High-risk security reports

P

Pan Hrášek

panhrasek.cz

44

Pan Hrášek is a Czech brand specializing in plant-based food products primarily made from pea protein, targeting consumers interested in vegan and vegetarian diets. The brand is owned by Emco spol. s r. o., a Czech family company. The website showcases product offerings such as burgers, strips, and plant-based cheese slices, along with recipes and retail partner information. The site positions itself as a recognized player in the Czech plant-based food market, having won awards and participated in food festivals. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and SEO practices. However, the absence of WHOIS data and privacy/cookie policies indicates areas for compliance and trust improvement. Security posture is adequate with HTTPS and no obvious vulnerabilities, but lacks security headers and formal policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

P

PETROF, spol. s r.o.

muzeumpetrof.cz

45

PETROF, spol. s r.o. operates a museum and manufacturing facility specializing in pianos and musical instruments in Hradec Králové, Czech Republic. The website serves as a portal for visitors to learn about the company's history, book tours of the factory and museum, and purchase gift vouchers. The company has a strong market position with a heritage of over 160 years and offers cultural tourism experiences alongside its manufacturing business. Technically, the website is built on WordPress with modern JavaScript libraries, Google Maps integration, and tracking tools such as Google Tag Manager and Facebook Pixel. Security measures include HTTPS, reCAPTCHA on forms, and a cookie consent mechanism compliant with GDPR. However, there is room for improvement in security headers and explicit security policies. Overall, the website is professional, well-structured, and trustworthy, with a good balance of content quality and technical implementation.

P

PETROF, spol. s r.o.

petrofgallery.cz

45

PETROF Gallery is a cultural venue and showroom operated by PETROF, spol. s r.o., offering event spaces, a cafe, and a showroom primarily targeting visitors interested in music and cultural events. The website is professionally designed with consistent branding and provides comprehensive information about its services and event calendar. Technically, the site is built on WordPress with a modern tech stack including Google Analytics, Facebook Pixel, and reCAPTCHA for security. The site demonstrates good privacy compliance with cookie consent mechanisms and GDPR-aligned privacy policies. Security posture is solid with HTTPS and anti-bot measures, though some improvements in security headers and library updates are recommended. The absence of WHOIS data is a concern for domain legitimacy verification but the website content and branding suggest a legitimate business presence. Overall, the site is well-maintained and trustworthy for its audience.

A

Autoservis PSG

autoservispsg.cz

48

Autoservis PSG is a small automotive service provider based in Otrokovice, Czech Republic, offering comprehensive vehicle care including servicing for personal and commercial vehicles, tire services, air conditioning maintenance, wheel alignment, vehicle towing, and technical inspections. The company positions itself as a local trusted service provider with a clear focus on quality and customer convenience. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to vehicle owners in the region. Technically, the website employs modern web technologies such as Google Analytics, Google Tag Manager, Leaflet.js for maps, and Choices.js for enhanced form controls. It is hosted on Forpsi servers, a known Czech hosting provider. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility features, though some improvements are possible. From a security perspective, the site uses HTTPS and secure form validation but lacks important security headers and does not provide a privacy or cookie policy, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is present. The domain registration data is consistent and transparent, supporting the legitimacy of the business. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

P

Pricemania s.r.o.

pricemaniaacademy.sk

39

Pricemania Academy, operated by Pricemania s.r.o., is a Slovak-based educational platform offering the first comprehensive e-commerce and online marketing training program in Slovakia. The website provides interactive workshops, webinars, and tailored training sessions aimed at e-shops and online businesses. It positions itself as a trusted source with professional mentors, case studies, and a satisfaction guarantee. Technically, the website uses modern web technologies including JavaScript libraries, Vimeo API, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Mouseflow. The site is mobile optimized and well-structured, providing a good user experience. Security posture is solid with HTTPS enforced and secure forms, but lacks some security headers and visible cookie consent mechanisms, which impacts GDPR compliance. Overall, the domain registration and business information are consistent and legitimate, supporting a high trust level.

F

Firemné Microsoft licencie - LicencePro

licencepro.sk

41

LicencePro is a Slovak-based company specializing in providing cost-effective Microsoft software licenses for businesses. Established in 2012, the company positions itself as an alternative to expensive official Microsoft licenses, offering the same quality at significantly reduced prices while maintaining compliance with licensing agreements and legal standards. The website targets business customers seeking affordable and legal software licensing solutions. Technically, the site is built on WordPress using the Divi theme, integrating modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Matomo Analytics, and Cookiebot for GDPR compliance. Security posture is solid with HTTPS enforced, security headers present, and use of reCAPTCHA on forms, although explicit security policies and incident response information are not published. Overall, the website is professional, well-structured, and trustworthy, with room for improvement in transparency of security and contact information.

