Other security reports

G

GASK

gask.cz

58

GASK (Galerie Středočeského kraje) is a regional art gallery based in the Central Bohemian Region of the Czech Republic, established in 2009. It offers art exhibitions, educational programs, and cultural events, targeting the general public interested in arts and culture. The website serves as an information portal and ticket sales platform, positioning GASK as a key cultural institution in its region. Technically, the site is built on WordPress with WooCommerce, leveraging modern web technologies and CDNs for performance and scalability. It supports multilingual content via WPML and integrates various marketing and analytics tools such as Google Analytics, Adform, and Ecomail. Security-wise, the site enforces HTTPS, uses security headers, and implements GDPR-compliant cookie consent mechanisms, though it lacks a dedicated security policy or incident response page. Overall, the site is professional, trustworthy, and well-optimized for its audience and purpose.

The website www.csobpb.cz is currently inaccessible in terms of meaningful content. The HTML retrieved is minimal, containing mostly obfuscated JavaScript and no visible business information, metadata, or user interface elements. This strongly suggests the presence of a Web Application Firewall (WAF) or security challenge page blocking access to the actual site content. The WHOIS lookup returned no registration data, indicating either privacy protection or an unregistered domain, which further complicates trust assessment. Due to these factors, a comprehensive analysis of the business, security posture, and compliance cannot be performed accurately. From a technical perspective, the site lacks visible metadata, forms, external links, or scripts that would indicate the use of modern frameworks or technologies. The absence of HTTPS indicators or security headers in the provided data suggests a basic or incomplete security configuration. No privacy, cookie, or terms of service policies were found, indicating poor compliance with common data protection regulations. Security-wise, the site appears to be protected by a generic WAF or security mechanism, but no direct vulnerabilities or security best practices can be assessed due to lack of accessible content. The domain's WHOIS data absence reduces trust and raises questions about legitimacy. Overall, the site scores very low on content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic recommendations include verifying domain registration status, ensuring proper HTTPS and security headers are implemented, publishing clear privacy and cookie policies, and providing accessible business and contact information to improve trust and compliance.

K

Kodl Contemporary

kodlcontemporary.com

64

Kodl Contemporary is a professional contemporary art gallery based in Prague, Czech Republic, offering a range of exhibitions, projects, and artist showcases. The website reflects a well-established gallery with a clear focus on contemporary art and cultural events, targeting art enthusiasts and collectors. The business model centers on gallery exhibitions, artist representation, and cultural programming. Technically, the website is built on WordPress with modern libraries such as Bootstrap, Swiper.js, and Google Tag Manager, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive privacy and cookie policies in place. Security posture is generally good with HTTPS enforced and cookie consent mechanisms, though the absence of security headers and missing WHOIS data are notable concerns. Overall, the website presents a trustworthy and professional front, but domain registration inconsistencies warrant further verification.

A

Artslimit

artslimit.com

58

Artslimit is a prominent Czech online auction platform specializing in curated auctions of luxury and collectible items such as fine art, historic automobiles, and designer handbags. It holds a leading market position in the Czech Republic with a focus on authenticated and exceptional lots, providing a seamless and engaging bidding experience for its users. The platform supports live auctions and offers a user-friendly interface optimized for desktop and mobile devices. Technically, the website is built using modern web technologies including React and Next.js, ensuring dynamic content delivery and good performance. Integration with Google Tag Manager facilitates marketing and analytics tracking. The site employs HTTPS for secure communications but lacks some advanced security headers, which could be improved to enhance security posture. From a security and compliance perspective, Artslimit demonstrates good privacy practices with comprehensive GDPR-compliant privacy and cookie policies and a clear terms of service. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and ownership transparency. No direct contact emails or phone numbers are provided, which may impact user trust and support accessibility. Overall, Artslimit presents a professional and trustworthy platform for online auctions in its niche, but it should address domain registration transparency and enhance security headers to strengthen its security posture and business credibility.

T

Terezia.eu | Doplňky stravy z léčivých hub a rostlin | Úvodní strana

terezia.eu

65

Terezia.eu is an e-commerce website specializing in dietary supplements derived from medicinal mushrooms and plants. The site targets a general audience interested in health and natural supplements, offering products primarily in the Czech market with alternate language support for English and Slovak. The business appears to be small-sized with a focused product offering. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for cookie consent management, and integrates multiple analytics and advertising platforms such as Google Analytics, Microsoft Clarity, Hotjar, and Meta Platforms. The site is accessible over HTTPS and implements a comprehensive cookie consent mechanism, reflecting a good level of privacy compliance. However, the absence of explicit privacy policy and terms of service pages, as well as lack of visible company contact information, limits full transparency and business credibility. Security posture is moderate with no visible security headers and no exposed vulnerabilities detected in the provided data. Overall, the website is professionally designed with good user experience and moderate SEO and accessibility features.

