Security Directory

Č

ČD - Telematika a.s.

cdt.cz

71

ČD - Telematika a.s. is a prominent Czech company specializing in wholesale telecommunications services and railway infrastructure solutions. The company offers a broad portfolio of services including internet access, railway telematics (ETCS and GSM-R), infrastructure operations, voice and data services, ICT services, and ICT security. Positioned as a leading supplier in the Czech telecommunications and railway sectors, ČD - Telematika serves business customers requiring robust and specialized telecommunications infrastructure. The website reflects a professional and business-oriented approach, targeting corporate clients and government entities.

E

EOS

eosclub.zone

10

EOS.cz is a Czech-based SaaS platform designed to streamline the management of sports clubs and other organizations such as communities, associations, and chambers. The platform offers a comprehensive suite of tools including membership databases, payment processing integrated with banking, communication channels, attendance tracking, event nominations, electronic registrations, GDPR compliance features, document sharing, and a mobile app with notifications. The website demonstrates a strong market presence with over 840 clubs and 188,000 members across 70 sports. Technically, the site employs modern JavaScript frameworks like Alpine.js and Swiper.js, integrates analytics tools such as Google Tag Manager and Hotjar, and provides a responsive, well-structured user experience optimized for mobile devices. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and a published security policy are absent. The WHOIS data is unavailable or privacy protected, which limits domain trust verification but the professional presentation and customer testimonials support legitimacy. Overall, EOS.cz is a well-established platform with a solid technical foundation and a clear focus on serving sports organizations efficiently.

AHV ekologický servis, s.r.o. is a Czech Republic based company founded in 2002 specializing in ecological waste management services including disposal of hazardous and non-hazardous waste, recycling, and chemical laboratory services. The company targets industrial, food, cosmetic, transportation, healthcare, research, printing, and automotive sectors. The website is professionally designed, mobile optimized, and provides clear contact information and multiple operational locations, indicating a medium-sized regional service provider with a solid market presence. Technically, the website uses standard HTML5, CSS3, and JavaScript without any detected CMS or advanced frameworks. Performance is moderate with good mobile responsiveness but basic accessibility and SEO features. No analytics or tracking scripts were detected, indicating minimal user tracking. Security posture is moderate with no visible security headers or vulnerability disclosures, and WHOIS data is missing, which reduces domain trustworthiness. The security evaluation shows no critical vulnerabilities but highlights the absence of privacy and cookie policies, security headers, and WHOIS transparency as areas for improvement. The site is safe with no adult or questionable content. Overall, the website is functional and professional but would benefit from enhanced security and compliance features. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, improving accessibility, adding a vulnerability disclosure or security.txt file, and resolving WHOIS data transparency to improve trust and compliance.

M

Město Hodonín

hodonin.eu

48

The website hodonin.eu serves as the official digital portal for the city of Hodonín, Czech Republic. It provides comprehensive municipal information, including news, public notices, online services, social and educational resources, and tourism information. The site targets residents and visitors, offering practical tools and updates relevant to the local community. The business model is that of a government municipal service platform, positioning itself as the authoritative source for city-related information and services. Technically, the website is built on the Vismo CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google Analytics for visitor insights and Google reCAPTCHA for form security. The presence of a chatbot hosted on Azure indicates a moderate level of digital maturity. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. From a security perspective, the site enforces HTTPS and employs reCAPTCHA to protect forms. Cookie consent mechanisms are in place, reflecting GDPR compliance. However, explicit security headers like Content-Security-Policy or X-Frame-Options are not evident, and there is no published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the content. Overall, hodonin.eu is a trustworthy and professional municipal website with good content quality and privacy compliance. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would enhance its security posture and trustworthiness.

D

Dethleffs

dethleffs.fi

61

Dethleffs is a well-established manufacturer of recreational vehicles including caravans, motorhomes, and camper vans, targeting families and leisure travelers primarily in Europe. The company emphasizes quality, safety, and customization with a history spanning over 90 years and manufacturing rooted in Germany. The website is professionally designed, mobile-optimized, and offers multilingual support with tools such as a vehicle configurator and dealer locator enhancing user experience. Technically, the site uses modern frameworks like Pimcore CMS and UIkit, with Mapbox integration for dealer maps and Google Tag Manager for analytics. Security posture is good with HTTPS and secure forms, but lacks explicit security policies and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and business credible but would benefit from improved transparency on privacy and security policies.

D

Dethleffs

dethleffs.no

64

Dethleffs is a well-established company specializing in manufacturing and selling recreational vehicles such as camping trailers, motorhomes, and camper vans, targeting families and camping enthusiasts primarily in Norway and Europe. The website reflects a mature brand with over 90 years of history, emphasizing quality and German manufacturing heritage. Technically, the site uses modern web technologies including Pimcore CMS, UIkit framework, and integrates Google Tag Manager for analytics. The site is mobile optimized and provides a good user experience with clear navigation and rich content. Security posture is solid with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies. The absence of WHOIS data limits domain trust assessment, but the website content and external partner links support legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security header implementation.

