High-risk security reports

D

Debant s.r.o.

namestitev.si

44

The website www.namestitev.si is a well-established online directory specializing in private accommodation listings in Croatia, primarily targeting tourists seeking direct contact with property owners. Operating since 2010 under the company Debant s.r.o., it offers extensive regional coverage including Istria, Dalmatia, Kvarner, and Dubrovnik, with features such as last-minute deals, weather forecasts, and video presentations. The business model focuses on connecting travelers directly with accommodation providers, avoiding intermediaries, which positions it as a niche player in the Croatian hospitality market. Technically, the site employs a custom or unknown CMS with a tech stack including jQuery, Google Analytics, Google Adsense, and Font Awesome. It is hosted by NEOSERV.si, a Slovenian registrar and hosting provider, and uses HTTPS with moderate performance and good mobile optimization. However, the site lacks explicit security headers and cookie consent mechanisms, which are important for compliance and security best practices. From a security perspective, the site benefits from HTTPS and does not expose sensitive data in its HTML content. Nevertheless, the absence of security headers and privacy/cookie policies represents compliance gaps, particularly under GDPR. No WAF or blocking mechanisms are detected, and no vulnerabilities are apparent from the HTML content. The domain WHOIS data is consistent and trustworthy, registered with a reputable provider since 2010. Overall, the website is functional, content-rich, and credible for its business purpose but requires improvements in privacy compliance and security hardening to enhance trust and regulatory adherence.

D

Debant s.r.o.

zakwaterowaniewchorwacji.pl

41

The website zakwaterowaniewchorwacji.pl operates as a comprehensive catalog and booking platform for private accommodation in Croatia, primarily targeting Polish-speaking tourists. It offers a wide range of vacation rentals including apartments, rooms, villas, and houses across multiple Croatian regions. The business is operated by Debant s.r.o., a company with a domain registration dating back to 2006, indicating a stable and established presence in the hospitality sector. The platform integrates multilingual support through related domains and provides practical travel information, last-minute offers, and direct contact with property owners.

D

Debant s.r.o.

alloggioincroazia.it

43

The website www.alloggioincroazia.it operates as a specialized online platform offering a comprehensive catalog of private accommodation listings in Croatia, primarily targeting Italian and European tourists planning vacations in 2026. The platform provides detailed regional information, direct owner contacts for bookings, last-minute offers, weather forecasts, and video presentations, positioning itself as a significant player in the Croatian hospitality market for the Italian-speaking audience. The business is operated by Debant s.r.o., a company with a consistent domain registration and business focus. Technically, the website employs standard web technologies including jQuery, Google Analytics, Google Adsense, Font Awesome, and jQuery UI. The site is mobile-optimized with a responsive design and good navigation clarity, although accessibility features are basic. Performance is moderate, and SEO practices are adequately implemented with proper meta tags and structured data for search engines. From a security perspective, the site uses HTTPS with a good SSL configuration and defers script loading to optimize performance. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, and does not provide visible privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is present, indicating gaps in security transparency and readiness. Overall, the website is trustworthy and professional with a moderate security posture and good business credibility. The absence of privacy and cookie policies and security headers are notable compliance and security gaps. There is no evidence of malicious content or WAF blocking, and the site content is safe for general audiences.

D

Debant s.r.o.

unterkunftinkroatien.de

41

Unterkunftinkroatien.de is a well-established online directory and booking platform specializing in private holiday accommodations across Croatia, targeting primarily German-speaking tourists. The platform offers extensive listings of apartments, houses, and last-minute deals, complemented by travel and weather information. Operated by Debant s.r.o., a Czech company, the website maintains a consistent brand presence with multilingual support and direct owner contacts, positioning itself as a leading resource in the Croatian hospitality market. Technically, the site employs standard web technologies including HTML, CSS, JavaScript, jQuery, and integrates Google Analytics and AddThis for tracking and social sharing. The site is mobile-optimized with good navigation and content relevance, though accessibility features are basic. Security-wise, the site uses HTTPS but lacks explicit security headers and formal privacy or cookie policies, indicating areas for compliance and security enhancement. Overall, the website is functional and trustworthy but would benefit from improved privacy compliance and security hardening to align with GDPR and modern best practices.

D

Debant s.r.o.

accommodationincroatia.net

47

Accommodationincroatia.net operates as a specialized online platform offering a comprehensive catalogue of private apartments and holiday accommodations across Croatia. The website targets tourists and travelers seeking direct contact with property owners, providing detailed listings, last minute deals, weather updates, and travel information. The business is positioned as a medium-sized hospitality service provider based in the Czech Republic, with multilingual support enhancing its market reach. Technically, the site employs common web technologies such as jQuery, Google Adsense, and Google Tag Manager, ensuring moderate performance and good mobile responsiveness. However, the absence of a detected CMS and limited security headers indicates room for technical improvement. Security-wise, the site benefits from HTTPS but lacks explicit security policies, incident response contacts, and privacy/cookie policies, which are critical for GDPR compliance and user trust. The WHOIS data is missing, which raises concerns about domain legitimacy, though the website content and business information appear professional and consistent. Overall, the site scores moderately on AI evaluation, with recommendations focusing on enhancing privacy compliance, security headers, and domain registration transparency.

