High-risk security reports

The website voda2020.cz is a minimal placeholder page indicating the domain is registered through Gransy, a domain registrar and DNS service provider. The site offers basic information about reseller opportunities, Anycast DNS protection, and white label registrar platforms. The content is limited and primarily promotional for Gransy services, with no direct business contact or policy information provided. Technically, the site uses basic HTML and CSS with Google Fonts, hosted likely by Gransy. There is no evidence of advanced CMS or analytics tools. Security posture is minimal with no visible security headers or policies, and the domain WHOIS data shows an anomalous future creation date, suggesting a data error but no direct threat. Overall, the site is safe but lacks comprehensive business and security information, limiting trust and compliance assurances.

A

Art Carbon

art-carbon.cz

45

Art Carbon is a Czech company specializing in innovative water filtration and purification technologies based on carbon nanotubes. Their unique technology targets various water types including industrial wastewater, pool water recycling, and potable water treatment. Supported by government grants and recognized in startup competitions, Art Carbon positions itself as a technology innovator in the water treatment sector. The website reflects a professional digital presence built on WordPress with Elementor, featuring clear navigation and comprehensive business information. Security posture is adequate with HTTPS enforced, but lacks some security headers and cookie consent mechanisms, which are recommended for enhanced compliance and protection. The absence of WHOIS data limits domain trust analysis, but the visible business credentials and partnerships support legitimacy. Strategic recommendations include improving privacy compliance, adding security headers, and publishing a formal security policy to strengthen trust and security culture.

P

Počítáme s vodou

pocitamesvodou.cz

45

Počítáme s vodou is an environmental project focused on educating government representatives, public administration, and citizens about sustainable and nature-based rainwater management practices in the Czech Republic. The website serves as an information hub offering publications, case studies, event archives, and a database of practical examples related to decentralized rainwater utilization and management. The project positions itself as a trusted resource in the environmental and governmental sector with a clear focus on sustainability and water conservation. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Maps API, and SEO plugins. It uses HTTPS and integrates social media channels for outreach. The site is moderately optimized for performance and mobile devices, with good SEO practices and structured data for enhanced search visibility. From a security perspective, the site enforces HTTPS but lacks several important security headers such as Content-Security-Policy and HSTS, which could improve its security posture. No signs of WAF or blocking mechanisms were detected, and no sensitive data exposure was found. However, the absence of privacy and cookie policies indicates compliance gaps, especially regarding GDPR. Overall, the site is a credible and professionally maintained resource with strong content quality and user experience. The main risk lies in the missing WHOIS data, which reduces domain trustworthiness, and the lack of explicit privacy compliance documentation. Strategic improvements in security headers and privacy transparency are recommended to enhance trust and compliance.

Q

QCM s.r.o.

2theta.cz

40

The website www.2theta.cz represents a specialized Czech company, QCM s.r.o., focused on the sale and servicing of laboratory analyzers and instruments primarily for clinical biochemistry and analytical chemistry. The company also organizes professional seminars, courses, and conferences in related scientific fields. The site content is professionally presented, targeting laboratories, research institutions, and industry professionals. The business model is B2B with a niche market position in laboratory instrumentation and educational services. Technically, the website uses a CMS called Marwel and includes older JavaScript libraries such as Prototype.js and Scriptaculous, alongside Google Analytics and Google Tag Manager for user tracking. The site is moderately optimized for performance and mobile use, with basic accessibility features. No advanced frameworks or modern platforms are detected. The website is accessible without any WAF or security challenge. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, indicating gaps in privacy compliance and security best practices. No WHOIS data is available, which limits domain trust verification and raises concerns about registration transparency. No contact emails or phone numbers are explicitly provided, which may affect user trust and business credibility. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information to strengthen trust and security posture.

I

International Water Association

waterdevelopmentcongress.org

45

The International Water Association operates the Water and Development Congress & Exhibition website, promoting a major global event focused on water, sanitation, and innovation scheduled for December 2025 in Bangkok. The organization is well-established with a domain registered since 2017 and a consistent brand presence. The website serves as an information and registration portal, targeting water sector professionals and stakeholders worldwide, with a particular focus on Asia. Technically, the site is built on WordPress using popular plugins for SEO and page building, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and serves its business purpose effectively.

I

International Water Association

worldwatercongress.org

45

The International Water Association operates the IWA World Water Congress & Exhibition, a leading biennial global event for water sector professionals. The website serves as the official platform for the 2026 Congress in Glasgow, providing comprehensive information about the event, its programme, and related activities. The site targets a professional audience including utility leaders, researchers, government officials, and allied sectors. Technically, the site is built on WordPress with modern plugins and libraries, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled, though improvements are recommended in security headers and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with the organization's mission and market position.

