechnikai Szövetség

vizertek.hu

38

The website www.vizertek.hu serves as an educational and awareness platform focused on sustainable water supply and wastewater management in Hungary. It is operated by the Magyar Víz- és Szennyvíztechnikai Szövetség in partnership with WWF Hungary and funded under the Széchenyi 2020 program. The site targets the general public to promote knowledge about tap water usage, environmental protection, and water infrastructure. The content is well-structured, informative, and consistent with the organization's mission. Technically, the site is built on WordPress and utilizes common JavaScript libraries such as jQuery, Nivo Slider, and Owl Carousel for interactive elements. Google Tag Manager is implemented for analytics and tracking purposes. The site is mobile-optimized with moderate performance and basic accessibility features. However, there is room for improvement in SEO and technical modernization. From a security perspective, the site uses HTTPS but lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is available. No forms collecting user data were detected on the main page, reducing immediate data protection concerns but also limiting user engagement. Overall, the website is trustworthy and professional but requires enhancements in privacy compliance and security best practices to improve its risk posture and user trust.

N

NADAČNÍ FOND GES

nadacnifondges.cz

45

NADAČNÍ FOND GES is a Czech charitable foundation established in 2024 by GES ASSET HOLDING, a.s., focusing on supporting social projects in education, health, culture, sports, and social inclusion. The foundation aims to connect donors with those in need, emphasizing long-term positive impact in Czech society. The website is professionally designed using WordPress and Elementor, providing clear information about the foundation's mission, values, and activities. Contact details include a company email and physical address in Prague, but no phone numbers or social media links are provided. The absence of privacy and cookie policies indicates compliance gaps. No WHOIS data is available, which raises some concerns about domain legitimacy, though the website content and branding appear consistent and trustworthy.

O

OSTRA GROUP a.s.

ostragroup.cz

47

OSTRA GROUP a.s. is a large multi-sector strategic group based in the Czech Republic, primarily focused on transportation services including sales and servicing of transport technology, logistics, modular construction, real estate rental, and R&D of vehicle chassis components. The group also supports a professional motorsport racing team and offers diverse career opportunities. The website is professionally designed, mobile optimized, and provides clear navigation and comprehensive business information. Technically, it uses modern web technologies such as Bootstrap, jQuery, and integrates multiple analytics and advertising tools including Google Analytics, Facebook Pixel, and retargeting services. Security posture is good with HTTPS enabled and cookie consent implemented, though security headers and incident response policies could be improved. The domain registration data is consistent with the business claims and founding year, indicating legitimacy. Overall, the website presents a trustworthy and professional image suitable for its target audience of businesses and professionals in transportation and related sectors.

A

ALTECH, spol. s r.o.

altech.cz

48

ALTECH, spol. s r.o. is a Czech company specializing in manufacturing and providing tailored barrier-free accessibility solutions such as stair lifts, vertical and inclined platforms, and lifting systems for immobile persons. Established in 1992, the company holds a strong market position in the Czech Republic and exports globally. Their website reflects a mature digital presence with comprehensive product information, customer testimonials, and clear contact channels. Technically, the site is built on WordPress with modern frameworks and includes robust SEO and mobile optimization. Security posture is strong with HTTPS, security headers, and privacy compliance, although no explicit security policy or incident response information is published. WHOIS data is missing, which slightly impacts domain trust but does not detract from the professional business presentation. Overall, ALTECH demonstrates a credible and trustworthy online presence aligned with its business operations.

The website ceske-budejovice.cz currently presents no accessible content beyond an empty HTML skeleton. The domain is registered since 1999 with consistent WHOIS data indicating a legitimate registration through REG-GRANSY and name servers ns1.redirect.host and ns2.redirect.host. However, the absence of any metadata, content, or contact information suggests the site is either inactive, under construction, or abandoned. There is no evidence of privacy, cookie, or security policies, nor any technical or business information available on the site. The lack of HTTPS and security headers further indicates a minimal security posture. Overall, the site does not provide any meaningful business or security information and scores very low on content quality, technical implementation, and privacy compliance.

Nakladatelství UMÚN s.r.o. is a Czech Republic based publishing company specializing in artwork created by artists with severe physical disabilities who paint using their mouth and feet. Established since 1993, it operates as part of a global association supporting such artists, offering products including calendars, greeting cards, and reproductions. The website reflects a niche cultural and retail business model focused on social inclusion and artistic promotion. Technically, the website uses basic web technologies including JavaScript and CSS, with no modern frameworks or CMS detected. The site is moderately optimized for performance and accessibility but lacks advanced mobile responsiveness and SEO features. Security posture is moderate; no HTTPS or security headers were explicitly identified in the provided data, and no incident response or security policies are publicly disclosed. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR principles. The absence of WHOIS data reduces domain trustworthiness, though the business appears legitimate based on content and history. Overall, the website is functional but would benefit from enhanced security, technical modernization, and clearer contact information.