D

Debant s.r.o.

hrvatska.sk

46

HRVATSKA.sk is a Slovak-based online travel accommodation platform specializing in affordable apartments and vacation rentals in Croatia. Operating since approximately 2002 under Debant s.r.o., it offers a large catalog of properties with direct owner contacts, avoiding intermediary commissions. The website targets Slovak-speaking tourists seeking budget-friendly lodging options along the Croatian Adriatic coast. The platform provides extensive regional listings, travel information, weather forecasts, and last-minute deals, positioning itself as a leading Slovak resource for Croatian vacations. Technically, the website employs a custom CMS with common web technologies including jQuery, Google Analytics, and Google Adsense for advertising. The site is mobile-optimized with responsive design and good SEO practices. However, it lacks some modern security headers and cookie consent mechanisms, which are recommended for compliance and enhanced security. The site uses HTTPS properly, ensuring encrypted communications. From a security perspective, the site demonstrates a moderate security posture with no visible critical vulnerabilities or exposed sensitive data. The absence of security headers and cookie consent banners are notable gaps. No incident response or security policy information is provided, which could be improved to enhance trust and readiness. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Overall, HRVATSKA.sk is a credible, well-established travel accommodation portal with good content quality and business credibility. Strategic improvements in security headers, privacy compliance, and incident response transparency would strengthen its security posture and regulatory adherence.

H

Hudera a syn s.r.o.

huderaasyn.cz

41

Hudera a syn s.r.o. is a small Czech Republic-based company specializing in the production and retail of homemade smoked meats and catering services. The company operates three retail stores and provides catering and stall sales at cultural and social events. The website reflects a local business with a focus on quality and tradition, dating back to 1924 with a renewal in 1990. The market position is regional with a loyal customer base interested in fresh meat products and event catering. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and Revolution Slider, hosted likely by Wedos, a Czech provider. The site is mobile optimized and SEO friendly with good navigation and professional design. Security posture is moderate with HTTPS enforced and basic best practices observed, but lacks explicit security headers and visible privacy or cookie policies. The site uses Google Analytics and Tag Manager with consent default denied but no visible consent banner, indicating partial privacy compliance. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy but could improve privacy and security compliance.

A

Aquapalace Hotel Prague

aquapalacehotel.cz

45

Aquapalace Hotel Prague operates as a family and wellness hotel integrated with the largest water park in the Czech Republic, offering a broad range of leisure, accommodation, and conference services. The website presents a professional and content-rich platform targeting families, couples, and business travelers seeking entertainment, wellness, and event hosting in Prague. Technically, the site uses a modern technology stack including jQuery, Bootstrap, and various analytics and marketing tools, with a CMS identified as Topinfo CMS. The site is mobile-optimized and well-structured, providing a positive user experience. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit privacy policies suggests room for improvement. The lack of WHOIS data reduces transparency and trust slightly but is offset by visible certifications and clear contact information. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced security and privacy disclosures.

G

GTO Solutions, s.r.o.

24casino.cz

49

24casino.cz is a Czech-language online casino affiliate and informational website operated by GTO Solutions, s.r.o. The site provides comprehensive reviews, bonus offers, news, and guides related to legal online casinos in the Czech Republic. It targets Czech players interested in gambling and casino games, offering detailed content on casino bonuses, free spins, and gaming news. The business model is primarily affiliate marketing combined with content publishing, positioning itself as a trusted local resource with over 10 years of experience in the industry. Technically, the website is built on WordPress, optimized with NitroPack, and uses modern web technologies including jQuery and Google Tag Manager for analytics. The site is mobile-optimized and performs well with good SEO practices. Security posture is adequate with HTTPS enforced but lacks some advanced security headers and explicit incident response policies. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. WHOIS data shows transparent registration consistent with the business claims, supporting legitimacy. Overall, the site is professional, content-rich, and trustworthy for its target audience, though improvements in privacy and security disclosures are recommended.

Multigate, a.s. is a Czech company established in 2002 specializing in the operation and rental of lottery and gaming devices, notably the VIDEO LOTTERY TERMINAL branded as VLT MULTILOTTO. The company aims to become a leading operator in the Czech gaming market. The website provides basic information about the company, its services, and a loyalty program with a member account section. Technically, the site uses standard web technologies including Google Fonts and Google reCAPTCHA for form protection, but lacks advanced security headers and cookie consent mechanisms. Security posture is moderate with some client-side validation but no visible HTTPS enforcement or published security policies. Overall, the site is functional but basic in design and content quality, with limited direct contact information and no social media presence.

M

MOD PLAY, a.s.

modplay.cz

41

MOD PLAY, a.s. is a Czech corporate entity with a web presence focused on providing company profile information. The website is built on Drupal 7 and uses an outdated jQuery library, indicating a legacy technical infrastructure. The site content is minimal, primarily displaying company registration and address details without additional business or service descriptions. No privacy, cookie, or terms of service policies are present, and no contact emails or phone numbers are provided, limiting user engagement and transparency. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy and reduces trustworthiness. Security posture is basic with no detected security headers and potential vulnerabilities due to outdated libraries. Overall, the website is functional but lacks modern security, privacy compliance, and comprehensive business information.

