Medium-risk security reports

The website zahulimeuvidime.cz operates as a Czech-language online casino informational and affiliate platform, providing detailed reviews, bonus offers, and guides related to new Czech online casinos in 2025. It targets adult Czech players interested in gambling, offering a curated selection of casino brands and payment methods. The business model focuses on affiliate marketing and content provision within the gambling sector. Technically, the site is built on WordPress, leveraging modern JavaScript libraries such as jQuery, Swiper, and Tippy.js, and is hosted behind Cloudflare, ensuring reasonable performance and mobile optimization. Security posture is moderate with HTTPS enforced, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. WHOIS data raises concerns due to a future domain creation date, which impacts trustworthiness. Overall, the site is functional and content-rich but would benefit from enhanced transparency and security practices.

The website aviator-stavki.com is a small-scale affiliate and informational platform focused on the Aviator online gambling game. It provides gameplay descriptions, strategies, and multiple affiliate links to external gambling sites offering bonuses and real money play. The site targets Russian and Kazakh speaking adult gamblers interested in online casino games. Technically, it is built on WordPress with jQuery and integrates third-party iframe content from SlotsLaunch. The domain is very new, registered in December 2023, consistent with the site's recent launch. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy and compliance documentation such as privacy policy, cookie policy, and terms of service are absent, which is a compliance gap. No contact or incident response information is provided, limiting trust and transparency. Overall, the site is functional but basic in content quality and security maturity.

BitQT.app presents itself as an automated cryptocurrency trading platform targeting individuals interested in leveraging Bitcoin and other cryptocurrencies for profit. The website offers user registration forms collecting personal data and provides a profit calculator tool to entice potential users. The platform claims high accuracy and awards but lacks verifiable certifications or detailed company information. Technically, the site uses common JavaScript libraries and is moderately optimized for mobile and SEO. Security posture is average with no visible advanced security headers or incident response policies. Privacy compliance is minimal with a privacy policy present but no cookie consent mechanism. Overall, the site appears functional but lacks transparency and robust security measures, which may impact user trust.

Mostbet Casino CZ is a regional affiliate website promoting the international Mostbet gambling platform, which operates under a Curaçao license since 2009. The site offers detailed information about casino games, bonuses, and registration instructions targeting Czech-speaking users. Technically, the site is built on WordPress with standard SEO plugins and uses Cloudflare DNS. Security posture is moderate with HTTPS enabled but lacks advanced DNS security and published security policies. No privacy or cookie policies were found, indicating compliance gaps. The domain is newly registered in 2023, consistent with an affiliate marketing strategy rather than the main corporate site. Overall, the site provides good content quality and user experience but requires improvements in privacy compliance and security transparency.

The website shark.services is currently inaccessible, returning a 403 Forbidden error page that blocks any content access. Due to this, no business information, contact details, or policies are available for review. The domain is registered with Gransy, s.r.o., a Czech registrar, and the domain age is consistent with a business founded in 2020. Hosting is provided by cesky-hosting.cz. The lack of accessible content severely limits the ability to assess the company's market position, services, or technical maturity. Security posture is minimal with no security headers or DNSSEC enabled, and privacy compliance is absent due to missing policies. Overall, the site appears to be either under maintenance, restricted, or improperly configured for public access.

TSS Group is a well-established Slovak company specializing in the distribution and provision of security technologies, including object security, vehicle security, and GPS monitoring. The company targets security professionals and businesses requiring advanced security solutions, positioning itself as a regional leader with a comprehensive product portfolio and client support services. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern JavaScript libraries, a CMS named BUXUS, and integrates Google Tag Manager for analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied, but lacks explicit security headers and incident response information. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and business credible, with room for improvement in security and privacy transparency.

The website cool-shop.eu is currently inaccessible, returning a 404 Not Found error page with no visible content or metadata. The domain is registered through Gransy s.r.o., a registrar company, but no further business information or digital assets are available. Due to the lack of accessible content, no meaningful assessment of the company's business model, services, or market position can be made. Technically, the site runs on nginx 1.26.1 but lacks any detectable CMS, frameworks, or modern web technologies. Security posture cannot be evaluated due to absence of security headers, SSL information, or policies. Overall, the site appears inactive or misconfigured, resulting in a very low trust and credibility rating.

Estate Awards is a Czech Republic-based transparent competition focused on recognizing excellence in real estate development and technological projects. Organized by Premium Media Group and the ESTATE magazine, it aims to cultivate the development market and promote growth. The website serves as a platform for project nominations, results, galleries, and partnership information, targeting developers, architects, and industry professionals. The business holds a respected position within the Czech real estate sector, supported by partnerships with key industry associations.

