High-risk security reports

Č

Česká vědeckotechnická vodohospodářská společnost, z.s.

cvtvhs.cz

46

Česká vědeckotechnická vodohospodářská společnost, z.s. is a Czech scientific and technical society focused on water management, hydrology, and flood protection. The organization hosts conferences and professional events, collaborating with recognized Czech institutes. The website serves as an information portal for members and professionals in the water management sector, providing news, event announcements, and membership information. The business operates as a non-profit entity with a clear focus on knowledge sharing and professional development within its niche. Technically, the website is built on Joomla CMS with common web technologies such as jQuery, Bootstrap, and Google Fonts. The site is mobile-optimized and provides a moderate performance experience. However, it lacks advanced SEO and accessibility features. The technical infrastructure is standard for a small professional society website, with no indications of modern cloud hosting or advanced platform integrations. From a security perspective, the site uses HTTPS but lacks important security headers and published security or privacy policies. There is no visible contact information for security incidents or data protection officers, and no vulnerability disclosure mechanisms are present. While no critical vulnerabilities are evident from the HTML content, the absence of privacy and cookie policies and security headers reduces the overall security posture. Overall, the website is professional and trustworthy within its domain but would benefit from improved privacy compliance, enhanced security practices, and clearer contact information to strengthen user trust and regulatory adherence.

Psychovar is a small Czech craft brewery specializing in producing small batches of specialty beers, particularly tea-infused varieties. The website presents a professional and consistent brand image targeting mature audiences interested in unique beer experiences. The business operates in a niche market with a focus on quality and artisanal production. The site provides basic information about products, availability, company background, and contact details, but lacks comprehensive legal and privacy documentation. Technically, the website uses modern frontend technologies such as Bootstrap, FontAwesome, and jQuery, ensuring good mobile responsiveness and user experience. However, it lacks advanced SEO optimization and accessibility features. The site is accessible without any WAF or blocking mechanisms, but no analytics or tracking tools are detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS but does not implement security headers or provide security policies. The absence of WHOIS data is a significant concern, reducing trust and raising questions about domain legitimacy. Privacy and cookie policies are missing, indicating compliance gaps with GDPR and related regulations. Contact information is limited to a single email address, with no phone or physical address provided. Overall, the website is functional and professionally presented but requires improvements in security posture, privacy compliance, and transparency to enhance trustworthiness and regulatory adherence.

B

Bad Flash Beers

badflash.cz

42

Bad Flash Beers is a Czech craft brewery operating multiple bars and a brewery taproom in Prague. The company focuses on brewing a variety of craft beers including seasonal and limited editions, targeting adult beer enthusiasts. The website is professionally designed using WordPress and incorporates modern web technologies and tracking tools such as Google Analytics. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate gaps in transparency and compliance. Security posture is moderate with HTTPS enabled but missing advanced security headers and vulnerability disclosure mechanisms. Overall, the site is functional and informative but would benefit from enhanced compliance and security practices.

A

ALI 21, s.r.o.

ali21.cz

45

ALI 21, s.r.o. is a Czech Republic based security agency specializing in event security, physical protection, and related services. Established in 2005, the company has built a strong market position with over 3000 events served and a portfolio of reputable clients. Their website reflects a professional service provider with clear descriptions of their offerings, client references, and a consistent brand presence. The company targets clients requiring comprehensive security solutions for events, concerts, sports, and cultural activities within the Czech Republic. Technically, the website employs modern front-end technologies including Bootstrap, Animate.css, and Swiper for a responsive and visually appealing user experience. Hosting is managed via REG-WEBGLOBE with Czech-based nameservers. The site is mobile optimized and includes Google reCAPTCHA for form security, indicating a moderate level of digital maturity. From a security perspective, the site uses HTTPS and implements CAPTCHA on contact forms, but lacks important security headers and published privacy or cookie policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, representing an area for improvement. No obvious vulnerabilities or exposed sensitive data were detected. Overall, ALI 21's website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user confidence. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and establishing incident response contacts.

O

Onkubator

onkubator.com

49

Onkubator is a small creative studio based in Prague, founded in 2008, specializing in web design, graphic design, visual identity, print design, user interfaces, and exhibition solutions. The team consists of a programmer/web designer and several graphic artists and illustrators. The website showcases a diverse portfolio targeting institutions and individual clients. Technically, the site is built on Drupal 7 with common JavaScript libraries and integrates Google Analytics for tracking. Mobile optimization and responsive design are implemented adequately. Security posture is moderate but lacks visible security headers and explicit privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS domain registration data is a significant concern, suggesting possible domain registration issues or privacy protection that is not clearly disclosed. Overall, the site is professional and content-rich but would benefit from improved security and compliance transparency.

