Security Directory

S

SKPAY, a. s.

skpay.sk

54

SKPAY, a. s. is a Slovak financial services company specializing in modern payment products including prepaid cards, POS terminals, and money transfer services such as Western Union. Established in 2013, it holds an e-Money institution license from the National Bank of Slovakia and is a certified Mastercard member, positioning it as a trusted player in the Slovak financial market. The company targets both individual and corporate customers seeking payment solutions without the need for traditional bank accounts. Technically, the website leverages modern frameworks like Next.js and React, with content managed via WordPress. It employs Google Analytics and Tag Manager for user tracking and marketing insights, and is hosted on Websupport infrastructure with DNSSEC enabled and HTTPS enforced, indicating a solid technical foundation. Security posture is generally good, though the absence of explicit security headers and incident response contact details suggests room for improvement. Privacy compliance is strong, with a comprehensive GDPR-aligned privacy policy and cookie consent mechanism in place. Overall, SKPAY demonstrates a professional and trustworthy online presence with clear business credibility and moderate to good technical maturity.

S

Sciendo

sciendo.com

69

Sciendo is a reputable academic publishing solutions provider, part of the De Gruyter Brill Group, offering a broad range of services including publishing, distribution, and library support for scholarly journals, books, and conference proceedings. The company serves a global audience with a strong presence in academic institutions and professional organizations. Technically, the website is built on modern frameworks like Next.js and React, with good performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though DNSSEC is not enabled. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Sciendo presents a professional, trustworthy, and well-maintained digital presence.

Naše zdravotnictví is an online magazine focused on delivering news, stories, and expert opinions related to the Czech healthcare sector. The website targets healthcare professionals such as doctors and nurses, as well as the general public interested in healthcare topics. It operates as a niche media outlet providing specialized content in the healthcare domain within the Czech Republic. The business was established around 2017, consistent with the domain registration date, and maintains a focused editorial approach without apparent parent or subsidiary companies.

F

For Best Clients, s.r.o.

grandus.sk

53

For Best Clients, s.r.o. operates the Grandus eshop system, providing custom ecommerce platform development, consulting, and integration services primarily in Slovakia. The company positions itself as a trusted partner for businesses seeking innovative and high-performance eshop solutions. The website reflects a mature digital presence built on modern technologies such as Next.js and React, with a professional design and clear navigation. Security posture is strong with HTTPS and relevant security headers, though privacy compliance documentation is lacking. Contact information is transparent, including direct owner contact details, enhancing business credibility. Overall, the site is well-structured and trustworthy, serving a B2B audience effectively.

xAI is a technology company specializing in advanced artificial intelligence models and services, including the Grok AI models and API access. The company positions itself as an innovator in AI with a mission to advance scientific discovery and deepen understanding of the universe. Their business model includes subscription tiers such as SuperGrok and API offerings targeting developers and AI enthusiasts. The website reflects a medium-sized enterprise with a professional and consistent brand presence, supported by partnerships with major investors and a clear product roadmap. Technically, the site is built on a modern React and Next.js stack, hosted on Cloudflare, offering moderate performance and good mobile optimization. Security posture is generally good with HTTPS enforced and domain transfer protections, but lacks DNSSEC and some security headers. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Contact information is limited to a contact form, with no direct emails or phone numbers publicly listed. Overall, the website is trustworthy and professional, with room for improvement in security and privacy transparency.

X

xAI

grok.com

63

Grok.com is a modern AI assistant platform developed by xAI, offering services such as real-time search, image generation, and trend analysis. The website is professionally designed using modern web technologies including React and Next.js, hosted on Cloudflare infrastructure, ensuring fast performance and good mobile optimization. Security posture is strong with HTTPS enforced and standard security headers present, though DNSSEC is not enabled and no explicit vulnerability disclosure or incident response information is published. Privacy and terms of service policies are available and linked to the parent domain x.ai, indicating compliance with GDPR and other regulations. No direct contact information is provided on the site, which may limit user support transparency. Analytics usage includes Google Analytics and Tag Manager, with moderate user tracking. Overall, the site is trustworthy, safe, and well-implemented technically, serving a general audience interested in AI assistance.

Stadler is a leading global manufacturer of rail vehicles and provider of signalling and service solutions, committed to delivering safe, sustainable, and reliable mobility. The company targets transport operators, governments, and rail industry stakeholders with a comprehensive portfolio of rolling stock and customised solutions. The website reflects a mature digital presence with professional branding and clear business messaging. Technically, the site leverages modern frameworks such as Next.js and React, integrates Matomo for analytics, and uses Cookiebot for GDPR-compliant cookie management. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although the absence of public WHOIS data slightly reduces trust. Overall, the site is well-optimized for performance, accessibility, and SEO, supporting a positive user experience and business credibility.