D

Dethleffs

dethleffs.se

58

Dethleffs is a well-established manufacturer and retailer of recreational vehicles including caravans, motorhomes, camper vans, and urban campers, with a strong heritage dating back to 1931. The website targets families and camping enthusiasts primarily in Sweden and Europe, offering a broad product portfolio and dealer network. Technically, the site uses modern web technologies including Pimcore CMS and UKit framework, with good mobile optimization and SEO practices. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy/cookie policies. WHOIS data for the www subdomain is missing, which slightly reduces domain trustworthiness but does not impact the brand's overall credibility. The site is free of adult content and fully accessible without WAF or blocking mechanisms.

Dethleffs is a well-established company specializing in the manufacturing and retail of high-quality recreational vehicles including caravans, motorhomes, camper vans, and urban campers. With over 90 years of experience, the brand holds a strong market position in the transportation sector, targeting families and recreational vehicle enthusiasts. The website reflects a professional and comprehensive digital presence with detailed product information, configurator tools, and dealer locators, supporting a broad European market. Technically, the site uses modern technologies such as Pimcore CMS, UIkit framework, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are absent. Overall, the website is safe, family-friendly, and trustworthy, though WHOIS data is not publicly available, likely due to privacy protection.

Dethleffs is a well-established company specializing in the production and sale of recreational vehicles including caravans, campers, camper vans, and urban campers. With over 90 years of history, the company holds a strong market position as a trusted brand for family-oriented caravaning solutions. The website reflects a professional and comprehensive digital presence, targeting families and caravan enthusiasts with detailed product offerings and dealer support. Technically, the site uses modern frameworks and CMS technology, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though some improvements in security headers and privacy compliance mechanisms are recommended. Overall, the site is trustworthy and professionally maintained, supporting the brand's reputation and business model.

D

Dethleffs

dethleffs.es

54

Dethleffs is a well-established manufacturer and retailer of leisure vehicles including caravans, motorhomes, camper vans, and urban campers, targeting families and leisure travelers primarily in Spain and Europe. The website reflects a mature digital presence with a professional design, comprehensive product information, and useful tools such as a vehicle configurator and dealer locator. Technically, the site uses modern web technologies including Pimcore CMS and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. Overall, the domain registration and website content are consistent and legitimate, supporting a high trust level.

Dethleffs.co.uk is the UK portal for Dethleffs, a well-established manufacturer of leisure vehicles including motorhomes and camper vans with over 90 years of heritage. The website targets families and travel enthusiasts, offering detailed product information, dealer search, and vehicle configurator tools. Technically, the site uses modern web technologies including Pimcore CMS and UIkit framework, with good mobile optimization and moderate performance. Security posture is strong with HTTPS and DNSSEC enabled, though explicit security headers and privacy policies are missing. Analytics is implemented via Google Tag Manager, but privacy compliance needs improvement. Overall, the site is professional and trustworthy, reflecting the brand's market position.

D

Dethleffs

dethleffs.fr

68

Dethleffs is a well-established European company specializing in caravaning products including camping-cars, campervans, and urban campers, targeting families and travel enthusiasts. The website reflects a professional and consistent brand presence with multi-language support and a comprehensive cookie consent mechanism, indicating a mature digital presence. Technically, the site uses modern technologies such as Pimcore CMS, Matomo analytics, Google Tag Manager, and Cookiebot for privacy compliance, demonstrating a good level of digital maturity. Security posture is strong with HTTPS enforced and privacy-respecting analytics, though some security headers and explicit security policies are not detected. Overall, the website is trustworthy and professionally maintained, with no signs of blocking or WAF interference.

D

Dethleffs

dethleffs.at

66

Dethleffs is a well-established European company specializing in caravaning products including motorhomes, campervans, and urban campers, targeting families and outdoor enthusiasts. The website reflects a professional brand presence with consistent branding and a focus on user experience. The technical infrastructure leverages modern technologies such as Pimcore CMS, Google Tag Manager, Matomo analytics, and Cookiebot for privacy compliance, indicating a mature digital setup. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers are not detected and no public security or incident response policies are found. The absence of WHOIS data due to privacy protection is common and does not detract significantly from legitimacy. Overall, the website is trustworthy, compliant with GDPR, and provides a good user experience.

P

Pražský fotbalový svaz

fotbalpraha.cz

48

Pražský fotbalový svaz operates as a regional football association dedicated to organizing, promoting, and reporting on football activities in Prague. The website serves as a comprehensive portal for football news, match schedules, competitions, player and club profiles, and community projects. It targets a broad audience including players, coaches, referees, officials, parents, and fans within the Prague football ecosystem. The business model is non-profit and community-focused, emphasizing information dissemination and event coordination. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and popular libraries such as jQuery and Slick Carousel. It integrates Google Analytics for visitor tracking and Facebook SDK for social media engagement. The site is mobile-optimized with responsive design and includes SEO best practices such as meta tags and Open Graph data. Cookie consent mechanisms are implemented to comply with privacy regulations. From a security perspective, the site enforces HTTPS and provides cookie consent with granular user controls. However, it lacks explicit security headers and a published security policy or vulnerability disclosure program. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration trust assessment, but the website's content and partner affiliations suggest legitimacy. Overall, the website presents a professional and trustworthy digital presence for the Prague football community. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance trust and compliance.

