High-risk security reports

B

Book Report

bookreport.cz

36

Book Report is a Czech Republic based cultural archive website dedicated to the competition for the best book design, organized by the Ministry of Culture and the National Literature Memorial. The site serves a niche audience of book designers, publishers, and cultural institutions, providing archival information, news, and event updates related to Czech book design awards. The business model is non-commercial and government-supported, focusing on cultural preservation and promotion. Technically, the website is built on WordPress and uses common JavaScript libraries such as jQuery and Slick Carousel. The site is mobile optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is unavailable or privacy protected, which is common for Czech domains, but the website's cooperation with official government entities and professional presentation support its legitimacy. Social media presence on Facebook, Instagram, and YouTube further enhances its credibility. Overall, the website is a trustworthy and well-maintained cultural portal with room for improvement in privacy compliance and security headers. Strategic recommendations include implementing cookie consent, adding security headers, and publishing a vulnerability disclosure policy to enhance trust and compliance.

The website literarnimuzea.cz serves as an informational portal dedicated to Czech literary museums, memorials, and exhibitions. It is managed by a cultural institution affiliated with the National Literature Memorial and the Czech Ministry of Culture. The portal provides curated content about literary history, personalities, and related cultural events, targeting the general public and enthusiasts of Czech literary heritage. The site is niche-focused with a clear cultural and educational mission, without commercial or transactional features. From a technical perspective, the site employs a custom CMS with common web technologies such as jQuery, Google Fonts, Google Analytics, and ShareThis for social sharing. The website is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. However, there is room for improvement in modernizing the tech stack and enhancing mobile responsiveness. Security-wise, the site uses HTTPS but lacks important security headers like Content-Security-Policy and HSTS, which are recommended to improve protection against common web attacks. No privacy or cookie policies are present, indicating potential compliance gaps with GDPR requirements. Contact information is limited to web forms, with no explicit email or phone contacts provided. Overall, the security posture is moderate but could be strengthened with better headers, policies, and transparency. The overall risk is low given the non-commercial nature and cultural focus, but strategic improvements in privacy compliance and security best practices are advised to enhance trust and legal adherence.

M

Muzeum literatury

muzeumliteratury.cz

44

The website www.muzeumliteratury.cz represents the official online presence of the Czech Museum of Literature, a government-funded cultural institution dedicated to preserving and promoting literary heritage. The site offers comprehensive information about exhibitions, events, research services, and educational programs, targeting a broad audience including visitors, researchers, and educators. The content is well-structured, professionally presented, and localized in Czech, reflecting its national cultural focus. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager for analytics and consent management, and New Relic for performance monitoring. The site is served over HTTPS with appropriate security headers, indicating a good security posture. Mobile optimization and SEO practices are adequately implemented, providing a positive user experience across devices. Security-wise, the site demonstrates adherence to best practices such as HTTPS enforcement and cookie consent mechanisms. However, explicit security policies, incident response contacts, and vulnerability disclosure information are not present, representing areas for improvement. The absence of WHOIS data limits domain registration transparency but is consistent with privacy protection often used by government entities. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations such as GDPR. Strategic recommendations include publishing a dedicated security policy, providing incident response contacts, and considering a vulnerability disclosure program to enhance transparency and security readiness.

D

David Kučera

dkgr.cz

45

David Kučera operates as a freelance graphic designer based in the Czech Republic, offering a broad range of design services including logos, corporate graphics, print materials, infographics, web design, and UX tailored to client needs. The business model is primarily freelance with the flexibility to assemble teams of specialists for larger projects. The website presents a professional portfolio with extensive references and partner collaborations, positioning the business as a credible and experienced service provider in the graphic design sector. Technically, the website is built with standard HTML5, CSS3, and JavaScript, utilizing jQuery libraries. Hosting is provided by a Czech hosting company inferred from the nameservers. The site is moderately performant with good mobile optimization and basic accessibility features. SEO is well addressed through meta tags and Open Graph data, although no CMS or advanced frameworks are detected. From a security perspective, the site lacks advanced security headers and does not provide privacy or cookie policies, which are compliance gaps. No forms or data collection mechanisms are present, reducing exposure to input-based vulnerabilities. The domain registration is consistent and transparent, supporting the legitimacy of the business. No WAF or blocking mechanisms are detected, and the content is safe for general audiences. Overall, the website is professional and trustworthy but would benefit from enhanced security practices and privacy compliance measures to improve its security posture and regulatory adherence.

N

Nejlepší copywriter

nejlepsicopywriter.cz

45

Nejlepší copywriter is a Czech-based creative agency specializing in copywriting and online marketing services with over 10 years of experience. The company offers a broad range of services including webcopywriting, content marketing, SEO, consulting, training, and web development. It maintains a strong market position supported by reputable clients and partnerships with agencies such as Logos and FG Forrest. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, it leverages WordPress CMS with modern plugins and frameworks, ensuring good performance and accessibility. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear GDPR policies and cookie management. Overall, the site demonstrates high business credibility and trustworthiness.