A

Agglomération de Cergy-Pontoise

cergypontoise.fr

49

The Agglomération de Cergy-Pontoise website serves as the official digital presence for the local government authority managing 13 communes in the Cergy-Pontoise region of France. It provides comprehensive information on urban planning, public services, cultural activities, waste management, transportation, and social programs. The site targets residents, local businesses, and visitors, offering accessible resources and contact points for community engagement. Technically, the website is built on Drupal 10, leveraging modern web technologies including Google Tag Manager and Facebook SDK for analytics and social integration. The site is mobile-optimized, accessible, and structured with clear navigation, reflecting a mature digital infrastructure suitable for a public sector entity. From a security perspective, the site enforces HTTPS and uses trusted third-party scripts. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are implemented with GDPR compliance, though no dedicated security policy or incident response contacts were found. Overall, the domain and website present a legitimate, trustworthy public sector resource with good content quality and technical implementation. The lack of WHOIS data is consistent with AFNIC privacy norms and does not detract from the site's credibility. Strategic improvements could include enhanced security headers and explicit incident response information.

The website www.nekdeneco.cz is currently inaccessible due to an AWS WAF CAPTCHA challenge page that blocks access to any actual content. This prevents any meaningful extraction of business, contact, or policy information. The WHOIS lookup also failed to return any domain registration data, indicating either a non-existent domain registration or privacy protection that is not disclosed. The technical infrastructure shows use of AWS WAF and Amazon Ember fonts, but no CMS or other frameworks are detectable. Security posture cannot be fully assessed due to lack of accessible content and headers. Overall, the site appears to be either under protection or misconfigured, resulting in a very low trust and credibility score.

D

Digital Media Publishing s.r.o.

ifarnost.cz

44

The website ifarnost.cz is operated by Digital Media Publishing s.r.o., a small Czech company specializing in creating customized websites for parishes. Their service offers easy-to-use content editing, hosting, domain management, and mobile-optimized designs tailored to church communities. The site is professionally designed with good navigation and content relevance, targeting parish administrators and church organizations. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, hosted on Microsoft Azure Blob Storage. Security posture is solid with HTTPS and SSL certificates, but lacks some security headers and explicit privacy policies. WHOIS data is unavailable, which impacts domain trustworthiness. Overall, the site is functional, professional, and trustworthy for its niche audience.

VENI VIDI VICI is a charitable project based in the Czech Republic focused on supporting people with serious long-term illnesses, specifically ALS (amyotrophic lateral sclerosis) in its current phase. The project is a collaboration of several microbreweries and a security agency (ALI 21, s.r.o.) as the general partner. It raises funds through the sale of special beer editions and public donations, targeting beer enthusiasts and charity supporters. The project is relatively new, with the domain registered in late 2024, aligning with the project's launch timeline. Technically, the website uses jQuery and Google Analytics, hosted on WEDOS servers, and shows moderate performance and good mobile optimization. However, it lacks advanced security headers and published privacy or cookie policies, which are compliance gaps. The site is well-branded and professionally designed with clear navigation and relevant content. Security-wise, the site uses HTTPS and Google Analytics but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No WAF or blocking mechanisms were detected, and no critical vulnerabilities were found in the visible content. Overall, the site demonstrates moderate security maturity but requires improvements in privacy compliance and security best practices. The overall risk is moderate, with recommendations to implement privacy and cookie policies, add security headers, and provide incident response information to enhance trust and compliance.

Madcat.beer a.s. operates www.drinkcraftbeer.cz, an e-commerce platform specializing in the sale of craft beers, including bottles, cans, and KEG kegs, alongside merchandise and delivery services. The website targets adult craft beer consumers primarily in the Czech Republic, offering fresh and limited edition products. The business model is retail-focused with a niche market position emphasizing quality and exclusivity. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

S

Spolek Most-České Budějovice

krestanskepovltavi.cz

38

Křesťanské Povltaví is a cultural tourism initiative by Spolek Most-České Budějovice aimed at promoting Christian heritage sites and spiritual-educational activities in the South Bohemian region along the Vltava river. The website serves as an informational and navigational platform offering maps, detailed monument information, and cycling routes. The project is positioned as a niche non-profit cultural tourism product targeting visitors interested in religious and cultural heritage. Technically, the website is built on WordPress using Elementor and Jet plugins, providing a modern and responsive user experience with moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the website is safe, professional, and trustworthy but would benefit from improved privacy compliance and security hardening.

S

Spolek Most

boziden.cz

33

The website www.boziden.cz represents a small non-profit organization named Spolek Most, focused on organizing spiritual and cultural events such as the multi-genre festival 'Boží den', creative weekends, and spiritual retreats primarily in the České Budějovice region of the Czech Republic. The organization aims to foster community engagement and spiritual experiences through family-friendly activities, music, and prayer. The website is built on WordPress using the Bricks theme and Jet Engine plugin, featuring modern web technologies and responsive design. It is well-structured with clear navigation and event information, supported by social media channels on Facebook, Instagram, and YouTube. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies, which are compliance gaps. WHOIS data is unavailable, limiting domain trust assessment, but the website content and structure indicate a legitimate community organization. Overall, the site provides a positive user experience with good content quality and technical implementation but would benefit from enhanced privacy compliance and security best practices.

Mount Hosín is a community and cultural project based in the Czech Republic focused on revitalizing a historic estate and offering creative events and accommodation. The website presents the project clearly with good content quality and a professional design, targeting a general audience interested in cultural, educational, and spiritual activities. Technically, the site is built on WordPress with modern JavaScript libraries and uses Google Analytics for tracking. Security posture is moderate with HTTPS enabled but lacks important security headers and privacy compliance documentation. The absence of WHOIS data reduces trust in domain legitimacy, though the website content appears authentic and well-maintained. Overall, the site is functional and informative but requires improvements in privacy compliance and security best practices.