Marina Dock is a specialized Czech company focused on the sale and servicing of luxury boats, motors, and water scooters. Established in 2014, it operates primarily in the Czech Republic, offering a comprehensive range of products and services including new and used boats, full-year servicing, captain certification courses, boat storage, and financing. The company positions itself as a trusted family-run business with exclusive partnerships with leading marine brands, catering to boating enthusiasts seeking quality and reliability. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, enhanced by modern JavaScript libraries such as Swiper.js and jQuery. SEO is managed via Rank Math, and the site is hosted likely on a Czech hosting provider (Websupport). The site demonstrates good mobile optimization and moderate performance, with structured data implemented for enhanced search visibility. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks some advanced security headers and explicit incident response or security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, Marina Dock presents a professional and trustworthy online presence with solid business and technical foundations. Strategic improvements in security headers, cookie consent, and incident response disclosures would further strengthen its security posture and compliance.

The website www.evselect.cz operates as a specialized e-commerce platform focused on electric vehicle (EV) charging solutions, including AC and DC charging stations, cables, adapters, and photovoltaic components. It targets customers in the Czech Republic interested in electromobility products. The business model is a niche online retail store leveraging the Shoptet e-commerce platform, positioning itself as a dedicated supplier in the EV charging market segment. The site presents a professional and consistent brand image with clear navigation and relevant product offerings.

CEMS Entrepreneurs is a niche community platform dedicated to supporting CEMS students and alumni (CEMSIes) on their entrepreneurial journey. The website offers community engagement and entrepreneurial support services tailored to this specific educational audience. The business model focuses on fostering entrepreneurship within the CEMS network, positioning itself as a specialized support hub. Technically, the website is built on the Softr.io platform using Bootstrap, Font Awesome, and Google Fonts, delivering a modern and mobile-optimized user experience. However, the site lacks advanced SEO and accessibility features and does not disclose hosting provider details. Security posture is basic, with no detected security headers or privacy policies, and the SSL configuration could not be verified. The absence of WHOIS registration data for the domain raises concerns about legitimacy and trustworthiness. Overall, the site is functional and professionally designed but requires improvements in security, privacy compliance, and business transparency to enhance trust and compliance.

The website www.cems35th.org serves as a dedicated microsite celebrating the 35th anniversary of CEMS, a global alliance in management education. It highlights the history, values, and community spirit of CEMS, targeting students, academic and corporate partners, and alumni. The site is content-rich with thematic monthly celebrations and provides links to official CEMS social media channels, reinforcing its role as a community engagement platform. Technically, the site is built on the Create.net CMS platform, utilizing standard web technologies such as jQuery, Google Analytics, and Font Awesome. It demonstrates moderate performance and good mobile optimization but lacks advanced accessibility and SEO features. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks important security headers and formal security policies. Privacy compliance is basic, with a privacy policy linked externally but no cookie consent mechanism or GDPR indicators on the site. The absence of WHOIS data limits domain trust verification, though the content and external references suggest legitimacy. Overall, the site is professionally designed and functional but could improve in security and privacy compliance to enhance trust and regulatory adherence.

Bee Content Design, Inc. operates a technology-focused platform likely centered on content and email design tools, as indicated by the branding and login/signup prompts. The website content provided is a 404 error page, limiting direct insight into full service offerings. The company is a small-sized entity founded in 2024 and is part of the Growens group, suggesting a startup or newly launched service. The technical infrastructure uses modern web fonts and responsive design, hosted under Amazon Registrar with AWS DNS servers, but lacks advanced SEO and security headers. Security posture is basic with no DNSSEC and no visible security policies or headers, though HTTPS is implied but not confirmed from the data. Contact information is limited to an abuse email, with no privacy or cookie policies found, indicating compliance gaps. Social media presence is robust across major platforms, supporting marketing and community engagement. Overall, the site is functional but incomplete, with room for improvement in security, compliance, and content completeness.

The Positive Impact Rating website is an educational platform focused on transforming business schools by promoting sustainability and collaboration. It offers a rating system aimed at encouraging positive impact through business education. The site is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard polyfills, indicating a moderate level of technical maturity. The website is mobile-optimized and uses HTTPS, ensuring secure communication. However, it lacks visible privacy and cookie policies, as well as contact information, which are important for user trust and regulatory compliance. The WHOIS data is unavailable or privacy protected, which is common for small organizations but slightly reduces trustworthiness. Overall, the site presents a professional image with good content quality but would benefit from enhanced privacy and security disclosures.