The website eupowers.hu is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain was registered in 2020, which is consistent with a relatively new business, but no business details, contact information, or policies are available on the site. The lack of accessible content and absence of privacy, cookie, or terms of service policies indicate a very low level of digital maturity and compliance. Technically, no scripts, frameworks, or CMS are detected, and no security headers or SSL configuration details are available from the provided data. This severely limits the ability to assess the website's security posture or business credibility. Overall, the site appears to be either under maintenance, restricted, or improperly configured for public access, resulting in a poor user experience and low trustworthiness.

The website at mvmoptimum.hu is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. Due to this restriction, no business information, contact details, or policy documents are available for analysis. The domain was registered in 2020, which is consistent with a relatively new business, but the lack of accessible content limits the ability to assess the company's market position or services. Technically, the site lacks visible security headers, scripts, or analytics, and no SSL or hosting details are discernible from the provided data. The security posture is weak due to the absence of HTTPS confirmation and security best practices. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a poor user experience and low trustworthiness.

S

Studio Družba

studiodruzba.cz

44

Studio Družba is a small creative agency based in Vysoké Mýto, Czech Republic, founded in 2015. The company specializes in marketing, branding, graphic design, video production, animation, and photography services. Their website reflects a professional and consistent brand image, targeting businesses seeking creative and visual identity solutions. The company maintains a portfolio of client projects and emphasizes education and content creation for social media. Technically, the website is built on WordPress using the Elementor page builder and Astra theme, hosted by Wedos. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR. Security posture is adequate with HTTPS enabled, but lacks visible security headers and explicit security policies. No incident response or vulnerability disclosure information is publicly available. Overall, the website is trustworthy, well-maintained, and suitable for its business purpose.

M

ÚVOD | Máme to na talíří a není nám to jedno

mametonataliri.cz

52

The website www.mametonataliri.cz is a Czech language site focused on providing information about school catering systems. It appears to be a small-scale business or informational site hosted on the Wix platform, leveraging Wix's Thunderbolt framework and standard JavaScript polyfills. The site content is accessible and does not present any WAF or security challenge barriers. However, the absence of WHOIS data and registrant information raises concerns about domain registration transparency. The site lacks privacy, cookie, and terms of service policies, and no contact information is provided, which impacts trust and compliance. Technically, the site uses modern web technologies but lacks advanced security headers and analytics integrations. Overall, the security posture is basic, with room for improvement in privacy compliance and business credibility.

T

TENDERMARKET

tendermarket.cz

48

TenderMarket.cz is a Czech language website focused on providing information and guidance related to tendering and procurement processes, targeting suppliers and contracting authorities. The platform appears to serve as an informational resource rather than a transactional or e-commerce site. The website uses modern web technologies such as Angular and Material Design components, hosted on Czech hosting infrastructure. However, the site lacks visible privacy, cookie, and terms of service policies, which are important for compliance and user trust. Security headers and explicit security policies are not evident, indicating room for improvement in security posture. The domain is well aged and registered with a reputable Czech registrar, supporting the legitimacy of the business. Overall, the site is functional but basic in content and compliance features.

The website uzitecnyweb.cz is currently inaccessible, returning a 403 Forbidden error page which blocks all content and metadata. The domain is registered since 2009 with REG-ZONER, indicating a long-standing registration, but no accessible business or contact information is available on the site. Due to the blocked content, no technical infrastructure details, security policies, or business descriptions can be extracted. The lack of HTTPS and security headers further reduces the security posture. Overall, the site appears inactive or restricted, limiting its digital maturity and trustworthiness.

The website orlenkoltrans.pl is currently inaccessible, returning a 403 Forbidden error with minimal HTML content, indicating that access is blocked by administrative rules. Due to this, no meaningful content, metadata, or business information is available for analysis. The WHOIS data provided is suspicious, showing a domain creation date in the future (May 24, 2025), which is inconsistent and undermines trust in the domain's legitimacy. No security policies, privacy statements, or contact information are present on the site, and no technologies or external links can be identified. Overall, the website appears non-functional and provides no value to visitors at this time.

E

eealibrary.org

eealibrary.org

60

The website eealibrary.org currently presents no accessible content beyond a loading spinner, indicating that the site is either under development or protected by a web application firewall or security mechanism that blocks content delivery. The domain is registered since 2014 with easyDNS Technologies Inc., showing a stable registration history but no publicly available registrant details. There is no metadata, privacy, cookie, or terms of service information available, and no contact or social media links are present. Technically, the site uses Angular framework components and standard web technologies but lacks performance and SEO optimizations. Security posture is weak with no HTTPS enforcement or security headers detected, and DNSSEC is not enabled. Overall, the site is not currently providing meaningful business or user information and lacks compliance and trust indicators.

The website www.realcity.cz is currently inaccessible beyond a Cloudflare Turnstile CAPTCHA challenge page, which prevents access to any substantive content or business information. The domain WHOIS data is unavailable, indicating privacy protection or unregistered status, which limits verification of legitimacy. Due to the lack of visible content, metadata, or contact information, a comprehensive analysis of the business, technical infrastructure, and security posture is not possible. The site is hosted behind Cloudflare's security services, which provides some protection but also blocks content access for analysis.