B

Benes Consulting Group

spolecnebezpecne.cz

43

The website 'Společně bezpečně' is a safety awareness and educational project primarily focused on increasing road safety and general safety awareness in the Czech Republic. It is a collaborative initiative involving ESSOX and the Hasičský záchranný sbor Jihočeského kraje, targeting children and the general public through educational campaigns and activities. The site presents a professional and consistent brand image with clear navigation and relevant content. Technically, it employs a modern front-end stack including jQuery, Bootstrap, and various plugins, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and use of reCAPTCHA, but lacks some security headers and explicit privacy and cookie policies. The absence of WHOIS data reduces transparency and trust somewhat, but partnerships and content quality support legitimacy. Overall, the site is a trustworthy educational resource with room for improvement in privacy compliance and security best practices.

S

SOVA NET, s.r.o.

sovanet.cz

46

SOVA NET, s.r.o. is a well-established Czech digital agency specializing in comprehensive IT business solutions, online marketing, and custom web development, including e-shops and internal communication portals. With over 20 years of experience, the company holds a strong market position in Brno and serves notable clients such as Hyundai and ESSOX. The website reflects a mature digital presence with professional design, clear navigation, and extensive client references. Technically, the site uses modern tools like Google Tag Manager, Google Maps API, and Nette Framework for form validation, ensuring a solid digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though improvements in HTTP security headers and incident response disclosures are recommended. Overall, the site is trustworthy and business credible, though the absence of WHOIS data slightly reduces domain trustworthiness.

T

Transkript online s.r.o.

transkript.cz

42

Transkript online s.r.o. is a well-established social enterprise based in the Czech Republic, specializing in providing professional online transcription services primarily aimed at persons with hearing impairments. The company holds a leading position in its market segment, offering innovative technical solutions such as simultaneous speech transcription via its eScribeDroid mobile application and accessibility to numerous hotlines. The website reflects a mature digital presence built on WordPress, with good SEO and accessibility features. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the site demonstrates a trustworthy and professional image aligned with its social mission.

eHutník.cz is a regional news website operated by Třinecké Železárny a.s., providing news, sports, culture, and legal advice focused on the Třinecko region in the Czech Republic. The site targets local residents and stakeholders, offering timely regional information and advertising opportunities. The business model centers on content publishing and local advertising, positioning itself as a trusted regional media outlet. Technically, the website runs on WordPress with popular plugins for SEO, advertising, and forms, supported by Google Analytics and Tag Manager for tracking. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the site uses HTTPS and cookie consent mechanisms, with some security headers implied but not explicitly detected. No critical vulnerabilities or blocking mechanisms are present, indicating a secure and accessible platform. Overall, the website is professional, trustworthy, and compliant with GDPR, though it could improve by adding explicit security headers and a security policy. The domain registration data supports the legitimacy and maturity of the business.

S

Svět neziskovek, z.ú.

grantovydiar.cz

46

Grantový diář is a Czech Republic-based subscription service focused on providing non-profit organizations with a comprehensive and up-to-date listing of grant opportunities. The website serves as a centralized platform for fundraisers and non-profit managers to find relevant funding calls, with over 1000 grants tracked annually. The business operates under the parent foundation Nadace Neziskovky.cz and has been active since 2014, establishing a credible presence in the Czech non-profit sector. The service offers personalized notifications, advertising options, and a user-friendly online tool to simplify grant searching and management. Technically, the website employs modern JavaScript frameworks, likely Vue.js, and integrates analytics and marketing tools such as Google Analytics and Facebook Pixel. Hosting is provided by a reputable Czech registrar and hosting provider, Active24. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses secure forms with validation. However, it lacks explicit security headers and does not publicly disclose a security policy or incident response contacts. Privacy compliance is partial, with a cookie consent banner present but no dedicated privacy policy or terms of service pages found. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a trustworthy and professional service for its target audience, with room for improvement in privacy and security transparency. Strategic recommendations include publishing privacy and terms documents, enhancing security headers, and formalizing incident response communications to strengthen compliance and trust.

