Security Directory

EURECCA is a healthcare-focused platform that provides a secure login portal for its users, likely healthcare professionals or researchers. The platform is funded by the European Society of Cataract and Refractive Surgeons (ESCRS) and technologically supported by ifa Systems, indicating a niche market position within the healthcare sector. The website is relatively new, with the domain registered in 2020, and presents a basic but functional user interface focused on secure access. Technically, the website uses standard HTML and CSS without advanced frameworks or CMS detected. Hosting is provided by InterNetX GmbH, a reputable registrar and hosting provider. The site is moderately optimized for mobile devices but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, suggesting minimal user tracking. From a security perspective, the site enforces HTTPS and uses secure password input fields but lacks DNSSEC and important security headers such as CSP or HSTS. There is no visible cookie consent mechanism or detailed privacy compliance beyond a basic privacy policy link. No contact or incident response information is provided, which limits transparency and user trust. Overall, the website is safe and professional but could benefit from enhanced security practices, improved privacy compliance, and richer content to increase trust and usability.

Ami.e.s des Parcs naturels de Wallonie is a small community or non-profit organization dedicated to promoting and supporting natural parks in the Wallonia region of Belgium. The website serves as an informational platform targeting local nature enthusiasts and environmental supporters. The business model appears to focus on community engagement and environmental awareness without commercial activities. Technically, the website is built using One.com Web Editor and hosted by One.com A/S, featuring basic HTML, CSS, and JavaScript with moderate performance and basic mobile optimization. Security posture is moderate with HTTPS enabled but lacking important security headers and privacy compliance mechanisms such as privacy and cookie policies. No contact information or incident response details are published, which limits user trust and compliance. Overall, the site is functional but requires improvements in privacy, security, and contact transparency to enhance trust and compliance.

M

Město Chotěboř

chotebor.cz

55

The website chotebor.cz serves as the official online presence for the town of Chotěboř in the Czech Republic. It provides residents and visitors with comprehensive information about municipal services, local government officials, news updates, public tenders, and community events. The site targets local citizens and stakeholders seeking official information and services related to the town. The business model is that of a government service portal, focusing on transparency and public communication. The domain's long registration history since 1998 supports its legitimacy and established presence. Technically, the website employs a modern tech stack including HTML5, CSS3, JavaScript frameworks like Vue.js, and server-side CMS technology (Vismo). It integrates Google reCAPTCHA v3 for form security and Google Translate for accessibility. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security practices include HTTPS enforcement and CSRF protection, but lack some advanced HTTP security headers and a published security policy. From a security perspective, the site demonstrates good baseline protections with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit incident response contacts and vulnerability disclosure mechanisms. Privacy compliance is partially met with privacy and cookie policies present, but no active cookie consent mechanism is implemented. Contact information is clearly provided, enhancing trust and credibility. Overall, chotebor.cz is a trustworthy, well-maintained municipal website with good content quality and technical implementation. Strategic improvements could focus on enhancing security headers, publishing security policies, and implementing cookie consent to strengthen GDPR compliance and user trust.

A

aufsiemitgebrüll

aufsiemitgebruell.de

63

aufsiemitgebrüll is a small communication and design studio based in Berlin, Germany, focusing on societal awareness and creative services. The website is built on the Squarespace platform, leveraging modern web technologies and integrated cookie consent management via Cookiebot to comply with GDPR requirements. The business presents clear contact information and a professional online presence, targeting a German-speaking audience. Technically, the site is well-structured with good mobile optimization and performance, hosted on Cloudpit infrastructure. Security posture is strong with HTTPS and HSTS enabled, though explicit privacy and terms of service policies are missing, representing compliance gaps. Overall, the site is trustworthy and professionally maintained, with room for improvement in privacy disclosures and incident response readiness.

M

Město Třešť

trest.cz

48

Město Třešť operates an official municipal website serving as the primary digital portal for residents, visitors, and stakeholders. The site provides comprehensive information about the town, local government services, social and educational offerings, cultural events, and tourism. It targets local citizens and tourists, supporting community engagement and public service delivery. The business model is typical for a government entity, focusing on transparency and accessibility rather than commercial revenue. The domain's long-standing registration since 1999 supports its legitimacy and established presence. Technically, the website uses a traditional HTML/CSS/JavaScript stack with the Vismo CMS platform. It integrates Google services such as reCAPTCHA for form security and Google Translate for multilingual support. The site demonstrates moderate performance and good mobile optimization but could improve accessibility and SEO features. Hosting and domain registration are consistent with a Czech municipal entity. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, which is positive. However, it lacks advanced security headers and explicit incident response or vulnerability disclosure policies. Privacy compliance is basic, with a privacy policy and cookie information present but no active consent mechanism. No critical vulnerabilities or suspicious content were detected, and the site is accessible without WAF blocking. Overall, the website is a trustworthy, well-maintained municipal portal with good business credibility and moderate technical sophistication. Strategic improvements in security headers, privacy consent, and accessibility would enhance its posture. The risk level is low, but ongoing attention to security best practices is recommended.