O

OK REAL ESTATE s.r.o.

okrealestate.cz

48

OK REAL ESTATE s.r.o. is a Czech Republic based real estate agency offering a comprehensive range of services including property sales, rentals, financial services, insurance, and virtual tours. The company is part of the larger OK HOLDING group, which enhances its market position and service capabilities. The website is professionally designed with clear navigation, multiple client engagement forms, and GDPR-compliant privacy and cookie policies. Technically, the site uses modern web technologies including Google Analytics and Seznam Map API, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and form validations, though some security headers could be improved. The absence of WHOIS data is a concern for domain legitimacy verification but does not detract from the professional presentation and trust signals on the site. Overall, the site is a reliable digital presence for a medium-sized real estate business in the Czech market.

O

OK BROKERS s.r.o.

okbrokers.cz

10

OK BROKERS s.r.o. operates as a partnership network for independent insurance intermediaries in the Czech Republic, providing a range of services including software tools, legislative support, and benefits to its partners. The company is part of the larger OK HOLDING group, which strengthens its market position and credibility. The website is professionally designed, targeting insurance brokers and partners with clear navigation and relevant content in Czech language. Technically, the website uses modern technologies such as simploCMS, Google Tag Manager, and Google Analytics, ensuring a moderate to good performance and mobile optimization. However, some technical improvements are recommended, including the implementation of security headers and changing login forms to use POST methods to enhance security. From a security perspective, the site enforces HTTPS and uses secure login portals, but lacks explicit security policies and incident response information. No critical vulnerabilities were detected, but improvements in security headers and form handling would strengthen the security posture. Privacy compliance is partially addressed with a privacy policy and cookie consent mechanism, but terms of service and vulnerability disclosure are missing. Overall, the website presents a trustworthy and professional image with a solid business foundation. Strategic recommendations include enhancing security headers, improving form security, adding comprehensive security and incident response policies, and maintaining transparency in privacy and terms of service to improve compliance and user trust.

A

Avenue Restaurace

avenuejihlava.cz

65

Avenue Restaurace is a newly established hospitality business located in Jihlava, Czech Republic, offering international cuisine with a focus on fresh ingredients and a unique dining experience in a two-story glass space. The restaurant caters to a broad audience including local residents, tourists, and event organizers, providing services such as dine-in, catering, private event hosting, takeaway, and wedding receptions. The business leverages a modern digital presence with multilingual support and integrated reservation systems to enhance customer engagement. Technically, the website is built on the Dish.co platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and Adobe Dynamic Tag Management for analytics and marketing. The site is mobile-optimized with good SEO practices and accessibility features, although some improvements in security headers and performance optimization could be made. From a security perspective, the website employs HTTPS and cookie consent mechanisms, with no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are absent, suggesting room for improvement in formal security governance. The WHOIS data aligns well with the business claims, indicating a legitimate and consistent registration. Overall, Avenue Restaurace presents a professional and trustworthy online presence suitable for its hospitality market segment. Strategic enhancements in security policy transparency and technical hardening would further strengthen its risk posture and customer trust.

EURECCA is a healthcare-focused platform that provides a secure login portal for its users, likely healthcare professionals or researchers. The platform is funded by the European Society of Cataract and Refractive Surgeons (ESCRS) and technologically supported by ifa Systems, indicating a niche market position within the healthcare sector. The website is relatively new, with the domain registered in 2020, and presents a basic but functional user interface focused on secure access. Technically, the website uses standard HTML and CSS without advanced frameworks or CMS detected. Hosting is provided by InterNetX GmbH, a reputable registrar and hosting provider. The site is moderately optimized for mobile devices but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, suggesting minimal user tracking. From a security perspective, the site enforces HTTPS and uses secure password input fields but lacks DNSSEC and important security headers such as CSP or HSTS. There is no visible cookie consent mechanism or detailed privacy compliance beyond a basic privacy policy link. No contact or incident response information is provided, which limits transparency and user trust. Overall, the website is safe and professional but could benefit from enhanced security practices, improved privacy compliance, and richer content to increase trust and usability.

Ami.e.s des Parcs naturels de Wallonie is a small community or non-profit organization dedicated to promoting and supporting natural parks in the Wallonia region of Belgium. The website serves as an informational platform targeting local nature enthusiasts and environmental supporters. The business model appears to focus on community engagement and environmental awareness without commercial activities. Technically, the website is built using One.com Web Editor and hosted by One.com A/S, featuring basic HTML, CSS, and JavaScript with moderate performance and basic mobile optimization. Security posture is moderate with HTTPS enabled but lacking important security headers and privacy compliance mechanisms such as privacy and cookie policies. No contact information or incident response details are published, which limits user trust and compliance. Overall, the site is functional but requires improvements in privacy, security, and contact transparency to enhance trust and compliance.