F

Firemní Microsoft licence

licencepro.cz

37

LicencePro.cz is a Czech-based small business specializing in providing discounted Microsoft software licenses to corporate clients. Founded in 2012, the company offers a range of Microsoft products including Office, SQL Server, Windows Server, Exchange Server, SharePoint Server, Windows OS, and Microsoft 365 licenses. The website is built on WordPress using the Divi theme and incorporates modern web technologies such as Google Tag Manager, Matomo analytics, and Cookiebot for cookie consent management. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content tailored to business customers seeking cost-effective software licensing solutions. Security posture is adequate with HTTPS enforced and use of reCAPTCHA, though additional security headers and explicit security policies could enhance protection. Privacy compliance is supported by a cookie consent mechanism and presence of privacy and terms pages, though more explicit GDPR-related disclosures would be beneficial. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

E

ENVIEL Systems s.r.o.

enviel.cz

36

ENVIEL Systems s.r.o. is a Czech-based company specializing in the design and manufacture of environmentally friendly electric utility vehicles targeted primarily at municipal services, landscaping, construction, and production area management. Their flagship product, the ENVIEL electric vehicle, emphasizes sustainability, low operating costs, and multifunctionality, supported by state and EU grants. The company positions itself as a niche provider within the transportation sector, focusing on smart city readiness and eco-friendly solutions. The website reflects a professional and consistent brand image with clear business information and contact channels. Technically, the website is built on WordPress 6.8.1 using modern web technologies including Google Fonts, jQuery, Google reCAPTCHA v3 for form security, and Matomo Analytics for user tracking. Hosting is provided via WPMU DEV CDN, ensuring moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though accessibility could be improved further. From a security perspective, the site enforces HTTPS and employs reCAPTCHA to protect forms. Cookie consent is managed via the Complianz GDPR plugin with an opt-in mechanism, indicating good privacy compliance. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no public security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen trust and compliance.

E

EMEA s.r.o.

emea.cz

36

EMEA s.r.o. is a Czech-based company established in 2003, specializing in outsourced communication services including contact centers, active call centers, protected workshops, and software licensing solutions. The company serves business clients seeking professional customer communication and telemarketing services. Their market position is supported by a stable client base and a parent company, NWT a.s., one of the top 100 Czech firms. The website reflects a mature digital presence with good content quality and clear service offerings. Technically, the site is built on WordPress with modern plugins and analytics tools, ensuring moderate performance and good mobile optimization. Security posture is strong with HTTPS, reCAPTCHA, and GDPR-compliant cookie management, though formal security policies and headers could be improved. Overall, the site is trustworthy, professional, and compliant with relevant privacy regulations.

M

Magyar Mérnöki Kamara / Mérnökmagazin

mernokvagyok.hu

45

The website mernokvagyok.hu serves as the official portal for the Hungarian Engineering Chamber and its associated engineering magazine. It provides professional news, event information, and resources targeted at engineering professionals in Hungary. The site is positioned as a niche professional platform with a medium-sized audience, reflecting its founding in 2014 and consistent domain registration data. Technically, the site is built on WordPress using the Divi theme framework, incorporating modern JavaScript libraries and plugins for enhanced user experience such as event calendars and form handling. The site employs HTTPS with a good SSL configuration and integrates Google Analytics for visitor tracking, including opt-out capabilities. However, explicit privacy and terms of service pages are not detected, which impacts privacy compliance scores. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal security policies. Overall, the site is professional, trustworthy, and well-branded, but could improve in privacy transparency and security best practices.

P

PROFIL NÁBYTEK, a. s.

profil-nabytek.cz

46

PROFIL NÁBYTEK, a. s. is a Czech-based medium-sized company specializing in the manufacturing of office furniture and comprehensive interior design services. With a strong emphasis on project consulting and custom solutions, the company targets businesses and organizations seeking quality furniture and interior realization. The website reflects a professional and well-established business with a consistent brand presence and extensive references. Technically, the site uses modern web technologies including Alpine.js, Google Tag Manager, and Matomo Analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and consent management, though some security headers and explicit policies are missing. The absence of WHOIS data reduces domain trust, but the business content and contact information support legitimacy. Overall, the website is a strong digital asset for the company, supporting its market position and customer engagement.

Pars Komponenty s.r.o. is a Czech-based company specializing in the development and manufacturing of components for mass transportation vehicles such as trains, trams, metro, and buses. The company holds important industry certifications including ISO 9001, DIN 6701, and EN 15085, and collaborates with major transportation manufacturers like Škoda, Stadler, CAF, Alstom, Siemens, and České dráhy. Their business model focuses on B2B manufacturing and custom development services, targeting manufacturers and operators of public transport vehicles. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support.