NAM Slovakia s.r.o., a subsidiary of NAM system, a.s., operates the 1Box platform providing advanced hardware and software solutions for modern monitoring centers. The company targets security agencies, municipal police, fire departments, and industrial enterprises, offering integrated monitoring, call recording, and dispatch management tools. With over 250 dispatch centers using their technology, NAM Slovakia holds a solid market position in the security technology sector in Slovakia. The website reflects a professional B2B business model with clear service offerings and active content updates. Technically, the site is built on WordPress with modern plugins and analytics tools, showing good digital maturity and mobile optimization. Security posture is strong with HTTPS, DNSSEC, and cookie consent mechanisms, though additional security headers and policies could enhance protection. Overall, the domain registration data aligns well with the business profile, supporting legitimacy and trustworthiness.

NAM system, a.s. is a Czech-based company specializing in advanced monitoring technologies for vehicles, objects, and personal safety. With over 35 years of experience, the company offers a range of products including vehicle fleet management, alarm monitoring for buildings, personal emergency call systems, and waste management technology. Their market position is that of an established, trusted provider in the monitoring technology sector, targeting businesses and organizations requiring security and operational oversight solutions. The website reflects a professional and consistent brand image with good content quality and clear navigation.

Protektor.de is a well-established German manufacturing company specializing in the development and production of building profiles and modern construction solutions. The company positions itself as a market leader in Europe, serving construction professionals, craftsmen, and industry partners with a broad product portfolio and innovative services including a loyalty program and mobile app. The website is professionally designed, multilingual, and rich in relevant content, reflecting a mature digital presence. Technically, the site is built on WordPress with modern libraries such as jQuery, Select2, and Swiper.js, and employs best practices including HTTPS, cookie consent management, and SEO optimization. Performance and mobile responsiveness are good, supporting a positive user experience. From a security perspective, the website enforces HTTPS, uses security headers, and avoids exposing sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not published, representing areas for improvement. Analytics usage is moderate with Google Tag Manager, balanced with privacy compliance via cookie consent. Overall, the website demonstrates a strong business credibility and technical maturity with a security posture that is good but could be enhanced by publishing formal security and incident response documentation. No blocking or WAF challenges were detected, allowing full content analysis.

Hauer is a German-based company specializing in the supply and distribution of elevator spare parts across Germany and Europe. Their website offers a catalog of over 15,000 parts from more than 50 manufacturers, targeting businesses and individuals in the elevator maintenance and repair sector. The company positions itself as a reliable supplier with fast delivery across multiple European countries. Technically, the website is built on WordPress using the Avada theme and incorporates SEO best practices via the Yoast SEO plugin. The site is moderately optimized for performance and mobile devices, providing a good user experience. However, there is a lack of visible privacy and cookie policies, and no explicit contact information was found in the provided content. Security posture is minimal with no detected security headers or incident response information, indicating room for improvement in compliance and security maturity. Overall, the website is functional and professional but would benefit from enhanced security and privacy measures to improve trust and compliance.

Patrick Linke's website serves as a professional portfolio for a voice-over artist specializing in services such as off-voice, advertising voice, synchronization, and moderation primarily targeting German-speaking countries including Germany, Austria, and Switzerland. The site showcases audio and video samples, leveraging modern WordPress technologies and plugins like Oxygen Builder and Yoast SEO to provide a good user experience and SEO optimization. The business operates as a small entity within the media industry, focusing on niche voice-over services. Technically, the website is well-structured, mobile-optimized, and uses HTTPS with appropriate security headers, indicating a solid security posture. However, the absence of explicit privacy and terms of service policies, as well as lack of direct contact emails or phone numbers, slightly reduces privacy compliance and business credibility scores. Overall, the site is professional and trustworthy but would benefit from enhanced privacy disclosures and clearer contact information.

inovex GmbH is a well-established German IT project house specializing in digital transformation services. With over 25 years of experience and a workforce of approximately 500 employees across eight locations, inovex offers a broad portfolio including software projects, data and AI solutions, infrastructure projects, digital strategy consulting, and product development. The company also operates an academy providing technology training. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to business clients seeking IT and digital transformation services. Technically, the site is built on WordPress with modern plugins and optimizations, hosted via Gandi.net, and demonstrates good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies could be more visible. Overall, inovex presents a trustworthy and credible business with strong branding and compliance adherence.

Berghof GmbH is a medium-sized, family-owned technology company based in Germany, operating through seven specialized subsidiaries. The company focuses on innovation and knowledge exchange across diverse disciplines, offering products and services in mobility and transport, filtration, industrial applications, laboratory and light measurement technology, environmental solutions, and service & support. Their market position is strong within these sectors, supported by a professional and comprehensive online presence. Technically, the website is built on TYPO3 CMS, uses modern web technologies, and implements Google Analytics and Tag Manager for data collection. The site is well-optimized for mobile and SEO, with good accessibility features. Security posture is solid with HTTPS enforced and cookie consent management in place, though some security headers are missing and no explicit security policy or incident response contacts are published. WHOIS data is unavailable, which is unusual but the website content and linked subsidiary domains strongly support legitimacy. Overall, the website is professional, secure, and compliant with GDPR, serving a business audience effectively.