T

TestLine Clinical Diagnostics s.r.o.

testlinecd.com

46

TestLine Clinical Diagnostics s.r.o. is a Czech-based company specializing in the development, production, and distribution of laboratory diagnostics for both human and veterinary use. It operates as part of the BioVendor Group, a recognized international biotechnology group. The company targets healthcare professionals and laboratories, offering a range of in vitro diagnostic products and innovative diagnostic solutions. The website reflects a professional and consistent brand image with clear business information and contact channels. Technically, the website employs a modern but somewhat dated technology stack including jQuery 1.11.1, ResponsiveSlides, and Google Analytics for tracking. The site is mobile-optimized and features good SEO practices, though some accessibility features are basic. Performance is moderate, and the site uses HTTPS with a secure login form and cookie consent mechanisms, indicating a reasonable level of digital maturity. From a security perspective, the site enforces HTTPS and uses cookie consent compliant with GDPR. However, it lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, though the website’s professional appearance and association with BioVendor Group mitigate this risk somewhat. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced security disclosures and updated technical components. The absence of WHOIS data is a notable gap that should be investigated further to ensure full legitimacy and compliance.

M

Počasí, aktuální předpověď počasí

meteobox.cz

45

Meteobox.cz is a Czech Republic focused weather forecast and news portal providing detailed weather information for cities and regions within the country. The site offers daily and long-term weather forecasts, weather news, and meteorological insights primarily targeting the general public interested in weather updates. The business model appears to be advertising-supported, with multiple ad networks and tracking technologies integrated. Technically, the site uses common web technologies including jQuery, Google Tag Manager, and Google DoubleClick for advertising, hosted likely on meteobox.info infrastructure. The website is moderately optimized for performance and mobile devices, with good SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. No privacy or terms of service pages were found, which is a compliance gap. WHOIS data confirms the domain is legitimate and consistent with the business age and type. Overall, the site is professional and trustworthy for its niche but could improve privacy and security transparency.

The website www.letenky-1.cz operates as an online platform for selling cheap flight tickets primarily targeting the Czech market. It offers a fast and unique flight search and booking experience by embedding a third-party booking engine via iframe. The business appears to be a small-sized entity under the legal name AliaWeb, spol. s r.o., with a partnership connection to Agentura Zájezdy, a.s. and other Czech travel portals. The site content is in Czech and focuses on transportation services related to air travel. Technically, the website uses basic JavaScript and jQuery libraries, with external resources loaded over HTTP, indicating a lack of HTTPS enforcement. The site embeds external scripts and stylesheets from multiple domains, including partner and advertising networks. The design and user experience are basic, with moderate SEO and accessibility features. The site lacks modern CMS or frameworks and shows signs of technical debt, such as commented-out analytics code and no visible security headers. From a security perspective, the site lacks HTTPS, security headers, and cookie consent mechanisms, which lowers its security posture. The WHOIS data is unavailable, suggesting privacy protection or unregistered status, which impacts trust. No explicit privacy or incident response policies are found on the site, though a basic privacy policy is linked externally. The site does not expose sensitive data visibly but could improve security by implementing HTTPS and security best practices. Overall, the website presents moderate business credibility but requires significant improvements in security and privacy compliance to enhance trustworthiness and protect user data. Strategic recommendations include implementing HTTPS, adding security headers, establishing cookie consent, and improving WHOIS transparency.

A

AliaWeb, spol. s r.o.

bydlet.cz

47

Bydlet.cz is a Czech online media portal operated by AliaWeb, spol. s r.o., focusing on modern living, housing news, real estate, and lifestyle content. The website offers a variety of articles, photo galleries, expert advice, and real estate listings targeting Czech-speaking audiences interested in home improvement and related topics. The site is affiliated with the larger kurzy.cz network, enhancing its market presence. Technically, the site uses common web technologies including jQuery, Google Tag Manager, and multiple advertising and tracking services, with a basic but functional mobile experience. Security posture is moderate, with HTTPS implied but lacking visible security headers and no explicit incident response or security policy pages. Privacy compliance is supported by cookie consent mechanisms and a privacy policy page. The absence of WHOIS data limits domain trust assessment, but the website's professional content and affiliation suggest legitimacy. Overall, the site scores well in content quality and business credibility but could improve technical security and contact transparency.

H

HNonline.sk - Správy z politiky, ekonomiky a financií

hnonline.sk

46

HNonline.sk is a well-established Slovak online news portal founded in 2003, focusing on delivering up-to-date news in politics, economy, finance, and lifestyle. The website targets a general audience interested in Slovak and economic affairs, supported by advertising revenue through multiple ad networks and tracking services. The site employs modern web technologies including Bootstrap 5, Joomla CMS, and integrates various third-party analytics and advertising platforms such as Gemius, Google Tag Manager, and AdOcean. The technical infrastructure is robust, with HTTPS enforced, DNSSEC enabled, and Cloudflare DNS services, ensuring good security and performance. However, the site lacks publicly accessible privacy policies and terms of service, which impacts its privacy compliance rating. Security posture is strong with no detected vulnerabilities or exposed sensitive data, but incident response and vulnerability disclosure mechanisms are absent. Overall, the website presents a professional and trustworthy media presence with room for improvement in privacy transparency and user contact accessibility.