S

SH.cz s.r.o.

superhosting.cz

59

SH.cz s.r.o. is a Czech-based technology company specializing in dedicated and managed server hosting services. With over 20 years of experience, it serves demanding business customers and manages infrastructure for a significant portion of the Czech internet. The company offers a range of services including dedicated servers, managed Linux servers, server housing, and datacenter connectivity, positioning itself as a trusted provider for high-traffic websites and enterprises. The website reflects a mature digital presence with professional design and clear service offerings. Technically, the site uses modern frameworks such as Next.js and React, and integrates Google Tag Manager and Analytics for tracking. The site is fast, mobile-optimized, and accessible, providing a good user experience. Security posture is solid with HTTPS enforced, though some security headers are missing and no explicit security policy or incident response contacts are published. Privacy compliance is partially addressed with a GDPR policy available, but lacks a cookie consent mechanism. WHOIS data is unavailable, which slightly reduces trust but does not negate the evident legitimacy of the business. Overall, SH.cz demonstrates a strong market position and technical maturity with room for improvement in security transparency and privacy compliance.

J

JUST a Nahrin

justnahrin.sk

67

JUST a Nahrin is a small retail business specializing in Swiss cosmetics and nutritional supplements, operating primarily in Slovakia and neighboring Czech markets. The company employs a direct sales model complemented by expert consulting tailored to customer needs. Their website reflects a niche market positioning with a focus on health and beauty products. Technically, the site is built on modern frameworks such as Next.js and React, integrating essential marketing and analytics tools like Google Tag Manager and Cookiebot for GDPR-compliant cookie management. The site is mobile-optimized and presents a professional user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and employs a robust cookie consent mechanism, though it lacks visible security policy or incident response pages. No critical vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business claims, indicating high legitimacy.

K

K&V ELEKTRO a.s.

kvelektro.cz

60

K&V ELEKTRO a.s. is a Czech Republic-based company specializing in wholesale and retail distribution of electrical installation materials. The company operates 22 branches across the country and offers a broad product range through both B2B and B2C e-commerce platforms. Their market position is strong regionally, supported by physical stores and delivery services. The website reflects a professional business with clear navigation and relevant content tailored to both wholesale and retail customers. Technically, the website is built using modern frameworks such as Next.js and React, with integrations for Google Tag Manager and a web chat service. The site is mobile-optimized and includes SEO best practices, although some accessibility features could be improved. Performance is moderate, with a good balance of modern technologies and user experience. From a security perspective, the site enforces HTTPS and includes standard security headers, contributing to a good security posture. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement in transparency and readiness. The lack of WHOIS data for the domain is a notable concern, impacting trust and legitimacy assessments. Overall, the website is safe, professional, and business-focused, with no adult or questionable content. The main risk lies in the missing domain registration data, which should be verified to ensure full trustworthiness. Strategic recommendations include enhancing security transparency, verifying domain registration, and improving privacy and cookie consent mechanisms.

J

Just a Nahrin

justnahrin.cz

67

Just a Nahrin is a Czech Republic based direct sales business specializing in Swiss wellness products. The company emphasizes expert consultation alongside product sales, targeting consumers interested in health and wellness. The website is built on a modern React/Next.js framework and integrates compliance tools such as Cookiebot for GDPR cookie consent management. The technical infrastructure includes Google Tag Manager and Smartsupp chat for marketing and customer engagement. Security posture is adequate with HTTPS enforced, but lacks some security headers and detailed WHOIS data, which slightly reduces trust. Overall, the website is professional, user-friendly, and compliant with privacy regulations, but would benefit from enhanced transparency and security hardening.

E

EAT SMART

eatsmart.cz

62

EAT SMART is a Czech Republic based company providing innovative smart corporate catering solutions. Their service offers fresh, high-quality meals available 24/7, targeting corporate clients and their employees. The website presents a modern, professional image with clear branding and a focus on smart food ordering technology. Technically, the site uses modern frameworks such as Next.js and React, integrates video streaming via Mux Player, and employs Google Analytics and Tag Manager for analytics. Security posture is good with HTTPS and security headers in place, though explicit privacy and terms policies are missing. Cookie consent is implemented, indicating some privacy compliance. Overall, the site is well designed and functional, but could improve transparency on privacy and security policies.

IDA.dk represents the official website of IDA, Denmark's leading professional union for engineers and natural science professionals. The organization serves a large membership base of approximately 166,000 members, offering career advice, community engagement, events, courses, and member benefits. The website reflects a mature and professional digital presence consistent with its long-standing history since 1995. Technically, the site is built on modern frameworks such as Next.js and Mantine UI, with integration of Google Tag Manager and cookie consent management, indicating a good level of digital maturity. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks DNSSEC and explicit security policies, which are areas for improvement. Overall, the website is trustworthy, well-branded, and provides a positive user experience, though it would benefit from publishing clear privacy and terms of service documents and enhancing security headers.