S

Spolek Most – České Budějovice

spolekmost.cz

43

Spolek Most – České Budějovice is a Czech non-profit organization dedicated to the spiritual, moral, and cultural development of individuals across various demographics. Established originally in 1993, it operates educational programs, spiritual seminars, social services, and community activities supported by local government entities. The organization maintains a clear structure with named officials and publishes annual reports for transparency. Their digital presence is built on WordPress using the Salient theme and WPBakery Page Builder, with a focus on accessibility and mobile responsiveness. However, the website lacks formal privacy and cookie policies, which are important for compliance with data protection regulations. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and a vulnerability disclosure policy.

The website entercamp.cz is currently inaccessible beyond a Cloudflare security challenge page that requires human verification via Turnstile captcha. Due to this, no actual business content, contact information, or policies are visible for analysis. The domain is registered since 2008 with a Czech registrar and uses Cloudflare for DNS and security services. The lack of accessible content prevents a full assessment of the business model, services, or compliance posture. Technically, the site uses modern security mechanisms but does not expose any business or compliance information publicly. Security posture is difficult to evaluate fully due to the blocking mechanism, but the use of Cloudflare indicates a baseline security practice. Overall, the site appears legitimate based on domain age and registration data, but the lack of accessible content and policies limits trust and compliance evaluation.

M

Marek Chaloupka

marekchaloupka.com

43

Marek Chaloupka is a freelance creative professional specializing in UI/UX design, branding, photography, and art direction. The website serves as a portfolio showcasing a variety of projects in branding, web design, and visual arts, targeting businesses and individuals seeking high-quality creative services. The business operates primarily as a small freelance entity based in the Czech Republic, with a domain registered since 2009, reflecting a mature and stable presence. Technically, the website is built on WordPress 6.7.2 using the Semplice theme and Yoast SEO plugin, indicating a modern and SEO-optimized infrastructure. It employs Google Analytics and Google Tag Manager for user tracking, with a moderate level of performance and good mobile optimization. Hosting is provided by Webglobe, as inferred from the nameservers. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protection enabled. However, it lacks DNSSEC and important security headers, which are recommended to enhance security posture. Privacy and cookie policies are absent, representing a compliance gap with GDPR requirements. No incident response or vulnerability disclosure information is provided. Overall, the website is professional, trustworthy, and well-maintained, but improvements in privacy compliance and security hardening are advised to reduce risk and enhance user trust.

The website breakartproduction.cz serves as an AI guide for Huť Barbora, a cultural or historical entity likely based in the Czech Republic. The site is relatively new, established in 2022, and uses WordPress with Elementor and the Blocksy theme, indicating a modern but basic technical infrastructure. The content is minimal and primarily informational without commercial or interactive features. Technically, the site benefits from HTTPS and a recognized hosting provider but lacks advanced security headers and privacy compliance mechanisms. No contact information or legal policies are present, which limits trust and compliance. Overall, the site is functional but basic, with room for improvement in security and privacy practices.

The website danubegeotour.eu is a geo-tourism platform providing information about geoparks, points of interest, trails, and geo-products in the Danube region. It targets tourists, families, groups, schools, and experts interested in geo-tourism activities. The platform allows users to explore geo-related content and submit ideas for new geo-products, positioning itself as a niche informational resource in the geo-tourism sector. Technically, the website leverages Google Maps API for interactive mapping, uses modern fonts and icons, and appears to be built with a SPA framework such as Vue.js. Hosting is provided by WebSupport s.r.o. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. From a security perspective, the site uses HTTPS and includes a CSRF token, but lacks visible security headers and published privacy or cookie policies. There is no contact information for incident response or data protection officers, which limits transparency and compliance. No analytics or tracking beyond Google Maps is detected, indicating minimal user tracking. Overall, the website is functional and serves its informational purpose but requires improvements in privacy compliance, security headers, and contact transparency to enhance trust and security posture. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and providing clear contact channels for security incidents.

S

Svatby v zahradě

svatbyvzahrade.cz

44

Svatby v Zahradě is a small event venue business located in Plzeň, Czech Republic, specializing in outdoor weddings, engagements, photo shoots, and various celebrations in a meditation garden setting. The website is professionally designed using WordPress and Elementor, featuring multimedia content such as Vimeo videos and Google Maps integration. The technical infrastructure is modern and includes security measures like HTTPS and Google reCAPTCHA on the contact form. However, the site lacks visible privacy and cookie policies, which are important for GDPR compliance. Contact information is clearly provided, enhancing business credibility. Overall, the site presents a trustworthy and user-friendly experience suitable for its target audience.