The website at 1gr.cz is currently inaccessible to the public, returning a 403 Forbidden error page that denies access to all users. This indicates either a misconfiguration or intentional restriction, preventing any meaningful content or business information from being viewed. The domain is registered since 2015 with a Czech registrar, suggesting it is a legitimate domain, but the lack of accessible content severely limits any analysis of the business or services offered. The absence of metadata, structured data, or contact details further complicates assessment. Technically, no information about hosting, CMS, or security headers is available, and no scripts or analytics are detected. Security posture cannot be properly evaluated due to lack of access. Overall, the site appears non-operational or restricted, resulting in a very low trust and quality score.

The website trackad.cz currently presents only minimal content, consisting of a single dot in the body with no metadata, scripts, or visible business information. The domain is registered since 2015 with a Czech registrar and uses cloudns.net name servers, indicating a stable registration. However, the lack of accessible content and absence of privacy, cookie, or terms of service policies severely limit the ability to assess the business or security posture. The technical infrastructure appears minimal with no detectable CMS or frameworks. Security posture cannot be evaluated due to missing HTTPS and security headers information. Overall, the site appears either blocked, under construction, or abandoned, resulting in a low trust and credibility score.

M

MEDIA CLUB, s.r.o.

media-club.tv

49

MEDIA CLUB, s.r.o. operates as a media representation and advertising sales company affiliated with the Prima Group in the Czech Republic. The company leverages its extensive knowledge of the advertising market and represents over forty media outlets. The website serves as a professional platform to communicate news, services, and contact information to advertisers and media buyers. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and presents content clearly with good navigation and branding consistency. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business, indicating legitimacy and trustworthiness.

E

Echo Media, a.s.

echoprime.cz

42

EchoPrime.cz is a Czech news and opinion portal targeting discerning readers interested in in-depth analysis, essays, podcasts, and cultural criticism. Operated by Echo Media, a.s., the site offers subscription-based access to premium content and integrates user account management through a partner authentication service. The website demonstrates a professional design with consistent branding and a clear focus on quality editorial content. Technically, the site employs a modern JavaScript stack including jQuery, Google Analytics, Facebook Pixel, and custom micro-apps, ensuring a responsive and engaging user experience across devices. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though improvements in security headers and explicit privacy policies are recommended. The absence of WHOIS data limits domain trust verification but does not detract from the site's evident legitimacy as a media outlet. Overall, EchoPrime.cz presents a credible and well-maintained digital presence in the Czech media landscape.

S

Sport v okolí

sportvokoli.cz

44

Sport v okolí is a Czech Republic-based sports information portal that helps users find sports clubs and events. It is a collaborative project between Sazka a.s. and the Czech Olympic Committee, positioning itself as a trusted resource in the Czech sports community. The website offers a comprehensive searchable database of sports clubs, a calendar of sports events, and relevant articles to engage its audience. The target audience is the general public interested in sports activities within the Czech Republic. Technically, the website uses modern JavaScript libraries such as jQuery, Choices.js, and Google Analytics for tracking. It is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and implements a cookie consent mechanism with granular user controls, but lacks explicit privacy policy and terms of service pages, as well as security headers, which are areas for improvement. The WHOIS data is missing, which reduces trustworthiness from a domain registration perspective, but the website's partnerships and content quality support its legitimacy. Overall, the site scores well in content quality and business credibility but should enhance its security posture and privacy compliance to improve trust and compliance.

Olympijský víceboj is a Czech Republic-based educational sports initiative operated under the auspices of the Czech Olympic Committee (ČOV). Founded in 2013, it focuses on promoting physical education among school children by providing sport talent analysis and motivational programs such as the Olympijský diplom and Olympijský odznak. The website serves as an information portal for schools, teachers, and parents, offering resources, event information, and partner engagement. The project enjoys strong market positioning as a leading school sports program in the Czech Republic, supported by reputable corporate partners and government institutions. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Bootstrap, with Google Analytics for visitor tracking. Hosting is managed by REG-ZONER, a known Czech hosting provider. Security posture is moderate with HTTPS usage and cookie consent implemented, but lacks explicit security headers and detailed privacy policies. Contact information is clearly presented, enhancing business credibility. No adult or questionable content is present, making it safe for general audiences.

M

Městský úřad Švihov

svihov.cz

45

Městský úřad Švihov operates as the official municipal government office for the town of Švihov in the Czech Republic, providing essential public services and information to citizens and local entrepreneurs. The website serves as a portal for official announcements, municipal documents, event information, and contact details, positioning itself as a trusted local government resource. The site targets residents and businesses within the municipality, offering a range of administrative and community services.

O

Obecní úřad Vrhaveč

vrhavec.cz

46

The website www.vrhavec.cz is the official online presence of the municipality of Vrhaveč, a small local government entity in the Czech Republic. It provides comprehensive information for residents and tourists, including municipal office details, local fees, public notices, events, and community services. The site is well-structured, primarily in Czech, and targets local citizens and visitors. The business model is governmental, focusing on public service rather than commercial activities. The site integrates social media and regional partners, enhancing community engagement. Technically, the website employs common web technologies such as jQuery, Flexslider, Font Awesome, and Google Analytics. It includes GDPR compliance measures and cookie consent mechanisms, indicating a moderate level of digital maturity. The site appears mobile-optimized with good accessibility and SEO practices. However, no CMS or hosting provider details are explicitly identified. From a security perspective, the site uses HTTPS and includes cookie consent with denied ad and analytics storage by default, reflecting privacy-conscious design. However, no explicit security headers were detected, and WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy. No vulnerabilities or malicious content were found, and the site maintains a safe content rating. Overall, the website is a credible and professional municipal portal with good content quality and user experience. The primary risk is the lack of WHOIS transparency and missing security headers, which should be addressed to enhance trust and security posture. Strategic recommendations include implementing security headers, verifying domain registration, and publishing explicit security and incident response policies.