M

Město Žďár nad Sázavou

zdarns.cz

61

The website www.zdarns.cz serves as the official municipal portal for the city of Žďár nad Sázavou in the Czech Republic. It provides comprehensive information and services for citizens, local businesses, and visitors, including city news, administrative contacts, tourism guides, cultural events, and online public services. The site is well-structured with clear navigation tailored to different user groups such as citizens, entrepreneurs, and visitors. The business model is that of a government service portal aimed at transparency and community engagement. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Bootstrap for responsive design. It integrates Google Fonts and Google Analytics for typography and traffic analysis respectively. The site is served over HTTPS, ensuring encrypted communication. The cookie consent mechanism is implemented inline, allowing users to manage cookie preferences, which indicates a basic level of privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. No security.txt or explicit incident response contacts are found. The WHOIS data for the domain is unavailable, which slightly reduces trust from a domain registration standpoint, but the presence of official contact information and consistent branding supports legitimacy. Overall, the website is professional, trustworthy, and serves its purpose effectively. Recommendations include publishing a privacy policy and terms of service, implementing security headers, and improving transparency around data protection and incident response to enhance security posture and compliance.

M

Městys Stonařov

stonarov.cz

50

Městys Stonařov operates an official municipal website serving the local community in the Czech Republic. The site provides comprehensive information including government notices, local news, event calendars, and contact channels for residents and visitors. It positions itself as a trusted source for local governance and community engagement. Technically, the website is built on the Vismo CMS platform, leveraging standard web technologies such as HTML5, CSS3, and JavaScript, with integrations like Google reCAPTCHA for form security and Google Translate for accessibility. The site is secured with HTTPS and shows moderate performance and basic mobile optimization. Security posture is adequate with encrypted connections and anti-bot measures, though it lacks advanced security headers and explicit incident response or security policies. Privacy compliance is partially addressed with linked privacy and cookie policies but lacks active consent mechanisms. Overall, the website demonstrates a solid business credibility and trustworthy presence consistent with a small government entity.

M

Městys Luka nad Jihlavou

lukanadjihlavou.cz

51

Městys Luka nad Jihlavou operates an official municipal website serving the local community and visitors by providing essential information about local governance, services, events, and contact details. The website is well-structured, primarily in Czech, and includes official social media channels, public notices, and an event calendar. The business model is focused on government transparency and citizen engagement, positioning it as a trusted local government portal. Technically, the site uses a CMS platform (Vismo), modern web standards, and integrates Google services such as reCAPTCHA and Translate to enhance usability and security. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and spam protection on forms, though some security headers are missing and no explicit incident response contacts are provided. Overall, the site is legitimate, trustworthy, and serves its intended audience effectively.

K

KPŽ - Knoflíkářský průmysl Žirovnice

kpzas.cz

47

KPŽ - Knoflíkářský průmysl Žirovnice is a well-established Czech manufacturing company specializing in plastic components for the automotive industry, particularly lighting technology. With a history spanning over 161 years, the company serves numerous global automotive brands and maintains a medium-sized workforce. Their website reflects a professional and consistent brand image, targeting automotive clients and partners. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Tag Manager and CookieScript for analytics and compliance. The site is mobile-optimized and provides clear navigation and relevant content. Security-wise, the website enforces HTTPS and includes a cookie consent mechanism, but lacks some advanced security headers which could be improved. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the company. Contact information is clearly presented, facilitating communication. No critical security or compliance issues were detected.

M

Město Polná

mesto-polna.cz

44

The website mesto-polna.cz serves as the official online portal for the town of Polná, Czech Republic. It provides residents and visitors with municipal news, official documents, event calendars, and contact information. The site is positioned as a local government service platform, targeting the community and stakeholders of Polná. The business model is governmental, focusing on public service and information dissemination. The website content is well-structured, professionally presented, and consistent with the town's branding and identity. Technically, the site uses a specialized CMS (Vismo) tailored for municipal websites, leveraging standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google services like reCAPTCHA for form security and Google Translate for multilingual support. The site is mobile-optimized and accessible, with good SEO practices. Performance is moderate, with no significant technical debt or outdated components detected. From a security perspective, the website enforces HTTPS and uses reCAPTCHA to protect forms from abuse. However, it lacks explicit security headers such as Content Security Policy or HSTS, and does not provide a dedicated security policy or incident response contact. Privacy and cookie policies are present but lack active consent mechanisms. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is trustworthy, safe, and professionally maintained, suitable for its governmental purpose. Strategic improvements in security headers, privacy consent, and incident response transparency would enhance its security posture and compliance. The domain registration data aligns well with the website's official nature, supporting its legitimacy and long-standing presence since 2001.

M

MANN+HUMMEL

mann-hummel.com

73

MANN+HUMMEL is a global leader in filtration technology, providing advanced solutions for clean air, water, and mobility. Established in 1941, the company serves diverse sectors including automotive, pharmaceuticals, agriculture, and building infrastructure. Their website reflects a mature digital presence with comprehensive product and corporate information, emphasizing sustainability and innovation. Technically, the site is built on Adobe Experience Manager, leveraging Adobe Analytics and OneTrust for privacy compliance and tracking. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit incident response and vulnerability disclosure information are absent. The WHOIS data for the domain is missing, which raises some concerns but is mitigated by the professional and consistent branding and content. Overall, the website demonstrates a high level of professionalism and trustworthiness, suitable for an enterprise-grade business.