P

Poradca Podnikateľa, spol. s r.o.

profivzdelavanie.sk

58

Profivzdelavanie.sk is a well-established Slovak professional training platform specializing in taxation, accounting, payroll, human resources, and public administration. Operating since 2013, it offers a comprehensive portfolio of online and live training sessions, conferences, and subscription services. The website reflects a mature digital presence with modern technologies such as Next.js, Google reCAPTCHA, and integrated analytics tools. The platform demonstrates a strong security posture with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with cookie consent mechanisms and a privacy policy in Slovak. Overall, the site is professional, trustworthy, and serves a niche market effectively.

E

Eurokódex

eurokodex.sk

57

Eurokódex is a Slovak legal publishing company specializing in high-quality legal literature including commentaries, case law collections, and thematic publications. With over 20 years of tradition, it serves legal professionals such as judges, lawyers, notaries, and executors, as well as the general public seeking legal knowledge. The website demonstrates a mature digital presence built on modern technologies like Next.js and React, with integrated analytics and marketing tools such as Google Tag Manager and Facebook Pixel. Security posture is strong with HTTPS and bot protection via Google reCAPTCHA, though explicit security policies and incident response details are not publicly disclosed. Overall, the site is professional, well-structured, and compliant with GDPR, supporting a trustworthy and credible business profile.

B

BSH Hausgeräte GmbH

bsh-group.de

66

BSH Hausgeräte GmbH is a leading global manufacturer of household appliances, operating as a subsidiary of the Bosch Group. The company offers a comprehensive portfolio of products and brands, emphasizing innovation, sustainability, and customer service. The website reflects a mature digital presence with extensive content tailored for consumers, partners, and job seekers. Technically, the site leverages modern frameworks such as React and Next.js, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and external vulnerability reporting mechanisms in place. Privacy compliance is well addressed with clear policies and consent management. The main risk factor is the absence of WHOIS data, which slightly impacts domain trust but is mitigated by strong corporate branding and external trust signals.

F

FUNDACJA OSRODEK KONTROLI OBYWATELSKIEJ OKO

oko.press

61

OKO.press is a Polish non-profit media foundation specializing in investigative journalism, fact-checking, and public life archiving. It serves a Polish-speaking audience interested in verified news and analyses. The website is professionally designed, mobile-optimized, and uses modern web technologies including React and Next.js, hosted behind Cloudflare for performance and security. Security posture is strong with HTTPS, security headers, and consent management implemented, though DNSSEC is not enabled. Privacy and cookie policies are present and GDPR compliant, reflecting a mature privacy stance. No critical vulnerabilities or suspicious indicators were found. Overall, OKO.press demonstrates a high level of digital maturity and trustworthiness as an independent media outlet.

G

GeekWeek

geekweek.pl

54

GeekWeek is a Polish media website specializing in technology, science, lifestyle, and travel content. It operates as part of the larger Interia.pl media group, providing a wide range of articles, videos, quizzes, and reports targeting tech-savvy and science-interested audiences in Poland. The site maintains a professional and modern digital presence with consistent branding and high-quality content. Technically, GeekWeek leverages modern web technologies including React and Next.js, integrates video playback via Video.js, and employs multiple analytics and advertising platforms such as Gemius, Google Analytics, and Adocean. The website is well-optimized for mobile devices and SEO, ensuring good user experience and accessibility. Security-wise, the site uses HTTPS and follows basic best practices, though explicit security headers could be improved. Privacy compliance is strong with clear policies and cookie consent mechanisms in place. Overall, GeekWeek presents a trustworthy and mature online media platform with a solid technical foundation and good security posture.

E

Eleven Sports Network Sp. z o.o.

elevensports.pl

60

Eleven Sports Network Sp. z o.o. operates elevensports.pl, a prominent sports streaming platform in Poland specializing in live football and speedway events. The website targets sports enthusiasts in Poland, offering subscription-based access to multiple Eleven Sports channels and video content. The platform is part of the larger Grupa Polsat Plus media group, indicating a strong market position and backing by a major media conglomerate. Technically, the website leverages modern web technologies including React and Next.js, with integrations for analytics and marketing tools such as Google Analytics, Facebook SDK, and PushPushGo. The infrastructure appears robust, hosted on Ubuntu servers with nginx and Apache components, delivering moderate performance and good mobile optimization. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. However, explicit security policies and incident response information are not publicly available. Overall, elevensports.pl presents a professional, trustworthy, and secure digital presence suitable for its business model and audience.

M

Mango Chutney

mangochutney.com.au

58

Mango Chutney is a full-service creative digital agency based in Adelaide, Australia, specializing in graphic design, branding, web and app design, and development. The company serves a diverse clientele including commercial businesses, not-for-profits, educational institutions, and government organizations. Their market position is that of an award-winning, socially conscious agency with a strong portfolio and reputable client base. Technically, the website is built using modern frameworks such as Next.js and React, with good performance and mobile optimization. Google Analytics is used for user tracking, but no explicit cookie consent mechanism or privacy policy is present, indicating a gap in privacy compliance. Security posture is generally good with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal incident response information. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.