M

Město Choceň

chocen.cz

47

The website www.chocen.cz serves as the official online presence of the town of Choceň, Czech Republic. It provides comprehensive information and services targeted primarily at local residents and visitors, including municipal office details, contact information, event calendars, and official announcements. The site is well-structured and content-rich, supporting the town's communication and administrative functions effectively. The business model is that of a government/public service entity, focusing on transparency and citizen engagement. Technically, the website employs a combination of legacy and modern web technologies such as jQuery, Bootstrap, and Font Awesome, integrated within a CMS platform likely based on Vismo. The site is mobile-optimized and accessible, though some improvements in SEO and accessibility could be made. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and secure form submissions but lacks advanced security headers and explicit incident response or vulnerability disclosure policies. Privacy compliance is addressed with a privacy policy and cookie policy, though a cookie consent mechanism is absent. Contact information is clearly provided, enhancing trust. Overall, the website presents a low-risk profile with good business credibility and content quality. The absence of WHOIS data slightly reduces trust but does not detract from the site's legitimacy as a municipal government portal. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security policies to improve compliance and user trust.

F

Fenetra

fenetra.cz

43

Fenetra is a small craft brewery based in the Czech Republic, specializing in beers inspired by traditional and modern brewing techniques, particularly focusing on barrel-aged and spontaneously fermented beers. Their product portfolio is diverse, targeting craft beer enthusiasts who appreciate complex and rustic beer styles. The website reflects a well-branded and consistent digital presence with detailed product information and active social media engagement. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Google services, hosted on Czech infrastructure. Security posture is adequate with HTTPS and CSRF protections, but lacks explicit security headers and formal privacy or cookie policies. The absence of vulnerability disclosure and incident response information suggests room for improvement in security transparency. Overall, the domain registration and website content are consistent and legitimate, supporting a trustworthy business profile.

K

Knezinek Hotel und Breuerei

knezinek.at

42

Knezinek Hotel und Breuerei is a small hospitality business located near České Budějovice, Austria, combining a microbrewery, hotel, restaurant, wellness, sports facilities, and a new camping site. The website presents a professional and consistent brand image with clear descriptions of services and target audiences including families, groups, and corporate clients. Technically, the site is built on WordPress with modern themes and plugins, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks security headers and privacy compliance documentation. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security policies to improve compliance and user trust.

N

Nadácia otvorenej spoločnosti

osf.sk

46

Nadácia otvorenej spoločnosti is a well-established Slovak non-profit foundation founded in 2003, dedicated to supporting open society, democracy, and freedom through grants, scholarships, and projects. The website reflects a professional and consistent brand presence with comprehensive content targeting civil society organizations, media, and the general public interested in democratic values. The foundation maintains a moderate-sized digital footprint with active news updates and partnerships in the region. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and Mailchimp, indicating a mature digital infrastructure. Security posture is strong with HTTPS, DNSSEC, and GDPR compliance, though there is room for improvement in HTTP security headers and incident response transparency. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

The website 'An IndieWeb Webring' is a small community-driven project aimed at connecting personal websites that implement IndieWeb building blocks. It provides a directory, random site navigation, and membership sign-in via IndieAuth or RelMeAuth, targeting IndieWeb enthusiasts. The project is open source with active maintenance and blog updates, positioning itself as a niche community resource within the IndieWeb ecosystem. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and PHP, with no detected CMS. The site is moderately performant and mobile-optimized, though accessibility and SEO are basic. Security practices include CSRF protection on forms but lack advanced HTTP security headers. The domain is privacy protected but consistent with the project's age and scope. Security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in HTTPS enforcement, security headers, and explicit privacy and cookie policies. No advertising or tracking is present, supporting user privacy. Overall, the site is trustworthy and safe for general audiences. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing a privacy policy with GDPR compliance, and improving contact transparency to strengthen trust and compliance.

F

First information systems, s.r.o.

buildary.online

48

Buildary.online is a cloud-based construction project diary and management software provided by First information systems, s.r.o., targeting construction professionals in the Czech and Slovak Republics. The platform offers modules for project diary, task management, and construction works reporting, emphasizing compliance with legislation and ease of use. The website is professionally designed using Joomla CMS and hosted on Microsoft Azure, ensuring reliable infrastructure and security. Multiple marketing and analytics tools are integrated, including Google Analytics, Facebook Pixel, and Hotjar, with a cookie consent mechanism in place. However, the site lacks explicit privacy policy and terms of service pages, which are recommended for full compliance and transparency. Security posture is good with HTTPS and reputable hosting but could be improved by adding explicit security headers and a vulnerability disclosure policy.

F

First information systems, s.r.o.

firstis.eu

47

First information systems, s.r.o. is a medium-sized software company specializing in the development and implementation of building software and ERP systems, primarily targeting the construction, manufacturing, logistics, and transportation sectors. Their business model focuses on delivering proprietary software solutions alongside partner products, complemented by consulting, development, integration, and implementation services. The company maintains a professional online presence with clear contact information and customer testimonials, positioning itself as a trusted regional player in its niche. Technically, the website is built on Joomla CMS with modern frontend technologies such as Bootstrap, jQuery, and Nextend Smart Slider. The site is mobile-optimized and uses Google Analytics and Leady for tracking. While performance is moderate, the site is well-structured and user-friendly. However, some SEO and accessibility features could be improved. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks important security headers and a published privacy policy or terms of service. No vulnerability disclosure or incident response information is provided, which could be improved to enhance trust and compliance. No WAF or blocking mechanisms were detected, and no sensitive data exposure was found. Overall, the website is professional and trustworthy with a solid business foundation but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

J

Javna ustanova NATURA VIVA

naturaviva.hr

44

Javna ustanova NATURA VIVA is a Croatian public institution dedicated to managing protected natural areas within Karlovačka županija. The organization focuses on environmental conservation, educational workshops, monitoring of wildlife, and public engagement. Their website reflects a regional governmental entity with a clear mission to preserve natural heritage and promote ecological awareness. The content is well-structured, informative, and targeted primarily at local citizens, schools, volunteers, and environmental stakeholders. The business model is non-commercial, operating under public funding and regional governance.