The website tipcars.com is currently inaccessible beyond a Cloudflare Turnstile security challenge page, which prevents access to any substantive content or business information. The domain is registered since 2000 with a reputable registrar and uses Cloudflare for DNS and security services. Due to the WAF challenge, no privacy policies, contact information, or business descriptions are available for analysis. The technical infrastructure indicates use of Cloudflare's security platform but no further technology stack details are visible. Security posture cannot be fully assessed due to lack of content access, but the presence of Cloudflare WAF suggests some level of protection. Overall, the site is currently blocked from analysis, resulting in a low AI score and incomplete insights.

The website literarnimuzea.cz serves as an informational portal dedicated to Czech literary museums, memorials, and exhibitions. It is managed by a cultural institution affiliated with the National Literature Memorial and the Czech Ministry of Culture. The portal provides curated content about literary history, personalities, and related cultural events, targeting the general public and enthusiasts of Czech literary heritage. The site is niche-focused with a clear cultural and educational mission, without commercial or transactional features. From a technical perspective, the site employs a custom CMS with common web technologies such as jQuery, Google Fonts, Google Analytics, and ShareThis for social sharing. The website is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. However, there is room for improvement in modernizing the tech stack and enhancing mobile responsiveness. Security-wise, the site uses HTTPS but lacks important security headers like Content-Security-Policy and HSTS, which are recommended to improve protection against common web attacks. No privacy or cookie policies are present, indicating potential compliance gaps with GDPR requirements. Contact information is limited to web forms, with no explicit email or phone contacts provided. Overall, the security posture is moderate but could be strengthened with better headers, policies, and transparency. The overall risk is low given the non-commercial nature and cultural focus, but strategic improvements in privacy compliance and security best practices are advised to enhance trust and legal adherence.

D

David Kučera

dkgr.cz

45

David Kučera operates as a freelance graphic designer based in the Czech Republic, offering a broad range of design services including logos, corporate graphics, print materials, infographics, web design, and UX tailored to client needs. The business model is primarily freelance with the flexibility to assemble teams of specialists for larger projects. The website presents a professional portfolio with extensive references and partner collaborations, positioning the business as a credible and experienced service provider in the graphic design sector. Technically, the website is built with standard HTML5, CSS3, and JavaScript, utilizing jQuery libraries. Hosting is provided by a Czech hosting company inferred from the nameservers. The site is moderately performant with good mobile optimization and basic accessibility features. SEO is well addressed through meta tags and Open Graph data, although no CMS or advanced frameworks are detected. From a security perspective, the site lacks advanced security headers and does not provide privacy or cookie policies, which are compliance gaps. No forms or data collection mechanisms are present, reducing exposure to input-based vulnerabilities. The domain registration is consistent and transparent, supporting the legitimacy of the business. No WAF or blocking mechanisms are detected, and the content is safe for general audiences. Overall, the website is professional and trustworthy but would benefit from enhanced security practices and privacy compliance measures to improve its security posture and regulatory adherence.

The website at 1gr.cz is currently inaccessible to the public, returning a 403 Forbidden error page that denies access to all users. This indicates either a misconfiguration or intentional restriction, preventing any meaningful content or business information from being viewed. The domain is registered since 2015 with a Czech registrar, suggesting it is a legitimate domain, but the lack of accessible content severely limits any analysis of the business or services offered. The absence of metadata, structured data, or contact details further complicates assessment. Technically, no information about hosting, CMS, or security headers is available, and no scripts or analytics are detected. Security posture cannot be properly evaluated due to lack of access. Overall, the site appears non-operational or restricted, resulting in a very low trust and quality score.

The website trackad.cz currently presents only minimal content, consisting of a single dot in the body with no metadata, scripts, or visible business information. The domain is registered since 2015 with a Czech registrar and uses cloudns.net name servers, indicating a stable registration. However, the lack of accessible content and absence of privacy, cookie, or terms of service policies severely limit the ability to assess the business or security posture. The technical infrastructure appears minimal with no detectable CMS or frameworks. Security posture cannot be evaluated due to missing HTTPS and security headers information. Overall, the site appears either blocked, under construction, or abandoned, resulting in a low trust and credibility score.

S

Sport v okolí

sportvokoli.cz

44

Sport v okolí is a Czech Republic-based sports information portal that helps users find sports clubs and events. It is a collaborative project between Sazka a.s. and the Czech Olympic Committee, positioning itself as a trusted resource in the Czech sports community. The website offers a comprehensive searchable database of sports clubs, a calendar of sports events, and relevant articles to engage its audience. The target audience is the general public interested in sports activities within the Czech Republic. Technically, the website uses modern JavaScript libraries such as jQuery, Choices.js, and Google Analytics for tracking. It is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and implements a cookie consent mechanism with granular user controls, but lacks explicit privacy policy and terms of service pages, as well as security headers, which are areas for improvement. The WHOIS data is missing, which reduces trustworthiness from a domain registration perspective, but the website's partnerships and content quality support its legitimacy. Overall, the site scores well in content quality and business credibility but should enhance its security posture and privacy compliance to improve trust and compliance.