Marek HOŘAVA is a specialized wedding cinematographer offering high-quality cinematic wedding films primarily targeting couples planning their weddings. The business operates as a small entity based in the Czech Republic with a focus on authentic and timeless wedding storytelling. The website demonstrates a professional portfolio with rich multimedia content, client references, and a blog to engage visitors. Technically, the site is built on WordPress with modern plugins and frameworks, providing a good user experience and mobile optimization. However, the absence of explicit privacy and cookie policies and missing security headers indicate areas for compliance and security improvement. The WHOIS data is unavailable, which slightly reduces trustworthiness but the active social media presence and professional content support legitimacy. Overall, the business appears credible and well-positioned within its niche market.

Agentura Velryba is a Czech Republic based event production and management company with over 20 years of experience, specializing in concerts, festivals, and tailored corporate events. The company maintains a professional online presence with clear branding, client references, and comprehensive contact information. Their website demonstrates a moderate to good level of digital maturity, utilizing modern JavaScript libraries, Google Analytics, and cookie consent mechanisms to comply with privacy regulations. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers and policies could be improved. Overall, the business appears legitimate, well-established, and trustworthy within its hospitality sector niche.

SonicWall is a well-established cybersecurity company offering a broad range of network security, email security, and managed security services. Their platform is designed to support managed service providers (MSPs), partners, and enterprises, including government agencies, with scalable and intelligent cybersecurity solutions. The website reflects a mature digital presence with comprehensive product offerings and resources tailored to their target audience. Technically, the site leverages modern web frameworks such as Next.js and React, integrates multiple analytics and marketing tools, and maintains good performance and mobile optimization. Security-wise, the site enforces HTTPS, employs standard security headers, and provides detailed privacy and legal policies, although it lacks a dedicated security policy or vulnerability disclosure page. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's legitimacy given the professional presentation and brand consistency. Overall, SonicWall's website demonstrates a strong digital and security posture appropriate for an enterprise cybersecurity vendor.

Connectum s. r. o. is a Czech-based ICT and telecommunications service provider specializing in comprehensive IT infrastructure management, virtual PBX and SIP trunk telephony solutions, and business internet connectivity. The company targets business customers seeking reliable and professional ICT and communication services. Their market position is supported by partnerships with major technology vendors such as Dell, where they hold Platinum Partner status, indicating a strong vendor relationship and technical competence. The website is professionally designed, mobile-optimized, and provides clear contact information, enhancing business credibility. From a technical perspective, the website employs modern JavaScript libraries including jQuery and integrates Google Analytics for user tracking. The site is responsive and well-structured, though accessibility features are basic and SEO optimization is minimal. Security posture is moderate with HTTPS usage implied, but lacks explicit security headers and formal privacy or cookie policies. No forms or user data collection mechanisms are present beyond analytics tracking. Security evaluation reveals no critical vulnerabilities or exposed sensitive data; however, the absence of WHOIS registration data is a concern for domain legitimacy and trust. The website does not provide privacy, cookie, or terms of service policies, which impacts compliance with GDPR and related regulations. Overall, the site is safe and business-appropriate but would benefit from enhanced transparency and security best practices. Strategically, Connectum should prioritize establishing clear privacy and cookie policies, implement security headers, and verify domain registration details to improve trustworthiness. Enhancing accessibility and SEO would also support broader market reach and compliance.

VÖPE Next is a young, motivated association of next-generation project developers in Austria focused on sustainable and innovative real estate development. The organization aims to foster networking, knowledge exchange, and cultural change within the industry. Their website is professionally designed using WordPress and Elementor, featuring event information and news updates. Technically, the site uses modern web technologies and is mobile optimized, with Google Analytics and reCAPTCHA integrated for analytics and security. Security posture is good with HTTPS and bot protection, but lacks explicit security headers and formal privacy or cookie policies. Overall, the domain registration is consistent with the business claims, indicating legitimacy. The site is safe for general audiences and does not contain adult or questionable content.

Rabbithole LTD is a small UK-based design studio specializing in strategic website design, web development, and graphic design services. Established in 2019, the company operates primarily from Leeds and Glasgow, targeting businesses seeking expert design and development solutions. The website reflects a professional and consistent brand image with clear service offerings and a focus on strategic creative work. Technically, the website is built on WordPress and employs modern web technologies including JavaScript and video media. It integrates Google Analytics for user tracking and Mailchimp for marketing communications. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Hosting and domain registration are consistent with the business location and claims. From a security perspective, the site uses HTTPS with an excellent SSL configuration but lacks visible security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. Privacy policy is present and GDPR compliance is indicated, but incident response and security policies are not published. Overall, Rabbithole presents a trustworthy and professional online presence with moderate technical maturity and a solid business credibility score. Strategic improvements in security headers and privacy consent mechanisms would further strengthen their security posture and compliance standing.