L

La Semaine du Son

lasemaineduson.org

43

La Semaine du Son is a recognized non-profit organization dedicated to raising awareness about societal issues related to sound. It organizes international events, conferences, and competitions, notably in partnership with UNESCO, focusing on auditory health and sound culture. The website is professionally designed, multilingual, and provides comprehensive information about its activities and partners. Technically, it is built on WordPress with modern plugins and themes, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site presents a trustworthy and professional digital presence aligned with its mission.

N

Nez en herbe

nez-en-herbe.org

42

Nez en herbe is a French non-profit association dedicated to developing olfactory education programs for children starting from kindergarten. The website presents a focused mission to enhance sensory education in schools, positioning itself as a niche educational organization. The digital infrastructure is built on WordPress with the Divi theme and incorporates SEO best practices via Yoast SEO. The site is accessible, mobile-optimized, and uses HTTPS with a good SSL configuration, indicating a reasonable level of technical maturity for a small organization. However, the absence of a privacy policy, terms of service, and explicit contact information limits its privacy compliance and business transparency. Security posture is adequate but could be improved by adding security headers and formal vulnerability disclosure mechanisms. Overall, the website is professional and trustworthy within its domain but would benefit from enhanced compliance and security documentation.

É

Éveil'O'Goût

eveilogout.com

45

Éveil'O'Goût is a French non-profit association based in Dijon focused on food education and nutrition awareness. The organization offers educational animations, training sessions, and interventions to promote a sensory and holistic approach to alimentation. The website is professionally designed using WordPress and includes clear navigation, contact information, and relevant content targeted at the general public and educators interested in food education. Despite the lack of WHOIS data, the site presents a trustworthy and consistent brand image with good content quality and user experience. Technically, the site uses modern web technologies and SEO best practices but lacks some security headers and cookie consent mechanisms. The security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements are recommended in security policies and compliance documentation.

O

Orchestre Lamoureux

orchestrelamoureux.com

44

Orchestre Lamoureux is a well-established French orchestra with a domain registered since 2000, offering a variety of classical music concerts, including family-oriented Bébé Concerts and collaborations with notable artists. The organization focuses on cultural enrichment, professional training, and artistic transmission, targeting classical music enthusiasts and families. The website is built on WordPress, leveraging common plugins and frameworks such as Bootstrap and jQuery, hosted by OVH sas. It features a professional design with good navigation and mobile optimization. Security posture is moderate with HTTPS enforced but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is good with visible cookie consent and privacy policy. Contact information and social media presence enhance business credibility. Overall, the website is trustworthy and professionally maintained.

The website videoarchiv-nfa.cz serves as a specialized digital archive for experimental film and video art, operated under the auspices of the Národní filmový archiv (National Film Archive) of the Czech Republic. It provides access to curated collections, research databases, and distribution services primarily targeting researchers, academics, and film enthusiasts interested in audiovisual heritage. The site is professionally designed with consistent branding and clear navigation, supporting both Czech and English languages. Technically, it is built on WordPress with a custom theme, hosted likely by Webglobe, and uses HTTPS for secure access. However, it lacks explicit privacy and cookie policies, security headers, and analytics or tracking tools, indicating a minimal data collection approach and some compliance gaps. The domain registration data aligns well with the stated purpose and timeline of the project, enhancing trustworthiness.

Laterna Research is a cultural and archival project focused on the multimedia theater project Laterna Magika. The website serves as a repository of research, stories, photos, videos, and media related to this cultural heritage. It targets researchers, historians, and cultural enthusiasts primarily in the Czech Republic. The site is built on WordPress using the Twenty Seventeen theme and incorporates standard web technologies such as jQuery and Google Analytics for tracking. The technical infrastructure is moderate with basic mobile optimization and SEO. Security posture is adequate with HTTPS enabled but lacks advanced security headers and updated libraries. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms. Business credibility is moderate with social media presence but lacks direct contact details or formal certifications.

The website hemimusichub.com currently serves as a minimal splash page with a background video and no substantive content or metadata. The business behind the site is not clearly identified, and no contact or policy information is provided. The domain is registered since 2020 with a reputable registrar, indicating some legitimacy, but the lack of content and business details limits trust and credibility. Technically, the site uses WordPress with an outdated jQuery version and a simple splash page plugin, resulting in poor performance and minimal mobile optimization. Security posture is weak due to absence of security headers and no visible HTTPS enforcement. Privacy compliance is lacking as no privacy or cookie policies are present. Overall, the site appears to be under construction or a placeholder rather than a fully operational business website.