P

Pro-idea s.r.o.

pro-idea.cz

43

Proidea.digital is a Czech Republic based digital agency operating since 2007, specializing in web development, online marketing, production, and design services for ambitious projects. The company targets businesses seeking to grow their digital presence with a professional and experienced partner. The website reflects a well-structured and professionally designed digital presence, supporting multiple languages and showcasing client references and testimonials. Technically, the site uses modern JavaScript libraries such as jQuery, Swiper.js, and Masonry.js, with a custom Bootstrap CSS framework, indicating a moderate level of digital maturity. However, some SEO and accessibility features could be improved. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and policies. The absence of privacy and cookie policies and incomplete WHOIS data reduce compliance and trust scores. Overall, the site is safe, professional, and business-focused but would benefit from enhanced security and privacy transparency.

S

Symetro s.r.o.

symetro.cz

41

Symetro s.r.o. is a small Czech architectural and engineering project office founded in 2018, specializing in building design, engineering activities, grant management, and consulting. The company is led by Ing. Ivan Záruba, a certified engineer with extensive experience in construction and project management. The website presents a professional portfolio of projects and clearly communicates contact information, targeting clients in the Czech Republic seeking specialized construction project services. Technically, the website uses modern CSS frameworks and Google Fonts, with Google Analytics and Tag Manager integrated for user tracking. The site is moderately optimized for mobile and performance but lacks advanced SEO and accessibility features. No CMS or hosting provider details are evident. The website does not implement privacy or cookie policies despite tracking usage, indicating a gap in GDPR compliance. From a security perspective, the site uses HTTPS (implied by external script URLs), but no security headers are detected, and no incident response or vulnerability disclosure information is published. No forms collect sensitive data, reducing immediate risk, but the absence of privacy and cookie policies and security headers lowers the security posture score. Overall, the website is professional and trustworthy for its business domain but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence.

H

Hutschn Bräu

hutschn-braeu.at

49

Hutschn Bräu is a small hospitality business operating a brewery and beer garden located in Vienna's Böhmischen Prater. The website reflects a local-focused business offering self-brewed beers, freshly cooked meals, and sweets, with an active community engagement through events and a newsletter. The business model combines on-site hospitality with an online shop, targeting local visitors and beer enthusiasts. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern plugins and a responsive design. Security posture is adequate with HTTPS and no visible vulnerabilities, though security headers could be improved. Privacy compliance is addressed with a GDPR privacy policy and cookie consent mechanism. Overall, the site is professional and trustworthy, with good content quality and user experience.

P

Pivovar Louka

pivovarlouka.cz

46

Pivovar Louka is a small Czech craft brewery specializing in producing live, unfiltered, and unpasteurized beers from the South Moravia region. The company operates a WordPress-based website with WooCommerce e-commerce capabilities, offering a range of regular and seasonal beers in various packaging formats. The website targets adult consumers, enforcing an age verification gate to comply with legal requirements for alcohol sales. The brewery emphasizes quality ingredients sourced locally and internationally, with a clear brand identity and consistent messaging. Technically, the site uses modern WordPress plugins and frameworks but shows minor issues with social media integrations. Security measures include HTTPS, reCAPTCHA, and cookie consent, though security headers are lacking. Overall, the site is professional, GDPR compliant, and trustworthy, with room for technical and security improvements.

T

Tady je Přeškovo s.r.o.

pivovarprestice.cz

49

Tady je Přeškovo s.r.o. operates a restaurant and brewery located in Přeštice, Czech Republic, with a focus on serving modern Czech cuisine and their own brewed beers. The business reopened in early 2025 in a historically significant location, targeting local residents, families, and visitors including cyclists. The website reflects a small hospitality business with clear contact details, social media presence, and a menu showcasing their offerings. Technically, the site is built on Drupal 7 with common web technologies and includes Google Analytics for visitor tracking. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. The domain registration is recent but aligns with the business launch timeline, supporting legitimacy. Overall, the site is professional and trustworthy but could improve privacy and security disclosures.

N

Národní filmový archiv

filmovyprehled.cz

43

Filmový přehled is a Czech-language web portal operated by the Národní filmový archiv (National Film Archive) that provides comprehensive information about Czech cinematography and audiovisual works. The site offers a rich database of films, reviews, profiles, event calendars, and contextual articles, serving as an authoritative resource for film enthusiasts, researchers, and the general public interested in Czech film culture. The portal maintains a consistent and professional brand presence, including social media channels on Facebook and YouTube. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics for visitor tracking. It features a cookie consent mechanism compliant with GDPR principles, supporting multiple languages. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Hosting details and CMS usage are not explicitly identified. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent controls. However, no explicit security headers were detected in the provided data, and no privacy policy or terms of service pages were found, which are areas for improvement. No WHOIS data was available, likely due to privacy protection or registry policies, but the site’s affiliation with a national archive and professional presentation support its legitimacy. Overall, Filmový přehled presents a trustworthy and valuable resource in the Czech media sector, with moderate technical maturity and a solid security posture. Enhancements in privacy disclosures, security headers, and contact transparency would further strengthen its compliance and user trust.