C

CAWaB asbl

cawab.be

53

CAWaB asbl is a Belgian non-profit organization dedicated to advocating for accessibility for persons with reduced mobility in the Wallonia and Brussels regions. The website serves as a platform to promote their 2024 election priorities focused on inclusive society measures, including accessible transport, buildings, and communication. The organization targets both the general public and policymakers to foster legislative and social change. Technically, the website is built on the SPIP CMS with Bootstrap and includes social media integrations such as Facebook SDK and YouTube embeds. The site is hosted by OVH and demonstrates good mobile optimization and accessibility features, aligning with its mission. Security posture is moderate with HTTPS enabled but lacks explicit security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

La Pharmacie Anglaise is a small hospitality business operating a cocktail bar located in Brussels, Belgium. The website serves primarily as an informational portal providing contact details, social media links, and a downloadable cocktail menu. The business targets an adult audience, as indicated by the age restriction notice on the site. The market position appears local and niche, focusing on cocktail enthusiasts and nightlife patrons. The business has been established since 2015, consistent with the domain registration data. Technically, the website is simple and built with basic HTML and CSS, utilizing Google Fonts for typography. It is hosted by OVH sas, a reputable hosting provider. The site shows basic mobile optimization and accessibility but lacks advanced technical features or CMS integration. Performance is moderate given the minimal content and resources. From a security perspective, the site lacks critical security headers and does not enable DNSSEC. There is no evidence of HTTPS enforcement or advanced security policies. Privacy and cookie policies are absent, indicating potential compliance gaps with GDPR and related regulations. No forms or data collection mechanisms are present, reducing immediate data protection risks but also limiting user engagement. Overall, the website is functional for its purpose but requires improvements in security posture and privacy compliance to enhance trustworthiness and regulatory adherence. Strategic recommendations include implementing HTTPS and security headers, publishing privacy and cookie policies, and considering vulnerability disclosure mechanisms.

E

Efektivní Bydlení, spol. s r. o.

efektivni-bydleni.cz

50

Efektivní Bydlení, spol. s r. o. is a Czech Republic based small company specializing in the design and construction of passive and energy-efficient family homes. With over 15 years of experience and more than 80 successful projects, the company offers comprehensive services from architectural studies, project documentation, construction, financing assistance, to subsidy management. Their market position is that of a trusted local specialist focused on sustainable housing solutions. The website is professionally designed, mobile-optimized, and provides clear navigation and detailed service descriptions. Technically, the site uses modern web technologies including Google Tag Manager and service workers, ensuring good performance and user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though formal security policies and vulnerability disclosures are absent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Auto Vysočina is a well-established automotive dealership and service provider in the Czech Republic with over 25 years of market presence. The company specializes in sales and servicing of VW, Škoda, DWA, and KIA vehicles, operating multiple physical locations in Jihlava and Loket. The website serves as a brand and informational portal with links to vehicle offers, social media, and partner sites. Technically, the website is built with standard HTML, CSS, and JavaScript, featuring responsive design elements and embedded animations via iframes. However, it lacks modern security headers, privacy and cookie policies, and active analytics tracking, indicating room for improvement in digital maturity and compliance. Security posture is basic with no visible vulnerabilities but missing key security best practices such as HTTPS confirmation and security headers. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security measures to improve trust and regulatory adherence.

D

DJI

dji.com

74

DJI is a leading global technology company specializing in the design and manufacture of consumer and professional drones, camera stabilizers, and related products. The website showcases a comprehensive product portfolio including consumer drones like the Mavic series, handheld camera equipment, and enterprise solutions for agriculture and industrial applications. The company maintains a strong market position with a well-branded, professional online presence targeting both consumers and professional users worldwide. Technically, the website employs modern web technologies including React and jQuery, optimized for performance and mobile responsiveness. Security posture is solid with HTTPS enforced and privacy policies clearly presented, though some security headers and explicit incident response contacts could be improved. Overall, the site demonstrates a mature digital infrastructure with good SEO and accessibility practices.

C

CPI Jihlava Shopping a.s.

citypark.cz

54

Citypark Jihlava operates as a regional shopping center in the Czech Republic, offering a broad range of retail shops, dining options, entertainment including a cinema, and parking facilities. The website reflects a professional and user-friendly digital presence with clear navigation and relevant content targeting local shoppers and visitors. The business is part of the CPI group, a known operator of shopping centers in the region. Technically, the site employs modern web technologies, including JavaScript frameworks, cookie consent management, and analytics tools, ensuring a compliant and functional user experience. Security posture is solid with HTTPS and consent mechanisms, though there is room for improvement in publishing explicit security policies and headers. The absence of WHOIS data reduces domain registration transparency but does not detract from the apparent legitimacy of the business. Overall, the site is well-maintained, GDPR compliant, and suitable for general audiences.