B

Biograf Kotva

biografkotva.cz

43

Biograf Kotva operates as a local cinema in the Czech Republic, providing a comprehensive film program, online ticket sales, and additional services such as a cafe and venue rental. The website is professionally designed with clear navigation and a focus on cultural and family-friendly content. Technically, the site uses modern JavaScript libraries and asynchronous loading to enhance performance and user experience. However, the absence of privacy and cookie policies indicates potential compliance gaps with GDPR and related regulations. Security posture is generally good with HTTPS and some security best practices, but could be improved by adding security headers and formal policies. The lack of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which impacts overall trustworthiness. Strategic improvements in privacy compliance and domain registration transparency are recommended to enhance business credibility and user trust.

D

DeliBarry Inc.

delibarry.com

40

DeliBarry Inc. operates a parcel delivery service focused on fast, reliable shipping within the U.S., Europe, and worldwide. The company targets both general consumers and businesses requiring efficient courier services. Their business model leverages online ordering, courier partnerships, and package tracking to provide a seamless shipping experience. The website presents a professional and user-friendly interface with good mobile optimization and clear service descriptions. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Technically, the site uses modern web technologies and tracking tools but lacks visible privacy and cookie policies, which impacts compliance. Security posture is generally good with HTTPS and secure forms, but missing security headers and incident response information are gaps. Overall, the business appears operational and credible but would benefit from improved transparency and compliance documentation.

The website www.luxusni-bydleni-praha.com presents a professional online presence focused on luxury real estate sales, design, and development in Prague. It targets affluent buyers and investors interested in premium properties in prime locations. The site is built on Drupal 7 CMS and integrates modern marketing and tracking tools such as Google Tag Manager and Facebook Pixel. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. The site implements cookie consent mechanisms but lacks explicit privacy policy and terms of service pages, indicating partial privacy compliance. Security posture is moderate with HTTPS usage but no visible security headers or advanced protections. Overall, the website is functional and well-designed but would benefit from improved security practices and clearer compliance documentation.

dotFOX s.r.o. is a Czech digital marketing company specializing in affiliate marketing, lead generation, and performance marketing, with additional proprietary projects in financial comparison and affiliate networks. Established in 2014, the company positions itself as a professional and experienced player in the Czech online marketing sector, targeting businesses seeking effective marketing partnerships. The website is well-structured, professionally designed using modern frontend technologies such as Bootstrap and jQuery, and includes Google Analytics for user tracking. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with no visible security headers and no publicly disclosed security policies or incident response mechanisms. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the website presents a credible business but requires improvements in privacy compliance and security best practices.

V

VIDIA-DESIGN s.r.o.

zijushandicapem.cz

43

Žiju s handicapem is a Czech Republic-based non-profit portal dedicated to supporting people with disabilities (OZP) by providing informational articles, job offers, community blogs, and sponsorship opportunities. The website is operated by VIDIA-DESIGN s.r.o., which appears as the author and creator of the site. The portal targets disabled individuals and their families, aiming to improve quality of life and social inclusion through content and community engagement. Technically, the website uses a modern JavaScript stack including jQuery, Modernizr, and NetteForms, with integration of Google Tag Manager and Facebook SDK for analytics and social media. The site is served over HTTPS and includes a cookie consent mechanism compliant with GDPR principles, offering granular cookie control in multiple languages. However, the site lacks advanced security headers such as CSP and HSTS, which could improve security posture. Security-wise, the site shows basic good practices like HTTPS and secure login forms but misses important headers and explicit privacy and terms of service pages. The WHOIS data for the domain is missing, which reduces transparency and trustworthiness from a domain registration perspective. Despite this, the site links to reputable partners and sponsors, and no suspicious or adult content is present. Overall, the site is a well-structured, content-rich portal serving a niche community with moderate technical maturity and security posture. Strategic improvements in security headers, privacy policy publication, and domain registration transparency would enhance trust and compliance.

V

Ville d’Aubervilliers

aubervilliers.fr

43

The website aubervilliers.fr serves as the official digital portal for the City of Aubervilliers, France, providing residents and visitors with municipal news, administrative services, event information, and community resources. It is positioned as a trusted government source with a clear focus on local engagement and public service. The site leverages the SPIP CMS platform and integrates common web technologies such as jQuery and Nivo Slider to deliver a functional and navigable user experience. While the design and content quality are good, mobile optimization and accessibility are basic, indicating room for improvement in user experience across devices. Security posture is moderate; the site uses cookie consent mechanisms but lacks explicit security headers and detailed security policies. WHOIS data confirms the domain's legitimacy and long-term registration consistent with an official municipal entity. Overall, the site is credible and serves its purpose effectively but would benefit from enhanced security and privacy compliance measures.