The website atomic.com is currently inaccessible due to a PerimeterX Web Application Firewall (WAF) security challenge page that denies access to the actual content. This prevents any direct analysis of the business offerings, contact information, or detailed technical infrastructure. The domain itself is well-established, having been registered since 1994, and is managed by a reputable registrar with multiple domain status protections in place. However, DNSSEC is not enabled, which is a minor security gap. The visible page is minimal and only serves as a bot mitigation mechanism, indicating a strong security posture in terms of access control but limiting transparency. Due to the blocking, no privacy, cookie, or terms of service policies are detectable, nor are any contact details or business descriptions. The site does not expose any sensitive data or vulnerabilities on the accessible page, but the lack of accessible content results in a low overall AI score and limited insights.

Art Company is a Czech Republic-based creative and production studio specializing in advertising, video production, photography, web development, and marketing services. The company presents itself as a passionate and creative team focused on delivering high-quality content and solutions for its clients. Their portfolio showcases diverse projects, indicating a solid market presence in the creative media sector. The website is built on WordPress with modern web technologies, providing a good user experience and mobile optimization. However, the site lacks privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is moderate with HTTPS and reCAPTCHA implemented, but missing security headers and no explicit security policies reduce the overall security maturity. Contact information is clearly provided, enhancing business credibility.

The website pvc-folie.cz operates as an e-commerce platform specializing in the sale of plastic films such as PVC, PET, and their laminates, targeting businesses involved in packaging, printing, and manufacturing. It offers a range of branded products and custom cutting services, positioning itself as a specialized supplier with significant stock availability. The site is built on the Shoptet e-commerce platform, utilizing technologies like jQuery and Facebook SDK, and incorporates standard e-commerce features including secure login and shopping cart functionalities. The website is accessible, mobile-optimized, and provides clear navigation and contact information, although some advanced accessibility features are basic. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, which are positive indicators. However, it lacks visible security headers such as Content-Security-Policy and cookie consent mechanisms, which are important for GDPR compliance and enhanced security posture. The absence of WHOIS data for the domain raises concerns about transparency and trustworthiness, although the professional presentation and platform usage mitigate some risks. Tracking includes Facebook Pixel and Google Analytics GA4, indicating moderate user tracking. Overall, the website demonstrates a moderate to good level of technical maturity and business credibility but would benefit from improved privacy compliance and security hardening. The lack of WHOIS data and security policies are notable gaps that should be addressed to enhance trust and compliance.

The website machara.cz is a personal portfolio site for František Machara, a Czech author and musician. It showcases his life stories, short stories, song lyrics, and demo music tracks, targeting an audience interested in Czech language literature and blues rock music. The site is small-scale, non-commercial, and serves as a creative outlet and contact platform. Technically, the site uses basic HTML, CSS, and JavaScript with jQuery, hosted on Websupport servers. It is moderately optimized for mobile and SEO but lacks advanced CMS or frameworks. Security posture is minimal with no published policies or security headers, and no analytics or tracking scripts are present, indicating a privacy-conscious but basic setup. The domain is well aged and consistent with the personal nature of the site, enhancing trustworthiness. Overall, the site is safe, professional, and functional but would benefit from improved privacy and security practices.

Okresní fotbalový svaz Uherské Hradiště is a regional football association serving the Uherské Hradiště district in the Czech Republic. The organization focuses on managing local football competitions, youth training programs, and official communications for clubs and stakeholders within the region. The website serves as an information hub for news, official announcements, and contact details relevant to the football community. The business operates as a non-profit sports association with a clear local focus and a small organizational size. Technically, the website is built on WordPress 5.9.10, utilizing common plugins such as Yoast SEO for search engine optimization and TablePress for tabular data. The site uses jQuery and FontAwesome for UI elements and includes a Google Analytics plugin (MonsterInsights) which is currently not configured. The site is mobile-optimized with good navigation and basic accessibility features. Performance is moderate, with room for improvement in technical SEO and accessibility. From a security perspective, the site enforces HTTPS but lacks important security headers such as Content-Security-Policy and X-Frame-Options. The absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. No incident response or security policy information is provided. The Google Analytics plugin is installed but not configured, which may affect data collection and privacy compliance. Overall, the security posture is moderate but could be enhanced by implementing recommended headers and policies. The overall risk assessment is low to moderate given the nature of the organization and the website's content. Strategic recommendations include adding privacy and cookie policies, configuring analytics properly, implementing security headers, and maintaining regular updates. These steps will improve compliance, security, and user trust while supporting the organization's mission effectively.