S

STOŽEC

stozec.net

44

The website www.stozec.net/stozec/ serves as a regional tourism information portal focused on the Stožec area and nearby locations in the Czech Republic. It provides visitors with information about local attractions, accommodation, dining, weather, and webcams. The site targets tourists and local visitors interested in hiking, sightseeing, and cultural heritage. The business model is informational, supported by partnerships with regional portals such as ŠumavaNet.CZ and Tusset blog. The website is small-scale and community-oriented, with content primarily in Czech.

I

Informační server ŠumavaNet.CZ

stachy.net

53

The website www.stachy.net/stachy/ serves as a regional information and tourism portal for the town of Stachy and its surroundings in the Czech Republic. It provides visitors with comprehensive information on local attractions, events, accommodation, webcams, and cultural activities. The site is developed and hosted by SumavaNet.CZ in cooperation with the local municipal office, indicating a community-focused information service. The target audience is general public interested in tourism and local culture. Technically, the site uses standard web technologies including jQuery, Flexslider, and Google Analytics, with a cookie consent mechanism compliant with GDPR principles. The website is accessible, mobile-friendly, and well-structured with good SEO practices. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the active and consistent content suggests legitimate use. Security posture is moderate with HTTPS enabled but lacking advanced security headers. No contact emails or phone numbers are visible, which may affect user trust and business credibility.

K

KAŠPERSKÉ HORY A OKOLÍ

kasperske-hory.info

46

The website www.kasperske-hory.info/khory/ serves as a regional tourism and local information portal for the Kašperské Hory area in the Czech Republic. It provides visitors and residents with information about accommodation, local history, cultural events, tourist attractions, and practical travel tips. The site targets general audiences interested in tourism and local culture, offering a variety of content such as event calendars, photo galleries, webcams, and maps. The business model is informational, focusing on promoting the region and supporting local tourism services. Technically, the website employs a moderate technology stack including jQuery, Google Analytics, Google Tag Manager, Google Custom Search Engine, Font Awesome icons, Flexslider for image sliders, and Elfsight Instagram feed integration. The site is served over HTTPS, includes meta tags for SEO, and is mobile responsive with basic accessibility features. Performance is moderate, with room for improvement in security headers and privacy compliance. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, and does not provide privacy or cookie policies, which are critical for GDPR compliance. The WHOIS data is unavailable or malformed, which reduces domain trustworthiness, although the website content and structure appear legitimate and focused on local tourism. Overall, the website is a functional and informative regional portal with good content quality and user experience. To improve its security posture and compliance, it should implement security headers, publish privacy and cookie policies, and provide clear contact information. Addressing these gaps will enhance trust and regulatory adherence.

The website www.fotojanout.cz is a personal photography portfolio showcasing the work of František Janout, focusing primarily on nature and landscapes of the Šumava region and various international travel destinations. The site targets photography enthusiasts and travelers interested in these regions. It operates as a small-scale personal project without commercial business registration details or contact information. Technically, the site uses basic web technologies including HTML, CSS, JavaScript with jQuery and Facebook SDK integration. It is hosted on the eStránky.cz platform and shows moderate performance and basic mobile optimization. Security posture is weak due to lack of HTTPS confirmation, missing security headers, and absence of privacy or cookie policies. No WHOIS data is available, raising concerns about domain registration legitimacy. Overall, the site is safe for general audiences but lacks professional security and privacy compliance features.

C

Coweo Technologies s.r.o.

jenhunter.cz

71

Coweo Technologies s.r.o. operates JenPráce.cz, the second largest job and gig advertising portal in the Czech Republic, specializing in recruitment advertising services since 2007. The platform targets companies seeking employees and offers a range of services including job postings, email distribution to over 550,000 registered job seekers, AI-assisted ad creation, PPC advertising, and social media promotion. The company maintains a strong market position with a large user base and extensive social media following. Technically, the website employs modern tracking and monitoring tools such as Google Tag Manager, Sentry, and Snowplow Tracker, hosted on Amazon Cloudfront CDN. The site is well-optimized for mobile devices, features good accessibility, and demonstrates solid SEO practices. Security posture is strong with HTTPS enforced and secure form handling, though explicit security headers could be more visible. Privacy compliance is robust with comprehensive privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. The company holds ISO 27001 certification, indicating a mature approach to information security management. Contact information is clearly provided, including phone, email, and physical address, enhancing business credibility. Overall, the website presents a professional, trustworthy, and secure platform for recruitment advertising in the Czech market. The absence of WHOIS data slightly reduces transparency but does not detract significantly from the site's legitimacy. Strategic recommendations include enhancing visible security headers and continuous auditing of third-party scripts to maintain security integrity.