S

Spolek Luka na dlani

vlukach.cz

46

The website vlukach.cz serves as a local community portal for Luka nad Jihlavou, providing residents and visitors with timely information such as local news, weather updates, event calendars, public notices, and local business listings. It positions itself as a community-driven informational resource with a focus on accessibility and local engagement. The site is relatively new, with domain registration in December 2023, and is hosted by Active24, a known hosting provider. Technically, the site uses standard web technologies (HTML, CSS, JavaScript) and is mobile responsive, though the design is basic and lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and no visible incident response or security policies. Privacy compliance is minimal, with no privacy or terms of service pages, and a cookie policy that states no cookies are used, thus no consent mechanism is implemented. Overall, the site is safe for general audiences and does not contain any adult or explicit content.

I

Informační centrum Polná

infocentrumpolna.cz

43

The website infocentrumpolna.cz serves as the official information center for the town of Polná in the Czech Republic. It provides residents and visitors with local news, event listings, tourist information, and contact services. The site is positioned as a local government portal, focusing on community engagement and public service. The business model is non-commercial, aimed at supporting local administration and tourism. The website content is well-structured, regularly updated, and presented primarily in Czech with multilingual support via Google Translate.

M

Město Chotěboř

chotebor.cz

55

The website chotebor.cz serves as the official online presence for the town of Chotěboř in the Czech Republic. It provides residents and visitors with comprehensive information about municipal services, local government officials, news updates, public tenders, and community events. The site targets local citizens and stakeholders seeking official information and services related to the town. The business model is that of a government service portal, focusing on transparency and public communication. The domain's long registration history since 1998 supports its legitimacy and established presence. Technically, the website employs a modern tech stack including HTML5, CSS3, JavaScript frameworks like Vue.js, and server-side CMS technology (Vismo). It integrates Google reCAPTCHA v3 for form security and Google Translate for accessibility. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security practices include HTTPS enforcement and CSRF protection, but lack some advanced HTTP security headers and a published security policy. From a security perspective, the site demonstrates good baseline protections with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit incident response contacts and vulnerability disclosure mechanisms. Privacy compliance is partially met with privacy and cookie policies present, but no active cookie consent mechanism is implemented. Contact information is clearly provided, enhancing trust and credibility. Overall, chotebor.cz is a trustworthy, well-maintained municipal website with good content quality and technical implementation. Strategic improvements could focus on enhancing security headers, publishing security policies, and implementing cookie consent to strengthen GDPR compliance and user trust.

A

aufsiemitgebrüll

aufsiemitgebruell.de

63

aufsiemitgebrüll is a small communication and design studio based in Berlin, Germany, focusing on societal awareness and creative services. The website is built on the Squarespace platform, leveraging modern web technologies and integrated cookie consent management via Cookiebot to comply with GDPR requirements. The business presents clear contact information and a professional online presence, targeting a German-speaking audience. Technically, the site is well-structured with good mobile optimization and performance, hosted on Cloudpit infrastructure. Security posture is strong with HTTPS and HSTS enabled, though explicit privacy and terms of service policies are missing, representing compliance gaps. Overall, the site is trustworthy and professionally maintained, with room for improvement in privacy disclosures and incident response readiness.

Y

Yola

yola.com

69

Yola is a technology company providing a free website builder platform aimed at small businesses and individuals seeking to establish an online presence. The website offers free hosting, SEO tools, and easy website creation services, positioning itself as a practical solution for entrepreneurs and small enterprises. The platform is moderately mature with a consistent brand presence and a user-friendly interface. Technically, the site employs modern web technologies including Google Tag Manager for analytics and tracking, WebFontLoader for fonts, and a proprietary CMS indicated by script references. The hosting appears to be managed by a specialized hosting provider. The site is mobile optimized and SEO friendly, though accessibility features are basic. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements. However, explicit security headers are missing, and no dedicated security or incident response policies are published. The absence of WHOIS data reduces domain trustworthiness, though the website content and technical setup suggest a legitimate business operation. Overall, the site presents a moderate risk profile with room for improvement in transparency, security policy publication, and contact information availability. Strategic enhancements in these areas would strengthen trust and compliance posture.

M

MANN+HUMMEL

mann-hummel.cz

68

MANN+HUMMEL is a global leader in filtration technology, specializing in air and water filtration solutions since 1941. The company targets industrial sectors including automotive, environmental, and life sciences, providing innovative filtration products and services. Their website reflects a mature digital presence with comprehensive corporate information and product offerings, primarily in Czech language for the regional audience. The site is built on Adobe Experience Manager, indicating a robust technical infrastructure with modern content management and analytics capabilities. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not publicly available. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness but does not detract from the professional presentation and established market position. Overall, the website is well-designed, accessible, and compliant with GDPR, supporting the company's credibility and business operations.