Okresní fotbalový svaz Zlín is a regional football association in the Czech Republic responsible for organizing football competitions, managing official communications, and supporting local football clubs and referees. The website serves as an information hub for schedules, official announcements, and contact directories, targeting football stakeholders in the Zlín district. The business operates as a non-profit entity within the government and sports sector, focusing on community sports development. Technically, the website is built on WordPress 6.7.2 with common plugins for galleries and UI enhancements. It uses HTTPS and Google Fonts, with jQuery as a JavaScript library. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. However, it lacks advanced security headers and privacy compliance mechanisms such as cookie consent and privacy policies. From a security perspective, the site enforces HTTPS but does not implement additional security headers or vulnerability disclosure mechanisms. No analytics or tracking scripts were detected, indicating minimal user tracking. Contact information is clearly provided, but the absence of privacy and cookie policies presents compliance risks under GDPR. WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. Overall, the website is professional and trustworthy for its intended audience but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence.

Eurogreen is a Czech-based company specializing in professional care for lawns and greenery, offering seeds, fertilizers, and garden, municipal, and agricultural machinery. The company targets both business and consumer markets within the Czech Republic, positioning itself as a reputable regional supplier with recognized brands such as ISEKI and OREC. The website is built on WordPress using the Divi theme, incorporating modern web technologies and SEO best practices, including structured data and Google Tag Manager for analytics. Security posture is solid with HTTPS and security headers implemented, though there is room for improvement in publishing explicit security policies and incident response information. The absence of WHOIS data reduces domain transparency, which slightly impacts trustworthiness. Overall, the website is professional, accessible, and compliant with GDPR, making it a credible digital presence for Eurogreen.

M trade is a Czech-based company specializing in wholesale and retail sales of sports goods, operating an e-commerce platform targeting customers primarily in the Czech Republic. The company is an authorized partner of several recognized sports brands, indicating a stable market position within the regional sports retail sector. The website is professionally designed with clear navigation and content relevant to its business model, supporting both wholesale and retail customers. Technically, the site leverages the Shoptet e-commerce platform, integrates common analytics and marketing tools such as Google Analytics and Facebook SDK, and enforces HTTPS for secure communications. Privacy compliance is addressed with a comprehensive privacy policy and cookie consent mechanism, aligning with GDPR requirements. However, the absence of WHOIS data raises concerns about domain registration transparency, which could impact trustworthiness. Security posture is generally good, but the site lacks explicit security policies and incident response contacts, which are recommended for enhanced trust and compliance. Overall, the website presents a professional and secure front for its business, with room for improvement in transparency and security disclosures.

The website www.webkrom.cz is currently under reconstruction, providing minimal content with a clear notice and basic contact information including a phone number and email address. The site uses WordPress CMS with WooCommerce and Elementor plugins, indicating an e-commerce or business intent, but no active business content or services are currently presented. The technical infrastructure is modern with HTTPS enabled and integration of Google AdSense and tracking tools, but lacks advanced security headers and privacy policies. The absence of WHOIS data raises concerns about domain registration legitimacy and trustworthiness. Overall, the site is in an early or transitional phase with limited business presence and low content maturity.

The website eztraty.cz operates as a national lost and found database service in the Czech Republic, offering users the ability to search for lost items and register found items. It also provides a service called Vrátilka to help users protect their belongings. The platform targets the general public as well as businesses and municipalities, positioning itself as a key national resource for lost and found management. The site includes social media integration and corporate access portals, indicating a structured approach to service delivery. Technically, the site leverages Google Fonts, Google Maps API, and Google Adsense for fonts, mapping, and advertising respectively, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and cookie consent mechanisms, but lacks advanced security headers and explicit privacy or security policies. WHOIS data is unavailable, which limits domain trust assessment and reduces overall business credibility. The site is accessible without WAF or blocking mechanisms, and content is safe for general audiences.

UK Green Building Council (UKGBC) is a well-established non-profit organization founded in 2006, dedicated to transforming the sustainability of the built environment in the UK. The website serves as a comprehensive resource hub for industry professionals, policymakers, and sustainability advocates, offering educational content, policy advocacy, and collaborative forums focused on net zero carbon buildings, circular economy, and climate resilience. The organization positions itself as a leading voice in the UK's sustainable building sector, supported by a membership-driven model and extensive industry engagement.