C

Civey GmbH

civey.com

73

Civey GmbH is a German-based company specializing in digital market and opinion research, providing real-time survey data and analytics services primarily to businesses, media, political organizations, and marketing professionals. Established in 2009, Civey has positioned itself as a leading provider in the German market research sector, offering a range of services including real-time polling, market studies, and data consulting. The website reflects a professional and comprehensive business presence with clear navigation and high-quality content tailored to its target audience. Technically, the website is built on modern web technologies including React and Next.js, hosted and secured via Cloudflare services. It employs Google Tag Manager for analytics and OneTrust for consent management, indicating a mature digital infrastructure with good performance, mobile optimization, and SEO practices. Accessibility features are present, enhancing user experience across devices. From a security perspective, the site enforces HTTPS with strong SSL configurations and includes essential security headers. While no critical vulnerabilities or exposed sensitive data were detected, the absence of DNSSEC and a public security policy or incident response page suggests areas for improvement. Privacy compliance is robust, with clear GDPR-aligned privacy and cookie policies and visible consent mechanisms. Overall, Civey.com demonstrates a high level of professionalism, security, and compliance suitable for its business domain. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing transparency around security policies and incident response to further strengthen trust and security posture.

H

home.pl S.A.

polsatboxgo.pl

60

Polsatboxgo.pl is a Polish streaming platform offering a wide range of entertainment including TV series, movies, live sports, and children's programming. It operates under the umbrella of the Polsat Group, a major media entity in Poland, and targets a broad general audience with subscription-based access to premium content. The platform is well-positioned in the Polish market as a leading digital media service with strong brand recognition and a comprehensive content catalog. Technically, the website leverages modern web technologies such as React and Next.js, supported by robust analytics and marketing tools including Google Analytics, Facebook Pixel, and Hotjar. The infrastructure is hosted on reputable providers with CDN and caching layers to ensure performance and availability. Security posture is solid with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, consent mechanisms, and GDPR adherence. Overall, the site demonstrates a mature digital presence with professional design, good user experience, and strong business credibility.

O

onvista

onvista.com

65

Onvista is a well-established German financial portal offering comprehensive stock market data, news, and investment tools. The platform targets retail investors and financial market participants, providing real-time and delayed market data, portfolio management, broker comparison, and premium subscription content. The website demonstrates a mature business model with integrated brokerage services and a strong market presence in Germany. Technically, the site leverages modern frameworks such as React and Next.js, hosted on AWS infrastructure, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced, but lacks visible security headers and explicit security policies. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the site is professional, trustworthy, and content-rich, but could improve transparency and compliance aspects.

U

Ullstein Buchverlage GmbH

ullstein.de

58

Ullstein Buchverlage GmbH is a well-established German book publishing company founded in 1952, specializing in entertaining novels, thrillers, non-fiction, and biographies. The company operates multiple imprints and targets a broad audience interested in literature and books. Their website reflects a mature digital presence with modern technologies such as React and Next.js, hosted on Microsoft Online infrastructure. The site is professionally designed, mobile-optimized, and SEO-friendly, offering direct book sales and author-related services. Security posture is solid with HTTPS and some security headers, but lacks explicit privacy and cookie policies as well as incident response information. Social media integration is strong, enhancing trust and engagement. Overall, the website is credible and trustworthy but could improve privacy compliance and security transparency.

I

Irish Roofers

irishroofers.ie

48

Irish Roofers is a well-established roofing contractor based in Dublin, Ireland, specializing in a wide range of roofing services including new roofs, flat roofing, roof repairs, and emergency roofing. The company emphasizes quality workmanship, customer service, and offers guarantees on their work, positioning themselves as a leading and dependable roofing service provider in the Dublin area. Their website reflects a professional and customer-focused business model targeting residential and commercial property owners. Technically, the website is built using modern frameworks such as Next.js and React, hosted by Hosting Ireland, and incorporates Google Analytics and Tag Manager for tracking. The site is mobile optimized and SEO friendly but lacks some advanced accessibility features. Security-wise, the site uses HTTPS and secure forms but lacks security headers and explicit privacy and cookie policies, which are areas for improvement. The domain WHOIS data is consistent with the business claims, showing a legitimate and stable registration since 2012. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

O

onvista

onvista.de

65

Onvista is a well-established German financial portal providing comprehensive stock market data, news, and investment tools. It targets retail investors and financial market participants primarily in Germany. The platform offers real-time and delayed market data, portfolio management, broker comparison, and premium subscription content. Technically, the site uses modern frameworks such as React and Next.js, hosted likely on AWS infrastructure with CDN and security services. The website is fast, mobile-optimized, and well-structured, providing an excellent user experience. Security posture is strong with HTTPS and modern best practices, though explicit security policies and vulnerability disclosures are absent. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the site is professional, trustworthy, and safe for general audiences.