R

Robinson Jihlava s.r.o.

robinsonjihlava.cz

50

Robinson Jihlava s.r.o. operates the largest family amusement park in the Vysočina region of the Czech Republic, offering a wide range of attractions, event hosting, and food services targeted primarily at families and local visitors. The website presents a professional and well-structured digital presence with clear navigation, social media integration, and contact information. Technically, the site uses modern web standards with responsive design and AJAX forms, although no specific CMS or hosting provider is identified. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and detailed privacy or security policies. The domain is long-established and consistent with the business claims, indicating legitimacy and trustworthiness.

K

Kernkraftwerk Gösgen-Däniken AG

kkg.ch

76

Kernkraftwerk Gösgen-Däniken AG operates a nuclear power plant in Switzerland, providing reliable and climate-friendly electricity. The company emphasizes technical expertise, environmental responsibility, and economic efficiency, serving a broad audience including professionals, schools, and job seekers. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site uses modern JavaScript libraries and frameworks, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be enhanced. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business entity.

I

Internetový prodej s.r.o., Shean s.r.o.

ahifi.hu

52

Ahifi.hu is a well-established Hungarian e-commerce retailer specializing in car audio equipment and automotive accessories. The website offers a broad range of products including car radios, speakers, amplifiers, subwoofers, and car care products. It targets car audio enthusiasts and vehicle owners primarily in Hungary, supported by sister sites in neighboring countries. The business has a history of approximately 20 years, indicating a mature market presence. Technically, the site uses modern web technologies such as Vue.js and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and product information. Security posture is solid with HTTPS and security headers implemented, though explicit privacy and security policies are missing. Cookie consent mechanisms are in place, supporting GDPR compliance to some extent. Overall, the site is professional and trustworthy but could improve transparency by publishing dedicated privacy and security policy documents.

V

Volvo Trucks

volvotrucks.cz

70

Volvo Trucks Czech Republic operates as a regional market website for the global Volvo Trucks brand, providing comprehensive information about their range of commercial trucks, services, financing, and fleet management solutions. The website is well localized for the Czech market and targets transport companies, fleet managers, and truck buyers. The business model focuses on manufacturing, sales, after-sales services, and financing, positioning Volvo Trucks as a leading player in the transportation sector in the region. Technically, the site leverages Adobe Experience Manager CMS, Adobe analytics, and robust CDN services, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though some improvements in CSP and incident response transparency are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, though the absence of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security policies, publishing vulnerability disclosure information, and improving accessibility compliance.

VELUXshop.hr is the official Croatian e-commerce platform for VELUX branded roof window blinds and shading solutions. The website offers a comprehensive catalog of products including roller blinds, pleated blinds, insect nets, and external shading devices, targeting Croatian consumers seeking quality window accessories. The site is built on modern web technologies such as Nuxt.js and Vue.js, providing a responsive and user-friendly shopping experience. Security posture is strong with HTTPS enforced and standard security headers present, though explicit cookie consent and security policies could be improved. Overall, the site demonstrates a mature digital presence aligned with the VELUX brand, supporting a medium-sized retail operation with clear contact information and legal compliance.

C

Charwin Private Clients Limited

charwinmortgages.co.uk

65

Charwin Mortgages is a UK-based mortgage brokerage firm specializing in providing mortgage and homeowner loan services to clients across all credit profiles, including those with bad or impaired credit. The company operates under Charwin Private Clients Limited, an FCA-authorized entity, and offers a comprehensive suite of services such as remortgages, home purchases, secured loans, debt consolidation, and capital raising. Their market position is strong within the niche of credit-challenged borrowers, supported by trust indicators like Trustpilot reviews and regulatory compliance. Technically, the website is built on modern frameworks including UIkit and integrates multiple analytics and marketing tools, demonstrating a mature digital infrastructure. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is solid with HTTPS and secure forms, though some security headers could be enhanced. Privacy compliance is robust with a detailed privacy policy and cookie consent mechanism. Overall, the website presents a professional, trustworthy, and user-friendly experience with a high level of business credibility.

H

hobbytec.se

hobbytec.se

46

The website hobbytec.se currently serves as a parked domain with minimal content primarily consisting of advertising blocks and no substantive business information or services. The domain registration data is inconsistent, showing a creation date in the future, which undermines trust and suggests the domain is not yet actively used for a legitimate business. Technically, the site uses basic HTML, CSS, and JavaScript with Google Adsense and Bodis scripts for monetization. Security posture is weak with no DNSSEC, no security headers, and no visible privacy or incident response policies. The site is accessible over HTTPS but lacks GDPR compliance mechanisms such as cookie consent banners. Overall, the site appears to be a placeholder rather than an operational business website.

H

Hobbytec

hobby-tec.de

56

Hobbytec is a medium-sized manufacturer specializing in aluminum garden structures such as winter gardens, pergolas, carports, and photovoltaic solutions. The company operates primarily in Germany with a strong presence across several European countries through partner sites. Their business model focuses on custom-made, turnkey solutions including transport and installation services. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and Google reCAPTCHA to enhance user experience and security. Hosting appears to be managed through Czech providers, consistent with the company's regional footprint. Security posture is solid with HTTPS and spam protection on forms, though some security headers and policies are missing. Privacy compliance is well addressed with GDPR-consent mechanisms and a privacy policy. Overall, the site is trustworthy and safe for general audiences.