GlobalABC is a well-established international alliance dedicated to promoting zero-emission, efficient, and resilient buildings and construction sectors worldwide. The organization serves as a collaborative platform for governments, private sector entities, civil society, research institutions, and intergovernmental organizations. Their website reflects a professional and content-rich platform offering resources, reports, and engagement opportunities to its diverse global audience. Technically, the site is built on Drupal 10, uses Cloudflare DNS services, and integrates Google Tag Manager for analytics, indicating a modern and maintainable infrastructure. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy and cookie policies are notably absent, which impacts compliance and user trust. Overall, the site is accessible, well-branded, and trustworthy, with room for improvement in privacy compliance and DNS security.

The Royal Institution of Chartered Surveyors (RICS) is a globally recognized professional body specializing in land, real estate, construction, and infrastructure standards. Established in 1868 and headquartered in the United Kingdom, RICS provides accreditation, training, and professional standards to surveying professionals worldwide. The organization maintains a strong market position as a leader in real estate and surveying sectors, serving a broad audience of industry professionals. Technically, the website employs modern web technologies including Bootstrap 5 and standard web security practices such as HTTPS enforcement and comprehensive security headers. The site is well-optimized for mobile devices and accessibility, providing a professional user experience with clear navigation and rich content. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting good compliance with GDPR. From a security perspective, the site demonstrates a mature posture with no detected vulnerabilities or exposed sensitive data. However, it lacks a dedicated security policy or incident response page, which could enhance transparency and readiness. The WHOIS data is unavailable due to privacy protection, which is justified for an organization of this nature. Overall, the site is trustworthy and professionally maintained. The risk assessment is low with no critical issues detected. Strategic recommendations include publishing explicit security and incident response policies and considering a vulnerability disclosure program to further strengthen trust and security culture.

SpecStudio is a UK-based independent consultancy specializing in architectural specification writing, BIM support, and Golden Thread-compliant specifications. Founded in 2022, the company serves architects and design professionals both in the UK and internationally, positioning itself as a trusted partner in the niche market of specification consultancy. The website reflects a professional and modern digital presence, leveraging WordPress CMS with advanced SEO and analytics integrations. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and headers. Overall, the business demonstrates strong credibility and digital maturity with clear contact channels and client testimonials.

Woodalls is a London-based design and workplace solutions company serving clients across Europe. They focus on delivering world-class workplace environments through a structured six-stage process emphasizing sustainability and ESG principles. The website is professionally designed using Squarespace, featuring multimedia content such as client reference videos and case studies. The technical infrastructure is modern but limited by the platform's constraints, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks several important security headers, and no advanced anti-bot measures are observed. Privacy and cookie policies exist but lack comprehensive consent mechanisms. Contact information is clearly provided, enhancing business credibility. WHOIS data is missing, which raises some concerns about domain registration transparency but does not detract from the professional presentation of the site.

Bogle Architects Ltd is a small, creative architectural firm founded in 2012 and based in London, UK. The company focuses on progressive and innovative architectural design, serving clients seeking imaginative building solutions. Their market position is that of a niche, award-recognized design consultancy within the real estate sector. The website is professionally designed using the Squarespace platform, featuring good content quality and clear contact information. Technically, the site uses modern web technologies including Google Analytics and Typekit fonts, with moderate performance and good mobile optimization. Security posture is moderate; while HTTPS is presumably enabled, no explicit security headers were detected, and no incident response or security policy information is provided. Privacy compliance is basic, with a cookie consent banner and minimal privacy policy content. The WHOIS data for the domain is missing, which raises some concerns about domain registration legitimacy, although the website content and contact details appear professional and trustworthy. Overall, the site scores well in content and business credibility but should improve security and privacy transparency.

Michaelis Boyd is a well-established architecture and interior design firm operating internationally from London and New York. The company specializes in creating thoughtful, nature-inspired spaces across residential, hospitality, and private club sectors. Their portfolio includes heritage restorations and luxury new builds, positioning them as a premium service provider in the design industry. The website reflects a professional and modern digital presence, leveraging technologies such as React, fullPage.js, and Google Analytics, hosted on WP Engine with Cloudflare DNS services. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks advanced security headers and published policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data supports the legitimacy and longevity of the business. Strategic improvements in privacy disclosures and security headers would enhance trust and compliance.

Chetwoods Architects is a medium-sized, award-winning architectural practice based in the United Kingdom with offices in London and Birmingham. The firm focuses on embedding creativity, sustainability, and technology in its architectural projects across various sectors including commercial, education, healthcare, residential, and industrial. Their market position is strong within the architectural industry, supported by professional certifications such as RIBA Chartered Practice and ARB registration. The website reflects a professional and modern digital presence built on Webflow, incorporating standard analytics and marketing tools with cookie consent mechanisms. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is generally good with HTTPS and consent management but lacks advanced security headers and published security policies. Privacy compliance is basic, with no explicit privacy or terms of service pages found. Contact information is limited to forms without direct emails or phone numbers. Overall, the website is trustworthy and professional but would benefit from improved transparency and security documentation.