The website smind.si is currently inaccessible due to an account suspension enforced by the hosting provider, as indicated by the minimal content and the 'Account Suspended' message. The domain is registered since 2015 via Gransy s.r.o. and uses Cloudflare nameservers, suggesting a standard hosting setup. However, the lack of active website content prevents a full assessment of the business or its services. The technical infrastructure is minimal, with basic HTML and CSS and no advanced frameworks or CMS detected. Security posture is weak due to absence of HTTPS enforcement and security headers. No privacy or cookie policies are present, and contact information is limited to a single generic webmaster email. Overall, the site currently presents a high risk due to unavailability and lack of security and compliance features.

S

Specion

specion.cz

47

Specion is a Czech-based company specializing in providing professional solutions for biochemical and pharmaceutical research, industrial applications, and material development. The company offers tailored laboratory equipment solutions, including warranty and post-warranty services, installation, training, and spare parts supply. With over 19 international manufacturer partnerships and 30 years of market presence, Specion holds a solid position in the regional scientific equipment market. The website is built on WordPress and uses modern web technologies such as jQuery and Google Tag Manager, with a focus on user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms implemented, though additional security headers and policies could enhance protection. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

A

academymuseum.org

academymuseum.org

48

The website www.academymuseum.org appears to represent a museum or cultural institution, likely related to an academy or art exhibitions. However, the provided HTML content is minimal, lacking visible business descriptions, contact information, or detailed content. The site uses modern web technologies such as Next.js and React, with Stripe.js integrated for payment processing, indicating some e-commerce or ticketing functionality. Despite this, the site lacks visible privacy, cookie, or terms of service policies, and no contact details or social media links are present in the analyzed content. The WHOIS data is unavailable due to a malformed request, preventing verification of domain registration details and reducing trustworthiness. Security posture is weak, with no detected security headers or SSL configuration details, and no forms or user input fields are visible to assess data protection practices. Overall, the site is accessible without WAF or security challenges but provides limited information for a comprehensive security and compliance assessment.

Vodní hospodářství is a specialized scientific-technical journal focused on water management and related environmental fields, operating since 1998. The website serves as a platform for publishing articles, providing archives, and offering advertising opportunities. It targets a global audience interested in water management science and planning. The business model revolves around publishing and information dissemination within a niche scientific community. The website is built on WordPress with WooCommerce and several plugins, including Yoast SEO and BuddyPress, indicating a moderate level of digital maturity. The technical infrastructure is functional but uses outdated software versions, which may pose security risks. The site is mobile-optimized and SEO-friendly but lacks some modern accessibility features.

S

Slovenský národný komitét IWA

iwa.sk

39

Slovenský národný komitét IWA is a professional national committee representing Slovak water management interests internationally within the International Water Association framework. The organization focuses on promoting Slovak water sector expertise, organizing conferences, and collaborating with partner organizations. The website is well designed using WordPress with Elementor and includes essential contact information and event news. Technically, the site uses modern web technologies and enforces HTTPS with DNSSEC, enhancing security. However, it lacks published privacy and cookie policies, which are important for GDPR compliance. Security posture is good with reCAPTCHA integration, but could be improved with additional security headers and incident response disclosures. Overall, the site is trustworthy and professional, serving a niche audience of water sector professionals in Slovakia.

V

Vodárna Zlín a.s.

vodarnazlin.cz

44

Vodárna Zlín a.s. is a regional water utility company serving the Zlín region in the Czech Republic. The company provides essential water supply services and maintains a professional online presence with clear branding and comprehensive customer information. The website is designed using Bootstrap 3.3.7 and integrates privacy compliance tools such as a cookie consent management platform and Matomo analytics. The site is accessible without any blocking or WAF challenges, indicating good availability. However, the absence of WHOIS data limits transparency and trust assessment. Security posture is moderate with HTTPS enforced but lacking explicit security headers and incident response information. Overall, the website reflects a stable and professional utility service provider with room for improvement in security and transparency.

P

PE Systems s.r.o.

pesystems.cz

44

PE Systems s.r.o. is an established Czech Republic-based company specializing in the distribution and servicing of high-end analytical and biomedical instruments, primarily representing PerkinElmer and Revvity brands. The company targets academic, governmental, industrial, and pharmaceutical laboratories, offering a broad portfolio of products including spectrometers, chromatographs, imaging systems, reagents, and laboratory informatics software. Their market position is supported by a long operational history since 1991 and ISO 9001 certification, indicating a commitment to quality management. The website reflects a professional and consistent brand image with good content relevance and navigation.