O

Obec Velhartice

velhartice.cz

48

The website www.velhartice.cz serves as the official municipal portal for the village of Velhartice in the Czech Republic. It provides comprehensive information about local history, tourism, public offices, events, and community services targeted at residents and visitors. The site is well-structured with clear navigation and includes multimedia content such as photo galleries and virtual tours. The business model is public service-oriented, focusing on community engagement and information dissemination. Technically, the site uses common web technologies including jQuery, Google Analytics, and Font Awesome, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit incident response contacts. The absence of WHOIS data reduces domain trustworthiness, though the site’s content and official partner links support its legitimacy. Overall, the site is a reliable resource for local information but could improve security and transparency aspects.

M

Městys Kolinec

kolinec.cz

47

Městys Kolinec operates a municipal website providing comprehensive information about the town, its history, tourism opportunities, local government services, and community events. The site serves residents and visitors with multilingual support and links to partner organizations. The technical infrastructure uses common web technologies such as jQuery, Google Analytics, and Flexslider, with a focus on accessibility and user experience. Security measures include cookie consent and GDPR compliance, though no advanced security headers or incident response contacts are visible. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not detract from the site's legitimacy given its official nature and trust signals. Overall, the website is a well-maintained municipal portal with moderate technical sophistication and good content quality.

S

STOŽEC

stozec.net

44

The website www.stozec.net/stozec/ serves as a regional tourism information portal focused on the Stožec area and nearby locations in the Czech Republic. It provides visitors with information about local attractions, accommodation, dining, weather, and webcams. The site targets tourists and local visitors interested in hiking, sightseeing, and cultural heritage. The business model is informational, supported by partnerships with regional portals such as ŠumavaNet.CZ and Tusset blog. The website is small-scale and community-oriented, with content primarily in Czech.

K

KAŠPERSKÉ HORY A OKOLÍ

kasperske-hory.info

46

The website www.kasperske-hory.info/khory/ serves as a regional tourism and local information portal for the Kašperské Hory area in the Czech Republic. It provides visitors and residents with information about accommodation, local history, cultural events, tourist attractions, and practical travel tips. The site targets general audiences interested in tourism and local culture, offering a variety of content such as event calendars, photo galleries, webcams, and maps. The business model is informational, focusing on promoting the region and supporting local tourism services. Technically, the website employs a moderate technology stack including jQuery, Google Analytics, Google Tag Manager, Google Custom Search Engine, Font Awesome icons, Flexslider for image sliders, and Elfsight Instagram feed integration. The site is served over HTTPS, includes meta tags for SEO, and is mobile responsive with basic accessibility features. Performance is moderate, with room for improvement in security headers and privacy compliance. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, and does not provide privacy or cookie policies, which are critical for GDPR compliance. The WHOIS data is unavailable or malformed, which reduces domain trustworthiness, although the website content and structure appear legitimate and focused on local tourism. Overall, the website is a functional and informative regional portal with good content quality and user experience. To improve its security posture and compliance, it should implement security headers, publish privacy and cookie policies, and provide clear contact information. Addressing these gaps will enhance trust and regulatory adherence.

E

ELEKTRO EFEKT s.r.o.

elektroefekt.cz

42

ELEKTRO EFEKT s.r.o. is a Czech Republic-based retailer specializing in household electrical appliances and consumer electronics. The company operates both an e-commerce platform and a physical store located in Klatovy. Their product range includes large and small home appliances, TVs, audio/video equipment, computing devices, and garden tools. They also provide services such as installation, repair, and delivery, targeting consumers primarily within the Czech market. The website is professionally designed with clear navigation and good mobile optimization, supporting a positive user experience.

The website www.fotojanout.cz is a personal photography portfolio showcasing the work of František Janout, focusing primarily on nature and landscapes of the Šumava region and various international travel destinations. The site targets photography enthusiasts and travelers interested in these regions. It operates as a small-scale personal project without commercial business registration details or contact information. Technically, the site uses basic web technologies including HTML, CSS, JavaScript with jQuery and Facebook SDK integration. It is hosted on the eStránky.cz platform and shows moderate performance and basic mobile optimization. Security posture is weak due to lack of HTTPS confirmation, missing security headers, and absence of privacy or cookie policies. No WHOIS data is available, raising concerns about domain registration legitimacy. Overall, the site is safe for general audiences but lacks professional security and privacy compliance features.