G

go4games

go4games.cz

49

Go4games.cz is a Czech Republic-based casino and poker gaming website offering services such as roulette, blackjack, Texas hold'em, and regular poker tournaments and cash games. The site targets adult users interested in casino entertainment and operates with a professional and consistent brand presence. Technically, the website is built on WordPress using Elementor and JetEngine plugins, integrating Google Analytics and Google Tag Manager for analytics and marketing purposes. The site implements GDPR-compliant cookie consent mechanisms and maintains a comprehensive privacy policy, reflecting good privacy compliance. Security posture is adequate with HTTPS enabled and cookie consent in place, though additional security headers could enhance protection. No blocking or WAF mechanisms were detected, allowing full content accessibility. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

L

LERIS.CZ s.r.o.

leris.cz

49

LERIS.CZ s.r.o. is a Czech Republic-based IT company specializing in the design, implementation, and integration of information systems, as well as software and application development. The company serves business clients requiring tailored IT solutions and has established partnerships with notable organizations in the Czech market. Their service offerings include technical support, system design, implementation, integration, and custom software development across multiple platforms. The website reflects a professional business presence with clear service descriptions and client references. Technically, the website employs legacy JavaScript libraries such as jQuery 1.8.2 and related plugins, indicating a need for modernization to improve security and performance. The site includes a cookie consent mechanism and uses Google Analytics for visitor tracking, demonstrating basic privacy compliance. However, the absence of a dedicated privacy policy page and lack of modern security headers suggest areas for improvement in security posture. Security-wise, the site shows no signs of blocking or WAF interference, and no critical vulnerabilities were detected in the content. The lack of WHOIS data reduces trust in domain registration transparency, but the visible business information and certifications support legitimacy. Overall, the security posture is moderate with recommendations to enhance header security, update libraries, and publish comprehensive privacy and security policies. The overall risk assessment is moderate with a good foundation in business credibility and content quality but with technical and security improvements needed to reach a higher maturity level. Strategic recommendations include updating technical components, enhancing security policies, and improving privacy compliance to strengthen trust and resilience.

G

GELP s.r.o.

gelp.cz

49

GELP s.r.o. operates a network of casinos and gaming halls across the Czech Republic, providing a variety of gaming experiences, loyalty programs, and premium casino environments. The company targets adult customers interested in gambling entertainment and positions itself as a reputable operator with multiple brands and locations. The website is built on WordPress using the Divi theme, featuring a modern tech stack with jQuery and MediaElement.js, and hosted likely by REG-ZONER. The site demonstrates good design quality, mobile optimization, and clear navigation, though accessibility and SEO could be improved. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the business credibility is strong with clear contact information and trust indicators. The site content is gambling-related and restricted to adults, with appropriate warnings.

The website at bmm.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. Due to this restriction, no business information, contact details, or policy documents are available for review. The domain itself is well-established, created in 1996 and registered with a reputable registrar, indicating a legitimate registration history. However, the lack of accessible content severely limits the ability to assess the company's market position, services, or technical infrastructure. The website appears to be hosted with Azure DNS but lacks visible security headers or privacy compliance indicators. Overall, the digital presence is minimal and inaccessible, which negatively impacts trust and user experience.

The website evona.sk is currently inaccessible, returning a 403 Forbidden error page served behind Cloudflare DNS. Due to this access restriction, no meaningful content or business information is available for analysis. The domain is registered since 2003 under a Slovak registrar and uses Cloudflare nameservers, indicating a legitimate registration but the website itself is blocked or restricted. No privacy, cookie, or terms of service policies are present, nor any contact information or forms. The technical infrastructure appears to rely on Cloudflare for DNS and possibly security, but no further technology or CMS details are discernible. The security posture cannot be fully assessed due to lack of access and absence of security headers or SSL details. Overall, the site is currently non-functional for visitors, which severely limits trust and business credibility.

C

cbData, s.r.o.

cbdata.cz

46

cbData, s.r.o. is a Czech technology company specializing in non-gaming IT solutions for the gaming industry, focusing on responsible gaming technologies, operational and analytical products, and regulatory compliance. The company positions itself as a leader in the Central European gaming IT sector, offering consulting, standardization, and business intelligence services tailored to gaming operators and regulators. The website is professionally designed using WordPress and the Divi theme, with clear navigation and good mobile optimization. However, it lacks visible privacy and cookie policies, security headers, and WHOIS transparency, which impacts trust and compliance perception. Security posture is adequate with HTTPS enabled but could be improved with additional headers and policies. Overall, the site is accessible and content-rich, targeting B2B clients in the gaming sector.

C

Centrum pre liečbu drogových závislostí Bratislava

cpldz.sk

45

Centrum pre liečbu drogových závislostí Bratislava (CPLDZ) is a specialized healthcare institution focused on prevention, diagnosis, treatment, and care related to psychoactive substance use disorders. Established in 1992 and affiliated with the Slovak Ministry of Health, CPLDZ holds a leading position in addiction treatment in Slovakia, offering a comprehensive range of services including outpatient and inpatient treatment, therapeutic groups, needle exchange programs, and research activities. The website reflects a professional and trustworthy organization with clear communication and patient-focused content. Technically, the site is built on WordPress with modern plugins and frameworks, hosted on Slovak infrastructure with DNSSEC and HTTPS enabled, ensuring a secure and performant user experience. Privacy compliance is well addressed with clear policies and consent mechanisms. Security posture is strong with no critical vulnerabilities detected, though some improvements in security headers and incident response transparency are recommended. Overall, CPLDZ presents a credible, well-established healthcare provider with a solid digital presence.