N

NEVA

neva.eu

49

NEVA is a Czech-based manufacturer specializing in outdoor shading solutions including venkovní žaluzie (external blinds) and fabric roller blinds, serving both domestic and international markets. The company positions itself as a leading Czech manufacturer with a strong emphasis on quality, short delivery times, and customer satisfaction. Their business model includes direct sales and a partner network, supported by a professional website with comprehensive product information, references, and partner programs. Technically, the website is built on WordPress with modern technologies such as Google Tag Manager, Microsoft Clarity, and Cloudfront CDN, ensuring fast performance and excellent mobile optimization. The site employs standard security best practices including HTTPS, security headers, and a cookie consent mechanism compliant with GDPR. Security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security policies or incident response information, which could be improved. WHOIS data is privacy protected, which is common for commercial entities, and does not raise immediate concerns given the professional nature of the site and consistent business information. Overall, NEVA's website reflects a mature, trustworthy business with solid technical infrastructure and good compliance with privacy regulations. Strategic recommendations include publishing security and incident response policies and enhancing transparency around data protection officer contacts to further strengthen trust and compliance.

K

Kaňák Group, s.r.o.

kanakgroup.com

49

Kaňák Group, s.r.o. is a Czech Republic-based manufacturer specializing in die-cutting tools, certified by BOBST®, serving primarily packaging manufacturers across Europe. The company emphasizes high-quality tooling and production performance enhancement, targeting B2B clients in the manufacturing sector. The website is professionally designed, mobile-optimized, and provides detailed case studies and testimonials, reinforcing its market position as a leading European tooling manufacturer. Technically, the site uses modern tracking tools like Google Tag Manager and Klaro for cookie consent, indicating a moderate level of digital maturity. Security posture is adequate but could be improved by implementing standard HTTP security headers and publishing explicit security policies. The absence of WHOIS registration data for the domain is a notable concern, potentially impacting trustworthiness, though the website content and certifications support legitimacy. Overall, the site is safe, GDPR compliant, and provides clear contact channels, but would benefit from enhanced transparency and security documentation.

H

HTP s.r.o.

htpcr.cz

44

HTP s.r.o. is a well-established Czech manufacturing company specializing in custom engineering parts and components, serving primarily European and U.S. markets. The company has a strong market position supported by a long history since 1996 and a diverse client base including major industrial players. Their website reflects a professional business with comprehensive service offerings in sheet metal processing, welding, machining, and assembly. Technically, the website uses common web technologies such as jQuery, Google Analytics, and Piwik for analytics, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks important security headers and privacy compliance mechanisms such as a privacy policy or cookie consent. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

H

HOKR

hokr.cz

49

The website represents HOKR, a company specializing in supplying high-quality products and services for professional agriculture in the Czech Republic. The site is minimalistic, primarily serving as a redirect with language options, and lacks detailed content or contact information. Technically, it uses modern frameworks such as Nuxt.js and Tailwind CSS, with Google Tag Manager integrated for analytics. However, the site lacks critical privacy and security policies, contact details, and security headers, which limits trust and compliance. The WHOIS data is consistent with the business claims, supporting legitimacy. Overall, the website's digital maturity is basic, with room for significant improvements in content, security, and compliance.

E

EXX s.r.o.

exx.cz

49

EXX s.r.o. is a well-established Czech company specializing in lighting design, interior design, and custom manufacturing services. With a domain age since 2007 and over 25 years of experience in lighting, the company targets both commercial and residential clients seeking professional and tailored design solutions. Their business model combines design expertise with in-house manufacturing capabilities, positioning them as a comprehensive service provider in their sector. The website is professionally designed using Drupal 10, featuring modern tracking tools like Google Analytics and Facebook Pixel, and supports mobile responsiveness and accessibility. However, the absence of an explicit privacy policy and security headers indicates room for improvement in compliance and security posture. Overall, the site is trustworthy and reflects a credible business presence in the Czech Republic.

D

Dr. Müller Pharma s.r.o.

muller-pharma.cz

43

Dr. Müller Pharma s.r.o. is a prominent Czech manufacturer specializing in pharmaceuticals, medical devices, cosmetics, and dietary supplements. The company maintains a professional online presence with a well-structured website offering product information and an e-commerce platform. Their market position is strong within the Czech healthcare sector, targeting general consumers and healthcare professionals. The website demonstrates consistent branding and provides essential business information, including company registration details and social media links. From a technical perspective, the website employs standard web technologies such as jQuery and Google reCAPTCHA, ensuring basic security and user interaction features. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. However, there is room for improvement in accessibility and security headers implementation to enhance overall resilience. Security posture is adequate with HTTPS enforced and consent management in place, but the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms indicates a moderate maturity level. The missing WHOIS data for the domain is a notable concern, potentially impacting trustworthiness and legitimacy perceptions. Overall, the website is functional, professional, and compliant with privacy norms but would benefit from enhanced transparency in security practices and verification of domain registration details to strengthen stakeholder confidence.