E

EGLV - Emschergenossenschaft Lippeverband

eglv.de

45

EGLV - Emschergenossenschaft Lippeverband is a major public water management organization in Germany, operating as one of the largest wastewater disposal and sewage treatment entities. The organization focuses on ecological, technical, and design solutions for the Emscher and Lippe river regions, serving a broad audience including residents, local governments, and environmental stakeholders. Their business model is centered on public service and environmental stewardship with a strong regional presence. Technically, the website is built on WordPress with modern optimizations such as lazy loading and responsive design, supported by SEO tools like Yoast and analytics via Etracker. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements can be made by adding security headers and formal incident response policies. Overall, the site is professional, trustworthy, and content-rich, reflecting the organization's credibility and commitment to sustainability.

C

Czech Society for Mass Spectrometry

czechms.org

44

The Czech Society for Mass Spectrometry is a professional scientific association based in Olomouc, Czech Republic, affiliated with Palacký University. It serves research scientists and professionals in the field of mass spectrometry by organizing events, seminars, and providing informational resources. The website reflects a niche, well-established organization focused on advancing mass spectrometry techniques within the Czech scientific community. The site content is professional and consistent with the organization's mission, featuring event announcements and partner collaborations with reputable scientific and commercial entities. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and Google Analytics for visitor tracking. The site is moderately optimized for performance and accessibility but lacks advanced frameworks or CMS detection. Mobile optimization is basic, and SEO practices are adequately implemented through meta tags and structured navigation. However, there is no evidence of modern security headers or comprehensive privacy and cookie policies, which are important for compliance and user trust. From a security perspective, the site uses HTTPS as indicated by secure links, but no explicit security headers were detected in the provided data. The login form for members lacks visible advanced protections such as CAPTCHA. The absence of privacy, cookie, and terms of service policies, as well as incident response and vulnerability disclosure information, indicates gaps in compliance and security transparency. WHOIS data is unavailable due to a malformed request, limiting domain registration trust verification. Overall, the website presents a professional and trustworthy front for a small scientific association but would benefit from enhanced security practices, privacy compliance, and WHOIS transparency to improve trustworthiness and regulatory adherence.

M

Matosoft

matosoft.cz

40

Matosoft is a small Czech Republic-based web development company specializing in custom WordPress websites, e-commerce solutions, and PHP/Nette framework programming. The company has been operating since 2011 and serves primarily local businesses and individuals seeking professional web presence and digital marketing services. The website demonstrates a solid portfolio and client testimonials, indicating a reputable market position within its niche. Technically, the site uses modern technologies including WordPress, PHP, and various analytics and tracking tools, hosted likely with Wedos, a Czech hosting provider. The site is mobile responsive and SEO optimized, providing a good user experience. However, the security posture is moderate with no advanced security headers or published security policies, and privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

1

Galerie 100 dřevostaveb, které se vám líbí

100drevostaveb.cz

43

The website www.100drevostaveb.cz serves as an interactive catalog showcasing wooden houses favored by Czech users. It allows visitors to view various wooden house projects, vote on them, and engage with the content via social media plugins. The business model revolves around community engagement and providing inspiration for wooden house construction enthusiasts in the Czech Republic. The site targets a general audience interested in architecture and wooden homes. Technically, the site employs a range of JavaScript libraries including jQuery, Facebook SDK, Google Analytics, and advertising scripts from Google Adsense and Gemius. The site is served over HTTPS with no visible SSL issues, but lacks advanced security headers and formal privacy or cookie policies. No WHOIS data is available, which reduces trustworthiness from a domain registration perspective. Overall, the site is functional, moderately optimized for mobile, and provides a good user experience, but would benefit from improved privacy compliance and security transparency.

The website ds-slave.cz currently serves only a default Apache HTTP server test page powered by CentOS, indicating that the site is either under construction or not yet deployed with actual business content. There is no evidence of an active business presence, contact information, or compliance policies. The domain is registered since 2019 with a reputable registrar and uses Cloudflare name servers, suggesting legitimate domain ownership but minimal operational maturity. Technically, the site uses Apache on CentOS with Bootstrap for styling, but lacks modern web features, SEO optimization, and accessibility enhancements. Security posture is weak due to absence of HTTPS confirmation, security headers, and privacy compliance. Overall, the site is not currently suitable for business or customer engagement.