O

OPTIK INSTRUMENTS s.r.o.

optikinstruments.cz

45

OPTIK INSTRUMENTS s.r.o. is a specialized distributor of BRUKER Optics products, focusing on FTIR and Raman spectroscopy instruments as well as CBRNE devices. The company targets professional and scientific audiences requiring advanced spectrometry solutions. Their market position is that of an official distributor in the Czech Republic, providing sales, support, and training services. The website reflects a professional business with clear branding and relevant content tailored to their niche market. Technically, the website employs modern tracking and marketing technologies such as Google Tag Manager, Microsoft Clarity, and Leady marketing tools, combined with a cookie consent mechanism to manage user privacy preferences. The site is mobile-optimized with good SEO practices and a moderate performance profile. However, some technical improvements such as enhanced security headers and accessibility features could be implemented. From a security perspective, the site uses HTTPS and consent-based tracking but lacks visible security headers and explicit privacy or security policies. The absence of WHOIS data for the domain is a notable concern, reducing trust in domain legitimacy. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the security posture is moderate but could be improved with better transparency and technical safeguards. The overall risk assessment suggests a generally trustworthy and professional website with some gaps in compliance and domain registration transparency. Strategic recommendations include publishing comprehensive privacy and security policies, implementing security headers, and verifying domain registration details to enhance trust and compliance.

The website www.luttecontrelesmarchandsdesommeil.fr is currently inaccessible and displays a WordPress error page indicating that the site is no longer available. There is no meaningful content, metadata, or business information present on the site. The WHOIS lookup returned a 'NOT FOUND' status, suggesting the domain may be inactive, unregistered, or expired. This severely limits the ability to analyze the business or technical infrastructure. The site appears to be protected or blocked by a WordPress security plugin such as Wordfence, further restricting access. Overall, the digital maturity and security posture of this web presence are very poor, with no visible security headers, HTTPS, or compliance policies.

The domain cy-entreprendre.fr is registered and active with a valid registrar and name servers consistent with a French academic institution (u-cergy.fr). However, the website currently serves only a 404 Not Found error page, indicating no accessible content or active website presence. There are no metadata, structured data, contact information, or policies available for analysis. The technical infrastructure cannot be fully assessed due to lack of content, but no WAF or security challenge was detected. The absence of HTTPS and security headers further reduces the security posture. Overall, the website appears inactive or misconfigured, limiting its business and security credibility.

L

La Turbine

laturbine-cergypontoise.fr

48

La Turbine is a French business incubator and enterprise hotel located in Cergy-Pontoise, providing coworking spaces, personalized support, and a dynamic entrepreneurial community. The website is built on Drupal 10 and integrates modern web technologies including Google Tag Manager and Slick Carousel for enhanced user experience. The site demonstrates good content quality, clear navigation, and mobile optimization, targeting startups and entrepreneurs in the local ecosystem. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though security headers and explicit incident response policies are absent. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

P

P Automobil Import s.r.o.

handycars.cz

45

Handycars.cz is a specialized automotive mobility program in the Czech Republic focused on providing vehicles and services tailored for persons with disabilities, caregivers, and war veterans. Supported by major automotive brands such as Opel, Peugeot, Citroën, and Fiat, the program offers a comprehensive suite of services including vehicle selection, financing, insurance, vehicle modifications, and assistance services. The website reflects a medium-sized business with a clear target audience and a strong partnership ecosystem. Technically, the website uses modern web technologies including Livewire and jQuery, with a responsive design optimized for mobile devices. Cookie consent is managed via Cookiebot, and Google Analytics and Google Tag Manager are used for analytics and marketing purposes. While the site is well-structured and professional, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy on the main page. Contact information is primarily via forms and a contact page, with no direct emails or phone numbers found. Overall, the website is trustworthy and professionally maintained, with a solid business model and technical foundation. Strategic improvements in privacy policy publication, security headers, and accessibility would enhance compliance and security posture.

A

ALI 21, s.r.o.

jirikovovideni.cz

41

Jiříkovo vidění is a Czech charitable beer project established in 2015, aimed at supporting people with serious long-term illnesses, especially the visually impaired and ALS patients. The project is a collaboration of six minipivovars and a general partner, the security agency ALI 21, s.r.o. It raises funds through the sale of special beer editions and public donations, with transparent accounting and community engagement. The website provides detailed project history, partner information, and event schedules, targeting charity supporters and beer enthusiasts in the Czech Republic and Austria. Technically, the site uses modern web technologies including jQuery and Google Tag Manager, hosted likely by Wedos, with moderate performance and good mobile optimization. Security posture is adequate but lacks explicit security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the project.

The website janda.it is currently non-functional, displaying a fatal error related to a failed database connection. This prevents access to any business content, metadata, or user interface elements. The domain is registered since 2012 and is hosted on Wedos servers, but the site lacks any visible privacy, cookie, or terms of service policies, as well as contact information. The technical infrastructure appears minimal and outdated, with no modern frameworks or CMS detected. Security posture is weak due to exposed internal error messages revealing database credentials and lack of DNSSEC or security headers. Overall, the site presents a high risk due to these vulnerabilities and lack of content.