C

Cardion Cars a.s.

autopruhonice.com

49

Cardion Cars Průhonice, operated by Cardion Cars a.s., is an authorized Volvo car dealership and service center located in Čestlice, Czech Republic. The company specializes in selling new, demo, and used Volvo vehicles, offering servicing, parts, accessories, and financing options including leasing. The website reflects a professional and consistent brand presence aligned with Volvo's corporate identity, targeting customers interested in Volvo vehicles and related services in the Czech market. The business model focuses on direct sales and after-sales services, supported by digital tools such as online configurators and test drive bookings. Technically, the website employs modern web technologies including jQuery, Bootstrap, and CookieConsent for cookie management, alongside Google Analytics and Tag Manager for analytics and marketing. The site is mobile-optimized with good navigation and SEO practices, though accessibility features could be enhanced. The presence of multiple external partner domains and social media links indicates a well-integrated digital ecosystem. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers which could improve protection against common web attacks. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain reduces trustworthiness from a domain registration standpoint, though the website content and branding strongly suggest legitimacy. Overall, the website presents a solid digital presence for an authorized automotive dealer with good content quality and privacy compliance. Strategic improvements in security headers, incident response transparency, and domain registration visibility would enhance trust and security posture.

Arbyd is a Czech manufacturer specializing in custom furniture and interior design with over 30 years of tradition. The company offers a comprehensive service from design to manufacturing and installation, targeting customers seeking tailored interior solutions. The website is professionally designed, mobile-optimized, and provides clear navigation to various product categories and company information. Technically, the site uses modern web technologies including Google Analytics and Slick Carousel, with HTTPS enabled ensuring secure communication. However, the absence of WHOIS data and lack of visible security headers slightly reduce the overall trustworthiness. Privacy compliance is basic, with a privacy policy and terms of service present but no explicit cookie consent mechanism detected. Overall, the website reflects a legitimate and established business with room for improvement in security and privacy practices.

H

HOPI Holding a.s.

hopiportal.eu

45

HOPI Holding a.s. operates a Central European logistics and food industry holding, providing an internal information portal named HIP for its employees. The portal aims to enhance internal communication, streamline access to company tools, and foster employee engagement. The website is professionally designed with a clear focus on employee needs and is available primarily in Czech with options for English and Polish. Technically, the site uses modern frameworks such as Next.js and integrates Google Analytics for user tracking. Security posture is adequate with HTTPS enabled, but lacks some security headers and explicit privacy policies. Overall, the site is functional and trustworthy but could improve in privacy compliance and security best practices.

H

HOPI CZ

hopiacademy.eu

44

The website cz.hopiacademy.eu/login serves as a login portal for HOPI Academy, presumably an educational platform targeting Czech users. The site uses modern frontend technologies such as Bootstrap and Bootstrap Icons, indicating a contemporary design approach. However, the content is minimal and focused solely on login functionality without additional business or informational content. The lack of publicly available WHOIS data and absence of privacy, cookie, or terms of service policies limit the transparency and trustworthiness of the site. No contact information or security policies are provided, which is a concern for user trust and compliance. Technically, the site appears to use standard web technologies but lacks visible security headers or SSL confirmation in the provided data. Overall, the site appears functional but lacks critical compliance and security features.

F

Farma Malonty s.r.o.

farmamalonty.cz

47

Farma Malonty s.r.o. is a small ecological farm based in South Bohemia, Czech Republic, specializing in sustainable dairy farming and production of traditional dairy products. The website presents a professional and consistent brand image, targeting consumers interested in ecological and sustainable agriculture. The company is newly founded in 2023, with transparent business information and active social media presence primarily on Facebook. Technically, the website is built on WordPress using Elementor and Yoast SEO, with a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS and no visible vulnerabilities, though security headers could be improved. Overall, the site is well-structured, mobile-optimized, and provides clear business and contact information, though no direct emails or phone numbers are visible on the homepage. The domain registration aligns well with the business age and legitimacy.

F

Farma Otročín s.r.o.

farmaotrocin.cz

43

Farma Otročín s.r.o. operates a bio dairy farm in the protected landscape area Slavkovský les in western Czech Republic, focusing on ecological and sustainable farming practices. The company aims to become the leading producer of organic milk in the Czech Republic and Europe by leveraging modern agricultural technologies. Their website reflects a medium-sized enterprise with a clear brand identity and a commitment to sustainability. Technically, the website is built on WordPress with Elementor and Yoast SEO, showing good digital maturity and mobile optimization. Security posture is solid with HTTPS and GDPR-compliant cookie consent, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the business presents itself professionally with clear contact addresses and social media presence, supporting trustworthiness and market credibility.

Q

Quark

quark.sk

48

Časopis Quark is a Slovak popular science magazine focused on science and technology topics, targeting curious readers of all ages. It operates under the auspices of CVTI SR, a Slovak scientific institution, and has a strong market presence as a trusted educational media source. The website is built on WordPress with modern plugins and SEO optimizations, providing a good user experience with mobile responsiveness and clear navigation. Privacy and cookie compliance are well implemented with explicit consent mechanisms. Security posture is solid with HTTPS and security plugins, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-maintained.