M

Město Třešť

trest.cz

48

Město Třešť operates an official municipal website serving as the primary digital portal for residents, visitors, and stakeholders. The site provides comprehensive information about the town, local government services, social and educational offerings, cultural events, and tourism. It targets local citizens and tourists, supporting community engagement and public service delivery. The business model is typical for a government entity, focusing on transparency and accessibility rather than commercial revenue. The domain's long-standing registration since 1999 supports its legitimacy and established presence. Technically, the website uses a traditional HTML/CSS/JavaScript stack with the Vismo CMS platform. It integrates Google services such as reCAPTCHA for form security and Google Translate for multilingual support. The site demonstrates moderate performance and good mobile optimization but could improve accessibility and SEO features. Hosting and domain registration are consistent with a Czech municipal entity. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, which is positive. However, it lacks advanced security headers and explicit incident response or vulnerability disclosure policies. Privacy compliance is basic, with a privacy policy and cookie information present but no active consent mechanism. No critical vulnerabilities or suspicious content were detected, and the site is accessible without WAF blocking. Overall, the website is a trustworthy, well-maintained municipal portal with good business credibility and moderate technical sophistication. Strategic improvements in security headers, privacy consent, and accessibility would enhance its posture. The risk level is low, but ongoing attention to security best practices is recommended.

M

Město Žďár nad Sázavou

zdarns.cz

61

The website www.zdarns.cz serves as the official municipal portal for the city of Žďár nad Sázavou in the Czech Republic. It provides comprehensive information and services for citizens, local businesses, and visitors, including city news, administrative contacts, tourism guides, cultural events, and online public services. The site is well-structured with clear navigation tailored to different user groups such as citizens, entrepreneurs, and visitors. The business model is that of a government service portal aimed at transparency and community engagement. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Bootstrap for responsive design. It integrates Google Fonts and Google Analytics for typography and traffic analysis respectively. The site is served over HTTPS, ensuring encrypted communication. The cookie consent mechanism is implemented inline, allowing users to manage cookie preferences, which indicates a basic level of privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. No security.txt or explicit incident response contacts are found. The WHOIS data for the domain is unavailable, which slightly reduces trust from a domain registration standpoint, but the presence of official contact information and consistent branding supports legitimacy. Overall, the website is professional, trustworthy, and serves its purpose effectively. Recommendations include publishing a privacy policy and terms of service, implementing security headers, and improving transparency around data protection and incident response to enhance security posture and compliance.

M

Městys Stonařov

stonarov.cz

50

Městys Stonařov operates an official municipal website serving the local community in the Czech Republic. The site provides comprehensive information including government notices, local news, event calendars, and contact channels for residents and visitors. It positions itself as a trusted source for local governance and community engagement. Technically, the website is built on the Vismo CMS platform, leveraging standard web technologies such as HTML5, CSS3, and JavaScript, with integrations like Google reCAPTCHA for form security and Google Translate for accessibility. The site is secured with HTTPS and shows moderate performance and basic mobile optimization. Security posture is adequate with encrypted connections and anti-bot measures, though it lacks advanced security headers and explicit incident response or security policies. Privacy compliance is partially addressed with linked privacy and cookie policies but lacks active consent mechanisms. Overall, the website demonstrates a solid business credibility and trustworthy presence consistent with a small government entity.

M

Městys Luka nad Jihlavou

lukanadjihlavou.cz

51

Městys Luka nad Jihlavou operates an official municipal website serving the local community and visitors by providing essential information about local governance, services, events, and contact details. The website is well-structured, primarily in Czech, and includes official social media channels, public notices, and an event calendar. The business model is focused on government transparency and citizen engagement, positioning it as a trusted local government portal. Technically, the site uses a CMS platform (Vismo), modern web standards, and integrates Google services such as reCAPTCHA and Translate to enhance usability and security. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and spam protection on forms, though some security headers are missing and no explicit incident response contacts are provided. Overall, the site is legitimate, trustworthy, and serves its intended audience effectively.

K

KPŽ - Knoflíkářský průmysl Žirovnice

kpzas.cz

47

KPŽ - Knoflíkářský průmysl Žirovnice is a well-established Czech manufacturing company specializing in plastic components for the automotive industry, particularly lighting technology. With a history spanning over 161 years, the company serves numerous global automotive brands and maintains a medium-sized workforce. Their website reflects a professional and consistent brand image, targeting automotive clients and partners. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Tag Manager and CookieScript for analytics and compliance. The site is mobile-optimized and provides clear navigation and relevant content. Security-wise, the website enforces HTTPS and includes a cookie consent mechanism, but lacks some advanced security headers which could be improved. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the company. Contact information is clearly presented, facilitating communication. No critical security or compliance issues were detected.