P

Právní prostor | Informační web nejen pro právníky

pravniprostor.cz

69

Právní prostor is a Czech legal information website established in 2011, providing news, judicial updates, legislative changes, and opinions primarily targeted at legal professionals. The site positions itself as a partner in the legal world, offering quick and clear legal information. Technically, the website is built using modern web technologies including Next.js and React, and integrates common analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for cookie consent management. The hosting appears to be managed by REG-ZONER, consistent with the domain registration data. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks visible security headers and explicit privacy or security policies, which could be improved to enhance trust and compliance. Overall, the website is professional and safe, with moderate tracking and marketing practices. The domain registration data supports the legitimacy and stability of the site.

L

Live Nation Česká republika

livenation.cz

65

Live Nation Česká republika operates as a prominent ticketing and event promotion platform specializing in concerts and live events within the Czech Republic. The website showcases a professional and modern design, leveraging advanced web technologies such as Next.js and Material-UI, ensuring a responsive and user-friendly experience. The platform integrates multiple third-party services for analytics, marketing, and ticket sales, including Ticketmaster and Ticketportal, enhancing its market reach and operational efficiency. Security measures are robust with HTTPS and Content-Security-Policy headers, although additional security headers could further strengthen the posture. The absence of visible privacy and cookie policies is a notable compliance gap. WHOIS data is unavailable, which limits domain legitimacy verification, but the website's branding and content align with the global Live Nation brand, supporting its authenticity.

V

VANDERBERG MEDIA SE

superapartments24.co.uk

64

Superapartments 24, operated by VANDERBERG MEDIA SE, is a professional real estate platform specializing in apartment listings for sale and rent primarily in the UK and international markets. The website offers a comprehensive suite of services including legal assistance, advertising packages for estate agencies, mortgage support, and personal assistance with property inspections. The platform targets estate agencies, private sellers, buyers, and renters, positioning itself as a trusted intermediary with exclusive offers and partnerships. The business is relatively new, founded in 2022, and operates from the Czech Republic with a medium-sized company profile. Technically, the website is built on modern frameworks such as Next.js and React, leveraging Cloudflare for DNS and CDN services. It integrates Google Tag Manager for analytics, Google reCAPTCHA v3 for bot protection, and CookieYes for cookie consent management, reflecting a mature digital infrastructure. The site is mobile optimized with good SEO and accessibility features, although some accessibility aspects could be enhanced. From a security perspective, the site enforces HTTPS and employs standard security practices including bot mitigation and cookie consent. However, DNSSEC is not enabled, and no security.txt or explicit incident response contacts are published, representing areas for improvement. The WHOIS data is transparent and consistent with the business profile, enhancing trustworthiness. Overall, the security posture is good but could be strengthened with additional DNS and policy measures. The website is safe for general audiences, containing no adult or questionable content. It maintains GDPR compliance with clear privacy and cookie policies and provides multiple contact channels. The overall risk is low, with strategic recommendations focusing on enhancing DNS security, publishing vulnerability disclosure policies, and improving security headers to further solidify trust and compliance.

V

VANDERBERG MEDIA SE

superbyty24.cz

62

Superbyty 24 is an online real estate platform operated by VANDERBERG MEDIA SE, primarily serving the Czech Republic market with property listings for sale and rent. The website offers a comprehensive range of services including legal assistance, mortgage support, and advertising solutions for real estate agents and property owners. The platform positions itself as a professional and trustworthy marketplace with partnerships and exclusive offers enhancing its market presence. Technically, the website is built on modern frameworks such as Next.js and React, hosted behind Cloudflare DNS, and integrates Google Tag Manager and reCAPTCHA for analytics and security. The site demonstrates good mobile optimization and SEO practices, though some security headers and DNSSEC are not implemented, representing areas for improvement. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit incident response or security policy disclosures. Privacy compliance is well addressed with accessible privacy and cookie policies and consent mechanisms. Overall, the website is professional, secure, and compliant, suitable for its target audience in real estate. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing a formal security policy to further strengthen trust and compliance.

L

lovec-realit

lovecrealit.cz

61

Lovec-Realit.cz is a Czech Republic based online real estate platform specializing in property sales and rentals across the country. The platform offers free advertisement posting for various property types including apartments, houses, commercial spaces, and land. It targets individuals and businesses interested in real estate transactions within the Czech market. Technically, the website is built using modern frameworks such as React and Next.js, hosted behind Cloudflare for DNS and CDN services, and incorporates Google Analytics for user tracking. The site demonstrates good mobile optimization and SEO practices but lacks some accessibility features and security headers. Security posture is moderate with HTTPS enabled but missing additional security headers and explicit privacy policies. The domain is registered since 2018 with consistent WHOIS data, supporting the legitimacy of the business. Overall, the site is professional and functional but would benefit from enhanced privacy compliance and security best practices.