P

Pivovar Zhůřák

pivovarzhurak.cz

48

Pivovar Zhůřák is a small independent craft brewery based in the Czech Republic, specializing in top-fermented modern beer styles such as IPA and NEIPA. Founded in 2013, it operates a 250-liter brewing system and distributes its products locally in kegs and bottles. The website provides detailed product information, contact details, and social media links, targeting craft beer enthusiasts and local consumers. Technically, the site is built on Drupal 7, uses jQuery and Google Tag Manager, and integrates Google Maps for location services. While the site is functional and well-structured, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is moderate with HTTPS usage but no visible security headers or incident response information. Overall, the site is trustworthy but could improve compliance and security practices.

F

Fast-Web

fast-web.cz

45

Fast-Web is a Czech-based small technology company specializing in affordable, modern, and responsive web design services. Founded in 2014, it offers a SaaS model providing website templates combined with a proprietary content management system. The company targets small businesses and individuals seeking cost-effective web solutions with SEO and analytics integration. The website demonstrates a consistent brand presence with clear pricing, demo options, and a focus on ease of use. Technically, the website employs a mature but somewhat dated technology stack centered around jQuery and various UI and animation libraries. The site is mobile-optimized and SEO-friendly, with a cookie consent mechanism compliant with GDPR. However, some JavaScript libraries are outdated, which could pose security risks. Performance is moderate, with room for modernization. Security posture is adequate with HTTPS enforced and cookie consent implemented. However, the absence of explicit security policies, incident response contacts, and modern security headers limits the overall security maturity. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, supported by a privacy policy and cookie consent. Overall, the website is trustworthy and professional, with a solid business model and technical foundation. Strategic improvements in security policies, library updates, and incident response readiness would enhance the security posture and compliance further.

The website represents Měšťanský pivovar v Poličce, a regional Czech brewery with a long historical tradition dating back to the 13th century and formal establishment in 1771. The business operates under the brand 'Hrom do Police' encompassing several restaurants and a hotel that promote and serve their beer products. The site provides detailed information about the brewery's history, beer portfolio, and hospitality services, targeting consumers interested in authentic Czech beer and dining experiences. Technically, the website is built on WordPress with Bootstrap and jQuery, offering a visually appealing and mobile-optimized experience, though it uses somewhat outdated software versions. Security posture is moderate with HTTPS enabled but lacks advanced security headers and visible privacy or cookie policies, indicating compliance gaps. The absence of WHOIS data reduces domain trustworthiness, but the site content and contact details appear legitimate. Overall, the site is functional and professional but would benefit from improved security and privacy compliance measures.

P

ProfiWH

profiwh.cz

42

ProfiWH is a Czech-based technology company specializing in webhosting, serverhosting, domain registration, and SSL certificate services. The company targets individuals and businesses seeking affordable and reliable hosting solutions with a broad range of domain extensions. Their market position is that of a regional hosting provider offering competitive pricing and professional services. The website is professionally designed with clear navigation and relevant content, supporting a positive user experience. Technically, the site uses a custom CMS with older JavaScript libraries such as jQuery 1.8.3, Materialize CSS, and integrates Google Maps and Facebook SDK for enhanced functionality. Security posture is moderate with HTTPS enabled and automated backups mentioned, but lacks visible security headers and uses outdated libraries, which pose potential risks. Privacy compliance is basic with a GDPR page present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and trustworthy but would benefit from technical and security improvements.

P

ProfiWH

profiwh.com

45

ProfiWH is a Czech-based hosting service provider established in 2004, offering a range of services including webhosting, serverhosting, domain registration with over 200 domain extensions, SSL certificates, and VPS hosting. The company targets businesses and individuals seeking reliable and professional hosting solutions with a focus on data care, high availability, and automatic backups. The website is professionally designed and provides multiple customer portals and administrative tools, reflecting an active and service-oriented business model. Technically, the website uses a custom CMS with technologies such as jQuery 1.8.3, Materialize CSS, Unite Gallery, and integrates Google Maps and Facebook SDK. While the site is functional and moderately optimized for performance and mobile, some technical debt is evident, such as the use of an outdated jQuery version and a broken Google Maps integration. SEO and accessibility are basic but adequate for the business purpose. From a security perspective, the site uses HTTPS and advertises SSL certificates but lacks DNSSEC and security headers, which are recommended for enhanced protection. The absence of a cookie consent mechanism is a GDPR compliance gap, although a GDPR page is present. No explicit security policy or incident response information is provided, which could be improved to enhance trust and compliance. Overall, ProfiWH presents a credible and established hosting business with a good level of professionalism and business credibility. Security and privacy compliance can be improved, particularly in cookie consent and security headers. The domain WHOIS data is consistent and supports the legitimacy of the business. The website content is safe for general audiences with no adult or questionable content detected.

ORBE is a Czech-based small marketing and web development agency operating since 2012, offering comprehensive services including website creation, PPC advertising, SEO, influencer marketing, printed advertising, and consulting. The website is professionally designed using WordPress and Elementor, with good content relevance and clear navigation targeting small and medium businesses. Technically, the site uses modern web technologies and is mobile optimized, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. WHOIS data confirms domain legitimacy and business history. Overall, the website presents a credible business with room for improvement in privacy and security practices.