Časopis Rybnikářství is a niche quarterly publication operated by the Rybářské sdružení České republiky, serving the Czech fishing community with archival access to past magazine issues. The website is professionally designed with clear navigation and provides comprehensive contact information, including phone numbers, email, and a contact form. The technical infrastructure includes modern web fonts, Google Analytics, and Tag Manager for tracking, hosted likely by Ignum based on DNS data. Security posture is moderate with HTTPS enabled but lacks important security headers and privacy/cookie policies, indicating compliance gaps. WHOIS data confirms domain legitimacy and consistency with the business. Overall, the site is safe, trustworthy, and functional but would benefit from enhanced privacy and security practices.

S

Symetro s.r.o.

cenyzaprojekty.cz

43

The website cenyzaprojekty.cz is a Czech-language platform offering specialized online tools for architects, project planners, and technicians to estimate construction project costs, plan schedules, and calculate professional fees. It is powered by Symetro s.r.o. and recommended by professional organizations such as ČKAIT and ČSSI, positioning it as a niche service in the construction and engineering consulting sector. The site provides multiple applications covering cost estimation for building and transport projects, honorarium calculations, professional roles budgeting, timelines, and documentation standards. Technically, the site employs modern web technologies including Vue.js, Google Analytics, Google Tag Manager, and Google reCAPTCHA v3, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and bot protection, though explicit security headers and incident response policies are absent. Privacy compliance is supported by cookie consent and published privacy and cookie policies. However, the absence of WHOIS registration data reduces domain trustworthiness and raises concerns about domain legitimacy. Overall, the site is professional and trustworthy from a content and technical perspective but would benefit from improved transparency in domain registration and security disclosures.

P

PM ČKAIT, s.r.o.

pmckait.cz

39

PM ČKAIT, s.r.o. is a specialized insurance broker and subsidiary of the Czech Chamber of Authorized Engineers and Technicians active in construction (ČKAIT). The company provides professional liability insurance and other insurance products primarily for ČKAIT members but also serves other clients in the insurance market. Their offerings include professional liability insurance, legal protection insurance, property insurance, and claims handling services. The company has a solid market presence with over 32,000 insured persons and more than 10 years of experience in the sector. Technically, the website is built on WordPress using Elementor, with modern JavaScript libraries and responsive design, providing a good user experience and SEO optimization. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and explicit security policies. Privacy compliance is basic with a privacy policy page but no cookie consent mechanism. Business credibility is high due to clear contact information, affiliation with ČKAIT, and professional content. However, the absence of WHOIS registration data reduces domain trustworthiness. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

I

Informační centrum ČKAIT, s. r. o.

ic-ckait.cz

47

Informační centrum ČKAIT, s. r. o. operates as an information and educational service provider primarily serving professionals in the construction and engineering sectors within the Czech Republic. The website offers event information, seminars, conferences, and publishes professional materials, positioning itself as a regional knowledge hub affiliated with ČKAIT. The business model revolves around educational services, information dissemination, and e-commerce for professional publications. Technically, the website is built on the Joomla CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and Facebook SDK for social media integration. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. The presence of secure HTTPS indicates a baseline security posture, but the absence of security headers and privacy policies suggests room for improvement in security and compliance. From a security perspective, the site shows no signs of blocking or WAF interference, and no critical vulnerabilities were detected in the provided data. However, the lack of WHOIS information reduces domain registration transparency and trustworthiness. The site does not provide explicit privacy or cookie policies, which is a compliance gap under GDPR. Contact information is clearly presented, enhancing business credibility. Overall, the website is professional and trustworthy in content and presentation but would benefit from enhanced security headers, privacy compliance documentation, and improved domain registration transparency to strengthen its security posture and user trust.

V

Virtual Fiction

virtual-fiction.cz

42

Virtual Fiction is a small, established Czech company specializing in 3D visualization, interior design, graphic design, printing, photography, and web hosting services. Founded in 1996, it has developed a stable presence domestically and in several European countries. The website reflects a professional business with clear service offerings and contact information. Technically, the site uses traditional web technologies such as Bootstrap and jQuery, with moderate performance and basic mobile optimization. Security posture is average, with HTTPS implied but lacking advanced security headers and privacy compliance measures. The absence of privacy and cookie policies represents a compliance risk. Overall, the business appears legitimate and stable, but improvements in security and privacy practices are recommended.