S

S - STAV s.r.o.

s-stav.cz

48

S - STAV s.r.o. is a Czech Republic-based construction company specializing in building family and apartment houses, renovations, and machine-applied plasters and coatings. The company positions itself as a reliable partner with long-term experience and trusted suppliers, targeting individuals and businesses seeking quality construction and renovation services. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in Czech language. Technical infrastructure includes modern libraries such as Bootstrap, jQuery, and Swiper.js, with HTTPS enforced and cookie consent implemented, indicating a moderate level of digital maturity. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and company registration details. Security posture is adequate with HTTPS but lacks advanced security headers and incident response information. Privacy compliance is supported by visible privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a trustworthy and professional image but would benefit from enhanced security practices and transparency in domain registration.

ŠupŠup.cz is an online supermarket e-commerce platform based in the Czech Republic, founded in 2017. The website is currently under maintenance, displaying only a minimal notice without any operational content or user interaction features. The business appears to target general consumers seeking online grocery shopping services. Technical infrastructure details are limited, with no detected CMS, frameworks, or analytics tools. The domain is registered with a reputable Czech registrar and shows consistency with the business location and age. Security posture is weak due to lack of HTTPS and security headers, and no privacy or cookie policies are published, indicating compliance gaps. Overall, the website's current state limits user trust and operational functionality.

HIT OFFICE, s.r.o. is a Czech-based company specializing in office supplies and food packaging products, offering both standard and custom manufacturing solutions. The company operates a multilingual website with an integrated e-shop, targeting business customers in need of office and food packaging materials. The website demonstrates a solid market position supported by multiple certifications such as FSC, ISO, and BRC, and showcases awards that emphasize quality and sustainability. The company was founded in 1994, indicating a mature presence in its sector. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Select2, Swiper, and Google services such as reCAPTCHA and Analytics. The site is mobile-optimized with good navigation and content quality, although some accessibility and SEO aspects could be improved. Security posture is generally good with HTTPS enforced and reCAPTCHA protecting forms, but lacks some security headers and explicit cookie consent mechanisms. The absence of WHOIS data is a notable gap, reducing transparency and trustworthiness from a domain registration perspective. However, the website content, certifications, and business information support the legitimacy of the company. No critical security vulnerabilities or adult content were detected, and the site appears safe for general audiences. Overall, HIT OFFICE's website is professional and functional, with room for improvement in privacy compliance and security best practices. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing incident response policies, and providing clearer contact information for data protection officers.

A

ASPEKTA Trading s.r.o.

aspekta.cz

49

ASPEKTA Trading s.r.o. is a well-established family-owned automotive dealership and service company based in Plzeň, Czech Republic, operating since 1990. The company specializes in authorized sales and servicing of Hyundai, Mazda, Fiat, Fiat Professional, and Jeep vehicles, targeting both personal and corporate customers. Their business model includes new and used car sales, vehicle servicing, financing, insurance, and additional services such as vehicle wrapping and extended warranties. The company maintains a strong local market position with multiple showrooms and a reputation for personalized customer care. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and Google Tag Manager, with good mobile optimization and SEO practices. The site features a comprehensive cookie consent mechanism and privacy policy, demonstrating GDPR compliance. However, some security best practices such as HTTP security headers are not evident, and WHOIS data for the domain is unavailable, which slightly impacts trustworthiness. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and publicly available security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The website content is professional, safe, and free from adult or questionable material. Overall, the website presents a credible and professional business presence with room for improvement in security posture and transparency regarding domain registration details. Strategic recommendations include enhancing HTTP security headers, publishing security policies, and improving WHOIS transparency to strengthen trust and compliance.

D

Die Länderbahn CZ s.r.o.

laenderbahn.cz

46

Die Länderbahn CZ s.r.o. is a private regional railway operator active in the Czech Republic since 2010, with a Czech subsidiary founded in 2019. The company operates under the parent Die Länderbahn GmbH DLB and is part of the NETINERA group, itself linked to Ferrovie dello Stato Italiane. The website targets regional travelers in Liberec, Českolipsko, and Lounsko areas, offering train schedules, tariffs, and tourist information. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google services, providing a responsive and user-friendly experience. Security posture is generally good with HTTPS and reCAPTCHA usage, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable, which reduces domain trust but the website content and business information appear consistent and professional. Overall, the site is a reliable source for regional rail transport information with room for security and privacy improvements.