The website at gree-mould.com currently serves only a standard HTTP 404 Not Found error page, indicating that no accessible content is available. The domain was registered in 2020 through DNSPod, Inc., and is set to expire in 2026. There is no visible business information, contact details, or policies on the site, which severely limits the ability to assess the company's operations or market position. Technically, the site lacks metadata, structured data, and any modern web technologies or frameworks. Security posture is minimal with basic SSL but no DNSSEC or security headers. Overall, the site is non-functional from a user and security perspective.

動

動腦傳播股份有限公司

brain.com.tw

46

動腦傳播股份有限公司 operates Brain.com.tw, a well-established marketing, advertising, and creative digital platform targeting marketing professionals and advertisers primarily in Taiwan. The website offers rich content including marketing news, creative insights, events, and subscription services, positioning itself as a key media player in the Taiwanese marketing industry. The platform integrates multiple modern web technologies such as Bootstrap, jQuery, and OneSignal for push notifications, alongside analytics tools like Google Analytics and Facebook SDK for user tracking and marketing optimization. Technically, the website demonstrates moderate to good performance with mobile optimization and clear navigation. However, it lacks some advanced security headers and cookie consent mechanisms, which are important for enhancing security posture and privacy compliance. The site uses HTTPS and avoids exposing sensitive data, but could improve by implementing security policies and incident response contacts. From a security perspective, the site is generally secure with no visible vulnerabilities or blocking by WAFs. The WHOIS data confirms domain legitimacy with consistent registration information. Privacy policies and terms of service are present but could be enhanced for GDPR compliance. Overall, the site maintains a professional and trustworthy presence with room for security and privacy improvements. Strategically, the company should focus on strengthening security headers, implementing cookie consent for privacy compliance, and publishing clear security and incident response policies to enhance user trust and regulatory adherence.

S

Shockworks

shockworks.eu

44

Shockworks is a European-based creative studio specializing in tailored e-commerce solutions, offering custom e-shop development, online marketing, branding, and management software services. The company targets businesses across Europe seeking professional and customized e-commerce platforms. The website demonstrates a professional and consistent brand presence with a portfolio showcasing past projects, indicating a small but focused business entity founded around 2016. Technically, the website is built on WordPress using the Salient theme and WPBakery Page Builder, incorporating modern JavaScript libraries and tracking tools such as Google Analytics, Facebook Pixel, and Leady.cz. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security is enforced through HTTPS and reCAPTCHA on forms, but lacks visible security headers and explicit privacy or cookie policies. The security posture is moderate with good SSL configuration and standard tracking protections, but improvements are needed in privacy compliance and security header implementation. No vulnerabilities or suspicious domains were detected. WHOIS data is unavailable due to privacy protection, which is common and justified for this business type. Overall, the website is professional and trustworthy with moderate risk. Strategic recommendations include adding comprehensive privacy and cookie policies, implementing security headers, and providing clearer contact and incident response information to enhance compliance and trust.

McCann Prague is a marketing and advertising entity with a long-established domain dating back to 1997. The current website is under construction and provides minimal information beyond social media links. The technical infrastructure uses Microsoft Azure DNS and custom web fonts, but lacks advanced frameworks or CMS. Security posture is basic with no visible security headers or privacy policies, and no HTTPS status provided. The site does not collect user data or provide contact information, limiting its business credibility and privacy compliance. Overall, the website is in an early stage of development and requires significant improvements in content, security, and compliance to meet professional standards.

E

Úvodní stránka

engineering-card.cz

46

The website engineering-card.cz serves as an informational portal for the Professional Engineer Card initiative in the Czech Republic, part of a broader European project to enhance engineer mobility. It is managed by Czech engineering organizations and government bodies, providing detailed information about the card, registration processes, and organizational structure. The site targets engineers seeking professional certification and mobility within Europe. Technically, the site is built on Joomla! CMS using standard web technologies like Bootstrap and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and CSRF tokens, but lacks HTTP security headers and explicit privacy policies, which are areas for improvement. No blocking or WAF mechanisms were detected, and the domain registration data is consistent and legitimate, supporting trust in the site. Overall, the site is professional and functional but could enhance compliance and security practices.

C

CCT

cct.cz

42

CCT is a Czech-based company focused on supporting business development, as indicated by their website slogan and content. The company has been established since 2015 and uses a WordPress-based website with modern technologies such as Bootstrap and Google Analytics for tracking. The website is served securely over HTTPS with a valid SSL certificate and integrates Google Tag Manager and reCAPTCHA for analytics and bot protection. However, the site lacks explicit privacy, cookie, and terms of service policies, which are important for compliance and user trust. Contact information such as emails and phone numbers are not explicitly found in the provided content, which may hinder user engagement and trust. Overall, the website presents a professional design with good navigation and mobile optimization but has room for improvement in privacy compliance and security best practices.