O

Obec Suchá

obecsucha.cz

51

The website obecsucha.cz serves as the official online presence for the municipality of Suchá in the Jihlava district of the Czech Republic. It provides residents and visitors with access to local government information, public notices, contact details, event calendars, and community updates. The site is clearly targeted at local citizens and government officials, offering essential municipal services and information in Czech language with some translation support via Google Translate. The business model is that of a government information portal, with no commercial activities. The domain age and WHOIS data confirm legitimacy and consistency with the municipal nature of the site. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google reCAPTCHA for form security and Google Translate for language accessibility. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. However, there is room for improvement in modern security practices, including the implementation of security headers and enhanced cookie consent mechanisms. From a security perspective, the site benefits from HTTPS encryption and uses reCAPTCHA to protect its contact form from spam and abuse. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response information, and security headers suggests a moderate security posture. Privacy compliance is basic but present, with GDPR-related information available. Overall, the site demonstrates a reasonable level of security for a small municipal website but could enhance its posture with additional measures. The overall risk assessment is low, given the nature of the site and its content. Strategic recommendations include implementing security headers, enhancing privacy and cookie consent mechanisms, publishing clear security and incident response policies, and maintaining regular audits of third-party scripts. These steps will improve trust, compliance, and resilience against potential threats.

M

Město Polná

mesto-polna.cz

44

The website mesto-polna.cz serves as the official online portal for the town of Polná, Czech Republic. It provides residents and visitors with municipal news, official documents, event calendars, and contact information. The site is positioned as a local government service platform, targeting the community and stakeholders of Polná. The business model is governmental, focusing on public service and information dissemination. The website content is well-structured, professionally presented, and consistent with the town's branding and identity. Technically, the site uses a specialized CMS (Vismo) tailored for municipal websites, leveraging standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google services like reCAPTCHA for form security and Google Translate for multilingual support. The site is mobile-optimized and accessible, with good SEO practices. Performance is moderate, with no significant technical debt or outdated components detected. From a security perspective, the website enforces HTTPS and uses reCAPTCHA to protect forms from abuse. However, it lacks explicit security headers such as Content Security Policy or HSTS, and does not provide a dedicated security policy or incident response contact. Privacy and cookie policies are present but lack active consent mechanisms. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is trustworthy, safe, and professionally maintained, suitable for its governmental purpose. Strategic improvements in security headers, privacy consent, and incident response transparency would enhance its security posture and compliance. The domain registration data aligns well with the website's official nature, supporting its legitimacy and long-standing presence since 2001.

M

MANN+HUMMEL

mann-hummel.com

73

MANN+HUMMEL is a global leader in filtration technology, providing advanced solutions for clean air, water, and mobility. Established in 1941, the company serves diverse sectors including automotive, pharmaceuticals, agriculture, and building infrastructure. Their website reflects a mature digital presence with comprehensive product and corporate information, emphasizing sustainability and innovation. Technically, the site is built on Adobe Experience Manager, leveraging Adobe Analytics and OneTrust for privacy compliance and tracking. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit incident response and vulnerability disclosure information are absent. The WHOIS data for the domain is missing, which raises some concerns but is mitigated by the professional and consistent branding and content. Overall, the website demonstrates a high level of professionalism and trustworthiness, suitable for an enterprise-grade business.

K

Karen McGrane & Ethan Marcotte

responsivewebdesign.com

53

ResponsiveWebDesign.com is a niche educational website focused on responsive web design, originally defined by Ethan Marcotte. The site offers resources such as articles, books, workshops, newsletters, and a podcast aimed at web designers and developers interested in responsive design. The business operates as a small entity with a clear focus on education and community engagement in the web development sector. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and the Modernizr library, hosted on DigitalOcean. The website is mobile optimized and accessible with good SEO practices, though performance is moderate. Security posture is adequate but could be improved by enabling DNSSEC and adding security headers. Privacy and cookie policies are absent, which impacts compliance and user trust. No contact information or incident response details are provided, limiting transparency. Overall, the domain is legitimate with a long registration history and no suspicious indicators.

C

CAWaB asbl

cawab.be

53

CAWaB asbl is a Belgian non-profit organization dedicated to advocating for accessibility for persons with reduced mobility in the Wallonia and Brussels regions. The website serves as a platform to promote their 2024 election priorities focused on inclusive society measures, including accessible transport, buildings, and communication. The organization targets both the general public and policymakers to foster legislative and social change. Technically, the website is built on the SPIP CMS with Bootstrap and includes social media integrations such as Facebook SDK and YouTube embeds. The site is hosted by OVH and demonstrates good mobile optimization and accessibility features, aligning with its mission. Security posture is moderate with HTTPS enabled but lacks explicit security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

M

Miss Sophie

miss-sophie.be

60

Miss Sophie is a small Belgian e-commerce business specializing in high-quality sandwiches, salads, and homemade desserts, with over 20 years of experience in product selection. The company targets business customers and individuals seeking quality lunch options, offering assortments for business lunches, local delivery, and pickup services. The website is built on the Shopify platform, leveraging modern web technologies and third-party apps to enhance user experience and operational efficiency. Technically, the site is well-structured, mobile-optimized, and integrates lazy loading and analytics tools effectively. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are lacking. WHOIS data is restricted, which limits domain trust verification, but the professional presentation and business consistency support legitimacy. Strategic improvements include adding comprehensive privacy and cookie policies, enhancing security headers, and providing clear contact information for incident response.