D

delta zero

deltazero.cz

55

Delta Zero is a small Czech technology company specializing in custom software development focused on information systems for work organization and automation. Their market position is that of a niche provider integrating modern technologies such as AI, big data, and process automation to deliver bespoke solutions. The company targets businesses and organizations seeking to optimize workflows and reduce routine tasks through intelligent software. Technically, the website demonstrates a modern tech stack including Node.js, TypeScript, React, Next.js, and AI tools like OpenAI's GPT-4, indicating a mature digital infrastructure. The site is well-designed, mobile-optimized, and uses contemporary frameworks, although some SEO and accessibility features could be improved. Security posture is moderate with HTTPS implied but lacking explicit security headers and detailed policies. Privacy compliance is basic with a GDPR policy present but no cookie consent mechanism. Overall, the risk is low with no suspicious content or vulnerabilities detected, but improvements in security and privacy transparency are recommended.

J

Justo

justo.cz

44

Justo.cz is a Czech Republic based small business specializing in real estate and legal services, primarily targeting real estate agencies and brokers. The company offers education, consulting, automation, and digital tools to enhance real estate professionals' work. Founded in 2015, Justo has established itself as a specialist in the real estate sector with a focus on professional development and digital transformation. The website reflects a modern technical infrastructure using React, Next.js, and Material-UI, hosted by a Czech hosting provider. The site is well-designed, mobile-optimized, and provides rich content including articles, webinars, and podcasts. However, it lacks explicit privacy, cookie, and terms of service policies, which are critical for GDPR compliance. Security posture is moderate with no visible security headers or incident response information. Social media presence is active on Facebook, Instagram, and LinkedIn, supporting business credibility. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.

R

Rockaway Capital

rockawayfund.com

61

Rockaway Fund is an investment fund operated by Rockaway Capital, a well-established investment group with over a decade of experience in Europe. The fund targets qualified investors, offering access to a diversified portfolio focused on private equity, venture capital, and blockchain technologies. The website presents a professional and consistent brand image, with clear business descriptions and contact information. Technically, the site is built on modern frameworks such as Next.js and React, hosted with Cloudflare DNS and CDN services, and integrates Cookiebot for cookie consent management and Google Analytics for traffic analysis. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. The domain WHOIS data shows an inconsistency with a future creation date, which raises questions about domain age legitimacy relative to the business history claimed. Overall, the website is safe, professional, and compliant with basic privacy requirements, but could improve transparency with a published privacy policy and security disclosures.

V

VANDERBERG MEDIA SE

supa24.com

64

Superapartments 24 is a Czech Republic-based real estate platform specializing in international apartment listings for sale and rent, primarily in the United States. The company operates a professional website offering services to estate agencies and private sellers, including legal assistance, advertising, and mortgage services. The platform targets a broad audience of property buyers, renters, and real estate professionals, positioning itself as a niche player with strategic partnerships and a growing market presence. Technically, the website is built on modern web technologies including React and Next.js, with integrations for Google Tag Manager, Google reCAPTCHA, and CookieYes for privacy compliance. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Hosting details are not explicit but DNS is managed via Cloudflare, enhancing availability and resilience. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, with cookie consent mechanisms in place. However, DNSSEC is not enabled and some security headers are missing, indicating room for improvement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business profile, supporting legitimacy. Overall, the website presents a trustworthy and professional front with good compliance and technical maturity. Strategic improvements in security headers, DNSSEC, and incident response transparency would further enhance its security posture and trustworthiness.

C

CENTURY 21

century21.cz

59

CENTURY 21 Czech Republic operates as a real estate brokerage and property listing service, offering a wide range of residential and commercial properties. The website presents a professional and modern interface targeting buyers, sellers, and real estate agents within the Czech market. The company emphasizes trust and partnership, with multiple property categories and career/franchise opportunities. Technically, the site leverages modern frameworks such as Next.js and React, and integrates analytics tools like Microsoft Clarity and Hotjar for user behavior insights. Security posture is strong with HTTPS and security headers implemented, though explicit privacy and cookie policies are not clearly found in the provided content. WHOIS data is unavailable, which reduces domain trust but the website content and branding suggest a legitimate business. Overall, the site is well-structured and user-friendly, but could improve transparency on privacy and contact information.

U

UlovDomov.cz, s.r.o.

ulovdomov.cz

57

UlovDomov.cz, s.r.o. operates a leading online platform specializing in rental apartment and shared housing listings within the Czech Republic. The website positions itself as the largest aggregator of rental offers in the country, providing over 1,000 new listings daily to individuals seeking housing solutions. The business model focuses on connecting renters with available properties through a user-friendly digital interface. The platform targets a broad audience of renters, including students, professionals, and families looking for affordable and convenient housing options.

N

Nexter Company

reas.cz

68

Reas.cz is an established online real estate platform operating in the Czech Republic, providing services for buying and selling properties with a network of over 150 specialists nationwide. The website offers a user-friendly experience with online property valuation and consultation services, targeting individuals and businesses seeking real estate transactions. The platform leverages modern web technologies including Next.js and React, ensuring a responsive and performant user interface. It integrates multiple analytics and marketing tools such as Google Analytics, TikTok Pixel, and Facebook Pixel, supported by a comprehensive cookie consent mechanism to comply with GDPR requirements. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response information are not publicly available. Overall, the site demonstrates a professional and trustworthy presence in the real estate sector.