R

ROKA komíny s.r.o.

roka-kominy.cz

46

ROKA komíny s.r.o. is a Czech-based manufacturer specializing in chimney systems with over 30 years of industry experience. The company offers a wide range of chimney parts, including over 7000 items in stock, and provides custom manufacturing services. Their business model combines manufacturing with retail through an integrated e-shop, targeting construction professionals and end customers in the Czech Republic. The website reflects a medium-sized enterprise with consistent branding and a professional online presence. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, ensuring good mobile optimization and user experience. Security measures include HTTPS enforcement and reCAPTCHA integration, though some security headers are missing. Privacy compliance is addressed with a cookie consent banner and a privacy policy page. However, the absence of WHOIS data reduces transparency and trustworthiness somewhat. Overall, the site is professional, secure, and business-focused, with room for improvement in security headers and WHOIS transparency.

GW Train Regio a.s. operates regional train services across multiple regions in the Czech Republic, providing transportation solutions with a focus on passenger convenience through online ticket sales and timely operational updates. The company maintains a professional web presence with clear branding, comprehensive contact information, and certifications that enhance trust. Technically, the website employs modern frameworks such as Bootstrap and jQuery, integrates Google services for analytics and security, and implements a robust cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though some HTTP security headers could be improved. Overall, the website is accessible, well-structured, and serves its target audience effectively.

DanCzek Teplice a.s. is a leading distributor of cigars, cigarillos, selected cigarette types, and tobacco products in the Czech Republic, targeting adult consumers and tobacco retailers. The website reflects a professional retail and wholesale business model with a clear focus on tobacco product distribution and a retail network. Technically, the website uses modern frontend technologies such as jQuery, Bootstrap, and FontAwesome, providing a responsive and visually consistent user experience. However, the site lacks visible security headers, privacy policies, and contact information, which are critical for trust and compliance. The WHOIS data is missing or inaccessible, raising concerns about domain registration legitimacy. Overall, the site is functional and well-branded but requires improvements in security posture and compliance documentation.

M

Město Krupka

krupka-mesto.cz

47

The website krupka-mesto.cz serves as the official online presence for the town of Krupka in the Czech Republic, providing residents and visitors with municipal information, news updates, event calendars, and public service resources. The site targets local citizens, tourists, and businesses, offering key services such as contact information for municipal offices, official documents, and cultural event details. The business model is that of a government municipal portal, with a strong focus on transparency and community engagement. Technically, the website is built on the Vismo CMS platform, utilizing standard web technologies including HTML5, CSS3, and JavaScript. It integrates Google services such as reCAPTCHA for form security and Google Translate for multilingual support. The site is hosted with a reputable Czech registrar and hosting provider, Active24, and employs HTTPS to secure communications. The design is responsive and accessible, with good SEO practices and clear navigation. From a security perspective, the site demonstrates a moderate security posture with HTTPS enforcement and form protection via reCAPTCHA. However, it lacks explicit security headers and a formal security policy or incident response contact. Privacy compliance is partially addressed with published privacy and cookie policies, though no active cookie consent mechanism is present. No critical vulnerabilities or suspicious activities were detected. Overall, krupka-mesto.cz is a trustworthy and professional municipal website with solid content quality and technical implementation. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance its security posture and compliance standing.

P

Plinko

plinkosoldiveri.it

49

Plinkosoldiveri.it is a newly established Italian website dedicated to the gambling game Plinko, providing detailed information, guides, strategies, and affiliate links to online casinos offering Plinko games. The site targets Italian players interested in gambling and offers localized content including demo versions and mobile app instructions. Technically, the site uses standard web technologies with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. The domain is very new but currently expired, which poses a risk to business continuity and trust. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is a niche affiliate platform with good content quality but needs improvements in security and compliance to enhance trust and reliability.

A

تقييمات لاعبين عرب Online Casinos 2025 ➤ Quality Fast Paying Casinos

arabslotsmegacasino.com

47

The website arabslotsmegacasino.com is a recently established Arabic-language online casino review platform, launched in mid-2023. It targets Arabic-speaking players interested in online gambling, providing detailed reviews, bonus information, and categorized casino listings by country. The site is professionally designed with good navigation and mobile optimization, leveraging Cloudflare DNS and HTTPS for secure access. However, it lacks critical privacy and cookie policies, as well as clear contact information, which impacts its trustworthiness and compliance posture. The site uses Google Analytics and Tag Manager for user tracking but does not provide transparency or consent mechanisms for data privacy. Overall, the technical infrastructure is moderate with room for security enhancements, particularly in security headers and policy disclosures.