La Pharmacie Anglaise is a small hospitality business operating a cocktail bar located in Brussels, Belgium. The website serves primarily as an informational portal providing contact details, social media links, and a downloadable cocktail menu. The business targets an adult audience, as indicated by the age restriction notice on the site. The market position appears local and niche, focusing on cocktail enthusiasts and nightlife patrons. The business has been established since 2015, consistent with the domain registration data. Technically, the website is simple and built with basic HTML and CSS, utilizing Google Fonts for typography. It is hosted by OVH sas, a reputable hosting provider. The site shows basic mobile optimization and accessibility but lacks advanced technical features or CMS integration. Performance is moderate given the minimal content and resources. From a security perspective, the site lacks critical security headers and does not enable DNSSEC. There is no evidence of HTTPS enforcement or advanced security policies. Privacy and cookie policies are absent, indicating potential compliance gaps with GDPR and related regulations. No forms or data collection mechanisms are present, reducing immediate data protection risks but also limiting user engagement. Overall, the website is functional for its purpose but requires improvements in security posture and privacy compliance to enhance trustworthiness and regulatory adherence. Strategic recommendations include implementing HTTPS and security headers, publishing privacy and cookie policies, and considering vulnerability disclosure mechanisms.

E

Efektivní Bydlení, spol. s r. o.

efektivni-bydleni.cz

50

Efektivní Bydlení, spol. s r. o. is a Czech Republic based small company specializing in the design and construction of passive and energy-efficient family homes. With over 15 years of experience and more than 80 successful projects, the company offers comprehensive services from architectural studies, project documentation, construction, financing assistance, to subsidy management. Their market position is that of a trusted local specialist focused on sustainable housing solutions. The website is professionally designed, mobile-optimized, and provides clear navigation and detailed service descriptions. Technically, the site uses modern web technologies including Google Tag Manager and service workers, ensuring good performance and user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though formal security policies and vulnerability disclosures are absent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Auto Vysočina is a well-established automotive dealership and service provider in the Czech Republic with over 25 years of market presence. The company specializes in sales and servicing of VW, Škoda, DWA, and KIA vehicles, operating multiple physical locations in Jihlava and Loket. The website serves as a brand and informational portal with links to vehicle offers, social media, and partner sites. Technically, the website is built with standard HTML, CSS, and JavaScript, featuring responsive design elements and embedded animations via iframes. However, it lacks modern security headers, privacy and cookie policies, and active analytics tracking, indicating room for improvement in digital maturity and compliance. Security posture is basic with no visible vulnerabilities but missing key security best practices such as HTTPS confirmation and security headers. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security measures to improve trust and regulatory adherence.

D

DIN Media GmbH

dinmedia.de

73

DIN Media GmbH is a well-established German company specializing in the provision of standards, norms, technical literature, seminars, and standards management solutions. With a history dating back to 1924, the company serves professionals and organizations requiring access to national, European, and international regulatory documents. Their business model includes e-commerce sales of documents, subscriptions, network licenses, and educational services. The website reflects a mature digital presence with multilingual support and a professional design. Technically, the website employs modern web technologies including JavaScript, CSS, and integrates third-party analytics and marketing tools such as Google Tag Manager, Bing Ads, Hotjar, and Freshdesk. The site is mobile-optimized and accessible, with a moderate performance profile. Security measures include HTTPS, CSRF tokens, and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly documented. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies and user consent mechanisms. The domain WHOIS data aligns with the business claims, showing consistent registration and no privacy protection, supporting legitimacy. Overall, DIN Media GmbH presents a trustworthy and professional online presence with room for improvement in explicit security policy publication and enhanced security headers. The risk profile is low, and the company appears to maintain good compliance and operational standards.

D

DJI

dji.com

74

DJI is a leading global technology company specializing in the design and manufacture of consumer and professional drones, camera stabilizers, and related products. The website showcases a comprehensive product portfolio including consumer drones like the Mavic series, handheld camera equipment, and enterprise solutions for agriculture and industrial applications. The company maintains a strong market position with a well-branded, professional online presence targeting both consumers and professional users worldwide. Technically, the website employs modern web technologies including React and jQuery, optimized for performance and mobile responsiveness. Security posture is solid with HTTPS enforced and privacy policies clearly presented, though some security headers and explicit incident response contacts could be improved. Overall, the site demonstrates a mature digital infrastructure with good SEO and accessibility practices.

C

CPI Jihlava Shopping a.s.

citypark.cz

54

Citypark Jihlava operates as a regional shopping center in the Czech Republic, offering a broad range of retail shops, dining options, entertainment including a cinema, and parking facilities. The website reflects a professional and user-friendly digital presence with clear navigation and relevant content targeting local shoppers and visitors. The business is part of the CPI group, a known operator of shopping centers in the region. Technically, the site employs modern web technologies, including JavaScript frameworks, cookie consent management, and analytics tools, ensuring a compliant and functional user experience. Security posture is solid with HTTPS and consent mechanisms, though there is room for improvement in publishing explicit security policies and headers. The absence of WHOIS data reduces domain registration transparency but does not detract from the apparent legitimacy of the business. Overall, the site is well-maintained, GDPR compliant, and suitable for general audiences.