The website webarchitect.cz is currently a parked domain with minimal content indicating it may be for sale. There is no active business presence or description of services. The domain is expired and uses parkingcrew.net nameservers, which is typical for domains not actively maintained. The site contains advertising scripts and tracking pixels but lacks any privacy, cookie, or terms of service policies. No contact information or social media links are provided, limiting trust and credibility. Technically, the site uses basic HTML, CSS, and JavaScript but lacks HTTPS and security headers, exposing it to potential security risks. Overall, the site is not suitable for business or user engagement in its current state.

H

Hotel Kleis

hotelkleis.cz

47

Hotel Kleis is a small hospitality business located in the Czech Republic, uniquely positioned within the historic Cvikov Brewery site. The hotel offers modern accommodation and event hosting services, targeting corporate clients, families, and groups seeking a distinctive mountain and brewery experience. The website is professionally designed with multilingual support and clear navigation, reflecting a mature digital presence. Technically, the site uses modern web technologies and is hosted by a reputable Czech provider, Websupport. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no privacy or terms of service pages. Overall, the business appears legitimate and well-positioned in its niche, though improvements in compliance and security transparency are recommended.

P

Pivovar Cvikov

restauracesladovna.cz

46

Restaurace Sladovna is a small hospitality business operating multiple restaurant branches in the Czech Republic, associated with the Pivovar Cvikov brewery. The website presents a clean, well-structured interface showcasing three restaurant locations with physical addresses and invites visitors to explore each branch. The business targets general restaurant customers and leverages its brewery association as a key brand element. Technically, the website uses modern web technologies including responsive images and JavaScript, hosted on Websupport infrastructure. However, it lacks advanced frameworks or CMS indications and shows only basic SEO and accessibility features. Security posture is moderate with no visible security headers or published security policies, and privacy compliance is limited to a cookie consent banner without a formal privacy policy or terms of service. Contact information is minimal, restricted to physical addresses without emails or phone numbers. Overall, the website is functional and professional but could improve in privacy, security, and contact transparency to enhance trust and compliance.

P

Pivovar Cvikov

pivoonline.cz

41

The website pivoonline.cz serves as an age verification landing page for an e-commerce platform selling brewery products under the brand Pivovar Cvikov. The site is minimalistic with limited content, primarily focused on confirming the visitor is 18 years or older before entering the main e-shop. The lack of metadata, privacy policies, contact information, and WHOIS data limits the ability to fully assess the business's legitimacy and compliance posture. Technically, the site uses basic HTML and CSS without detectable modern frameworks or analytics tools, indicating a low digital maturity level. Security posture is weak due to missing security headers and unknown SSL configuration. Overall, the site presents a low trust profile with significant gaps in compliance and transparency.

C

CREATION.CZ

pejr.info

43

Pejr.info was a small local information portal serving the Pelhřimov region in the Czech Republic, operated independently by CREATION.CZ for approximately 18 years. The website recently ceased operation citing regulatory burdens from the EU Digital Services Act. The site content is minimal, primarily a closure notice, with no active services or user interaction. Technically, the site uses standard web technologies including Google Analytics and Tag Manager for tracking but lacks visible security headers or privacy policies. The WHOIS data is unavailable due to unsupported TLD WHOIS, limiting transparency about domain ownership. Overall, the site reflects a small-scale community service with limited digital maturity and security posture.

C

CREATION.CZ

creation.cz

45

CREATION.CZ is a small digital agency based in Pelhřimov, Czech Republic, specializing in custom web development, graphic design, internet marketing, product photography, and advertising services. The company emphasizes originality and technical precision over mass-produced templates, targeting local businesses and individuals seeking professional digital solutions. Their website reflects a consistent brand identity with clear navigation and professional content, supported by client testimonials and social media presence. Technically, the website employs modern web technologies including JavaScript, jQuery, Google reCAPTCHA, and Google Tag Manager for analytics and security. The site is mobile-optimized, accessible, and SEO-friendly, with HTTPS enforced and a cookie consent mechanism in place. However, no CMS or hosting provider information is discernible, and some security headers appear to be missing. From a security perspective, the site demonstrates good practices such as HTTPS usage and form protection via reCAPTCHA. The presence of a GDPR-compliant privacy policy and cookie banner indicates attention to privacy compliance. However, the absence of WHOIS data and security policies, as well as missing security headers, suggests areas for improvement in transparency and security posture. Overall, CREATION.CZ presents a trustworthy and professional digital agency with a solid online presence but would benefit from enhanced security disclosures and domain registration transparency to strengthen trust and compliance.

U

UNITED BAKERIES a.s.

united-bakeries.cz

49

UNITED BAKERIES a.s. is a well-established Czech bakery company operating multiple bakery brands and producing fresh bakery products distributed nationwide. The company is part of the AGROFERT group, indicating strong market positioning and backing. Their website is professionally designed, mobile-optimized, and provides comprehensive business and product information, including recipes and career opportunities. Technically, the site is built on WordPress with modern libraries and analytics tools, ensuring a good user experience and performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though some security headers could be improved. Privacy compliance is strong with clear GDPR and cookie policies. Overall, the website reflects a credible and trustworthy business with no critical security or content issues.