Perkins&Will is a globally recognized architecture and design firm specializing in architecture, interior design, planning, and landscape design for a diverse range of sectors including universities, healthcare, business, cultural institutions, and sports facilities. The company operates at an enterprise scale with multiple studios worldwide, reflecting a strong market position and a commitment to design excellence. Their website is professionally designed, mobile-optimized, and rich in relevant content, showcasing their projects and insights effectively. Technically, the website is built on WordPress with modern technologies such as jQuery, Google Analytics, Google reCAPTCHA v3, and performance optimizations via WP Rocket. The site demonstrates good SEO and accessibility practices, with fast loading times and structured data enhancing search visibility. However, some security headers are missing, and there is no visible cookie consent mechanism, which could be improved for better privacy compliance. From a security perspective, the site uses HTTPS with a valid SSL configuration and employs reCAPTCHA to protect forms. The domain registration is consistent and long-standing, supporting the legitimacy of the business. No critical vulnerabilities or exposed sensitive data were detected. Nonetheless, the absence of explicit security policies and incident response information suggests room for improvement in transparency and preparedness. Overall, Perkins&Will's digital presence reflects a mature and professional organization with strong business credibility and technical implementation. Strategic enhancements in privacy compliance and security transparency would further strengthen their security posture and user trust.

ESG (Essex Services Group LTD) is an employee-owned company specializing in building services within the construction industry in the United Kingdom. The company emphasizes sustainability, innovation, and employee empowerment, positioning itself as a leader in its market segment. Their services include comprehensive building services solutions, design engineering, project delivery, offsite innovation, and BIM-compliant processes, with a focus on sectors such as residential, commercial, specialist projects, technology, data centres, and life sciences. Technically, the website employs modern front-end technologies including HTML5, CSS3, JavaScript, Swiper.js for carousels, and GLightbox for media display. The site is hosted with GoDaddy.com, LLC and uses HTTPS with a good SSL configuration. Mobile optimization and SEO practices are good, though accessibility features are basic. No CMS or backend platform was detected from the provided data. From a security perspective, the website benefits from HTTPS and domain registration protections but lacks DNSSEC and visible security headers. There is no published security policy or incident response contact information, and no vulnerability disclosure mechanism is present. Privacy compliance is strong with comprehensive privacy and cookie policies and an active cookie consent banner. No contact emails or phone numbers are directly listed, with contact primarily via a form. No suspicious or malicious content was detected. Overall, ESG's website is professional, trustworthy, and well-aligned with its business goals. Recommendations include enabling DNSSEC, implementing security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure program to enhance security posture and trust.

Concular is a German-based company specializing in circular construction, urban mining, and reuse of building components. The company offers consulting, project implementation, educational programs, and digital tools to support sustainable and resilient real estate development. Their website reflects a strong market position in the niche of circular building practices, targeting professionals and organizations in real estate and sustainability sectors. The site is well-structured, professionally designed, and optimized for SEO and user experience. Technically, the website is built on WordPress with modern integrations including HubSpot, Google Analytics, and Cloudflare services, indicating a mature digital infrastructure. Security measures such as HTTPS, Cloudflare Bot Management, and Google reCAPTCHA are in place, although explicit security policies and incident response information are not publicly disclosed. Privacy compliance is supported by a comprehensive cookie consent mechanism, but no explicit privacy policy or terms of service pages were found in the analyzed content. Overall, the website presents a trustworthy and professional front for Concular's business operations.

The website www.eedn.co.uk appears to be a basic Wix-hosted site with minimal content and limited business information. The WHOIS lookup for the domain failed with an error indicating the domain name is invalid under Nominet UK rules, suggesting the domain may not be properly registered or is misconfigured. The site includes standard Wix scripts and Google Analytics for tracking but lacks critical privacy, cookie, and terms of service policies. There is no contact information or security policy visible, which limits trust and compliance. Technically, the site uses Wix's platform and polyfills for compatibility but does not demonstrate advanced security configurations or performance optimizations. Overall, the site has a low trustworthiness score due to the domain registration issues and lack of business and security information.

RKD is a well-established international architecture firm based in Ireland, founded in 1997. The company specializes in design-led, technically robust architecture services, serving a diverse client base across Europe. Their market position is strong, supported by a comprehensive portfolio of high-profile projects and a professional online presence. The website reflects a mature digital infrastructure built on WordPress, enhanced with modern performance and SEO optimizations. Security posture is good with HTTPS and domain transfer protections, though improvements such as enabling DNSSEC and publishing security policies are recommended. Privacy compliance is basic but present, with cookie consent and a privacy policy. Overall, the site demonstrates high professionalism and trustworthiness, suitable for its target audience of clients seeking architectural services.