R

Rocky Enterprise Software Foundation

rockylinux.org

65

Rocky Linux is a community-driven open-source enterprise operating system designed to be fully compatible with Red Hat Enterprise Linux®. Founded in 2020, it serves enterprises and organizations seeking a stable, production-ready Linux distribution without licensing costs. The project is supported by a broad ecosystem of industry partners and sponsors, reflecting a strong market position in the enterprise Linux space. The website presents a professional and modern digital presence built on React and Next.js, optimized for performance and accessibility. Security posture is strong with HTTPS enforcement and domain protections, though DNSSEC is not enabled and formal security policies are not published. Privacy compliance is good with a comprehensive privacy policy, but lacks cookie consent mechanisms. Overall, the site is trustworthy and well-maintained, with clear community and business backing.

V

Volny.cz

volny.cz

56

Volny.cz is a Czech internet portal providing email services, news, weather, and various online content primarily targeting Czech-speaking users. The site is professionally designed using modern web technologies such as Next.js and React, hosted on infrastructure likely related to Seznam.cz. The portal integrates multiple third-party analytics and social media SDKs, including Gemius, Facebook, Twitter, and YouTube. Despite the lack of WHOIS data from the CZ.NIC registry, the website appears legitimate and well-established in the Czech media landscape. However, the absence of explicit privacy and cookie policies and missing security headers indicate areas for improvement in compliance and security transparency.

T

TA Triumph-Adler GmbH

utax.de

64

UTAX, a brand of TA Triumph-Adler GmbH, operates a professional B2B website focused on office digitalization solutions including hardware, software, cloud services, and partner networks. The website is well-structured, primarily in German, targeting business customers and partners in Germany. The technical infrastructure leverages modern web technologies such as Next.js and CoreMedia CMS, with optimized images served via a CDN. Security posture is moderate with HTTPS enforced and published security advisories, though some improvements in security headers and incident response transparency are recommended. Privacy compliance is good with a comprehensive privacy policy and GDPR adherence, but lacks a visible cookie consent mechanism. The absence of WHOIS data for the domain is unusual but the website content and branding indicate a legitimate and established business presence. Overall, the site scores well in content quality, technical implementation, and business credibility, with room for improvement in privacy and security practices.

CK Eva Šulcová, s r.o. is a Czech travel agency specializing in short-term seaside trips to Caorle, Italy, primarily targeting Czech travelers seeking affordable and convenient bus transportation vacations. Established in 2006, the company positions itself as a niche specialist offering insured travel services with a focus on customer satisfaction and quality at reasonable prices. The website reflects a professional and consistent brand image with clear contact details and social media presence, supporting its market credibility. Technically, the website is built on a modern React and Next.js framework, leveraging Google Tag Manager for analytics and Font Awesome for icons. The site is hosted under the REG-ZONER registrar, with moderate performance and good mobile optimization. Accessibility and SEO are basic but functional. The cookie consent mechanism is implemented effectively, though privacy and terms of service policies are absent, indicating room for compliance improvement. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks important security headers and formal vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms domain legitimacy and consistency with the business claims, supporting a trustworthy online presence. Overall, the website is professional and credible with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and incident response documentation would enhance trust and regulatory adherence.

T

TRUENDO Technologies GmbH

truendo.com

64

TRUENDO Technologies GmbH operates a Consent Management Platform (CMP) designed to simplify global online privacy compliance, particularly GDPR. The company offers automated cookie policy management, continuous compliance monitoring, and customizable consent banners, positioning itself as a flexible and affordable solution certified by Google and IAB. The website reflects a professional and consistent brand image targeting website owners and app developers seeking privacy compliance solutions. Technically, the site is built on modern frameworks such as React and Next.js, hosted via Amazon infrastructure, and integrates Matomo analytics and Crisp chat for user engagement. Security posture is strong with HTTPS enforced and domain registration protections, though DNSSEC is not enabled and some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website demonstrates good digital maturity, security awareness, and business credibility.

B

Bezrealitky

bezrealitky.com

47

Bezrealitky operates as a commission-free online real estate marketplace primarily serving the Czech Republic and Slovak markets, with multilingual support including English. The platform enables property owners to sell or rent their properties directly to buyers or tenants without intermediary agents, offering services such as premium profile upgrades, legal assistance, tenant credit checks, and property assessments. The company positions itself as a trusted market player with 18 years of experience and a large user base, evidenced by over 1.6 million monthly visits and more than 1.2 million satisfied customers. Technically, the website leverages modern frameworks like Next.js and React, integrates Google Tag Manager and reCAPTCHA for analytics and security, and is optimized for mobile and desktop users with fast performance and good SEO practices. Security posture is solid with HTTPS enforced and bot protection in place, though the absence of explicit security headers and cookie consent mechanisms suggests room for improvement. The missing WHOIS data for the .com domain introduces some uncertainty regarding domain registration legitimacy, but the overall professional presentation and strong brand consistency mitigate this concern. Strategic recommendations include enhancing security headers, implementing explicit cookie consent, and publishing security policies to bolster trust and compliance.