B

BOHUŠOVICKÁ MLÉKÁRNA, A.S.

bobik.cz

49

Bobík is a Czech brand operated by Bohušovická mlékárna, a medium-sized dairy manufacturer focused on producing and marketing curd-based dairy snacks and related products. The website serves as a consumer engagement platform offering product information, downloadable entertainment content for children, recipes, and event details such as roadshows. The company targets families with children and positions itself as a trusted regional dairy brand with active community interaction. Technically, the website is built on WordPress and uses modern web technologies including SVG graphics, Google reCAPTCHA Enterprise for form security, and Typekit fonts for typography. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be improved. Performance is moderate, and HTTPS is properly enforced. From a security perspective, the site benefits from HTTPS and reCAPTCHA integration but lacks several important security headers that could enhance protection against common web threats. Privacy compliance is partially addressed with a comprehensive GDPR privacy policy document, but no cookie consent mechanism is present. WHOIS data is unavailable, which slightly reduces domain trustworthiness but does not contradict the legitimacy indicated by the website content and contact details. Overall, the website presents a professional and trustworthy front for the Bobík brand with good content quality and business credibility. Strategic improvements in security headers, cookie consent, and transparency of domain registration would further strengthen its security posture and compliance standing.

Č

ČSZM

cszm.cz

45

ČSZM is a Czech voluntary association representing individuals and legal entities engaged in the purchase, processing, and sale of slaughter animals, meat, and meat products. Established in 2002, it serves as an industry advocate, providing coordination, professional qualifications, educational programs, and hosting industry events such as MEATING 2025. The website reflects a mature organization with a clear focus on serving the meat processing sector in the Czech Republic. Technically, the site is built on Joomla CMS, leveraging modern frontend frameworks like Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for tracking. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, alongside a cookie consent mechanism compliant with GDPR principles. However, the absence of explicit privacy policies, terms of service, and security headers suggests areas for improvement in compliance and security posture. Overall, the site is professional, trustworthy, and well-positioned within its niche, but could enhance transparency and security practices to align with best practices.

P

Pěkný – Unimex s. r. o.

pruvodcechuti.cz

44

The website www.pruvodcechuti.cz operates as a Czech culinary portal offering a diverse range of recipes from professionals and home cooks, along with magazine articles and gourmet tips. It targets a general audience interested in cooking and gastronomy within the Czech Republic. The business appears to be a small-scale content platform with user registration and recipe rating features, supported by partnerships with related culinary brands. Technically, the site employs modern web technologies including Vue.js, Google Analytics, Microsoft Clarity, and Bootstrap for responsive design. The site is well-structured, mobile-optimized, and SEO-friendly, providing a good user experience. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and explicit incident response or security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and business information appear professional and legitimate. Overall, the site scores moderately high in content quality and privacy compliance but could improve in security posture and transparency.

G

GTO Solutions s.r.o.

futbalspravy.sk

47

FutbalSpravy.sk is a Slovak football news portal operated by GTO Solutions s.r.o., providing comprehensive coverage of domestic and international football including leagues, cups, and national team events. The site targets football fans and sports bettors in Slovakia and the Czech Republic, offering news, match schedules, live broadcasts, and betting tips. The business model relies on content provision combined with affiliate marketing partnerships with licensed betting companies. Technically, the site uses modern web technologies including Google Tag Manager and Analytics, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Privacy compliance is basic but present, with privacy and cookie policies accessible. Overall, the site is professional, trustworthy, and well-positioned in its niche.

G

GTO Solutions s.r.o.

casinoautomaty.eu

48

CasinoAutomaty.eu is an informational and affiliate marketing website focused on the Slovak online casino market. It provides users with news, reviews, bonus offers, and free spins related to online gambling. The site targets adult users interested in online casino games and gambling bonuses, positioning itself as a niche regional leader in this space. The parent company is GTO Solutions s.r.o., a Slovak entity. Technically, the website uses modern tracking tools such as Google Analytics and Google Tag Manager, with custom CSS and JavaScript for user experience. The site is mobile-optimized and SEO-friendly, though accessibility is basic. Security posture is good with HTTPS enforced and no visible vulnerabilities, but security headers could be improved. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the site is professional and trustworthy, with clear disclaimers and responsible gambling links.

G

GTO Solutions s.r.o.

777.sk

49

777.sk is a Slovak-language informational website operated by GTO Solutions s.r.o., focusing on legal online casinos, lottery results, and gambling bonuses in Slovakia. The site provides regularly updated content including casino bonus offers, lottery draw results, and responsible gambling information, targeting Slovak adults interested in online gambling. The business model centers on content and affiliate marketing, leveraging partnerships with licensed casinos and lottery providers. The website maintains a consistent brand presence and offers a professional user experience with clear navigation and relevant content.

G

GTO Solutions s.r.o.

casinohryzdarma.sk

48

CasinoHryZdarma.sk is an informational and affiliate website operated by GTO Solutions s.r.o., targeting Slovak-speaking online casino players. The site provides comprehensive reviews, bonus offers, promo codes, and responsible gambling information focused on licensed Slovak online casinos. It serves as a trusted resource for players seeking legal and advantageous gambling opportunities in Slovakia. Technically, the website employs modern web technologies including Google Tag Manager and Google Analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, the site demonstrates a professional and trustworthy presence with clear business legitimacy and compliance with GDPR. Recommendations include enhancing security headers and publishing a dedicated security policy to further strengthen trust and compliance.