A

Apartmány Šumava

apartmanysumava.info

46

Apartmány Šumava is a small hospitality business offering apartment accommodations in the Šumava region of the Czech Republic, specifically in Hojsova Stráž near Železná Ruda. The website presents a professional and user-friendly interface with clear navigation, detailed accommodation offers, and family-friendly services such as garden and children's play areas. The business holds a Hotel.cz quality certificate and maintains an active Facebook presence, indicating a moderate level of market trust and customer engagement. Technically, the website uses modern JavaScript libraries and tracking tools, hosted by ŠumavaNet.CZ, with responsive design suitable for mobile users. However, some security best practices such as security headers and cookie consent mechanisms are missing, and WHOIS data is unavailable, which slightly reduces trustworthiness. Overall, the site is functional and credible for its business scope.

P

Pension Helena Honesová

pensionhelenahones.cz

47

Pension Helena Honesová is a small family-run hospitality business offering accommodation in Horská Kvilda, Czech Republic, located in the Šumava National Park. The website provides detailed information about rooms, booking options, local activities, and seasonal offers, targeting tourists seeking a peaceful stay with scenic views. The business maintains a positive reputation supported by customer reviews and active social media presence. Technically, the website is built on WordPress using Elementor and several booking plugins, with moderate performance and good mobile optimization. Security posture is solid with HTTPS, security headers, and GDPR-compliant cookie consent, though lacking explicit security policies or incident response details. The absence of WHOIS data slightly reduces trust but does not detract significantly from the overall legitimacy. Strategic recommendations include publishing security policies, enhancing accessibility, and maintaining plugin updates to sustain security and compliance.

A

Apartmány U Lípy

apartmanyulipy.eu

43

Apartmány U Lípy is a small hospitality business offering stylish apartment accommodations in the Šumava region of the Czech Republic. The website presents a well-maintained historic building with modern amenities including wellness facilities, electric vehicle charging, and a summer kitchen. The business targets tourists seeking nature, relaxation, and outdoor activities such as hiking and cycling. The website is professionally designed with clear navigation and booking functionality, supporting the business model of direct apartment rentals. Technically, the site uses common JavaScript libraries and responsive design but lacks some advanced security headers and privacy policies. Security posture is moderate with HTTPS enabled but missing some best practices. Overall, the domain is privacy protected, which is typical for small businesses, and no suspicious WHOIS data is available. The site is safe for general audiences and does not contain adult or questionable content.

Penzion Montana is a small family-run hospitality business located in the Šumava protected landscape area in the Czech Republic. The website presents the pension as a year-round accommodation option suitable for families, groups, seniors, and sports training stays. The business targets local and regional tourists seeking a quiet and private stay near nature. The website content is well-structured, with clear navigation and relevant information about the location and services offered. Social media presence on Facebook and Instagram supports customer engagement. Technically, the site uses common JavaScript libraries such as jQuery, Flexslider, and Fancybox, and is hosted by REG-ZONER, a known Czech hosting provider. Google Analytics is implemented for visitor tracking, but no advanced security headers or privacy policies are present, indicating room for improvement in compliance and security. The site is accessible without WAF or blocking mechanisms, and the domain registration data is consistent with the business history, supporting legitimacy.

R

Rekreační středisko Rybník

rybnik-ceskyles.cz

44

Rekreační středisko Rybník is a small hospitality business located in the Český les region of the Czech Republic, offering accommodation, wellness, sports facilities, and event hosting primarily targeting families, schools, sports clubs, and corporate groups. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site uses common JavaScript libraries such as jQuery and Flexslider, Google Fonts, and integrates social media and analytics tools. Hosting appears to be provided by ŠumavaNet.CZ. Security posture is moderate with HTTPS in use but lacks advanced security headers and cookie consent mechanisms. The absence of WHOIS data limits domain trust assessment, though the site content and contact information appear legitimate. Overall, the website is functional and suitable for its business purpose but would benefit from enhanced security and privacy compliance measures.

P

Penzion Arnika

penzion-arnika.cz

44

Penzion Arnika is a small hospitality business operating a guesthouse and restaurant in the Šumava National Park region of the Czech Republic. The website presents a professional and well-structured digital presence, offering accommodation details, restaurant menus, photo galleries, and an online reservation form. The business targets tourists, cyclists, families, and seniors seeking a nature-focused stay in a family-friendly environment. Technically, the website uses modern JavaScript libraries such as jQuery, Flexslider, and Fancybox, and is mobile responsive with good navigation clarity. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. Security posture is moderate with HTTPS usage and form validation but lacks explicit security headers and published privacy or cookie policies. Tracking technologies like Google Analytics and Facebook SDK are present without visible consent mechanisms, indicating privacy compliance gaps. Overall, the website is functional and trustworthy from a user perspective but would benefit from improved transparency and security practices.

H

Hotely Srní

hotelysrni.cz

47

Hotely Srní operates a hospitality business focused on hotel accommodation, wellness, conference facilities, and restaurant services in the Šumava region of the Czech Republic. The website provides a comprehensive online presence with booking capabilities and active social media engagement, positioning itself as a regional player in tourism and hospitality. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and animation libraries, delivering a good user experience with mobile responsiveness and interactive features. Security posture is adequate with HTTPS enforced and secure form handling, though the absence of security headers and a published privacy policy indicates room for improvement. The lack of WHOIS data is a concern for domain legitimacy but does not directly contradict the business's apparent authenticity. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security practices.