H

Hobbytec

hobbytec.bg

45

Hobbytec is a medium-sized manufacturer specializing in aluminum winter gardens, pergolas, carports, modular houses, and photovoltaic solutions. The company operates multiple country-specific websites and showrooms, positioning itself as a leading player in the European home and garden equipment market. Their business model focuses on custom production and direct sales supported by physical showrooms and an online presence. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, and reCAPTCHA, with a custom CMS platform. The site is well-optimized for SEO and mobile devices, though accessibility features are basic. Security posture is solid with HTTPS and form protections, but lacks advanced security headers and incident response disclosures. Overall, the website is professional, trustworthy, and compliant with GDPR, featuring clear contact information and cookie consent mechanisms.

C

Cardberg, s.r.o.

cardberg.com

41

Cardberg, s.r.o. operates the Cardberg Tourist Insights platform, providing comprehensive IT solutions for tourism destinations and boards. Their services include tourist discount and loyalty card management, mobile applications, online shops, hotel reception integration, and advanced data analytics for marketing and tourist behavior insights. The company has over 10 years of experience and serves multiple tourism destinations, positioning itself as a specialized technology provider in the tourism sector. Technically, the website uses a modern but somewhat dated tech stack including Bootstrap and jQuery, with integrations for analytics and session recording. Security posture is moderate with HTTPS enforced and CAPTCHA on contact forms, but lacks published privacy and cookie policies and security headers. The domain registration is consistent and mature, supporting business legitimacy. Overall, the website is professional and functional but could improve compliance and security transparency.

T

TT HOLDING, a.s.

ttholding.cz

45

TT HOLDING, a.s. is a Czech-based company specializing in the sale and distribution of windows, doors, and related accessories. Founded in 2011, the company has expanded its operations across multiple European countries including Slovakia, Austria, Germany, and Hungary. It operates several e-commerce platforms targeting both B2B and B2C customers such as craftsmen, construction companies, developers, and individual consumers. The company emphasizes quick delivery, multilingual support, and a large inventory of stocked products alongside custom-made solutions. Technically, the website employs modern web technologies including Google Tag Manager and Google Analytics for tracking, uses HTTPS with a good SSL configuration, and implements reCAPTCHA for form security. The site is mobile-optimized with good navigation and content quality. However, it lacks explicit privacy and cookie policies and does not implement common security headers, which are areas for improvement. From a security perspective, the site shows a mature posture with encrypted communications and secure forms but could enhance its defenses by adding security headers and publishing incident response policies. The absence of WHOIS data due to privacy protection does not raise immediate concerns given the professional presentation and business maturity. Overall, the website is trustworthy and well-positioned in its market segment. Strategically, TT HOLDING should focus on improving privacy compliance and security transparency to strengthen customer trust and regulatory adherence. Enhancing technical SEO and accessibility could further improve user experience and market reach.

VELUXshop.hu is the official Hungarian e-commerce platform for VELUX shading products and accessories, offering a comprehensive catalog of roof window shading solutions with promotions and warranty services. The website targets Hungarian homeowners and consumers seeking quality VELUX products, leveraging a modern Nuxt.js and Vue.js technology stack. The site demonstrates good digital maturity with secure HTTPS, clear navigation, and mobile optimization. Security posture is strong with appropriate headers and no visible vulnerabilities, though cookie consent mechanisms and explicit security policies could be enhanced. Overall, the site reflects a trustworthy and professional brand presence aligned with VELUX Group standards.

H

heyData - Compliance leicht gemacht, für alle

heydata.eu

53

heyData.eu is a German-language website focused on providing compliance solutions, likely in the data protection and privacy domain. The website appears to target businesses seeking simplified compliance management services. The technical infrastructure is based on modern web standards using Bootstrap 5 and custom fonts, hosted via GoDaddy. However, the site lacks visible privacy, cookie, or terms of service policies, and no explicit contact information or social media links are present in the analyzed HTML snippet. Security posture is minimal with no detected security headers or incident response contacts. Overall, the site is accessible and functional but requires improvements in privacy compliance and security transparency to enhance trust and regulatory adherence.

R

RustyBrick, Inc.

rustybrick.com

60

RustyBrick, Inc. is a small technology service company based in New York, specializing in web design, web development, mobile app development, branding, and marketing technology solutions. The company has a professional online presence with a comprehensive portfolio showcasing various projects and client testimonials, positioning itself as an established player in the technology services market. Their target audience primarily consists of businesses seeking customized online technology solutions to improve operational efficiency and sales. The website infrastructure employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google services such as reCAPTCHA for form security and Google Analytics for user tracking. The site is mobile optimized with responsive design elements, providing a good user experience across devices. However, some accessibility features could be improved to meet higher compliance standards. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms from spam and abuse. Despite this, the absence of key security headers and lack of a published security policy or incident response contact reduces the overall security maturity. The missing WHOIS registration data raises concerns about domain legitimacy, although the professional content and active business presence mitigate some risk. Overall, RustyBrick's website is well-designed and functional with moderate technical sophistication and a good security baseline. The primary risks relate to domain registration transparency and privacy compliance, which should be addressed to enhance trust and regulatory adherence.