N

Nebezpečné jezy v ČR

nebezpecnejezy.cz

34

The website 'Nebezpecnejezy.cz' is a specialized informational platform focused on providing a comprehensive database and safety information about dangerous river weirs in the Czech Republic. It serves primarily water sports enthusiasts, local authorities, and the general public interested in water safety. The site is well-established, with a domain age of over 13 years, and collaborates with recognized partners in the water sports and water management sectors. Technically, the site is built on ASP.NET Web Forms and integrates common tracking tools such as Google Analytics and Google Tag Manager. While the site offers good content quality and user experience, it lacks formal privacy and cookie policies, which is a compliance gap. Security-wise, HTTPS is used, but security headers and advanced protections are missing, indicating room for improvement. Overall, the site is trustworthy and functional but would benefit from enhanced privacy compliance and security hardening.

S

Suché jezy v ČR

suchejezy.cz

38

The website suchejezy.cz is an informational and environmental project focused on documenting and raising awareness about dry weirs in Czech rivers that negatively impact ecology and recreational use. It serves a niche audience including water sports enthusiasts, environmentalists, and local communities. The site provides a searchable database, map integration, news articles, and partner collaborations to support its mission. Technically, the site is built on ASP.NET Web Forms with integration of Google Maps API and Google Analytics for tracking. While functional, the site shows some legacy technology usage and basic mobile and accessibility features. Security posture is moderate with HTTPS usage but lacks security headers and exposes a Google Maps API key without restrictions. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is legitimate and stable with a domain age consistent with its history. Strategic improvements in security and privacy compliance would enhance trust and user protection.

R

Raft.cz

raft.cz

48

Raft.cz is a specialized Czech water sports guide website providing comprehensive information about rivers, current water conditions, rental services, and community-driven content such as articles and forums. It targets water sports enthusiasts including canoeists, kayakers, and rafters primarily in the Czech Republic and neighboring European countries. The website operates as an informational portal with advertising and community features, maintaining a consistent brand presence and active user engagement. Technically, the site is built on ASP.NET Web Forms with integration of common analytics and advertising technologies such as Google Analytics, Facebook SDK, and DoubleClick. Mobile optimization and accessibility are basic but functional. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers and explicit privacy policies are lacking. WHOIS data is unavailable, which limits domain trust assessment, but the website content and external references suggest legitimacy. Overall, the site scores well in content quality and business credibility but could improve in privacy compliance and technical modernization.

The website rekasazava.cz represents Posázaví o.p.s., a small non-profit organization based in the Czech Republic focused on environmental protection and recreational activities related to the Sázava river. The site provides navigation information, weather updates, project news, and multimedia content supporting community engagement and volunteerism. The organization appears to be well-established since 2017 with a clear mission and target audience of water sports enthusiasts and local communities. Technically, the website uses an older CMS (Apollo 8G) and relies on legacy JavaScript libraries such as jQuery 2.1.4 and Flash content, which pose security and compatibility risks. The hosting is provided by cesky-hosting.eu, and the site integrates Google Analytics and Facebook SDK for tracking, but lacks visible privacy or cookie policies and consent mechanisms, indicating compliance gaps with GDPR and modern privacy standards. From a security perspective, the site uses HTTPS for external resources but lacks visible security headers and uses outdated libraries, increasing vulnerability exposure. No sensitive data leakage was detected, but the absence of security policies and incident response contacts limits the security maturity. The domain WHOIS data is consistent and legitimate, supporting trust in the organization. Overall, the website is functional and informative but requires modernization of its technical stack, implementation of privacy and security policies, and improved compliance to enhance trust and security posture.

Čistá řeka Sázava is a Czech non-profit organization dedicated to environmental volunteerism, specifically focused on cleaning and preserving the Sázava river. The website serves as a community hub for volunteers and supporters, providing news, event information, and multimedia content such as videos and social media integration. The organization has an established presence with over 20 years of activity, supported by a registered legal entity Posázaví o.p.s. The site targets local communities and environmental activists, promoting engagement and awareness through events and media campaigns. Technically, the website uses legacy JavaScript libraries and includes deprecated Flash content, indicating a need for modernization. The site integrates Google Analytics and Facebook SDK for tracking but lacks explicit privacy and cookie policies, which is a compliance concern. Security posture is moderate with no visible advanced security headers and outdated libraries that may pose vulnerabilities. Overall, the website is functional and moderately professional but requires updates to improve security, privacy compliance, and technical modernization.