H

Hotel Čertův Mlýn

hotelcertuvmlyn.cz

45

Hotel Čertův Mlýn is a small hospitality business located in the Šumava region of the Czech Republic, offering accommodation, restaurant services, a swimming pool, and facilities for corporate and school events. The website presents a professional and content-rich experience with multimedia elements and social media integration, targeting tourists, families, schools, and corporate clients. Technically, the site uses modern JavaScript libraries and is mobile responsive, though some accessibility features could be improved. Security posture is moderate with HTTPS enabled but lacks security headers and formal privacy or cookie policies, indicating compliance gaps. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information support legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

C

Chata U Tří sluk

chata-modrava.cz

44

Chata U Tří sluk is a small hospitality business operating a pension and restaurant in the Šumava National Park region of the Czech Republic. The website provides detailed information about accommodation options, pricing, restaurant services, and reservation capabilities, targeting tourists, cyclists, families, and groups seeking a nature-focused vacation. The business emphasizes ecological practices and local cultural heritage. Technically, the website uses common JavaScript libraries such as jQuery, Flexslider, and Fancybox, and is hosted by ŠumavaNet.CZ. It integrates Google Analytics and Facebook SDK for tracking and social media presence. Security posture is moderate with HTTPS usage implied but lacks explicit security headers and published privacy or cookie policies, indicating compliance gaps. WHOIS data is unavailable, which reduces domain trustworthiness but the website content and contact information appear professional and consistent with a legitimate small hospitality business.

The website www.boubin.cz/boubin/ serves as an informational portal focused on the Boubín mountain and the Šumava region in the Czech Republic. It provides detailed descriptions of natural landmarks, hiking trails, and local accommodation options, targeting tourists and visitors interested in nature and outdoor activities. The business model centers on tourism promotion and accommodation listings, primarily serving a regional audience. The site content is primarily in Czech with some German and English keywords, reflecting the local cultural context. From a technical perspective, the website uses basic HTML and CSS without modern frameworks or CMS platforms. There is no evidence of HTTPS or advanced security headers, and no analytics or tracking technologies are detected. The site appears to have moderate performance but lacks mobile optimization and accessibility features, which could limit user experience on mobile devices. Security posture is weak due to the absence of HTTPS, security headers, and privacy or cookie policies. No contact information or incident response details are provided, limiting transparency and trust. The WHOIS data is unavailable, which raises concerns about domain registration legitimacy and reduces overall trustworthiness. No forms or user data collection mechanisms are present, minimizing data protection risks but also indicating limited interactivity. Overall, the website is a small-scale, regionally focused tourism information site with basic technical implementation and significant security and compliance gaps. Strategic improvements in security, privacy compliance, and technical modernization are recommended to enhance trust and user experience.

K

Kyosun s.r.o.

matchatea.cz

41

Kyosun s.r.o. operates the website www.matchatea.cz, a professionally designed e-commerce platform specializing in organic Japanese matcha tea products. The company targets health-conscious consumers interested in authentic matcha tea, offering a range of products, recipes, and educational content. The website demonstrates strong market positioning within the Czech Republic's niche organic tea retail sector, supported by multiple product awards and active social media engagement. Technically, the site is built on WordPress with modern SEO and performance optimizations, including Yoast SEO Premium, WP Rocket, and Google Tag Manager integration. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR consent. WHOIS data is unavailable, likely due to privacy protection, but the overall trust indicators and business information support legitimacy. Strategic recommendations include enhancing security headers, publishing a security.txt file, and maintaining regular audits of third-party scripts.

Č

České ghíčko, s.r.o.

ghee.cz

47

České ghíčko, s.r.o. operates the website ghee.cz, a professionally designed e-commerce platform specializing in high-quality clarified butter (Ghee) and related products. The company has a strong market presence in the Czech Republic, distributing products through over 300 retail outlets including major chains such as Globus, Makro, Albert, and Rohlík. Their product range includes pure Ghee, flavored variants (Ghee+), and nut spreads (Gheetella), targeting health-conscious consumers and culinary enthusiasts. The website offers rich content including recipes, newsletters, and detailed product information, enhancing customer engagement and brand loyalty. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Swiper.js, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, Smartlook, and Mailchimp. It uses Google reCAPTCHA v3 for form security and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience across devices. From a security perspective, the site uses HTTPS with a valid SSL certificate and implements security best practices including CSRF tokens on forms and secure AJAX calls. While no explicit security policy or incident response contacts are published, the site demonstrates a mature security posture with no visible vulnerabilities or exposed sensitive data. Privacy policies and terms of service are comprehensive and clearly accessible, indicating good compliance with GDPR requirements. Overall, ghee.cz is a trustworthy and professional retail website with strong business credibility, solid technical infrastructure, and good security hygiene. Strategic recommendations include publishing a security policy and incident response contacts, and maintaining vigilance on third-party scripts to sustain security and compliance.

S

SOFICO-CZ, a. s.

apotheke.cz

30

Apotheke.cz is a Czech e-commerce website specializing in herbal teas, syrups, vitamins, and healthy nutrition products. The company presents itself as a family-owned business with over 20 years of tradition, targeting general consumers interested in natural and health-related products. The website is professionally designed with clear navigation and product categorization, supporting a positive user experience. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and reCAPTCHA for security. HTTPS is enforced, ensuring encrypted communications. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency. Privacy and cookie policies are partially present, but no explicit cookie consent mechanism was detected. Overall, the site maintains a good security posture but could improve by adding more security headers and formal vulnerability disclosure mechanisms.