Asociatia Generala a Inginerilor din Romania (AGIR) is a well-established professional association dedicated to supporting the engineering community in Romania. The organization offers a broad range of services including technical consulting, expert evaluations, educational courses, certifications, and publishes engineering literature through its affiliated publishing house. AGIR also engages in cultural activities and maintains a network of branches across the country. The website reflects a medium-sized non-profit entity with a strong focus on education and professional development within the engineering sector. The target audience primarily consists of engineers and technical professionals in Romania.

E

eNOT.pl

enot.pl

44

The website enot.pl appears to be a small Polish business with an online presence established since 2012. The site uses modern frontend technologies such as Element UI and Slick Carousel, indicating a moderate level of technical maturity. However, the content is minimal and lacks comprehensive business descriptions, contact information, or privacy-related policies. The absence of privacy and cookie policies, as well as security headers, suggests limited focus on compliance and security best practices. No WAF or blocking mechanisms were detected, and the site is accessible without restrictions. Overall, the security posture is basic, with room for improvement in privacy compliance and contact transparency.

C

Central Asian Association for Education Accreditation (CAAAE)

caaae.kz

49

The Central Asian Association for Education Accreditation (CAAAE) is a recently established accreditation body focused on educational quality assurance in Kazakhstan and the broader Central Asian region. The organization provides institutional and program accreditation services, maintains registers of accredited programs, and engages in international cooperation, including recognition through the EUR-ACE® accreditation system. The website reflects a professional and consistent brand image targeting educational institutions and stakeholders in the education sector. Technically, the website is built on WordPress using common plugins such as Yoast SEO and W3 Total Cache, with jQuery and Owl Carousel for UI components. The site is moderately optimized for performance and mobile devices, with good SEO practices but basic accessibility features. Security posture is adequate with HTTPS enforced and some secure cookie settings, but lacks advanced security headers and formal security policies. From a security and compliance perspective, the site lacks published privacy and cookie policies, which is a significant compliance gap especially under GDPR. No incident response or vulnerability disclosure information is provided. Contact information is clearly available, supporting business credibility. No signs of malicious content or blocking mechanisms were detected, indicating a trustworthy and safe website. Overall, the website scores well on business credibility and content quality but should improve privacy compliance and security best practices to enhance trust and regulatory adherence.

The Magyar Mérnöki Kamara website serves as the official online presence of the Hungarian Chamber of Engineers, providing comprehensive information and services to engineering professionals and companies in Hungary. It offers membership management, certifications, legal support, training, and up-to-date news relevant to the engineering sector. The site targets engineers and related professionals, positioning itself as a key national professional organization in the government and engineering sectors. Technically, the website uses a traditional tech stack including jQuery 1.12.3 and Bootstrap for UI components, with Google Analytics for visitor tracking. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. The CMS appears custom or proprietary, with no modern frameworks or structured data detected. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, it lacks visible security headers and uses an outdated jQuery version, which could pose risks. There is no published security policy or incident response contact information, and no cookie consent mechanism is present, indicating partial GDPR compliance. Overall, the website is professional, trustworthy, and well-aligned with its business purpose, but improvements in security headers, privacy compliance, and modernization of technical components are recommended to enhance its security posture and user trust.

I

Ingénieurs et Scientifiques de France (IESF)

iesf.fr

42

Ingénieurs et Scientifiques de France (IESF) is a French non-profit professional association representing engineers and scientists through regional and technical associations. The organization promotes engineering professions, conducts national surveys, offers digital diploma certification, and organizes national events. The website is professionally designed, well-structured, and targets engineers, scientists, and related stakeholders in France. Technically, the site uses a specialized CMS (aiw-asso), modern JavaScript libraries, Google Analytics, and reCAPTCHA for security and tracking. Security posture is good with HTTPS and secure forms, but lacks some security headers and explicit privacy/cookie consent mechanisms. WHOIS data is missing, which slightly reduces trust but the website content and contact information support legitimacy. Overall, the site is a credible and professional platform for the association's activities.

Eesti Inseneride Liit MTÜ is a non-profit organization uniting engineering associations, educators, and companies in Estonia. The organization focuses on promoting engineering education, professional development, and technological innovation within Estonia. Their website serves as a portal for engineers, students, and educators, providing resources, news, and event information. The organization holds a credible position within the Estonian engineering community, supported by consistent branding and clear business information. Technically, the website is built on WordPress using the Enfold theme and integrates modern tools such as Google Analytics and reCAPTCHA, ensuring a functional and user-friendly experience. Security measures include HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the site is well-maintained, GDPR compliant, and trustworthy, with no signs of malicious activity or content blocking.