T

The KODL Gallery

galeriekodl.cz

57

The KODL Gallery is a well-established auction house and art gallery based in Prague, Czech Republic, with a rich family tradition spanning over a century. It specializes in Czech fine art from the 19th and 20th centuries, offering auctions, exhibitions, expert consultations, and restoration services. The gallery is led by an authorized expert representing the fourth generation of the family, positioning it as a trusted and professional entity in the art auction market. The website reflects this professionalism with comprehensive content, clear navigation, and a strong digital presence including partnerships and social media engagement. Technically, the site is built on modern frameworks such as Next.js and React, optimized for performance and mobile responsiveness. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response information are not published. The absence of WHOIS data reduces domain trustworthiness slightly, but the overall business credibility remains high based on content and external validations.

The website komoraplus.cz is currently inaccessible due to a Cloudflare Turnstile security challenge page that requires human verification before access. This prevents any meaningful content analysis or extraction of business, contact, or compliance information. The domain was registered in 2020 with a Czech registrar and uses Cloudflare for DNS and security services, indicating a legitimate setup but limited public information. Due to the blocked content, no privacy policies, cookie policies, terms of service, or contact details are visible. The technical infrastructure relies on Cloudflare's security platform, but no further technology stack or CMS details are available. The security posture cannot be fully assessed beyond the presence of Cloudflare's WAF protection. Overall, the site appears to be a small business or service based in the Czech Republic but lacks publicly accessible content for deeper analysis.

V

Výzkumný ústav vodohospodářský T. G. Masaryka, veřejná výzkumná instituce

vtei.cz

50

The website www.vtei.cz represents the open access scientific journal VTEI, published by the Výzkumný ústav vodohospodářský T. G. Masaryka, a public research institution in the Czech Republic. The journal focuses on water management technical and economic information, targeting researchers and professionals in hydrology, hydrogeology, ecology, and related fields. It is recognized in international databases such as DOAJ and Scopus, indicating a reputable academic standing. The business model is based on open access publishing without fees for authors or readers, supporting knowledge dissemination in water management sciences. Technically, the website is built on WordPress CMS with Bootstrap framework and uses modern web technologies including jQuery, Shadowbox.js, and AI content generation plugins. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. Cookie consent is implemented with advanced user controls, reflecting awareness of privacy regulations. However, no explicit privacy policy or terms of service pages were found, which is a compliance gap. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. WHOIS data for the domain is unavailable, which limits domain registration verification and slightly reduces trustworthiness. Overall, the security posture is moderate with room for improvement in headers and policy transparency. The overall risk assessment is low, given the professional nature of the content and institutional backing. Strategic recommendations include publishing a comprehensive privacy policy, implementing security headers, and providing incident response contact information to enhance trust and compliance. The domain's WHOIS data absence should be investigated to ensure legitimacy and reduce potential risk.

The domain usercontent.one is registered to One.com A/S, a Danish company established in 2019. The website content is currently inaccessible, returning only a minimal 'Bad Request' HTML message, indicating that the site is either blocked, misconfigured, or under maintenance. Due to the lack of accessible content, no business description, services, or user-facing information can be derived. The domain registration data is consistent and legitimate, with no privacy protection enabled and domain status flags that protect against unauthorized changes. From a technical perspective, the website lacks any detectable metadata, scripts, forms, or external links, and no security headers or HTTPS information is available from the provided data. DNSSEC is not enabled, representing a potential security enhancement. The hosting provider is One.com A/S, consistent with the registrar information. Security posture is weak due to the absence of HTTPS, security headers, and any visible security or privacy policies. The site does not provide contact information or incident response channels, limiting trust and compliance capabilities. Overall, the site appears non-functional or blocked, resulting in a low AI score and high risk for users attempting to access it.

A

ABF a.s.

pvaexpo.cz

62

PVA Expo Praha, operated by ABF a.s., is a prominent exhibition center in Prague offering modern facilities for a wide range of events including fairs, conferences, and festivals. The website showcases upcoming events, rental services, and partner collaborations, positioning itself as a key player in the Czech exhibition market. The digital infrastructure is built on a modern tech stack including Yii framework, Vue.js, and various JavaScript libraries, providing a responsive and user-friendly experience. Security measures such as HTTPS, CSRF protection, and cookie consent mechanisms are implemented, though some advanced security headers and policies are absent. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

G

go bananas s.r.o.

gobananas.cz

49

go bananas s.r.o. is a Czech-based digital marketing and branding agency founded in 2021. The company specializes in building strong brands and delivering performance marketing solutions including creative campaigns, web development, social media management, video production, and influencer marketing. Their market position is that of a small but professional agency with a portfolio of diverse clients, emphasizing long-term partnerships and trust-building with customers. The website is built on Webflow and integrates modern technologies such as Google Analytics and Tag Manager for tracking, with a focus on responsive design and user experience. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal privacy or cookie policies, which are compliance gaps. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices to enhance user trust and regulatory adherence.