K

Kifli.hu

kifli.hu

75

Kifli.hu is a large Hungarian online supermarket offering a wide range of grocery products including fresh, organic, and specialty items with home delivery service. The website demonstrates a mature digital infrastructure using modern technologies such as React and Next.js, supported by robust performance and mobile optimization. Security measures include HTTPS, security headers, and a consent management platform, although explicit privacy and security policies are not directly found on the site. Overall, the platform is professional and trustworthy, serving a general to mature audience with some alcohol product offerings.

K

KoozArch

koozarch.com

60

KoozArch is a specialized media platform dedicated to architectural discourse, focusing on critical thinking around design, un-built projects, and cultural production in architecture. Founded in 2014, it serves a niche audience of architects, designers, researchers, and enthusiasts through curated content including interviews, essays, columns, and event listings. The platform also offers a newsletter subscription and maintains active social media channels to engage its community. Technically, the website is built on modern web technologies such as Next.js and Sanity.io CMS, hosted likely by Netsons. It employs Google Tag Manager for analytics and Iubenda for privacy and cookie compliance, reflecting a mature digital infrastructure. The site is mobile-optimized with good SEO and accessibility basics, though some improvements could be made in accessibility features. From a security perspective, the site enforces HTTPS, uses standard security headers, and implements GDPR-compliant privacy and cookie policies. However, DNSSEC is not enabled, and there is no publicly available security policy or incident response information. No vulnerabilities or exposed sensitive data were detected, indicating a solid security posture. Overall, KoozArch presents a professional, trustworthy, and content-rich platform with a strong focus on cultural and architectural topics. The absence of phone contact and physical address is noted but common for niche media platforms. Recommendations include enabling DNSSEC, publishing security and incident response policies, and enhancing accessibility compliance to further strengthen trust and security.

B

Bílé Stopy, s.r.o.

bealify.com

51

The website bealify.com/en/nordic is operated by Bílé Stopy, s.r.o., a small Czech company founded in 2022, providing real-time information on Nordic skiing trails including grooming status and difficulty levels. The platform targets Nordic skiing enthusiasts and outdoor sports participants, offering a niche service focused on Nordic countries. Technically, the website is built using modern frameworks such as React and Next.js, with Mapbox GL JS for mapping functionalities, hosted on Websupport infrastructure. The site demonstrates good design quality, mobile optimization, and moderate performance. Security posture is adequate with HTTPS enabled but lacks security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

V

Vipps MobilePay AS

vippsmobilepay.com

76

Vipps MobilePay AS operates a modern, well-branded payment platform targeting businesses in Finland and the Nordic region. The website presents a professional and user-friendly interface, emphasizing seamless payment solutions both online and in physical stores. The company leverages a modern technology stack including Next.js and Azure hosting, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and domain transfer locks, though DNSSEC is not enabled and explicit incident response contacts are not published. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism aligned with GDPR requirements. Overall, the site reflects a mature fintech business with a clear market position and trustworthy digital presence.

UFC GYM operates as a global fitness and MMA gym franchise offering a wide range of services including personal training, group classes, youth programs, recovery services, and virtual fitness options. The brand positions itself as a leader in the fitness industry with over 150 locations worldwide and a strong digital presence including a mobile app. The website is professionally designed, mobile-optimized, and provides clear navigation and calls to action, supporting a positive user experience. Technically, the site leverages modern web technologies such as Next.js and React, integrates analytics and marketing tools like Google Tag Manager, Microsoft Clarity, and Klaviyo, and uses Google Maps API for location services. The site is fast, accessible, and SEO-friendly, with appropriate privacy and cookie policies including consent mechanisms. From a security perspective, the site uses HTTPS and includes Google reCAPTCHA v3 to protect forms. However, it lacks explicit security policies, incident response contacts, and security headers which could enhance its security posture. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding are consistent with a reputable business. Overall, UFC GYM's website demonstrates strong business credibility and technical maturity but would benefit from improved transparency in domain registration and enhanced security disclosures to increase trust and compliance.

A

A&O Shearman

allenovery.com

81

A&O Shearman is a global law firm specializing in U.S. and English law, targeting international corporate clients and legal professionals. The website presents a professional and well-branded digital presence, leveraging modern web technologies such as React, Next.js, and Sitecore CMS. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, although the absence of security headers suggests room for improvement. Privacy compliance is limited as no explicit privacy or cookie policies were detected in the provided content. The WHOIS data is notably missing or inaccessible, raising concerns about domain registration legitimacy. Overall, the website is professional and trustworthy in appearance but requires verification of domain registration and enhancement of privacy and security policies.