G

GTO Solutions s.r.o.

hokejspravy.sk

49

HokejSpravy.sk is a Slovak online media portal specializing in ice hockey news, covering domestic leagues such as the Slovak Extraliga, international competitions including the NHL and World Championships, and Slovak national team updates. The site offers comprehensive hockey-related content including match schedules, live streaming information, player statistics, and betting tips. It operates in partnership with licensed Slovak betting companies, providing affiliate links and promotional content. The portal targets hockey fans and bettors primarily in Slovakia and Slovak-speaking regions, positioning itself as a trusted source for hockey news and betting information. Technically, the website employs modern web technologies including HTTPS, responsive design, and integrates Google Tag Manager and Google Analytics for tracking and marketing purposes. The site is well-structured with good SEO practices and mobile optimization, though no specific CMS or hosting provider was identified. Performance is moderate with asynchronous script loading and optimized images. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not publish a security policy or incident response information. Privacy and cookie policies are present and indicate GDPR compliance, but could be more comprehensive. The site collects user emails via a newsletter subscription form with consent checkboxes. Affiliate marketing is transparent with clear links to licensed betting operators. Overall, the website presents a low-risk profile with good business credibility and content quality. Recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving accessibility features to strengthen compliance and trust.

G

GTO Solutions s.r.o.

asociaceher.cz

49

The website 'AsociaceHer.cz' represents a Czech non-profit association focused on advocating for poker and sports betting players. It provides education, communicates with public authorities, and promotes responsible gambling. The organization behind the site is legally identified as GTO Solutions s.r.o. The site targets Czech players and stakeholders in the gambling sector, positioning itself as a niche advocacy group with a clear mission and relevant content. Technically, the site uses modern web technologies including Google Tag Manager and Google Analytics, with HTTPS enforced and a moderate performance profile. Security posture is adequate but could be improved by adding security headers and explicit incident response information. Privacy and cookie policies are present and appear GDPR compliant. The absence of WHOIS data is a concern for domain legitimacy verification, but the website content and business information support a credible presence. Overall, the site is professional, trustworthy, and serves its target audience effectively.

I

Institut pro regulaci hazardních her z.s.

iprh.cz

46

Institut pro regulaci hazardních her z.s. (IPRH) is a Czech non-profit organization focused on uniting entities operating in the gambling sector to collectively advocate their interests. The institute serves as a professional and authoritative partner for dialogue with public administration bodies, providing analyses related to gambling operations and legal regulation. Their broader goal includes fostering education and expertise within the gambling industry. The website reflects a professional digital presence with clear navigation, multilingual support, and active social media engagement.

adMaster, s.r.o. is a Czech-based internet advertising agency specializing in monetizing advertising space for website operators and providing comprehensive media representation and campaign planning services. The company targets website owners, advertisers, and media agencies primarily in the Czech Republic and internationally. Their service portfolio includes media representation, video advertising, Google Adsense support, mobile advertising, and targeted ad formats. The website presents a professional and consistent brand image with clear contact information and company registration details, positioning adMaster as a credible small-sized player in the media industry since 2010. Technically, the website employs common web technologies such as jQuery, Bootstrap, Google reCAPTCHA, and responsive design scripts, hosted likely by WEDOS, a Czech hosting provider. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security measures include the use of Google reCAPTCHA on the contact form; however, no security headers or explicit SSL configuration details were found, indicating room for improvement in security posture. From a security perspective, the website does not expose sensitive data and uses HTTPS (implied by external scripts). However, it lacks security headers like CSP or HSTS and does not provide a security policy or vulnerability disclosure information. Privacy compliance is limited, with no dedicated cookie or privacy policy pages, though terms of service are available. The contact form collects user data with basic protections. Overall, the security score is moderate, and recommendations include enhancing security headers, publishing privacy and security policies, and improving form validation. The overall risk assessment is moderate with no critical issues or blocking mechanisms detected. The website is safe for general audiences, with no adult or questionable content. Strategic recommendations include improving privacy compliance, strengthening security headers, and establishing incident response and vulnerability disclosure processes to enhance trust and security culture.

S

SPIRITmedia s.r.o.

spiritmedia.cz

46

SPIRITmedia s.r.o. is a Czech Republic based online marketing company specializing in comprehensive digital marketing solutions including marketing strategies, PR and SEO content, media representation, performance advertising, and direct mailing services. The company has been operating since 2007, positioning itself as an experienced player in the Czech online marketing sector with a diverse portfolio of websites across multiple industries. The website is professionally designed with good navigation and mobile optimization, reflecting a solid digital presence. Technically, the site uses modern front-end frameworks such as Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for tracking, indicating a moderate level of digital maturity. However, the inclusion of an external script from a suspicious domain raises security concerns that should be addressed promptly. The absence of privacy and cookie policies represents a compliance gap, especially under GDPR regulations. Overall, the security posture is moderate but can be improved by implementing security headers and removing untrusted external scripts. The domain registration data is consistent with the business claims, supporting the legitimacy of the company. Strategic recommendations include enhancing privacy compliance, improving security practices, and verifying all third-party scripts to mitigate risks.