E

Přístup odepřen

egd.cz

50

The website www.egd.cz is currently inaccessible and displays an access denied message in Czech, indicating that the visitor's network has been flagged for suspicious activity or is outside the supported region. The site lacks any meaningful content, metadata, or business information, and no WHOIS data is available for the domain, suggesting possible suspension or privacy protection. Due to these factors, a comprehensive analysis of the business, technical infrastructure, and security posture is not feasible. The absence of HTTPS, security headers, privacy policies, and contact information further limits trust and credibility assessment.

W

World Standards Day

worldstandardsday.org

54

World Standards Day is an annual global event promoting awareness of the importance of international standardization to foster sustainable development and global partnerships. The website serves as an informational and advocacy platform supported by major standards organizations IEC, ISO, and ITU. It provides resources, event details, and community engagement opportunities to a broad international audience interested in standards and sustainable development goals. Technically, the site uses modern web technologies including a CMS (Jahia), Google Fonts, Usercentrics for cookie consent, and Vimeo for video content, ensuring a responsive and accessible user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response contacts are missing. Overall, the site is trustworthy, professionally maintained, and aligned with its mission, though WHOIS data is privacy protected and unavailable for detailed domain registration analysis.

Centrum rozvojových aktivit Unie zaměstnavatelských svazů ČR is a Czech non-profit employers' organization focused on supporting employer unions and social dialogue through projects, education, and development activities. The website presents a professional and consistent brand image with clear navigation and relevant content for its target audience of employers and social sector stakeholders in the Czech Republic. Technically, the site uses a traditional tech stack including jQuery, Google reCAPTCHA, and Google Analytics, hosted under a Czech registrar. Security posture is moderate with HTTPS and form protections but lacks modern security headers and uses outdated JavaScript libraries. Privacy compliance is basic with a cookie consent banner but no visible privacy policy or terms of service. Overall, the site is trustworthy and legitimate with credible partnerships but could improve in security and compliance documentation.

The website at https://mgaru.dev/lander is minimalistic and primarily serves as a placeholder or landing page with no substantive business content, contact information, or policies. It uses modern JavaScript technologies such as React and is hosted behind Cloudflare, with Google Adsense and Cloudflare Insights scripts included. The lack of privacy, cookie, or terms of service policies, combined with no visible contact or business information, results in a low trust and credibility profile. Security posture is basic with no detected security headers or advanced protections visible in the provided data. Overall, the site appears to be either under development or a parked domain with limited business activity or user engagement.

P

ProZvěřinu.cz – Zvěřina přímo od myslivců

prozverinu.cz

43

ProZvěřinu.cz is an online marketplace based in the Czech Republic that connects consumers directly with hunters to purchase high-quality game meat. The platform targets local consumers interested in nutritious, diet-friendly, and low-fat wild game meat. The business operates a niche marketplace model, facilitating direct sales and location-based searches for game meat offers. The website is built on WordPress using popular plugins for directory management and GDPR compliance, indicating a moderate level of digital maturity. The technical infrastructure includes integration with Google Maps API for enhanced user experience. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks advanced security headers and explicit incident response contacts. The absence of WHOIS registration data reduces domain trustworthiness, though the website content and compliance features suggest a legitimate operation. Strategic recommendations include improving security headers, adding clear contact and incident response information, and verifying domain registration details to enhance trust and compliance.

A

Úvodní stránka | Akademie kvality

akademiekvality.cz

60

Akademie kvality is a Czech educational platform dedicated to promoting awareness and knowledge about quality food products. The website offers a variety of content including articles, recipes, quizzes, and information about recognized food quality labels. It targets a general audience interested in food quality and healthy eating, positioning itself as a niche resource within the Czech Republic. The platform also engages users through competitions and community stories, enhancing its educational mission. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Facebook SDK, and other JavaScript libraries to provide interactive features and analytics. The site is mobile-optimized with good SEO practices and a clear navigation structure, although some accessibility features could be improved. The presence of cookie consent and privacy policies indicates attention to privacy compliance. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data limits domain registration insights, but the overall professionalism and trust signals suggest a legitimate and well-maintained site. Overall, Akademie kvality presents a solid digital presence with good content quality and privacy compliance. Strategic improvements in security headers and explicit incident response policies could further enhance its security posture and trustworthiness.

R

RybaNaTalíř.cz

rybanatalir.cz

50

RybaNaTalíř.cz is a Czech content website dedicated to promoting freshwater fish consumption through recipes, health articles, and a finder for local fishermen. The site targets Czech-speaking consumers interested in cooking and nutrition. Technically, it uses modern web technologies including JavaScript libraries like Slick Carousel and CookieYes for cookie consent management, and is hosted by REG-ZONER. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit privacy policies, terms of service, and security headers, which are areas for improvement. No contact information or incident response details are provided, limiting direct communication channels. Overall, the site is legitimate and consistent with its domain registration data, but could enhance trust and compliance by adding missing policies and security best practices.