M

MOL Plugee

molplugee.cz

36

MOL Plugee operates as a provider of electric vehicle charging stations primarily in the Czech Republic, offering both DC and AC chargers capable of fast charging within 30 minutes. The company appears to be a medium-sized entity founded in 2018, likely affiliated with the MOL Group, focusing on the energy and transportation sectors. Their market position is localized with a clear target audience of electric vehicle users in the region. Technically, the website employs modern web technologies including Bootstrap, FontAwesome, and Cookiebot for cookie consent management, hosted on Microsoft Azure DNS infrastructure. The site is mobile-optimized and SEO-friendly with good content quality and consistent branding. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers are not visible in the HTML content. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy linked and a detailed cookie consent mechanism in place. However, contact information and terms of service are not explicitly found on the main page, which could be improved for better business credibility. Overall, the website is professional, trustworthy, and safe for general audiences.

I

INA-INDUSTRIJA NAFTE, d.d.

inaloyaltynagradna.com

59

The website inaloyaltynagradna.com serves as a promotional platform for the INA Loyalty program's Coca-Cola related contest running from June 6 to July 31, 2025. It targets Croatian consumers who purchase Coca-Cola products at INA gas stations, encouraging them to participate in a loyalty program to win prizes such as PlayStation 5 Pro, iPhone 16, and fuel cards. The site is well-branded with consistent INA and Coca-Cola imagery and provides clear instructions and contact information. The business behind the site is INA-INDUSTRIJA NAFTE, a large energy sector company in Croatia, leveraging digital engagement to enhance customer loyalty.

E

Elite | Monday Lovers

esx.sk

40

Elite | Monday Lovers is a Slovak full-service advertising agency with approximately 15 years of experience, specializing in strategy, identity, campaigns, print, web design, social media, mobile applications, and PR. The company targets businesses seeking comprehensive marketing and advertising solutions and maintains a strong portfolio of multinational and local clients. Their website reflects a professional and consistent brand image with a clear presentation of services and client references. Technically, the site is built on OctoberCMS, uses modern web technologies, and integrates Google Tag Manager and Google Maps API for analytics and location services. The site is mobile optimized and performs moderately well. Security-wise, the website enforces HTTPS, implements a cookie consent mechanism with granular options, and includes basic security headers, though it lacks advanced headers like CSP or HSTS. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a cookie policy page with GDPR considerations, but a dedicated privacy policy and terms of service pages are not clearly found. Contact information is comprehensive and includes multiple channels. Overall, the site is trustworthy and professional with room for security and compliance improvements.

M

město Litvínov se sídlem Městský úřad Litvínov

mulitvinov.cz

47

The website mulitvinov.cz serves as the official online presence of the city of Litvínov, Czech Republic. It provides comprehensive information and services related to municipal administration, public services, local governance, and community events. The site targets residents and visitors seeking official information about the city, including administrative procedures, social services, cultural activities, and local news. The business model is that of a government entity focused on public service delivery and citizen engagement. The website is well-established, with a domain age dating back to 1999, reflecting a mature digital presence for the municipality. Technically, the site employs a modern CMS platform (vismo), uses HTTPS with good SSL configuration, and integrates third-party services such as Google reCAPTCHA for form security, Google Translate for multilingual support, and Facebook SDK for social media integration. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some improvements in security headers and cookie consent mechanisms are recommended. From a security perspective, the website enforces HTTPS and uses CAPTCHA to protect forms, but lacks explicit security headers and detailed security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is basic, with privacy and cookie policies present but without active consent mechanisms. The domain registration data is consistent and trustworthy, supporting the legitimacy of the site. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic recommendations include enhancing security headers, implementing cookie consent mechanisms, and publishing explicit security and incident response policies to improve compliance and trust.

M

Magistrát města Mostu

mesto-most.cz

49

The website www.mesto-most.cz serves as the official online portal for the city of Most in the Czech Republic. It provides comprehensive municipal information, including administrative services, event calendars, news updates, and public resources tailored for residents and visitors. The site is well-branded with official city logos and integrates social media channels to enhance community engagement. Technically, the site uses a modern CMS (vismo), incorporates Google Analytics for traffic insights, and employs Google reCAPTCHA to secure forms against spam. The presence of cookie consent and privacy policies indicates compliance with GDPR regulations. Security-wise, the site enforces HTTPS and uses standard security practices but lacks explicit security headers and a published security policy or incident response contact. The WHOIS data is unavailable, which slightly reduces domain registration trust but does not detract from the site's legitimacy given its official nature. Overall, the site is professional, user-friendly, and secure with room for improvement in security transparency and technical headers.