Labe Aréna Ústeckého kraje is a regional national Olympic center for water sports in the Czech Republic, focusing on rowing and related aquatic sports. The website serves as an information portal for sports events, projects like 'Česko vesluje', and regional sports development initiatives. It targets athletes, sports clubs, schools, and the general public interested in water sports. The business model revolves around managing sports facilities, organizing competitions, and promoting rowing activities regionally. Technically, the website uses an older jQuery version and is built on the Fonio CMS platform. While the site is functional and provides relevant content, it lacks modern security headers and advanced privacy compliance features. The site is moderately optimized for mobile and accessibility but could benefit from performance and SEO improvements. From a security perspective, the absence of WHOIS data and missing privacy/cookie policies are notable gaps. The site does not show signs of advanced security measures or incident response readiness. No critical vulnerabilities were detected, but outdated libraries and lack of security headers pose potential risks. Overall, the website is moderately trustworthy and serves its informational purpose well but requires improvements in security posture, privacy compliance, and technical modernization to enhance trust and resilience against threats.

A

ALKODRINK-CB, s.r.o.

alkodrink.cz

45

AlkoDrink is a small Czech Republic-based beverage wholesaler and retailer specializing in alcoholic and non-alcoholic drinks, including draft beer, rum, whisky, and other spirits. The company also provides technical services related to beverage dispensing and produces dispensing gases under the DrinkGas brand. The website targets local Czech customers, including gastro businesses and private event organizers. The business maintains a moderate market position with a focus on quality product selection and service. Technically, the website uses a modern JavaScript stack with libraries such as jQuery, Slick Carousel, and Google Analytics for tracking. The site is mobile-optimized and includes a cookie consent mechanism, indicating basic privacy compliance. Security posture is adequate with HTTPS and reCAPTCHA on forms, but lacks advanced security headers and formal security policies. WHOIS data is missing, which reduces domain trustworthiness, but the website content and contact information appear legitimate. Overall, the site is functional, professional, and serves its business purpose well.

H

HG partner

hgpartner.cz

43

HG partner is a Czech Republic based engineering company specializing in water management projects, offering comprehensive services including project documentation, expert consulting, construction supervision, and support for subsidies. Established in 2002 and part of the SUDOP GROUP, the company serves public entities and private clients with a medium-sized expert team. The website reflects a professional business presence with detailed project references and clear contact channels. Technically, the site uses modern web standards and frameworks with good mobile optimization and SEO practices, though it lacks advanced security headers and privacy policies. The absence of WHOIS data is a notable gap, reducing domain trustworthiness despite the professional content. Security posture is moderate with room for improvement in compliance and incident response readiness.

V

VODNÍ DÍLA - TBD a.s.

vdtbd.cz

45

VODNÍ DÍLA - TBD a.s. is a specialized Czech engineering company focused on the safety of water structures, including dams, reservoirs, weirs, and sedimentation basins. With over 20 years of experience, the company provides technical safety oversight, flood protection, project design, and expert assessments. It holds a reputable position in the Czech water management sector and participates in national and international water infrastructure organizations. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site uses modern frameworks like Bootstrap and integrates Google Tag Manager for analytics, offering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high. Privacy compliance is basic with a cookie banner but no explicit privacy policy found. Recommendations include enhancing security headers, publishing privacy and security policies, and monitoring domain registration status.

S

Sweco

sweco.cz

48

Sweco Czech Republic is a leading European architectural and engineering consultancy providing a wide range of professional services including urban planning, water management, energy, and transportation infrastructure. The company operates as part of the Sweco Group, a publicly listed entity on Nasdaq Stockholm, indicating a strong market position and reputable business model. The website reflects a mature digital presence with comprehensive content targeting business clients and stakeholders in urban development and sustainability sectors. Technically, the site is built on WordPress with modern plugins and integrations such as Gravity Forms and Google Tag Manager, supporting good performance and user experience. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response details are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, but the absence of WHOIS data for the domain reduces the ability to fully verify domain legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

N

Národní institut pro kulturu

culturenet.cz

45

Culturenet is an information portal and network platform dedicated to cultural professionals across various disciplines in the Czech Republic. It operates as a project of the Institut umění − Divadelní ústav (IDU), a government cultural institute, providing news, grant information, professional networks, publications, and event listings. The website targets cultural professionals and organizations, offering a comprehensive resource for cultural sector updates and opportunities. The platform is well-established with a consistent brand and high-quality content, serving as a trusted source within the Czech cultural ecosystem. Technically, the website is built on WordPress 6.7.2 with modern JavaScript libraries such as jQuery, Swiper.js, and Select2, ensuring a responsive and user-friendly experience. It integrates Google Tag Manager for analytics and MailPoet for newsletter management. The site is mobile optimized and demonstrates good SEO practices, although some accessibility features are basic. Performance is moderate, with lazy loading of images and asynchronous script loading. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms compliant with GDPR. However, it lacks explicit security headers and does not provide visible security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces domain registration trustworthiness, but the affiliation with a government cultural institute and the professional presentation mitigate concerns. Overall, Culturenet presents a low-risk profile with strong content quality and privacy compliance. Strategic improvements include enhancing security headers, publishing explicit security policies, and providing clearer direct contact information to improve business credibility and security posture.