S

Státní zdravotní ústav

szu.cz

49

Státní zdravotní ústav (SZÚ) is the official Czech Republic government public health institute under the Ministry of Health. It provides epidemiological research, public health data, education, and health promotion services. The website serves a broad audience including healthcare professionals, government entities, and the general public. SZÚ is positioned as a key national health authority with a long history and strong institutional backing. The site offers comprehensive content on health topics, research projects, and public health initiatives.

T

TestLine Clinical Diagnostics s.r.o.

testlinecd.cz

41

TestLine Clinical Diagnostics s.r.o. is a Czech-based company specializing in the development, manufacturing, and distribution of human and veterinary laboratory diagnostic products. It operates as part of the BioVendor Group, a recognized international biotechnology conglomerate. The company targets healthcare and veterinary laboratories, providing innovative in vitro diagnostic solutions and related services. The website reflects a professional and consistent brand presence with multilingual support and comprehensive product information.

B

BioVendor – Laboratorní medicína a.s.

biovendor.cz

48

BioVendor – Laboratorní medicína a.s. is a Czech-based company specializing in the distribution and manufacturing of in vitro diagnostic (IVD) products and laboratory equipment. As part of the international BioVendor Group, it holds a strong market position in healthcare diagnostics, offering a wide portfolio of innovative products, professional services, and expert consulting primarily targeting laboratories and healthcare professionals. The website reflects a professional and comprehensive digital presence with clear business information and a focus on customer support and product innovation. Technically, the site employs modern web technologies including jQuery, Slick Carousel, Google Tag Manager, Google Analytics, and Microsoft Clarity, ensuring good performance and user experience across devices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although there is room for improvement in security headers and incident response transparency. The absence of WHOIS data limits domain registration trust insights but does not detract significantly from the overall legitimacy given the professional business presentation and group affiliation. Overall, the website and business demonstrate a mature digital footprint suitable for their industry and audience.

M

Městské kulturní centrum Poděbrady

zameckybiograf.cz

43

Městské kulturní centrum Poděbrady operates as a local cultural hub in Poděbrady, Czech Republic, primarily offering cinema screenings and event hosting services. The website serves as a portal for event information, ticket pre-sales, and general cultural engagement for the local community. The business model focuses on providing cultural and entertainment experiences to a general audience, leveraging partnerships with local venues and cultural organizations. Technically, the website is built on modern frameworks such as React and Next.js, with Material UI for styling, indicating a contemporary digital infrastructure. However, the site shows placeholder content suggesting dynamic loading or incomplete data rendering at the time of analysis. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is functional and credible but could improve in security and privacy transparency to enhance trust and compliance.

S

Svaz knihovníků a informačních pracovníků České republiky (SKIP)

brezenmesicctenaru.cz

42

The website 'Březen měsíc čtenářů' is a Czech Republic-based cultural initiative promoting reading and library events during March. It is operated under the auspices of the Svaz knihovníků a informačních pracovníků České republiky (SKIP), a recognized non-profit organization. The site provides event registration, news updates, and a searchable program of activities targeting libraries, readers, and cultural institutions. The event has a history of over 12 years with significant participation, positioning it as a well-established national initiative. Technically, the website is built on WordPress 5.6.16, utilizing common libraries such as jQuery and Leaflet for interactive maps. It employs Google Fonts for typography and demonstrates good mobile responsiveness and navigation clarity. Performance is moderate, with no major technical issues detected. However, the site lacks advanced security headers and privacy/cookie policies, which are important for compliance and user trust. From a security perspective, the site enforces HTTPS, which is a positive baseline. No WAF or blocking mechanisms are detected, and no obvious vulnerabilities or exposed sensitive data were found in the HTML content. The absence of security headers and privacy policies represents a compliance gap, especially under GDPR regulations. The WHOIS data is missing, which reduces domain registration transparency and trustworthiness, though the official affiliation and content quality mitigate some concerns. Overall, the website is a credible and professional platform for a cultural non-profit event but would benefit from enhanced security practices, privacy compliance, and domain registration transparency to improve trust and reduce risk.

C

Celé Česko čte dětem

celeceskoctedetem.cz

45

Celé Česko čte dětem is a well-established Czech non-profit organization founded in 2006, dedicated to strengthening family bonds through reading activities aimed at children and parents. The website reflects a mature digital presence with a clear focus on community engagement, supported by numerous reputable partners and sponsors. The content is primarily in Czech, targeting local families and educational stakeholders. Technically, the site employs a modern tech stack including Bootstrap, jQuery, FullCalendar, and Google services, ensuring a responsive and user-friendly experience. Security measures such as HTTPS and Google reCAPTCHA are implemented, though some advanced security headers and explicit policies are absent. Privacy compliance is addressed via a cookie policy and consent mechanism, aligning with GDPR requirements. Overall, the site demonstrates a solid business credibility and trustworthy online presence.