G

Grape media, s.r.o.

adplan.cz

41

Adplan.cz is a Czech Republic-based specialized SaaS platform designed for internet site operators and advertisers to manage and plan advertising campaigns and spaces efficiently. Operated by Grape media, s.r.o., the platform offers features such as advertising space management, invoicing, reporting, and centralized campaign planning across multiple web operators. The website serves primarily as a login portal for users of this service. Technically, the site uses the ExtJS framework and standard web technologies, hosted likely by websupport.cz, a Czech hosting provider. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is moderate with no HTTPS or security headers explicitly detected in the provided content, and privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, showing a consistent and legitimate presence since 2010. Strategic improvements in security headers, privacy compliance, and mobile optimization would enhance trust and compliance.

D

Debant s.r.o.

ubytovanivchorvatsku.cz

44

The website www.ubytovanivchorvatsku.cz operates as the largest Czech catalog for private accommodation in Croatia, offering direct contact to property owners without commission fees. It targets Czech-speaking tourists seeking affordable holiday apartments and houses across multiple Croatian regions. The business is operated by Debant s.r.o., established since 2002, indicating a mature presence in the hospitality sector. Technically, the site uses common web technologies including jQuery, Google Analytics, and Google Tag Manager, with a responsive design and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear professional and consistent. Overall, the site provides a valuable service in the travel accommodation market with room for improvement in privacy and security practices.

P

Prošikulky.cz

prosikulky.cz

45

Prošikulky.cz is a Czech-based small business specializing in sewing, knitting, and crocheting tutorials combined with e-commerce sales of original sewing patterns primarily for children's and women's clothing. The website is well-established since 2014 and maintains a strong presence on multiple social media platforms, enhancing its reach within the crafting community. The business model integrates content marketing with direct digital product sales, targeting hobbyists and sewing enthusiasts in the Czech Republic and Slovakia. Technically, the website employs modern web technologies including Google Tag Manager, Facebook Pixel, and cookie consent management, hosted by Active24. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and a published security policy or incident response contacts. Overall, the site is trustworthy, safe, and compliant with basic privacy regulations, though it could improve transparency by publishing a privacy policy and security documentation.

D

DeCP investing group SE

leslist.cz

39

Leslist.cz is a Czech language online news portal specializing in nature, forestry, and environmental topics. Operated by DeCP investing group SE since 2019, it serves a niche audience interested in ecological and forestry news. The website uses WordPress with common plugins such as Yoast SEO and integrates Google Analytics and Adsense for tracking and monetization. The site is professionally designed with good navigation and mobile optimization, offering regularly updated content including articles and video media. However, it lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing some recommended security headers and no vulnerability disclosure information. Overall, the domain registration data is consistent and supports the legitimacy of the site.

I

Slovník cizích slov online infoz.cz

infoz.cz

44

The website infoz.cz operates as an online Czech dictionary specializing in foreign words and some less common Czech terms. It provides users with search capabilities, browsing by letters, and categorization by subject areas, targeting Czech-speaking individuals seeking word meanings. The business model appears to be free access supported by advertising and partner links, positioning it as a niche educational resource within the Czech market. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates Google services such as Analytics, Tag Manager, and Adsense. The site is mobile optimized with good SEO practices but lacks advanced accessibility features. Security posture is moderate with HTTPS enforced and cookie consent implemented; however, it lacks security headers and explicit incident response or security policies. WHOIS data is unavailable, which reduces trustworthiness and raises concerns about domain registration transparency. Overall, the site is functional and serves its educational purpose but would benefit from improved security practices and clearer business information.

H

hunger.cz | Najdi, navštiv a ohodnoť restauraci, kavárnu nebo bar

hunger.cz

46

Hunger.cz is an online directory and review platform focused on restaurants, cafes, bars, and hospitality venues primarily in the Czech Republic. It offers users the ability to search and filter establishments by region, cuisine, and other criteria. The website targets general consumers looking for dining options and entertainment. Technically, the site uses jQuery and Google Analytics for tracking, with a basic but functional design and moderate mobile optimization. Security posture is moderate, with HTTPS usage but lacking visible security headers and privacy policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts trustworthiness. Overall, the site provides useful business services but needs improvements in privacy compliance and security transparency.

H

Ubytování v Česku a na Slovensku (5000+) - Hauzi.cz

hauzi.cz

48

Hauzi.cz is a professional online accommodation search and booking platform primarily targeting customers seeking lodging in the Czech Republic and Slovakia. It offers a large inventory of over 5000 accommodations including cottages, apartments, hotels, and unique stays. The platform supports accommodation owners with listing management and provides users with ratings and reviews to aid decision-making. Technically, the website employs modern JavaScript frameworks such as Vue.js and integrates analytics tools like Microsoft Clarity and Google Tag Manager, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and implements a detailed cookie consent mechanism, though it lacks explicit security headers and a published privacy policy, which are areas for improvement. The absence of WHOIS registration data reduces domain trust slightly but does not detract from the professional presentation and functionality of the site. Overall, Hauzi.cz presents a secure and user-friendly experience with room to enhance compliance and transparency.