I

ipartner

ipartner.sk

48

ipartner is a Slovak-based company specializing in creating exceptional products and services through creative design and technology. Their offerings include web design, software development, marketing, SEO, and graphic design, targeting both companies and individuals across various industries. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern JavaScript libraries, Google Analytics for tracking, and is hosted on a Slovak hosting provider, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and GDPR-compliant privacy and cookie policies, though explicit security policies and incident response information are absent. Overall, the domain registration data aligns well with the business history, supporting legitimacy and trustworthiness.

S

Smash, s. r. o.

hellosmash.sk

47

Smash, s. r. o. is a Slovak-based small web development agency specializing in creating high-quality custom websites and digital products. Their market position is focused on delivering precision and quality to local businesses and organizations, with a portfolio that includes notable clients such as ESET. The company emphasizes mobile-first design and user experience. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integration of Google Analytics and Tag Manager for performance and marketing insights. The site is well-structured, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is moderate; HTTPS is assumed but security headers are not evident, and no explicit security policies or incident response information are published. Privacy compliance is good with GDPR and cookie consent mechanisms in place. Overall, the website is professional and trustworthy, though WHOIS data is unavailable due to privacy protection, which slightly reduces transparency.

V

VELUX Magyarország Kft.

velux.hu

66

VELUX Magyarország Kft. operates as a leading manufacturer and retailer of roof windows, skylights, sun tunnels, and shading solutions in Hungary. The company is part of the global VELUX Group, established in 1941, and holds a strong market position as a trusted brand for home improvement products. Their website offers comprehensive product information, consultation services, and supports both consumers and professionals with dedicated resources. Technically, the website is built on modern frameworks like Vue.js and Sitecore CMS, integrating advanced search and analytics tools, ensuring a responsive and user-friendly experience across devices. Security posture is robust with HTTPS enforcement and no visible vulnerabilities, complemented by comprehensive privacy and legal documentation, including GDPR compliance and a whistleblower reporting channel. Overall, the site reflects a mature digital presence with high professionalism, trustworthiness, and alignment with business goals.

V

VELUX

velux.hr

58

VELUX is a leading global manufacturer specializing in roof windows, flat roof windows, light tunnels, blinds, and external shutters. The company has a strong market position with a comprehensive product portfolio and professional services aimed at homeowners, architects, and construction professionals. The website is well-structured, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site uses modern frameworks such as Vue.js and Sitecore CMS, with integrations like Google Tag Manager and Algolia for search functionality. Security posture is strong with HTTPS enforcement and standard security headers, though there is room for improvement in explicit cookie consent and security policy disclosures. Overall, the domain registration and WHOIS data align well with the brand's identity, supporting legitimacy and trustworthiness.

I

Internetový prodej s.r.o., Shean s.r.o.

ahifi.cz

42

Ahifi.cz is a Czech-based e-commerce business specializing in car audio equipment and accessories, including autoradios, speakers, amplifiers, subwoofers, and soundproofing materials. The company operates a multilingual website targeting Central European markets and offers additional services such as installation and wholesale distribution. The website demonstrates a mature digital presence with a professional design, clear navigation, and comprehensive product information. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and tracking tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and secure login mechanisms, though some security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. However, the absence of WHOIS data reduces domain trustworthiness, warranting further verification. Overall, Ahifi.cz presents as a credible and professional business with a good balance of content quality, technical implementation, and security awareness.

The website dsoft.company is a minimal WordPress-based blog with very limited content and no clear business description or services. It appears to be a personal or small-scale site with a single blog post and basic navigation. The technical infrastructure is standard for WordPress, hosted by BigRock Solutions Ltd, with HTTPS enabled but lacking advanced security headers or DNSSEC. There are no privacy, cookie, or terms of service policies present, and no contact or business information is provided, which limits trust and compliance. The WHOIS data shows the domain was registered in 2022 in the United Arab Emirates with no organization name, which aligns with the minimal business presence on the site. Overall, the site has a low security posture and limited business credibility.

R

Rload

rload.es

43

Rload is a small digital creative agency based in Madrid, Spain, specializing in web design, ecommerce stores, app development, and user experience (UX) design. The company targets businesses and individuals seeking professional digital creative services locally. The website presents a professional image with good content quality and consistent branding, supported by structured data confirming business contact details and operating hours. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates Google Analytics and Google Tag Manager for visitor tracking. Performance and mobile optimization are adequate, though accessibility and SEO optimizations are basic. Security posture is moderate but lacks visible security headers and explicit policies. WHOIS data is inaccessible due to Red.es restrictions, limiting domain trust assessment. No privacy or cookie policies were found, indicating compliance gaps. Overall, the site is functional and professional but would benefit from enhanced security and privacy transparency.

C

Capptain bv

capptain.be

59

Capptain bv is a Belgian digital solutions partner specializing in accelerating business growth through process automation and custom digital solutions. Founded in 2014 as Fluvio, the company has evolved into a full-service digital agency offering web, app, and software development services. Their market position is that of a trusted technology partner for businesses seeking modern and professional digital transformation. The website demonstrates a strong focus on client engagement, showcasing case studies and leveraging modern technologies such as Laravel, Vue JS, and PHP. The technical infrastructure is modern and well-optimized for performance and mobile responsiveness, indicating a mature digital presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the business credibility is high, supported by transparent contact information, legal disclosures, and active social media channels.