P

Captcha - WEDOS Global Protection

poznejsvehofarmare.cz

49

The website poznejsvehofarmare.cz is currently protected by WEDOS Global Protection and presents a captcha verification page to visitors, indicating a security mechanism that restricts direct access to content. The page itself contains minimal content, primarily focused on the captcha challenge, with no visible business information, contact details, or policies. The domain is registered since 2015 with REG-ZONER and uses WEDOS name servers, consistent with the hosting and protection provider. Due to the captcha challenge, the website content is inaccessible for full analysis, limiting insights into the business and technical infrastructure. The security posture shows basic measures such as CSRF tokens and captcha but lacks advanced security headers and policies. Privacy and cookie compliance are absent on this page. Overall, the site appears safe with no adult or questionable content detected, but the blocking mechanism significantly limits the ability to assess the website's full quality and credibility.

B

Brandwave Marketing LTD

brandwavemarketing.com

62

Brandwave Marketing LTD is a specialist, award-winning sports marketing agency based in the United Kingdom, founded in 2014. The company offers a full suite of marketing services including brand strategy, creative, digital marketing, PR, and content creation, targeting the sports and outdoor industries globally. Their website demonstrates a professional digital presence with comprehensive case studies, client testimonials, and active social media engagement. Technically, the site is built on WordPress with modern plugins and tools, hosted on WP Engine, and optimized for mobile and SEO. Security posture is solid with HTTPS and GDPR compliance, though there is room for improvement in security headers and explicit incident response policies. The absence of WHOIS data reduces transparency but does not detract significantly from the overall trustworthiness given the professional content and business information presented.

R

Rhine-Ruhr 2025

rhineruhr2025.com

70

Rhine-Ruhr 2025 is the official organizer of the FISU World University Games scheduled for July 2025 across multiple German cities. The website serves as a comprehensive portal for event information, including schedules, sports, festival activities, news, and ticketing. It targets students, athletes, volunteers, media, and spectators, providing essential services such as ticket sales and volunteer coordination. Technically, the site is built on modern frameworks like Next.js and Material-UI, ensuring a responsive and visually appealing user experience. Security posture is solid with HTTPS and security headers implemented, though visible privacy and cookie policies are absent, representing a compliance gap. Overall, the site is professional and trustworthy, with legitimate WHOIS data supporting its authenticity.

Č

Česká komora architektů

ceskacenazaarchitekturu.cz

44

The website ceskacenazaarchitekturu.cz serves as the official portal for the Czech Architecture Award 2025, organized by the Czech Chamber of Architects. It showcases the best architectural realizations built in the Czech Republic over the last five years, providing information about the competition, timelines, nominees, and public voting. The site targets architects, industry professionals, and the general public interested in architecture within the Czech Republic. The business model is non-profit and focused on promoting architectural excellence and public engagement through exhibitions and awards. Technically, the website is built using modern JavaScript frameworks such as Vue.js and Nuxt.js, hosted on DigitalOcean, and integrates Google Analytics and Google Tag Manager for visitor tracking. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with preloading of scripts and responsive design elements. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, no explicit security headers were detected, and there is a lack of visible privacy and cookie policies, which are important for GDPR compliance. No vulnerability disclosures or incident response contacts are provided, indicating room for improvement in security transparency and user trust. Overall, the website is professional and trustworthy, with consistent branding and relevant content. The domain registration data aligns well with the business purpose and history, supporting legitimacy. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, enhancing accessibility, and publishing vulnerability disclosure and incident response information to strengthen security posture and compliance.

R

Regiony nás baví

regionynasbavi.cz

49

Regiony nás baví is a Czech regional event promotion website established in 2020, focusing on cultural and social activities within the Czech Republic. The platform targets the general public interested in local events and community engagement. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern and SEO-optimized infrastructure. Hosting is provided by Active24, with content delivery enhanced by Cloudfront CDN and Google Fonts integration. Security posture is solid with HTTPS enforced and multiple security headers present, though formal security policies and incident response contacts are absent. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies and an active consent mechanism. Overall, the website presents a professional and trustworthy front with moderate tracking and good user experience.

L

LA TAUPE, s.r.o.

lataupe.cz

55

LaTaupe is a Czech creative studio specializing in brand construction, graphic design, AI consulting and implementation, web design, and production services. The company targets businesses seeking comprehensive marketing and digital transformation solutions, including AI integration. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site uses modern JavaScript libraries like jQuery and Google Tag Manager, and implements cookie consent mechanisms compliant with GDPR. Security posture is good with HTTPS enforced and form validation, though some security headers are missing and no incident response policy is published. The absence of WHOIS data raises concerns about domain legitimacy, but the professional presentation and business details mitigate risk. Overall, the site is well-structured, user-friendly, and trustworthy for its business domain.