Rozečti.se is an online educational platform specializing in teaching speed reading to Czech-speaking audiences and other language groups. The website offers interactive courses, e-books, and certification to help users improve reading efficiency. The platform targets students, professionals, schools, and companies, providing both free trial and paid full versions. Technically, the site uses a combination of jQuery, Bootstrap, and the Nette Framework, with integrations of Facebook and Twitter SDKs and Google Analytics for tracking. The site is served over HTTPS with good SSL configuration, but lacks some advanced security headers and explicit security policies. Privacy compliance is addressed with a cookie consent banner and GDPR-related documents available. The absence of WHOIS data reduces domain trustworthiness, but the website content and social media presence support legitimacy. Overall, the site is well-designed, user-friendly, and safe for general audiences.

N

Noc literatury

nocliteratury.cz

47

Noc literatury is a cultural literary project based in the Czech Republic that organizes literature events featuring contemporary European authors interpreted by well-known actors. The website is professionally designed using WordPress with Elementor and the jNews theme, providing a rich content experience primarily in Czech with English language support. The site includes comprehensive cookie consent management and privacy policy compliance, reflecting a mature approach to user privacy. However, the absence of WHOIS data and lack of explicit security and incident response policies slightly reduce the overall trustworthiness. The site is well-optimized for SEO and mobile devices, with active social media engagement on Facebook, Instagram, and YouTube.

M

Moudrá Sovička z.s.

moudrasovicka.cz

40

Moudrá Sovička z.s. is a small Czech non-profit organization focused on providing assistance with the initial setup of computers, tablets, and phones. The website serves as an informational and service platform targeting individuals who need help with technology setup. The organization maintains a modest but professional online presence, including a Facebook page and clear contact information. The business model revolves around educational and technical support services, positioning itself as a niche local service provider in the Czech Republic. Technically, the website is built on WordPress using the Radiate theme and employs standard web technologies such as PHP, JavaScript, and CSS. It includes a cookie consent mechanism compliant with GDPR, indicating a reasonable level of digital maturity and privacy awareness. Performance and mobile optimization are adequate, with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and includes common security headers, contributing to a good security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a security.txt file and explicit incident response contacts suggests room for improvement in security transparency and incident readiness. Overall, the website presents a low-risk profile with a solid foundation for a small non-profit. The lack of WHOIS data reduces trust slightly but does not outweigh the positive indicators from the website content and technical setup. Strategic recommendations include enhancing security disclosures, maintaining up-to-date software, and improving transparency around incident response.

R

REMspace Inc

obe4u.com

48

REMspace Inc is a specialized research and educational organization focused on REM sleep, lucid dreaming, sleep paralysis, and out-of-body experiences. The company offers a range of services including research publications, free educational content such as books and videos, and products like the LucidMe mask and mobile app. Positioned as a leading niche research center, REMspace targets individuals interested in sleep science and consciousness exploration. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages to reach a global audience. Technically, the website is built on WordPress with WooCommerce integration, leveraging modern JavaScript libraries like Swiper.js for UI components and multiple analytics and tracking services including Google Tag Manager, Facebook Pixel, TikTok Pixel, and Yandex Metrica. Hosting and DNS are managed via Cloudflare, with domain registration through Launchpad.com Inc. The site demonstrates moderate performance and good mobile optimization but lacks some advanced security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS with a valid SSL configuration and has no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response information, and DNSSEC is not enabled. Privacy compliance is partially addressed with privacy and cookie policies present, though no active consent mechanism is implemented. Contact information is clearly provided, enhancing business credibility. Overall, REMspace.net is a trustworthy and professionally maintained website serving a specialized audience with educational and product offerings in the lucid dreaming and REM sleep technology space. Strategic improvements in security policies, cookie consent, and DNSSEC would enhance its security posture and compliance.

G

GRENA, a.s.

grenamat.cz

44

GRENA, a.s. is a Czech Republic-based medium-sized manufacturing company specializing in non-flammable and fire-resistant materials such as vermiculite boards and acoustic panels. Established in 2009, the company serves industrial clients and construction sectors with a broad product portfolio and maintains a professional web presence with multi-language support. The website is well-structured, providing clear navigation and contact options, including phone, email, and contact forms, alongside active social media channels. Technically, the site uses modern JavaScript libraries and frameworks like jQuery, Bootstrap, and Owl Carousel, hosted likely on Czech infrastructure consistent with the domain's WHOIS data. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and published security policies. Privacy compliance is partial due to the absence of a dedicated privacy policy page. Overall, the website is professional, trustworthy, and serves its business purpose effectively.

S

SENSIT s.r.o.

sensit.cz

46

SENSIT s.r.o. is a well-established Czech manufacturer specializing in sensors and measurement devices, including temperature, humidity, CO2, level, flow, and position sensors. Founded in 1991, the company has a strong market presence domestically and exports to 65 countries. Their website reflects a professional and consistent brand image, offering detailed product information and certifications that reinforce their industry credibility. Technically, the site uses a modern ASP.NET framework with common JavaScript libraries and includes GDPR-compliant cookie consent mechanisms. Security posture is moderate with HTTPS in use but lacks visible security headers and explicit security policies. The absence of WHOIS data reduces domain trustworthiness, but the overall business and website quality remain solid. Strategic improvements in security headers and transparency policies are recommended to enhance trust and compliance.