Z

Zdeněk Šmejkal

zdesmejkal.cz

47

Zdeněk Šmejkal operates a professional website offering web development and graphic design services primarily targeting businesses and individuals in the Czech Republic. The site showcases custom web solutions including order systems for restaurants and simple e-commerce platforms, alongside corporate identity and print material design. The business is positioned as a small independent service provider with a clear focus on technology and creative services. Technically, the website is built on Drupal 7 with jQuery and Lightbox2 libraries, and integrates Google Analytics via Google Tag Manager for visitor tracking. While the site is functional and well-structured, it shows signs of aging technology and lacks modern security headers and privacy compliance features. Mobile optimization and accessibility are basic but adequate for general use. From a security perspective, the site uses HTTPS (implied by canonical URLs), but no explicit security headers were detected. There is no evidence of exposed sensitive data or vulnerable libraries in the HTML content. However, the absence of privacy and cookie policies, as well as missing WHOIS registration data, reduces overall trust and compliance posture. No incident response or vulnerability disclosure information is provided. Overall, the website is safe, professional, and suitable for its business purpose but would benefit from enhanced security practices, updated technology, and improved privacy compliance to strengthen trust and reduce risk.

I

IWA

iwa-let.org

43

The IWA-LET website represents the International Water Association's Leading Edge Conference on Water and Wastewater Technologies, a well-established international event focused on advancing water management through science and innovation. The site targets professionals, researchers, and stakeholders in the water sector, providing detailed information about conference programs, sponsors, organizing committees, and partner organizations. The business model centers on event organization and knowledge dissemination within the water industry, supported by reputable sponsors and partners. Technically, the website is built on WordPress with modern plugins and tools, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is partial, with a privacy policy linked on the parent IWA domain but lacking cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its organizational identity.

K

Kury spol. s.r.o.

kury.cz

42

Kury spol. s.r.o. is a small Czech manufacturing company specializing in the development and production of mechanical wheelchairs and related accessories for physically disabled individuals. Established in 2002, the company has a long-standing presence in the Czech market, offering a range of products including mechanical and electric wheelchairs, specialized seating systems, and accessories. The website reflects a niche business model focused on manufacturing and direct sales, with additional services such as rentals and dealer sections. The target audience includes users, partners, and dealers within the Czech Republic and potentially neighboring regions. Technically, the website is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS detected. The site lacks advanced SEO, mobile optimization, and accessibility features, indicating room for digital maturity improvement. Security posture is weak due to the apparent absence of HTTPS enforcement and security headers, and no privacy or cookie policies are present, which raises compliance concerns. The site does not expose sensitive data and uses minimal tracking, but the lack of contact information and incident response details limits trust. Overall, the website is functional but basic, with moderate trustworthiness supported by a long domain age and consistent WHOIS data. Strategic improvements in security, privacy compliance, and technical modernization are recommended.

M

Magyar Víz- és Szennyvíztechnikai Szövetség

maszesz.hu

45

Magyar Víz- és Szennyvíztechnikai Szövetség (MASZESZ) is a Hungarian professional association dedicated to water and wastewater technology. The organization provides a platform for companies, educational institutions, municipalities, and authorities to collaborate, share knowledge, and participate in sector-specific events. The website serves as a hub for news, events, membership information, and a webshop, positioning MASZESZ as an active and engaged sector leader in Hungary. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and tools such as Smart Slider 3 and MailerLite for marketing and user engagement. The site is mobile-optimized and SEO-friendly, with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

A

Asociácia vodárenských spoločností

avssr.sk

42

Asociácia vodárenských spoločností (AVS) is a Slovak association representing business entities active in water management services. Founded in 2004, it serves as a collaborative platform for water supply companies, providing industry representation, legislative cooperation, and event organization. The website is professionally designed, primarily in Slovak with an English language option, and targets industry professionals and stakeholders in Slovakia's water sector. The business model focuses on association services rather than direct commercial offerings, positioning AVS as a key industry body in the Slovak energy/water sector. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, Ultimate Member, and Slider Revolution. It employs modern web technologies including jQuery and Google Fonts, with a responsive design optimized for mobile devices. Performance is moderate with good SEO and basic accessibility features. The site uses HTTPS with DNSSEC enabled, indicating a secure hosting environment. Cookie consent mechanisms are implemented to comply with GDPR. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and DNSSEC, but lacks explicit security headers and published security policies or incident response plans. No vulnerabilities or suspicious elements were detected in the content or scripts. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age matching the business history. Overall, AVS's website is a trustworthy, professional platform serving its niche audience effectively. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility to further strengthen compliance and user trust.