Hrvatski inženjerski savez (HIS) is a Croatian engineering association established in 2008, serving as a professional body for engineers in Croatia and abroad. The organization offers membership services, professional certifications such as EurIng 2.0, lifelong education, and organizes events like the annual 'Dan inženjera Republike Hrvatske'. The website reflects a well-established non-profit entity with strong ties to international engineering federations and Croatian academic institutions. Technically, the site runs on WordPress 4.7.29 with jQuery 1.12.4, uses Google Analytics and Tag Manager for tracking, and is hosted likely on Croatian infrastructure. While the site is content-rich and professionally presented, it lacks modern security headers and cookie consent mechanisms, which are important for GDPR compliance and security posture. No incident response or security policies are published, and some core software components are outdated, posing potential security risks. Overall, the domain registration data aligns well with the organization's identity, indicating high legitimacy and trustworthiness.

Ф

ФНТС

fnts.bg

42

The Federation of Scientific and Technical Unions in Bulgaria (ФНТС) is a well-established non-profit organization uniting numerous scientific and technical unions across Bulgaria. It serves engineers, scientists, and technical professionals by providing training, event hosting, and fostering cooperation among young engineers. The website is professionally designed using WordPress CMS, with modern plugins and integrations such as Google Analytics and Google Tag Manager. The technical infrastructure is solid, hosted on a reputable Bulgarian hosting provider, and the site is mobile optimized with good performance. Security posture is generally good with HTTPS enabled and no exposed sensitive data, though it lacks some security headers and visible privacy/cookie policies. The domain WHOIS data is privacy protected due to GDPR, which is justified given the organization's EU location. Overall, the website reflects a credible and professional federation with a clear mission and audience.

O

OIAV

oiav.at

44

OIAV is a well-established Austrian professional association for engineers and architects, with a history spanning approximately 175 years. The organization focuses on fostering engineering and architectural knowledge, hosting events, awards, and providing a platform for professional networking. The website is built on WordPress using the Avada theme and includes modern SEO practices with Yoast SEO plugin. The technical infrastructure is mature with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced, though some security headers and policies are missing. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, the website presents a professional and trustworthy image, though WHOIS data is unavailable due to NIC.AT restrictions, which slightly reduces trust. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers.

E

Engineering Council

engc.org.uk

47

The Engineering Council website represents the UK’s national regulatory body for the engineering profession, providing professional registration services, setting standards, and maintaining the national register of engineers and technicians. The organization targets engineering professionals, employers, educational institutions, and the public, positioning itself as an authoritative and trusted regulator within the UK engineering sector. Key services include professional registration, licensing of professional engineering institutions, and educational course recognition. The website content is well-structured, professional, and consistent with the organization's mission. Technically, the site is built on the Umbraco CMS platform using modern web technologies such as jQuery, FontAwesome, and Google Fonts. It demonstrates good mobile optimization, accessibility, and SEO practices. The presence of a cookie consent banner and structured data indicates a mature digital presence. However, some security headers are not detected, and no explicit incident response or vulnerability disclosure information is published. Security posture is solid with HTTPS usage and no visible vulnerabilities or exposed sensitive data. The site uses a reputable cookie consent mechanism and maintains GDPR compliance. The WHOIS lookup for the www subdomain failed due to an invalid query format, but this does not detract from the legitimacy of the main domain or the organization. Overall, the site is trustworthy and professionally maintained. Risk assessment is low; however, improvements in security headers, incident response transparency, and vulnerability disclosure would enhance the security maturity. Strategic recommendations include implementing security headers, publishing a security policy and incident response contacts, and adding a vulnerability disclosure policy to foster trust and compliance.

S

Swiss Infrastructure and Architecture Association (SIA)

sia.ch

47

The Swiss Infrastructure and Architecture Association (SIA) operates a professional web platform focused on providing standards, certifications, and resources for professionals in the architecture and infrastructure sectors within Switzerland. The website demonstrates a modern technical infrastructure using React and the Carbon Design System, indicating a commitment to contemporary web technologies and user experience. However, the site lacks visible privacy and cookie policies, contact information, and explicit security policies, which are critical for compliance and user trust. The security posture appears minimal based on the provided content, with no evident security headers or incident response information. Overall, the website is professionally presented and serves a specialized audience but requires enhancements in privacy, security, and transparency to improve trust and compliance.

The Comité Nacional Español ENGINEERS EUROPE is a newly established professional association representing Spanish engineers within the broader European engineering community. The organization aims to promote recognition, mobility, and professional opportunities for engineers across Europe. The website is built on WordPress using the Divi theme and incorporates SEO best practices via Rank Math PRO. It is hosted by a reputable registrar and uses HTTPS, but lacks advanced security headers and DNSSEC. Privacy and terms of service pages are absent, indicating compliance gaps. No direct contact information is published, which may affect user trust and engagement. Overall, the site presents a professional image suitable for its target audience but requires enhancements in security and compliance to improve trustworthiness and regulatory adherence.