K

Konfederace zaměstnavatelských a podnikatelských svazů České republiky

kzps.cz

44

Konfederace zaměstnavatelských a podnikatelských svazů České republiky (KZPS) is the largest employer and business association in the Czech Republic, representing 140 member associations and over 23,000 entities with approximately 1.75 million employees. The organization advocates for its members' interests in legislative matters and participates actively in tripartite negotiations. The website reflects a professional and consistent brand presence, targeting employers and business associations within the Czech market. Founded in 2003, KZPS has a well-established market position and a comprehensive digital presence.

E

European Entrepreneurs CEA-PME

european-entrepreneurs.org

61

European Entrepreneurs CEA-PME is a Brussels-based confederation representing over 1.5 million SMEs and Mid-Caps across Europe. Founded in 1992, it advocates for favorable business conditions, promotes entrepreneurship and innovation, and facilitates networking and access to funding. The organization actively participates in EU-funded projects and maintains a strong presence in European business policy discussions. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and reCAPTCHA for security and analytics. The security posture is solid with HTTPS and consent mechanisms, though additional security headers could enhance protection. The WHOIS data is incomplete, limiting domain trust verification, but the professional site and active social media presence support legitimacy. Overall, the website is well-designed, content-rich, and trustworthy, serving as a credible resource for European SMEs.

The website allegro.cz is currently inaccessible due to an active security challenge implemented via captcha-delivery.com, which acts as a WAF or bot protection mechanism. This prevents access to any meaningful content, including business information, policies, or contact details. The domain is registered since 2017 with name servers linked to allegro.pl, suggesting it is a regional extension of the Allegro brand, a known e-commerce platform in Poland. However, due to the content block, no direct business or marketing information could be extracted. From a technical perspective, the site employs third-party bot mitigation services but lacks visible metadata, structured data, or security headers in the provided HTML snippet. The absence of accessible content limits the ability to assess SEO, accessibility, or performance. No forms or user input fields are present in the accessible content. Security posture cannot be fully evaluated due to the content block, but the presence of a WAF indicates some level of security awareness. No privacy or cookie policies were detected, which may be present on the actual site but are inaccessible. The WHOIS data shows a domain age consistent with a legitimate business presence, with name servers pointing to the Allegro Polish infrastructure. Overall, the site’s risk assessment is limited by the lack of accessible content. The domain appears legitimate but the inability to analyze content or policies reduces confidence. Strategic recommendations include enabling access for security assessments, publishing clear privacy and cookie policies, and ensuring transparency of contact and business information.

Z

Sport Šumava | Půjčovna, servis, biková škola

zadov.cz

57

The website www.sportsumava.cz appears to be a sports or outdoor activity related site hosted on the Wix platform. The site uses Wix's Thunderbolt framework and includes third-party tracking scripts such as Facebook Pixel and Smartlook for analytics and user behavior tracking. However, the site lacks visible business information, contact details, and privacy or cookie policies, which limits its transparency and trustworthiness. The WHOIS data is unavailable, suggesting privacy protection or domain registration issues, which further impacts the legitimacy assessment. Technically, the site is moderately optimized for mobile devices but lacks important security headers and comprehensive privacy compliance features. Overall, the site presents a basic digital presence with significant room for improvement in security, privacy, and business credibility.

The website at nmds.pro is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any meaningful content. There is no visible business information, contact details, or compliance documentation available on the site. The WHOIS data is minimal and does not provide creation or expiry dates, with the registrar identified as Identity Digital Inc., a known privacy service provider. Due to the lack of accessible content and transparency, the website's business purpose and legitimacy cannot be determined. Technically, the site uses Google Fonts but lacks any detectable CMS, frameworks, or security headers. The absence of HTTPS information and security policies indicates a poor security posture. Overall, the site is effectively blocked from analysis, resulting in a low trust and credibility score.

Č

Český olympijský tým

olympijskytym.cz

54

The website 'Český olympijský tým' serves as the official online presence for the Czech Olympic team, providing comprehensive information about Olympic games history, athlete profiles, educational projects, and related sports initiatives. It targets Czech sports enthusiasts, athletes, educators, and youth, positioning itself as an authoritative source for Olympic-related content in the Czech Republic. The site offers key services including news updates, educational materials, video content, and promotion of Olympic values and events. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and integrates popular analytics and tracking tools including Google Analytics, Facebook Pixel, and Hotjar. It demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. The site uses asynchronous script loading and font loading optimizations to enhance performance. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes essential security headers like Content-Security-Policy and Strict-Transport-Security. No vulnerabilities or exposed sensitive data were detected in the analyzed content. However, the absence of visible privacy and cookie policies, as well as lack of explicit contact information for security incidents, indicates areas for improvement in compliance and transparency. Overall, the website presents a low-risk profile with strong branding and professional content. Strategic recommendations include implementing clear privacy and cookie policies, publishing vulnerability disclosure information, and providing explicit contact channels for security and privacy concerns to enhance trust and compliance.