R

Robinson Jihlava s.r.o.

robinsonjihlava.cz

50

Robinson Jihlava s.r.o. operates the largest family amusement park in the Vysočina region of the Czech Republic, offering a wide range of attractions, event hosting, and food services targeted primarily at families and local visitors. The website presents a professional and well-structured digital presence with clear navigation, social media integration, and contact information. Technically, the site uses modern web standards with responsive design and AJAX forms, although no specific CMS or hosting provider is identified. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and detailed privacy or security policies. The domain is long-established and consistent with the business claims, indicating legitimacy and trustworthiness.

K

Kernkraftwerk Gösgen-Däniken AG

kkg.ch

76

Kernkraftwerk Gösgen-Däniken AG operates a nuclear power plant in Switzerland, providing reliable and climate-friendly electricity. The company emphasizes technical expertise, environmental responsibility, and economic efficiency, serving a broad audience including professionals, schools, and job seekers. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site uses modern JavaScript libraries and frameworks, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be enhanced. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business entity.

I

Internetový prodej s.r.o., Shean s.r.o.

ahifi.hu

52

Ahifi.hu is a well-established Hungarian e-commerce retailer specializing in car audio equipment and automotive accessories. The website offers a broad range of products including car radios, speakers, amplifiers, subwoofers, and car care products. It targets car audio enthusiasts and vehicle owners primarily in Hungary, supported by sister sites in neighboring countries. The business has a history of approximately 20 years, indicating a mature market presence. Technically, the site uses modern web technologies such as Vue.js and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and product information. Security posture is solid with HTTPS and security headers implemented, though explicit privacy and security policies are missing. Cookie consent mechanisms are in place, supporting GDPR compliance to some extent. Overall, the site is professional and trustworthy but could improve transparency by publishing dedicated privacy and security policy documents.

The website ww38.radioexpres.sk currently serves as a parked domain with advertising content and no substantive business information or services presented. The site lacks any clear company identity, contact details, or descriptive content about its purpose or offerings. The presence of multiple third-party advertising and tracking scripts indicates a business model focused on monetizing domain traffic rather than providing direct services or content. Technically, the site uses standard HTML and JavaScript with content delivery via Amazon Cloudfront CDN, but lacks modern security practices such as HTTPS enforcement and security headers. Privacy compliance is minimal, with only a basic privacy policy linked via a JavaScript popup and no cookie consent mechanism. Overall, the site exhibits low digital maturity and poor user experience.

V

Volvo Trucks

volvotrucks.cz

70

Volvo Trucks Czech Republic operates as a regional market website for the global Volvo Trucks brand, providing comprehensive information about their range of commercial trucks, services, financing, and fleet management solutions. The website is well localized for the Czech market and targets transport companies, fleet managers, and truck buyers. The business model focuses on manufacturing, sales, after-sales services, and financing, positioning Volvo Trucks as a leading player in the transportation sector in the region. Technically, the site leverages Adobe Experience Manager CMS, Adobe analytics, and robust CDN services, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though some improvements in CSP and incident response transparency are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, though the absence of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security policies, publishing vulnerability disclosure information, and improving accessibility compliance.

VELUXshop.hr is the official Croatian e-commerce platform for VELUX branded roof window blinds and shading solutions. The website offers a comprehensive catalog of products including roller blinds, pleated blinds, insect nets, and external shading devices, targeting Croatian consumers seeking quality window accessories. The site is built on modern web technologies such as Nuxt.js and Vue.js, providing a responsive and user-friendly shopping experience. Security posture is strong with HTTPS enforced and standard security headers present, though explicit cookie consent and security policies could be improved. Overall, the site demonstrates a mature digital presence aligned with the VELUX brand, supporting a medium-sized retail operation with clear contact information and legal compliance.

S

Supplyframe

componentsearchengine.com

61

Component Search Engine, operated by Supplyframe, is a specialized online platform offering free access to electronic component schematic symbols, PCB footprints, and 3D models. It targets electronic engineers and PCB designers who use ECAD tools, providing seamless integration with a wide range of industry-standard software. The platform is well-established, with a domain age dating back to 2015, and maintains a consistent brand presence and professional content quality. The business model focuses on providing free technical content to support design engineers, enhancing their productivity and design accuracy. Technically, the website employs modern web technologies including JavaScript, Google Analytics, Google Tag Manager, and a consent management platform (Usercentrics) to ensure compliance with privacy regulations. The site is hosted under a reputable registrar and uses DNS Made Easy for DNS services, although DNSSEC is not enabled, representing a minor security gap. The website is moderately performant, mobile-optimized, and SEO-friendly, with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS and uses secure forms with CSRF tokens. However, it lacks advanced security headers and does not publish a dedicated security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong, with clear privacy and cookie policies and mechanisms for user consent. Business credibility is supported by clear company branding, professional content, and trust signals such as privacy policies and terms of service. Overall, the website presents a low-risk profile with a good security posture and strong compliance with privacy regulations. Strategic recommendations include enabling DNSSEC, adding security headers, and publishing a security policy to further enhance trust and security maturity.