Liturgie.cz is a Czech-language website dedicated to providing comprehensive resources on Catholic liturgy, including liturgical texts, educational materials, news, and downloadable supplements. It targets clergy, liturgists, and laypersons interested in liturgical practices within the Czech Republic. The site offers quick access to Bible, Missal, Breviary, and other liturgical tools, supported by a professional and consistent design with active social media engagement. Technically, the website employs a modern front-end stack including jQuery, Bootstrap, Font Awesome, and other JavaScript libraries to deliver a responsive and user-friendly experience. While the site is accessible over HTTPS and shows no signs of blocking or WAF interference, it lacks visible advanced security headers and formal privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site demonstrates basic good practices such as HTTPS usage and no exposed sensitive data in the HTML. However, the absence of WHOIS data and domain registration details limits the ability to fully verify the domain's legitimacy and trustworthiness. No vulnerability disclosure or incident response information is provided, which could be improved to enhance security posture. Overall, Liturgie.cz is a well-maintained niche informational platform with good content quality and user experience but would benefit from enhanced privacy compliance, security headers, and transparency in domain registration to improve trust and compliance.

N

NETservis s.r.o.

manzelstvi.cz

45

Manzelstvi.cz is a Czech-language non-profit website dedicated to promoting Christian values and education about marriage. The site offers a variety of articles, resources, and guidance focused on lifelong marital commitment, family life, and spiritual growth. It is operated by NETservis s.r.o., a company providing web services, and uses a custom CMS platform. The website is well-structured, mobile responsive, and includes cookie consent mechanisms to comply with GDPR. However, the absence of WHOIS data and lack of explicit contact information reduce transparency and trustworthiness. The site uses standard tracking tools such as Google Analytics and Facebook Pixel, with moderate user tracking levels.

M

Maria.cz - Panna Maria, Madona

maria.cz

46

Maria.cz is a Czech-language website dedicated to providing a balanced and educational Christian Catholic perspective on the veneration of the Virgin Mary. The site offers a variety of articles, news updates, and related links focused on Marian devotion, theological topics, and religious celebrations. It targets a general audience interested in religious education and spiritual growth within the Christian tradition. Technically, the site uses a moderate technology stack including jQuery, Google Analytics, and cookie consent plugins, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. The absence of WHOIS data limits domain trust assessment, but the website content and structure indicate a legitimate and professionally maintained site. Overall, the site presents a low-risk profile with room for improvement in security and compliance documentation.

A

Arcibiskupství pražské

pastorace.cz

47

Pastorace.cz is a Czech non-profit website affiliated with Arcibiskupství pražské, providing pastoral care materials, spiritual life resources, liturgical calendars, and religious articles. It targets the Christian community, clergy, and spiritual practitioners primarily in the Czech Republic. The website has been operational since 2000 and maintains a consistent brand presence with good content quality and user experience. Technically, the site uses a custom CMS with jQuery, Google Analytics, Matomo, and a cookie consent mechanism, ensuring moderate performance and good mobile optimization. Security posture is strong with HTTPS and cookie consent, though additional HTTP security headers could enhance protection. The site complies with GDPR and provides a clear cookie policy but lacks explicit privacy and security policy pages. WHOIS data is unavailable, likely due to privacy protection, but the website's content and affiliations suggest legitimacy. Overall, the site scores well on content, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy resource in its domain.

A

Arcibiskupství pražské

vira.cz

48

Vira.cz is a Czech non-profit religious informational website operated by Arcibiskupství pražské. It provides a broad range of Christian faith-related content including articles, Bible quotes, newsletters, and resources for children and families. The site holds a strong market position as a leading religious informational portal in the Czech Republic, targeting a general audience interested in spirituality and Christianity. Technically, the website uses standard web technologies such as jQuery, Google Analytics, and Matomo for analytics, and implements cookie consent mechanisms to comply with privacy regulations. The site is mobile-optimized and well-structured, offering a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses domain verification for Google and Facebook, but lacks advanced security headers and publicly available security policies or incident response information. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given its content and domain age claims. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though improvements in security posture and transparency are recommended.

The website ktispromlade.cz is currently inaccessible beyond a Cloudflare Turnstile human verification challenge page, preventing access to any substantive content. The domain is newly registered in early 2024 and uses Cloudflare for DNS and security services. Due to the WAF challenge, no business information, contact details, or policies are publicly visible. This limits the ability to assess the company's market position, services, or compliance posture. Technically, the site employs modern Cloudflare security mechanisms but lacks visible security headers or SSL configuration details. The security posture cannot be fully evaluated due to blocked content. Overall, the site appears immature and lacks transparency, resulting in a low trust and credibility score.