Z

Zveza inženirskih društev Maribor

zid-mb.si

41

Zveza inženirskih društev Maribor (ZID) is a well-established non-profit professional association founded in 2011, serving engineering societies and related groups in Maribor, Slovenia. The organization focuses on coordination, promotion, and community engagement within the engineering sector, publishing newsletters and organizing events. The website reflects this mission with clear contact information, event listings, and publications. Technically, the site is built on WordPress with common plugins and frameworks, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and incident response information. Overall, the site is professional, trustworthy, and compliant with basic privacy requirements, though improvements in security policies and disclosures could enhance trust and compliance.

B

BM Systém s.r.o.

cervenykohout.com

45

The website cervenykohout.com represents a well-established annual fire protection conference held in České Budějovice, Czech Republic. The business behind the site is BM Systém s.r.o., a small company organizing this event since at least 2013, consistent with the domain registration date. The site provides information about the conference, including history, photo galleries, and online registration via a partner domain. The target audience includes professionals and stakeholders in fire protection and related fields. The business model centers on event organization and publication of conference materials.

N

NIVAM – Národný inštitút vzdelávania a mládeže

zborsolidarity.eu

40

The website 'Európsky zbor solidarity' serves as the official Slovak national agency portal for the European Solidarity Corps, a European Union youth program promoting social solidarity and volunteerism. It provides comprehensive information, training resources, project management support, and multimedia content targeted at young people, youth workers, and organizations involved in solidarity projects. The site is operated by NIVAM – Národný inštitút vzdelávania a mládeže, a Slovak national institute for education and youth. The business model is non-profit, focusing on program facilitation and information dissemination within Slovakia. The website is well-branded, consistent, and maintains a high level of trust through official EU affiliations and GDPR compliance.

The website www.ahprofi.cz is currently inaccessible, returning a 403 Forbidden error page served by nginx 1.26.2. This indicates that access to the site is blocked or restricted, preventing any content retrieval or analysis. The absence of WHOIS data further complicates the assessment, as no domain registration details such as registrar, creation or expiry dates, or registrant information are available. Consequently, no business, contact, or compliance information can be extracted from the site. The technical infrastructure appears minimal with only the web server identified, and no CMS, frameworks, or analytics technologies detected. Security posture is poor due to lack of HTTPS confirmation, missing security headers, and no visible privacy or cookie policies. Overall, the site presents a high risk due to inaccessibility and lack of transparency.

N

NWT a.s.

nwt.cz

48

NWT a.s. is a well-established Czech technology and innovation company with over 25 years of experience, specializing in IT services, renewable energy, and related sectors. The company operates multiple divisions including cloud services, hydroponic greenhouse construction, electrical engineering, renewable energy installations, e-commerce, and investment in startups. Their market position is strong within the Czech Republic, serving a diverse audience from individuals to municipalities and businesses. The website reflects a professional and consistent brand image with clear business information and multiple subsidiary domains. Technically, the site is built on WordPress using modern plugins and frameworks, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and formal security policies. Overall, the site is trustworthy, compliant with GDPR, and provides transparent contact information.

S

SULKO s.r.o.

sulko.cz

39

SULKO s.r.o. is a well-established Czech manufacturer specializing in plastic, aluminum, and wooden windows and doors, along with shading technology and photovoltaic systems. Founded in 1993, the company has built a strong market presence with over 30 years of experience and thousands of customers domestically and internationally. Their business model focuses on manufacturing high-quality products and providing comprehensive services including free price calculations and support. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting residential and commercial customers. Technically, the website employs a traditional tech stack with jQuery, Google Tag Manager, Hotjar, and other common libraries. While the site is mobile-optimized and SEO-friendly, some outdated libraries like jQuery 1.7.2 present potential security risks. The site uses HTTPS and integrates Google reCAPTCHA for form security. Cookie consent mechanisms are robust and GDPR compliant, enhancing privacy transparency. From a security perspective, the site demonstrates good practices such as encrypted connections and consent management but lacks advanced security headers and explicit incident response policies. The absence of a vulnerability disclosure policy and use of outdated JavaScript libraries are areas for improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The overall risk profile is moderate with recommendations to upgrade libraries, implement security headers, and publish incident response information to strengthen security posture and trustworthiness.

F

Family Business Network Czech

fbnczech.cz

47

Family Business Network Czech (FBN Czech) is a prestigious non-profit organization dedicated to supporting and connecting leading Czech family businesses and family offices. As a branch of the global Family Business Network International, it offers a platform for knowledge sharing, intergenerational collaboration, and community building. The website showcases their key services including organizing events, educational workshops, and fostering a trusted environment for family business owners to share experiences and grow together. The organization holds a strong market position as the leading family business network in the Czech Republic with ties to a global network of over 21,000 members.