S

Sdružení české filmové kritiky, z.s.

filmovakritika.cz

44

The website filmovakritika.cz represents the Sdružení české filmové kritiky, a Czech non-profit organization dedicated to film criticism, awards, and cultural promotion within the Czech film industry. It serves a niche audience of film critics, cinephiles, and industry professionals by providing reviews, award information, premieres, and critic profiles. The site is well-structured, primarily in Czech, and demonstrates consistent branding and good content quality. The domain is well-established since 2010, supporting the organization's credibility. Technically, the site is built on WordPress using the Elementor page builder, with modern JavaScript libraries such as Swiper.js and jQuery. It integrates Google Analytics and Facebook SDK for user tracking and marketing purposes. The site is mobile-optimized and has good SEO practices but lacks some accessibility features. Performance is moderate, with no critical errors detected. From a security perspective, the site uses HTTPS but lacks visible security headers and formal security policies. No forms collect sensitive user data except a basic search form. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. External links include many gambling-related domains embedded in hidden elements, which may be unrelated or potentially spammy, warranting further review. Overall, the website is a legitimate cultural media platform with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and vulnerability disclosure would enhance trust and regulatory adherence.

R

R. D. Mr. Mgr. Tomas van Zavrel

vanzavrel.cz

40

The website www.vanzavrel.cz is a personal site for Tomas van Zavrel, focusing on Christian community projects, spiritual teachings, and cultural heritage in the Czech Republic. It offers blog posts, videos, and information about local religious projects, targeting Czech-speaking audiences interested in spirituality and local history. The site is built on WordPress with common plugins such as Slider Revolution and YouTube Embed Plus, indicating a moderate level of technical maturity. The design is professional and mobile-optimized, providing a good user experience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS data limits domain legitimacy assessment, but the presence of clear contact information and consistent branding supports moderate business credibility. Overall, the site is safe, non-commercial, and serves a niche community purpose.

D

digicube AG

fuerstenhaus.li

48

The website fuerstenhaus.li serves as an informational and cultural platform dedicated to the Fürstenhaus von Liechtenstein, detailing the history, monarchy, and philanthropic engagements of the princely family. It is positioned as an authoritative niche site with a focus on government and historical content, targeting a general audience interested in Liechtenstein's monarchy and heritage. The site is developed using WordPress CMS with multilingual capabilities and integrates modern web technologies such as jQuery and Slick Slider for enhanced user experience. Analytics are handled via Plausible Analytics, emphasizing privacy-conscious tracking. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit privacy or cookie policies. Contact information and incident response details are not present, which could be improved to enhance trust and compliance. Overall, the site is professional, well-branded, and provides relevant content with good navigation and mobile optimization.

E

etg24 GmbH

etg24.de

42

etg24 GmbH is a German-based company specializing in digital real estate management solutions. Positioned as the original and first provider of online customer portals tailored specifically for property management, etg24 targets property managers, owners, tenants, and service providers. Their business model centers on providing SaaS platforms that streamline and modernize property management processes. The website reflects a professional and consistent brand image with good content quality and clear target audience focus. Technically, the website is built on WordPress using Elementor and WooCommerce, supported by modern tools such as Yoast SEO and Google Tag Manager. Hosting is managed via INWX, a reputable German hosting provider. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and solid SEO practices. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism via Borlabs Cookie, indicating awareness of privacy regulations. However, explicit security headers are not fully implemented, and no formal privacy policy or terms of service are found, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected, and no WAF or blocking mechanisms interfere with access. Overall, etg24 presents a trustworthy and professional digital presence with a solid foundation. Strategic improvements in privacy documentation and security header implementation would enhance compliance and security posture, supporting their market credibility and customer trust.

S

sitegeist

sitegeist.de

48

sitegeist is a well-established digital agency based in Hamburg, Germany, with over 25 years of experience in digital transformation, web development, and online marketing. The company positions itself as a full-service digital agency offering strategic consulting, innovative AI solutions, and comprehensive web and marketing services. The website demonstrates a high level of digital maturity with modern technologies such as Neos CMS, PHP frameworks, and integration of AI-powered chatbots. Security posture is strong with HTTPS enforcement and good script management, though explicit security headers and policies could be improved. Privacy compliance is currently weak due to the absence of visible privacy and cookie policies. Overall, the website is professional, trustworthy, and well-optimized for performance and user experience.