D

Dopravní podnik města Jihlavy, a.s.

dpmj.cz

45

Dopravní podnik města Jihlavy, a.s. operates as the primary public transportation provider in Jihlava, Czech Republic, offering bus and trolleybus services along with related offerings such as ticket sales, vehicle maintenance, and advertising opportunities. The company maintains a professional web presence with clear navigation and relevant content targeting local residents and visitors. The website is built on the vismo CMS platform and incorporates modern web technologies including responsive design and accessibility features. Security posture is moderate with HTTPS implied but lacks explicit security headers and incident response information. Privacy policies are present and GDPR compliance appears addressed, though cookie consent mechanisms could be improved. The absence of WHOIS data limits domain trust assessment, but the business appears legitimate based on content and contact information. Overall, the website demonstrates a solid digital infrastructure suitable for its public service role.

D

Dopravní podnik města Ústí nad Labem a.s.

dpmul.cz

58

Dopravní podnik města Ústí nad Labem a.s. is a medium-sized public transportation company operating bus and trolleybus services primarily in the Ústí nad Labem region of the Czech Republic. The company provides a range of services including ticket sales, electronic tickets, contracted transport, and additional offerings such as a cable railway and driving school. The website reflects a well-established operator with a domain registered since 1999, consistent with the company's history and market presence. Technically, the website employs modern web technologies including Bootstrap for responsive design, JavaScript libraries for interactive elements, and Leaflet for mapping services. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Hosting and domain registration are managed by a reputable Czech registrar, REG-ZONER. From a security perspective, the site uses HTTPS and implements cookie consent with Cloudflare Turnstile captcha for form protection. However, explicit security headers are not clearly declared, and there is no visible security policy or incident response contact information. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with clear contact information and active social media channels. Strategic improvements could include publishing a formal security policy, enhancing security headers, and providing incident response contacts to strengthen security posture and user trust.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which is displayed when the browser cannot load external website content. This page includes embedded JavaScript and styles for the Chrome offline dinosaur game but contains no actual business or website content. Consequently, no business information, privacy policies, or contact details are present. The technical infrastructure is limited to browser internal scripts and canvas-based game rendering. Security posture cannot be fully assessed due to the absence of a real website context. Overall, this is not a publicly accessible website but a browser error page, and thus lacks typical web presence elements.

S

Smarty.cz

smarty.cz

54

Smarty.cz is a prominent Czech retailer specializing in smart electronics, gaming products, and accessories. The company operates both an e-commerce platform and multiple physical stores across the Czech Republic, offering services such as device servicing, buyback, and express delivery. Their market position is strong within the Czech retail sector for technology and gaming products, targeting consumers interested in the latest electronics and gaming gear. The website is professionally designed, mobile-optimized, and provides a rich user experience with clear navigation and comprehensive product offerings. Technically, Smarty.cz employs modern web technologies including HTML5, CSS3, JavaScript, and utilizes third-party services like Google Tag Manager and Startquestion widgets for analytics and customer engagement. The site demonstrates good performance and accessibility standards, with secure HTTPS connections and appropriate security headers in place. From a security perspective, the website shows a solid posture with HTTPS enforcement and secure form handling. However, there is a lack of publicly available security policies, incident response information, and vulnerability disclosure programs, which are areas for improvement. The absence of WHOIS data reduces transparency and slightly impacts trustworthiness, though the business presence and content quality support legitimacy. Overall, Smarty.cz presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing transparency around security policies, publishing incident response and vulnerability disclosure information, and improving WHOIS data availability to bolster trust and compliance.

ShareDefender.com is a newly established digital security service provider focused on protecting sensitive data and systems, particularly in the cryptocurrency sector. The website presents a basic informational page describing their customizable security license and proactive defense technologies. The business targets both individuals and companies seeking enhanced digital asset protection. Technically, the site is built using a simple hosting page builder with standard HTML and CSS, hosted by Infomaniak Network SA. There is no evidence of advanced frameworks or CMS platforms. Security posture is minimal with no DNSSEC, no security headers, and no visible HTTPS enforcement details. Privacy and cookie policies are absent, and no contact information or forms are provided, limiting user engagement and compliance. The domain registration is recent but consistent with the business launch timeline, registered with a reputable registrar and hosting provider. Overall, the website is functional but basic, with significant room for improvement in security, compliance, and content depth.

S

SHEAN s.r.o.

omnix.cz

58

Omnix.cz is a Czech-based technology company operated by SHEAN s.r.o., providing an integrated CMS and e-commerce platform tailored for businesses seeking unified web content management and online sales solutions. The platform emphasizes system integrations, multilingual content, configurators, and automation to serve a diverse client base with over 170 e-shop solutions and 200 web presentations. Technically, the website employs modern web technologies including HTTPS, Google Tag Manager, and reCAPTCHA, ensuring a secure and user-friendly experience. However, the absence of WHOIS data and explicit security policies slightly diminishes trustworthiness. Overall, the site is professional, well-structured, and compliant with GDPR, though improvements in security transparency and WHOIS data availability are recommended.