Č

Českobudějovicko - Hlubocko, z.s.

cb-hl.cz

37

Českobudějovicko - Hlubocko, z.s. is a regional non-profit organization focused on promoting tourism and coordinating activities in the South Bohemian region of the Czech Republic. The website serves as a hub for tourism information, event calendars, educational resources, and partner collaboration. It targets tourists, local businesses, and regional stakeholders. The organization appears well-integrated with regional government and tourism bodies, as evidenced by partner logos and references. Technically, the website uses a modern tech stack including HTML5, CSS3, JavaScript with jQuery, and several third-party libraries for galleries and lazy loading. It integrates Google Analytics, Google Tag Manager, Facebook Pixel, and SmartEmailing for tracking and marketing purposes. The site is mobile-optimized and has good navigation and content structure, though accessibility features are basic. Security-wise, the site uses HTTPS and asynchronous script loading but lacks visible security headers and explicit privacy or cookie policies, which are compliance gaps. No WHOIS data is available, limiting domain trust assessment, but the site content and partner affiliations suggest legitimacy. Overall, the site has a moderate security posture with room for improvement in privacy compliance and security best practices. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in privacy policy publication, security headers, and WHOIS transparency would enhance trust and compliance.

N

NAHUALES, Alebrijes From Oaxaca

nahualesfromoaxaca.com.mx

41

The website 'NAHUALES, Alebrijes From Oaxaca' serves as a cultural and artistic platform promoting traditional Mexican folk art, specifically Alebrijes from Oaxaca. It targets art enthusiasts and cultural tourists interested in artisan crafts. The business model appears to focus on showcasing artists, cultural tours, and possibly sales of handcrafted pieces, positioning itself within a niche artisan market. The website content is basic but relevant to its cultural theme. Technically, the site employs a variety of front-end libraries and plugins such as Bootstrap, jQuery, Slider Revolution, and Owl Carousel to enhance user experience. However, there is no evidence of a CMS or advanced backend frameworks. Performance and mobile optimization are moderate, with room for improvement in accessibility and SEO practices. The site lacks structured data and meta tags that could improve search engine visibility. From a security perspective, the site does not demonstrate strong security posture. There is no visible HTTPS confirmation or security headers in the provided data, and no privacy or cookie policies are present, which raises compliance concerns. No contact information or incident response channels are provided, limiting transparency and trust. The domain uses privacy protection for WHOIS data, which is reasonable for a small cultural business. No suspicious patterns or vulnerabilities were detected. Overall, the website is functional and serves its cultural promotion purpose but requires improvements in security, privacy compliance, and contact transparency to enhance trustworthiness and user confidence.

G

Grillfreaks.cz

grillfreaks.cz

47

Grillfreaks.cz is a small hospitality business operating a unique bistro and bar located in the training ground area of Viktorka. Founded in 2023, the company focuses on delivering quality food with a creative and humorous approach, targeting local customers who appreciate good cuisine, music, and social events. Their business model includes direct food and beverage services, catering, and event hosting, positioning them as a community-centric hospitality provider in the Czech Republic. Technically, the website is built on WordPress using the Blocksy theme and Elementor page builder, supported by jQuery and Swiper.js for interactive elements. Hosting is provided by vas-hosting.com, and the site is mobile-optimized with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is good with clear privacy and cookie policies and GDPR adherence. Overall, the site is professional and trustworthy but could improve in security and technical SEO aspects.

B

BISTRO PŘÍSTAV / Ing. Antonín Juriga

rolovanazmrzlina.cz

47

Rolovaná Zmrzlina is a small hospitality business based in the Czech Republic specializing in the production and sale of rolled ice cream made fresh in front of customers. Established in 2014, the company emphasizes quality ingredients and a unique production method that allows customers to customize their ice cream with various bases, fruits, toppings, and sauces. The website reflects a growing and engaged customer base with a focus on direct sales and customer satisfaction. Technically, the website is built on WordPress using the Avada theme and includes modern web technologies such as jQuery and YouTube integration. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR regulations. Security posture is adequate with HTTPS enabled, though additional security headers could improve protection. The absence of WHOIS data limits domain trust assessment, but the website content and contact information appear legitimate and consistent with a small local business. Overall, the site presents a professional and trustworthy online presence for a niche food service provider.

P

PROSTĚ NA KOLECH - pojízdný bar

prostenakolech.cz

39

Prostě na kolech is a small hospitality business based in the Czech Republic offering a unique mobile bar rental service. They have transformed a horse trailer into a portable bar suitable for events such as weddings, celebrations, and corporate parties. Their service includes bar rental, optional bar staff, decorations, and delivery within a specified radius. The website is professionally designed with clear navigation and good content quality, targeting event organizers and individuals seeking a stylish bar solution for their events. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, and various JavaScript libraries for UI effects and analytics. The site is mobile optimized and includes Google Analytics for visitor tracking. However, it lacks privacy and cookie policies and does not implement a cookie consent mechanism, which is a compliance gap. No forms are present, reducing data collection risks. From a security perspective, the site uses HTTPS but lacks visible security headers and vulnerability disclosures. The absence of WHOIS data for the domain is a significant concern, impacting trust and legitimacy assessments. No critical vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website presents a professional and functional online presence for a niche hospitality service but requires improvements in privacy compliance, security headers, and domain transparency to enhance trust and regulatory adherence.