R

RKeeper

rkeeper.cz

44

RKeeper.cz is a Czech-based company specializing in point of sale (POS) systems and related software and hardware solutions for the hospitality industry. Established in 2004, the company offers a range of products including Rkeeper7 Manager software, RK7 Pokladna POS systems, mobile waiter applications, and hardware such as monoblocks and tablets. The website targets hospitality businesses primarily in the Czech Republic and Slovakia, positioning itself as an established provider in this niche market. The business model is B2B, focusing on sales, support, and integration services for hospitality clients. Technically, the website is built on WordPress 4.9.26 with common plugins like WPBakery Page Builder and Revolution Slider. The tech stack includes jQuery and Google Fonts, with a moderate performance profile and good mobile optimization. However, the use of outdated WordPress and plugin versions poses potential security risks. The site lacks advanced SEO and accessibility features but maintains a professional design and clear navigation. From a security perspective, the site enforces HTTPS and uses cookies but lacks important security headers and up-to-date software components. No explicit privacy, cookie, or terms of service policies are found, and there is no visible incident response or vulnerability disclosure information. These gaps indicate moderate security maturity with room for improvement in compliance and risk management. Overall, the website is functional and professional but requires updates to its software stack and the addition of privacy and security policies to enhance trust and compliance. Strategic recommendations include updating WordPress and plugins, implementing security headers, adding GDPR-compliant cookie consent, and publishing security and incident response policies.

S

Storyous

storyous.com

43

Storyous is a well-established company founded in 2012, specializing in modern POS systems tailored for the hospitality industry including restaurants, cafés, and food trucks. The company offers integrated hardware and software solutions such as POS systems with payment terminals, stock management, and real-time business reporting. Positioned as a leading provider in its market, Storyous emphasizes ease of use, rapid staff training, and 24/7 customer support. The parent company is Teya, indicating a broader corporate structure. Technically, the website is built on WordPress and hosted on Amazon AWS infrastructure, utilizing modern JavaScript libraries and analytics tools such as Google Analytics, Microsoft Clarity, and Intercom for customer engagement. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and implements cookie consent mechanisms. However, it lacks DNSSEC and explicit security headers, and does not publish a dedicated security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Overall, Storyous presents a professional, trustworthy, and secure online presence with strong business credibility. Recommendations include enhancing DNS security, adding security headers, and publishing security policies to further strengthen trust and compliance.

Rybářské sdružení České republiky is a well-established professional association representing the fishery sector in the Czech Republic. The organization provides industry information, member services, publications, and culinary resources related to fish production and consumption. The website reflects a consistent brand identity and targets fishery professionals and the general public interested in fishery topics. Technically, the site uses modern JavaScript libraries and Google services for analytics and fonts, hosted likely by WEDOS, a Czech provider. The site is mobile-optimized with good navigation and content relevance. Security posture is adequate with HTTPS enabled but lacks explicit security headers and privacy/cookie policies, indicating room for compliance improvement. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security practices.

S

Spektroskopická společnost Jana Marka Marci

spektroskopie.cz

47

Spektroskopická společnost Jana Marka Marci is a Czech scientific society dedicated to spectroscopy, serving researchers, educators, and professionals in the field. The organization hosts conferences, courses, competitions, and publishes bulletins to support the spectroscopy community. The website is built on Drupal CMS with a clean, professional design and good mobile optimization, providing relevant and well-structured content primarily in Czech. However, the absence of privacy and cookie policies and lack of explicit contact information represent compliance and trust gaps. Security posture is moderate with HTTPS enabled but missing security headers and incident response contacts. The missing WHOIS data limits domain legitimacy verification, though the website content and external partner links support its authenticity. Overall, the site is a credible resource for the spectroscopy community but would benefit from enhanced compliance and security transparency.

Eurachem-ČR z.s. is a Czech non-profit organization dedicated to the scientific, pedagogical, and professional development in the field of analytical chemistry. The organization serves as a national representative of Eurachem, providing publications such as newsletters (Kvalimetrie), methodological sheets, and metrological terminology resources. Their target audience primarily consists of scientific and educational professionals in analytical chemistry. The website is professionally designed using WordPress and the GeneratePress theme, offering good content quality and clear navigation. Technical infrastructure is modern and supports mobile optimization, though some improvements in accessibility and SEO could be made. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and incident response policies. Overall, the website is trustworthy and legitimate, though WHOIS data is unavailable, likely due to privacy protection.

Svaz vodního hospodářství ČR, z.s. is a Czech non-profit association dedicated to water management, providing news, events, and policy advocacy related to water economy in the Czech Republic. The website serves professionals, government bodies, and the public interested in water resource management. It is an established entity with a domain registered since 2001, reflecting a stable presence in the sector. The site content is relevant and professionally presented, though the design and technical stack are somewhat outdated. Technically, the website uses older JavaScript frameworks such as MooTools and Slimbox, with no detected modern CMS or advanced hosting details beyond Active24. Performance and mobile optimization are basic, and SEO features are minimal but present. Security posture is moderate; the site uses POST for form submission but lacks visible security headers and uses outdated libraries, which could pose risks. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Overall, the security posture is average with room for improvement in modernizing the tech stack, implementing security best practices, and adding privacy compliance features. The domain registration data aligns well with the website content, supporting legitimacy. No signs of malicious or suspicious content were found, and the site is accessible without WAF or blocking mechanisms.