O

Ola Kala

olakala.cz

43

Ola Kala is a Prague-based culinary school specializing in cooking and baking courses that cover traditional Czech and international cuisines. Established since 2007, it offers hands-on educational experiences led by gastronomy experts in a welcoming studio environment. The business targets cooking enthusiasts and hobby chefs seeking to improve their culinary skills through diverse course offerings, catering, and event services. Technically, the website employs a custom CMS with a moderate tech stack including jQuery, Google Analytics, and reCAPTCHA, ensuring basic security and user tracking. Security posture is solid with HTTPS and CAPTCHA protections, though improvements in security headers and updated libraries are recommended. Privacy compliance is partially addressed with cookie consent but lacks a dedicated privacy policy page. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

M

Minipivovar Kněžínek

knezinek.cz

42

Minipivovar Kněžínek is a Czech hospitality business operating a microbrewery, restaurant, wellness hotel, camping site, and event facilities. Founded in 2012, it serves as a local leisure and tourism destination offering diverse services including wellness, gym, and conference hosting. The website is professionally designed using WordPress and Kadence theme, featuring multimedia content and external booking integrations. Security posture is good with HTTPS enabled, but lacks some security headers and privacy policies. WHOIS data is unavailable, which reduces trust but the site content and presentation support legitimacy. Overall, the business appears credible and well-positioned in the regional hospitality market.

P

Pivovar Clock s.r.o.

pivovarclock.cz

47

Pivovar Clock s.r.o. is a small craft brewery based in Potštejn, Czech Republic, established in 2012. The company produces a variety of craft beers and operates an e-shop alongside participation in local beer festivals and events. The website reflects a well-maintained digital presence with clear branding and user engagement features such as newsletters and social media integration. Technically, the site uses modern web technologies including Laravel backend, jQuery, Bootstrap, and Google Analytics, providing a responsive and user-friendly experience. Security measures include HTTPS enforcement, CSRF tokens, age verification overlays, and hCaptcha for form protection. However, the absence of WHOIS data and explicit privacy policy reduces overall trust and compliance posture. The site is free from WAF blocks or malware indications, making it accessible and functional for users.

R

Rodinný pivovar Bukovar s.r.o.

bukovar.cz

32

Rodinný pivovar Bukovar s.r.o. is a small family-owned brewery located in Dolní Bukovsko, Czech Republic, specializing in traditional Czech beers including both bottom-fermented and top-fermented varieties. The brewery emphasizes regional heritage and quality ingredients, including unique spring water from an underground lake. Their product range includes several types of beers such as light lagers, wheat beers, IPAs, and stouts. The website supports direct sales through an onsite pub, self-service sales outside opening hours, and an online ordering form, targeting local customers and beer enthusiasts. Technically, the website is built on WordPress with WooCommerce and uses common plugins and Google Maps integration. The site is mobile optimized with good design and navigation but lacks some advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled and Wordfence plugin detected, but missing security headers and no visible privacy or cookie policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy. The site content is safe but categorized as 'questionable' due to alcohol-related content, targeting a mature audience.

P

Pivovar Mazák

pivovarmazak.cz

46

Pivovar Mazák is a small craft brewery based in Dolní Bojanovice, Czech Republic, established in 2011. The company specializes in brewing fresh, balanced craft beers that respect tradition and modern trends. The website reflects a local business with a clear focus on quality and craftsmanship, targeting adult consumers interested in craft beer. The site includes an age verification popup to restrict access to users 18 years or older, aligning with legal requirements for alcohol-related content. Technically, the website is built on WordPress using WPBakery Page Builder, hosted by cesky-hosting.eu, and integrates common analytics and marketing tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. The site is mobile optimized and SEO friendly with good content quality and consistent branding. Security posture is moderate with HTTPS enabled and basic best practices observed, but lacks explicit security headers and published security policies. Privacy compliance is strong with GDPR-compliant cookie consent and a comprehensive privacy policy. WHOIS data is consistent with the business claims, showing domain registration since 2011 without privacy protection, supporting legitimacy. Overall, the website is professional and trustworthy but could improve security headers and incident response transparency.

M

Madcat.beer a.s.

madcat.beer

49

MadCat is a Czech craft brewery specializing in sour ales, lagers, and traditional ales, operating since 2011. The company is structured as a stock company with over 100 shareholders, emphasizing community involvement and direct sales through brewery visits and an online e-shop. Their market position is niche but strong locally, with active participation in charity projects and brewing workshops. Technically, the website is built on the Webnode platform, uses modern CDN hosting, and is mobile optimized with good performance. Security posture is solid with HTTPS and cookie consent implemented, though lacks published security policies and privacy documentation. Overall, the site is professional and trustworthy, with room for improvement in compliance documentation and security headers.

P

Panský pivovar Vlachovo Březí s.r.o.

brezikoza.cz

42

Březí Koza is a small craft brewery based in Vlachovo Březí, Czech Republic, reviving a historic brewing tradition with a focus on traditional brewing methods and quality. The website presents the brewery's products, history, and contact information clearly, targeting a mature audience interested in craft beer. The company operates with a clear local identity and maintains active social media channels to engage customers. Technically, the website uses a modern but common technology stack including jQuery, Bootstrap, and Google Analytics, hosted by a Czech registrar WEDOS, ensuring regional consistency. Security posture is moderate with HTTPS implied and reCAPTCHA implemented, but lacks explicit security headers and published security policies. Privacy compliance is partial with a cookie consent banner but no visible privacy or terms of service policies. Overall, the site is professional and trustworthy but could improve compliance and security transparency.